Trojan.Starman.5222

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'60.#6.92.86':445
'60.##.226.204':139
'60.##.141.145':445
'60.##.14.113':445
'60.#6.34.31':445
'60.#6.58.61':139
'60.##.134.58':139
'60.##.60.205':139
'60.##.32.226':139
'60.##.231.111':139
'60.#6.91.67':445
'60.#6.33.8':445
'60.##.52.163':445
'60.#6.197.5':445
'60.#6.71.61':445
'60.#6.5.71':445
'60.##.11.120':445
'60.#6.59.66':445
'60.#6.95.44':445
'60.#6.37.53':445
'60.#6.44.37':445
'60.##.10.193':139
'60.#6.17.97':139
'60.##.40.186':139
'60.##.203.65':445
'60.##.165.203':139
'60.##.239.79':139
'60.##.193.98':139
'60.##.136.33':139
'60.#6.38.77':139
'60.##.89.149':139
'60.##.11.197':445
'60.##.226.204':445
'60.##.32.226':445
'60.##.203.65':139
'60.#6.2.149':139
'60.##.11.197':139
'60.##.134.58':445
'60.#6.2.149':445
'60.#6.58.61':445
'60.##.231.111':445
'60.##.60.205':445
'60.#6.92.86':139
'60.##.64.132':445
'60.##.141.145':139
'60.##.14.113':139
'60.#6.34.31':139
'60.##.212.86':445
'60.#6.62.88':445
'60.##.30.132':445
'60.#6.45.15':445
'60.##.19.110':445
'60.#6.91.67':139
'60.#6.33.8':139
'60.##.52.163':139
'60.#6.197.5':139
'60.#6.71.61':139
'60.#6.5.71':139
'60.##.11.120':139
'60.#6.59.66':139
'60.#6.95.44':139
'60.#6.37.53':139
'60.#6.44.37':139
'60.#6.234.1':445
'60.##.50.142':445
'60.#6.65.60':445
'60.##.97.122':445
'60.##.38.126':445
'60.##.85.114':445
'60.##.38.170':445
'60.##.124.18':445
'60.##.227.249':445
'60.##.15.229':445
'60.##.144.95':445
'60.#6.27.26':445
'60.##.39.243':445
'60.##.170.74':445
'60.##.139.168':445
'60.##.80.185':445
'60.##.53.111':445
'60.##.52.106':445
'60.##.111.52':445
'60.#6.52.47':445
'60.##.34.190':445
'60.##.193.198':445
'60.##.102.45':445
'60.##.219.241':445
'60.##.228.101':445
'60.##.210.228':445
'60.##.111.102':445
'60.##.49.189':445
'60.##.136.139':445
'60.##.167.17':445
'60.##.20.231':445
'60.##.81.216':445
'60.##.183.184':445
'60.##.191.192':445
'60.##.166.133':445
'60.##.213.211':445
'60.##.193.24':445
'60.##.144.97':445
'60.##.23.208':445
'60.##.105.142':445
'60.##.154.207':445
'60.##.153.222':445
'60.##.198.113':139
'60.#6.53.17':139
'60.#6.8.19':139
'60.##.149.198':445
'60.##.29.195':139
'60.##.95.161':139
'60.##.203.230':139
'60.##.246.237':139
'60.##.216.215':139
'60.##.238.128':139
'60.##.119.213':445
'60.#6.99.15':445
'60.#6.50.99':445
'60.#6.165.1':445
'60.#6.9.203':445
'60.##.25.254':445
'60.##.32.175':445
'60.#6.20.59':445
'60.##.31.187':445
'60.##.195.50':445
'60.#6.93.97':445
'60.##.193.198':139
'60.##.102.45':139
'60.##.219.241':139
'60.##.228.101':139
'60.##.210.228':139
'60.##.111.102':139
'60.##.49.189':139
'60.##.136.139':139
'60.##.167.17':139
'60.##.20.231':139
'60.##.81.216':139
'60.##.183.184':139
'60.##.191.192':139
'60.##.166.133':139
'60.##.213.211':139
'60.##.193.24':139
'60.##.144.97':139
'60.##.23.208':139
'60.##.105.142':139
'60.##.154.207':139
'60.##.153.222':139
'60.##.10.193':445
'60.#6.17.97':445
'60.##.40.186':445
'60.##.149.198':139
'60.##.165.203':445
'60.##.239.79':445
'60.##.193.98':445
'60.##.136.33':445
'60.#6.38.77':445
'60.##.89.149':445
'60.##.119.213':139
'60.#6.99.15':139
'60.#6.50.99':139
'60.#6.165.1':139
'60.#6.9.203':139
'60.##.25.254':139
'60.##.32.175':139
'60.#6.20.59':139
'60.##.31.187':139
'60.##.195.50':139
'60.#6.93.97':139
'60.##.41.248':445
'60.##.247.97':445
'60.#6.92.37':445
'60.#6.11.64':445
'60.##.246.49':445
'60.##.10.218':445
'60.##.36.133':445
'60.##.222.43':445
'60.##.38.247':445
'60.##.120.206':445
'60.##.67.106':445
'60.#6.83.75':139
'60.##.162.168':139
'60.##.181.238':139
'60.##.206.39':139
'60.##.83.121':139
'60.##.63.175':139
'60.##.17.101':445
'60.##.41.140':139
'60.##.254.60':139
'60.##.39.128':139
'60.#6.138.3':445
'60.##.27.176':445
'60.##.254.214':445
'60.##.86.152':445
'60.##.236.100':445
'60.#6.68.45':445
'60.##.73.110':445
'60.##.71.166':445
'60.##.188.196':445
'60.##.165.229':445
'60.##.231.235':445
'60.##.65.147':445
'60.##.11.209':445
'60.##.212.150':445
'60.##.125.236':445
'60.##.150.204':445
'60.##.245.66':445
'60.##.78.171':445
'60.##.119.53':445
'60.##.64.241':445
'60.##.116.29':445
'60.##.212.150':139
'60.##.65.147':139
'60.##.150.204':139
'60.##.36.133':139
'60.##.125.236':139
'60.##.119.53':139
'60.##.245.66':139
'60.##.116.29':139
'60.##.11.209':139
'60.##.64.241':139
'60.##.10.218':139
'60.##.17.101':139
'60.##.246.49':139
'60.##.67.106':139
'60.#6.92.37':139
'60.#6.11.64':139
'60.##.120.206':139
'60.##.222.43':139
'60.##.38.247':139
'60.##.41.248':139
'60.##.247.97':139
'60.##.152.12':139
'60.#6.162.7':139
'60.##.199.26':139
'60.##.73.110':139
'60.##.42.156':139
'60.#6.74.95':139
'60.##.188.72':139
'60.#6.95.69':139
'60.##.26.231':139
'60.#6.81.46':139
'60.#6.68.45':139
'60.##.236.100':139
'60.##.254.214':139
'60.##.86.152':139
'60.##.78.171':139
'60.##.231.235':139
'60.##.165.229':139
'60.##.71.166':139
'60.##.188.196':139
'60.#6.138.3':139
'60.##.27.176':139
'60.##.178.108':445
'60.##.64.132':139
'60.##.108.193':445
'60.##.17.104':445
'60.##.159.110':445
'60.##.212.86':139
'60.#6.62.88':139
'60.##.30.132':139
'60.#6.45.15':139
'60.##.19.110':139
'60.##.32.180':445
'60.##.159.110':139
'60.##.108.193':139
'60.##.17.104':139
'60.##.200.217':139
'60.##.32.180':139
'60.##.169.27':445
'60.##.200.217':445
'60.##.27.119':445
'60.##.178.108':139
'60.##.31.220':445
'60.#6.234.1':139
'60.##.50.142':139
'60.#6.65.60':139
'60.##.97.122':139
'60.##.38.126':139
'60.##.85.114':139
'60.##.38.170':139
'60.##.124.18':139
'60.##.227.249':139
'60.##.15.229':139
'60.##.144.95':139
'60.#6.27.26':139
'60.##.39.243':139
'60.##.170.74':139
'60.##.139.168':139
'60.##.80.185':139
'60.##.53.111':139
'60.##.52.106':139
'60.##.111.52':139
'60.#6.52.47':139
'60.##.34.190':139
'60.##.254.60':445
'60.##.39.128':445
'60.##.162.168':445
'60.##.181.238':445
'60.#6.83.75':445
'60.##.254.214':9988
'60.##.222.43':9988
'60.##.11.209':9988
'60.##.41.140':445
'60.##.63.175':445
'60.##.83.121':445
'60.#6.162.7':445
'60.##.26.231':445
'60.##.152.12':445
'60.##.42.156':445
'60.##.199.26':445
'60.##.188.72':445
'60.##.206.39':445
'60.#6.74.95':445
'60.#6.81.46':445
'60.#6.95.69':445
'60.##.119.53':9988
'60.##.125.236':9988
'60.##.165.229':9988
'60.##.36.133':9988
'60.##.65.147':9988
'60.##.27.119':139
'60.##.169.27':139
'60.##.31.220':139
'60.##.120.206':9988
'60.##.10.218':9988
'60.##.188.196':9988
'60.##.78.171':9988
'60.##.212.150':9988
'60.##.86.152':9988
'60.#6.11.64':9988
'60.##.116.29':9988
'60.##.236.100':9988
'60.##.67.106':9988
'60.##.245.66':9988
'60.##.38.247':9988
'60.#6.68.45':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней