Trojan.Starman.5215

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'58.##.208.29':139
'58.##.122.124':139
'58.##.63.251':139
'58.##.224.133':139
'58.#8.59.2':139
'58.##.181.190':139
'58.#8.23.2':139
'58.##.50.227':139
'58.##.60.191':139
'58.##.70.122':139
'58.##.85.163':139
'58.##.88.234':139
'58.##.172.172':139
'58.##.203.64':139
'58.##.81.225':139
'58.#8.44.50':139
'58.##.251.28':139
'58.##.61.251':139
'58.##.33.113':139
'58.#8.99.31':139
'58.#8.17.6':139
'58.##.162.222':139
'58.#8.99.31':445
'58.#8.17.6':445
'58.##.172.172':445
'58.##.203.64':445
'58.##.88.234':445
'58.##.85.163':445
'58.##.224.133':445
'58.##.61.251':445
'58.##.33.113':445
'58.##.251.28':445
'58.#8.44.50':445
'58.#8.9.112':139
'58.#8.7.247':139
'58.##.214.205':139
'58.##.49.225':139
'58.##.15.163':139
'58.##.225.84':445
'58.##.81.225':445
'58.#8.85.31':445
'58.##.26.123':139
'58.##.205.163':445
'58.##.195.111':139
'58.##.190.56':139
'58.##.112.111':139
'58.##.233.250':139
'58.#8.81.61':139
'58.##.100.211':139
'58.##.199.129':445
'58.##.220.37':139
'58.##.42.203':139
'58.#8.33.53':139
'58.##.129.101':139
'58.##.157.181':139
'58.#8.37.88':139
'58.##.78.127':139
'58.##.199.129':139
'58.##.126.199':139
'58.##.122.56':139
'58.##.174.109':139
'58.#8.68.24':139
'58.##.247.39':139
'58.##.192.246':139
'58.##.126.199':445
'58.##.42.203':445
'58.#8.33.53':445
'58.##.190.56':445
'58.##.112.111':445
'58.##.195.111':445
'58.#8.85.31':139
'58.##.225.84':139
'58.##.205.163':139
'58.##.220.37':445
'58.##.100.211':445
'58.#8.81.61':445
'58.##.247.39':445
'58.##.192.246':445
'58.#8.37.88':445
'58.##.78.127':445
'58.##.157.181':445
'58.##.129.101':445
'58.##.233.250':445
'58.##.174.109':445
'58.#8.68.24':445
'58.##.122.56':445
'58.#8.59.2':445
'58.##.91.139':139
'58.##.30.214':139
'58.##.202.88':139
'58.##.247.175':445
'58.##.30.253':139
'58.##.146.91':139
'58.##.81.108':139
'58.##.48.143':139
'58.#8.5.147':139
'58.##.115.42':139
'58.##.175.79':445
'58.##.80.237':445
'58.##.203.77':445
'58.##.173.204':445
'58.##.118.49':445
'58.#8.185.0':445
'58.##.164.55':445
'58.##.79.164':445
'58.##.55.153':445
'58.##.236.202':445
'58.##.153.237':445
'58.##.254.220':139
'58.##.199.211':139
'58.##.106.166':139
'58.#8.35.38':139
'58.##.173.67':139
'58.##.197.226':139
'58.##.79.148':139
'58.##.255.26':139
'58.##.105.199':139
'58.##.17.172':139
'58.##.198.188':139
'58.##.91.137':139
'58.#8.62.44':139
'58.#8.9.239':139
'58.##.95.117':139
'58.##.228.254':139
'58.##.254.91':139
'58.##.120.44':139
'58.#8.23.22':139
'58.##.224.216':139
'58.#8.25.6':139
'58.##.116.120':139
'58.##.26.123':445
'58.#8.14.88':139
'58.#8.7.247':445
'58.##.214.205':445
'58.#8.9.112':445
'58.##.13.149':139
'58.##.28.189':139
'58.#8.67.83':139
'58.##.165.140':139
'58.##.82.165':139
'58.##.15.163':445
'58.##.60.191':445
'58.##.70.122':445
'58.##.122.124':445
'58.##.63.251':445
'58.##.208.29':445
'58.##.162.222':445
'58.##.49.225':445
'58.#8.23.2':445
'58.##.50.227':445
'58.##.181.190':445
'58.##.149.239':139
'58.##.165.140':445
'58.##.82.165':445
'58.#8.14.88':445
'58.##.175.79':139
'58.##.247.175':139
'58.##.149.239':445
'58.##.61.149':445
'58.##.28.189':445
'58.#8.67.83':445
'58.##.13.149':445
'58.##.79.164':139
'58.##.173.204':139
'58.##.80.237':139
'58.#8.185.0':139
'58.##.61.149':139
'58.##.118.49':139
'58.##.55.153':139
'58.##.164.55':139
'58.##.153.237':139
'58.##.203.77':139
'58.##.236.202':139
'58.##.130.75':445
'58.##.170.132':445
'58.#8.162.2':445
'58.#8.25.78':445
'58.##.211.119':445
'58.#8.78.41':445
'58.##.174.194':445
'58.##.162.114':445
'58.##.165.87':445
'58.#8.63.26':445
'58.##.51.127':445
'58.##.190.113':445
'58.##.96.194':139
'58.##.110.96':139
'58.##.194.197':139
'58.##.253.201':139
'58.#8.198.6':139
'58.#8.20.53':445
'58.##.100.155':445
'58.#8.31.33':139
'58.##.136.202':139
'58.##.65.252':139
'58.##.42.223':445
'58.#8.17.66':445
'58.##.123.14':445
'58.#8.92.22':445
'58.##.212.182':445
'58.##.122.212':445
'58.##.43.240':445
'58.##.184.43':445
'58.##.107.108':445
'58.##.23.179':445
'58.##.121.32':445
'58.##.183.70':445
'58.##.86.146':445
'58.##.182.201':445
'58.##.24.220':445
'58.#8.4.220':445
'58.##.130.105':445
'58.##.217.28':445
'58.#8.71.97':445
'58.#8.49.47':445
'58.##.131.44':445
'58.##.70.184':445
'58.#8.4.220':139
'58.##.130.105':139
'58.##.42.223':139
'58.##.174.194':139
'58.##.162.114':139
'58.##.131.44':139
'58.##.70.184':139
'58.##.182.201':139
'58.##.24.220':139
'58.##.86.146':139
'58.##.165.87':139
'58.##.211.119':139
'58.#8.78.41':139
'58.#8.20.53':139
'58.##.190.113':139
'58.##.100.155':139
'58.#8.63.26':139
'58.##.51.127':139
'58.#8.162.2':139
'58.#8.25.78':139
'58.##.170.132':139
'58.#8.49.47':139
'58.##.122.193':139
'58.##.145.55':139
'58.##.97.184':139
'58.##.43.240':139
'58.##.184.43':139
'58.##.109.224':139
'58.#8.69.80':139
'58.##.149.12':139
'58.##.222.20':139
'58.#8.19.7':139
'58.##.107.108':139
'58.##.212.182':139
'58.##.122.212':139
'58.##.183.70':139
'58.##.217.28':139
'58.#8.71.97':139
'58.##.23.179':139
'58.##.121.32':139
'58.##.123.14':139
'58.#8.92.22':139
'58.#8.17.66':139
'58.##.97.184':445
'58.##.253.219':445
'58.#8.93.2':445
'58.##.133.103':445
'58.#8.75.66':139
'58.##.130.75':139
'58.##.33.122':445
'58.##.42.120':445
'58.##.77.250':445
'58.#8.79.96':445
'58.#8.97.11':445
'58.##.49.143':139
'58.##.71.213':139
'58.##.35.214':139
'58.#8.1.38':139
'58.##.80.153':139
'58.#8.29.81':139
'58.#8.78.69':139
'58.#8.4.173':139
'58.##.77.178':139
'58.##.198.56':139
'58.##.153.37':139
'58.#8.1.180':445
'58.##.198.56':445
'58.##.153.37':445
'58.##.35.214':445
'58.#8.1.38':445
'58.##.71.213':445
'58.##.49.143':445
'58.#8.75.66':445
'58.#8.4.173':445
'58.##.77.178':445
'58.#8.78.69':445
'58.#8.29.81':445
'58.##.76.149':445
'58.##.61.191':445
'58.#8.35.57':445
'58.##.107.122':445
'58.##.93.112':445
'58.##.141.112':445
'58.##.80.153':445
'58.##.162.145':445
'58.##.159.188':445
'58.##.32.130':445
'58.#8.31.33':445
'58.##.211.119':9988
'58.##.65.252':445
'58.##.110.96':445
'58.##.136.202':445
'58.#8.4.220':9988
'58.##.24.220':9988
'58.##.162.114':9988
'58.#8.20.53':9988
'58.#8.63.26':9988
'58.##.96.194':445
'58.#8.19.7':445
'58.##.149.12':445
'58.##.222.20':445
'58.##.122.193':445
'58.##.145.55':445
'58.#8.198.6':445
'58.##.194.197':445
'58.##.253.201':445
'58.##.109.224':445
'58.#8.69.80':445
'58.##.70.184':9988
'58.#8.35.57':139
'58.##.76.149':139
'58.##.93.112':139
'58.#8.1.180':139
'58.##.107.122':139
'58.##.162.145':139
'58.##.141.112':139
'58.##.32.130':139
'58.##.61.191':139
'58.##.159.188':139
'58.##.42.120':139
'58.##.133.103':139
'58.##.253.219':139
'58.##.122.212':9988
'58.#8.49.47':9988
'58.##.217.28':9988
'58.##.77.250':139
'58.##.33.122':139
'58.#8.97.11':139
'58.#8.93.2':139
'58.#8.79.96':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней