Trojan.Starman.5487

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'24.##.193.146':139
'24.##.254.185':139
'24.##.146.130':139
'24.#1.85.49':139
'24.##.201.18':139
'24.#1.13.26':139
'24.##.116.118':139
'24.##.220.80':139
'24.##.18.164':139
'24.##.243.192':139
'24.#1.52.90':139
'24.##.25.120':445
'24.##.84.126':445
'24.##.173.108':445
'24.##.161.190':445
'24.#1.7.77':445
'24.#1.71.98':445
'24.#1.45.45':445
'24.##.57.217':445
'24.##.203.52':445
'24.##.12.147':445
'24.##.116.118':445
'24.##.159.31':445
'24.#1.13.26':445
'24.##.243.192':445
'24.##.220.80':445
'24.##.73.126':139
'24.##.116.190':139
'24.##.230.171':445
'24.#1.40.60':445
'24.##.122.246':445
'24.##.18.164':445
'24.##.230.171':139
'24.#1.52.90':445
'24.##.122.246':139
'24.##.159.31':139
'24.#1.40.60':139
'24.##.193.146':445
'24.##.254.185':445
'24.##.146.130':445
'24.#1.85.49':445
'24.##.201.18':445
'24.#1.71.98':139
'24.#1.45.45':139
'24.##.57.217':139
'24.##.203.52':139
'24.##.12.147':139
'24.##.35.133':445
'24.##.117.103':445
'24.##.111.128':445
'24.##.189.84':445
'24.##.174.229':445
'24.##.84.126':139
'24.#1.29.45':139
'24.#1.88.73':139
'24.#1.32.4':139
'24.#1.120.2':139
'24.##.75.105':139
'24.##.173.108':139
'24.##.25.120':139
'24.#1.7.77':139
'24.##.216.23':139
'24.##.161.190':139
'24.##.105.20':445
'24.#1.120.2':445
'24.##.116.182':445
'24.##.51.172':445
'24.##.137.212':445
'24.#1.88.73':445
'24.##.216.23':445
'24.#1.29.45':445
'24.##.75.105':445
'24.#1.32.4':445
'24.#1.49.34':445
'24.##.112.242':445
'24.#1.21.15':445
'24.##.105.210':445
'24.#1.87.95':445
'24.#1.19.47':445
'24.##.178.221':445
'24.#1.32.20':445
'24.##.221.186':445
'24.#1.66.90':445
'24.##.187.79':445
'24.##.163.117':139
'24.##.251.129':445
'24.##.151.125':445
'24.##.130.109':445
'24.##.130.199':445
'24.##.109.130':445
'24.##.158.252':445
'24.##.153.224':445
'24.##.252.107':445
'24.##.117.51':445
'24.##.89.212':445
'24.#1.4.95':445
'24.##.35.192':445
'24.##.91.131':445
'24.##.148.114':445
'24.##.170.192':445
'24.##.32.210':445
'24.##.104.129':445
'24.##.18.153':445
'24.##.145.253':445
'24.##.62.128':445
'24.##.172.123':445
'24.#1.56.44':139
'24.##.158.56':139
'24.##.43.213':139
'24.#1.15.99':139
'24.##.166.235':139
'24.##.69.218':139
'24.##.219.249':139
'24.##.179.97':139
'24.##.179.157':139
'24.##.169.179':139
'24.##.72.230':139
'24.#1.66.33':445
'24.#1.13.67':445
'24.##.107.249':445
'24.##.44.185':445
'24.##.184.168':445
'24.##.132.144':139
'24.#1.31.4':139
'24.##.25.111':139
'24.##.122.102':445
'24.##.141.211':139
'24.##.104.129':139
'24.##.18.153':139
'24.##.145.253':139
'24.##.62.128':139
'24.##.172.123':139
'24.##.130.109':139
'24.##.251.129':139
'24.##.109.130':139
'24.#1.4.95':139
'24.##.130.199':139
'24.##.91.131':139
'24.##.151.195':139
'24.##.211.80':139
'24.#1.6.16':139
'24.##.31.164':139
'24.##.20.233':139
'24.##.148.114':139
'24.##.35.192':139
'24.##.32.210':139
'24.##.156.134':139
'24.##.170.192':139
'24.##.163.117':445
'24.##.31.164':445
'24.##.116.190':445
'24.##.122.102':139
'24.##.73.126':445
'24.##.211.80':445
'24.##.156.134':445
'24.##.151.195':445
'24.##.20.233':445
'24.#1.6.16':445
'24.#1.13.67':139
'24.##.252.107':139
'24.##.158.252':139
'24.##.89.212':139
'24.##.151.125':139
'24.##.117.51':139
'24.#1.66.33':139
'24.##.107.249':139
'24.##.184.168':139
'24.##.153.224':139
'24.##.44.185':139
'24.##.105.20':139
'24.##.17.163':445
'24.#1.90.96':445
'24.##.75.147':445
'24.##.77.136':445
'24.##.40.207':445
'24.##.234.237':445
'24.##.254.152':445
'24.#1.59.42':445
'24.##.253.125':445
'24.##.193.82':445
'24.##.91.155':445
'24.#1.4.182':139
'24.##.32.216':139
'24.##.48.196':139
'24.##.191.233':139
'24.##.67.221':139
'24.##.68.120':139
'24.#1.70.71':445
'24.##.120.164':139
'24.##.33.166':139
'24.##.164.45':139
'24.##.71.122':445
'24.##.71.126':445
'24.##.122.17':445
'24.##.155.132':445
'24.##.17.129':445
'24.##.182.179':445
'24.##.98.148':445
'24.##.122.185':445
'24.##.241.51':445
'24.##.156.60':445
'24.#1.72.14':445
'24.##.249.12':445
'24.##.147.247':445
'24.##.112.189':445
'24.##.63.109':445
'24.##.84.181':445
'24.##.103.78':445
'24.##.43.141':445
'24.##.191.210':445
'24.##.78.249':445
'24.#1.47.7':445
'24.##.112.189':139
'24.##.249.12':139
'24.##.84.181':139
'24.##.254.152':139
'24.##.63.109':139
'24.##.191.210':139
'24.##.103.78':139
'24.#1.47.7':139
'24.##.147.247':139
'24.##.78.249':139
'24.##.234.237':139
'24.##.40.207':139
'24.##.75.147':139
'24.##.77.136':139
'24.#1.70.71':139
'24.##.91.155':139
'24.##.193.82':139
'24.#1.59.42':139
'24.##.253.125':139
'24.##.17.163':139
'24.#1.90.96':139
'24.##.240.86':139
'24.#1.40.91':139
'24.##.217.31':139
'24.##.98.148':139
'24.##.216.98':139
'24.##.13.185':139
'24.##.41.151':139
'24.##.146.34':139
'24.##.157.166':139
'24.##.211.197':139
'24.##.182.179':139
'24.##.17.129':139
'24.##.122.17':139
'24.##.155.132':139
'24.##.43.141':139
'24.#1.72.14':139
'24.##.156.60':139
'24.##.122.185':139
'24.##.241.51':139
'24.##.71.122':139
'24.##.71.126':139
'24.##.216.98':445
'24.##.237.114':445
'24.##.101.37':445
'24.##.115.117':445
'24.##.169.22':445
'24.##.193.18':445
'24.##.29.147':445
'24.##.124.210':445
'24.##.43.135':445
'24.##.114.29':445
'24.##.187.47':445
'24.##.191.136':445
'24.##.43.135':139
'24.##.29.147':139
'24.##.187.47':139
'24.##.101.37':139
'24.##.114.29':139
'24.##.192.68':445
'24.##.234.112':445
'24.##.51.238':139
'24.##.124.210':139
'24.##.183.176':139
'24.##.221.186':139
'24.##.178.221':139
'24.##.187.79':139
'24.#1.21.15':139
'24.#1.66.90':139
'24.##.137.212':139
'24.##.116.182':139
'24.##.51.172':139
'24.#1.32.20':139
'24.#1.49.34':139
'24.##.112.242':139
'24.##.174.229':139
'24.##.111.128':139
'24.##.189.84':139
'24.##.183.176':445
'24.##.51.238':445
'24.#1.19.47':139
'24.##.105.210':139
'24.#1.87.95':139
'24.##.35.133':139
'24.##.117.103':139
'24.##.164.45':445
'24.##.120.164':445
'24.##.33.166':445
'24.#1.4.182':445
'24.##.32.216':445
'24.#1.70.71':9988
'24.##.77.136':9988
'24.##.91.155':9988
'24.##.68.120':445
'24.##.40.207':9988
'24.##.48.196':445
'24.##.157.166':445
'24.##.211.197':445
'24.#1.40.91':445
'24.##.217.31':445
'24.##.240.86':445
'24.##.191.233':445
'24.##.67.221':445
'24.##.41.151':445
'24.##.146.34':445
'24.##.13.185':445
'24.##.192.68':139
'24.##.234.112':139
'24.##.241.51':9988
'24.##.155.132':9988
'24.##.71.126':9988
'24.##.115.117':139
'24.##.237.114':139
'24.##.193.18':139
'24.##.191.136':139
'24.##.169.22':139
'24.#1.72.14':9988
'24.##.254.152':9988
'24.##.234.237':9988
'24.#1.59.42':9988
'24.##.75.147':9988
'24.##.253.125':9988
'24.##.191.210':9988
'24.##.103.78':9988
'24.##.112.189':9988
'24.##.63.109':9988
'24.##.84.181':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней