Trojan.Starman.5576

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'61.##8.197.110':139
'61.##8.25.117':139
'61.##8.30.33':139
'61.#58.1.18':139
'61.##8.59.97':139
'61.##8.249.109':139
'61.##8.204.248':139
'61.##8.14.100':139
'61.##8.233.25':139
'61.##8.70.247':139
'61.##8.165.203':139
'61.##8.208.124':139
'61.##8.52.208':139
'61.##8.124.152':139
'61.##8.148.179':139
'61.##8.159.145':139
'61.##8.192.249':139
'61.##8.3.122':139
'61.##8.163.137':139
'61.##8.98.170':139
'61.##8.62.84':139
'61.##8.155.235':139
'61.##8.208.124':445
'61.##8.52.208':445
'61.##8.124.152':445
'61.##8.148.179':445
'61.##8.159.145':445
'61.##8.192.249':445
'61.##8.3.122':445
'61.##8.163.137':445
'61.##8.98.170':445
'61.##8.62.84':445
'61.##8.9.191':445
'61.##8.161.189':139
'61.##8.120.41':139
'61.##8.188.250':139
'61.##8.175.134':139
'61.##8.96.184':139
'61.##8.235.193':445
'61.##8.18.119':445
'61.##8.91.38':445
'61.#58.5.37':139
'61.##8.171.207':445
'61.##8.9.191':139
'61.##8.54.124':139
'61.##8.66.52':139
'61.##8.0.182':139
'61.##8.212.244':139
'61.##8.31.38':139
'61.##8.116.90':139
'61.#58.8.79':139
'61.##8.10.123':139
'61.##8.25.107':139
'61.##8.210.22':139
'61.##8.56.225':139
'61.##8.76.99':139
'61.##8.25.126':139
'61.##8.25.224':445
'61.##8.91.206':445
'61.##8.138.175':445
'61.#58.88.3':139
'61.##8.253.119':139
'61.##8.98.157':139
'61.##8.75.25':139
'61.##8.78.88':139
'61.##8.76.99':445
'61.##8.10.123':445
'61.##8.116.90':445
'61.##8.210.22':445
'61.##8.66.52':445
'61.##8.25.107':445
'61.##8.235.193':139
'61.##8.18.119':139
'61.##8.91.38':139
'61.#58.8.79':445
'61.##8.171.207':139
'61.##8.54.124':445
'61.##8.98.157':445
'61.#58.88.3':445
'61.##8.78.88':445
'61.##8.25.126':445
'61.##8.75.25':445
'61.##8.31.38':445
'61.##8.0.182':445
'61.##8.212.244':445
'61.##8.253.119':445
'61.##8.56.225':445
'61.##8.112.105':139
'61.##8.55.112':139
'61.##8.105.233':139
'61.##8.158.174':139
'61.##8.232.192':139
'61.##8.94.57':139
'61.##8.230.19':139
'61.##8.116.118':139
'61.##8.191.160':139
'61.##8.238.17':139
'61.#58.7.77':139
'61.##8.80.23':445
'61.##8.83.34':445
'61.##8.208.225':445
'61.##8.170.60':445
'61.##8.193.61':445
'61.#58.93.8':445
'61.##8.119.116':445
'61.##8.149.11':445
'61.##8.82.167':445
'61.##8.217.147':445
'61.##8.220.229':139
'61.##8.147.25':139
'61.#58.11.2':139
'61.##8.52.152':139
'61.##8.253.166':139
'61.##8.85.253':139
'61.##8.17.115':139
'61.##8.93.200':139
'61.##8.70.235':139
'61.##8.122.89':139
'61.##8.36.252':139
'61.##8.218.145':139
'61.##8.150.20':139
'61.##8.223.71':139
'61.##8.46.183':139
'61.##8.222.220':139
'61.##8.72.242':139
'61.##8.148.252':139
'61.##8.205.195':139
'61.##8.240.219':139
'61.##8.61.234':139
'61.##8.219.133':139
'61.##8.25.46':445
'61.##8.188.250':445
'61.##8.161.189':445
'61.##8.96.184':445
'61.##8.155.235':445
'61.##8.175.134':445
'61.##8.1.195':139
'61.##8.19.241':139
'61.##8.201.4':139
'61.##8.120.41':445
'61.#58.5.37':445
'61.##8.204.248':445
'61.##8.30.33':445
'61.##8.197.110':445
'61.##8.59.97':445
'61.##8.165.203':445
'61.#58.1.18':445
'61.##8.14.100':445
'61.##8.249.109':445
'61.##8.70.247':445
'61.##8.25.117':445
'61.##8.233.25':445
'61.##8.16.113':139
'61.##8.201.4':445
'61.##8.1.195':445
'61.##8.119.116':139
'61.##8.149.11':139
'61.#58.93.8':139
'61.##8.150.195':445
'61.##8.71.29':445
'61.##8.138.148':445
'61.##8.19.241':445
'61.##8.16.113':445
'61.##8.217.147':139
'61.##8.25.46':139
'61.##8.170.60':139
'61.##8.71.29':139
'61.##8.138.148':139
'61.##8.150.195':139
'61.##8.83.34':139
'61.##8.82.167':139
'61.##8.80.23':139
'61.##8.193.61':139
'61.##8.208.225':139
'61.##8.248.45':445
'61.##8.71.169':445
'61.##8.153.225':445
'61.##8.98.67':445
'61.##8.119.174':445
'61.##8.133.42':445
'61.##8.130.175':445
'61.##8.21.140':445
'61.##8.199.13':445
'61.##8.232.207':445
'61.##8.57.191':445
'61.##8.187.240':139
'61.##8.99.27':139
'61.##8.6.146':139
'61.##8.149.202':139
'61.##8.151.150':139
'61.##8.228.152':445
'61.##8.20.127':445
'61.##8.84.185':445
'61.#58.66.4':139
'61.##8.123.161':139
'61.##8.51.27':445
'61.##8.134.223':445
'61.##8.143.146':445
'61.##8.223.14':445
'61.##8.193.57':445
'61.##8.61.72':445
'61.##8.212.147':445
'61.##8.238.212':445
'61.##8.82.137':445
'61.##8.238.151':445
'61.##8.216.72':445
'61.##8.46.88':445
'61.##8.108.227':445
'61.##8.155.178':445
'61.##8.91.242':445
'61.##8.194.15':445
'61.##8.5.113':445
'61.##8.217.28':445
'61.##8.9.156':445
'61.##8.80.21':445
'61.##8.187.93':445
'61.##8.151.145':445
'61.##8.41.130':139
'61.##8.51.27':139
'61.##8.194.15':139
'61.##8.130.175':139
'61.##8.21.140':139
'61.##8.133.42':139
'61.##8.155.178':139
'61.##8.187.93':139
'61.##8.108.227':139
'61.##8.5.113':139
'61.##8.91.242':139
'61.##8.232.207':139
'61.##8.57.191':139
'61.##8.98.67':139
'61.##8.20.127':139
'61.##8.84.185':139
'61.##8.228.152':139
'61.##8.71.169':139
'61.##8.199.13':139
'61.##8.248.45':139
'61.##8.119.174':139
'61.##8.153.225':139
'61.##8.151.145':139
'61.##8.72.177':139
'61.##8.154.131':139
'61.##8.238.212':139
'61.##8.82.137':139
'61.##8.212.147':139
'61.##8.247.164':139
'61.##8.204.59':139
'61.##8.186.3':139
'61.##8.35.90':139
'61.##8.110.121':139
'61.##8.216.72':139
'61.##8.46.88':139
'61.##8.193.57':139
'61.##8.9.156':139
'61.##8.80.21':139
'61.##8.217.28':139
'61.##8.143.146':139
'61.##8.238.151':139
'61.##8.134.223':139
'61.##8.61.72':139
'61.##8.223.14':139
'61.#58.6.6':445
'61.##8.18.188':445
'61.##8.242.160':445
'61.##8.138.175':139
'61.##8.25.224':139
'61.##8.70.135':445
'61.##8.150.68':445
'61.##8.255.200':445
'61.#58.4.86':445
'61.##8.193.189':445
'61.##8.91.206':139
'61.##8.215.157':139
'61.##8.112.216':139
'61.##8.47.237':139
'61.##8.181.18':139
'61.##8.241.38':139
'61.##8.79.18':139
'61.##8.158.115':139
'61.##8.56.67':139
'61.##8.104.156':139
'61.##8.234.35':139
'61.##8.154.95':445
'61.##8.215.157':445
'61.##8.112.216':445
'61.##8.47.237':445
'61.##8.181.18':445
'61.##8.241.38':445
'61.##8.79.18':445
'61.##8.158.115':445
'61.##8.56.67':445
'61.##8.104.156':445
'61.##8.234.35':445
'61.##8.18.253':445
'61.##8.222.131':445
'61.##8.94.67':445
'61.##8.238.63':445
'61.##8.179.6':445
'61.##8.197.221':445
'61.##8.68.68':445
'61.##8.18.152':445
'61.##8.118.77':445
'61.##8.88.201':445
'61.##8.244.76':445
'61.##8.18.253':139
'61.##8.123.161':445
'61.##8.98.67':9988
'61.#58.66.4':445
'61.##8.187.240':445
'61.##8.99.27':445
'61.##8.51.27':9988
'61.##8.194.15':9988
'61.##8.199.13':9988
'61.##8.228.152':9988
'61.##8.119.174':9988
'61.##8.6.146':445
'61.##8.110.121':445
'61.##8.186.3':445
'61.##8.35.90':445
'61.##8.72.177':445
'61.##8.154.131':445
'61.##8.149.202':445
'61.##8.151.150':445
'61.##8.41.130':445
'61.##8.247.164':445
'61.##8.204.59':445
'61.##8.5.113':9988
'61.##8.222.131':139
'61.##8.94.67':139
'61.##8.238.63':139
'61.##8.179.6':139
'61.##8.197.221':139
'61.##8.68.68':139
'61.##8.18.152':139
'61.##8.118.77':139
'61.##8.88.201':139
'61.##8.244.76':139
'61.##8.154.95':139
'61.#58.6.6':139
'61.##8.18.188':139
'61.##8.242.160':139
'61.##8.46.88':9988
'61.##8.143.146':9988
'61.##8.70.135':139
'61.##8.150.68':139
'61.##8.255.200':139
'61.#58.4.86':139
'61.##8.193.189':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней