Trojan.Starman.5443

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'58.##5.252.63':445
'58.#85.4.81':445
'58.##5.87.230':445
'58.##5.149.89':445
'58.##5.111.233':445
'58.##5.141.3':445
'58.##5.15.135':445
'58.##5.84.178':445
'58.##5.39.134':445
'58.##5.229.205':445
'58.##5.104.239':445
'58.##5.251.52':445
'58.##5.85.146':445
'58.##5.10.33':445
'58.##5.15.68':445
'58.##5.80.98':445
'58.##5.48.212':445
'58.##5.51.14':445
'58.##5.15.63':445
'58.##5.14.64':445
'58.##5.37.76':445
'58.##5.73.26':445
'58.##5.124.215':445
'58.##5.15.152':139
'58.##5.82.156':445
'58.##5.33.207':445
'58.##5.151.48':445
'58.#85.0.87':139
'58.##5.241.252':139
'58.##5.84.60':139
'58.##5.252.215':139
'58.##5.62.203':139
'58.##5.91.179':139
'58.##5.80.23':139
'58.##5.20.67':139
'58.##5.45.228':445
'58.##5.115.133':445
'58.##5.14.150':445
'58.##5.33.207':139
'58.##5.80.23':445
'58.##5.20.67':445
'58.##5.124.215':139
'58.##5.151.48':139
'58.##5.82.156':139
'58.#85.4.81':139
'58.##5.141.3':139
'58.##5.252.63':139
'58.##5.111.233':139
'58.##5.87.230':139
'58.##5.229.205':139
'58.##5.84.178':139
'58.##5.115.133':139
'58.##5.15.135':139
'58.##5.104.239':139
'58.##5.39.134':139
'58.##5.85.146':139
'58.##5.48.212':139
'58.##5.251.52':139
'58.##5.80.98':139
'58.##5.10.33':139
'58.##5.37.76':139
'58.##5.15.63':139
'58.##5.149.89':139
'58.##5.51.14':139
'58.##5.73.26':139
'58.##5.14.64':139
'58.##5.94.68':445
'58.##5.98.46':445
'58.##5.15.202':445
'58.##5.184.75':445
'58.##5.31.138':445
'58.##5.66.238':445
'58.##5.176.24':445
'58.##5.67.171':445
'58.##5.162.122':445
'58.##5.61.219':445
'58.##5.202.210':445
'58.##5.118.67':445
'58.#85.19.4':445
'58.##5.208.109':445
'58.##5.14.150':139
'58.##5.45.228':139
'58.##5.124.110':445
'58.##5.101.93':445
'58.##5.158.241':445
'58.##5.143.181':445
'58.##5.100.20':445
'58.##5.234.81':445
'58.##5.153.189':139
'58.##5.18.80':445
'58.##5.220.112':445
'58.##5.110.222':445
'58.##5.238.205':445
'58.#85.37.0':445
'58.##5.246.25':445
'58.##5.16.167':445
'58.##5.105.122':445
'58.##5.166.126':445
'58.##5.23.75':445
'58.##5.17.196':445
'58.##5.196.167':445
'58.##5.75.58':445
'58.##5.248.64':445
'58.##5.153.189':445
'58.##5.64.151':445
'58.##5.113.75':445
'58.##5.226.165':445
'58.##5.123.157':445
'58.##5.220.236':445
'58.##5.247.230':445
'58.##5.237.31':445
'58.##5.84.36':445
'58.##5.78.218':445
'58.##5.166.166':445
'58.##5.223.63':445
'58.##5.21.223':445
'58.##5.158.119':139
'58.##5.165.86':139
'58.##5.74.143':139
'58.##5.26.233':139
'58.##5.105.232':139
'58.##5.170.51':139
'58.##5.147.236':445
'58.##5.204.168':445
'58.##5.112.95':445
'58.##5.131.75':445
'58.##5.225.131':445
'58.##5.240.84':445
'58.##5.198.97':445
'58.##5.63.198':445
'58.##5.182.180':445
'58.##5.149.33':445
'58.##5.251.182':445
'58.##5.220.112':139
'58.##5.246.25':139
'58.##5.18.80':139
'58.#85.37.0':139
'58.##5.110.222':139
'58.##5.23.75':139
'58.##5.105.122':139
'58.##5.131.75':139
'58.##5.16.167':139
'58.##5.17.196':139
'58.##5.166.126':139
'58.##5.75.58':139
'58.##5.113.75':139
'58.##5.196.167':139
'58.##5.64.151':139
'58.##5.248.64':139
'58.##5.247.230':139
'58.##5.123.157':139
'58.##5.238.205':139
'58.##5.226.165':139
'58.##5.237.31':139
'58.##5.220.236':139
'58.##5.78.218':139
'58.##5.15.152':445
'58.##5.84.36':139
'58.##5.21.223':139
'58.##5.166.166':139
'58.#85.0.87':445
'58.##5.241.252':445
'58.##5.84.60':445
'58.##5.252.215':445
'58.##5.62.203':445
'58.##5.91.179':445
'58.##5.204.168':139
'58.##5.240.84':139
'58.##5.147.236':139
'58.##5.225.131':139
'58.##5.112.95':139
'58.##5.149.33':139
'58.##5.63.198':139
'58.##5.223.63':139
'58.##5.198.97':139
'58.##5.251.182':139
'58.##5.182.180':139
'58.##5.159.39':445
'58.##5.152.6':445
'58.##5.177.142':445
'58.##5.221.107':445
'58.##5.59.221':445
'58.##5.178.214':445
'58.##5.112.78':445
'58.##5.55.244':445
'58.##5.18.51':445
'58.##5.119.176':445
'58.##5.162.248':445
'58.##5.34.136':139
'58.##5.27.109':139
'58.##5.242.11':139
'58.##5.95.93':139
'58.##5.103.93':139
'58.##5.207.166':139
'58.##5.178.105':445
'58.##5.3.107':445
'58.##5.114.59':445
'58.##5.231.82':139
'58.##5.54.190':445
'58.##5.28.50':445
'58.##5.25.73':445
'58.##5.65.53':445
'58.##5.200.58':445
'58.##5.117.249':445
'58.##5.248.25':445
'58.##5.2.151':445
'58.##5.79.133':445
'58.##5.162.213':445
'58.##5.161.7':445
'58.##5.182.4':445
'58.##5.156.167':445
'58.##5.90.174':445
'58.##5.188.245':445
'58.##5.7.136':445
'58.##5.2.138':445
'58.##5.201.90':445
'58.##5.194.167':445
'58.##5.143.9':445
'58.##5.167.177':445
'58.#85.3.34':445
'58.##5.22.161':445
'58.##5.55.244':139
'58.##5.7.136':139
'58.##5.112.78':139
'58.##5.162.248':139
'58.##5.18.51':139
'58.##5.2.138':139
'58.##5.201.90':139
'58.#85.3.34':139
'58.##5.90.174':139
'58.##5.188.245':139
'58.##5.156.167':139
'58.##5.178.105':139
'58.##5.54.190':139
'58.##5.114.59':139
'58.##5.59.221':139
'58.##5.221.107':139
'58.##5.3.107':139
'58.##5.178.214':139
'58.##5.119.176':139
'58.##5.152.6':139
'58.##5.177.142':139
'58.##5.159.39':139
'58.##5.79.133':139
'58.##5.123.8':139
'58.##5.2.151':139
'58.##5.182.4':139
'58.##5.162.213':139
'58.##5.86.50':139
'58.##5.16.186':139
'58.##5.75.176':139
'58.##5.117.243':139
'58.##5.60.109':139
'58.##5.244.11':139
'58.##5.143.9':139
'58.##5.200.58':139
'58.##5.194.167':139
'58.##5.22.161':139
'58.##5.167.177':139
'58.##5.65.53':139
'58.##5.248.25':139
'58.##5.161.7':139
'58.##5.25.73':139
'58.##5.117.249':139
'58.##5.28.50':139
'58.##5.123.8':445
'58.##5.14.122':139
'58.#85.6.91':139
'58.##5.17.235':139
'58.##5.19.128':139
'58.##5.30.20':139
'58.##5.27.53':139
'58.##5.14.122':445
'58.#85.6.91':445
'58.##5.17.235':445
'58.##5.19.128':445
'58.##5.30.20':445
'58.##5.124.136':445
'58.##5.193.124':445
'58.##5.136.38':445
'58.##5.97.193':445
'58.##5.229.110':445
'58.##5.99.193':445
'58.##5.56.172':445
'58.##5.106.201':445
'58.##5.136.142':445
'58.##5.15.35':445
'58.##5.142.236':445
'58.##5.98.46':139
'58.##5.66.238':139
'58.##5.94.68':139
'58.##5.31.138':139
'58.##5.15.202':139
'58.##5.61.219':139
'58.##5.67.171':139
'58.##5.15.68':139
'58.##5.176.24':139
'58.##5.202.210':139
'58.##5.162.122':139
'58.#85.19.4':139
'58.##5.124.110':139
'58.##5.118.67':139
'58.##5.27.53':445
'58.##5.208.109':139
'58.##5.100.20':139
'58.##5.158.241':139
'58.##5.184.75':139
'58.##5.101.93':139
'58.##5.234.81':139
'58.##5.143.181':139
'58.##5.2.138':9988
'58.##5.177.142':9988
'58.##5.54.190':9988
'58.##5.207.166':445
'58.##5.231.82':445
'58.##5.188.245':9988
'58.##5.156.167':9988
'58.##5.22.161':9988
'58.##5.162.248':9988
'58.##5.65.53':9988
'58.##5.55.244':9988
'58.##5.117.243':445
'58.##5.75.176':445
'58.##5.244.11':445
'58.##5.86.50':445
'58.##5.60.109':445
'58.##5.16.186':445
'58.##5.34.136':445
'58.##5.27.109':445
'58.##5.242.11':445
'58.##5.95.93':445
'58.##5.103.93':445
'58.##5.99.193':139
'58.##5.15.35':139
'58.##5.193.124':139
'58.##5.136.38':139
'58.##5.124.136':139
'58.##5.142.236':139
'58.##5.28.238':445
'58.##5.244.58':445
'58.##5.106.201':139
'58.##5.136.142':139
'58.##5.56.172':139
'58.##5.178.105':9988
'58.##5.112.78':9988
'58.##5.159.39':9988
'58.#85.3.34':9988
'58.##5.178.214':9988
'58.##5.167.177':9988
'58.##5.97.193':139
'58.##5.229.110':139
'58.##5.244.58':139
'58.##5.221.107':9988
'58.##5.28.238':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней