Trojan.Starman.5593

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'80.##5.227.111':445
'80.##5.178.91':445
'80.##5.25.204':445
'80.##5.247.189':445
'80.##5.18.64':445
'80.##5.111.18':445
'80.##5.237.195':445
'80.##5.89.126':445
'80.##5.157.41':445
'80.##5.253.115':445
'80.##5.98.186':445
'80.##5.204.148':445
'80.##5.23.101':445
'80.##5.60.108':445
'80.##5.94.60':445
'80.##5.10.110':445
'80.##5.193.183':445
'80.##5.30.183':445
'80.##5.227.58':445
'80.##5.210.179':445
'80.##5.97.210':445
'80.##5.33.184':445
'80.##5.224.25':445
'80.##5.95.224':445
'80.##5.53.31':445
'80.##5.0.247':445
'80.##5.169.159':445
'80.##5.137.109':445
'80.##5.251.217':445
'80.##5.138.251':445
'80.##5.35.27':445
'80.##5.79.157':445
'80.##5.240.247':445
'80.##5.123.26':139
'80.##5.22.82':445
'80.##5.38.103':445
'80.##5.77.22':445
'80.##5.218.122':445
'80.##5.230.140':445
'80.##5.212.230':445
'80.##5.18.56':445
'80.##5.227.156':445
'80.##5.206.227':445
'80.##5.146.105':445
'80.##5.22.197':445
'80.##5.149.122':445
'80.##5.123.115':445
'80.##5.45.231':445
'80.##5.157.45':445
'80.##5.209.252':445
'80.##5.240.247':139
'80.##5.18.64':139
'80.##5.111.18':139
'80.##5.227.111':139
'80.##5.33.184':139
'80.##5.23.101':139
'80.##5.247.189':139
'80.##5.98.186':139
'80.##5.204.148':139
'80.##5.237.195':139
'80.##5.178.91':139
'80.##5.25.204':139
'80.##5.253.115':139
'80.##5.97.210':139
'80.##5.30.183':139
'80.##5.227.58':139
'80.##5.60.108':139
'80.##5.93.181':445
'80.##5.1.157':445
'80.##5.193.183':139
'80.##5.95.224':139
'80.##5.53.31':139
'80.##5.210.179':139
'80.##5.94.60':139
'80.##5.10.110':139
'80.##5.224.25':139
'80.##5.138.251':139
'80.##5.35.27':139
'80.##5.0.247':139
'80.##5.123.115':139
'80.##5.218.122':139
'80.##5.251.217':139
'80.##5.38.103':139
'80.##5.77.22':139
'80.##5.79.157':139
'80.##5.169.159':139
'80.##5.137.109':139
'80.##5.22.82':139
'80.##5.149.122':139
'80.##5.206.227':139
'80.##5.146.105':139
'80.##5.230.140':139
'80.##5.89.126':139
'80.##5.157.41':139
'80.##5.227.156':139
'80.##5.157.45':139
'80.##5.209.252':139
'80.##5.22.197':139
'80.##5.212.230':139
'80.##5.18.56':139
'80.##5.45.231':139
'80.##5.12.197':445
'80.#75.7.26':445
'80.##5.68.41':445
'80.##5.184.21':445
'80.##5.83.21':445
'80.##5.146.61':445
'80.##5.10.20':445
'80.##5.15.121':445
'80.##5.215.47':445
'80.##5.190.68':445
'80.##5.201.201':445
'80.##5.241.245':445
'80.##5.93.150':445
'80.##5.170.63':445
'80.##5.184.85':445
'80.##5.83.40':445
'80.##5.8.210':139
'80.##5.12.123':445
'80.##5.200.53':445
'80.##5.94.164':445
'80.##5.164.85':445
'80.##5.8.180':445
'80.##5.10.111':445
'80.##5.55.55':445
'80.##5.97.45':445
'80.##5.236.142':445
'80.##5.140.21':445
'80.##5.179.139':445
'80.##5.178.194':445
'80.##5.193.199':445
'80.##5.167.218':445
'80.##5.254.222':445
'80.##5.22.27':445
'80.##5.8.210':445
'80.##5.231.136':445
'80.##5.124.165':445
'80.##5.165.138':445
'80.##5.255.245':445
'80.##5.141.214':445
'80.##5.144.141':445
'80.##5.211.144':445
'80.##5.108.91':445
'80.##5.126.108':445
'80.##5.155.36':445
'80.#75.52.9':445
'80.##5.114.89':445
'80.##5.126.94':445
'80.##5.35.208':445
'80.##5.39.133':445
'80.#75.9.56':445
'80.##5.22.27':139
'80.##5.83.21':139
'80.##5.146.61':139
'80.##5.12.197':139
'80.##5.8.180':139
'80.##5.93.150':139
'80.##5.184.21':139
'80.##5.201.201':139
'80.##5.241.245':139
'80.##5.10.20':139
'80.#75.7.26':139
'80.##5.68.41':139
'80.##5.190.68':139
'80.##5.164.85':139
'80.##5.12.123':139
'80.##5.200.53':139
'80.##5.170.63':139
'80.##5.52.219':139
'80.##5.123.26':445
'80.##5.52.219':445
'80.##5.55.55':139
'80.##5.97.45':139
'80.##5.94.164':139
'80.##5.184.85':139
'80.##5.83.40':139
'80.##5.10.111':139
'80.##5.193.199':139
'80.##5.167.218':139
'80.##5.236.142':139
'80.##5.126.94':139
'80.##5.255.245':139
'80.##5.178.194':139
'80.##5.124.165':139
'80.##5.165.138':139
'80.##5.254.222':139
'80.##5.140.21':139
'80.##5.179.139':139
'80.##5.231.136':139
'80.##5.114.89':139
'80.##5.126.108':139
'80.##5.155.36':139
'80.##5.141.214':139
'80.##5.15.121':139
'80.##5.215.47':139
'80.##5.108.91':139
'80.##5.39.133':139
'80.#75.9.56':139
'80.#75.52.9':139
'80.##5.144.141':139
'80.##5.211.144':139
'80.##5.35.208':139
'80.##5.1.157':139
'80.##5.172.40':445
'80.##5.118.253':445
'80.##5.118.171':445
'80.##5.141.98':445
'80.##5.157.157':445
'80.##5.40.228':445
'80.##5.213.216':445
'80.##5.236.182':445
'80.##5.76.29':445
'80.##5.123.69':445
'80.##5.196.174':445
'80.##5.216.230':445
'80.##5.137.157':445
'80.##5.56.231':445
'80.##5.209.94':445
'80.##5.210.22':445
'80.##5.181.122':445
'80.##5.94.165':445
'80.##5.42.93':445
'80.##5.26.205':445
'80.##5.182.70':445
'80.##5.215.227':445
'80.##5.98.144':445
'80.##5.88.144':445
'80.##5.62.21':445
'80.##5.9.155':445
'80.##5.127.0':445
'80.##5.36.41':445
'80.##5.183.38':445
'80.##5.128.224':445
'80.##5.122.203':445
'80.##5.52.214':445
'80.##5.196.199':445
'80.##5.132.196':445
'80.##5.155.188':445
'80.##5.59.171':445
'80.##5.200.37':445
'80.##5.8.160':445
'80.##5.80.151':445
'80.##5.88.54':445
'80.##5.32.191':445
'80.##5.52.31':445
'80.##5.18.191':445
'80.##5.59.84':445
'80.##5.20.171':445
'80.##5.171.123':445
'80.##5.35.240':445
'80.##5.220.35':445
'80.##5.222.219':445
'80.##5.133.239':445
'80.##5.6.133':139
'80.##5.172.40':139
'80.##5.118.171':139
'80.##5.118.253':139
'80.##5.141.98':139
'80.##5.157.157':139
'80.##5.40.228':139
'80.##5.213.216':139
'80.##5.236.182':139
'80.##5.76.29':139
'80.##5.123.69':139
'80.##5.196.174':139
'80.##5.216.230':139
'80.##5.137.157':139
'80.##5.181.122':139
'80.##5.42.93':139
'80.##5.98.144':139
'80.##5.56.231':139
'80.##5.62.21':139
'80.##5.210.22':139
'80.##5.26.205':139
'80.##5.182.70':139
'80.##5.215.227':139
'80.##5.88.144':139
'80.##5.94.165':139
'80.##5.209.94':139
'80.##5.9.155':139
'80.##5.127.0':139
'80.##5.36.41':139
'80.##5.183.38':139
'80.##5.128.224':139
'80.##5.122.203':139
'80.##5.200.37':139
'80.##5.196.199':139
'80.##5.132.196':139
'80.##5.155.188':139
'80.##5.59.171':139
'80.##5.52.214':139
'80.##5.8.160':139
'80.##5.80.151':139
'80.##5.88.54':139
'80.##5.32.191':139
'80.##5.52.31':139
'80.##5.18.191':139
'80.##5.59.84':139
'80.##5.171.123':139
'80.##5.20.171':139
'80.##5.35.240':139
'80.##5.220.35':139
'80.##5.222.219':139
'80.##5.133.239':139
'80.##5.19.77':445
'80.##5.188.80':445
'80.##5.147.173':445
'80.##5.223.112':445
'80.##5.136.223':445
'80.##5.40.137':445
'80.##5.80.54':445
'80.##5.35.41':445
'80.##5.107.153':445
'80.##5.127.147':445
'80.##5.234.6':445
'80.##5.53.225':445
'80.##5.251.3':445
'80.##5.172.100':445
'80.#75.6.82':445
'80.##5.28.214':445
'80.#75.2.7':445
'80.##5.202.104':445
'80.#75.5.86':445
'80.##5.78.217':445
'80.##5.99.79':445
'80.##5.173.9':445
'80.##5.148.101':445
'80.##5.152.37':445
'80.##5.216.151':445
'80.##5.106.21':445
'80.##5.164.177':445
'80.##5.74.107':445
'80.##5.109.50':445
'80.##5.54.252':445
'80.##5.28.13':445
'80.##5.94.93':445
'80.##5.181.217':445
'80.##5.93.181':139
'80.##5.201.203':445
'80.##5.13.15':445
'80.##5.71.192':445
'80.##5.179.29':445
'80.##5.164.41':445
'80.##5.41.45':445
'80.##5.22.180':445
'80.##5.189.227':445
'80.##5.100.218':445
'80.##5.174.237':445
'80.##5.24.119':445
'80.##5.79.111':445
'80.##5.247.15':445
'80.##5.220.116':445
'80.##5.81.220':445
'80.##5.66.221':445
'80.##5.181.217':139
'80.##5.136.223':139
'80.##5.40.137':139
'80.##5.19.77':139
'80.##5.173.9':139
'80.##5.251.3':139
'80.##5.223.112':139
'80.##5.234.6':139
'80.##5.53.225':139
'80.##5.80.54':139
'80.##5.188.80':139
'80.##5.147.173':139
'80.##5.127.147':139
'80.##5.99.79':139
'80.##5.202.104':139
'80.#75.5.86':139
'80.##5.172.100':139
'80.##5.6.133':445
'80.##5.196.199':9988
'80.#75.2.7':139
'80.##5.152.37':139
'80.##5.216.151':139
'80.##5.78.217':139
'80.#75.6.82':139
'80.##5.28.214':139
'80.##5.148.101':139
'80.##5.54.252':139
'80.##5.28.13':139
'80.##5.106.21':139
'80.##5.247.15':139
'80.##5.179.29':139
'80.##5.109.50':139
'80.##5.13.15':139
'80.##5.71.192':139
'80.##5.94.93':139
'80.##5.164.177':139
'80.##5.74.107':139
'80.##5.201.203':139
'80.##5.79.111':139
'80.##5.100.218':139
'80.##5.174.237':139
'80.##5.41.45':139
'80.##5.35.41':139
'80.##5.107.153':139
'80.##5.189.227':139
'80.##5.81.220':139
'80.##5.66.221':139
'80.##5.24.119':139
'80.##5.164.41':139
'80.##5.22.180':139
'80.##5.220.116':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней