Trojan.Starman.5461

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'72.##.43.185':139
'72.##.76.130':139
'72.##.130.145':139
'72.##.56.245':139
'72.#9.38.48':139
'72.#9.7.151':139
'72.##.95.249':139
'72.##.102.166':139
'72.##.175.243':139
'72.##.29.150':139
'72.##.186.66':139
'72.##.98.144':445
'72.##.198.155':445
'72.##.253.64':445
'72.##.119.111':445
'72.##.21.156':445
'72.##.236.25':139
'72.##.22.165':139
'72.##.151.25':445
'72.##.26.199':445
'72.##.83.126':445
'72.##.29.150':445
'72.##.102.166':445
'72.##.175.243':445
'72.##.43.185':445
'72.##.76.130':445
'72.##.30.182':445
'72.##.32.146':445
'72.##.158.180':445
'72.#9.7.151':445
'72.##.95.249':445
'72.##.130.145':445
'72.#9.7.210':139
'72.#9.243.4':139
'72.##.32.146':139
'72.##.158.180':139
'72.##.30.182':139
'72.##.56.245':445
'72.#9.38.48':445
'72.##.186.66':445
'72.##.236.25':445
'72.##.22.165':445
'72.##.33.112':445
'72.##.198.155':139
'72.##.26.199':139
'72.##.98.144':139
'72.##.21.156':139
'72.##.253.64':139
'72.##.185.126':445
'72.##.175.74':445
'72.##.66.244':445
'72.##.83.126':139
'72.##.151.25':139
'72.##.119.111':139
'72.#9.6.98':139
'72.##.156.180':139
'72.#9.41.55':139
'72.##.202.91':139
'72.##.145.179':139
'72.##.30.206':139
'72.##.33.112':139
'72.##.218.192':139
'72.##.60.237':139
'72.##.16.194':139
'72.#9.41.55':445
'72.#9.6.98':445
'72.##.145.179':445
'72.#9.1.76':445
'72.##.202.91':445
'72.##.218.192':445
'72.##.30.206':445
'72.##.16.194':445
'72.##.156.180':445
'72.##.60.237':445
'72.##.238.41':445
'72.#9.19.79':445
'72.##.214.133':445
'72.##.25.166':445
'72.#9.113.9':445
'72.##.191.228':445
'72.##.79.174':445
'72.##.70.208':445
'72.##.173.220':445
'72.##.88.133':445
'72.##.49.200':445
'72.#9.7.210':445
'72.#9.7.96':445
'72.##.247.186':445
'72.##.16.109':445
'72.##.238.44':445
'72.##.71.109':445
'72.##.87.243':445
'72.##.31.124':445
'72.##.221.38':445
'72.##.38.127':445
'72.##.59.162':445
'72.##.125.149':445
'72.##.164.232':445
'72.##.72.222':445
'72.##.185.202':445
'72.#9.59.6':445
'72.#9.89.60':445
'72.##.167.94':445
'72.#9.143.5':445
'72.##.16.197':445
'72.##.14.171':445
'72.##.47.175':445
'72.#9.55.49':139
'72.##.109.49':139
'72.#9.37.82':139
'72.#9.9.129':139
'72.##.55.112':139
'72.#9.22.90':139
'72.##.129.203':139
'72.#9.66.87':139
'72.#9.214.4':139
'72.##.135.153':139
'72.##.120.143':139
'72.##.177.244':139
'72.##.180.154':139
'72.##.233.232':445
'72.##.120.65':445
'72.##.189.164':445
'72.##.17.143':139
'72.##.117.84':139
'72.#9.8.57':139
'72.#9.93.59':139
'72.#9.25.70':139
'72.##.46.175':445
'72.##.72.222':139
'72.##.14.171':139
'72.##.164.232':139
'72.#9.89.60':139
'72.##.185.202':139
'72.#9.143.5':139
'72.##.125.149':139
'72.##.167.94':139
'72.##.47.175':139
'72.##.16.197':139
'72.#9.59.6':139
'72.##.122.50':139
'72.##.212.68':139
'72.##.50.152':139
'72.#9.243.4':445
'72.##.200.180':139
'72.##.161.193':139
'72.##.46.175':139
'72.##.155.159':139
'72.##.187.183':139
'72.##.128.16':139
'72.##.50.152':445
'72.##.122.50':445
'72.##.200.180':445
'72.##.189.164':139
'72.##.233.232':139
'72.##.155.159':445
'72.##.161.193':445
'72.##.128.16':445
'72.##.212.68':445
'72.##.187.183':445
'72.##.120.65':139
'72.#9.7.96':139
'72.##.247.186':139
'72.##.16.109':139
'72.##.238.44':139
'72.##.71.109':139
'72.##.87.243':139
'72.##.31.124':139
'72.##.221.38':139
'72.##.38.127':139
'72.##.59.162':139
'72.##.34.221':445
'72.##.205.47':445
'72.#9.4.189':445
'72.##.188.237':445
'72.##.121.95':445
'72.##.119.54':445
'72.#9.55.70':445
'72.#9.250.3':445
'72.##.232.204':445
'72.##.42.134':445
'72.##.41.248':445
'72.##.173.112':139
'72.##.52.171':139
'72.##.111.249':139
'72.##.134.253':139
'72.##.249.106':139
'72.##.238.132':445
'72.##.224.95':445
'72.##.85.130':139
'72.##.199.97':139
'72.#9.68.84':139
'72.##.73.199':445
'72.##.244.73':445
'72.##.178.64':445
'72.##.77.236':445
'72.#9.8.219':445
'72.##.166.15':445
'72.##.209.165':445
'72.##.116.203':445
'72.##.17.112':445
'72.##.219.181':445
'72.##.212.72':445
'72.##.130.247':445
'72.##.138.224':445
'72.##.14.237':445
'72.##.150.86':445
'72.##.237.98':445
'72.#9.69.93':445
'72.##.19.251':445
'72.##.16.124':445
'72.#9.0.5':445
'72.##.184.120':445
'72.#9.33.49':139
'72.##.237.98':139
'72.##.14.237':139
'72.##.150.86':139
'72.##.119.54':139
'72.#9.55.70':139
'72.##.184.120':139
'72.##.16.124':139
'72.#9.0.5':139
'72.##.130.247':139
'72.##.138.224':139
'72.#9.250.3':139
'72.##.188.237':139
'72.##.224.95':139
'72.##.41.248':139
'72.#9.4.189':139
'72.##.238.132':139
'72.##.232.204':139
'72.##.42.134':139
'72.##.205.47':139
'72.##.121.95':139
'72.##.34.221':139
'72.##.131.14':139
'72.##.40.193':139
'72.##.59.209':139
'72.##.166.15':139
'72.##.209.165':139
'72.#9.125.3':139
'72.##.107.163':139
'72.##.162.211':139
'72.##.163.83':139
'72.##.49.203':139
'72.##.116.203':139
'72.##.77.236':139
'72.#9.8.219':139
'72.##.212.72':139
'72.#9.69.93':139
'72.##.19.251':139
'72.##.17.112':139
'72.##.219.181':139
'72.##.244.73':139
'72.##.178.64':139
'72.##.73.199':139
'72.##.59.209':445
'72.##.210.147':445
'72.##.65.225':445
'72.##.56.201':445
'72.##.174.37':445
'72.##.244.162':445
'72.#9.20.22':445
'72.##.223.147':445
'72.##.218.31':445
'72.##.180.148':445
'72.##.21.204':445
'72.##.196.130':445
'72.##.187.10':139
'72.##.220.186':139
'72.##.223.147':139
'72.##.218.31':139
'72.#9.20.22':139
'72.##.216.138':139
'72.##.167.186':445
'72.##.218.119':139
'72.##.42.254':139
'72.#9.21.47':139
'72.##.88.133':139
'72.##.49.200':139
'72.##.214.133':139
'72.##.25.166':139
'72.#9.19.79':139
'72.##.238.41':139
'72.#9.1.76':139
'72.##.70.208':139
'72.##.173.220':139
'72.##.79.174':139
'72.##.191.228':139
'72.#9.21.47':445
'72.##.218.119':445
'72.##.42.254':445
'72.##.187.10':445
'72.##.220.186':445
'72.##.175.74':139
'72.#9.113.9':139
'72.##.185.126':139
'72.##.216.138':445
'72.##.66.244':139
'72.##.21.204':139
'72.#9.68.84':445
'72.##.85.130':445
'72.##.199.97':445
'72.##.173.112':445
'72.##.52.171':445
'72.##.188.237':9988
'72.##.205.47':9988
'72.#9.4.189':9988
'72.##.121.95':9988
'72.##.238.132':9988
'72.##.111.249':445
'72.##.49.203':445
'72.##.162.211':445
'72.##.163.83':445
'72.##.131.14':445
'72.##.40.193':445
'72.##.134.253':445
'72.##.249.106':445
'72.#9.33.49':445
'72.#9.125.3':445
'72.##.107.163':445
'72.##.196.130':139
'72.##.174.37':139
'72.##.167.186':139
'72.#9.4.47':139
'72.#9.4.47':445
'72.##.65.225':139
'72.##.180.148':139
'72.##.210.147':139
'72.##.244.162':139
'72.##.56.201':139
'72.##.73.199':9988
'72.#9.55.70':9988
'72.##.16.124':9988
'72.##.119.54':9988
'72.##.42.134':9988
'72.#9.250.3':9988
'72.##.212.72':9988
'72.##.184.120':9988
'72.##.138.224':9988
'72.##.14.237':9988
'72.##.150.86':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней