Trojan.Starman.5627

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'65.##.94.146':139
'65.##.196.94':139
'65.##.146.59':139
'65.##.180.193':139
'65.##.166.71':139
'65.#4.22.41':139
'65.##.150.18':139
'65.##.202.169':139
'65.#4.244.3':139
'65.##.218.119':139
'65.##.102.65':139
'65.##.147.188':139
'65.##.145.181':139
'65.##.215.181':139
'65.##.213.89':139
'65.##.139.34':139
'65.##.118.190':139
'65.##.202.170':139
'65.##.80.114':139
'65.##.165.46':139
'65.#4.39.17':445
'65.##.124.53':445
'65.##.84.151':445
'65.##.92.161':445
'65.##.25.170':445
'65.##.215.181':445
'65.##.145.181':445
'65.##.213.89':445
'65.##.59.211':445
'65.##.102.156':445
'65.##.53.158':445
'65.##.136.64':445
'65.##.254.147':445
'65.#4.8.44':445
'65.#4.24.68':445
'65.##.131.93':445
'65.#4.169.2':445
'65.##.218.247':445
'65.##.241.58':445
'65.#4.2.253':445
'65.##.102.156':139
'65.#4.52.18':445
'65.##.102.51':445
'65.##.216.241':445
'65.##.148.182':445
'65.##.209.26':445
'65.##.171.108':445
'65.##.194.30':445
'65.##.196.75':445
'65.##.189.25':445
'65.##.75.204':445
'65.##.196.75':139
'65.##.171.108':139
'65.##.75.204':139
'65.##.102.51':139
'65.##.189.25':139
'65.##.100.252':139
'65.##.22.112':139
'65.##.40.136':139
'65.##.194.30':139
'65.##.123.197':139
'65.#4.169.2':139
'65.##.92.161':139
'65.##.131.93':139
'65.#4.2.253':139
'65.##.218.247':139
'65.##.124.53':139
'65.##.59.211':139
'65.#4.39.17':139
'65.##.25.170':139
'65.##.84.151':139
'65.##.22.112':445
'65.#4.8.44':139
'65.##.100.252':445
'65.##.123.197':445
'65.##.40.136':445
'65.##.136.64':139
'65.##.241.58':139
'65.##.53.158':139
'65.#4.24.68':139
'65.##.254.147':139
'65.##.102.65':445
'65.##.69.107':139
'65.##.115.45':139
'65.##.174.130':139
'65.#4.99.45':139
'65.##.213.98':139
'65.#4.146.0':139
'65.##.30.176':139
'65.##.25.154':139
'65.##.252.95':139
'65.##.51.106':139
'65.##.194.126':139
'65.##.113.241':139
'65.##.156.73':445
'65.#4.38.50':445
'65.##.254.63':445
'65.##.61.240':139
'65.#4.76.26':139
'65.#4.24.84':139
'65.##.70.161':139
'65.##.117.113':139
'65.##.13.183':139
'65.#4.27.99':139
'65.##.158.50':139
'65.##.161.133':139
'65.##.147.241':139
'65.##.187.20':139
'65.##.104.120':139
'65.#4.20.12':139
'65.##.29.145':139
'65.##.12.149':139
'65.##.170.55':139
'65.##.101.170':139
'65.##.206.68':139
'65.##.12.254':139
'65.##.233.214':139
'65.##.70.226':139
'65.##.171.75':139
'65.##.79.183':139
'65.##.137.101':139
'65.##.26.137':139
'65.#4.31.32':445
'65.##.202.169':445
'65.#4.22.41':445
'65.##.218.119':445
'65.##.196.94':445
'65.#4.244.3':445
'65.##.240.17':139
'65.##.131.168':139
'65.#4.95.50':139
'65.##.150.18':445
'65.##.91.185':139
'65.##.202.170':445
'65.##.139.34':445
'65.##.165.46':445
'65.##.147.188':445
'65.##.80.114':445
'65.##.146.59':445
'65.##.94.146':445
'65.##.166.71':445
'65.##.118.190':445
'65.##.180.193':445
'65.##.131.168':445
'65.##.194.147':445
'65.##.240.17':445
'65.##.91.185':445
'65.#4.95.50':445
'65.##.229.56':445
'65.#4.15.10':445
'65.##.56.197':445
'65.#4.21.90':445
'65.##.247.75':445
'65.##.56.197':139
'65.##.229.56':139
'65.##.247.75':139
'65.##.194.147':139
'65.#4.21.90':139
'65.##.254.63':139
'65.##.156.73':139
'65.#4.38.50':139
'65.#4.15.10':139
'65.#4.31.32':139
'65.#4.10.10':445
'65.##.58.151':445
'65.##.212.95':445
'65.##.254.132':445
'65.##.125.77':445
'65.##.20.249':445
'65.##.17.204':445
'65.##.82.134':445
'65.##.18.188':445
'65.#4.75.28':445
'65.##.121.74':139
'65.##.57.146':139
'65.#4.74.77':139
'65.##.110.79':139
'65.#4.75.21':139
'65.##.192.176':139
'65.##.185.62':139
'65.##.159.37':139
'65.#4.21.38':139
'65.#4.37.21':139
'65.##.34.197':445
'65.#4.74.58':445
'65.##.143.201':445
'65.##.118.250':445
'65.##.231.118':445
'65.##.111.40':445
'65.##.89.228':445
'65.#4.13.49':445
'65.##.29.178':445
'65.#4.94.73':445
'65.##.145.162':445
'65.##.57.194':445
'65.##.162.184':445
'65.#4.17.70':445
'65.##.103.75':445
'65.##.205.142':445
'65.#4.3.180':445
'65.##.217.179':445
'65.##.100.59':445
'65.##.186.141':445
'65.##.150.37':139
'65.##.145.162':139
'65.##.57.194':139
'65.##.162.184':139
'65.#4.17.70':139
'65.##.103.75':139
'65.##.205.142':139
'65.#4.3.180':139
'65.##.217.179':139
'65.##.100.59':139
'65.##.186.141':139
'65.#4.10.10':139
'65.##.58.151':139
'65.##.212.95':139
'65.##.125.77':139
'65.##.254.132':139
'65.##.20.249':139
'65.##.17.204':139
'65.##.82.134':139
'65.##.18.188':139
'65.#4.75.28':139
'65.##.137.203':139
'65.#4.32.31':139
'65.##.245.110':139
'65.#4.78.90':139
'65.##.125.78':139
'65.##.181.214':139
'65.##.141.14':139
'65.##.125.82':139
'65.##.22.215':139
'65.#4.82.83':139
'65.##.34.197':139
'65.#4.74.58':139
'65.##.143.201':139
'65.##.118.250':139
'65.##.231.118':139
'65.##.111.40':139
'65.##.89.228':139
'65.#4.13.49':139
'65.##.29.178':139
'65.#4.94.73':139
'65.#4.78.90':445
'65.#4.42.90':139
'65.##.61.111':139
'65.##.46.136':139
'65.##.107.109':139
'65.##.248.230':139
'65.##.107.45':445
'65.#4.35.9':445
'65.##.24.192':445
'65.##.113.185':445
'65.##.221.112':445
'65.##.206.224':139
'65.##.221.23':139
'65.#4.75.53':139
'65.##.142.225':139
'65.##.169.142':139
'65.##.101.189':139
'65.##.98.254':139
'65.##.188.205':139
'65.#4.50.14':139
'65.##.187.30':139
'65.##.46.136':445
'65.#4.42.90':445
'65.##.248.230':445
'65.##.98.254':445
'65.##.107.109':445
'65.##.216.241':139
'65.#4.52.18':139
'65.##.209.26':139
'65.##.61.111':445
'65.##.148.182':139
'65.#4.75.53':445
'65.##.206.224':445
'65.##.169.142':445
'65.##.225.35':445
'65.##.142.225':445
'65.##.188.205':445
'65.##.101.189':445
'65.##.187.30':445
'65.##.221.23':445
'65.#4.50.14':445
'65.##.225.35':139
'65.##.121.74':445
'65.##.57.146':445
'65.#4.74.77':445
'65.##.110.79':445
'65.#4.75.21':445
'65.##.192.176':445
'65.##.185.62':445
'65.##.159.37':445
'65.#4.21.38':445
'65.#4.37.21':445
'65.#4.32.31':445
'65.##.22.215':445
'65.##.137.203':445
'65.##.125.78':445
'65.##.245.110':445
'65.##.141.14':445
'65.##.150.37':445
'65.##.181.214':445
'65.#4.82.83':445
'65.##.125.82':445
'65.##.141.14':9988
'65.#4.21.38':9988
'65.##.181.214':9988
'65.#4.78.90':9988
'65.##.125.82':9988
'65.##.107.45':139
'65.#4.35.9':139
'65.##.24.192':139
'65.##.113.185':139
'65.##.221.112':139
'65.##.254.132':9988
'65.#4.75.28':9988
'65.##.212.95':9988
'65.##.125.77':9988
'65.#4.10.10':9988
'65.#4.94.73':9988
'65.#4.13.49':9988
'65.#4.74.58':9988
'65.##.162.184':9988
'65.##.100.59':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней