Trojan.Starman.5633

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'72.##.125.175':445
'72.#6.82.20':445
'72.##.29.234':445
'72.#6.65.74':445
'72.##.26.168':445
'72.##.164.167':445
'72.##.60.230':445
'72.##.53.138':445
'72.##.76.175':445
'72.##.53.143':445
'72.##.159.44':445
'72.#6.31.47':445
'72.##.60.212':445
'72.##.229.167':445
'72.##.158.87':445
'72.##.28.206':445
'72.##.68.245':445
'72.##.180.102':445
'72.#6.89.15':445
'72.##.110.59':445
'72.##.144.224':445
'72.#6.79.78':445
'72.##.10.243':445
'72.##.166.130':445
'72.##.43.143':445
'72.#6.60.7':445
'72.##.115.112':139
'72.##.56.128':445
'72.##.115.232':445
'72.##.142.163':445
'72.#6.18.95':445
'72.##.144.152':445
'72.##.14.100':445
'72.##.104.65':445
'72.#6.1.97':445
'72.##.131.185':445
'72.##.42.201':445
'72.##.128.14':445
'72.##.131.59':445
'72.#6.5.250':445
'72.#6.49.26':445
'72.#6.18.95':139
'72.##.144.152':139
'72.##.14.100':139
'72.##.104.65':139
'72.#6.1.97':139
'72.##.131.185':139
'72.##.42.201':139
'72.##.128.14':139
'72.##.131.59':139
'72.#6.5.250':139
'72.##.125.175':139
'72.#6.82.20':139
'72.##.29.234':139
'72.#6.65.74':139
'72.##.26.168':139
'72.##.164.167':139
'72.##.60.230':139
'72.##.53.138':139
'72.##.76.175':139
'72.##.53.143':139
'72.##.107.57':445
'72.##.121.41':445
'72.##.113.118':445
'72.##.166.56':445
'72.##.75.166':445
'72.##.161.71':445
'72.##.26.226':445
'72.##.137.66':445
'72.#6.2.130':445
'72.##.152.48':445
'72.##.144.224':139
'72.#6.79.78':139
'72.##.10.243':139
'72.##.166.130':139
'72.##.43.143':139
'72.#6.60.7':139
'72.##.27.102':445
'72.##.56.128':139
'72.##.115.232':139
'72.##.142.163':139
'72.##.236.241':445
'72.##.194.149':445
'72.##.84.160':445
'72.##.125.199':445
'72.##.79.140':445
'72.##.104.112':445
'72.##.22.202':445
'72.##.201.177':445
'72.#6.90.90':445
'72.##.182.163':445
'72.##.127.132':139
'72.##.90.128':139
'72.##.204.224':139
'72.##.119.242':139
'72.##.38.138':139
'72.##.59.229':139
'72.##.115.112':445
'72.##.12.177':139
'72.##.59.143':139
'72.##.54.121':139
'72.#6.3.166':445
'72.#6.25.4':445
'72.##.201.64':445
'72.#6.5.132':445
'72.##.252.123':445
'72.##.150.114':445
'72.##.108.79':445
'72.#6.3.148':445
'72.##.238.140':445
'72.##.90.206':445
'72.##.216.49':445
'72.##.79.126':445
'72.##.14.184':445
'72.##.81.120':445
'72.#6.73.33':445
'72.#6.57.51':445
'72.##.37.129':445
'72.#6.23.64':445
'72.##.171.102':445
'72.##.118.162':445
'72.##.207.148':139
'72.##.216.49':139
'72.##.79.126':139
'72.##.14.184':139
'72.##.81.120':139
'72.#6.73.33':139
'72.#6.57.51':139
'72.##.37.129':139
'72.#6.23.64':139
'72.##.171.102':139
'72.##.118.162':139
'72.##.236.241':139
'72.##.194.149':139
'72.##.84.160':139
'72.##.125.199':139
'72.##.79.140':139
'72.##.104.112':139
'72.##.22.202':139
'72.##.201.177':139
'72.#6.90.90':139
'72.##.182.163':139
'72.##.117.231':139
'72.##.224.52':139
'72.##.231.160':139
'72.##.168.160':139
'72.##.25.135':139
'72.##.201.102':139
'72.#6.6.92':139
'72.##.102.227':139
'72.#6.28.17':139
'72.##.228.28':139
'72.#6.3.166':139
'72.#6.25.4':139
'72.##.201.64':139
'72.#6.5.132':139
'72.##.252.123':139
'72.##.150.114':139
'72.##.108.79':139
'72.#6.3.148':139
'72.##.238.140':139
'72.##.90.206':139
'72.##.68.245':139
'72.##.28.196':445
'72.##.81.151':445
'72.#6.0.1':445
'72.#6.4.136':445
'72.##.55.250':445
'72.##.70.251':445
'72.##.89.175':445
'72.##.87.163':445
'72.##.253.231':445
'72.##.158.242':445
'72.#6.71.77':139
'72.##.108.197':139
'72.#6.55.89':139
'72.##.143.123':139
'72.##.100.16':139
'72.##.62.197':139
'72.##.250.206':139
'72.##.248.118':139
'72.##.152.47':139
'72.#6.94.93':139
'72.##.139.249':445
'72.##.217.33':445
'72.##.173.198':445
'72.##.81.193':445
'72.##.66.212':445
'72.#6.201.4':445
'72.#6.76.77':445
'72.#6.63.75':445
'72.##.165.166':445
'72.##.74.165':445
'72.##.203.104':445
'72.#6.152.6':445
'72.##.141.37':445
'72.##.117.163':445
'72.##.65.101':445
'72.##.147.170':445
'72.##.152.148':445
'72.##.153.82':445
'72.##.38.179':445
'72.#6.93.69':445
'72.#6.3.8':139
'72.##.203.104':139
'72.#6.152.6':139
'72.##.141.37':139
'72.##.117.163':139
'72.##.65.101':139
'72.##.147.170':139
'72.##.152.148':139
'72.##.153.82':139
'72.##.38.179':139
'72.#6.93.69':139
'72.##.28.196':139
'72.##.81.151':139
'72.#6.0.1':139
'72.##.55.250':139
'72.#6.4.136':139
'72.##.70.251':139
'72.##.89.175':139
'72.##.87.163':139
'72.##.253.231':139
'72.##.158.242':139
'72.##.164.39':139
'72.##.104.166':139
'72.#6.68.5':139
'72.##.175.119':139
'72.##.90.175':139
'72.##.160.25':139
'72.#6.7.126':139
'72.##.237.99':139
'72.##.25.161':139
'72.##.105.223':139
'72.##.139.249':139
'72.##.217.33':139
'72.##.173.198':139
'72.##.81.193':139
'72.##.66.212':139
'72.#6.201.4':139
'72.#6.76.77':139
'72.#6.63.75':139
'72.##.165.166':139
'72.##.74.165':139
'72.##.139.123':445
'72.##.254.85':445
'72.##.152.222':445
'72.##.205.250':445
'72.##.10.206':445
'72.##.162.132':445
'72.##.27.102':139
'72.##.178.241':445
'72.##.93.254':445
'72.##.241.93':445
'72.##.152.222':139
'72.##.139.123':139
'72.##.10.206':139
'72.##.165.166':9988
'72.##.205.250':139
'72.##.178.241':139
'72.##.162.132':139
'72.##.241.93':139
'72.##.254.85':139
'72.##.93.254':139
'72.##.60.212':139
'72.##.159.44':139
'72.##.158.87':139
'72.#6.49.26':139
'72.##.229.167':139
'72.##.180.102':139
'72.##.28.206':139
'72.##.110.59':139
'72.#6.31.47':139
'72.#6.89.15':139
'72.##.107.57':139
'72.##.121.41':139
'72.##.113.118':139
'72.##.166.56':139
'72.##.75.166':139
'72.##.161.71':139
'72.##.26.226':139
'72.##.137.66':139
'72.#6.2.130':139
'72.##.152.48':139
'72.##.153.82':9988
'72.#6.55.89':445
'72.#6.71.77':445
'72.##.100.16':445
'72.#6.3.8':445
'72.##.143.123':445
'72.##.248.118':445
'72.##.62.197':445
'72.#6.94.93':445
'72.##.108.197':445
'72.##.152.47':445
'72.##.164.39':445
'72.##.104.166':445
'72.#6.68.5':445
'72.##.175.119':445
'72.##.90.175':445
'72.##.160.25':445
'72.#6.7.126':445
'72.##.237.99':445
'72.##.25.161':445
'72.##.105.223':445
'72.##.147.170':9988
'72.##.74.165':9988
'72.#6.152.6':9988
'72.#6.93.69':9988
'72.##.90.175':9988
'72.##.203.104':9988
'72.##.152.148':9988
'72.##.66.212':9988
'72.##.139.249':9988
'72.#6.63.75':9988
'72.#6.4.136':9988
'72.##.55.250':9988
'72.#6.0.1':9988
'72.##.250.206':445
'72.##.28.196':9988
'72.##.87.163':9988
'72.##.89.175':9988
'72.##.158.242':9988
'72.##.81.151':9988
'72.##.253.231':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней