Trojan.Starman.5755

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'84.##0.138.230':139
'84.##0.234.203':139
'84.##0.76.239':139
'84.##0.113.102':139
'84.##0.111.206':139
'84.##0.17.87':139
'84.##0.122.138':139
'84.##0.123.14':139
'84.##0.93.183':139
'84.##0.60.188':139
'84.##0.253.4':139
'84.##0.85.224':139
'84.##0.108.100':139
'84.##0.61.148':139
'84.##0.29.34':139
'84.##0.85.79':139
'84.##0.88.141':139
'84.##0.210.23':139
'84.##0.193.77':139
'84.##0.53.50':139
'84.##0.98.150':139
'84.##0.61.148':445
'84.##0.85.224':445
'84.##0.85.79':445
'84.##0.95.230':445
'84.##0.29.34':445
'84.##0.193.77':445
'84.##0.88.141':445
'84.##0.98.150':445
'84.##0.108.100':445
'84.##0.53.50':445
'84.##0.166.194':445
'84.##0.234.188':139
'84.##0.107.156':139
'84.##0.189.180':139
'84.##0.135.179':139
'84.##0.180.238':139
'84.##0.47.136':445
'84.##0.195.42':445
'84.##0.57.97':445
'84.##0.13.153':445
'84.##0.212.173':445
'84.##0.95.230':139
'84.##0.123.215':139
'84.##0.31.212':139
'84.#50.7.34':139
'84.#50.16.9':139
'84.##0.27.191':139
'84.##0.6.222':445
'84.##0.65.174':445
'84.##0.32.139':445
'84.#50.69.8':139
'84.##0.114.209':139
'84.##0.78.222':139
'84.##0.91.47':139
'84.##0.237.30':139
'84.##0.65.174':139
'84.##0.32.139':139
'84.##0.6.222':139
'84.##0.154.171':139
'84.##0.222.153':139
'84.##0.82.195':139
'84.##0.35.141':139
'84.##0.77.36':139
'84.##0.114.209':445
'84.##0.13.153':139
'84.#50.69.8':445
'84.##0.123.215':445
'84.##0.31.212':445
'84.##0.195.42':139
'84.##0.166.194':139
'84.##0.47.136':139
'84.##0.212.173':139
'84.##0.57.97':139
'84.#50.7.34':445
'84.##0.77.36':445
'84.##0.82.195':445
'84.##0.35.141':445
'84.##0.91.47':445
'84.##0.237.30':445
'84.#50.16.9':445
'84.##0.27.191':445
'84.##0.78.222':445
'84.##0.154.171':445
'84.##0.222.153':445
'84.##0.210.23':445
'84.##0.82.111':139
'84.##0.181.141':139
'84.#50.61.3':139
'84.##0.233.154':139
'84.##0.160.2':139
'84.##0.112.77':139
'84.##0.136.90':139
'84.##0.16.60':139
'84.##0.95.144':139
'84.##0.59.135':139
'84.##0.154.237':139
'84.##0.178.75':445
'84.##0.22.167':445
'84.##0.61.49':445
'84.##0.28.157':445
'84.##0.37.49':445
'84.##0.43.208':445
'84.##0.31.69':139
'84.##0.43.148':445
'84.##0.84.156':445
'84.#50.26.3':445
'84.##0.142.13':139
'84.##0.223.37':139
'84.##0.135.80':139
'84.##0.141.26':139
'84.##0.10.141':139
'84.##0.10.160':139
'84.##0.115.11':139
'84.##0.60.212':139
'84.##0.199.241':139
'84.##0.203.241':139
'84.##0.28.35':139
'84.##0.154.86':139
'84.##0.115.179':139
'84.##0.163.138':139
'84.##0.85.169':139
'84.##0.174.156':139
'84.##0.149.68':139
'84.#50.19.4':139
'84.##0.69.19':139
'84.##0.42.115':139
'84.##0.19.42':139
'84.##0.0.171':445
'84.##0.234.188':445
'84.##0.107.156':445
'84.##0.189.180':445
'84.##0.135.179':445
'84.##0.180.238':445
'84.#50.2.1':139
'84.##0.85.63':139
'84.##0.174.63':139
'84.##0.35.116':139
'84.#50.8.35':139
'84.##0.122.138':445
'84.##0.76.239':445
'84.##0.138.230':445
'84.##0.111.206':445
'84.##0.253.4':445
'84.##0.113.102':445
'84.##0.123.14':445
'84.##0.17.87':445
'84.##0.60.188':445
'84.##0.234.203':445
'84.##0.93.183':445
'84.#50.8.35':445
'84.##0.174.63':445
'84.##0.35.116':445
'84.##0.43.148':139
'84.##0.43.208':139
'84.##0.216.110':445
'84.##0.144.20':445
'84.##0.15.253':445
'84.#50.2.1':445
'84.##0.85.63':445
'84.#50.26.3':139
'84.##0.0.171':139
'84.##0.28.157':139
'84.##0.144.20':139
'84.##0.15.253':139
'84.##0.216.110':139
'84.##0.22.167':139
'84.##0.84.156':139
'84.##0.178.75':139
'84.##0.37.49':139
'84.##0.61.49':139
'84.##0.165.86':445
'84.##0.142.220':445
'84.##0.65.56':445
'84.##0.224.161':445
'84.##0.122.188':445
'84.##0.156.215':445
'84.##0.25.97':445
'84.##0.48.180':445
'84.##0.211.111':445
'84.##0.67.162':445
'84.##0.195.196':445
'84.##0.128.26':139
'84.##0.149.19':139
'84.##0.95.118':139
'84.##0.79.18':139
'84.##0.68.144':139
'84.##0.18.169':445
'84.##0.46.224':445
'84.##0.63.221':139
'84.##0.68.149':139
'84.##0.184.8':139
'84.##0.52.173':445
'84.##0.25.145':445
'84.##0.119.202':445
'84.##0.18.224':445
'84.##0.171.181':445
'84.##0.102.25':445
'84.##0.11.103':445
'84.##0.7.253':445
'84.##0.53.193':445
'84.##0.211.53':445
'84.##0.40.128':445
'84.##0.187.153':445
'84.##0.119.124':445
'84.##0.201.111':445
'84.##0.104.149':445
'84.##0.116.222':445
'84.##0.231.29':445
'84.##0.199.86':445
'84.##0.172.147':445
'84.##0.43.105':445
'84.##0.159.36':445
'84.#50.0.47':139
'84.##0.116.222':139
'84.##0.201.111':139
'84.##0.104.149':139
'84.##0.156.215':139
'84.##0.25.97':139
'84.##0.159.36':139
'84.##0.172.147':139
'84.##0.43.105':139
'84.##0.187.153':139
'84.##0.119.124':139
'84.##0.48.180':139
'84.##0.195.196':139
'84.##0.122.188':139
'84.##0.46.224':139
'84.##0.224.161':139
'84.##0.18.169':139
'84.##0.211.111':139
'84.##0.67.162':139
'84.##0.142.220':139
'84.##0.165.86':139
'84.##0.65.56':139
'84.##0.53.112':139
'84.##0.162.53':139
'84.##0.180.235':139
'84.##0.102.25':139
'84.##0.11.103':139
'84.##0.72.181':139
'84.##0.132.141':139
'84.##0.121.246':139
'84.##0.99.34':139
'84.##0.46.82':139
'84.##0.7.253':139
'84.##0.18.224':139
'84.##0.171.181':139
'84.##0.40.128':139
'84.##0.231.29':139
'84.##0.199.86':139
'84.##0.53.193':139
'84.##0.211.53':139
'84.##0.25.145':139
'84.##0.119.202':139
'84.##0.52.173':139
'84.##0.180.235':445
'84.##0.152.77':445
'84.##0.76.185':445
'84.##0.239.63':445
'84.##0.12.17':139
'84.##0.47.113':139
'84.##0.195.155':445
'84.##0.2.196':445
'84.##0.47.245':445
'84.##0.143.58':445
'84.##0.180.204':445
'84.##0.77.226':139
'84.##0.76.125':139
'84.##0.116.35':139
'84.##0.56.232':139
'84.##0.231.157':139
'84.##0.133.219':139
'84.##0.195.17':139
'84.##0.223.115':139
'84.##0.103.49':139
'84.##0.49.128':139
'84.##0.198.246':139
'84.##0.198.246':445
'84.##0.103.49':445
'84.##0.49.128':445
'84.##0.76.125':445
'84.##0.116.35':445
'84.##0.12.17':445
'84.##0.47.113':445
'84.##0.77.226':445
'84.##0.195.17':445
'84.##0.223.115':445
'84.##0.56.232':445
'84.##0.67.29':445
'84.##0.104.153':445
'84.##0.71.119':445
'84.##0.214.217':445
'84.##0.230.146':445
'84.##0.231.157':445
'84.##0.133.219':445
'84.##0.157.232':445
'84.##0.61.219':445
'84.##0.167.7':445
'84.##0.157.232':139
'84.##0.184.8':445
'84.##0.63.221':445
'84.##0.68.149':445
'84.##0.128.26':445
'84.##0.149.19':445
'84.##0.122.188':9988
'84.##0.231.29':9988
'84.##0.142.220':9988
'84.##0.195.196':9988
'84.##0.46.224':9988
'84.##0.95.118':445
'84.##0.46.82':445
'84.##0.121.246':445
'84.##0.99.34':445
'84.##0.53.112':445
'84.##0.162.53':445
'84.##0.79.18':445
'84.##0.68.144':445
'84.#50.0.47':445
'84.##0.72.181':445
'84.##0.132.141':445
'84.##0.214.217':139
'84.##0.230.146':139
'84.##0.2.196':139
'84.##0.47.245':139
'84.##0.195.155':139
'84.##0.61.219':139
'84.##0.167.7':139
'84.##0.104.153':139
'84.##0.71.119':139
'84.##0.67.29':139
'84.##0.180.204':139
'84.##0.25.145':9988
'84.#50.0.47':9988
'84.##0.18.224':9988
'84.##0.199.86':9988
'84.##0.40.128':9988
'84.##0.76.185':139
'84.##0.143.58':139
'84.##0.152.77':139
'84.##0.95.118':9988
'84.##0.239.63':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней