Trojan.Starman.5860

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'61.#7.36.90':139
'61.##.183.36':139
'61.#7.90.39':139
'61.##.120.38':139
'61.##.68.149':139
'61.##.145.232':139
'61.##.155.188':139
'61.#7.65.33':139
'61.##.137.183':139
'61.##.32.240':139
'61.#7.39.40':139
'61.#7.28.55':139
'61.#7.179.5':139
'61.##.107.135':139
'61.##.131.146':445
'61.##.40.146':445
'61.##.213.161':139
'61.##.139.217':139
'61.#7.80.32':139
'61.#7.23.18':139
'61.##.252.226':139
'61.#7.21.43':139
'61.##.139.217':445
'61.##.68.149':445
'61.##.120.38':445
'61.##.213.161':445
'61.#7.39.40':445
'61.#7.36.90':445
'61.##.32.240':445
'61.#7.90.39':445
'61.##.183.36':445
'61.##.137.183':445
'61.#7.80.32':445
'61.##.144.205':139
'61.##.241.169':139
'61.##.143.70':139
'61.##.206.136':139
'61.##.17.207':139
'61.#7.23.18':445
'61.##.252.226':445
'61.#7.179.5':445
'61.##.107.135':445
'61.#7.28.55':445
'61.#7.86.38':139
'61.##.111.86':139
'61.##.186.56':139
'61.##.49.174':139
'61.##.44.173':139
'61.##.74.142':445
'61.##.249.80':445
'61.##.40.146':139
'61.#7.242.1':139
'61.##.131.146':139
'61.#7.9.242':139
'61.##.57.253':139
'61.#7.54.45':139
'61.##.252.209':139
'61.##.194.192':139
'61.##.209.194':139
'61.#7.72.15':139
'61.#7.11.35':139
'61.##.223.215':139
'61.##.234.127':139
'61.##.65.100':139
'61.#7.1.246':445
'61.#7.9.242':445
'61.##.49.174':445
'61.#7.11.35':445
'61.##.223.215':445
'61.#7.72.15':445
'61.##.111.86':445
'61.#7.242.1':445
'61.#7.86.38':445
'61.##.44.173':445
'61.##.186.56':445
'61.##.65.100':445
'61.##.253.82':445
'61.##.194.192':445
'61.##.168.47':445
'61.##.146.21':445
'61.##.120.146':445
'61.#7.54.45':445
'61.##.234.127':445
'61.##.57.253':445
'61.##.209.194':445
'61.##.252.209':445
'61.##.127.106':445
'61.##.170.23':445
'61.##.145.127':445
'61.##.145.15':445
'61.##.239.149':445
'61.##.206.87':139
'61.#7.3.251':139
'61.#7.1.73':139
'61.##.63.155':445
'61.#7.5.217':445
'61.##.138.156':445
'61.##.171.167':445
'61.##.152.116':445
'61.##.104.150':445
'61.##.176.50':445
'61.##.53.208':445
'61.##.249.44':445
'61.##.166.47':445
'61.#7.51.85':445
'61.##.80.153':445
'61.#7.67.5':445
'61.##.160.47':139
'61.##.82.154':139
'61.##.59.215':139
'61.##.102.188':139
'61.##.241.68':139
'61.#7.1.144':139
'61.##.195.200':139
'61.##.195.107':139
'61.#7.65.58':139
'61.##.155.207':139
'61.#7.50.63':139
'61.##.27.170':139
'61.##.227.119':139
'61.##.138.151':139
'61.##.177.175':139
'61.##.108.159':139
'61.##.242.107':139
'61.##.135.143':139
'61.##.208.135':139
'61.##.42.237':139
'61.##.111.157':139
'61.##.117.83':139
'61.##.146.243':139
'61.#7.94.74':139
'61.##.46.204':139
'61.#7.6.59':139
'61.##.223.65':139
'61.##.104.150':139
'61.##.171.167':139
'61.##.53.208':139
'61.##.218.164':139
'61.##.176.50':139
'61.##.151.151':139
'61.##.206.136':445
'61.##.144.205':445
'61.#7.21.43':445
'61.#7.65.33':445
'61.##.145.232':445
'61.##.241.169':445
'61.##.150.241':139
'61.##.155.188':445
'61.##.143.70':445
'61.##.17.207':445
'61.##.152.116':139
'61.##.151.151':445
'61.#7.6.59':445
'61.##.150.241':445
'61.#7.5.217':139
'61.##.63.155':139
'61.#7.94.74':445
'61.##.218.164':445
'61.##.146.243':445
'61.##.223.65':445
'61.##.46.204':445
'61.##.145.127':139
'61.#7.51.85':139
'61.##.166.47':139
'61.##.249.44':139
'61.##.80.153':139
'61.#7.67.5':139
'61.##.170.23':139
'61.##.127.106':139
'61.##.239.149':139
'61.##.138.156':139
'61.##.145.15':139
'61.#7.33.92':445
'61.##.59.213':445
'61.##.133.44':445
'61.##.162.40':445
'61.##.166.250':445
'61.#7.69.92':445
'61.##.234.60':445
'61.##.18.170':445
'61.#7.34.37':445
'61.##.126.119':445
'61.#7.40.79':445
'61.##.84.241':139
'61.##.238.188':139
'61.##.160.121':139
'61.##.128.14':139
'61.##.105.50':139
'61.#7.79.85':445
'61.##.149.58':445
'61.##.162.23':139
'61.##.128.238':139
'61.##.227.128':139
'61.#7.22.14':445
'61.##.138.138':445
'61.##.130.188':445
'61.##.194.20':445
'61.##.219.179':445
'61.##.163.34':445
'61.#7.3.30':445
'61.##.121.180':445
'61.##.77.245':445
'61.##.232.230':445
'61.##.244.232':445
'61.##.128.20':445
'61.#7.58.64':445
'61.##.248.38':445
'61.#7.21.28':445
'61.##.111.95':445
'61.##.63.102':445
'61.##.52.135':445
'61.##.77.223':445
'61.##.113.100':445
'61.#7.70.44':445
'61.##.254.63':445
'61.##.111.95':139
'61.##.63.102':139
'61.#7.22.14':139
'61.#7.69.92':139
'61.##.234.60':139
'61.#7.70.44':139
'61.##.254.63':139
'61.##.248.38':139
'61.#7.21.28':139
'61.#7.58.64':139
'61.##.18.170':139
'61.##.162.40':139
'61.##.166.250':139
'61.#7.40.79':139
'61.##.149.58':139
'61.#7.79.85':139
'61.#7.34.37':139
'61.##.126.119':139
'61.##.59.213':139
'61.##.133.44':139
'61.#7.33.92':139
'61.##.113.100':139
'61.#7.44.20':139
'61.##.125.43':139
'61.##.121.164':139
'61.#7.3.30':139
'61.##.121.180':139
'61.#7.33.5':139
'61.#7.15.23':139
'61.##.101.201':139
'61.##.113.118':139
'61.##.197.199':139
'61.##.77.245':139
'61.##.219.179':139
'61.##.163.34':139
'61.##.128.20':139
'61.##.52.135':139
'61.##.77.223':139
'61.##.232.230':139
'61.##.244.232':139
'61.##.130.188':139
'61.##.194.20':139
'61.##.138.138':139
'61.##.169.144':445
'61.#7.84.8':445
'61.##.102.61':445
'61.##.119.38':445
'61.##.191.101':445
'61.##.81.242':445
'61.##.148.178':445
'61.##.123.56':445
'61.##.110.182':445
'61.##.45.187':445
'61.##.242.190':139
'61.##.95.105':139
'61.##.12.191':139
'61.##.255.80':139
'61.##.71.114':139
'61.##.187.129':139
'61.##.187.198':139
'61.#7.22.27':139
'61.##.198.91':139
'61.##.131.32':139
'61.#7.6.41':139
'61.##.81.248':445
'61.##.74.142':139
'61.##.249.80':139
'61.##.242.190':445
'61.##.187.198':445
'61.#7.22.27':445
'61.##.168.47':139
'61.##.253.82':139
'61.##.120.146':139
'61.#7.1.246':139
'61.##.146.21':139
'61.##.198.91':445
'61.##.71.114':445
'61.##.187.129':445
'61.##.192.21':445
'61.##.143.214':445
'61.##.125.157':445
'61.##.131.32':445
'61.#7.6.41':445
'61.##.12.191':445
'61.##.255.80':445
'61.##.95.105':445
'61.##.227.128':445
'61.##.162.23':445
'61.##.128.238':445
'61.##.84.241':445
'61.##.238.188':445
'61.##.126.119':9988
'61.##.18.170':9988
'61.#7.34.37':9988
'61.##.149.58':9988
'61.##.166.250':9988
'61.##.160.121':445
'61.##.113.118':445
'61.##.197.199':445
'61.##.125.43':445
'61.##.121.164':445
'61.#7.44.20':445
'61.##.128.14':445
'61.##.105.50':445
'61.#7.15.23':445
'61.##.101.201':445
'61.#7.33.5':445
'61.#7.69.92':9988
'61.##.123.56':139
'61.##.81.242':139
'61.##.45.187':139
'61.#7.84.8':139
'61.##.110.182':139
'61.##.125.157':139
'61.##.192.21':139
'61.##.143.214':139
'61.##.148.178':139
'61.##.81.248':139
'61.##.169.144':139
'61.##.138.138':9988
'61.##.244.232':9988
'61.##.111.95':9988
'61.##.234.60':9988
'61.#7.22.14':9988
'61.##.191.101':139
'61.##.102.61':139
'61.##.119.38':139
'61.##.77.245':9988
'61.#7.3.30':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней