Trojan.Starman.5635

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'88.##.158.59':139
'88.##.53.193':139
'88.##.59.139':139
'88.##.53.186':139
'88.##.45.209':139
'88.#3.45.58':139
'88.##.114.71':139
'88.##.204.76':139
'88.##.207.239':139
'88.##.109.90':139
'88.##.193.227':139
'88.##.88.157':139
'88.#3.8.136':139
'88.##.156.198':139
'88.#3.9.101':139
'88.#3.62.97':139
'88.##.157.235':139
'88.#3.3.158':139
'88.##.23.180':139
'88.#3.240.7':139
'88.#3.22.6':139
'88.##.89.101':139
'88.#3.240.7':445
'88.#3.22.6':445
'88.#3.8.136':445
'88.##.156.198':445
'88.##.88.157':445
'88.##.193.227':445
'88.##.53.186':445
'88.#3.3.158':445
'88.##.23.180':445
'88.##.157.235':445
'88.#3.62.97':445
'88.##.221.48':139
'88.##.40.232':139
'88.#3.15.89':139
'88.#3.24.67':139
'88.#3.8.102':139
'88.##.100.225':445
'88.#3.9.101':445
'88.#3.1.88':445
'88.##.105.115':139
'88.##.112.101':445
'88.##.206.217':139
'88.##.34.240':139
'88.##.217.51':139
'88.#3.5.204':139
'88.##.143.246':139
'88.##.163.189':139
'88.##.43.183':445
'88.##.201.47':139
'88.##.78.132':139
'88.##.85.175':139
'88.##.147.168':139
'88.##.29.110':139
'88.##.152.75':139
'88.##.132.56':139
'88.##.43.183':139
'88.#3.57.12':139
'88.##.209.234':139
'88.##.40.147':139
'88.##.206.216':139
'88.#3.143.3':139
'88.#3.31.88':139
'88.#3.57.12':445
'88.##.78.132':445
'88.##.85.175':445
'88.##.34.240':445
'88.##.217.51':445
'88.##.206.217':445
'88.#3.1.88':139
'88.##.100.225':139
'88.##.112.101':139
'88.##.201.47':445
'88.##.163.189':445
'88.##.143.246':445
'88.#3.143.3':445
'88.#3.31.88':445
'88.##.152.75':445
'88.##.132.56':445
'88.##.29.110':445
'88.##.147.168':445
'88.#3.5.204':445
'88.##.40.147':445
'88.##.206.216':445
'88.##.209.234':445
'88.##.45.209':445
'88.##.235.111':139
'88.##.123.235':139
'88.##.111.18':139
'88.#3.48.23':445
'88.#3.85.65':139
'88.##.27.101':139
'88.##.149.225':139
'88.#3.35.30':139
'88.#3.5.124':139
'88.##.249.181':139
'88.##.135.224':445
'88.##.131.38':445
'88.##.28.117':445
'88.##.91.104':445
'88.##.67.192':445
'88.##.243.26':445
'88.##.231.95':445
'88.##.215.75':445
'88.##.200.248':445
'88.#3.56.21':445
'88.##.81.157':445
'88.##.50.127':139
'88.##.117.203':139
'88.#3.1.118':139
'88.##.95.224':139
'88.##.170.59':139
'88.#3.161.6':139
'88.#3.6.221':139
'88.##.230.111':139
'88.##.21.149':139
'88.##.195.214':139
'88.#3.37.50':139
'88.##.130.37':139
'88.##.249.71':139
'88.##.157.249':139
'88.##.71.157':139
'88.##.62.118':139
'88.##.168.230':139
'88.##.133.232':139
'88.##.181.110':139
'88.##.232.88':139
'88.##.26.194':139
'88.##.150.27':139
'88.##.105.115':445
'88.#3.80.38':139
'88.##.40.232':445
'88.#3.15.89':445
'88.##.221.48':445
'88.##.24.248':139
'88.#3.22.75':139
'88.#3.48.36':139
'88.#3.27.80':139
'88.##.138.117':139
'88.#3.8.102':445
'88.##.207.239':445
'88.##.109.90':445
'88.##.53.193':445
'88.##.59.139':445
'88.##.158.59':445
'88.##.89.101':445
'88.#3.24.67':445
'88.##.114.71':445
'88.##.204.76':445
'88.#3.45.58':445
'88.##.228.45':139
'88.#3.27.80':445
'88.##.138.117':445
'88.#3.80.38':445
'88.##.135.224':139
'88.#3.48.23':139
'88.##.228.45':445
'88.##.212.253':445
'88.##.24.248':445
'88.#3.48.36':445
'88.#3.22.75':445
'88.##.215.75':139
'88.##.91.104':139
'88.##.131.38':139
'88.##.243.26':139
'88.##.212.253':139
'88.##.67.192':139
'88.##.200.248':139
'88.##.231.95':139
'88.##.81.157':139
'88.##.28.117':139
'88.#3.56.21':139
'88.##.108.36':445
'88.#3.10.7':445
'88.#3.79.64':445
'88.##.17.240':445
'88.##.179.204':445
'88.##.142.201':445
'88.##.196.201':445
'88.##.205.25':445
'88.##.140.65':445
'88.#3.67.37':445
'88.##.127.44':445
'88.#3.87.84':445
'88.##.47.100':139
'88.##.208.159':139
'88.##.111.112':139
'88.##.107.59':139
'88.##.29.230':139
'88.#3.58.79':445
'88.##.183.47':445
'88.##.101.159':139
'88.##.21.132':139
'88.##.82.151':139
'88.#3.61.92':445
'88.##.189.45':445
'88.##.164.240':445
'88.##.152.29':445
'88.##.47.111':445
'88.##.155.59':445
'88.##.226.152':445
'88.##.22.174':445
'88.##.28.213':445
'88.#3.6.103':445
'88.##.81.199':445
'88.##.144.13':445
'88.##.105.71':445
'88.##.133.60':445
'88.##.231.110':445
'88.##.91.170':445
'88.##.118.38':445
'88.#3.2.100':445
'88.#3.228.2':445
'88.##.136.31':445
'88.##.240.157':445
'88.##.106.16':445
'88.##.91.170':139
'88.##.118.38':139
'88.#3.61.92':139
'88.##.196.201':139
'88.##.205.25':139
'88.##.240.157':139
'88.##.106.16':139
'88.##.133.60':139
'88.##.231.110':139
'88.##.105.71':139
'88.##.140.65':139
'88.##.179.204':139
'88.##.142.201':139
'88.#3.87.84':139
'88.#3.58.79':139
'88.##.183.47':139
'88.#3.67.37':139
'88.##.127.44':139
'88.#3.79.64':139
'88.##.17.240':139
'88.#3.10.7':139
'88.##.136.31':139
'88.##.34.149':139
'88.##.240.221':139
'88.##.209.34':139
'88.##.226.152':139
'88.##.22.174':139
'88.##.159.37':139
'88.##.59.228':139
'88.##.110.216':139
'88.##.196.68':139
'88.##.215.239':139
'88.##.28.213':139
'88.##.47.111':139
'88.##.155.59':139
'88.##.144.13':139
'88.#3.2.100':139
'88.#3.228.2':139
'88.#3.6.103':139
'88.##.81.199':139
'88.##.164.240':139
'88.##.152.29':139
'88.##.189.45':139
'88.##.209.34':445
'88.##.152.61':445
'88.##.28.152':445
'88.##.137.127':445
'88.#3.5.75':139
'88.##.108.36':139
'88.#3.4.174':445
'88.##.174.122':445
'88.##.107.24':445
'88.##.178.167':445
'88.##.93.124':445
'88.##.12.197':139
'88.##.171.218':139
'88.##.151.203':139
'88.##.75.107':139
'88.##.180.92':139
'88.##.93.180':139
'88.##.177.164':139
'88.#3.37.48':139
'88.#3.3.88':139
'88.#3.5.152':139
'88.##.51.178':139
'88.##.56.238':445
'88.#3.5.152':445
'88.##.51.178':445
'88.##.151.203':445
'88.##.75.107':445
'88.##.171.218':445
'88.##.12.197':445
'88.#3.5.75':445
'88.#3.37.48':445
'88.#3.3.88':445
'88.##.177.164':445
'88.##.93.180':445
'88.#3.2.85':445
'88.#3.65.2':445
'88.#3.35.54':445
'88.##.220.20':445
'88.##.211.184':445
'88.##.16.132':445
'88.##.49.110':445
'88.##.180.92':445
'88.##.223.166':445
'88.##.122.185':445
'88.##.101.159':445
'88.#3.58.79':9988
'88.##.82.151':445
'88.##.208.159':445
'88.##.21.132':445
'88.##.127.44':9988
'88.##.196.201':9988
'88.#3.67.37':9988
'88.##.183.47':9988
'88.##.17.240':9988
'88.##.47.100':445
'88.##.215.239':445
'88.##.110.216':445
'88.##.196.68':445
'88.##.34.149':445
'88.##.240.221':445
'88.##.29.230':445
'88.##.111.112':445
'88.##.107.59':445
'88.##.159.37':445
'88.##.59.228':445
'88.##.205.25':9988
'88.#3.35.54':139
'88.#3.2.85':139
'88.##.211.184':139
'88.#3.4.174':139
'88.##.56.238':139
'88.##.49.110':139
'88.##.16.132':139
'88.##.122.185':139
'88.#3.65.2':139
'88.##.223.166':139
'88.##.174.122':139
'88.##.137.127':139
'88.##.152.61':139
'88.##.189.45':9988
'88.#3.61.92':9988
'88.##.91.170':9988
'88.##.107.24':139
'88.##.220.20':139
'88.##.93.124':139
'88.##.28.152':139
'88.##.178.167':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней