Trojan.Starman.5887

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'80.##4.204.143':445
'80.##4.40.63':445
'80.##4.67.193':445
'80.#34.1.66':445
'80.#34.94.1':445
'80.#34.65.8':445
'80.##4.79.38':445
'80.##4.220.209':445
'80.##4.168.76':445
'80.##4.224.79':445
'80.##4.44.158':445
'80.##4.147.253':445
'80.##4.11.15':445
'80.##4.23.69':445
'80.##4.165.17':445
'80.##4.132.150':445
'80.##4.194.25':139
'80.##4.116.214':139
'80.##4.206.124':139
'80.##4.57.236':445
'80.##4.207.179':445
'80.##4.54.12':445
'80.##4.66.54':445
'80.##4.195.57':445
'80.##4.38.138':445
'80.##4.18.222':445
'80.##4.102.24':445
'80.##4.178.227':445
'80.##4.33.15':445
'80.##4.78.217':445
'80.##4.169.78':445
'80.##4.29.88':445
'80.##4.100.244':445
'80.##4.223.173':445
'80.##4.193.62':445
'80.##4.194.25':445
'80.##4.45.122':445
'80.##4.198.218':445
'80.##4.159.116':445
'80.#34.22.1':445
'80.##4.215.230':445
'80.##4.122.175':445
'80.##4.63.196':445
'80.##4.12.37':445
'80.##4.86.187':445
'80.##4.53.238':445
'80.##4.16.185':445
'80.##4.218.95':445
'80.##4.123.228':445
'80.##4.73.131':445
'80.##4.98.73':445
'80.##4.45.243':445
'80.#34.65.8':139
'80.##4.204.143':139
'80.##4.40.63':139
'80.##4.66.54':139
'80.#34.1.66':139
'80.#34.94.1':139
'80.##4.67.193':139
'80.##4.11.15':139
'80.##4.220.209':139
'80.##4.168.76':139
'80.##4.79.38':139
'80.##4.44.158':139
'80.##4.147.253':139
'80.##4.156.68':445
'80.##4.23.69':139
'80.##4.165.17':139
'80.##4.6.251':445
'80.##4.221.190':445
'80.##4.61.123':445
'80.##4.132.150':139
'80.##4.18.222':139
'80.##4.207.179':139
'80.##4.54.12':139
'80.##4.57.236':139
'80.##4.195.57':139
'80.##4.38.138':139
'80.##4.29.88':139
'80.##4.102.24':139
'80.##4.178.227':139
'80.##4.123.228':139
'80.##4.78.217':139
'80.##4.169.78':139
'80.##4.33.15':139
'80.##4.159.116':139
'80.##4.223.173':139
'80.##4.193.62':139
'80.##4.100.244':139
'80.##4.45.122':139
'80.##4.198.218':139
'80.##4.86.187':139
'80.#34.22.1':139
'80.##4.215.230':139
'80.##4.224.79':139
'80.##4.63.196':139
'80.##4.12.37':139
'80.##4.122.175':139
'80.##4.45.243':139
'80.##4.16.185':139
'80.##4.218.95':139
'80.##4.53.238':139
'80.##4.73.131':139
'80.##4.98.73':139
'80.##4.177.170':445
'80.##4.86.216':445
'80.##4.229.2':445
'80.##4.183.2':445
'80.##4.253.104':445
'80.##4.158.48':445
'80.##4.199.229':445
'80.##4.69.148':445
'80.##4.120.168':445
'80.##4.71.120':445
'80.##4.94.199':445
'80.##4.200.23':445
'80.##4.40.33':445
'80.##4.65.171':445
'80.##4.199.125':445
'80.##4.165.249':445
'80.##4.202.175':139
'80.##4.81.169':445
'80.##4.38.91':445
'80.##4.60.43':445
'80.##4.74.93':445
'80.##4.138.244':445
'80.##4.58.94':445
'80.##4.119.66':445
'80.#34.8.26':445
'80.##4.0.236':445
'80.##4.178.92':445
'80.##4.85.178':445
'80.##4.250.33':445
'80.##4.79.126':445
'80.##4.79.182':445
'80.##4.92.217':445
'80.##4.80.117':445
'80.##4.29.219':445
'80.##4.92.153':445
'80.##4.202.175':445
'80.##4.143.233':445
'80.##4.156.90':445
'80.##4.80.32':445
'80.##4.202.97':445
'80.##4.17.239':445
'80.##4.114.25':445
'80.#34.9.58':445
'80.##4.134.235':445
'80.##4.110.135':445
'80.#34.3.96':445
'80.##4.48.159':445
'80.##4.78.51':445
'80.##4.126.253':445
'80.##4.87.166':445
'80.##4.143.115':445
'80.##4.4.227':445
'80.##4.158.48':139
'80.##4.177.170':139
'80.##4.86.216':139
'80.##4.58.94':139
'80.##4.183.2':139
'80.##4.253.104':139
'80.##4.229.2':139
'80.##4.40.33':139
'80.##4.69.148':139
'80.##4.120.168':139
'80.##4.199.229':139
'80.##4.94.199':139
'80.##4.200.23':139
'80.##4.38.91':139
'80.##4.65.171':139
'80.##4.199.125':139
'80.##4.116.214':445
'80.##4.206.124':445
'80.##4.81.169':139
'80.##4.165.249':139
'80.##4.0.236':139
'80.##4.74.93':139
'80.##4.138.244':139
'80.##4.60.43':139
'80.##4.119.66':139
'80.#34.8.26':139
'80.##4.92.217':139
'80.##4.178.92':139
'80.##4.85.178':139
'80.##4.126.253':139
'80.##4.79.126':139
'80.##4.79.182':139
'80.##4.250.33':139
'80.##4.80.32':139
'80.##4.29.219':139
'80.##4.92.153':139
'80.##4.80.117':139
'80.##4.143.233':139
'80.##4.156.90':139
'80.##4.110.135':139
'80.##4.202.97':139
'80.##4.17.239':139
'80.##4.71.120':139
'80.#34.9.58':139
'80.##4.134.235':139
'80.##4.114.25':139
'80.##4.4.227':139
'80.##4.48.159':139
'80.##4.78.51':139
'80.#34.3.96':139
'80.##4.87.166':139
'80.##4.143.115':139
'80.##4.80.91':445
'80.##4.45.142':445
'80.##4.53.136':445
'80.##4.152.0':445
'80.##4.210.196':445
'80.##4.222.84':445
'80.##4.199.170':445
'80.##4.1.174':445
'80.##4.104.250':445
'80.##4.43.19':445
'80.##4.9.119':445
'80.#34.93.9':445
'80.##4.138.92':445
'80.##4.146.46':445
'80.##4.100.59':445
'80.##4.54.241':445
'80.##4.133.132':445
'80.##4.84.12':445
'80.##4.80.178':445
'80.##4.89.106':445
'80.##4.234.26':445
'80.##4.187.141':445
'80.##4.99.35':445
'80.##4.29.24':445
'80.#34.39.6':445
'80.##4.228.38':445
'80.##4.113.151':445
'80.#34.1.68':445
'80.##4.114.181':445
'80.##4.99.37':445
'80.##4.72.99':445
'80.##4.10.73':445
'80.##4.69.12':445
'80.##4.244.221':445
'80.##4.80.91':9988
'80.##4.187.141':9988
'80.##4.86.106':445
'80.##4.163.157':445
'80.##4.43.163':445
'80.##4.24.177':445
'80.##4.28.252':445
'80.##4.1.202':445
'80.##4.207.76':445
'80.##4.133.59':445
'80.##4.177.219':445
'80.##4.102.26':445
'80.##4.10.225':445
'80.##4.225.210':445
'80.##4.33.232':445
'80.##4.59.252':445
'80.##4.228.203':445
'80.##4.14.247':445
'80.##4.222.84':139
'80.##4.80.91':139
'80.##4.45.142':139
'80.##4.99.35':139
'80.##4.152.0':139
'80.##4.210.196':139
'80.##4.53.136':139
'80.##4.138.92':139
'80.##4.1.174':139
'80.##4.104.250':139
'80.##4.199.170':139
'80.##4.9.119':139
'80.#34.93.9':139
'80.##4.146.46':139
'80.##4.84.12':139
'80.##4.80.178':139
'80.##4.46.89':139
'80.##4.89.106':139
'80.##4.100.59':139
'80.##4.133.132':139
'80.##4.228.38':139
'80.##4.234.26':139
'80.##4.187.141':139
'80.##4.54.241':139
'80.##4.29.24':139
'80.#34.39.6':139
'80.##4.10.73':139
'80.##4.113.151':139
'80.#34.1.68':139
'80.##4.33.232':139
'80.##4.99.37':139
'80.##4.72.99':139
'80.##4.114.181':139
'80.##4.43.163':139
'80.##4.244.221':139
'80.##4.46.89':445
'80.##4.69.12':139
'80.##4.86.106':139
'80.##4.163.157':139
'80.##4.177.219':139
'80.##4.24.177':139
'80.##4.28.252':139
'80.##4.43.19':139
'80.##4.207.76':139
'80.##4.133.59':139
'80.##4.1.202':139
'80.##4.14.247':139
'80.##4.225.210':139
'80.##4.10.225':139
'80.##4.102.26':139
'80.##4.59.252':139
'80.##4.228.203':139
'80.##4.239.39':445
'80.##4.40.239':445
'80.##4.101.175':445
'80.##4.27.11':445
'80.##4.179.26':445
'80.##4.105.6':445
'80.##4.141.54':445
'80.##4.6.132':445
'80.##4.242.5':445
'80.##4.190.153':445
'80.##4.87.91':445
'80.##4.78.125':445
'80.##4.70.248':445
'80.##4.61.123':139
'80.##4.156.68':139
'80.##4.236.138':445
'80.##4.232.25':139
'80.##4.6.251':139
'80.##4.221.190':139
'80.##4.62.119':445
'80.##4.254.92':445
'80.##4.225.254':445
'80.##4.148.192':445
'80.##4.216.87':445
'80.##4.137.228':445
'80.##4.63.209':445
'80.##4.146.22':445
'80.##4.78.41':445
'80.##4.13.155':445
'80.##4.174.208':445
'80.##4.248.3':445
'80.##4.57.118':445
'80.##4.4.213':445
'80.##4.103.181':445
'80.##4.80.144':445
'80.##4.232.25':445
'80.##4.189.12':445
'80.##4.33.160':445
'80.##4.127.19':445
'80.##4.169.225':445
'80.##4.46.225':445
'80.##4.13.252':445
'80.##4.183.131':445
'80.##4.171.231':445
'80.##4.82.154':445
'80.##4.243.140':445
'80.##4.82.124':445
'80.##4.234.227':445
'80.##4.163.234':445
'80.##4.65.149':445
'80.##4.93.17':445
'80.##4.30.185':445
'80.##4.105.6':139
'80.##4.239.39':139
'80.##4.40.239':139
'80.##4.148.192':139
'80.##4.27.11':139
'80.##4.179.26':139
'80.##4.101.175':139
'80.##4.70.248':139
'80.##4.6.132':139
'80.##4.242.5':139
'80.##4.141.54':139
'80.##4.78.125':139
'80.##4.87.91':139
'80.##4.59.252':9988
'80.#34.1.68':9988
'80.##4.163.157':9988
'80.##4.80.178':9988
'80.#34.93.9':9988
'80.##4.53.136':9988
'80.##4.236.138':139
'80.##4.63.209':139
'80.##4.254.92':139
'80.##4.225.254':139
'80.##4.62.119':139
'80.##4.216.87':139
'80.##4.137.228':139
'80.##4.57.118':139
'80.##4.146.22':139
'80.##4.78.41':139
'80.##4.163.234':139
'80.##4.174.208':139
'80.##4.248.3':139
'80.##4.13.155':139
'80.##4.127.19':139
'80.##4.103.181':139
'80.##4.80.144':139
'80.##4.4.213':139
'80.##4.189.12':139
'80.##4.33.160':139
'80.##4.82.154':139
'80.##4.169.225':139
'80.##4.46.225':139
'80.##4.190.153':139
'80.##4.183.131':139
'80.##4.171.231':139
'80.##4.13.252':139
'80.##4.30.185':139
'80.##4.82.124':139
'80.##4.234.227':139
'80.##4.243.140':139
'80.##4.65.149':139
'80.##4.93.17':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней