Trojan.Starman.5788

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'72.##8.246.65':445
'72.##8.171.68':445
'72.##8.161.106':445
'72.#08.3.22':445
'72.##8.43.156':445
'72.##8.123.17':139
'72.##8.122.23':139
'72.##8.145.132':445
'72.##8.245.237':139
'72.##8.244.10':445
'72.##8.143.135':445
'72.##8.224.76':445
'72.##8.156.232':445
'72.##8.236.183':445
'72.##8.61.111':445
'72.##8.11.18':445
'72.##8.20.197':445
'72.##8.71.123':445
'72.##8.179.9':445
'72.##8.115.189':139
'72.##8.103.12':139
'72.##8.60.91':139
'72.##8.133.83':139
'72.##8.46.72':139
'72.##8.224.212':139
'72.##8.197.252':139
'72.##8.193.173':139
'72.##8.14.19':139
'72.##8.20.180':139
'72.##8.82.28':139
'72.##8.252.176':139
'72.##8.127.131':139
'72.##8.188.206':139
'72.##8.157.199':139
'72.##8.73.119':139
'72.##8.81.11':139
'72.##8.153.59':139
'72.##8.240.126':139
'72.##8.101.109':139
'72.##8.232.225':445
'72.##8.184.119':445
'72.##8.48.31':445
'72.##8.16.104':445
'72.##8.46.83':445
'72.##8.218.65':445
'72.##8.37.66':445
'72.##8.70.200':445
'72.##8.93.166':445
'72.##8.244.20':445
'72.##8.103.189':445
'72.##8.171.68':139
'72.##8.43.156':139
'72.#08.3.22':139
'72.##8.246.65':139
'72.##8.145.132':139
'72.##8.59.190':445
'72.##8.189.59':445
'72.##8.141.241':445
'72.##8.75.199':445
'72.##8.249.205':445
'72.##8.127.249':445
'72.##8.48.166':445
'72.##8.61.40':445
'72.##8.5.217':445
'72.##8.45.163':445
'72.##8.37.32':445
'72.##8.94.76':445
'72.##8.12.229':445
'72.##8.92.236':445
'72.##8.143.96':445
'72.##8.239.100':445
'72.##8.12.74':445
'72.##8.223.249':445
'72.##8.124.218':445
'72.##8.179.48':445
'72.##8.37.139':445
'72.##8.163.239':445
'72.##8.233.230':445
'72.##8.193.30':445
'72.##8.51.125':445
'72.##8.64.201':445
'72.##8.193.173':445
'72.##8.33.29':445
'72.##8.179.152':445
'72.##8.108.124':445
'72.##8.100.248':445
'72.##8.157.152':445
'72.##8.50.141':445
'72.##8.197.252':445
'72.##8.133.83':445
'72.##8.46.72':445
'72.##8.153.59':445
'72.##8.82.28':445
'72.##8.103.12':445
'72.##8.14.19':445
'72.##8.20.180':445
'72.##8.60.91':445
'72.##8.224.212':445
'72.##8.139.100':445
'72.##8.245.206':445
'72.##8.49.201':445
'72.##8.189.10':445
'72.##8.206.142':445
'72.#08.9.66':445
'72.##8.35.155':445
'72.##8.101.117':445
'72.##8.231.93':445
'72.##8.98.225':445
'72.##8.187.166':445
'72.##8.6.189':445
'72.##8.48.212':445
'72.##8.50.139':445
'72.##8.189.50':445
'72.##8.62.170':445
'72.##8.111.233':445
'72.##8.160.157':445
'72.##8.67.62':445
'72.##8.70.67':445
'72.##8.81.11':445
'72.##8.48.212':139
'72.##8.62.170':139
'72.##8.189.50':139
'72.##8.6.189':139
'72.##8.67.62':139
'72.##8.160.157':139
'72.##8.187.166':139
'72.##8.70.67':139
'72.##8.111.233':139
'72.##8.50.139':139
'72.##8.64.201':139
'72.##8.179.152':139
'72.##8.33.29':139
'72.##8.51.125':139
'72.##8.157.152':139
'72.##8.100.248':139
'72.##8.139.100':139
'72.##8.50.141':139
'72.##8.108.124':139
'72.##8.189.10':139
'72.##8.188.206':445
'72.##8.157.199':445
'72.##8.122.23':445
'72.##8.115.189':445
'72.##8.252.176':445
'72.##8.240.126':445
'72.##8.101.109':445
'72.##8.127.131':445
'72.##8.73.119':445
'72.##8.123.17':445
'72.##8.49.201':139
'72.#08.9.66':139
'72.##8.206.142':139
'72.##8.245.206':139
'72.##8.231.93':139
'72.##8.101.117':139
'72.##8.245.237':445
'72.##8.98.225':139
'72.##8.35.155':139
'72.##8.161.106':139
'72.##8.24.250':445
'72.##8.18.110':445
'72.##8.147.119':139
'72.##8.156.25':445
'72.##8.118.156':445
'72.##8.27.231':445
'72.##8.114.108':445
'72.##8.56.159':445
'72.##8.137.180':445
'72.##8.92.87':139
'72.##8.58.244':139
'72.##8.80.205':139
'72.##8.26.143':139
'72.##8.212.12':139
'72.##8.81.119':139
'72.##8.52.229':139
'72.##8.124.72':139
'72.##8.221.64':139
'72.##8.235.252':139
'72.##8.156.196':445
'72.#08.77.7':445
'72.##8.95.97':445
'72.##8.131.179':445
'72.##8.152.58':445
'72.##8.172.194':445
'72.##8.80.147':445
'72.##8.111.90':445
'72.##8.16.107':445
'72.##8.116.157':445
'72.##8.195.29':445
'72.##8.165.68':445
'72.##8.84.47':445
'72.##8.43.76':445
'72.##8.45.221':445
'72.##8.22.209':445
'72.##8.6.194':445
'72.##8.123.234':445
'72.##8.132.57':445
'72.##8.19.150':445
'72.##8.210.151':139
'72.##8.84.47':139
'72.##8.22.209':139
'72.##8.45.221':139
'72.##8.165.68':139
'72.##8.132.57':139
'72.##8.123.234':139
'72.##8.195.29':139
'72.##8.19.150':139
'72.##8.6.194':139
'72.##8.43.76':139
'72.##8.156.25':139
'72.##8.118.156':139
'72.##8.18.110':139
'72.##8.24.250':139
'72.##8.56.159':139
'72.##8.114.108':139
'72.##8.156.196':139
'72.##8.137.180':139
'72.##8.27.231':139
'72.##8.131.179':139
'72.##8.57.60':139
'72.##8.10.159':139
'72.##8.60.110':139
'72.##8.172.216':139
'72.##8.100.112':139
'72.##8.163.80':139
'72.##8.198.117':139
'72.##8.225.234':139
'72.##8.57.226':139
'72.##8.110.193':139
'72.##8.95.97':139
'72.##8.172.194':139
'72.##8.152.58':139
'72.#08.77.7':139
'72.##8.16.107':139
'72.##8.111.90':139
'72.##8.11.168':139
'72.##8.116.157':139
'72.##8.80.147':139
'72.##8.12.74':139
'72.##8.179.48':139
'72.##8.124.218':139
'72.##8.239.100':139
'72.##8.233.230':139
'72.##8.163.239':139
'72.##8.143.96':139
'72.##8.193.30':139
'72.##8.37.139':139
'72.##8.223.249':139
'72.##8.48.31':139
'72.##8.218.65':139
'72.##8.46.83':139
'72.##8.184.119':139
'72.##8.93.166':139
'72.##8.70.200':139
'72.##8.249.205':139
'72.##8.244.20':139
'72.##8.37.66':139
'72.##8.61.40':139
'72.##8.224.76':139
'72.##8.61.111':139
'72.##8.236.183':139
'72.##8.143.135':139
'72.##8.71.123':139
'72.##8.20.197':139
'72.##8.244.10':139
'72.##8.179.9':139
'72.##8.11.18':139
'72.##8.156.232':139
'72.##8.48.166':139
'72.##8.45.163':139
'72.##8.5.217':139
'72.##8.127.249':139
'72.##8.12.229':139
'72.##8.94.76':139
'72.##8.232.225':139
'72.##8.92.236':139
'72.##8.37.32':139
'72.##8.16.104':139
'72.##8.26.143':445
'72.##8.212.12':445
'72.##8.198.117':445
'72.##8.210.151':445
'72.##8.58.244':445
'72.##8.221.64':445
'72.##8.235.252':445
'72.##8.80.205':445
'72.##8.81.119':445
'72.##8.163.80':445
'72.##8.60.110':445
'72.##8.172.216':445
'72.##8.11.168':445
'72.##8.110.193':445
'72.##8.57.60':445
'72.##8.225.234':445
'72.##8.57.226':445
'72.##8.10.159':445
'72.##8.100.112':445
'72.##8.52.229':445
'72.##8.60.110':9988
'72.##8.100.112':9988
'72.##8.172.194':9988
'72.##8.116.157':9988
'72.##8.141.241':139
'72.##8.189.59':139
'72.##8.103.189':139
'72.##8.75.199':139
'72.##8.59.190':139
'72.##8.152.58':9988
'72.##8.147.119':445
'72.##8.18.110':9988
'72.##8.124.72':445
'72.##8.92.87':445
'72.##8.137.180':9988
'72.##8.6.194':9988
'72.##8.131.179':9988
'72.##8.165.68':9988
'72.##8.84.47':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней