Trojan.Starman.5790

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'62.##9.129.246':139
'62.##9.35.213':139
'62.##9.26.22':139
'62.##9.117.55':139
'62.##9.157.219':139
'62.##9.33.176':139
'62.##9.221.61':139
'62.##9.138.124':139
'62.##9.20.61':139
'62.##9.45.214':139
'62.##9.194.108':139
'62.##9.106.158':445
'62.##9.88.177':445
'62.##9.58.150':445
'62.##9.190.86':445
'62.##9.41.247':445
'62.##9.139.110':139
'62.##9.124.47':139
'62.##9.173.123':139
'62.##9.46.205':139
'62.##9.129.2':139
'62.##9.127.188':139
'62.##9.173.123':445
'62.##9.117.55':445
'62.##9.124.47':445
'62.##9.127.188':445
'62.##9.46.205':445
'62.##9.157.219':445
'62.##9.33.176':445
'62.##9.45.214':445
'62.##9.35.213':445
'62.##9.26.22':445
'62.##9.129.246':445
'62.##9.67.33':139
'62.##9.36.66':139
'62.#19.7.39':139
'62.##9.14.51':139
'62.##9.42.46':139
'62.##9.8.112':139
'62.##9.139.110':445
'62.##9.129.2':445
'62.##9.71.202':139
'62.##9.103.0':139
'62.##9.44.146':139
'62.##9.118.223':139
'62.##9.252.59':139
'62.##9.233.58':139
'62.##9.222.58':139
'62.##9.184.138':139
'62.##9.43.151':139
'62.##9.41.247':139
'62.##9.58.150':139
'62.##9.190.86':139
'62.##9.22.181':139
'62.##9.22.89':139
'62.##9.116.151':139
'62.##9.220.57':139
'62.##9.128.107':139
'62.##9.133.167':139
'62.##9.175.132':139
'62.#19.7.82':139
'62.##9.49.29':139
'62.##9.67.42':139
'62.##9.13.93':139
'62.##9.225.138':139
'62.##9.32.120':139
'62.##9.222.58':445
'62.##9.184.138':445
'62.##9.67.42':445
'62.##9.13.93':445
'62.##9.49.29':445
'62.##9.233.58':445
'62.##9.22.181':445
'62.##9.22.89':445
'62.##9.43.151':445
'62.##9.118.223':445
'62.##9.252.59':445
'62.##9.133.167':445
'62.##9.175.132':445
'62.##9.139.78':445
'62.##9.106.158':139
'62.##9.88.177':139
'62.##9.128.107':445
'62.##9.225.138':445
'62.##9.32.120':445
'62.#19.7.82':445
'62.##9.116.151':445
'62.##9.220.57':445
'62.##9.194.108':445
'62.#19.9.28':445
'62.#19.68.9':445
'62.##9.189.75':445
'62.##9.199.85':445
'62.##9.10.99':445
'62.##9.180.67':445
'62.##9.162.204':139
'62.##9.106.101':139
'62.##9.204.169':139
'62.##9.115.122':445
'62.##9.169.133':139
'62.##9.80.219':445
'62.##9.88.71':445
'62.##9.143.63':445
'62.##9.162.243':445
'62.#19.56.8':445
'62.##9.88.139':445
'62.##9.53.93':445
'62.##9.6.120':445
'62.##9.132.246':445
'62.##9.255.186':445
'62.##9.104.42':445
'62.##9.0.158':139
'62.##9.143.180':139
'62.##9.52.166':139
'62.##9.173.86':139
'62.##9.23.184':139
'62.##9.45.235':139
'62.##9.138.77':139
'62.##9.83.202':139
'62.##9.84.43':139
'62.##9.245.187':139
'62.##9.247.147':139
'62.##9.139.210':139
'62.##9.118.47':139
'62.##9.39.199':139
'62.##9.167.167':139
'62.##9.23.168':139
'62.##9.135.37':139
'62.##9.108.21':139
'62.##9.78.205':139
'62.##9.143.2':139
'62.##9.34.153':139
'62.##9.119.161':139
'62.##9.176.214':139
'62.##9.12.24':139
'62.##9.24.167':139
'62.##9.71.202':445
'62.##9.51.119':139
'62.##9.13.226':139
'62.#19.56.8':139
'62.##9.143.63':139
'62.##9.162.243':139
'62.##9.157.144':139
'62.##9.5.157':139
'62.##9.14.51':445
'62.##9.42.46':445
'62.##9.138.124':445
'62.##9.20.61':445
'62.##9.221.61':445
'62.#19.7.39':445
'62.##9.103.0':445
'62.##9.44.146':445
'62.##9.8.112':445
'62.##9.67.33':445
'62.##9.36.66':445
'62.##9.115.122':139
'62.##9.51.119':445
'62.##9.180.67':139
'62.#19.9.28':139
'62.#19.68.9':139
'62.##9.24.167':445
'62.##9.157.144':445
'62.##9.5.157':445
'62.##9.13.226':445
'62.##9.176.214':445
'62.##9.12.24':445
'62.##9.255.186':139
'62.##9.104.42':139
'62.##9.88.139':139
'62.##9.80.219':139
'62.##9.88.71':139
'62.##9.132.246':139
'62.##9.10.99':139
'62.##9.189.75':139
'62.##9.199.85':139
'62.##9.53.93':139
'62.##9.6.120':139
'62.##9.139.78':139
'62.##9.250.92':445
'62.##9.153.168':445
'62.##9.92.160':445
'62.##9.84.131':445
'62.##9.3.185':445
'62.##9.22.12':445
'62.##9.128.181':445
'62.##9.114.129':445
'62.##9.181.27':445
'62.##9.55.246':445
'62.##9.67.178':445
'62.##9.216.177':139
'62.##9.72.77':139
'62.##9.177.120':139
'62.##9.125.253':139
'62.##9.58.98':139
'62.##9.72.217':139
'62.##9.150.100':445
'62.##9.232.5':445
'62.##9.126.83':445
'62.##9.50.248':139
'62.##9.86.224':445
'62.##9.94.120':445
'62.##9.45.54':445
'62.##9.123.208':445
'62.##9.28.11':445
'62.##9.138.129':445
'62.##9.240.51':445
'62.##9.132.250':445
'62.##9.53.133':445
'62.##9.118.50':445
'62.##9.184.174':445
'62.##9.137.135':445
'62.##9.54.127':445
'62.##9.129.37':445
'62.##9.69.200':445
'62.##9.76.225':445
'62.##9.94.138':445
'62.##9.76.23':445
'62.##9.86.79':445
'62.#19.7.17':445
'62.##9.64.124':445
'62.##9.98.72':445
'62.##9.139.66':445
'62.##9.114.129':139
'62.##9.76.225':139
'62.##9.128.181':139
'62.##9.67.178':139
'62.##9.181.27':139
'62.##9.94.138':139
'62.##9.76.23':139
'62.##9.98.72':139
'62.##9.129.37':139
'62.##9.69.200':139
'62.##9.54.127':139
'62.##9.150.100':139
'62.##9.232.5':139
'62.##9.84.131':139
'62.##9.126.83':139
'62.##9.86.224':139
'62.##9.3.185':139
'62.##9.22.12':139
'62.##9.55.246':139
'62.##9.153.168':139
'62.##9.92.160':139
'62.##9.250.92':139
'62.##9.53.133':139
'62.##9.230.123':139
'62.##9.132.250':139
'62.##9.137.135':139
'62.##9.118.50':139
'62.##9.21.159':139
'62.##9.106.12':139
'62.##9.155.114':139
'62.##9.45.176':139
'62.##9.100.210':139
'62.##9.76.15':139
'62.#19.7.17':139
'62.##9.28.11':139
'62.##9.86.79':139
'62.##9.139.66':139
'62.##9.64.124':139
'62.##9.138.129':139
'62.##9.240.51':139
'62.##9.184.174':139
'62.##9.45.54':139
'62.##9.123.208':139
'62.##9.94.120':139
'62.##9.230.123':445
'62.##9.60.102':139
'62.##9.148.137':139
'62.##9.204.219':139
'62.##9.156.97':139
'62.##9.141.36':139
'62.##9.120.121':139
'62.##9.202.29':445
'62.##9.197.227':445
'62.##9.200.250':445
'62.##9.160.91':139
'62.##9.24.160':445
'62.##9.49.133':139
'62.##9.55.155':139
'62.##9.77.131':139
'62.##9.199.190':139
'62.##9.128.77':139
'62.##9.120.24':139
'62.##9.49.37':139
'62.##9.92.77':139
'62.##9.75.95':139
'62.##9.108.120':139
'62.##9.75.108':139
'62.##9.92.77':445
'62.##9.156.97':445
'62.##9.49.37':445
'62.##9.75.108':445
'62.##9.75.95':445
'62.##9.141.36':445
'62.##9.120.121':445
'62.##9.160.91':445
'62.##9.148.137':445
'62.##9.204.219':445
'62.##9.60.102':445
'62.##9.53.147':445
'62.##9.199.190':445
'62.##9.164.229':445
'62.##9.164.158':445
'62.##9.14.53':445
'62.##9.128.77':445
'62.##9.120.24':445
'62.##9.108.120':445
'62.##9.55.155':445
'62.##9.77.131':445
'62.##9.49.133':445
'62.##9.86.224':9988
'62.##9.126.83':9988
'62.##9.150.100':9988
'62.##9.72.217':445
'62.##9.50.248':445
'62.##9.22.12':9988
'62.##9.54.127':9988
'62.##9.94.120':9988
'62.##9.94.138':9988
'62.##9.55.246':9988
'62.##9.67.178':9988
'62.##9.45.176':445
'62.##9.106.12':445
'62.##9.76.15':445
'62.##9.21.159':445
'62.##9.100.210':445
'62.##9.155.114':445
'62.##9.216.177':445
'62.##9.72.77':445
'62.##9.177.120':445
'62.##9.125.253':445
'62.##9.58.98':445
'62.##9.24.160':139
'62.##9.200.250':139
'62.##9.13.82':445
'62.##9.156.32':445
'62.##9.0.156':445
'62.##9.202.29':139
'62.##9.164.229':139
'62.##9.53.147':139
'62.##9.14.53':139
'62.##9.197.227':139
'62.##9.164.158':139
'62.##9.133.224':139
'62.##9.156.32':139
'62.##9.18.37':139
'62.##9.85.102':139
'62.##9.7.155':139
'62.##9.0.156':139
'62.##9.18.37':445
'62.##9.133.224':445
'62.##9.7.155':445
'62.##9.13.82':139
'62.##9.85.102':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней