Trojan.Starman.5900

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'14.##.50.135':139
'14.##.129.188':139
'14.##.29.166':139
'14.#0.64.11':139
'14.##.229.145':139
'14.#0.32.30':139
'14.##.196.167':139
'14.##.136.238':139
'14.#0.99.31':139
'14.##.243.161':139
'14.##.76.213':139
'14.##.221.76':139
'14.#0.9.191':139
'14.#0.3.170':139
'14.##.126.71':139
'14.#0.36.58':139
'14.##.58.189':139
'14.##.246.107':139
'14.##.35.221':139
'14.#0.33.35':139
'14.##.228.196':139
'14.##.76.213':445
'14.##.221.76':445
'14.#0.9.191':445
'14.#0.3.170':445
'14.##.126.71':445
'14.#0.36.58':445
'14.##.58.189':445
'14.##.246.107':445
'14.##.35.221':445
'14.#0.33.35':445
'14.##.205.181':445
'14.##.109.206':445
'14.##.95.194':445
'14.#0.50.86':445
'14.##.213.49':445
'14.##.190.118':445
'14.#0.76.67':445
'14.##.172.175':445
'14.##.219.109':445
'14.##.175.219':445
'14.##.244.195':445
'14.##.176.244':445
'14.##.237.96':445
'14.##.165.158':139
'14.##.175.217':445
'14.##.27.241':445
'14.##.238.82':445
'14.##.177.160':445
'14.##.226.186':445
'14.#0.6.253':445
'14.##.36.157':139
'14.##.172.36':139
'14.##.29.249':139
'14.##.223.115':139
'14.##.145.98':139
'14.##.43.174':139
'14.#0.203.9':139
'14.##.219.193':139
'14.##.145.172':139
'14.##.212.127':139
'14.##.223.115':445
'14.##.205.181':139
'14.##.109.206':139
'14.##.95.194':139
'14.#0.50.86':139
'14.##.213.49':139
'14.##.190.118':139
'14.#0.76.67':139
'14.##.172.175':139
'14.##.219.109':139
'14.##.175.219':139
'14.##.172.36':445
'14.##.145.172':445
'14.##.36.157':445
'14.##.145.98':445
'14.##.29.249':445
'14.#0.203.9':445
'14.##.165.158':445
'14.##.43.174':445
'14.##.212.127':445
'14.##.219.193':445
'14.##.90.104':139
'14.##.142.116':139
'14.##.192.216':139
'14.##.209.75':139
'14.##.46.194':139
'14.##.199.240':139
'14.##.197.184':139
'14.##.123.102':139
'14.##.151.56':139
'14.##.191.192':139
'14.##.178.197':445
'14.##.234.15':445
'14.#0.6.235':445
'14.##.105.36':445
'14.##.235.21':445
'14.#0.3.17':445
'14.#0.3.99':445
'14.##.143.75':445
'14.##.243.55':445
'14.##.211.87':445
'14.##.203.209':139
'14.##.181.247':139
'14.#0.61.83':139
'14.#0.66.76':139
'14.#0.9.143':139
'14.##.111.79':139
'14.##.29.203':139
'14.##.236.97':139
'14.#0.30.32':139
'14.##.131.36':139
'14.#0.38.33':139
'14.##.233.133':139
'14.##.10.122':139
'14.#0.30.64':139
'14.#0.126.6':139
'14.##.26.134':139
'14.##.240.99':139
'14.#0.89.92':139
'14.##.189.166':139
'14.#0.39.87':139
'14.#0.14.19':139
'14.##.225.235':139
'14.#0.24.39':139
'14.##.96.112':139
'14.##.228.196':445
'14.#0.4.75':139
'14.##.225.20':139
'14.#0.229.1':139
'14.##.62.234':139
'14.#0.33.75':139
'14.##.225.33':139
'14.##.50.135':445
'14.##.129.188':445
'14.##.29.166':445
'14.#0.64.11':445
'14.##.229.145':445
'14.#0.32.30':445
'14.##.196.167':445
'14.##.136.238':445
'14.#0.99.31':445
'14.##.243.161':445
'14.#0.24.7':139
'14.#0.24.39':445
'14.#0.33.75':445
'14.##.225.235':445
'14.#0.4.75':445
'14.##.96.112':445
'14.#0.229.1':445
'14.#0.24.7':445
'14.##.225.20':445
'14.##.225.33':445
'14.##.62.234':445
'14.##.178.197':139
'14.##.234.15':139
'14.#0.6.235':139
'14.##.105.36':139
'14.##.235.21':139
'14.#0.3.17':139
'14.#0.3.99':139
'14.##.143.75':139
'14.##.243.55':139
'14.##.211.87':139
'14.##.238.82':139
'14.##.19.123':445
'14.#0.6.38':445
'14.##.141.57':445
'14.##.182.43':445
'14.##.65.193':445
'14.##.146.201':445
'14.##.251.146':445
'14.##.84.224':445
'14.##.51.126':445
'14.#0.72.50':445
'14.##.113.189':139
'14.##.168.57':139
'14.##.113.116':139
'14.##.150.94':139
'14.#0.1.112':139
'14.##.15.156':139
'14.##.249.164':139
'14.##.57.165':139
'14.##.101.52':139
'14.##.209.252':139
'14.#0.86.20':445
'14.##.51.102':445
'14.##.77.122':445
'14.##.159.213':445
'14.##.100.176':445
'14.##.213.99':445
'14.##.223.157':445
'14.##.115.188':445
'14.##.21.145':445
'14.##.106.29':445
'14.##.38.244':445
'14.#0.169.1':445
'14.##.92.168':445
'14.##.62.225':445
'14.#0.37.94':445
'14.##.117.37':445
'14.##.223.171':445
'14.##.176.19':445
'14.#0.0.198':445
'14.##.207.92':445
'14.##.16.173':445
'14.##.62.225':139
'14.#0.169.1':139
'14.##.117.37':139
'14.#0.86.20':139
'14.#0.37.94':139
'14.#0.0.198':139
'14.##.223.171':139
'14.##.16.173':139
'14.##.92.168':139
'14.##.207.92':139
'14.##.19.123':139
'14.#0.6.38':139
'14.##.141.57':139
'14.##.65.193':139
'14.##.182.43':139
'14.##.146.201':139
'14.##.251.146':139
'14.##.84.224':139
'14.##.51.126':139
'14.#0.72.50':139
'14.##.176.19':139
'14.#0.39.17':139
'14.##.117.19':139
'14.#0.63.31':139
'14.##.166.200':139
'14.##.29.143':139
'14.##.22.176':139
'14.##.217.221':139
'14.##.132.124':139
'14.##.58.185':139
'14.##.46.222':139
'14.##.51.102':139
'14.##.77.122':139
'14.##.159.213':139
'14.##.100.176':139
'14.##.213.99':139
'14.##.223.157':139
'14.##.115.188':139
'14.##.21.145':139
'14.##.106.29':139
'14.##.38.244':139
'14.##.218.13':139
'14.##.219.115':445
'14.##.141.240':139
'14.##.200.100':139
'14.#0.21.26':139
'14.#0.8.54':445
'14.#0.14.21':445
'14.##.247.39':445
'14.##.225.212':445
'14.##.227.253':445
'14.##.80.116':139
'14.##.197.115':139
'14.##.84.122':139
'14.#0.14.21':139
'14.##.15.180':139
'14.##.59.131':139
'14.#0.5.178':139
'14.#0.1.160':139
'14.##.232.246':139
'14.#0.70.97':139
'14.##.15.180':445
'14.##.237.96':139
'14.##.244.195':139
'14.##.175.217':139
'14.##.141.240':445
'14.##.218.13':445
'14.##.177.160':139
'14.##.27.241':139
'14.#0.6.253':139
'14.##.176.244':139
'14.##.226.186':139
'14.##.232.246':445
'14.#0.70.97':445
'14.##.197.115':445
'14.##.84.122':445
'14.##.80.116':445
'14.##.200.100':445
'14.#0.21.26':445
'14.#0.5.178':445
'14.#0.1.160':445
'14.##.59.131':445
'14.##.168.57':445
'14.##.113.189':445
'14.##.113.116':445
'14.##.150.94':445
'14.#0.1.112':445
'14.##.15.156':445
'14.##.249.164':445
'14.##.57.165':445
'14.##.101.52':445
'14.##.209.252':445
'14.#0.39.17':445
'14.##.117.19':445
'14.#0.63.31':445
'14.##.166.200':445
'14.##.29.143':445
'14.##.22.176':445
'14.##.217.221':445
'14.##.132.124':445
'14.##.58.185':445
'14.##.46.222':445
'14.##.141.57':9988
'14.##.150.94':9988
'14.#0.1.112':9988
'14.##.46.222':9988
'14.##.117.19':9988
'14.##.58.185':9988
'14.##.247.39':139
'14.#0.8.54':139
'14.##.227.253':139
'14.##.219.115':139
'14.##.225.212':139
'14.#0.6.38':9988
'14.##.51.126':9988
'14.##.65.193':9988
'14.##.182.43':9988
'14.##.19.123':9988
'14.##.16.173':9988
'14.#0.39.17':9988
'14.##.207.92':9988
'14.#0.72.50':9988
'14.#0.169.1':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней