Trojan.Starman.5806

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'65.#7.40.96':445
'65.#7.70.13':445
'65.#7.2.83':445
'65.##.10.213':445
'65.##.130.83':445
'65.##.133.214':445
'65.##.250.193':445
'65.##.213.184':445
'65.##.204.207':445
'65.##.251.146':445
'65.##.213.120':445
'65.##.194.154':445
'65.##.221.36':445
'65.##.194.41':445
'65.##.136.120':445
'65.##.91.112':445
'65.#7.63.16':445
'65.##.226.250':445
'65.##.15.167':445
'65.##.74.196':445
'65.##.35.108':445
'65.##.152.177':445
'65.##.216.101':445
'65.##.172.216':445
'65.#7.4.132':445
'65.#7.25.1':445
'65.##.105.28':445
'65.##.115.35':139
'65.##.172.34':139
'65.#7.3.73':139
'65.##.154.172':445
'65.#7.57.24':139
'65.##.168.73':445
'65.##.12.193':445
'65.##.59.207':445
'65.##.122.181':445
'65.#7.1.153':445
'65.##.254.106':445
'65.##.182.68':445
'65.##.116.219':445
'65.#7.181.5':445
'65.##.252.188':445
'65.##.19.223':445
'65.##.11.198':445
'65.##.152.177':139
'65.#7.1.153':139
'65.##.250.193':139
'65.##.213.184':139
'65.##.133.214':139
'65.##.59.207':139
'65.##.252.188':139
'65.##.12.193':139
'65.##.254.106':139
'65.##.122.181':139
'65.##.251.146':139
'65.##.213.120':139
'65.##.10.213':139
'65.##.226.250':139
'65.##.15.167':139
'65.#7.63.16':139
'65.#7.70.13':139
'65.##.204.207':139
'65.#7.40.96':139
'65.##.130.83':139
'65.#7.2.83':139
'65.##.19.223':139
'65.##.157.119':445
'65.##.116.79':445
'65.##.141.49':445
'65.##.202.200':445
'65.##.147.59':445
'65.#7.90.40':445
'65.##.110.141':445
'65.#7.43.42':445
'65.#7.2.165':445
'65.##.114.75':445
'65.##.28.143':445
'65.##.168.73':139
'65.#7.25.1':139
'65.##.116.219':139
'65.#7.181.5':139
'65.##.182.68':139
'65.##.172.216':139
'65.##.154.172':139
'65.##.216.101':139
'65.##.105.28':139
'65.#7.4.132':139
'65.#7.62.44':139
'65.##.117.35':445
'65.#7.16.61':445
'65.##.75.129':445
'65.##.129.182':445
'65.##.241.59':445
'65.#7.20.54':445
'65.##.167.205':445
'65.##.146.201':445
'65.##.215.215':445
'65.#7.91.50':445
'65.##.118.246':445
'65.##.172.34':445
'65.#7.3.73':445
'65.#7.57.24':445
'65.##.125.115':139
'65.##.53.112':139
'65.##.104.201':445
'65.##.49.119':445
'65.#7.72.96':445
'65.#7.62.44':445
'65.##.115.35':445
'65.##.200.82':445
'65.#7.87.89':445
'65.##.111.202':445
'65.##.20.254':445
'65.#7.30.91':445
'65.##.197.47':445
'65.##.71.179':445
'65.#7.31.17':445
'65.##.202.197':445
'65.##.150.66':445
'65.##.179.150':445
'65.##.73.167':445
'65.##.181.90':445
'65.##.244.28':445
'65.##.186.82':445
'65.#7.83.9':445
'65.##.71.118':445
'65.##.119.225':445
'65.##.179.177':445
'65.##.28.103':445
'65.#7.47.19':445
'65.##.176.209':445
'65.##.122.159':139
'65.##.28.103':139
'65.#7.91.50':139
'65.##.215.215':139
'65.#7.16.61':139
'65.##.176.209':139
'65.#7.20.54':139
'65.##.179.177':139
'65.##.244.28':139
'65.##.181.90':139
'65.##.146.201':139
'65.#7.47.19':139
'65.##.118.246':139
'65.##.241.59':139
'65.##.49.119':139
'65.#7.72.96':139
'65.##.104.201':139
'65.##.119.225':139
'65.##.167.205':139
'65.##.117.35':139
'65.##.129.182':139
'65.##.75.129':139
'65.##.200.82':139
'65.#7.68.69':139
'65.##.88.171':139
'65.#7.31.17':139
'65.##.179.150':139
'65.##.71.179':139
'65.##.116.131':139
'65.##.192.116':139
'65.##.248.47':139
'65.##.56.204':139
'65.##.115.252':139
'65.##.150.66':139
'65.##.71.118':139
'65.#7.30.91':139
'65.##.186.82':139
'65.##.73.167':139
'65.#7.83.9':139
'65.##.20.254':139
'65.#7.87.89':139
'65.##.111.202':139
'65.##.197.47':139
'65.##.202.197':139
'65.#7.34.17':445
'65.##.15.245':445
'65.##.161.48':445
'65.##.48.236':445
'65.#7.20.8':445
'65.##.156.228':445
'65.##.144.156':445
'65.##.228.171':445
'65.#7.62.16':445
'65.##.197.140':445
'65.##.191.234':445
'65.##.104.220':139
'65.##.165.189':139
'65.##.99.157':139
'65.#7.45.9':139
'65.##.252.44':139
'65.##.124.226':445
'65.##.58.134':445
'65.#7.52.84':445
'65.##.179.138':139
'65.##.14.139':139
'65.#7.46.99':445
'65.##.216.217':445
'65.##.186.70':445
'65.##.25.109':445
'65.##.207.32':445
'65.##.131.134':445
'65.#7.75.75':445
'65.##.146.199':445
'65.##.45.188':445
'65.##.28.104':445
'65.##.188.16':445
'65.##.175.208':445
'65.##.103.201':445
'65.##.198.103':445
'65.##.201.16':445
'65.##.44.207':445
'65.#7.71.41':445
'65.##.35.165':445
'65.#7.62.50':445
'65.##.162.57':445
'65.##.188.197':445
'65.##.16.158':445
'65.#7.9.33':139
'65.#7.46.99':139
'65.##.44.207':139
'65.##.144.156':139
'65.##.228.171':139
'65.##.156.228':139
'65.##.198.103':139
'65.##.188.197':139
'65.##.103.201':139
'65.#7.71.41':139
'65.##.201.16':139
'65.##.197.140':139
'65.##.191.234':139
'65.##.48.236':139
'65.##.124.226':139
'65.##.58.134':139
'65.#7.52.84':139
'65.##.15.245':139
'65.#7.62.16':139
'65.#7.34.17':139
'65.#7.20.8':139
'65.##.161.48':139
'65.##.16.158':139
'65.##.217.33':139
'65.##.43.229':139
'65.##.146.199':139
'65.##.45.188':139
'65.#7.75.75':139
'65.##.73.172':139
'65.#7.32.74':139
'65.##.172.182':139
'65.##.102.84':139
'65.#7.0.62':139
'65.##.188.16':139
'65.##.175.208':139
'65.##.207.32':139
'65.#7.62.50':139
'65.##.162.57':139
'65.##.35.165':139
'65.##.186.70':139
'65.##.28.104':139
'65.##.216.217':139
'65.##.131.134':139
'65.##.25.109':139
'65.##.217.33':445
'65.#7.84.21':445
'65.#7.71.11':445
'65.##.240.69':445
'65.##.70.175':445
'65.##.245.126':445
'65.##.96.189':445
'65.##.68.232':445
'65.##.110.218':445
'65.#7.0.233':445
'65.##.14.195':445
'65.##.56.221':445
'65.##.42.216':139
'65.##.11.133':139
'65.#7.25.49':139
'65.##.96.189':139
'65.##.68.232':139
'65.#7.4.2':445
'65.##.121.231':445
'65.##.165.154':445
'65.##.232.138':445
'65.##.205.100':445
'65.#7.25.49':445
'65.##.136.120':139
'65.##.91.112':139
'65.##.11.198':139
'65.#7.90.40':139
'65.##.110.141':139
'65.##.74.196':139
'65.##.35.108':139
'65.##.221.36':139
'65.##.194.41':139
'65.##.194.154':139
'65.#7.43.42':139
'65.##.202.200':139
'65.##.147.59':139
'65.##.28.143':139
'65.##.42.216':445
'65.##.11.133':445
'65.#7.2.165':139
'65.##.114.75':139
'65.##.116.79':139
'65.##.141.49':139
'65.##.157.119':139
'65.##.110.218':139
'65.##.15.245':9988
'65.#7.34.17':9988
'65.##.14.139':445
'65.##.165.189':445
'65.##.179.138':445
'65.##.156.228':9988
'65.#7.46.99':9988
'65.##.197.140':9988
'65.##.161.48':9988
'65.##.124.226':9988
'65.##.104.220':445
'65.##.172.182':445
'65.##.73.172':445
'65.#7.0.62':445
'65.##.102.84':445
'65.##.43.229':445
'65.##.252.44':445
'65.##.99.157':445
'65.#7.45.9':445
'65.#7.32.74':445
'65.#7.9.33':445
'65.##.44.207':9988
'65.##.70.175':139
'65.##.245.126':139
'65.##.56.221':139
'65.#7.4.2':139
'65.##.121.231':139
'65.#7.0.233':139
'65.##.14.195':139
'65.#7.71.11':139
'65.##.240.69':139
'65.#7.84.21':139
'65.##.165.154':139
'65.##.216.217':9988
'65.##.28.104':9988
'65.#7.62.50':9988
'65.##.103.201':9988
'65.##.162.57':9988
'65.##.232.138':139
'65.##.205.100':139
'65.#7.9.33':9988
'65.##.99.157':9988
'65.##.14.139':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней