Trojan.Starman.5705

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12.##.79.199':139
'12.##.126.143':139
'12.##.15.186':139
'12.##.188.245':139
'12.##.63.224':139
'12.##.213.99':139
'12.##.112.104':139
'12.##.82.244':139
'12.##.222.179':139
'12.##.177.250':139
'12.#6.173.5':139
'12.#6.17.75':139
'12.##.101.233':139
'12.##.210.39':139
'12.##.61.241':139
'12.#6.86.64':139
'12.##.149.57':139
'12.##.215.148':139
'12.##.94.109':139
'12.##.101.16':139
'12.##.120.100':139
'12.#6.185.7':139
'12.##.215.148':445
'12.#6.173.5':445
'12.##.149.57':445
'12.##.120.100':445
'12.##.94.109':445
'12.##.79.199':445
'12.##.126.143':445
'12.##.15.186':445
'12.##.188.245':445
'12.##.63.224':445
'12.##.101.16':445
'12.#6.38.67':139
'12.##.139.83':139
'12.##.68.174':139
'12.##.183.152':139
'12.#6.2.64':139
'12.#6.17.75':445
'12.##.101.233':445
'12.##.210.39':445
'12.##.61.241':445
'12.#6.86.64':445
'12.##.141.208':139
'12.##.192.141':139
'12.##.118.159':139
'12.#6.201.1':139
'12.##.49.201':139
'12.##.118.124':445
'12.##.171.33':445
'12.##.137.162':139
'12.##.11.174':139
'12.#6.70.58':139
'12.#6.1.177':139
'12.##.175.61':139
'12.##.78.116':139
'12.##.48.173':139
'12.##.140.78':139
'12.##.40.140':139
'12.##.102.52':139
'12.##.177.66':139
'12.##.19.141':139
'12.##.65.109':139
'12.##.140.217':139
'12.##.198.203':445
'12.##.49.201':445
'12.##.118.159':445
'12.#6.201.1':445
'12.##.177.66':445
'12.#6.1.177':445
'12.#6.70.58':445
'12.##.137.162':445
'12.##.11.174':445
'12.##.141.208':445
'12.##.192.141':445
'12.##.102.52':445
'12.##.40.140':445
'12.##.48.173':445
'12.##.140.78':445
'12.##.81.209':445
'12.##.169.36':445
'12.##.140.217':445
'12.##.19.141':445
'12.##.65.109':445
'12.##.175.61':445
'12.##.78.116':445
'12.##.216.172':445
'12.##.200.216':445
'12.##.172.125':445
'12.##.206.173':445
'12.##.227.246':445
'12.##.56.235':139
'12.##.25.210':139
'12.##.193.191':139
'12.##.147.92':139
'12.##.247.98':139
'12.##.95.157':445
'12.##.144.249':445
'12.##.74.164':445
'12.#6.28.50':445
'12.##.54.211':445
'12.##.78.103':445
'12.#6.3.230':445
'12.##.57.124':445
'12.##.35.211':445
'12.##.10.192':445
'12.##.25.185':445
'12.##.181.30':139
'12.##.194.166':139
'12.##.196.25':139
'12.#6.56.32':139
'12.##.240.178':139
'12.##.86.166':139
'12.##.120.30':139
'12.##.206.119':139
'12.##.177.55':139
'12.##.213.195':139
'12.##.113.214':139
'12.##.178.169':139
'12.##.134.110':139
'12.##.14.134':139
'12.##.110.177':139
'12.##.193.179':139
'12.##.176.193':139
'12.#6.17.79':139
'12.##.169.51':139
'12.##.170.58':139
'12.#6.34.78':139
'12.#6.84.35':139
'12.#6.82.94':139
'12.##.253.119':139
'12.##.151.169':139
'12.#6.9.145':139
'12.##.29.189':139
'12.##.54.211':139
'12.##.78.103':139
'12.##.93.181':139
'12.##.54.186':139
'12.#6.33.55':139
'12.##.139.83':445
'12.##.213.99':445
'12.##.112.104':445
'12.##.82.244':445
'12.##.222.179':445
'12.##.177.250':445
'12.##.68.174':445
'12.#6.38.67':445
'12.#6.2.64':445
'12.#6.185.7':445
'12.##.183.152':445
'12.#6.28.50':139
'12.##.29.189':445
'12.##.151.169':445
'12.#6.9.145':445
'12.##.216.172':139
'12.##.200.216':139
'12.#6.33.55':445
'12.##.93.181':445
'12.##.54.186':445
'12.#6.82.94':445
'12.##.253.119':445
'12.##.172.125':139
'12.##.25.185':139
'12.##.35.211':139
'12.##.10.192':139
'12.##.144.249':139
'12.##.74.164':139
'12.##.206.173':139
'12.##.227.246':139
'12.##.95.157':139
'12.#6.3.230':139
'12.##.57.124':139
'12.##.169.36':139
'12.##.133.242':445
'12.##.250.224':445
'12.##.220.132':445
'12.#6.8.209':445
'12.##.132.181':445
'12.##.202.219':445
'12.##.85.219':445
'12.##.163.27':445
'12.#6.119.4':445
'12.##.74.118':445
'12.##.181.102':445
'12.##.86.116':139
'12.##.78.166':139
'12.##.158.233':139
'12.##.66.148':139
'12.##.182.51':139
'12.##.142.225':445
'12.##.93.116':445
'12.##.190.19':139
'12.##.132.78':139
'12.##.253.132':139
'12.##.79.133':445
'12.##.124.226':445
'12.#6.3.217':445
'12.#6.46.38':445
'12.##.124.249':445
'12.#6.27.61':445
'12.#6.99.79':445
'12.##.169.99':445
'12.##.234.99':445
'12.##.26.102':445
'12.#6.18.5':445
'12.##.96.126':445
'12.##.53.244':445
'12.##.226.159':445
'12.##.46.147':445
'12.##.162.79':445
'12.##.59.212':445
'12.##.236.54':445
'12.##.68.236':445
'12.#6.55.0':445
'12.##.205.245':445
'12.##.58.146':445
'12.##.162.79':139
'12.##.59.212':139
'12.##.79.133':139
'12.##.202.219':139
'12.##.85.219':139
'12.##.205.245':139
'12.##.58.146':139
'12.##.226.159':139
'12.##.46.147':139
'12.##.53.244':139
'12.##.163.27':139
'12.##.181.102':139
'12.##.132.181':139
'12.##.142.225':139
'12.#6.8.209':139
'12.##.93.116':139
'12.#6.119.4':139
'12.##.74.118':139
'12.##.250.224':139
'12.##.220.132':139
'12.##.133.242':139
'12.#6.55.0':139
'12.##.30.129':139
'12.##.68.152':139
'12.##.244.52':139
'12.#6.99.79':139
'12.##.169.99':139
'12.##.146.161':139
'12.##.160.71':139
'12.##.233.177':139
'12.##.125.217':139
'12.#6.33.36':139
'12.##.234.99':139
'12.##.124.249':139
'12.#6.27.61':139
'12.##.96.126':139
'12.##.236.54':139
'12.##.68.236':139
'12.##.26.102':139
'12.#6.18.5':139
'12.#6.3.217':139
'12.#6.46.38':139
'12.##.124.226':139
'12.##.227.147':445
'12.##.84.149':445
'12.##.203.19':445
'12.##.193.29':139
'12.##.155.245':445
'12.##.96.115':445
'12.##.228.116':445
'12.##.147.187':445
'12.##.211.240':445
'12.##.136.165':445
'12.##.101.77':139
'12.##.79.108':139
'12.##.118.26':139
'12.##.139.94':139
'12.##.193.123':139
'12.##.142.194':139
'12.##.79.121':139
'12.#6.77.79':139
'12.##.121.166':139
'12.##.116.118':139
'12.##.166.116':139
'12.##.60.244':445
'12.#6.77.79':445
'12.##.101.77':445
'12.##.79.121':445
'12.##.166.116':445
'12.##.121.166':445
'12.##.198.203':139
'12.##.81.209':139
'12.##.171.33':139
'12.##.193.29':445
'12.##.118.124':139
'12.##.116.118':445
'12.#6.3.27':445
'12.#6.29.59':445
'12.##.72.225':445
'12.##.117.140':445
'12.##.246.116':445
'12.##.79.108':445
'12.##.118.26':445
'12.##.139.94':445
'12.##.193.123':445
'12.##.142.194':445
'12.##.253.132':445
'12.##.190.19':445
'12.##.132.78':445
'12.##.86.116':445
'12.##.78.166':445
'12.##.133.242':9988
'12.##.250.224':9988
'12.##.220.132':9988
'12.#6.8.209':9988
'12.##.181.102':9988
'12.##.158.233':445
'12.##.125.217':445
'12.#6.33.36':445
'12.##.68.152':445
'12.##.244.52':445
'12.##.30.129':445
'12.##.66.148':445
'12.##.182.51':445
'12.##.160.71':445
'12.##.233.177':445
'12.##.146.161':445
'12.##.202.219':9988
'12.##.228.116':139
'12.##.60.244':139
'12.##.96.115':139
'12.##.136.165':139
'12.##.147.187':139
'12.#6.3.27':139
'12.#6.29.59':139
'12.##.72.225':139
'12.##.117.140':139
'12.##.246.116':139
'12.##.211.240':139
'12.##.226.159':9988
'12.#6.55.0':9988
'12.##.53.244':9988
'12.##.85.219':9988
'12.##.46.147':9988
'12.##.227.147':139
'12.##.84.149':139
'12.##.203.19':139
'12.##.205.245':9988
'12.##.155.245':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней