Trojan.Starman.5297

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'80.##.149.63':139
'80.##.251.225':139
'80.##.207.123':139
'80.##.198.232':139
'80.##.123.198':139
'80.##.54.112':139
'80.#4.80.61':139
'80.##.143.19':139
'80.##.215.85':139
'80.##.192.217':139
'80.##.57.201':139
'80.##.54.240':139
'80.#4.0.238':139
'80.#4.39.40':445
'80.##.172.48':445
'80.##.39.229':445
'80.#4.40.20':139
'80.##.175.149':139
'80.##.248.107':139
'80.##.149.151':139
'80.##.110.229':139
'80.##.123.198':445
'80.##.207.123':445
'80.##.198.232':445
'80.##.175.149':445
'80.##.57.201':445
'80.##.192.217':445
'80.##.143.19':445
'80.##.215.85':445
'80.##.149.63':445
'80.##.251.225':445
'80.#4.40.20':445
'80.##.236.87':139
'80.##.203.44':139
'80.##.52.140':139
'80.##.230.79':139
'80.##.133.166':139
'80.##.110.229':445
'80.##.248.107':445
'80.##.149.151':445
'80.##.54.240':445
'80.#4.0.238':445
'80.##.137.128':445
'80.##.137.128':139
'80.##.172.48':139
'80.#4.11.3':139
'80.##.84.228':139
'80.#4.1.114':139
'80.##.115.36':445
'80.##.160.18':445
'80.##.172.153':445
'80.##.39.229':139
'80.#4.39.40':139
'80.##.213.254':139
'80.##.88.116':139
'80.##.208.88':139
'80.##.157.146':139
'80.##.242.17':139
'80.##.218.168':139
'80.##.128.140':139
'80.##.144.16':139
'80.##.20.205':139
'80.#4.12.80':139
'80.##.45.141':139
'80.##.20.205':445
'80.##.128.140':445
'80.##.45.141':445
'80.##.208.88':445
'80.#4.12.80':445
'80.#4.1.114':445
'80.#4.11.3':445
'80.##.84.228':445
'80.##.144.16':445
'80.##.213.254':445
'80.##.88.116':445
'80.##.197.205':445
'80.##.74.230':445
'80.#4.7.185':445
'80.#4.73.80':445
'80.##.184.191':445
'80.##.218.168':445
'80.##.157.146':445
'80.##.242.17':445
'80.##.101.226':445
'80.##.180.73':445
'80.##.54.112':445
'80.#4.5.181':445
'80.#4.44.24':445
'80.##.131.86':445
'80.##.146.116':445
'80.##.121.210':445
'80.#4.30.51':139
'80.##.142.64':139
'80.##.171.144':445
'80.#4.53.28':445
'80.##.145.10':445
'80.##.196.106':445
'80.##.173.43':445
'80.##.114.41':445
'80.##.85.121':445
'80.#4.87.59':445
'80.#4.7.172':445
'80.##.54.253':445
'80.##.106.128':445
'80.##.116.246':445
'80.##.82.114':445
'80.##.243.83':445
'80.##.255.107':139
'80.#4.50.1':139
'80.#4.22.70':139
'80.#4.36.34':139
'80.#4.3.25':139
'80.##.191.198':139
'80.##.116.202':139
'80.##.119.151':139
'80.##.119.111':139
'80.##.165.211':139
'80.##.24.207':139
'80.##.238.119':139
'80.##.219.168':139
'80.##.110.75':139
'80.##.234.141':139
'80.##.208.75':139
'80.#4.92.30':139
'80.##.156.242':139
'80.##.238.216':139
'80.##.211.229':139
'80.##.147.236':139
'80.##.14.164':445
'80.##.14.164':139
'80.#4.87.59':139
'80.#4.22.16':139
'80.##.217.181':139
'80.##.15.218':139
'80.##.114.41':139
'80.##.82.114':139
'80.##.173.43':139
'80.#4.7.172':139
'80.##.85.121':139
'80.##.182.92':139
'80.##.52.140':445
'80.##.236.87':445
'80.##.133.166':445
'80.#4.80.61':445
'80.##.230.79':445
'80.##.199.192':139
'80.#4.27.72':139
'80.#4.4.157':139
'80.##.203.44':445
'80.##.243.67':139
'80.#4.4.157':445
'80.##.199.192':445
'80.##.243.67':445
'80.##.145.10':139
'80.##.171.144':139
'80.##.15.218':445
'80.#4.22.16':445
'80.##.217.181':445
'80.#4.27.72':445
'80.##.182.92':445
'80.#4.53.28':139
'80.##.106.128':139
'80.##.196.106':139
'80.##.54.253':139
'80.##.243.83':139
'80.##.116.246':139
'80.#4.5.181':139
'80.#4.44.24':139
'80.##.131.86':139
'80.##.146.116':139
'80.##.121.210':139
'80.##.180.73':139
'80.#4.51.75':445
'80.##.42.249':445
'80.##.107.228':445
'80.#4.53.40':445
'80.##.122.148':445
'80.##.52.189':445
'80.##.78.216':445
'80.##.80.195':445
'80.#4.63.86':445
'80.##.89.166':445
'80.##.63.108':445
'80.#4.69.83':139
'80.##.150.206':139
'80.##.117.118':139
'80.##.217.234':139
'80.##.109.215':139
'80.##.211.54':445
'80.##.171.52':445
'80.##.120.12':139
'80.##.185.96':139
'80.##.30.129':139
'80.##.51.254':445
'80.##.35.148':445
'80.##.45.238':445
'80.##.172.148':445
'80.##.149.59':445
'80.##.51.100':445
'80.#4.52.51':445
'80.##.100.85':445
'80.##.104.155':445
'80.#4.85.26':445
'80.#4.242.6':445
'80.#4.16.97':445
'80.##.69.103':445
'80.#4.78.99':445
'80.##.206.237':445
'80.#4.14.79':445
'80.##.96.208':445
'80.#4.71.96':445
'80.##.208.85':445
'80.##.19.160':445
'80.#4.18.97':445
'80.##.93.179':139
'80.#4.14.79':139
'80.#4.78.99':139
'80.##.206.237':139
'80.##.52.189':139
'80.##.78.216':139
'80.#4.18.97':139
'80.##.208.85':139
'80.##.19.160':139
'80.#4.16.97':139
'80.##.69.103':139
'80.##.80.195':139
'80.#4.53.40':139
'80.##.122.148':139
'80.##.63.108':139
'80.##.211.54':139
'80.##.171.52':139
'80.#4.63.86':139
'80.##.89.166':139
'80.##.42.249':139
'80.##.107.228':139
'80.#4.51.75':139
'80.##.134.13':139
'80.##.230.133':139
'80.#4.13.52':139
'80.##.51.100':139
'80.#4.52.51':139
'80.#4.63.30':139
'80.#4.10.94':139
'80.##.181.230':139
'80.##.163.230':139
'80.##.206.231':139
'80.##.100.85':139
'80.##.172.148':139
'80.##.149.59':139
'80.#4.242.6':139
'80.##.96.208':139
'80.#4.71.96':139
'80.##.104.155':139
'80.#4.85.26':139
'80.##.35.148':139
'80.##.45.238':139
'80.##.51.254':139
'80.#4.13.52':445
'80.##.16.249':445
'80.##.111.139':445
'80.##.187.117':445
'80.#4.184.3':445
'80.##.176.21':445
'80.##.14.172':445
'80.##.233.38':445
'80.#4.89.41':445
'80.##.123.11':445
'80.##.190.145':445
'80.##.161.88':445
'80.##.123.131':139
'80.##.108.49':139
'80.#4.215.9':139
'80.##.214.123':139
'80.##.135.214':139
'80.##.123.116':139
'80.##.119.117':139
'80.##.61.220':139
'80.##.43.149':139
'80.##.134.229':139
'80.##.160.18':139
'80.#4.73.80':139
'80.##.115.36':139
'80.##.119.117':445
'80.##.172.153':139
'80.##.74.230':139
'80.##.101.226':139
'80.##.197.205':139
'80.##.184.191':139
'80.#4.7.185':139
'80.##.123.116':445
'80.##.135.214':445
'80.#4.215.9':445
'80.##.214.123':445
'80.#4.7.62':445
'80.#4.48.1':445
'80.##.134.229':445
'80.##.61.220':445
'80.##.43.149':445
'80.##.123.131':445
'80.##.108.49':445
'80.#4.48.1':139
'80.##.30.129':445
'80.##.120.12':445
'80.##.185.96':445
'80.#4.69.83':445
'80.##.150.206':445
'80.##.89.166':9988
'80.##.78.216':9988
'80.#4.63.86':9988
'80.##.171.52':9988
'80.##.122.148':9988
'80.##.117.118':445
'80.##.206.231':445
'80.##.181.230':445
'80.##.163.230':445
'80.##.134.13':445
'80.##.230.133':445
'80.##.217.234':445
'80.##.109.215':445
'80.##.93.179':445
'80.#4.63.30':445
'80.#4.10.94':445
'80.##.111.139':139
'80.##.123.11':139
'80.##.16.249':139
'80.##.176.21':139
'80.##.187.117':139
'80.##.233.38':139
'80.#4.7.62':139
'80.##.14.172':139
'80.##.190.145':139
'80.#4.89.41':139
'80.#4.184.3':139
'80.##.19.160':9988
'80.#4.71.96':9988
'80.##.69.103':9988
'80.##.206.237':9988
'80.#4.14.79':9988
'80.##.230.133':9988
'80.##.161.88':139
'80.#4.52.51':9988
'80.##.100.85':9988
'80.##.51.100':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней