Trojan.Starman.5829

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'83.##5.20.241':445
'83.##5.146.16':445
'83.##5.15.125':445
'83.##5.227.14':445
'83.##5.164.242':445
'83.##5.41.126':445
'83.##5.44.128':445
'83.##5.41.126':139
'83.##5.44.128':139
'83.#85.5.33':445
'83.##5.62.84':445
'83.##5.12.211':445
'83.##5.19.227':445
'83.#85.99.3':445
'83.##5.103.207':445
'83.##5.134.237':445
'83.##5.165.134':445
'83.##5.34.104':445
'83.##5.237.33':445
'83.##5.223.132':139
'83.##5.66.159':139
'83.##5.14.66':139
'83.##5.159.226':139
'83.##5.212.84':139
'83.##5.109.214':139
'83.##5.116.124':139
'83.##5.197.207':139
'83.##5.18.50':139
'83.##5.241.107':139
'83.##5.135.5':139
'83.##5.146.253':139
'83.##5.58.71':139
'83.##5.156.153':139
'83.##5.29.45':139
'83.##5.27.211':139
'83.##5.206.21':139
'83.##5.30.206':139
'83.##5.25.181':139
'83.##5.193.9':139
'83.##5.33.168':445
'83.##5.152.42':445
'83.##5.210.134':445
'83.##5.102.114':445
'83.##5.199.131':445
'83.##5.140.181':445
'83.##5.72.157':445
'83.##5.30.166':445
'83.##5.110.230':445
'83.##5.183.25':445
'83.##5.182.85':445
'83.##5.227.14':139
'83.##5.20.241':139
'83.#85.5.33':139
'83.##5.15.125':139
'83.##5.146.16':139
'83.##5.205.121':445
'83.##5.84.205':445
'83.##5.164.242':139
'83.##5.122.11':445
'83.##5.187.91':445
'83.##5.205.35':445
'83.##5.34.65':445
'83.##5.204.50':445
'83.##5.71.213':445
'83.##5.32.85':445
'83.##5.20.178':445
'83.##5.154.144':445
'83.##5.130.31':445
'83.##5.23.55':445
'83.##5.138.206':445
'83.##5.202.146':445
'83.##5.244.18':445
'83.##5.62.144':445
'83.##5.229.182':445
'83.##5.185.135':445
'83.##5.119.3':445
'83.##5.216.48':445
'83.##5.133.253':445
'83.##5.104.152':445
'83.##5.115.244':139
'83.##5.77.82':445
'83.##5.235.190':445
'83.##5.71.17':445
'83.##5.120.173':445
'83.##5.146.226':445
'83.##5.235.204':445
'83.##5.194.235':445
'83.##5.116.181':445
'83.##5.1.132':445
'83.##5.17.204':445
'83.##5.14.66':445
'83.##5.109.214':445
'83.##5.212.84':445
'83.##5.66.159':445
'83.##5.18.50':445
'83.##5.197.207':445
'83.##5.115.244':445
'83.##5.241.107':445
'83.##5.116.124':445
'83.##5.225.206':445
'83.##5.150.241':445
'83.#85.20.5':445
'83.##5.150.208':445
'83.##5.172.186':445
'83.##5.23.135':445
'83.##5.139.2':139
'83.##5.59.177':139
'83.#85.34.0':445
'83.##5.72.33':445
'83.##5.180.244':445
'83.##5.83.11':445
'83.##5.60.160':445
'83.##5.172.205':445
'83.##5.194.219':445
'83.##5.96.214':445
'83.#85.5.58':445
'83.##5.119.214':445
'83.##5.227.32':445
'83.##5.47.15':445
'83.##5.159.226':445
'83.##5.194.219':139
'83.##5.83.11':139
'83.##5.225.206':139
'83.##5.172.205':139
'83.##5.60.160':139
'83.##5.47.15':139
'83.#85.5.58':139
'83.##5.96.214':139
'83.##5.227.32':139
'83.##5.194.235':139
'83.##5.120.173':139
'83.##5.77.82':139
'83.##5.17.204':139
'83.##5.71.17':139
'83.##5.235.190':139
'83.##5.1.132':139
'83.##5.235.204':139
'83.##5.146.226':139
'83.##5.116.181':139
'83.##5.119.214':139
'83.##5.58.71':445
'83.##5.27.211':445
'83.##5.29.45':445
'83.##5.146.253':445
'83.##5.25.181':445
'83.##5.30.206':445
'83.##5.135.5':445
'83.##5.193.9':445
'83.##5.206.21':445
'83.##5.156.153':445
'83.##5.172.186':139
'83.##5.150.241':139
'83.##5.180.244':139
'83.##5.150.208':139
'83.#85.20.5':139
'83.##5.72.33':139
'83.##5.223.132':445
'83.##5.23.135':139
'83.#85.34.0':139
'83.##5.199.158':445
'83.##5.27.199':445
'83.##5.11.10':139
'83.##5.134.85':445
'83.##5.0.158':445
'83.##5.194.196':445
'83.##5.137.194':445
'83.##5.56.242':445
'83.##5.3.151':445
'83.##5.25.77':139
'83.##5.233.33':139
'83.##5.153.114':139
'83.##5.107.11':139
'83.##5.41.205':139
'83.##5.236.227':139
'83.##5.202.44':139
'83.##5.66.194':139
'83.##5.4.161':139
'83.##5.53.12':139
'83.##5.154.137':445
'83.##5.174.17':445
'83.#85.66.3':445
'83.##5.232.194':445
'83.##5.91.89':445
'83.##5.104.205':445
'83.##5.174.25':445
'83.##5.88.243':445
'83.##5.180.104':445
'83.##5.57.189':445
'83.##5.93.31':445
'83.##5.56.166':445
'83.##5.11.240':445
'83.##5.161.31':445
'83.##5.117.27':445
'83.##5.231.234':445
'83.##5.5.242':445
'83.##5.28.114':445
'83.##5.242.231':445
'83.##5.241.242':445
'83.##5.108.174':139
'83.##5.11.240':139
'83.##5.231.234':139
'83.##5.117.27':139
'83.##5.56.166':139
'83.##5.242.231':139
'83.##5.28.114':139
'83.##5.93.31':139
'83.##5.241.242':139
'83.##5.5.242':139
'83.##5.161.31':139
'83.##5.134.85':139
'83.##5.199.158':139
'83.##5.27.199':139
'83.##5.0.158':139
'83.##5.56.242':139
'83.##5.137.194':139
'83.##5.154.137':139
'83.##5.3.151':139
'83.##5.194.196':139
'83.##5.232.194':139
'83.##5.143.135':139
'83.##5.13.183':139
'83.##5.157.14':139
'83.##5.200.5':139
'83.##5.153.166':139
'83.##5.190.48':139
'83.##5.216.169':139
'83.##5.149.162':139
'83.##5.44.140':139
'83.##5.40.15':139
'83.#85.66.3':139
'83.##5.104.205':139
'83.##5.91.89':139
'83.##5.174.17':139
'83.##5.180.104':139
'83.##5.88.243':139
'83.##5.15.254':139
'83.##5.57.189':139
'83.##5.174.25':139
'83.##5.15.254':445
'83.##5.202.146':139
'83.##5.244.18':139
'83.##5.62.144':139
'83.##5.229.182':139
'83.##5.185.135':139
'83.##5.119.3':139
'83.##5.216.48':139
'83.##5.133.253':139
'83.##5.104.152':139
'83.##5.187.91':139
'83.##5.152.42':139
'83.##5.210.134':139
'83.##5.102.114':139
'83.##5.199.131':139
'83.##5.140.181':139
'83.##5.72.157':139
'83.##5.30.166':139
'83.##5.110.230':139
'83.##5.183.25':139
'83.##5.138.206':139
'83.##5.62.84':139
'83.##5.12.211':139
'83.##5.19.227':139
'83.#85.99.3':139
'83.##5.103.207':139
'83.##5.134.237':139
'83.##5.165.134':139
'83.##5.34.104':139
'83.##5.237.33':139
'83.##5.33.168':139
'83.##5.205.35':139
'83.##5.34.65':139
'83.##5.204.50':139
'83.##5.71.213':139
'83.##5.32.85':139
'83.##5.20.178':139
'83.##5.154.144':139
'83.##5.130.31':139
'83.##5.23.55':139
'83.##5.182.85':139
'83.##5.41.205':445
'83.##5.233.33':445
'83.##5.108.174':445
'83.##5.107.11':445
'83.##5.153.114':445
'83.##5.53.12':445
'83.##5.202.44':445
'83.##5.236.227':445
'83.##5.4.161':445
'83.##5.216.169':445
'83.##5.200.5':445
'83.##5.143.135':445
'83.##5.40.15':445
'83.##5.157.14':445
'83.##5.13.183':445
'83.##5.44.140':445
'83.##5.190.48':445
'83.##5.153.166':445
'83.##5.149.162':445
'83.##5.66.194':445
'83.##5.91.89':9988
'83.##5.104.205':9988
'83.##5.5.242':9988
'83.##5.28.114':9988
'83.##5.57.189':9988
'83.##5.205.121':139
'83.##5.84.205':139
'83.##5.4.161':9988
'83.##5.122.11':139
'83.##5.231.234':9988
'83.##5.134.85':9988
'83.##5.161.31':9988
'83.##5.25.77':445
'83.##5.11.10':445
'83.##5.154.137':9988
'83.##5.56.242':9988
'83.##5.3.151':9988
'83.##5.199.158':9988
'83.##5.0.158':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней