Trojan.Starman.5313

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'59.##8.40.128':445
'59.##8.73.221':445
'59.##8.106.231':445
'59.##8.187.81':445
'59.##8.53.248':445
'59.##8.16.102':445
'59.##8.237.59':445
'59.##8.41.190':445
'59.##8.237.96':445
'59.##8.154.15':445
'59.##8.199.63':445
'59.##8.15.247':445
'59.##8.234.135':445
'59.##8.128.75':445
'59.##8.83.32':445
'59.##8.42.235':445
'59.##8.168.46':445
'59.##8.199.64':445
'59.#88.40.3':445
'59.##8.65.35':445
'59.##8.70.53':445
'59.##8.34.94':445
'59.##8.143.244':139
'59.##8.199.143':139
'59.##8.226.102':139
'59.##8.79.114':139
'59.##8.122.112':139
'59.##8.89.202':139
'59.##8.177.157':139
'59.##8.217.177':139
'59.##8.157.237':139
'59.##8.84.129':139
'59.##8.255.173':139
'59.##8.252.59':445
'59.##8.81.107':445
'59.##8.167.91':445
'59.##8.99.145':445
'59.##8.69.33':445
'59.##8.71.81':445
'59.##8.83.150':445
'59.##8.38.248':139
'59.##8.138.70':445
'59.##8.138.70':139
'59.##8.83.150':139
'59.##8.237.96':139
'59.##8.237.59':139
'59.##8.199.63':139
'59.##8.16.102':139
'59.##8.154.15':139
'59.##8.41.190':139
'59.##8.252.59':139
'59.##8.81.107':139
'59.##8.167.91':139
'59.##8.99.145':139
'59.##8.69.33':139
'59.##8.65.35':139
'59.##8.199.64':139
'59.##8.34.94':139
'59.##8.168.46':139
'59.##8.70.53':139
'59.#88.40.3':139
'59.##8.40.128':139
'59.##8.73.221':139
'59.##8.106.231':139
'59.##8.187.81':139
'59.##8.53.248':139
'59.##8.228.227':445
'59.##8.195.125':445
'59.##8.124.198':445
'59.##8.177.21':445
'59.##8.253.176':445
'59.##8.203.114':445
'59.##8.94.20':445
'59.##8.32.94':445
'59.##8.19.124':445
'59.##8.150.220':445
'59.##8.95.97':445
'59.##8.180.221':445
'59.##8.248.145':445
'59.##8.181.10':445
'59.##8.71.81':139
'59.##8.214.233':445
'59.##8.123.176':445
'59.##8.18.215':445
'59.##8.195.169':445
'59.##8.73.116':445
'59.##8.245.123':445
'59.##8.131.11':445
'59.##8.83.233':445
'59.##8.80.84':445
'59.##8.135.210':445
'59.##8.127.22':445
'59.##8.52.98':445
'59.##8.68.219':445
'59.##8.187.52':445
'59.##8.105.187':445
'59.##8.50.116':445
'59.##8.87.213':445
'59.##8.227.170':445
'59.##8.177.157':445
'59.##8.217.177':445
'59.##8.157.237':445
'59.##8.84.129':445
'59.##8.255.173':445
'59.##8.27.146':445
'59.##8.170.141':445
'59.##8.22.171':445
'59.##8.35.41':445
'59.##8.33.231':445
'59.##8.219.221':445
'59.##8.54.139':445
'59.##8.85.54':445
'59.##8.254.1':445
'59.##8.9.218':445
'59.##8.167.47':445
'59.##8.128.37':445
'59.##8.46.26':139
'59.##8.242.45':139
'59.##8.25.189':445
'59.##8.26.73':445
'59.##8.188.161':445
'59.#88.5.23':445
'59.##8.28.129':445
'59.##8.22.234':445
'59.##8.243.105':445
'59.#88.85.7':445
'59.##8.214.196':445
'59.##8.248.225':445
'59.##8.170.248':445
'59.##8.54.249':445
'59.##8.149.160':445
'59.##8.40.149':445
'59.##8.50.116':139
'59.##8.187.52':139
'59.##8.227.170':139
'59.##8.68.219':139
'59.##8.87.213':139
'59.##8.105.187':139
'59.#88.5.23':139
'59.##8.28.129':139
'59.##8.22.234':139
'59.##8.243.105':139
'59.#88.85.7':139
'59.##8.35.41':139
'59.##8.170.141':139
'59.##8.219.221':139
'59.##8.27.146':139
'59.##8.33.231':139
'59.##8.22.171':139
'59.##8.83.233':139
'59.##8.80.84':139
'59.##8.135.210':139
'59.##8.127.22':139
'59.##8.52.98':139
'59.##8.25.189':139
'59.##8.38.248':445
'59.##8.188.161':139
'59.##8.128.37':139
'59.##8.26.73':139
'59.##8.79.114':445
'59.##8.199.143':445
'59.##8.89.202':445
'59.##8.143.244':445
'59.##8.122.112':445
'59.##8.226.102':445
'59.##8.54.249':139
'59.##8.248.225':139
'59.##8.40.149':139
'59.##8.214.196':139
'59.##8.149.160':139
'59.##8.170.248':139
'59.##8.54.139':139
'59.##8.85.54':139
'59.##8.254.1':139
'59.##8.9.218':139
'59.##8.167.47':139
'59.##8.36.245':445
'59.##8.87.61':445
'59.##8.211.68':445
'59.##8.67.194':445
'59.##8.55.129':445
'59.##8.15.52':445
'59.##8.211.108':445
'59.##8.101.161':445
'59.##8.108.114':445
'59.##8.208.41':445
'59.##8.40.54':445
'59.##8.52.235':139
'59.##8.242.68':139
'59.##8.113.178':139
'59.##8.242.175':139
'59.##8.127.211':139
'59.##8.140.167':139
'59.##8.50.149':445
'59.##8.49.181':445
'59.##8.13.159':445
'59.##8.78.84':139
'59.##8.79.177':445
'59.##8.84.110':445
'59.##8.109.87':445
'59.##8.30.38':445
'59.##8.174.192':445
'59.##8.33.175':445
'59.##8.73.239':445
'59.##8.180.203':445
'59.##8.231.234':445
'59.##8.49.200':445
'59.##8.202.162':445
'59.##8.44.165':445
'59.##8.2.153':445
'59.##8.28.36':445
'59.##8.92.125':445
'59.##8.5.163':445
'59.##8.57.102':445
'59.##8.72.230':445
'59.##8.50.44':445
'59.##8.194.82':445
'59.##8.44.15':445
'59.##8.103.20':445
'59.##8.77.45':445
'59.##8.101.161':139
'59.##8.5.163':139
'59.##8.211.108':139
'59.##8.40.54':139
'59.##8.108.114':139
'59.##8.57.102':139
'59.##8.72.230':139
'59.##8.103.20':139
'59.##8.28.36':139
'59.##8.92.125':139
'59.##8.2.153':139
'59.##8.49.181':139
'59.##8.67.194':139
'59.##8.13.159':139
'59.##8.50.149':139
'59.##8.79.177':139
'59.##8.55.129':139
'59.##8.15.52':139
'59.##8.208.41':139
'59.##8.87.61':139
'59.##8.211.68':139
'59.##8.36.245':139
'59.##8.231.234':139
'59.##8.87.55':139
'59.##8.180.203':139
'59.##8.44.165':139
'59.##8.49.200':139
'59.##8.46.128':139
'59.##8.188.221':139
'59.##8.153.252':139
'59.##8.153.71':139
'59.##8.189.227':139
'59.##8.197.198':139
'59.##8.194.82':139
'59.##8.174.192':139
'59.##8.50.44':139
'59.##8.77.45':139
'59.##8.44.15':139
'59.##8.33.175':139
'59.##8.73.239':139
'59.##8.202.162':139
'59.##8.109.87':139
'59.##8.30.38':139
'59.##8.84.110':139
'59.##8.6.226':139
'59.##8.55.132':139
'59.##8.248.168':445
'59.##8.251.79':445
'59.##8.122.87':445
'59.##8.6.226':445
'59.##8.180.221':139
'59.##8.248.145':139
'59.##8.181.10':139
'59.##8.55.132':445
'59.##8.214.233':139
'59.##8.163.99':445
'59.##8.104.0':445
'59.##8.156.248':445
'59.##8.248.168':139
'59.##8.7.205':445
'59.##8.80.227':445
'59.##8.59.33':445
'59.##8.148.58':445
'59.##8.144.6':445
'59.##8.181.62':445
'59.#88.1.48':445
'59.##8.19.124':139
'59.##8.94.20':139
'59.##8.95.97':139
'59.##8.203.114':139
'59.##8.150.220':139
'59.##8.32.94':139
'59.##8.15.247':139
'59.##8.234.135':139
'59.##8.128.75':139
'59.##8.83.32':139
'59.##8.42.235':139
'59.##8.73.116':139
'59.##8.18.215':139
'59.##8.131.11':139
'59.##8.123.176':139
'59.##8.245.123':139
'59.##8.195.169':139
'59.##8.228.227':139
'59.##8.195.125':139
'59.##8.124.198':139
'59.##8.177.21':139
'59.##8.253.176':139
'59.##8.108.114':9988
'59.##8.67.194':9988
'59.##8.78.84':445
'59.##8.242.68':445
'59.##8.140.167':445
'59.##8.15.52':9988
'59.##8.5.163':9988
'59.##8.208.41':9988
'59.##8.79.177':9988
'59.##8.57.102':9988
'59.##8.50.149':9988
'59.##8.197.198':445
'59.##8.153.71':445
'59.##8.189.227':445
'59.##8.87.55':445
'59.##8.46.128':445
'59.##8.188.221':445
'59.##8.113.178':445
'59.##8.52.235':445
'59.##8.127.211':445
'59.##8.153.252':445
'59.##8.242.175':445
'59.##8.80.227':139
'59.##8.181.62':139
'59.##8.104.0':139
'59.##8.156.248':139
'59.##8.163.99':139
'59.#88.1.48':139
'59.##8.251.79':139
'59.##8.122.87':139
'59.##8.148.58':139
'59.##8.144.6':139
'59.##8.59.33':139
'59.##8.55.129':9988
'59.##8.36.245':9988
'59.##8.211.108':9988
'59.##8.13.159':9988
'59.##8.40.54':9988
'59.##8.103.20':9988
'59.##8.77.45':9988
'59.##8.7.205':139
'59.##8.49.181':9988
'59.##8.92.125':9988
'59.##8.87.61':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней