Trojan.Starman.5337

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'80.##8.50.141':445
'80.##8.136.202':445
'80.##8.59.108':445
'80.##8.203.84':445
'80.##8.65.106':445
'80.##8.218.185':445
'80.##8.194.183':139
'80.##8.35.254':139
'80.##8.49.207':139
'80.##8.148.46':139
'80.##8.82.153':139
'80.##8.6.167':445
'80.##8.36.204':445
'80.##8.72.33':445
'80.##8.220.133':445
'80.##8.55.199':445
'80.##8.217.114':445
'80.##8.101.223':445
'80.##8.115.186':445
'80.##8.50.224':445
'80.##8.187.44':445
'80.##8.61.45':445
'80.##8.167.163':445
'80.##8.110.154':139
'80.##8.217.47':139
'80.##8.91.217':139
'80.##8.47.221':139
'80.##8.212.231':139
'80.##8.83.245':139
'80.##8.103.187':139
'80.#18.0.35':139
'80.##8.72.219':139
'80.##8.158.56':139
'80.##8.45.229':139
'80.##8.224.184':139
'80.#18.2.24':139
'80.##8.134.105':139
'80.##8.135.216':139
'80.##8.125.247':139
'80.#18.8.96':139
'80.##8.33.41':139
'80.##8.32.221':139
'80.##8.86.193':139
'80.##8.53.169':139
'80.##8.244.210':139
'80.##8.79.155':139
'80.##8.19.35':139
'80.##8.13.241':445
'80.##8.157.88':445
'80.##8.189.22':445
'80.##8.97.215':445
'80.##8.58.108':445
'80.##8.91.81':445
'80.##8.128.86':445
'80.##8.65.155':445
'80.##8.18.38':445
'80.##8.120.242':445
'80.##8.100.3':445
'80.##8.255.117':445
'80.##8.100.47':445
'80.##8.144.33':445
'80.##8.112.149':445
'80.##8.170.186':445
'80.##8.209.114':445
'80.##8.171.59':445
'80.##8.149.188':445
'80.##8.18.193':445
'80.##8.177.76':445
'80.##8.15.60':445
'80.##8.159.149':445
'80.##8.10.168':445
'80.##8.58.147':445
'80.##8.203.84':139
'80.##8.65.106':139
'80.##8.6.167':139
'80.##8.115.186':139
'80.##8.50.224':139
'80.##8.59.108':139
'80.##8.53.121':445
'80.##8.23.169':445
'80.##8.218.185':139
'80.##8.50.141':139
'80.##8.136.202':139
'80.##8.187.44':139
'80.##8.55.199':139
'80.##8.217.114':139
'80.##8.13.241':139
'80.##8.53.121':139
'80.##8.23.169':139
'80.##8.220.133':139
'80.##8.61.45':139
'80.##8.167.163':139
'80.##8.101.223':139
'80.##8.36.204':139
'80.##8.72.33':139
'80.#18.30.7':139
'80.##8.137.241':445
'80.##8.235.219':445
'80.##8.126.254':445
'80.##8.239.209':445
'80.##8.49.239':445
'80.##8.252.121':445
'80.##8.207.118':445
'80.##8.107.240':445
'80.##8.24.193':445
'80.##8.17.202':445
'80.##8.230.162':445
'80.##8.220.105':445
'80.##8.230.2':445
'80.##8.228.229':445
'80.##8.94.199':139
'80.##8.207.118':139
'80.##8.107.240':139
'80.##8.22.229':445
'80.##8.176.41':445
'80.##8.19.225':445
'80.##8.4.153':445
'80.##8.133.251':445
'80.##8.212.169':445
'80.##8.94.199':445
'80.#18.32.7':139
'80.##8.28.202':139
'80.##8.111.165':139
'80.##8.67.250':139
'80.##8.81.151':139
'80.##8.41.32':139
'80.##8.112.75':139
'80.##8.192.112':139
'80.##8.29.174':139
'80.##8.114.97':139
'80.##8.21.158':139
'80.##8.64.107':139
'80.##8.38.196':139
'80.##8.92.39':139
'80.##8.38.168':139
'80.##8.67.136':139
'80.##8.209.153':139
'80.##8.48.230':139
'80.##8.141.18':139
'80.##8.88.182':139
'80.##8.44.99':139
'80.##8.91.127':139
'80.##8.132.176':139
'80.##8.24.193':139
'80.##8.86.193':445
'80.##8.53.169':445
'80.##8.244.210':445
'80.##8.79.155':445
'80.##8.19.35':445
'80.#18.2.24':445
'80.##8.217.47':445
'80.##8.91.217':445
'80.##8.47.221':445
'80.##8.212.231':445
'80.##8.83.245':445
'80.##8.32.221':445
'80.##8.194.183':445
'80.##8.35.254':445
'80.##8.49.207':445
'80.##8.148.46':445
'80.##8.82.153':445
'80.##8.110.154':445
'80.##8.134.105':445
'80.##8.135.216':445
'80.##8.125.247':445
'80.#18.8.96':445
'80.##8.33.41':445
'80.##8.103.187':445
'80.##8.239.209':139
'80.##8.49.239':139
'80.##8.220.105':139
'80.##8.176.41':139
'80.##8.19.225':139
'80.##8.126.254':139
'80.##8.17.202':139
'80.##8.230.162':139
'80.##8.252.121':139
'80.##8.137.241':139
'80.##8.235.219':139
'80.##8.4.153':139
'80.#18.0.35':445
'80.##8.72.219':445
'80.##8.158.56':445
'80.##8.45.229':445
'80.##8.224.184':445
'80.#18.30.7':445
'80.##8.133.251':139
'80.##8.212.169':139
'80.##8.22.229':139
'80.##8.230.2':139
'80.##8.228.229':139
'80.##8.246.38':445
'80.##8.204.153':445
'80.##8.6.213':445
'80.##8.20.193':445
'80.#18.4.99':445
'80.##8.142.242':445
'80.##8.65.240':445
'80.##8.240.94':445
'80.##8.207.184':445
'80.#18.19.6':445
'80.#18.58.1':445
'80.##8.100.17':445
'80.##8.27.18':445
'80.##8.121.253':445
'80.##8.186.221':139
'80.##8.19.154':139
'80.##8.221.8':139
'80.##8.166.190':445
'80.##8.66.245':445
'80.##8.236.194':445
'80.##8.86.110':445
'80.##8.245.26':445
'80.##8.166.191':445
'80.##8.193.92':445
'80.##8.188.135':445
'80.##8.10.208':445
'80.##8.135.228':445
'80.##8.19.91':445
'80.##8.228.55':445
'80.##8.72.45':445
'80.##8.42.179':445
'80.##8.229.84':445
'80.##8.95.135':445
'80.##8.239.198':445
'80.##8.17.183':445
'80.##8.215.148':445
'80.##8.54.25':445
'80.##8.144.228':445
'80.##8.221.70':445
'80.##8.24.33':445
'80.##8.55.16':445
'80.#18.94.8':445
'80.##8.55.246':445
'80.##8.63.186':445
'80.##8.137.33':445
'80.##8.239.137':445
'80.##8.36.120':445
'80.##8.128.229':139
'80.#18.19.6':139
'80.#18.58.1':139
'80.##8.142.242':139
'80.##8.246.38':139
'80.##8.204.153':139
'80.##8.207.184':139
'80.##8.24.33':139
'80.##8.55.16':139
'80.##8.193.92':139
'80.##8.65.240':139
'80.##8.240.94':139
'80.##8.6.213':139
'80.##8.86.110':139
'80.##8.27.18':139
'80.##8.166.191':139
'80.##8.166.190':139
'80.##8.121.253':139
'80.##8.245.26':139
'80.##8.20.193':139
'80.#18.4.99':139
'80.##8.100.17':139
'80.##8.66.245':139
'80.##8.236.194':139
'80.##8.221.70':139
'80.##8.239.198':139
'80.##8.17.183':139
'80.##8.72.45':139
'80.##8.188.135':139
'80.##8.10.208':139
'80.##8.95.135':139
'80.##8.144.39':139
'80.##8.7.248':139
'80.##8.102.33':139
'80.##8.42.179':139
'80.##8.229.84':139
'80.##8.135.228':139
'80.##8.239.137':139
'80.##8.36.120':139
'80.#18.94.8':139
'80.##8.54.25':139
'80.##8.144.228':139
'80.##8.137.33':139
'80.##8.19.91':139
'80.##8.228.55':139
'80.##8.215.148':139
'80.##8.55.246':139
'80.##8.63.186':139
'80.##8.102.33':445
'80.##8.85.19':139
'80.##8.95.102':139
'80.##8.128.145':139
'80.##8.238.186':139
'80.##8.36.91':139
'80.##8.209.114':139
'80.##8.112.149':139
'80.##8.149.188':139
'80.##8.144.33':139
'80.##8.171.59':139
'80.##8.170.186':139
'80.##8.41.94':139
'80.##8.98.229':445
'80.##8.124.98':445
'80.##8.134.214':445
'80.##8.173.218':445
'80.##8.81.40':445
'80.##8.18.230':445
'80.##8.60.119':445
'80.##8.202.223':445
'80.##8.65.178':445
'80.##8.0.248':445
'80.##8.238.18':445
'80.##8.159.149':139
'80.##8.18.38':139
'80.##8.58.147':139
'80.##8.65.155':139
'80.##8.255.117':139
'80.##8.120.242':139
'80.##8.41.94':445
'80.##8.85.19':445
'80.##8.95.102':445
'80.##8.128.145':445
'80.##8.238.186':445
'80.##8.36.91':445
'80.##8.100.3':139
'80.##8.177.76':139
'80.##8.100.47':139
'80.##8.18.193':139
'80.##8.10.168':139
'80.##8.15.60':139
'80.##8.58.108':139
'80.##8.189.22':139
'80.##8.128.86':139
'80.##8.157.88':139
'80.##8.91.81':139
'80.##8.97.215':139
'80.##8.175.214':445
'80.##8.42.179':9988
'80.##8.186.221':9988
'80.##8.239.198':9988
'80.##8.36.120':9988
'80.##8.10.208':9988
'80.##8.71.110':139
'80.##8.10.42':139
'80.##8.20.45':139
'80.##8.27.20':139
'80.##8.224.202':139
'80.##8.125.109':139
'80.#18.94.8':9988
'80.##8.19.154':445
'80.##8.221.8':445
'80.##8.128.229':445
'80.##8.144.39':445
'80.##8.7.248':445
'80.##8.186.221':445
'80.##8.66.245':9988
'80.#18.58.1':9988
'80.##8.166.190':9988
'80.##8.6.213':9988
'80.##8.121.253':9988
'80.##8.248.184':139
'80.##8.224.202':445
'80.##8.125.109':445
'80.##8.71.110':445
'80.##8.60.119':139
'80.##8.202.223':139
'80.##8.27.20':445
'80.##8.42.44':445
'80.##8.214.254':445
'80.##8.248.184':445
'80.##8.20.45':445
'80.##8.10.42':445
'80.##8.65.178':139
'80.##8.175.214':139
'80.##8.81.40':139
'80.##8.214.254':139
'80.##8.42.44':139
'80.##8.173.218':139
'80.##8.134.214':139
'80.##8.0.248':139
'80.##8.238.18':139
'80.##8.18.230':139
'80.##8.98.229':139
'80.##8.124.98':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней