Trojan.Starman.5878

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'14.##8.108.175':445
'14.##8.73.201':445
'14.##8.61.162':445
'14.##8.135.242':445
'14.##8.247.137':445
'14.##8.188.156':445
'14.##8.210.50':445
'14.#08.16.7':445
'14.##8.10.63':445
'14.##8.165.24':139
'14.#08.6.4':139
'14.##8.216.131':139
'14.##8.19.188':139
'14.##8.183.50':445
'14.##8.72.173':445
'14.##8.76.219':139
'14.##8.78.226':445
'14.##8.97.15':445
'14.#08.46.3':445
'14.##8.154.69':445
'14.##8.229.197':445
'14.##8.142.207':445
'14.##8.193.245':445
'14.##8.78.203':445
'14.##8.175.130':445
'14.##8.126.218':445
'14.##8.128.242':445
'14.##8.31.232':445
'14.#08.81.6':445
'14.##8.19.197':445
'14.##8.4.113':445
'14.##8.138.33':445
'14.##8.225.138':445
'14.##8.147.108':445
'14.##8.126.189':445
'14.##8.131.168':139
'14.##8.210.50':139
'14.#08.16.7':139
'14.##8.108.175':139
'14.##8.73.201':139
'14.##8.97.15':139
'14.##8.19.197':139
'14.##8.247.137':139
'14.##8.188.156':139
'14.##8.135.242':139
'14.##8.15.110':445
'14.##8.78.226':139
'14.##8.88.118':445
'14.##8.109.193':445
'14.##8.10.63':139
'14.##8.61.162':139
'14.##8.183.50':139
'14.##8.72.173':139
'14.##8.4.113':139
'14.##8.175.130':139
'14.##8.126.218':139
'14.#08.46.3':139
'14.##8.154.69':139
'14.##8.92.18':139
'14.##8.9.189':139
'14.##8.193.245':139
'14.##8.78.203':139
'14.##8.142.207':139
'14.##8.147.108':139
'14.##8.126.189':139
'14.##8.31.232':139
'14.#08.81.6':139
'14.##8.128.242':139
'14.##8.229.197':139
'14.##8.138.33':139
'14.##8.225.138':139
'14.##8.92.18':445
'14.##8.232.111':139
'14.##8.101.113':139
'14.##8.21.182':139
'14.##8.111.251':139
'14.##8.165.25':139
'14.##8.232.3':139
'14.##8.181.232':139
'14.##8.144.81':139
'14.##8.45.81':139
'14.##8.87.60':139
'14.##8.3.104':139
'14.##8.48.209':139
'14.##8.196.148':139
'14.##8.5.212':139
'14.##8.81.55':139
'14.##8.87.120':139
'14.##8.10.23':139
'14.##8.45.207':139
'14.##8.116.178':139
'14.##8.11.253':139
'14.##8.81.116':139
'14.##8.177.192':139
'14.##8.11.169':139
'14.##8.138.208':139
'14.##8.91.182':139
'14.##8.64.183':139
'14.##8.41.254':139
'14.##8.22.16':139
'14.##8.41.63':139
'14.##8.146.230':139
'14.##8.27.147':139
'14.##8.131.175':139
'14.##8.73.112':139
'14.##8.50.192':139
'14.##8.243.213':139
'14.##8.170.74':139
'14.##8.245.71':139
'14.##8.202.200':139
'14.##8.15.95':139
'14.##8.135.26':139
'14.##8.122.184':139
'14.##8.171.122':139
'14.##8.67.210':139
'14.##8.73.52':139
'14.##8.219.135':139
'14.##8.216.131':445
'14.##8.19.188':445
'14.##8.9.189':445
'14.##8.131.168':445
'14.##8.76.219':445
'14.##8.27.10':139
'14.##8.165.24':445
'14.#08.6.4':445
'14.##8.68.29':139
'14.##8.171.122':445
'14.##8.68.29':445
'14.##8.73.52':445
'14.##8.122.184':445
'14.##8.128.72':139
'14.##8.83.62':139
'14.##8.81.179':445
'14.##8.76.192':445
'14.##8.67.210':445
'14.##8.27.10':445
'14.##8.219.135':445
'14.##8.81.179':139
'14.##8.76.192':139
'14.##8.245.71':445
'14.##8.202.200':445
'14.##8.15.95':445
'14.##8.135.26':445
'14.##8.194.32':445
'14.##8.98.112':139
'14.##8.24.20':139
'14.##8.103.60':139
'14.##8.119.129':139
'14.##8.67.118':445
'14.##8.4.133':445
'14.##8.49.24':139
'14.##8.12.49':139
'14.##8.91.137':139
'14.##8.122.217':139
'14.##8.149.122':139
'14.##8.44.182':139
'14.##8.217.164':139
'14.##8.126.79':139
'14.##8.139.48':139
'14.##8.96.149':139
'14.##8.192.193':139
'14.##8.30.53':445
'14.##8.148.99':445
'14.##8.63.141':445
'14.##8.109.17':445
'14.##8.92.215':445
'14.##8.136.195':445
'14.##8.61.137':445
'14.##8.127.245':445
'14.##8.30.126':445
'14.##8.46.138':445
'14.##8.239.130':445
'14.##8.158.121':445
'14.##8.52.97':445
'14.##8.45.166':445
'14.##8.17.12':445
'14.##8.183.192':445
'14.##8.3.101':445
'14.##8.120.26':445
'14.##8.116.42':139
'14.##8.46.138':139
'14.##8.109.17':139
'14.##8.17.12':139
'14.##8.183.192':139
'14.##8.63.141':139
'14.##8.127.245':139
'14.##8.92.215':139
'14.##8.148.99':139
'14.##8.120.26':139
'14.##8.30.53':139
'14.##8.158.121':139
'14.##8.4.133':139
'14.##8.67.118':139
'14.##8.239.130':139
'14.##8.3.101':139
'14.##8.52.97':139
'14.##8.45.166':139
'14.##8.30.126':139
'14.##8.153.200':139
'14.##8.176.153':139
'14.##8.178.64':139
'14.##8.178.234':139
'14.##8.76.205':139
'14.##8.13.78':139
'14.##8.43.177':139
'14.##8.85.180':139
'14.##8.118.170':139
'14.##8.113.94':139
'14.##8.155.107':139
'14.##8.136.195':139
'14.##8.61.137':139
'14.#08.1.77':139
'14.##8.22.99':139
'14.##8.237.154':139
'14.##8.113.4':139
'14.##8.113.94':445
'14.##8.96.149':9988
'14.##8.149.122':9988
'14.##8.76.205':9988
'14.##8.217.164':9988
'14.##8.216.44':139
'14.##8.237.239':139
'14.##8.212.73':139
'14.##8.29.104':139
'14.##8.43.177':9988
'14.##8.127.245':9988
'14.##8.61.137':9988
'14.##8.148.99':9988
'14.##8.63.141':9988
'14.##8.113.4':9988
'14.#08.1.77':9988
'14.##8.113.94':9988
'14.##8.237.154':9988
'14.##8.154.95':139
'14.##8.237.239':445
'14.##8.154.95':445
'14.##8.29.104':445
'14.##8.216.44':445
'14.##8.207.22':445
'14.##8.213.62':445
'14.##8.75.235':445
'14.##8.31.217':445
'14.##8.212.73':445
'14.##8.207.22':139
'14.##8.213.62':139
'14.##8.75.235':139
'14.##8.31.217':139
'14.##8.109.193':139
'14.##8.15.110':139
'14.##8.194.32':139
'14.##8.88.118':139
'14.##8.92.215':9988
'14.##8.85.180':445
'14.##8.76.205':445
'14.##8.176.153':445
'14.##8.43.177':445
'14.##8.44.182':445
'14.##8.217.164':445
'14.##8.13.78':445
'14.##8.116.42':445
'14.##8.153.200':445
'14.##8.113.4':445
'14.#08.1.77':445
'14.##8.155.107':445
'14.##8.237.154':445
'14.##8.118.170':445
'14.##8.178.234':445
'14.##8.178.64':445
'14.##8.22.99':445
'14.##8.122.217':445
'14.##8.12.49':445
'14.##8.45.166':9988
'14.##8.24.20':445
'14.##8.49.24':445
'14.##8.46.138':9988
'14.##8.109.17':9988
'14.##8.239.130':9988
'14.##8.183.192':9988
'14.##8.98.112':445
'14.##8.192.193':445
'14.##8.126.79':445
'14.##8.149.122':445
'14.##8.96.149':445
'14.##8.103.60':445
'14.##8.119.129':445
'14.##8.139.48':445
'14.##8.91.137':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней