Trojan.Starman.5867

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'72.##3.148.248':445
'72.##3.193.169':445
'72.##3.189.163':445
'72.##3.18.129':445
'72.##3.49.121':445
'72.##3.72.102':445
'72.##3.137.61':139
'72.##3.15.253':139
'72.##3.174.123':139
'72.##3.232.122':139
'72.##3.77.232':139
'72.##3.136.156':139
'72.##3.101.128':445
'72.##3.87.102':445
'72.##3.82.87':445
'72.##3.150.14':445
'72.##3.233.89':445
'72.##3.99.222':445
'72.##3.23.107':445
'72.##3.178.127':445
'72.##3.253.17':445
'72.##3.4.160':445
'72.##3.153.40':445
'72.##3.227.247':445
'72.##3.25.115':139
'72.##3.19.85':139
'72.##3.185.199':139
'72.##3.64.41':139
'72.##3.164.197':139
'72.##3.127.18':139
'72.##3.178.87':139
'72.##3.232.122':445
'72.##3.77.232':445
'72.##3.136.156':445
'72.##3.80.47':139
'72.##3.86.102':139
'72.##3.63.60':139
'72.##3.38.63':139
'72.##3.44.62':139
'72.##3.201.138':139
'72.##3.81.13':139
'72.#13.7.69':139
'72.##3.62.76':139
'72.#13.33.9':139
'72.##3.225.153':139
'72.##3.181.209':139
'72.#13.83.5':139
'72.##3.67.212':139
'72.##3.65.54':139
'72.##3.46.45':445
'72.##3.91.214':445
'72.##3.191.236':445
'72.##3.53.245':445
'72.##3.111.155':445
'72.#13.3.11':445
'72.##3.193.250':139
'72.##3.120.193':139
'72.##3.16.153':139
'72.##3.101.101':445
'72.##3.251.145':445
'72.##3.146.192':445
'72.##3.72.175':445
'72.##3.252.13':445
'72.##3.171.58':445
'72.##3.86.108':445
'72.##3.111.208':445
'72.##3.158.72':445
'72.##3.208.53':445
'72.##3.70.39':445
'72.##3.143.166':445
'72.##3.93.227':445
'72.##3.210.249':445
'72.##3.69.94':445
'72.##3.142.209':139
'72.##3.72.102':139
'72.##3.148.248':139
'72.##3.193.169':139
'72.##3.253.17':139
'72.##3.18.129':139
'72.##3.49.121':139
'72.##3.16.153':445
'72.##3.142.209':445
'72.##3.22.194':445
'72.##3.189.163':139
'72.##3.193.250':445
'72.##3.120.193':445
'72.##3.99.222':139
'72.##3.101.128':139
'72.##3.87.102':139
'72.##3.22.194':139
'72.##3.150.14':139
'72.##3.233.89':139
'72.##3.227.247':139
'72.##3.23.107':139
'72.##3.178.127':139
'72.##3.82.87':139
'72.##3.4.160':139
'72.##3.153.40':139
'72.##3.137.61':445
'72.##3.190.245':445
'72.##3.73.92':445
'72.##3.39.87':445
'72.##3.222.10':445
'72.##3.10.222':445
'72.##3.74.41':445
'72.##3.78.108':139
'72.##3.240.14':139
'72.##3.187.239':139
'72.##3.2.209':445
'72.##3.190.16':445
'72.##3.131.186':445
'72.##3.145.60':445
'72.##3.35.145':445
'72.##3.22.14':445
'72.##3.149.93':445
'72.#13.73.0':445
'72.#13.2.24':445
'72.##3.38.64':445
'72.##3.155.37':445
'72.##3.10.156':445
'72.##3.26.245':445
'72.##3.177.26':445
'72.##3.38.14':445
'72.##3.50.188':139
'72.##3.2.120':139
'72.##3.136.249':139
'72.##3.20.46':139
'72.#13.5.81':139
'72.##3.76.155':139
'72.##3.79.67':139
'72.##3.233.87':139
'72.##3.56.233':139
'72.##3.86.170':139
'72.##3.79.220':139
'72.##3.72.85':139
'72.##3.49.112':139
'72.##3.156.122':139
'72.##3.102.220':139
'72.#13.5.63':139
'72.##3.227.50':139
'72.##3.108.227':139
'72.##3.122.108':139
'72.##3.100.96':139
'72.##3.159.173':139
'72.##3.10.185':139
'72.##3.52.131':139
'72.##3.177.130':139
'72.##3.96.87':139
'72.##3.164.197':445
'72.##3.127.18':445
'72.##3.178.87':445
'72.#13.33.9':445
'72.##3.225.153':445
'72.##3.181.209':445
'72.##3.80.47':445
'72.##3.86.102':445
'72.##3.63.60':445
'72.##3.19.85':445
'72.##3.185.199':445
'72.##3.64.41':445
'72.##3.81.13':445
'72.#13.7.69':445
'72.##3.62.76':445
'72.##3.15.253':445
'72.##3.174.123':445
'72.##3.25.115':445
'72.#13.83.5':445
'72.##3.67.212':445
'72.##3.65.54':445
'72.##3.38.63':445
'72.##3.44.62':445
'72.##3.201.138':445
'72.##3.44.38':139
'72.##3.74.41':139
'72.##3.190.245':139
'72.##3.73.92':139
'72.##3.10.156':139
'72.##3.222.10':139
'72.##3.10.222':139
'72.##3.131.186':139
'72.##3.44.38':445
'72.##3.176.179':445
'72.##3.39.87':139
'72.##3.2.209':139
'72.##3.190.16':139
'72.#13.2.24':139
'72.##3.145.60':139
'72.##3.35.145':139
'72.##3.176.179':139
'72.##3.149.93':139
'72.#13.73.0':139
'72.##3.38.14':139
'72.##3.38.64':139
'72.##3.155.37':139
'72.##3.22.14':139
'72.##3.26.245':139
'72.##3.177.26':139
'72.##3.60.147':445
'72.##3.9.252':445
'72.##3.59.132':445
'72.##3.112.16':445
'72.##3.96.209':445
'72.##3.123.36':445
'72.##3.138.136':445
'72.#13.7.10':445
'72.##3.61.20':445
'72.##3.207.170':445
'72.##3.120.180':445
'72.##3.209.20':445
'72.##3.99.84':445
'72.##3.181.225':445
'72.##3.13.188':445
'72.##3.40.188':139
'72.##3.242.40':139
'72.##3.84.122':445
'72.##3.221.35':445
'72.##3.174.11':445
'72.##3.252.227':445
'72.##3.156.137':445
'72.##3.200.88':445
'72.##3.35.139':445
'72.##3.55.148':445
'72.##3.160.12':445
'72.##3.95.158':445
'72.##3.170.67':445
'72.##3.28.12':445
'72.##3.105.127':445
'72.##3.4.103':445
'72.##3.186.122':445
'72.##3.207.114':445
'72.##3.129.110':445
'72.##3.112.208':445
'72.##3.187.210':445
'72.#13.6.43':445
'72.##3.130.229':445
'72.##3.47.235':445
'72.##3.255.21':445
'72.##3.174.41':445
'72.##3.157.30':445
'72.##3.120.156':445
'72.##3.99.212':445
'72.##3.245.166':445
'72.##3.227.148':445
'72.##3.25.123':445
'72.##3.92.245':445
'72.##3.50.93':445
'72.##3.59.132':139
'72.##3.207.170':139
'72.##3.120.180':139
'72.##3.123.36':139
'72.##3.60.147':139
'72.##3.9.252':139
'72.##3.61.20':139
'72.##3.55.148':139
'72.##3.174.41':139
'72.##3.209.20':139
'72.##3.138.136':139
'72.#13.7.10':139
'72.##3.13.188':139
'72.##3.156.137':139
'72.##3.200.88':139
'72.##3.84.122':139
'72.##3.99.84':139
'72.##3.181.225':139
'72.##3.252.227':139
'72.##3.112.16':139
'72.##3.96.209':139
'72.##3.35.139':139
'72.##3.221.35':139
'72.##3.174.11':139
'72.##3.157.30':139
'72.##3.170.67':139
'72.##3.112.208':139
'72.##3.187.210':139
'72.##3.4.103':139
'72.##3.160.12':139
'72.##3.95.158':139
'72.##3.129.110':139
'72.##3.231.207':139
'72.##3.170.169':139
'72.#13.6.43':139
'72.##3.186.122':139
'72.##3.207.114':139
'72.##3.255.21':139
'72.##3.25.123':139
'72.##3.92.245':139
'72.##3.120.156':139
'72.##3.130.229':139
'72.##3.47.235':139
'72.##3.227.148':139
'72.##3.28.12':139
'72.##3.105.127':139
'72.##3.50.93':139
'72.##3.99.212':139
'72.##3.245.166':139
'72.##3.231.207':445
'72.##3.0.155':139
'72.##3.129.107':139
'72.##3.111.252':139
'72.##3.211.42':445
'72.##3.42.82':445
'72.##3.36.212':139
'72.##3.86.108':139
'72.##3.111.208':139
'72.##3.72.175':139
'72.##3.48.148':139
'72.##3.226.49':139
'72.##3.246.160':139
'72.##3.239.144':445
'72.#13.66.8':445
'72.##3.145.65':445
'72.##3.230.36':445
'72.##3.214.230':445
'72.##3.65.227':445
'72.##3.154.13':445
'72.##3.142.117':445
'72.##3.26.84':445
'72.##3.76.112':445
'72.##3.91.170':445
'72.##3.16.36':445
'72.##3.158.72':139
'72.##3.146.192':139
'72.##3.251.145':139
'72.##3.36.212':445
'72.##3.91.214':139
'72.##3.101.101':139
'72.##3.191.236':139
'72.##3.48.148':445
'72.##3.226.49':445
'72.##3.246.160':445
'72.##3.0.155':445
'72.##3.129.107':445
'72.##3.111.252':445
'72.##3.210.249':139
'72.##3.69.94':139
'72.##3.208.53':139
'72.##3.252.13':139
'72.##3.171.58':139
'72.##3.93.227':139
'72.##3.111.155':139
'72.#13.3.11':139
'72.##3.46.45':139
'72.##3.70.39':139
'72.##3.143.166':139
'72.##3.53.245':139
'72.##3.187.210':9988
'72.##3.40.188':9988
'72.##3.118.100':139
'72.##3.25.123':9988
'72.##3.227.148':9988
'72.##3.28.12':9988
'72.##3.57.193':139
'72.##3.196.250':139
'72.##3.5.197':139
'72.##3.103.96':139
'72.#13.2.50':139
'72.##3.174.252':139
'72.##3.156.137':9988
'72.##3.200.88':9988
'72.##3.112.16':9988
'72.##3.170.169':445
'72.##3.40.188':445
'72.##3.242.40':445
'72.##3.157.30':9988
'72.##3.47.235':9988
'72.##3.130.229':9988
'72.#13.7.10':9988
'72.##3.55.148':9988
'72.##3.174.41':9988
'72.##3.162.227':139
'72.##3.118.100':445
'72.##3.103.96':445
'72.#13.2.50':445
'72.##3.26.84':139
'72.##3.211.42':139
'72.##3.42.82':139
'72.##3.5.197':445
'72.##3.57.193':445
'72.##3.12.248':445
'72.##3.174.252':445
'72.##3.196.250':445
'72.##3.162.227':445
'72.##3.65.227':139
'72.#13.66.8':139
'72.##3.145.65':139
'72.##3.12.248':139
'72.##3.230.36':139
'72.##3.214.230':139
'72.##3.16.36':139
'72.##3.154.13':139
'72.##3.142.117':139
'72.##3.239.144':139
'72.##3.91.170':139
'72.##3.76.112':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней