Trojan.Starman.5875

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'61.##.204.89':139
'61.##.46.204':139
'61.##.89.181':139
'61.##.232.160':139
'61.#6.60.1':139
'61.##.87.184':139
'61.##.22.123':139
'61.##.201.145':139
'61.#6.6.47':139
'61.##.146.22':139
'61.#6.7.115':139
'61.##.176.247':139
'61.#6.65.10':139
'61.#6.250.6':139
'61.##.93.197':139
'61.##.161.102':139
'61.##.160.144':139
'61.#6.28.95':139
'61.##.188.57':139
'61.##.37.189':139
'61.##.41.103':139
'61.##.160.144':445
'61.##.232.160':445
'61.##.161.102':445
'61.##.37.189':445
'61.#6.28.95':445
'61.##.46.204':445
'61.#6.6.47':445
'61.##.204.89':445
'61.#6.60.1':445
'61.##.89.181':445
'61.##.215.179':445
'61.#6.250.6':445
'61.##.32.209':445
'61.#6.86.42':139
'61.##.178.188':445
'61.##.176.247':445
'61.##.188.57':445
'61.#6.7.115':445
'61.##.93.197':445
'61.#6.65.10':445
'61.##.215.179':139
'61.##.126.93':445
'61.##.212.125':445
'61.##.233.33':139
'61.##.41.220':139
'61.##.87.235':139
'61.##.51.253':445
'61.##.37.233':445
'61.##.36.215':445
'61.##.167.27':445
'61.##.165.41':445
'61.##.151.164':139
'61.##.88.151':139
'61.##.27.234':139
'61.#6.41.87':139
'61.##.198.244':139
'61.#6.75.55':139
'61.#6.34.67':139
'61.##.241.99':139
'61.##.107.194':139
'61.##.181.177':139
'61.#6.14.38':445
'61.#6.75.55':445
'61.#6.34.67':445
'61.##.241.99':445
'61.##.107.194':445
'61.##.181.177':445
'61.##.178.188':139
'61.##.32.209':139
'61.##.233.33':445
'61.##.41.220':445
'61.##.87.235':445
'61.##.166.58':445
'61.#6.5.173':445
'61.#6.240.5':445
'61.##.124.14':445
'61.##.240.187':445
'61.##.151.164':445
'61.##.88.151':445
'61.##.27.234':445
'61.#6.41.87':445
'61.##.198.244':445
'61.##.124.62':445
'61.#6.51.21':445
'61.##.38.250':445
'61.#6.42.19':445
'61.##.224.173':445
'61.##.137.146':139
'61.##.13.137':139
'61.##.145.249':139
'61.##.135.131':445
'61.##.163.196':139
'61.#6.4.13':445
'61.#6.25.70':445
'61.##.173.230':445
'61.##.126.99':445
'61.##.185.104':445
'61.##.227.156':445
'61.##.17.227':445
'61.##.157.43':445
'61.##.207.210':445
'61.##.14.178':445
'61.##.248.12':139
'61.##.106.46':139
'61.##.97.156':139
'61.##.139.101':139
'61.##.83.162':139
'61.##.151.17':139
'61.##.180.110':139
'61.##.130.209':139
'61.##.105.185':139
'61.##.201.77':139
'61.##.164.176':139
'61.#6.213.3':139
'61.#6.56.23':139
'61.##.125.21':139
'61.#6.29.56':139
'61.#6.6.196':139
'61.#6.37.27':139
'61.##.101.37':139
'61.##.26.122':139
'61.##.11.200':139
'61.##.254.251':139
'61.#6.31.75':445
'61.##.58.167':139
'61.##.107.82':139
'61.##.167.54':139
'61.##.92.110':139
'61.##.54.246':139
'61.##.173.230':139
'61.#6.4.13':139
'61.##.185.104':139
'61.#6.31.75':139
'61.##.126.99':139
'61.##.22.123':445
'61.##.41.103':445
'61.##.87.184':445
'61.##.146.22':445
'61.##.201.145':445
'61.#6.1.35':139
'61.##.234.43':139
'61.##.239.188':139
'61.#6.86.42':445
'61.##.191.31':139
'61.#6.25.70':139
'61.#6.1.35':445
'61.##.234.43':445
'61.##.239.188':445
'61.##.135.131':139
'61.##.191.31':445
'61.##.58.167':445
'61.##.107.82':445
'61.##.167.54':445
'61.##.92.110':445
'61.##.54.246':445
'61.##.227.156':139
'61.##.17.227':139
'61.##.157.43':139
'61.##.207.210':139
'61.##.14.178':139
'61.##.124.62':139
'61.#6.51.21':139
'61.##.38.250':139
'61.#6.42.19':139
'61.##.224.173':139
'61.##.29.243':445
'61.##.97.192':445
'61.##.138.53':445
'61.##.184.103':445
'61.##.47.112':445
'61.#6.74.72':445
'61.##.45.188':445
'61.##.40.160':445
'61.##.37.132':445
'61.##.91.102':445
'61.##.86.216':139
'61.##.220.67':139
'61.##.142.138':139
'61.#6.229.1':139
'61.##.155.99':139
'61.##.75.176':139
'61.##.117.15':445
'61.##.176.33':139
'61.##.53.153':139
'61.##.33.102':139
'61.#6.81.60':445
'61.##.154.41':445
'61.##.45.254':445
'61.##.41.102':445
'61.##.254.253':445
'61.##.138.198':445
'61.#6.54.55':445
'61.#6.5.167':445
'61.##.236.113':445
'61.##.150.215':445
'61.##.26.253':445
'61.##.89.179':445
'61.##.214.99':445
'61.#6.86.51':445
'61.##.174.253':445
'61.#6.72.88':445
'61.##.94.105':445
'61.##.182.94':445
'61.##.114.100':445
'61.##.100.244':445
'61.##.203.110':445
'61.##.169.46':139
'61.#6.72.88':139
'61.#6.86.51':139
'61.##.174.253':139
'61.##.45.188':139
'61.#6.81.60':139
'61.##.203.110':139
'61.##.114.100':139
'61.##.100.244':139
'61.##.89.179':139
'61.##.214.99':139
'61.##.138.53':139
'61.##.29.243':139
'61.##.47.112':139
'61.##.117.15':139
'61.##.184.103':139
'61.##.40.160':139
'61.#6.74.72':139
'61.##.91.102':139
'61.##.97.192':139
'61.##.37.132':139
'61.##.94.105':139
'61.##.223.245':139
'61.##.88.102':139
'61.##.190.107':139
'61.#6.5.167':139
'61.##.107.222':139
'61.##.86.146':139
'61.##.176.43':139
'61.##.172.111':139
'61.#6.89.66':139
'61.##.99.116':139
'61.##.41.102':139
'61.##.154.41':139
'61.##.138.198':139
'61.##.182.94':139
'61.##.254.253':139
'61.##.236.113':139
'61.#6.54.55':139
'61.##.26.253':139
'61.##.45.254':139
'61.##.150.215':139
'61.##.21.252':445
'61.#6.33.22':445
'61.##.182.128':445
'61.##.38.226':139
'61.##.141.75':445
'61.#6.93.27':445
'61.##.164.92':445
'61.##.171.180':445
'61.#6.70.86':445
'61.##.104.27':445
'61.#6.59.0':139
'61.##.107.250':139
'61.##.164.92':139
'61.##.171.180':139
'61.#6.93.27':139
'61.##.202.75':139
'61.##.58.144':139
'61.##.130.162':139
'61.##.209.12':139
'61.##.116.132':139
'61.#6.59.0':445
'61.##.37.233':139
'61.#6.14.38':139
'61.##.51.253':139
'61.##.165.41':139
'61.##.36.215':139
'61.##.166.58':139
'61.#6.5.173':139
'61.#6.240.5':139
'61.##.124.14':139
'61.##.240.187':139
'61.##.130.162':445
'61.##.202.75':445
'61.##.116.132':445
'61.##.107.250':445
'61.##.209.12':445
'61.##.212.125':139
'61.##.167.27':139
'61.##.126.93':139
'61.##.58.144':445
'61.##.38.226':445
'61.##.104.27':139
'61.##.86.216':445
'61.##.220.67':445
'61.##.142.138':445
'61.#6.229.1':445
'61.##.155.99':445
'61.##.75.176':445
'61.##.138.53':9988
'61.##.176.33':445
'61.##.53.153':445
'61.##.33.102':445
'61.##.88.102':445
'61.#6.89.66':445
'61.##.223.245':445
'61.##.107.222':445
'61.##.190.107':445
'61.##.176.43':445
'61.##.169.46':445
'61.##.86.146':445
'61.##.99.116':445
'61.##.172.111':445
'61.##.117.15':9988
'61.##.99.116':9988
'61.##.45.254':9988
'61.#6.54.55':9988
'61.##.138.198':9988
'61.##.88.102':9988
'61.#6.33.22':139
'61.#6.70.86':139
'61.##.21.252':139
'61.##.141.75':139
'61.##.182.128':139
'61.##.40.160':9988
'61.#6.74.72':9988
'61.##.91.102':9988
'61.##.97.192':9988
'61.##.37.132':9988
'61.##.94.105':9988
'61.##.254.253':9988
'61.##.182.94':9988
'61.#6.86.51':9988
'61.##.89.179':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней