Trojan.Starman.5407

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'82.##4.10.244':139
'82.##4.103.241':139
'82.##4.111.129':139
'82.##4.189.112':139
'82.##4.180.21':139
'82.##4.177.184':139
'82.##4.116.224':139
'82.##4.237.142':139
'82.##4.87.242':139
'82.##4.58.234':139
'82.##4.242.58':139
'82.##4.119.215':139
'82.##4.161.29':139
'82.##4.64.79':139
'82.##4.59.18':139
'82.##4.34.187':139
'82.##4.201.97':139
'82.##4.196.196':139
'82.##4.136.60':139
'82.##4.75.197':139
'82.##4.45.251':139
'82.##4.90.196':139
'82.##4.123.145':139
'82.##4.88.67':445
'82.##4.129.188':445
'82.##4.66.227':445
'82.##4.216.90':139
'82.##4.226.26':139
'82.##4.196.195':445
'82.##4.153.242':445
'82.##4.65.179':445
'82.##4.242.30':445
'82.##4.224.207':445
'82.#74.16.7':445
'82.##4.166.200':139
'82.##4.238.222':139
'82.##4.165.149':139
'82.##4.239.78':139
'82.##4.81.66':139
'82.#74.2.94':139
'82.##4.128.234':139
'82.#74.74.4':139
'82.##4.86.24':139
'82.##4.116.97':139
'82.##4.213.150':139
'82.##4.181.178':139
'82.##4.119.198':445
'82.##4.138.141':445
'82.##4.82.40':445
'82.##4.52.92':445
'82.##4.40.111':445
'82.##4.66.141':445
'82.##4.159.239':445
'82.##4.71.189':445
'82.##4.239.3':445
'82.##4.117.129':445
'82.##4.98.27':445
'82.##4.242.144':445
'82.##4.56.181':445
'82.##4.54.235':445
'82.##4.182.34':445
'82.##4.152.9':445
'82.##4.172.152':445
'82.#74.2.35':445
'82.##4.236.60':445
'82.##4.180.249':445
'82.##4.8.191':445
'82.##4.102.3':445
'82.##4.130.100':445
'82.##4.242.30':139
'82.##4.153.242':139
'82.#74.16.7':139
'82.##4.196.195':139
'82.##4.224.207':139
'82.##4.65.179':139
'82.##4.240.149':139
'82.##4.64.240':139
'82.##4.150.112':139
'82.##4.145.123':139
'82.##4.126.53':139
'82.##4.129.188':139
'82.##4.219.156':445
'82.##4.100.219':445
'82.##4.156.241':445
'82.##4.140.81':445
'82.##4.255.217':445
'82.##4.22.154':445
'82.##4.66.227':139
'82.##4.88.67':139
'82.##4.227.110':445
'82.##4.33.96':445
'82.#74.34.6':445
'82.##4.145.123':445
'82.##4.165.60':139
'82.##4.141.153':139
'82.##4.77.208':139
'82.##4.6.233':139
'82.##4.112.253':139
'82.##4.100.229':139
'82.##4.246.78':139
'82.##4.136.246':139
'82.##4.79.91':139
'82.##4.198.216':139
'82.#74.91.6':139
'82.##4.21.164':139
'82.##4.61.133':139
'82.##4.96.247':139
'82.##4.133.159':139
'82.#74.97.4':139
'82.##4.108.117':139
'82.##4.125.164':139
'82.##4.56.163':139
'82.##4.246.56':139
'82.##4.163.78':139
'82.##4.25.157':139
'82.#74.98.2':139
'82.##4.224.206':139
'82.##4.251.233':139
'82.##4.91.191':139
'82.##4.142.196':139
'82.##4.35.120':139
'82.##4.83.101':139
'82.##4.86.22':139
'82.##4.45.60':139
'82.##4.212.117':139
'82.##4.224.209':139
'82.##4.21.239':139
'82.##4.206.238':139
'82.##4.12.183':139
'82.#74.91.1':139
'82.##4.106.193':139
'82.##4.140.122':139
'82.##4.232.110':139
'82.##4.79.105':139
'82.#74.6.15':139
'82.##4.56.83':139
'82.##4.187.189':139
'82.##4.254.193':139
'82.##4.156.13':139
'82.##4.119.215':445
'82.##4.189.112':445
'82.##4.75.197':445
'82.##4.45.251':445
'82.##4.136.60':445
'82.##4.180.21':445
'82.##4.177.184':445
'82.##4.58.234':445
'82.##4.103.241':445
'82.##4.111.129':445
'82.##4.10.244':445
'82.##4.123.145':445
'82.##4.64.240':445
'82.##4.34.187':445
'82.##4.240.149':445
'82.##4.126.53':445
'82.##4.150.112':445
'82.##4.201.97':445
'82.##4.196.196':445
'82.##4.90.196':445
'82.##4.64.79':445
'82.##4.59.18':445
'82.##4.161.29':445
'82.##4.166.200':445
'82.##4.216.90':445
'82.##4.86.24':445
'82.##4.116.97':445
'82.#74.74.4':445
'82.##4.226.26':445
'82.##4.228.59':139
'82.##4.42.32':139
'82.##4.246.180':139
'82.##4.41.82':139
'82.##4.248.59':139
'82.##4.181.178':445
'82.##4.237.142':445
'82.##4.81.66':445
'82.##4.116.224':445
'82.##4.242.58':445
'82.##4.87.242':445
'82.#74.2.94':445
'82.##4.128.234':445
'82.##4.213.150':445
'82.##4.165.149':445
'82.##4.239.78':445
'82.##4.238.222':445
'82.##4.13.104':445
'82.##4.22.231':445
'82.##4.24.30':445
'82.##4.171.175':445
'82.##4.145.107':445
'82.##4.169.34':445
'82.##4.193.31':445
'82.#74.1.68':445
'82.##4.70.70':445
'82.##4.15.169':445
'82.##4.39.10':445
'82.##4.162.209':445
'82.##4.84.167':139
'82.##4.35.77':139
'82.##4.39.38':139
'82.##4.23.82':139
'82.##4.54.247':139
'82.##4.22.203':445
'82.##4.232.71':445
'82.##4.211.191':445
'82.##4.104.211':445
'82.##4.240.147':445
'82.##4.24.57':445
'82.##4.55.239':445
'82.#74.6.56':445
'82.##4.219.33':445
'82.##4.163.96':445
'82.##4.150.117':445
'82.##4.171.6':445
'82.##4.73.151':445
'82.##4.109.174':445
'82.##4.151.144':445
'82.##4.59.171':445
'82.##4.144.60':445
'82.##4.8.202':445
'82.##4.93.139':445
'82.##4.194.147':445
'82.##4.231.115':445
'82.##4.118.2':445
'82.##4.53.193':445
'82.##4.96.250':445
'82.##4.117.8':445
'82.##4.195.37':445
'82.##4.228.51':445
'82.##4.209.107':445
'82.##4.171.0':445
'82.##4.70.70':139
'82.##4.193.31':139
'82.##4.39.10':139
'82.##4.169.34':139
'82.##4.15.169':139
'82.#74.1.68':139
'82.##4.93.139':139
'82.##4.194.147':139
'82.##4.231.115':139
'82.##4.118.2':139
'82.##4.53.193':139
'82.##4.22.231':139
'82.##4.232.71':139
'82.##4.24.57':139
'82.##4.240.147':139
'82.##4.22.203':139
'82.##4.104.211':139
'82.##4.211.191':139
'82.##4.24.30':139
'82.##4.13.104':139
'82.##4.145.107':139
'82.##4.162.209':139
'82.##4.171.175':139
'82.##4.151.144':139
'82.##4.73.151':139
'82.##4.144.60':139
'82.##4.171.6':139
'82.##4.59.171':139
'82.##4.109.174':139
'82.##4.67.84':139
'82.##4.48.72':139
'82.##4.118.16':139
'82.##4.217.48':139
'82.##4.54.12':139
'82.#74.6.56':139
'82.##4.228.51':139
'82.##4.117.8':139
'82.##4.171.0':139
'82.##4.96.250':139
'82.##4.209.107':139
'82.##4.195.37':139
'82.##4.219.33':139
'82.##4.55.239':139
'82.##4.150.117':139
'82.##4.8.202':139
'82.##4.163.96':139
'82.##4.217.48':445
'82.##4.239.3':139
'82.##4.159.239':139
'82.##4.98.27':139
'82.##4.66.141':139
'82.##4.117.129':139
'82.##4.71.189':139
'82.##4.219.156':139
'82.##4.100.219':139
'82.##4.156.241':139
'82.##4.140.81':139
'82.##4.255.217':139
'82.##4.138.141':139
'82.##4.8.191':139
'82.##4.236.60':139
'82.##4.130.100':139
'82.#74.2.35':139
'82.##4.102.3':139
'82.##4.180.249':139
'82.##4.82.40':139
'82.##4.119.198':139
'82.##4.40.111':139
'82.##4.242.144':139
'82.##4.52.92':139
'82.##4.129.14':445
'82.##4.155.89':445
'82.##4.14.236':445
'82.##4.230.62':445
'82.##4.192.204':445
'82.##4.14.56':445
'82.##4.46.110':445
'82.#74.9.47':445
'82.##4.110.32':445
'82.##4.58.91':445
'82.##4.50.241':445
'82.##4.220.191':445
'82.##4.227.110':139
'82.##4.200.142':445
'82.#74.34.6':139
'82.##4.22.154':139
'82.##4.33.96':139
'82.#74.35.0':445
'82.##4.177.30':445
'82.##4.5.177':445
'82.##4.99.218':445
'82.##4.106.244':445
'82.##4.40.83':445
'82.##4.171.0':9988
'82.##4.163.96':9988
'82.##4.118.2':9988
'82.##4.39.10':9988
'82.##4.193.31':9988
'82.##4.150.117':9988
'82.##4.84.167':9988
'82.##4.200.142':139
'82.##4.54.247':9988
'82.##4.55.239':9988
'82.##4.73.151':9988
'82.##4.24.30':9988
'82.##4.48.72':445
'82.##4.23.82':445
'82.##4.67.84':445
'82.##4.54.12':445
'82.##4.118.16':445
'82.##4.54.247':445
'82.##4.22.203':9988
'82.##4.22.231':9988
'82.##4.35.77':445
'82.##4.39.38':445
'82.##4.84.167':445
'82.##4.110.32':139
'82.##4.46.110':139
'82.##4.50.241':139
'82.##4.14.56':139
'82.##4.58.91':139
'82.#74.9.47':139
'82.##4.56.181':139
'82.##4.54.235':139
'82.##4.182.34':139
'82.##4.152.9':139
'82.##4.172.152':139
'82.##4.155.89':139
'82.##4.99.218':139
'82.##4.177.30':139
'82.##4.40.83':139
'82.#74.35.0':139
'82.##4.106.244':139
'82.##4.5.177':139
'82.##4.14.236':139
'82.##4.129.14':139
'82.##4.192.204':139
'82.##4.220.191':139
'82.##4.230.62':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней