Trojan.Starman.5367

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'72.#3.0.211':139
'72.##.165.213':139
'72.##.175.173':139
'72.##.23.108':139
'72.##.173.90':139
'72.##.197.204':139
'72.##.237.214':139
'72.##.60.224':139
'72.##.56.196':139
'72.#3.64.61':139
'72.##.54.122':139
'72.##.206.29':139
'72.#3.68.54':139
'72.##.34.212':445
'72.##.203.146':445
'72.#3.20.66':445
'72.##.109.61':139
'72.##.68.109':139
'72.##.153.14':139
'72.##.88.186':139
'72.##.81.108':139
'72.##.173.90':445
'72.##.175.173':445
'72.##.23.108':445
'72.##.68.109':445
'72.##.54.122':445
'72.#3.64.61':445
'72.##.60.224':445
'72.##.56.196':445
'72.#3.0.211':445
'72.##.165.213':445
'72.##.109.61':445
'72.##.91.154':139
'72.##.65.114':139
'72.##.63.171':139
'72.##.93.129':139
'72.##.20.232':139
'72.##.81.108':445
'72.##.153.14':445
'72.##.88.186':445
'72.##.206.29':445
'72.#3.68.54':445
'72.##.103.143':445
'72.##.103.143':139
'72.##.203.146':139
'72.##.216.134':139
'72.##.26.122':139
'72.##.30.109':139
'72.##.12.103':445
'72.##.252.202':445
'72.##.86.217':445
'72.#3.20.66':139
'72.##.34.212':139
'72.##.143.18':139
'72.##.31.119':139
'72.#3.22.81':139
'72.##.222.194':139
'72.##.201.103':139
'72.##.78.236':139
'72.#3.6.224':139
'72.##.131.103':139
'72.##.159.126':139
'72.#3.49.82':139
'72.##.23.106':139
'72.##.159.126':445
'72.#3.6.224':445
'72.##.23.106':445
'72.#3.22.81':445
'72.#3.49.82':445
'72.##.30.109':445
'72.##.216.134':445
'72.##.26.122':445
'72.##.131.103':445
'72.##.143.18':445
'72.##.31.119':445
'72.##.136.158':445
'72.##.254.136':445
'72.##.226.198':445
'72.##.166.254':445
'72.#3.57.48':445
'72.##.78.236':445
'72.##.222.194':445
'72.##.201.103':445
'72.##.205.10':445
'72.##.76.178':445
'72.##.197.204':445
'72.##.60.181':445
'72.##.22.185':445
'72.##.162.130':445
'72.#3.91.47':445
'72.##.157.32':445
'72.##.212.18':139
'72.##.191.27':139
'72.##.141.188':445
'72.#3.6.15':445
'72.#3.8.6':445
'72.##.20.131':445
'72.##.69.242':445
'72.##.38.138':445
'72.##.251.149':445
'72.##.66.101':445
'72.##.243.51':445
'72.##.32.129':445
'72.##.184.56':445
'72.##.77.145':445
'72.##.60.121':445
'72.##.145.108':445
'72.##.175.241':139
'72.##.144.154':139
'72.##.132.243':139
'72.##.179.99':139
'72.##.255.207':139
'72.##.234.153':139
'72.##.200.245':139
'72.##.153.236':139
'72.##.52.145':139
'72.##.46.242':139
'72.##.115.42':139
'72.#3.1.4':139
'72.##.208.227':139
'72.##.245.234':139
'72.##.201.232':139
'72.##.174.88':139
'72.##.164.11':139
'72.##.30.208':139
'72.##.11.123':139
'72.##.159.33':139
'72.##.122.158':139
'72.##.215.184':445
'72.##.215.184':139
'72.##.66.101':139
'72.##.135.16':139
'72.##.31.251':139
'72.#3.6.126':139
'72.##.38.138':139
'72.##.60.121':139
'72.##.69.242':139
'72.##.243.51':139
'72.##.251.149':139
'72.#3.4.1':139
'72.##.63.171':445
'72.##.91.154':445
'72.##.20.232':445
'72.##.237.214':445
'72.##.93.129':445
'72.##.158.169':139
'72.#3.59.75':139
'72.##.200.48':139
'72.##.65.114':445
'72.##.20.253':139
'72.##.200.48':445
'72.##.158.169':445
'72.##.20.253':445
'72.#3.8.6':139
'72.##.141.188':139
'72.#3.6.126':445
'72.##.135.16':445
'72.##.31.251':445
'72.#3.59.75':445
'72.#3.4.1':445
'72.#3.6.15':139
'72.##.184.56':139
'72.##.20.131':139
'72.##.32.129':139
'72.##.145.108':139
'72.##.77.145':139
'72.##.60.181':139
'72.##.22.185':139
'72.##.162.130':139
'72.#3.91.47':139
'72.##.157.32':139
'72.##.76.178':139
'72.##.255.24':445
'72.#3.1.203':445
'72.##.100.78':445
'72.##.55.130':445
'72.#3.53.55':445
'72.##.65.103':445
'72.##.110.241':445
'72.##.59.250':445
'72.##.195.26':445
'72.##.17.226':445
'72.##.186.19':445
'72.##.61.254':139
'72.##.44.158':139
'72.##.10.107':139
'72.#3.70.20':139
'72.#3.65.32':139
'72.##.20.251':445
'72.##.188.232':445
'72.##.161.180':139
'72.##.240.81':139
'72.##.180.239':139
'72.#3.9.142':445
'72.#3.79.23':445
'72.##.142.91':445
'72.##.239.251':445
'72.#3.6.45':445
'72.#3.34.90':445
'72.##.105.88':445
'72.##.10.160':445
'72.##.128.203':445
'72.##.87.209':445
'72.##.240.103':445
'72.#3.12.33':445
'72.##.126.94':445
'72.##.114.186':445
'72.#3.196.3':445
'72.#3.3.234':445
'72.##.13.173':445
'72.##.226.87':445
'72.##.120.39':445
'72.#3.20.54':445
'72.#3.61.11':445
'72.##.68.140':139
'72.#3.3.234':139
'72.##.114.186':139
'72.#3.196.3':139
'72.##.65.103':139
'72.##.110.241':139
'72.#3.61.11':139
'72.##.120.39':139
'72.#3.20.54':139
'72.#3.12.33':139
'72.##.126.94':139
'72.##.59.250':139
'72.##.20.251':139
'72.##.255.24':139
'72.##.188.232':139
'72.##.100.78':139
'72.##.186.19':139
'72.##.195.26':139
'72.##.17.226':139
'72.#3.1.203':139
'72.##.55.130':139
'72.#3.53.55':139
'72.##.230.42':139
'72.##.131.230':139
'72.##.24.126':139
'72.##.105.88':139
'72.#3.34.90':139
'72.#3.142.6':139
'72.##.179.51':139
'72.##.73.221':139
'72.#3.65.23':139
'72.##.221.239':139
'72.##.10.160':139
'72.##.239.251':139
'72.#3.6.45':139
'72.##.240.103':139
'72.##.13.173':139
'72.##.226.87':139
'72.##.128.203':139
'72.##.87.209':139
'72.#3.79.23':139
'72.##.142.91':139
'72.#3.9.142':139
'72.##.24.126':445
'72.##.164.135':445
'72.#3.15.41':445
'72.#3.61.6':445
'72.##.104.230':445
'72.##.95.194':445
'72.##.104.81':445
'72.##.121.104':445
'72.##.81.215':445
'72.#3.63.25':445
'72.##.39.165':445
'72.##.92.229':445
'72.##.177.136':139
'72.##.204.88':139
'72.##.221.96':139
'72.##.121.60':139
'72.#3.96.55':139
'72.#3.39.15':139
'72.##.61.202':139
'72.##.91.230':139
'72.##.146.55':139
'72.##.120.142':139
'72.##.252.202':139
'72.##.166.254':139
'72.##.12.103':139
'72.##.61.202':445
'72.##.86.217':139
'72.##.254.136':139
'72.##.205.10':139
'72.##.136.158':139
'72.#3.57.48':139
'72.##.226.198':139
'72.#3.39.15':445
'72.#3.96.55':445
'72.##.221.96':445
'72.##.121.60':445
'72.##.70.105':445
'72.##.147.246':445
'72.##.120.142':445
'72.##.91.230':445
'72.##.146.55':445
'72.##.177.136':445
'72.##.204.88':445
'72.##.147.246':139
'72.##.180.239':445
'72.##.161.180':445
'72.##.240.81':445
'72.##.61.254':445
'72.##.44.158':445
'72.##.126.94':9988
'72.#3.20.54':9988
'72.##.114.186':9988
'72.##.255.24':9988
'72.##.110.241':9988
'72.##.10.107':445
'72.##.221.239':445
'72.##.73.221':445
'72.#3.65.23':445
'72.##.230.42':445
'72.##.131.230':445
'72.#3.70.20':445
'72.#3.65.32':445
'72.##.68.140':445
'72.#3.142.6':445
'72.##.179.51':445
'72.#3.15.41':139
'72.#3.63.25':139
'72.##.164.135':139
'72.##.95.194':139
'72.#3.61.6':139
'72.##.121.104':139
'72.##.70.105':139
'72.##.104.81':139
'72.##.39.165':139
'72.##.81.215':139
'72.##.104.230':139
'72.##.226.87':9988
'72.##.239.251':9988
'72.##.13.173':9988
'72.#3.61.11':9988
'72.##.120.39':9988
'72.##.24.126':9988
'72.##.92.229':139
'72.#3.34.90':9988
'72.##.142.91':9988
'72.#3.9.142':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней