Trojan.Starman.5271

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'84.##.107.169':139
'84.##.128.65':139
'84.#6.23.36':139
'84.##.84.170':139
'84.#6.10.47':139
'84.##.224.81':139
'84.##.106.213':139
'84.#6.81.64':139
'84.##.239.64':139
'84.##.125.182':139
'84.##.49.102':139
'84.##.238.246':139
'84.##.235.238':139
'84.##.145.119':139
'84.##.133.218':139
'84.#6.107.1':139
'84.##.101.246':139
'84.##.212.101':139
'84.##.73.155':139
'84.#6.59.39':139
'84.##.115.15':139
'84.##.49.102':445
'84.##.84.170':445
'84.##.212.101':445
'84.##.73.155':445
'84.##.101.246':445
'84.##.128.65':445
'84.##.239.64':445
'84.##.107.169':445
'84.#6.10.47':445
'84.#6.23.36':445
'84.##.115.15':445
'84.##.202.62':139
'84.##.133.218':445
'84.##.197.166':139
'84.#6.17.45':139
'84.##.167.17':139
'84.##.235.238':445
'84.#6.59.39':445
'84.##.238.246':445
'84.#6.107.1':445
'84.##.145.119':445
'84.#6.63.31':139
'84.#6.0.105':139
'84.##.176.228':139
'84.##.120.122':139
'84.##.170.37':139
'84.##.154.207':445
'84.##.101.132':445
'84.#6.9.21':445
'84.##.150.19':445
'84.##.126.10':445
'84.##.11.191':139
'84.##.229.247':139
'84.##.10.114':139
'84.##.100.146':139
'84.##.203.29':139
'84.##.146.203':139
'84.##.26.224':139
'84.##.104.217':139
'84.#6.96.64':139
'84.##.230.57':139
'84.#6.64.74':139
'84.##.104.217':445
'84.##.11.191':445
'84.##.26.224':445
'84.#6.64.74':445
'84.#6.96.64':445
'84.#6.63.31':445
'84.#6.0.105':445
'84.##.176.228':445
'84.##.120.122':445
'84.##.170.37':445
'84.##.230.57':445
'84.#6.19.82':445
'84.#6.60.7':445
'84.#6.34.77':445
'84.##.250.86':445
'84.#6.2.251':445
'84.##.229.247':445
'84.##.10.114':445
'84.##.100.146':445
'84.##.203.29':445
'84.##.146.203':445
'84.##.125.182':445
'84.#6.24.19':445
'84.#6.86.8':445
'84.##.201.224':445
'84.##.61.200':445
'84.#6.7.239':445
'84.##.78.112':139
'84.#6.69.61':139
'84.##.185.206':139
'84.##.226.53':445
'84.#6.32.97':139
'84.##.108.11':445
'84.##.167.58':445
'84.##.108.105':445
'84.##.207.69':445
'84.##.217.215':445
'84.#6.70.30':445
'84.#6.70.31':445
'84.##.140.237':445
'84.#6.63.88':445
'84.##.11.228':445
'84.#6.78.11':445
'84.##.137.178':139
'84.##.236.27':139
'84.##.146.56':139
'84.##.194.36':139
'84.#6.57.18':139
'84.##.167.183':139
'84.##.206.53':139
'84.##.239.76':139
'84.##.92.162':139
'84.##.123.253':139
'84.#6.53.10':139
'84.#6.120.8':139
'84.##.102.139':139
'84.##.246.208':139
'84.##.51.206':139
'84.##.209.222':139
'84.#6.54.83':139
'84.##.230.231':139
'84.#6.40.15':139
'84.##.122.29':139
'84.#6.9.130':139
'84.#6.31.29':139
'84.##.17.146':139
'84.##.176.45':139
'84.#6.45.35':139
'84.##.64.204':139
'84.##.167.58':139
'84.##.108.105':139
'84.##.207.69':139
'84.##.217.215':139
'84.#6.70.30':139
'84.##.47.243':139
'84.#6.17.45':445
'84.##.167.17':445
'84.##.106.213':445
'84.#6.81.64':445
'84.##.224.81':445
'84.#6.20.17':139
'84.##.234.184':139
'84.##.127.197':139
'84.##.197.166':445
'84.##.202.62':445
'84.##.234.184':445
'84.##.47.243':445
'84.#6.20.17':445
'84.##.226.53':139
'84.##.127.197':445
'84.#6.31.29':445
'84.##.17.146':445
'84.##.176.45':445
'84.#6.45.35':445
'84.##.64.204':445
'84.#6.86.8':139
'84.#6.70.31':139
'84.##.140.237':139
'84.#6.63.88':139
'84.##.11.228':139
'84.#6.78.11':139
'84.##.201.224':139
'84.#6.24.19':139
'84.#6.7.239':139
'84.##.108.11':139
'84.##.61.200':139
'84.#6.50.69':445
'84.#6.60.43':445
'84.#6.69.91':445
'84.#6.137.7':445
'84.#6.57.92':445
'84.##.57.206':445
'84.##.89.148':445
'84.##.102.140':445
'84.##.33.169':445
'84.##.140.33':445
'84.##.166.88':445
'84.##.160.203':139
'84.##.243.39':139
'84.##.65.190':139
'84.##.253.226':139
'84.##.90.242':139
'84.#6.130.1':139
'84.##.126.165':445
'84.##.206.32':139
'84.##.188.243':139
'84.##.186.188':139
'84.##.221.27':445
'84.#6.1.37':445
'84.##.105.169':445
'84.#6.6.49':445
'84.##.49.224':445
'84.#6.8.144':445
'84.#6.5.93':445
'84.##.204.156':445
'84.##.170.70':445
'84.##.146.250':445
'84.#6.0.127':445
'84.##.49.154':445
'84.##.96.222':445
'84.##.28.189':445
'84.##.178.177':445
'84.#6.89.81':445
'84.#6.30.68':445
'84.##.196.221':445
'84.#6.97.83':445
'84.##.244.241':445
'84.#6.13.19':445
'84.##.28.189':139
'84.##.49.154':139
'84.#6.89.81':139
'84.##.89.148':139
'84.##.178.177':139
'84.#6.97.83':139
'84.#6.30.68':139
'84.#6.13.19':139
'84.##.96.222':139
'84.##.244.241':139
'84.##.57.206':139
'84.#6.57.92':139
'84.#6.69.91':139
'84.#6.137.7':139
'84.##.166.88':139
'84.##.126.165':139
'84.##.140.33':139
'84.##.102.140':139
'84.##.33.169':139
'84.#6.50.69':139
'84.#6.60.43':139
'84.##.237.206':139
'84.##.131.212':139
'84.##.177.24':139
'84.#6.5.93':139
'84.##.93.213':139
'84.##.200.60':139
'84.##.186.45':139
'84.##.60.236':139
'84.##.131.183':139
'84.##.143.215':139
'84.#6.8.144':139
'84.##.49.224':139
'84.##.105.169':139
'84.#6.6.49':139
'84.##.196.221':139
'84.#6.0.127':139
'84.##.146.250':139
'84.##.204.156':139
'84.##.170.70':139
'84.##.221.27':139
'84.#6.1.37':139
'84.##.93.213':445
'84.##.149.81':445
'84.##.144.48':445
'84.##.241.55':445
'84.##.99.236':445
'84.##.36.207':445
'84.##.223.247':445
'84.##.54.229':445
'84.#6.65.8':445
'84.#6.22.20':445
'84.#6.8.80':445
'84.##.163.158':139
'84.##.47.138':139
'84.##.227.236':139
'84.#6.39.9':139
'84.##.103.55':139
'84.#6.84.80':139
'84.##.75.136':139
'84.##.231.14':139
'84.##.50.187':139
'84.#6.190.3':139
'84.##.46.149':139
'84.##.154.207':139
'84.##.101.132':139
'84.#6.9.21':139
'84.##.150.19':139
'84.##.126.10':139
'84.#6.19.82':139
'84.#6.60.7':139
'84.#6.34.77':139
'84.##.250.86':139
'84.#6.2.251':139
'84.##.163.158':445
'84.##.47.138':445
'84.##.227.236':445
'84.#6.39.9':445
'84.##.103.55':445
'84.#6.84.80':445
'84.##.75.136':445
'84.##.231.14':445
'84.##.50.187':445
'84.#6.190.3':445
'84.##.46.149':445
'84.##.186.188':445
'84.##.206.32':445
'84.##.188.243':445
'84.##.160.203':445
'84.##.243.39':445
'84.#6.57.92':9988
'84.#6.60.43':9988
'84.#6.137.7':9988
'84.#6.130.1':445
'84.##.126.165':9988
'84.##.65.190':445
'84.##.131.183':445
'84.##.143.215':445
'84.##.131.212':445
'84.##.177.24':445
'84.##.237.206':445
'84.##.253.226':445
'84.##.90.242':445
'84.##.186.45':445
'84.##.60.236':445
'84.##.200.60':445
'84.##.149.81':139
'84.##.144.48':139
'84.##.241.55':139
'84.##.99.236':139
'84.##.36.207':139
'84.##.223.247':139
'84.##.54.229':139
'84.#6.65.8':139
'84.#6.22.20':139
'84.#6.8.80':139
'84.##.65.190':9988
'84.##.244.241':9988
'84.#6.13.19':9988
'84.##.96.222':9988
'84.##.33.169':9988
'84.##.49.154':9988
'84.##.204.156':9988
'84.##.200.60':9988
'84.#6.30.68':9988
'84.#6.97.83':9988
'84.##.221.27':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней