Trojan.Starman.5204

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'59.#8.71.8':139
'59.#8.75.89':139
'59.#8.7.76':139
'59.##.132.173':139
'59.##.90.254':139
'59.##.135.157':139
'59.##.50.205':139
'59.##.157.216':139
'59.##.238.75':139
'59.##.216.237':139
'59.#8.23.90':139
'59.#8.37.5':445
'59.#8.0.241':445
'59.##.192.210':445
'59.##.221.235':445
'59.##.105.127':445
'59.##.45.105':445
'59.#8.14.89':445
'59.#8.17.22':445
'59.##.178.53':445
'59.##.18.146':445
'59.##.50.205':445
'59.##.127.114':445
'59.##.135.157':445
'59.##.216.237':445
'59.##.157.216':445
'59.##.184.123':139
'59.##.203.60':139
'59.##.109.98':445
'59.##.94.237':445
'59.#8.82.49':445
'59.##.238.75':445
'59.##.109.98':139
'59.#8.23.90':445
'59.#8.82.49':139
'59.##.127.114':139
'59.##.94.237':139
'59.#8.71.8':445
'59.#8.75.89':445
'59.#8.7.76':445
'59.##.132.173':445
'59.##.90.254':445
'59.##.45.105':139
'59.#8.14.89':139
'59.#8.17.22':139
'59.##.178.53':139
'59.##.18.146':139
'59.#8.21.83':445
'59.##.64.107':445
'59.##.184.68':445
'59.##.247.15':445
'59.##.18.130':445
'59.#8.0.241':139
'59.##.168.218':139
'59.##.139.119':139
'59.#8.98.38':139
'59.##.196.17':139
'59.##.77.229':139
'59.##.192.210':139
'59.#8.37.5':139
'59.##.105.127':139
'59.##.173.23':139
'59.##.221.235':139
'59.##.177.145':445
'59.##.196.17':445
'59.##.193.27':445
'59.#8.77.23':445
'59.#8.55.77':445
'59.##.139.119':445
'59.##.173.23':445
'59.##.168.218':445
'59.##.77.229':445
'59.#8.98.38':445
'59.##.132.246':445
'59.##.255.17':445
'59.##.56.235':445
'59.##.93.223':445
'59.##.138.118':445
'59.#8.48.34':445
'59.##.167.144':445
'59.##.51.197':445
'59.##.110.129':445
'59.##.53.244':445
'59.##.128.250':445
'59.##.179.24':139
'59.##.52.162':445
'59.##.150.179':445
'59.##.245.232':445
'59.##.120.141':445
'59.#8.80.50':445
'59.##.170.92':445
'59.##.136.166':445
'59.##.129.189':445
'59.##.99.166':445
'59.##.216.165':445
'59.##.220.166':445
'59.##.25.221':445
'59.##.115.203':445
'59.##.101.172':445
'59.##.100.241':445
'59.##.129.28':445
'59.##.55.221':445
'59.##.93.143':445
'59.##.149.145':445
'59.##.54.162':445
'59.##.251.78':445
'59.##.251.245':139
'59.##.183.102':139
'59.##.245.34':139
'59.##.10.167':139
'59.#8.35.12':139
'59.##.190.151':139
'59.##.56.164':139
'59.#8.18.47':139
'59.#8.2.79':139
'59.#8.40.56':139
'59.##.189.20':139
'59.#8.6.20':445
'59.##.141.132':445
'59.##.68.201':445
'59.##.59.136':445
'59.##.201.59':445
'59.#8.32.89':139
'59.##.192.188':139
'59.##.89.214':139
'59.##.54.147':445
'59.#8.142.9':139
'59.##.55.221':139
'59.##.93.143':139
'59.##.149.145':139
'59.##.54.162':139
'59.##.251.78':139
'59.##.245.232':139
'59.##.52.162':139
'59.#8.80.50':139
'59.##.220.166':139
'59.##.120.141':139
'59.##.115.203':139
'59.##.10.231':139
'59.##.11.182':139
'59.##.204.146':139
'59.#8.46.55':139
'59.##.167.27':139
'59.##.101.172':139
'59.##.25.221':139
'59.##.129.28':139
'59.##.140.128':139
'59.##.100.241':139
'59.##.179.24':445
'59.#8.46.55':445
'59.##.203.60':445
'59.##.54.147':139
'59.##.184.123':445
'59.##.11.182':445
'59.##.140.128':445
'59.##.10.231':445
'59.##.167.27':445
'59.##.204.146':445
'59.##.141.132':139
'59.##.129.189':139
'59.##.170.92':139
'59.##.216.165':139
'59.##.150.179':139
'59.##.99.166':139
'59.##.68.201':139
'59.#8.6.20':139
'59.##.201.59':139
'59.##.136.166':139
'59.##.59.136':139
'59.##.177.145':139
'59.##.123.159':445
'59.#8.7.61':445
'59.#8.37.83':445
'59.##.30.104':445
'59.##.201.202':445
'59.#8.3.66':445
'59.#8.116.3':445
'59.#8.66.68':445
'59.#8.91.15':445
'59.##.68.206':445
'59.##.129.146':445
'59.##.246.203':139
'59.##.20.189':139
'59.##.206.107':139
'59.#8.21.91':139
'59.#8.5.51':139
'59.#8.0.80':139
'59.##.79.222':445
'59.##.162.234':139
'59.##.209.164':139
'59.##.49.117':139
'59.##.204.178':445
'59.##.42.205':445
'59.##.237.194':445
'59.##.219.252':445
'59.#8.14.12':445
'59.#8.57.82':445
'59.#8.56.24':445
'59.##.146.86':445
'59.##.94.164':445
'59.##.187.127':445
'59.##.71.239':445
'59.##.185.120':445
'59.##.174.250':445
'59.##.166.120':445
'59.##.99.116':445
'59.##.45.149':445
'59.#8.93.68':445
'59.##.173.132':445
'59.##.144.121':445
'59.##.169.174':445
'59.##.112.135':445
'59.##.166.120':139
'59.##.185.120':139
'59.##.45.149':139
'59.#8.116.3':139
'59.##.99.116':139
'59.##.144.121':139
'59.#8.93.68':139
'59.##.112.135':139
'59.##.174.250':139
'59.##.169.174':139
'59.#8.3.66':139
'59.##.129.146':139
'59.##.79.222':139
'59.##.30.104':139
'59.#8.37.83':139
'59.##.201.202':139
'59.##.68.206':139
'59.#8.66.68':139
'59.#8.91.15':139
'59.##.123.159':139
'59.#8.7.61':139
'59.##.230.214':139
'59.##.112.230':139
'59.##.49.186':139
'59.#8.56.24':139
'59.##.27.104':139
'59.##.179.138':139
'59.#8.30.22':139
'59.#8.64.0':139
'59.##.79.188':139
'59.#8.39.77':139
'59.#8.57.82':139
'59.#8.14.12':139
'59.##.237.194':139
'59.##.219.252':139
'59.##.173.132':139
'59.##.71.239':139
'59.##.187.127':139
'59.##.146.86':139
'59.##.94.164':139
'59.##.204.178':139
'59.##.42.205':139
'59.##.27.104':445
'59.#8.185.5':445
'59.##.206.98':445
'59.#8.25.52':445
'59.##.67.148':445
'59.#8.82.92':445
'59.#8.4.55':445
'59.##.13.111':445
'59.##.98.190':445
'59.##.175.206':445
'59.##.51.175':445
'59.##.111.237':445
'59.##.98.190':139
'59.#8.4.55':139
'59.##.51.175':139
'59.##.206.98':139
'59.##.175.206':139
'59.#8.5.44':445
'59.##.186.181':445
'59.##.15.220':139
'59.##.13.111':139
'59.##.220.13':139
'59.##.110.129':139
'59.##.167.144':139
'59.##.128.250':139
'59.##.56.235':139
'59.##.53.244':139
'59.#8.55.77':139
'59.##.193.27':139
'59.#8.77.23':139
'59.##.51.197':139
'59.##.132.246':139
'59.##.255.17':139
'59.##.18.130':139
'59.##.184.68':139
'59.##.247.15':139
'59.##.220.13':445
'59.##.15.220':445
'59.#8.48.34':139
'59.##.93.223':139
'59.##.138.118':139
'59.#8.21.83':139
'59.##.64.107':139
'59.##.49.117':445
'59.##.162.234':445
'59.##.209.164':445
'59.##.246.203':445
'59.##.20.189':445
'59.#8.91.15':9988
'59.#8.116.3':9988
'59.##.201.202':9988
'59.#8.0.80':445
'59.##.129.146':9988
'59.##.206.107':445
'59.##.79.188':445
'59.#8.39.77':445
'59.##.112.230':445
'59.##.49.186':445
'59.##.230.214':445
'59.#8.21.91':445
'59.#8.5.51':445
'59.#8.30.22':445
'59.#8.64.0':445
'59.##.179.138':445
'59.#8.5.44':139
'59.##.186.181':139
'59.#8.57.82':9988
'59.##.187.127':9988
'59.##.146.86':9988
'59.#8.25.52':139
'59.#8.185.5':139
'59.#8.82.92':139
'59.##.111.237':139
'59.##.67.148':139
'59.##.42.205':9988
'59.#8.37.83':9988
'59.##.174.250':9988
'59.##.185.120':9988
'59.##.99.116':9988
'59.##.45.149':9988
'59.##.71.239':9988
'59.##.204.178':9988
'59.##.173.132':9988
'59.##.169.174':9988
'59.##.112.135':9988

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней