Trojan.Starman.5877

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12.##.127.253':139
'12.##.15.124':139
'12.#5.86.88':139
'12.##.196.199':139
'12.##.166.83':139
'12.##.198.36':445
'12.##.129.140':445
'12.#5.81.92':139
'12.##.13.133':445
'12.##.102.18':139
'12.##.26.142':139
'12.##.222.233':139
'12.##.147.22':139
'12.#5.86.60':139
'12.##.214.232':139
'12.##.156.88':139
'12.##.80.156':139
'12.##.45.103':139
'12.#5.5.41':139
'12.#5.5.84':445
'12.##.181.208':445
'12.##.163.247':445
'12.##.117.195':445
'12.##.125.162':445
'12.##.225.129':445
'12.##.67.194':445
'12.#5.46.2':445
'12.##.179.125':445
'12.#5.2.193':445
'12.##.91.128':445
'12.##.27.159':445
'12.##.115.229':445
'12.##.175.37':445
'12.#5.17.25':445
'12.##.75.115':445
'12.##.118.145':445
'12.##.121.93':445
'12.##.168.242':445
'12.##.51.229':445
'12.##.13.133':139
'12.##.198.36':139
'12.#5.17.24':445
'12.##.131.114':445
'12.##.129.140':139
'12.#5.17.25':139
'12.##.27.159':139
'12.#5.5.84':139
'12.##.175.37':139
'12.##.198.220':445
'12.#5.17.24':139
'12.##.131.114':139
'12.##.203.222':139
'12.##.198.220':139
'12.##.198.185':445
'12.#5.66.30':445
'12.##.203.222':445
'12.##.253.197':445
'12.##.30.243':445
'12.##.115.229':139
'12.#5.2.193':139
'12.##.67.194':139
'12.##.225.129':139
'12.##.179.125':139
'12.#5.46.2':139
'12.##.151.225':139
'12.#5.22.14':139
'12.#5.249.1':139
'12.##.159.234':139
'12.##.163.247':139
'12.##.51.229':139
'12.##.118.145':139
'12.##.75.115':139
'12.##.168.242':139
'12.##.121.93':139
'12.##.125.162':139
'12.##.181.208':139
'12.##.91.128':139
'12.##.117.195':139
'12.#5.249.1':445
'12.##.147.16':139
'12.##.193.146':139
'12.##.166.166':139
'12.#5.84.17':139
'12.#5.24.1':139
'12.##.23.136':139
'12.##.13.194':139
'12.##.25.254':139
'12.##.16.131':139
'12.##.137.234':139
'12.#5.19.75':139
'12.##.139.157':139
'12.##.140.25':139
'12.##.74.234':139
'12.##.78.152':139
'12.##.58.240':139
'12.##.27.130':139
'12.##.187.112':139
'12.#5.26.83':139
'12.##.91.160':139
'12.##.113.198':139
'12.##.138.217':139
'12.##.81.156':139
'12.##.68.171':139
'12.##.143.229':139
'12.##.85.110':139
'12.##.83.191':139
'12.#5.216.0':139
'12.##.198.228':139
'12.##.35.149':139
'12.##.22.193':139
'12.#5.82.79':139
'12.#5.9.170':139
'12.##.222.135':139
'12.##.18.148':139
'12.##.31.107':139
'12.#5.60.8':139
'12.#5.37.18':139
'12.#5.12.37':139
'12.##.102.18':445
'12.#5.86.88':445
'12.##.156.88':445
'12.##.80.156':445
'12.##.196.199':445
'12.##.166.83':445
'12.#5.81.92':445
'12.##.127.253':445
'12.##.15.124':445
'12.#5.5.41':445
'12.#5.22.14':445
'12.##.147.22':445
'12.##.159.234':445
'12.##.151.225':445
'12.#5.86.60':445
'12.##.214.232':445
'12.##.45.103':445
'12.##.26.142':445
'12.##.222.233':445
'12.#5.94.35':139
'12.##.96.183':445
'12.##.78.198':445
'12.##.154.109':445
'12.##.45.150':445
'12.##.231.102':445
'12.##.214.242':139
'12.##.206.236':139
'12.##.203.231':139
'12.##.181.203':139
'12.#5.62.77':445
'12.##.154.109':139
'12.##.45.150':139
'12.##.17.202':139
'12.#5.62.77':139
'12.##.96.183':139
'12.#5.94.35':445
'12.##.17.202':445
'12.##.78.198':139
'12.##.231.102':139
'12.##.207.100':445
'12.##.218.213':445
'12.##.43.160':139
'12.#5.29.18':139
'12.##.43.153':445
'12.##.204.106':445
'12.##.204.199':445
'12.##.19.197':445
'12.##.113.155':445
'12.##.239.245':139
'12.##.55.180':139
'12.##.58.123':139
'12.##.110.94':139
'12.##.128.134':139
'12.#5.50.35':139
'12.##.109.31':139
'12.##.119.201':139
'12.##.121.20':139
'12.##.62.219':139
'12.##.224.216':445
'12.#5.12.71':445
'12.##.135.236':445
'12.##.123.145':445
'12.##.187.215':445
'12.##.182.135':445
'12.##.89.149':445
'12.#5.2.80':445
'12.##.61.134':445
'12.##.157.81':445
'12.##.101.41':445
'12.##.164.126':445
'12.#5.89.52':445
'12.##.225.21':445
'12.##.149.210':445
'12.##.172.215':445
'12.##.255.105':445
'12.##.19.246':445
'12.#5.94.19':445
'12.##.108.172':445
'12.##.172.215':139
'12.#5.94.19':139
'12.##.164.126':139
'12.#5.89.52':139
'12.##.108.172':139
'12.##.101.41':139
'12.##.123.145':139
'12.##.255.105':139
'12.##.19.246':139
'12.##.149.210':139
'12.##.207.100':139
'12.##.218.213':139
'12.##.43.153':139
'12.##.19.197':139
'12.##.113.155':139
'12.##.224.216':139
'12.##.225.21':139
'12.##.204.106':139
'12.##.204.199':139
'12.##.187.215':139
'12.#5.95.34':139
'12.##.46.109':139
'12.##.236.115':139
'12.##.196.17':139
'12.##.162.11':139
'12.#5.246.0':139
'12.##.143.201':139
'12.##.152.18':139
'12.##.164.179':139
'12.#5.67.19':139
'12.##.182.135':139
'12.##.61.134':139
'12.#5.12.71':139
'12.##.135.236':139
'12.##.157.81':139
'12.#5.5.47':139
'12.##.181.166':139
'12.##.89.149':139
'12.#5.2.80':139
'12.#5.5.47':445
'12.##.168.130':139
'12.##.229.23':139
'12.##.187.87':139
'12.#5.116.8':139
'12.##.255.54':139
'12.#5.24.58':139
'12.##.216.35':445
'12.#5.62.89':139
'12.##.124.178':139
'12.##.87.219':139
'12.##.78.105':139
'12.#5.3.104':139
'12.#5.29.18':9988
'12.##.216.35':139
'12.#5.85.0':139
'12.##.182.229':139
'12.##.218.182':139
'12.##.141.213':139
'12.##.152.19':139
'12.##.78.105':445
'12.#5.62.89':445
'12.##.124.178':445
'12.##.229.23':445
'12.##.255.54':445
'12.#5.24.58':445
'12.##.30.243':139
'12.#5.66.30':139
'12.##.198.185':139
'12.##.253.197':139
'12.##.168.130':445
'12.##.141.213':445
'12.##.152.19':445
'12.#5.3.104':445
'12.#5.85.0':445
'12.##.182.229':445
'12.##.187.87':445
'12.#5.116.8':445
'12.##.218.182':445
'12.##.87.219':445
'12.##.128.134':445
'12.##.55.180':445
'12.##.143.201':445
'12.##.110.94':445
'12.##.58.123':445
'12.##.62.219':445
'12.##.109.31':445
'12.#5.50.35':445
'12.##.121.20':445
'12.#5.246.0':445
'12.##.236.115':445
'12.##.196.17':445
'12.##.181.166':445
'12.#5.67.19':445
'12.#5.95.34':445
'12.##.152.18':445
'12.##.164.179':445
'12.##.46.109':445
'12.##.162.11':445
'12.##.119.201':445
'12.##.157.81':9988
'12.##.89.149':9988
'12.#5.12.71':9988
'12.##.135.236':9988
'12.#5.2.80':9988
'12.##.196.17':9988
'12.##.110.94':9988
'12.#5.5.47':9988
'12.##.236.115':9988
'12.##.101.41':9988
'12.#5.29.18':445
'12.##.43.153':9988
'12.##.239.245':445
'12.##.43.160':445
'12.##.113.155':9988
'12.##.255.105':9988
'12.##.19.246':9988
'12.##.204.199':9988
'12.##.224.216':9988

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней