Trojan.Starman.5225

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'60.##3.24.61':139
'60.##3.75.205':139
'60.##3.241.32':139
'60.##3.165.248':139
'60.##3.33.14':139
'60.##3.82.40':139
'60.##3.202.146':139
'60.##3.227.35':139
'60.##3.64.224':139
'60.##3.18.65':139
'60.##3.231.12':139
'60.##3.32.71':139
'60.##3.12.192':139
'60.##3.214.66':139
'60.##3.176.12':139
'60.##3.104.243':139
'60.##3.188.82':139
'60.##3.151.29':139
'60.##3.65.228':139
'60.##3.205.37':139
'60.##3.82.120':139
'60.##3.6.109':445
'60.##3.87.44':445
'60.##3.21.151':445
'60.##3.152.141':445
'60.##3.176.152':445
'60.##3.12.192':445
'60.##3.231.12':445
'60.##3.176.12':445
'60.##3.143.207':445
'60.##3.214.66':445
'60.##3.137.173':445
'60.##3.24.53':445
'60.##3.48.164':445
'60.##3.110.193':139
'60.##3.65.23':445
'60.##3.58.183':445
'60.##3.141.155':445
'60.##3.249.189':445
'60.##3.115.134':445
'60.##3.189.196':445
'60.##3.143.207':139
'60.##3.8.164':445
'60.##3.240.69':445
'60.##3.195.217':139
'60.##3.142.149':139
'60.##3.218.30':139
'60.##3.135.62':445
'60.##3.9.175':445
'60.##3.77.125':445
'60.##3.123.105':445
'60.##3.146.198':445
'60.##3.77.125':139
'60.##3.135.62':139
'60.##3.146.198':139
'60.##3.240.69':139
'60.##3.123.105':139
'60.##3.134.225':139
'60.##3.207.204':139
'60.##3.35.20':139
'60.##3.9.175':139
'60.##3.183.223':139
'60.##3.183.223':445
'60.##3.58.183':139
'60.##3.141.155':139
'60.##3.249.189':139
'60.##3.115.134':139
'60.##3.189.196':139
'60.##3.6.109':139
'60.##3.87.44':139
'60.##3.21.151':139
'60.##3.152.141':139
'60.##3.176.152':139
'60.##3.142.149':445
'60.##3.218.30':445
'60.##3.207.204':445
'60.##3.35.20':445
'60.##3.134.225':445
'60.##3.137.173':139
'60.##3.24.53':139
'60.##3.48.164':139
'60.##3.195.217':445
'60.##3.65.23':139
'60.##3.29.27':139
'60.##3.124.167':139
'60.##3.71.150':139
'60.##3.203.136':139
'60.##3.65.54':139
'60.##3.68.232':139
'60.##3.88.14':139
'60.##3.196.121':139
'60.##3.85.106':139
'60.##3.56.102':139
'60.##3.116.59':445
'60.##3.235.151':139
'60.##3.72.26':445
'60.##3.61.218':445
'60.##3.26.93':445
'60.##3.255.104':139
'60.##3.83.151':139
'60.#83.77.7':139
'60.##3.168.186':139
'60.##3.215.57':139
'60.##3.66.40':139
'60.##3.93.139':139
'60.##3.8.173':139
'60.##3.243.22':139
'60.##3.63.217':139
'60.##3.133.5':139
'60.##3.163.94':139
'60.##3.248.107':139
'60.##3.94.42':139
'60.##3.73.72':139
'60.##3.164.48':139
'60.##3.106.17':139
'60.##3.227.106':139
'60.##3.17.77':139
'60.##3.15.94':139
'60.##3.39.27':139
'60.##3.49.24':139
'60.##3.51.12':139
'60.##3.9.157':139
'60.##3.23.233':139
'60.##3.11.27':139
'60.##3.96.32':445
'60.##3.227.35':445
'60.##3.82.40':445
'60.##3.18.65':445
'60.##3.75.205':445
'60.##3.64.224':445
'60.##3.109.223':139
'60.##3.30.109':139
'60.##3.110.193':445
'60.##3.202.146':445
'60.##3.82.120':445
'60.##3.151.29':445
'60.##3.104.243':445
'60.##3.205.37':445
'60.##3.32.71':445
'60.##3.65.228':445
'60.##3.241.32':445
'60.##3.24.61':445
'60.##3.33.14':445
'60.##3.188.82':445
'60.##3.165.248':445
'60.##3.92.30':139
'60.##3.92.30':445
'60.##3.29.32':445
'60.##3.30.109':445
'60.##3.116.59':139
'60.##3.109.223':445
'60.##3.61.219':445
'60.##3.111.160':445
'60.##3.236.201':445
'60.##3.65.45':445
'60.##3.201.65':445
'60.##3.236.201':139
'60.##3.61.219':139
'60.##3.201.65':139
'60.##3.29.32':139
'60.##3.65.45':139
'60.##3.26.93':139
'60.##3.72.26':139
'60.##3.61.218':139
'60.##3.111.160':139
'60.##3.96.32':139
'60.##3.201.28':445
'60.##3.31.102':445
'60.##3.213.251':445
'60.##3.40.36':445
'60.##3.165.249':445
'60.##3.202.16':445
'60.##3.122.81':445
'60.##3.64.182':445
'60.##3.69.225':445
'60.##3.28.87':445
'60.##3.45.238':139
'60.##3.90.117':139
'60.##3.18.150':139
'60.##3.252.252':139
'60.##3.221.156':139
'60.##3.133.108':139
'60.##3.237.254':445
'60.##3.172.206':139
'60.##3.54.207':139
'60.##3.69.118':139
'60.##3.61.80':445
'60.##3.103.94':445
'60.##3.2.175':445
'60.##3.140.11':445
'60.##3.108.194':445
'60.##3.220.82':445
'60.##3.238.84':445
'60.##3.208.241':445
'60.##3.85.176':445
'60.##3.74.55':445
'60.##3.182.194':445
'60.##3.141.100':445
'60.##3.42.125':445
'60.##3.152.106':445
'60.##3.23.253':445
'60.#83.89.7':445
'60.##3.121.218':445
'60.##3.47.159':445
'60.##3.145.249':445
'60.##3.14.202':445
'60.##3.250.26':445
'60.##3.205.40':139
'60.#83.89.7':139
'60.##3.152.106':139
'60.##3.23.253':139
'60.##3.122.81':139
'60.##3.61.80':139
'60.##3.250.26':139
'60.##3.145.249':139
'60.##3.14.202':139
'60.##3.141.100':139
'60.##3.42.125':139
'60.##3.213.251':139
'60.##3.201.28':139
'60.##3.40.36':139
'60.##3.165.249':139
'60.##3.237.254':139
'60.##3.64.182':139
'60.##3.202.16':139
'60.##3.28.87':139
'60.##3.31.102':139
'60.##3.69.225':139
'60.##3.121.218':139
'60.##3.12.135':139
'60.##3.77.200':139
'60.##3.38.104':139
'60.##3.208.241':139
'60.##3.16.62':139
'60.##3.51.30':139
'60.##3.127.97':139
'60.##3.35.150':139
'60.##3.92.16':139
'60.##3.184.38':139
'60.##3.140.11':139
'60.##3.103.94':139
'60.##3.220.82':139
'60.##3.47.159':139
'60.##3.108.194':139
'60.##3.85.176':139
'60.##3.238.84':139
'60.##3.182.194':139
'60.##3.2.175':139
'60.##3.74.55':139
'60.##3.132.167':139
'60.##3.71.30':139
'60.##3.72.81':139
'60.##3.188.86':139
'60.##3.213.182':139
'60.##3.59.102':445
'60.##3.3.132':445
'60.##3.130.81':445
'60.##3.107.165':445
'60.##3.93.83':445
'60.##3.145.90':139
'60.##3.27.104':139
'60.##3.140.249':139
'60.##3.116.87':139
'60.##3.141.88':139
'60.##3.76.180':139
'60.##3.224.28':139
'60.##3.137.32':139
'60.##3.54.232':139
'60.##3.163.13':139
'60.##3.109.34':445
'60.##3.224.28':445
'60.##3.188.86':445
'60.##3.76.180':445
'60.##3.163.13':445
'60.##3.137.32':445
'60.##3.71.30':445
'60.##3.8.164':139
'60.##3.132.167':445
'60.##3.213.182':445
'60.##3.72.81':445
'60.##3.222.193':445
'60.##3.116.87':445
'60.##3.64.253':445
'60.##3.140.54':445
'60.##3.247.32':445
'60.##3.27.104':445
'60.##3.54.232':445
'60.##3.145.90':445
'60.##3.141.88':445
'60.##3.140.249':445
'60.##3.222.193':139
'60.##3.45.238':445
'60.##3.90.117':445
'60.##3.18.150':445
'60.##3.252.252':445
'60.##3.221.156':445
'60.##3.133.108':445
'60.##3.201.28':9988
'60.##3.172.206':445
'60.##3.54.207':445
'60.##3.69.118':445
'60.##3.77.200':445
'60.##3.92.16':445
'60.##3.12.135':445
'60.##3.16.62':445
'60.##3.38.104':445
'60.##3.127.97':445
'60.##3.205.40':445
'60.##3.51.30':445
'60.##3.184.38':445
'60.##3.35.150':445
'60.##3.237.254':9988
'60.##3.130.81':139
'60.##3.59.102':139
'60.##3.93.83':139
'60.##3.184.38':9988
'60.##3.107.165':139
'60.##3.247.32':139
'60.##3.64.253':139
'60.##3.140.54':139
'60.##3.3.132':139
'60.##3.109.34':139
'60.##3.64.182':9988
'60.##3.23.253':9988
'60.##3.28.87':9988
'60.##3.31.102':9988
'60.##3.69.225':9988
'60.##3.208.241':9988
'60.##3.92.16':9988
'60.##3.238.84':9988
'60.##3.2.175':9988
'60.##3.85.176':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней