Trojan.Starman.5239

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'72.##1.15.42':139
'72.##1.169.15':139
'72.##1.175.114':139
'72.##1.41.117':139
'72.##1.80.41':139
'72.##1.137.32':139
'72.##1.27.103':139
'72.##1.77.66':139
'72.##1.121.168':139
'72.##1.90.121':139
'72.##1.45.136':139
'72.##1.122.150':139
'72.##1.3.127':139
'72.##1.151.48':139
'72.##1.71.234':139
'72.##1.47.121':139
'72.##1.93.189':139
'72.##1.216.110':139
'72.##1.132.40':139
'72.##1.30.105':139
'72.##1.71.158':139
'72.##1.178.117':139
'72.##1.30.105':445
'72.##1.71.158':445
'72.##1.3.127':445
'72.##1.151.48':445
'72.##1.122.150':445
'72.##1.45.136':445
'72.##1.41.117':445
'72.##1.216.110':445
'72.##1.132.40':445
'72.##1.93.189':445
'72.##1.47.121':445
'72.##1.254.176':139
'72.##1.193.137':139
'72.##1.80.174':139
'72.##1.131.142':139
'72.##1.149.51':139
'72.##1.53.110':445
'72.##1.71.234':445
'72.##1.29.243':445
'72.##1.239.225':445
'72.##1.59.239':445
'72.##1.12.141':139
'72.##1.132.69':139
'72.##1.193.28':139
'72.##1.30.14':139
'72.##1.169.11':139
'72.##1.140.191':445
'72.##1.80.193':445
'72.##1.226.72':139
'72.##1.125.184':139
'72.##1.37.169':139
'72.##1.205.112':139
'72.##1.124.32':139
'72.#51.2.79':139
'72.##1.113.251':139
'72.##1.80.193':139
'72.##1.225.228':139
'72.##1.12.55':139
'72.##1.186.233':139
'72.##1.188.121':139
'72.##1.238.152':139
'72.##1.55.104':139
'72.##1.225.228':445
'72.##1.125.184':445
'72.##1.37.169':445
'72.##1.132.69':445
'72.##1.193.28':445
'72.##1.12.141':445
'72.##1.29.243':139
'72.##1.53.110':139
'72.##1.59.239':139
'72.##1.226.72':445
'72.##1.239.225':139
'72.##1.169.11':445
'72.##1.238.152':445
'72.##1.55.104':445
'72.#51.2.79':445
'72.##1.113.251':445
'72.##1.124.32':445
'72.##1.205.112':445
'72.##1.30.14':445
'72.##1.186.233':445
'72.##1.188.121':445
'72.##1.12.55':445
'72.##1.119.58':139
'72.##1.182.5':139
'72.##1.70.63':139
'72.##1.115.17':445
'72.##1.161.217':139
'72.##1.207.104':139
'72.##1.193.3':139
'72.##1.221.207':139
'72.##1.174.106':139
'72.##1.195.36':139
'72.##1.21.195':445
'72.##1.206.10':445
'72.##1.197.122':445
'72.##1.221.51':445
'72.##1.150.49':445
'72.##1.157.112':445
'72.##1.184.120':445
'72.##1.1.185':445
'72.##1.127.0':445
'72.##1.220.177':445
'72.##1.76.116':445
'72.##1.168.226':139
'72.##1.89.26':139
'72.##1.223.193':139
'72.##1.46.134':139
'72.##1.252.72':139
'72.##1.18.79':139
'72.##1.50.39':139
'72.##1.69.189':139
'72.##1.39.183':139
'72.##1.2.224':139
'72.##1.183.2':139
'72.##1.229.152':139
'72.##1.69.22':139
'72.##1.138.6':139
'72.##1.246.43':139
'72.##1.179.70':139
'72.##1.53.80':139
'72.##1.26.252':139
'72.##1.17.221':139
'72.##1.237.75':139
'72.##1.55.231':139
'72.##1.76.38':139
'72.##1.193.137':445
'72.##1.105.59':139
'72.##1.254.176':445
'72.##1.149.51':445
'72.##1.80.174':445
'72.##1.233.4':139
'72.##1.95.142':139
'72.##1.239.166':139
'72.##1.225.136':139
'72.##1.223.84':139
'72.##1.131.142':445
'72.##1.169.15':445
'72.##1.121.168':445
'72.##1.15.42':445
'72.##1.80.41':445
'72.##1.175.114':445
'72.##1.27.103':445
'72.##1.178.117':445
'72.##1.137.32':445
'72.##1.90.121':445
'72.##1.77.66':445
'72.##1.119.87':139
'72.##1.225.136':445
'72.##1.223.84':445
'72.##1.105.59':445
'72.##1.21.195':139
'72.##1.115.17':139
'72.##1.119.87':445
'72.##1.72.25':445
'72.##1.95.142':445
'72.##1.239.166':445
'72.##1.233.4':445
'72.##1.1.185':139
'72.##1.221.51':139
'72.##1.206.10':139
'72.##1.157.112':139
'72.##1.72.25':139
'72.##1.150.49':139
'72.##1.127.0':139
'72.##1.184.120':139
'72.##1.76.116':139
'72.##1.197.122':139
'72.##1.220.177':139
'72.##1.53.42':445
'72.##1.142.163':445
'72.##1.167.14':445
'72.##1.107.162':445
'72.##1.15.108':445
'72.##1.159.91':445
'72.##1.139.91':445
'72.##1.37.144':445
'72.##1.148.207':445
'72.##1.94.18':445
'72.##1.162.13':445
'72.##1.161.4':139
'72.##1.9.186':139
'72.##1.129.115':139
'72.##1.255.99':139
'72.##1.38.28':139
'72.##1.252.89':445
'72.##1.13.129':445
'72.##1.38.249':139
'72.##1.60.29':139
'72.##1.2.182':139
'72.##1.5.251':445
'72.##1.85.22':445
'72.##1.99.85':445
'72.##1.244.142':445
'72.##1.248.191':445
'72.##1.75.248':445
'72.##1.150.63':445
'72.##1.32.21':445
'72.#51.1.0':445
'72.##1.216.98':445
'72.##1.64.96':445
'72.##1.106.128':445
'72.##1.11.125':445
'72.##1.133.132':445
'72.##1.60.52':445
'72.##1.52.208':445
'72.##1.33.40':445
'72.##1.195.235':445
'72.##1.104.245':445
'72.##1.220.23':445
'72.#51.7.34':445
'72.##1.23.223':445
'72.##1.52.208':139
'72.##1.33.40':139
'72.##1.5.251':139
'72.##1.159.91':139
'72.##1.139.91':139
'72.#51.7.34':139
'72.##1.23.223':139
'72.##1.133.132':139
'72.##1.60.52':139
'72.##1.11.125':139
'72.##1.37.144':139
'72.##1.107.162':139
'72.##1.15.108':139
'72.##1.162.13':139
'72.##1.252.89':139
'72.##1.13.129':139
'72.##1.148.207':139
'72.##1.94.18':139
'72.##1.142.163':139
'72.##1.167.14':139
'72.##1.53.42':139
'72.##1.220.23':139
'72.##1.42.152':139
'72.##1.107.116':139
'72.##1.167.243':139
'72.##1.150.63':139
'72.##1.32.21':139
'72.##1.84.69':139
'72.##1.100.74':139
'72.##1.10.159':139
'72.##1.95.157':139
'72.##1.250.127':139
'72.#51.1.0':139
'72.##1.248.191':139
'72.##1.75.248':139
'72.##1.106.128':139
'72.##1.195.235':139
'72.##1.104.245':139
'72.##1.216.98':139
'72.##1.64.96':139
'72.##1.99.85':139
'72.##1.244.142':139
'72.##1.85.22':139
'72.##1.115.79':445
'72.##1.216.107':445
'72.##1.79.106':445
'72.##1.44.124':139
'72.##1.58.92':139
'72.##1.17.244':445
'72.##1.109.116':445
'72.##1.89.184':445
'72.##1.204.96':445
'72.##1.12.205':445
'72.##1.118.178':139
'72.##1.148.4':139
'72.##1.37.125':139
'72.##1.178.169':139
'72.##1.202.68':139
'72.##1.171.124':139
'72.##1.35.140':139
'72.##1.78.181':139
'72.##1.72.251':139
'72.##1.76.129':139
'72.##1.191.211':139
'72.##1.221.108':445
'72.##1.72.251':445
'72.##1.35.140':445
'72.##1.191.211':445
'72.##1.37.125':445
'72.##1.76.129':445
'72.##1.58.92':445
'72.##1.140.191':139
'72.##1.44.124':445
'72.##1.78.181':445
'72.##1.118.178':445
'72.##1.148.4':445
'72.##1.158.230':445
'72.##1.210.77':445
'72.##1.237.16':445
'72.##1.101.221':445
'72.##1.138.101':445
'72.##1.171.124':445
'72.##1.178.169':445
'72.##1.202.68':445
'72.##1.26.170':445
'72.##1.193.147':445
'72.##1.2.182':445
'72.##1.38.249':445
'72.##1.60.29':445
'72.##1.161.4':445
'72.##1.9.186':445
'72.##1.94.18':9988
'72.##1.52.208':9988
'72.##1.167.14':9988
'72.##1.107.162':9988
'72.##1.15.108':9988
'72.##1.129.115':445
'72.##1.95.157':445
'72.##1.250.127':445
'72.##1.107.116':445
'72.##1.167.243':445
'72.##1.42.152':445
'72.##1.255.99':445
'72.##1.38.28':445
'72.##1.100.74':445
'72.##1.10.159':445
'72.##1.84.69':445
'72.#51.7.34':9988
'72.##1.101.221':139
'72.##1.138.101':139
'72.##1.221.108':139
'72.##1.17.244':139
'72.##1.109.116':139
'72.##1.26.170':139
'72.##1.193.147':139
'72.##1.210.77':139
'72.##1.237.16':139
'72.##1.158.230':139
'72.##1.89.184':139
'72.##1.99.85':9988
'72.##1.84.69':9988
'72.##1.85.22':9988
'72.##1.23.223':9988
'72.##1.244.142':9988
'72.##1.204.96':139
'72.##1.12.205':139
'72.##1.216.107':139
'72.##1.79.106':139
'72.##1.115.79':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней