Trojan.Starman.5485

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'69.##.157.15':445
'69.##.63.245':445
'69.##.70.232':445
'69.##.249.246':445
'69.#5.40.30':445
'69.##.49.223':445
'69.##.220.126':445
'69.##.189.40':445
'69.##.53.119':445
'69.##.57.201':445
'69.##.142.147':445
'69.##.141.236':445
'69.##.114.238':445
'69.#5.49.91':445
'69.##.90.190':445
'69.##.251.178':445
'69.##.26.164':445
'69.#5.15.81':445
'69.##.228.11':445
'69.##.122.213':445
'69.##.57.224':445
'69.##.153.236':445
'69.##.174.47':445
'69.#5.80.93':445
'69.##.117.178':139
'69.##.81.209':139
'69.##.40.107':139
'69.##.91.200':139
'69.##.152.152':445
'69.##.231.167':445
'69.##.244.138':445
'69.##.140.104':445
'69.##.122.103':445
'69.#5.94.25':445
'69.##.236.93':445
'69.##.133.18':445
'69.##.136.41':445
'69.##.109.239':445
'69.##.70.232':139
'69.##.249.246':139
'69.##.90.190':139
'69.##.251.178':139
'69.##.157.15':139
'69.##.189.40':139
'69.##.53.119':139
'69.##.63.245':139
'69.#5.40.30':139
'69.##.141.236':139
'69.##.114.238':139
'69.##.239.136':139
'69.##.109.239':139
'69.##.57.201':139
'69.##.26.164':139
'69.#5.15.81':139
'69.##.142.147':139
'69.#5.49.91':139
'69.##.49.223':139
'69.##.153.236':139
'69.##.174.47':139
'69.#5.94.25':139
'69.##.236.93':139
'69.##.122.213':139
'69.#5.81.58':445
'69.##.239.136':445
'69.##.57.224':139
'69.#5.80.93':139
'69.##.244.138':139
'69.##.140.104':139
'69.##.220.126':139
'69.##.228.11':139
'69.##.152.152':139
'69.##.133.18':139
'69.##.136.41':139
'69.##.231.167':139
'69.##.122.103':139
'69.##.113.251':139
'69.#5.232.9':139
'69.##.31.240':139
'69.##.240.12':139
'69.##.172.239':139
'69.##.186.122':139
'69.##.247.72':139
'69.##.97.141':139
'69.##.14.197':139
'69.##.75.213':139
'69.##.141.27':139
'69.##.53.254':139
'69.##.129.174':139
'69.##.167.45':139
'69.#5.66.37':139
'69.#5.63.73':139
'69.##.84.104':139
'69.##.42.155':139
'69.##.209.145':139
'69.#5.194.6':445
'69.##.215.114':445
'69.##.99.212':445
'69.##.229.75':445
'69.#5.8.16':445
'69.#5.42.48':445
'69.##.53.254':445
'69.#5.95.62':445
'69.##.247.230':445
'69.##.165.54':139
'69.##.46.168':139
'69.##.93.203':139
'69.##.148.229':139
'69.##.63.187':139
'69.##.96.244':445
'69.##.124.239':445
'69.##.230.167':445
'69.##.156.32':445
'69.#5.42.48':139
'69.##.40.107':445
'69.##.91.200':445
'69.##.125.169':139
'69.##.50.124':139
'69.##.117.178':445
'69.##.117.98':445
'69.##.172.202':445
'69.##.81.209':445
'69.##.29.177':445
'69.##.172.202':139
'69.##.169.116':139
'69.##.29.177':139
'69.##.117.98':139
'69.##.166.70':139
'69.#5.32.96':139
'69.##.16.167':139
'69.##.105.114':139
'69.#5.81.72':139
'69.##.169.116':445
'69.##.99.212':139
'69.##.229.75':139
'69.##.96.244':139
'69.##.124.239':139
'69.#5.194.6':139
'69.#5.95.62':139
'69.##.247.230':139
'69.##.215.114':139
'69.#5.8.16':139
'69.#5.81.72':445
'69.#5.32.96':445
'69.##.166.70':445
'69.##.105.114':445
'69.##.16.167':445
'69.##.230.167':139
'69.##.156.32':139
'69.##.125.169':445
'69.##.50.124':445
'69.#5.81.58':139
'69.##.171.214':139
'69.##.13.153':139
'69.##.18.141':139
'69.##.214.119':139
'69.##.246.113':445
'69.#5.241.3':445
'69.##.21.127':445
'69.##.102.178':445
'69.#5.4.103':445
'69.##.230.225':139
'69.##.79.212':139
'69.##.206.214':139
'69.##.44.202':139
'69.##.238.170':139
'69.##.24.218':139
'69.##.132.237':139
'69.##.145.200':139
'69.##.216.53':139
'69.##.244.125':445
'69.#5.33.36':445
'69.##.227.32':445
'69.#5.88.31':445
'69.#5.36.32':445
'69.##.146.136':445
'69.##.226.177':445
'69.##.108.119':445
'69.#5.66.76':445
'69.#5.53.65':445
'69.##.127.163':445
'69.##.106.64':445
'69.##.115.225':445
'69.##.163.179':445
'69.#5.78.63':445
'69.##.92.187':445
'69.##.207.243':445
'69.##.40.174':445
'69.##.188.40':445
'69.##.214.115':139
'69.##.40.174':139
'69.##.188.40':139
'69.##.106.64':139
'69.#5.78.63':139
'69.##.92.187':139
'69.#5.36.32':139
'69.#5.33.36':139
'69.##.207.243':139
'69.#5.88.31':139
'69.#5.4.103':139
'69.#5.241.3':139
'69.##.102.178':139
'69.##.246.113':139
'69.##.21.127':139
'69.##.163.179':139
'69.##.127.163':139
'69.##.244.125':139
'69.##.115.225':139
'69.##.227.32':139
'69.#5.56.58':139
'69.##.130.21':139
'69.##.47.251':139
'69.##.164.192':139
'69.#5.89.70':139
'69.##.166.170':139
'69.##.115.18':139
'69.##.79.192':139
'69.#5.85.7':139
'69.#5.53.65':139
'69.##.226.177':139
'69.##.146.136':139
'69.#5.66.76':139
'69.##.108.119':139
'69.#5.0.65':139
'69.#5.0.103':139
'69.##.45.126':139
'69.##.198.44':139
'69.##.241.63':139
'69.##.48.115':139
'69.##.164.171':139
'69.##.216.237':139
'69.##.80.209':139
'69.##.200.171':139
'69.#5.25.19':139
'69.##.225.64':139
'69.##.147.39':139
'69.##.47.251':9988
'69.##.164.192':9988
'69.##.227.32':9988
'69.#5.53.65':9988
'69.#5.56.58':9988
'69.#5.2.252':139
'69.#5.81.34':139
'69.##.130.21':9988
'69.#5.85.7':9988
'69.##.107.185':139
'69.##.147.39':445
'69.##.200.171':445
'69.##.80.209':445
'69.##.225.64':445
'69.#5.25.19':445
'69.##.96.227':445
'69.#5.93.94':445
'69.##.107.185':445
'69.##.194.239':445
'69.#5.93.94':139
'69.#5.2.252':445
'69.##.194.239':139
'69.##.96.227':139
'69.#5.81.34':445
'69.##.241.63':445
'69.##.48.115':445
'69.##.164.171':445
'69.##.216.237':445
'69.##.40.174':9988
'69.##.166.170':445
'69.##.115.18':445
'69.##.79.192':445
'69.#5.85.7':445
'69.##.214.115':445
'69.##.230.225':445
'69.##.79.212':445
'69.##.206.214':445
'69.##.44.202':445
'69.#5.0.65':445
'69.#5.0.103':445
'69.##.45.126':445
'69.##.198.44':445
'69.##.47.251':445
'69.##.130.21':445
'69.#5.89.70':445
'69.##.164.192':445
'69.#5.56.58':445
'69.##.238.170':445
'69.##.21.127':9988
'69.##.115.225':9988
'69.#5.241.3':9988
'69.##.102.178':9988
'69.##.244.125':9988
'69.##.106.64':9988
'69.#5.78.63':9988
'69.##.163.179':9988
'69.##.127.163':9988
'69.##.24.218':445
'69.##.132.237':445
'69.##.145.200':445
'69.##.216.53':445
'69.##.18.141':445
'69.##.13.153':445
'69.##.246.113':9988
'69.##.214.119':445
'69.##.171.214':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней