Trojan.Starman.5742

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'59.##.223.58':445
'59.#6.43.30':445
'59.#6.18.67':445
'59.#6.59.19':445
'59.#6.29.11':445
'59.##.241.59':445
'59.##.40.241':445
'59.##.20.198':445
'59.#6.60.20':445
'59.#6.3.190':445
'59.##.216.208':445
'59.#6.52.85':445
'59.##.70.222':445
'59.##.130.67':445
'59.##.132.174':445
'59.#6.68.29':445
'59.##.204.118':445
'59.##.186.29':445
'59.##.64.101':445
'59.#6.20.65':445
'59.#6.51.98':445
'59.##.221.114':445
'59.##.87.169':445
'59.##.244.107':445
'59.#6.6.14':445
'59.#6.15.3':445
'59.##.152.244':445
'59.##.239.14':445
'59.##.155.12':445
'59.##.165.184':445
'59.##.137.96':445
'59.##.170.163':445
'59.##.236.55':445
'59.##.115.129':445
'59.##.114.115':445
'59.##.156.235':445
'59.##.201.219':445
'59.##.112.119':445
'59.##.156.235':139
'59.##.201.219':139
'59.##.165.184':139
'59.##.236.55':139
'59.##.115.129':139
'59.##.87.169':139
'59.#6.20.65':139
'59.##.114.115':139
'59.##.221.114':139
'59.#6.60.20':139
'59.##.241.59':139
'59.#6.29.11':139
'59.##.20.198':139
'59.##.40.241':139
'59.##.170.163':139
'59.##.155.12':139
'59.##.64.101':139
'59.##.137.96':139
'59.#6.51.98':139
'59.##.235.95':139
'59.##.61.181':139
'59.##.74.216':139
'59.##.151.152':139
'59.#6.69.13':139
'59.##.143.63':139
'59.##.175.92':445
'59.##.233.114':139
'59.#6.37.15':139
'59.##.239.14':139
'59.#6.6.14':139
'59.##.244.107':139
'59.##.152.244':139
'59.#6.15.3':139
'59.##.111.21':139
'59.##.229.122':139
'59.#6.15.15':139
'59.##.188.53':139
'59.##.83.241':139
'59.##.144.33':139
'59.##.83.140':139
'59.##.109.247':139
'59.##.184.197':139
'59.##.84.177':139
'59.##.34.157':139
'59.##.212.114':139
'59.##.236.170':139
'59.##.78.111':139
'59.##.183.65':139
'59.##.215.113':139
'59.#6.88.19':139
'59.##.172.185':139
'59.##.114.143':139
'59.##.133.228':139
'59.##.160.190':139
'59.#6.91.7':139
'59.##.18.168':139
'59.##.251.70':445
'59.##.184.125':445
'59.##.179.165':445
'59.##.145.179':445
'59.##.112.90':445
'59.##.71.145':445
'59.##.229.107':445
'59.##.12.227':445
'59.#6.37.54':445
'59.#6.3.21':139
'59.##.232.142':139
'59.#6.79.19':139
'59.#6.67.94':139
'59.##.146.232':139
'59.##.234.145':445
'59.##.184.179':445
'59.##.189.146':139
'59.##.15.169':445
'59.##.113.55':139
'59.##.143.63':445
'59.##.15.169':139
'59.##.233.114':445
'59.#6.37.15':445
'59.##.234.145':139
'59.##.145.179':139
'59.##.251.70':139
'59.##.184.179':139
'59.##.179.165':139
'59.##.111.21':445
'59.##.229.122':445
'59.#6.15.15':445
'59.##.188.53':445
'59.##.74.216':445
'59.##.61.181':445
'59.#6.69.13':445
'59.##.151.152':445
'59.##.235.95':445
'59.##.184.125':139
'59.##.96.148':139
'59.##.141.96':139
'59.##.171.16':139
'59.##.168.172':139
'59.#6.14.40':139
'59.##.150.69':139
'59.#6.44.98':139
'59.##.167.159':139
'59.##.235.178':139
'59.#6.37.54':139
'59.##.71.145':139
'59.##.112.90':139
'59.##.12.227':139
'59.##.229.107':139
'59.##.60.173':139
'59.##.231.58':139
'59.##.124.137':139
'59.##.65.124':139
'59.##.59.203':139
'59.##.111.66':139
'59.##.238.234':139
'59.##.242.238':139
'59.#6.7.170':445
'59.##.200.14':445
'59.#6.76.70':445
'59.##.74.149':445
'59.##.238.162':445
'59.#6.41.15':139
'59.##.204.197':139
'59.##.78.213':139
'59.##.69.196':139
'59.##.207.204':139
'59.##.37.108':139
'59.##.235.36':139
'59.##.91.207':139
'59.##.107.92':139
'59.##.70.164':445
'59.##.104.172':445
'59.##.218.192':445
'59.##.119.127':445
'59.##.147.14':445
'59.##.185.103':445
'59.#6.97.22':445
'59.##.58.177':445
'59.#6.8.139':445
'59.##.22.163':445
'59.##.191.175':445
'59.#6.54.12':445
'59.##.162.191':445
'59.##.61.201':445
'59.##.79.108':445
'59.##.116.62':445
'59.##.21.208':445
'59.##.110.79':445
'59.##.228.37':445
'59.##.185.48':139
'59.##.110.79':139
'59.##.228.37':139
'59.#6.54.12':139
'59.##.79.108':139
'59.##.116.62':139
'59.##.147.14':139
'59.##.104.172':139
'59.##.21.208':139
'59.##.119.127':139
'59.#6.7.170':139
'59.##.74.149':139
'59.##.238.162':139
'59.##.200.14':139
'59.#6.76.70':139
'59.##.61.201':139
'59.##.191.175':139
'59.##.70.164':139
'59.##.162.191':139
'59.##.218.192':139
'59.#6.33.28':139
'59.#6.67.33':139
'59.#6.94.25':139
'59.##.27.213':139
'59.#6.130.4':139
'59.##.243.187':139
'59.##.56.217':139
'59.##.137.95':139
'59.##.151.33':139
'59.##.22.163':139
'59.#6.97.22':139
'59.##.185.103':139
'59.#6.8.139':139
'59.##.58.177':139
'59.##.201.234':139
'59.##.244.201':139
'59.##.231.213':139
'59.##.179.224':139
'59.#6.130.4':9988
'59.##.46.168':139
'59.##.79.108':9988
'59.##.191.175':9988
'59.##.191.235':139
'59.##.165.139':139
'59.##.46.168':445
'59.##.88.192':139
'59.##.174.88':139
'59.##.185.103':9988
'59.##.58.177':9988
'59.##.56.217':9988
'59.##.201.234':9988
'59.##.21.208':9988
'59.#6.8.139':9988
'59.#6.33.28':9988
'59.##.104.172':9988
'59.##.110.79':9988
'59.##.191.235':445
'59.##.186.29':139
'59.##.132.174':139
'59.##.130.67':139
'59.##.204.118':139
'59.#6.68.29':139
'59.##.223.58':139
'59.#6.43.30':139
'59.#6.18.67':139
'59.#6.59.19':139
'59.##.165.139':445
'59.##.175.92':139
'59.##.88.192':445
'59.##.174.88':445
'59.##.112.119':139
'59.#6.3.190':139
'59.##.216.208':139
'59.#6.52.85':139
'59.##.70.222':139
'59.##.116.62':9988
'59.##.243.187':445
'59.##.56.217':445
'59.##.137.95':445
'59.##.151.33':445
'59.##.185.48':445
'59.#6.41.15':445
'59.##.204.197':445
'59.##.78.213':445
'59.##.69.196':445
'59.##.201.234':445
'59.##.244.201':445
'59.##.231.213':445
'59.##.179.224':445
'59.#6.94.25':445
'59.#6.67.33':445
'59.#6.130.4':445
'59.##.27.213':445
'59.#6.33.28':445
'59.##.207.204':445
'59.#6.97.22':9988
'59.##.22.163':9988
'59.##.200.14':9988
'59.##.162.191':9988
'59.##.147.14':9988
'59.#6.54.12':9988
'59.##.61.201':9988
'59.##.244.201':9988
'59.##.231.213':9988
'59.##.37.108':445
'59.##.235.36':445
'59.##.91.207':445
'59.##.107.92':445
'59.##.238.234':445
'59.##.111.66':445
'59.#6.94.25':9988
'59.##.242.238':445
'59.##.59.203':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней