Trojan.Starman.5750

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'69.##3.202.73':139
'69.##3.159.22':139
'69.##3.229.15':139
'69.##3.253.84':139
'69.##3.204.172':139
'69.##3.194.142':139
'69.##3.89.234':139
'69.##3.126.29':139
'69.##3.230.85':139
'69.##3.63.60':139
'69.##3.100.92':139
'69.##3.212.59':139
'69.##3.72.126':139
'69.##3.99.150':139
'69.##3.64.254':139
'69.##3.248.191':139
'69.##3.96.205':139
'69.##3.128.96':139
'69.##3.244.186':139
'69.#03.7.23':139
'69.##3.117.161':139
'69.##3.72.126':445
'69.#03.7.23':445
'69.##3.212.59':445
'69.##3.248.191':445
'69.##3.99.150':445
'69.##3.128.96':445
'69.##3.100.92':445
'69.##3.96.205':445
'69.##3.117.161':445
'69.##3.244.186':445
'69.##3.64.254':445
'69.##3.27.174':139
'69.##3.10.159':445
'69.##3.138.41':139
'69.#03.9.90':139
'69.##3.164.17':139
'69.##3.222.57':445
'69.#03.23.8':445
'69.##3.41.114':445
'69.##3.64.233':445
'69.##3.79.119':445
'69.#03.23.8':139
'69.##3.92.116':139
'69.##3.77.92':139
'69.##3.21.27':139
'69.##3.89.46':139
'69.#03.2.84':139
'69.##3.43.67':445
'69.##3.120.93':445
'69.##3.212.230':445
'69.##3.248.168':139
'69.##3.6.199':445
'69.##3.151.166':139
'69.##3.227.227':139
'69.##3.39.231':139
'69.##3.107.83':139
'69.##3.120.93':139
'69.#03.83.2':139
'69.##3.243.61':139
'69.##3.164.211':139
'69.##3.82.15':139
'69.##3.201.101':139
'69.##3.20.207':139
'69.##3.77.92':445
'69.##3.248.168':445
'69.##3.92.116':445
'69.#03.2.84':445
'69.##3.21.27':445
'69.##3.41.114':139
'69.##3.222.57':139
'69.##3.79.119':139
'69.##3.10.159':139
'69.##3.64.233':139
'69.##3.89.46':445
'69.##3.39.231':445
'69.##3.201.101':445
'69.##3.227.227':445
'69.#03.83.2':445
'69.##3.107.83':445
'69.##3.164.211':445
'69.##3.151.166':445
'69.##3.243.61':445
'69.##3.20.207':445
'69.##3.82.15':445
'69.##3.13.144':139
'69.##3.93.152':139
'69.##3.39.115':139
'69.##3.162.219':139
'69.##3.66.106':139
'69.##3.97.139':139
'69.##3.70.231':139
'69.##3.40.178':139
'69.##3.187.130':139
'69.##3.177.186':139
'69.##3.32.216':445
'69.##3.53.55':445
'69.##3.175.230':445
'69.##3.99.41':445
'69.##3.80.251':445
'69.##3.115.60':445
'69.##3.55.38':445
'69.##3.205.105':445
'69.##3.173.105':445
'69.##3.165.191':445
'69.##3.9.181':445
'69.##3.42.23':139
'69.##3.61.198':139
'69.##3.211.92':139
'69.##3.152.218':139
'69.##3.30.244':139
'69.##3.40.231':139
'69.##3.97.74':139
'69.##3.30.67':139
'69.##3.122.83':139
'69.##3.59.122':139
'69.##3.54.15':139
'69.##3.36.135':139
'69.##3.131.14':139
'69.##3.134.65':139
'69.##3.245.237':139
'69.##3.104.237':139
'69.##3.137.48':139
'69.##3.145.38':139
'69.##3.33.229':139
'69.##3.227.16':139
'69.##3.75.88':139
'69.##3.60.134':445
'69.##3.74.211':139
'69.##3.37.106':139
'69.##3.27.174':445
'69.##3.164.17':445
'69.##3.138.41':445
'69.##3.113.208':139
'69.##3.57.54':139
'69.##3.14.132':139
'69.##3.84.217':139
'69.##3.146.148':139
'69.#03.9.90':445
'69.##3.202.73':445
'69.##3.159.22':445
'69.##3.229.15':445
'69.##3.253.84':445
'69.##3.204.172':445
'69.##3.194.142':445
'69.##3.89.234':445
'69.##3.126.29':445
'69.##3.230.85':445
'69.##3.63.60':445
'69.##3.37.106':445
'69.##3.84.217':445
'69.##3.74.211':445
'69.##3.205.105':139
'69.##3.32.216':139
'69.##3.57.54':445
'69.##3.134.57':445
'69.##3.113.208':445
'69.##3.146.148':445
'69.##3.14.132':445
'69.##3.55.38':139
'69.##3.115.60':139
'69.##3.99.41':139
'69.##3.80.251':139
'69.##3.134.57':139
'69.##3.60.134':139
'69.##3.9.181':139
'69.##3.173.105':139
'69.##3.165.191':139
'69.##3.53.55':139
'69.##3.175.230':139
'69.##3.43.67':139
'69.##3.188.137':445
'69.##3.177.11':445
'69.##3.74.54':445
'69.##3.188.248':445
'69.##3.89.189':445
'69.##3.82.245':445
'69.##3.147.202':445
'69.##3.132.91':445
'69.##3.139.176':445
'69.##3.142.251':445
'69.##3.37.15':445
'69.##3.245.54':139
'69.##3.160.130':139
'69.##3.255.9':139
'69.##3.16.209':139
'69.##3.39.88':139
'69.##3.111.110':445
'69.##3.46.111':445
'69.##3.164.41':139
'69.##3.209.160':139
'69.##3.15.209':139
'69.##3.255.244':445
'69.##3.135.40':445
'69.##3.73.92':445
'69.##3.153.214':445
'69.##3.137.2':445
'69.##3.142.111':445
'69.##3.44.221':445
'69.##3.111.181':445
'69.##3.157.87':445
'69.##3.21.103':445
'69.##3.228.248':445
'69.##3.7.210':445
'69.##3.117.36':445
'69.##3.199.24':445
'69.##3.126.120':445
'69.##3.247.91':445
'69.##3.66.177':445
'69.##3.145.23':445
'69.##3.195.122':445
'69.##3.55.252':445
'69.##3.59.215':445
'69.#03.5.48':139
'69.##3.247.91':139
'69.##3.199.24':139
'69.##3.126.120':139
'69.##3.82.245':139
'69.##3.147.202':139
'69.##3.59.215':139
'69.##3.195.122':139
'69.##3.55.252':139
'69.##3.7.210':139
'69.##3.117.36':139
'69.##3.132.91':139
'69.##3.188.248':139
'69.##3.89.189':139
'69.##3.37.15':139
'69.##3.46.111':139
'69.##3.111.110':139
'69.##3.139.176':139
'69.##3.142.251':139
'69.##3.177.11':139
'69.##3.74.54':139
'69.##3.188.137':139
'69.#03.13.1':139
'69.##3.23.162':139
'69.##3.113.149':139
'69.##3.142.111':139
'69.##3.44.221':139
'69.##3.201.171':139
'69.##3.194.6':139
'69.##3.108.181':139
'69.##3.108.38':139
'69.##3.22.239':139
'69.##3.111.181':139
'69.##3.153.214':139
'69.##3.137.2':139
'69.##3.228.248':139
'69.##3.66.177':139
'69.##3.145.23':139
'69.##3.157.87':139
'69.##3.21.103':139
'69.##3.135.40':139
'69.##3.73.92':139
'69.##3.255.244':139
'69.##3.227.92':445
'69.##3.205.163':445
'69.##3.0.191':445
'69.##3.114.88':139
'69.##3.23.234':139
'69.##3.110.42':445
'69.##3.142.220':445
'69.##3.42.244':445
'69.##3.136.230':445
'69.##3.136.21':445
'69.##3.100.114':139
'69.##3.134.156':139
'69.##3.76.139':139
'69.##3.156.41':139
'69.##3.3.147':139
'69.##3.129.139':139
'69.##3.125.25':139
'69.##3.65.186':139
'69.##3.169.68':139
'69.##3.31.100':139
'69.##3.68.234':139
'69.##3.125.25':445
'69.##3.65.186':445
'69.##3.169.68':445
'69.##3.31.100':445
'69.##3.68.234':445
'69.##3.6.199':139
'69.##3.212.230':139
'69.##3.23.234':445
'69.##3.100.114':445
'69.##3.114.88':445
'69.##3.76.139':445
'69.##3.87.236':445
'69.##3.181.87':445
'69.##3.176.232':445
'69.##3.88.45':445
'69.##3.53.103':445
'69.##3.156.41':445
'69.##3.134.156':445
'69.##3.129.139':445
'69.##3.41.162':445
'69.##3.3.147':445
'69.##3.41.162':139
'69.##3.209.160':445
'69.##3.15.209':445
'69.##3.160.130':445
'69.##3.255.9':445
'69.##3.245.54':445
'69.##3.199.24':9988
'69.##3.117.36':9988
'69.##3.82.245':9988
'69.##3.164.41':445
'69.##3.111.110':9988
'69.##3.39.88':445
'69.##3.108.38':445
'69.##3.22.239':445
'69.##3.23.162':445
'69.##3.113.149':445
'69.#03.13.1':445
'69.#03.5.48':445
'69.##3.16.209':445
'69.##3.194.6':445
'69.##3.108.181':445
'69.##3.201.171':445
'69.##3.110.42':139
'69.##3.142.220':139
'69.##3.42.244':139
'69.##3.136.230':139
'69.##3.136.21':139
'69.##3.87.236':139
'69.##3.181.87':139
'69.##3.176.232':139
'69.##3.88.45':139
'69.##3.53.103':139
'69.##3.205.163':139
'69.##3.66.177':9988
'69.##3.145.23':9988
'69.##3.195.122':9988
'69.##3.55.252':9988
'69.##3.59.215':9988
'69.##3.0.191':139
'69.##3.227.92':139
'69.##3.22.239':9988
'69.##3.135.40':9988
'69.##3.23.162':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней