Trojan.Starman.5759

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'65.##6.89.52':445
'65.##6.177.13':445
'65.##6.142.14':445
'65.##6.66.35':445
'65.##6.21.66':445
'65.##6.68.182':445
'65.##6.222.230':445
'65.##6.146.76':445
'65.##6.192.10':445
'65.##6.156.6':445
'65.##6.59.180':445
'65.##6.92.26':445
'65.##6.243.135':445
'65.#26.6.32':445
'65.##6.68.242':139
'65.##6.107.50':139
'65.##6.210.74':139
'65.##6.81.181':139
'65.##6.239.59':139
'65.##6.16.112':139
'65.##6.101.250':139
'65.##6.43.122':445
'65.##6.126.238':445
'65.##6.74.141':445
'65.##6.82.130':139
'65.##6.28.116':139
'65.##6.6.197':139
'65.##6.28.201':139
'65.##6.88.230':139
'65.#26.3.95':139
'65.##6.93.35':139
'65.##6.127.109':139
'65.##6.101.90':139
'65.##6.111.26':139
'65.##6.177.71':139
'65.##6.126.26':139
'65.##6.191.240':139
'65.##6.134.170':139
'65.##6.8.219':139
'65.##6.71.184':139
'65.##6.136.222':139
'65.##6.16.112':445
'65.##6.68.242':445
'65.##6.107.50':445
'65.##6.181.48':445
'65.##6.81.181':445
'65.##6.239.59':445
'65.##6.210.74':445
'65.##6.6.197':445
'65.##6.56.103':139
'65.##6.24.57':139
'65.##6.101.250':445
'65.##6.82.130':445
'65.##6.28.116':445
'65.##6.35.54':445
'65.##6.237.159':445
'65.##6.226.237':445
'65.##6.103.111':445
'65.##6.151.100':445
'65.##6.180.156':445
'65.##6.239.226':445
'65.##6.221.10':445
'65.##6.45.143':445
'65.##6.4.165':445
'65.##6.14.125':445
'65.##6.52.99':445
'65.#26.9.52':445
'65.##6.164.80':445
'65.##6.4.165':139
'65.##6.86.46':139
'65.##6.19.105':139
'65.#26.9.52':139
'65.##6.221.10':139
'65.##6.45.143':139
'65.##6.116.245':139
'65.##6.55.147':139
'65.##6.109.44':139
'65.##6.122.103':139
'65.##6.240.56':139
'65.##6.67.171':139
'65.##6.206.62':139
'65.##6.177.13':139
'65.##6.142.14':139
'65.##6.222.230':139
'65.##6.21.66':139
'65.##6.68.182':139
'65.##6.89.52':139
'65.##6.59.180':139
'65.##6.192.10':139
'65.##6.156.6':139
'65.##6.181.48':139
'65.##6.92.26':139
'65.##6.243.135':139
'65.##6.146.76':139
'65.##6.66.35':139
'65.##6.240.56':445
'65.##6.67.171':445
'65.##6.206.62':445
'65.##6.86.46':445
'65.##6.19.105':445
'65.##6.116.245':445
'65.##6.55.147':445
'65.##6.126.238':139
'65.##6.74.141':139
'65.#26.6.32':139
'65.##6.109.44':445
'65.##6.122.103':445
'65.##6.43.122':139
'65.##6.74.122':139
'65.##6.56.216':445
'65.##6.179.244':445
'65.##6.22.135':445
'65.##6.103.236':445
'65.##6.72.103':445
'65.##6.10.29':445
'65.##6.178.22':445
'65.##6.175.13':445
'65.##6.139.107':445
'65.##6.239.194':445
'65.##6.207.178':445
'65.##6.115.231':445
'65.##6.42.167':445
'65.##6.243.10':445
'65.##6.122.8':445
'65.##6.199.121':445
'65.##6.15.121':445
'65.##6.239.194':139
'65.##6.151.87':139
'65.##6.113.21':139
'65.##6.255.134':445
'65.#26.7.40':445
'65.##6.183.114':445
'65.##6.79.76':445
'65.##6.23.217':445
'65.##6.155.62':445
'65.##6.141.150':445
'65.##6.172.17':139
'65.##6.45.35':139
'65.##6.216.213':139
'65.##6.169.179':139
'65.##6.80.169':139
'65.##6.65.80':139
'65.##6.33.113':139
'65.##6.215.35':139
'65.##6.111.29':139
'65.##6.16.109':139
'65.##6.126.33':139
'65.##6.217.125':139
'65.##6.219.121':139
'65.##6.179.12':139
'65.##6.113.21':445
'65.##6.45.74':139
'65.##6.250.101':139
'65.##6.151.87':445
'65.##6.194.139':445
'65.##6.10.50':445
'65.##6.170.22':139
'65.#26.65.8':139
'65.##6.117.71':139
'65.##6.225.66':139
'65.##6.47.234':139
'65.##6.173.250':139
'65.##6.211.174':139
'65.##6.134.170':445
'65.##6.71.184':445
'65.##6.177.71':445
'65.#26.3.95':445
'65.##6.111.26':445
'65.##6.8.219':445
'65.##6.126.26':445
'65.##6.178.49':445
'65.##6.79.99':445
'65.##6.97.52':445
'65.##6.191.240':445
'65.##6.74.122':445
'65.##6.175.12':445
'65.##6.28.201':445
'65.##6.97.52':139
'65.##6.181.96':139
'65.##6.71.227':139
'65.##6.175.12':139
'65.##6.178.49':139
'65.##6.79.99':139
'65.##6.56.103':445
'65.##6.127.109':445
'65.##6.101.90':445
'65.##6.88.230':445
'65.##6.24.57':445
'65.##6.136.222':445
'65.##6.93.35':445
'65.##6.179.244':139
'65.##6.22.135':139
'65.##6.178.22':139
'65.##6.72.103':139
'65.##6.10.29':139
'65.##6.56.216':139
'65.##6.207.178':139
'65.##6.139.107':139
'65.##6.10.50':139
'65.##6.194.139':139
'65.##6.115.231':139
'65.##6.42.167':139
'65.##6.175.13':139
'65.##6.103.236':139
'65.##6.199.121':139
'65.##6.15.121':139
'65.##6.255.134':139
'65.##6.181.96':445
'65.##6.71.227':445
'65.##6.122.8':139
'65.##6.23.217':139
'65.##6.183.114':139
'65.##6.79.76':139
'65.##6.243.10':139
'65.##6.155.62':139
'65.##6.141.150':139
'65.#26.7.40':139
'65.##6.52.99':139
'65.##6.18.10':445
'65.##6.181.70':445
'65.##6.158.242':445
'65.##6.15.41':445
'65.#26.1.32':445
'65.##6.145.158':445
'65.##6.26.205':445
'65.##6.35.45':445
'65.##6.133.121':445
'65.##6.84.123':445
'65.##6.70.127':445
'65.##6.189.96':445
'65.##6.79.151':445
'65.##6.169.126':445
'65.##6.216.85':445
'65.##6.224.148':445
'65.#26.49.2':445
'65.##6.245.226':445
'65.##6.195.112':445
'65.##6.235.83':445
'65.##6.129.150':445
'65.#26.82.9':445
'65.#26.5.14':445
'65.##6.204.90':445
'65.##6.72.109':445
'65.##6.130.11':445
'65.##6.11.33':445
'65.#26.6.51':445
'65.##6.105.52':445
'65.##6.111.97':445
'65.##6.119.200':445
'65.#26.7.71':445
'65.##6.119.16':445
'65.##6.90.85':445
'65.##6.160.89':9988
'65.##6.175.111':139
'65.##6.52.35':139
'65.##6.224.148':9988
'65.##6.195.112':9988
'65.##6.145.158':9988
'65.##6.37.105':445
'65.##6.22.148':445
'65.##6.127.185':445
'65.##6.97.58':445
'65.##6.160.89':445
'65.##6.210.138':445
'65.##6.27.171':445
'65.##6.139.122':445
'65.##6.237.169':445
'65.##6.113.175':445
'65.##6.224.24':445
'65.##6.147.139':445
'65.##6.35.147':445
'65.##6.106.176':445
'65.##6.15.41':139
'65.#26.1.32':139
'65.##6.18.10':139
'65.#26.5.14':139
'65.##6.169.126':139
'65.##6.204.90':139
'65.##6.145.158':139
'65.##6.70.127':139
'65.##6.189.96':139
'65.##6.79.151':139
'65.##6.181.70':139
'65.##6.158.242':139
'65.##6.26.205':139
'65.##6.11.33':139
'65.##6.43.60':139
'65.##6.195.112':139
'65.##6.245.226':139
'65.##6.224.148':139
'65.##6.35.123':139
'65.##6.116.167':139
'65.##6.235.83':139
'65.##6.72.109':139
'65.##6.130.11':139
'65.#26.82.9':139
'65.##6.216.85':139
'65.#26.49.2':139
'65.##6.129.150':139
'65.##6.119.200':139
'65.#26.7.71':139
'65.##6.119.16':139
'65.##6.113.175':139
'65.##6.224.24':139
'65.##6.37.105':139
'65.#26.6.51':139
'65.##6.35.123':445
'65.##6.116.167':445
'65.##6.43.60':445
'65.##6.105.52':139
'65.##6.90.85':139
'65.##6.111.97':139
'65.##6.237.169':139
'65.##6.160.89':139
'65.##6.210.138':139
'65.##6.27.171':139
'65.##6.35.45':139
'65.##6.84.123':139
'65.##6.133.121':139
'65.##6.127.185':139
'65.##6.147.139':139
'65.##6.35.147':139
'65.##6.106.176':139
'65.##6.22.148':139
'65.##6.97.58':139
'65.##6.139.122':139
'65.##6.134.24':139
'65.##6.11.252':445
'65.##6.184.201':445
'65.##6.41.93':445
'65.##6.195.142':139
'65.##6.186.195':139
'65.##6.246.230':139
'65.##6.141.228':445
'65.##6.53.240':445
'65.##6.4.186':445
'65.##6.147.79':445
'65.##6.106.242':445
'65.##6.76.82':445
'65.##6.124.162':445
'65.##6.142.140':139
'65.##6.56.243':139
'65.##6.186.18':139
'65.##6.26.77':139
'65.##6.64.145':139
'65.##6.199.75':139
'65.##6.68.79':139
'65.##6.15.250':139
'65.##6.134.77':139
'65.##6.133.10':139
'65.##6.103.20':139
'65.##6.140.115':139
'65.##6.37.215':139
'65.##6.167.34':139
'65.##6.246.230':445
'65.##6.164.80':139
'65.##6.103.111':139
'65.##6.142.140':445
'65.##6.195.142':445
'65.##6.186.195':445
'65.##6.151.100':139
'65.##6.226.237':139
'65.##6.239.226':139
'65.##6.14.125':139
'65.##6.180.156':139
'65.##6.35.54':139
'65.##6.237.159':139
'65.##6.103.20':445
'65.##6.68.79':445
'65.##6.56.243':445
'65.##6.186.18':445
'65.##6.219.85':445
'65.##6.64.145':445
'65.##6.199.75':445
'65.##6.26.77':445
'65.##6.167.34':445
'65.##6.134.77':445
'65.##6.133.10':445
'65.##6.15.250':445
'65.##6.140.115':445
'65.##6.37.215':445
'65.##6.251.155':139
'65.##6.151.56':139
'65.##6.177.96':139
'65.##6.119.116':139
'65.##6.127.118':139
'65.##6.70.194':139
'65.##6.175.111':445
'65.##6.18.78':445
'65.##6.140.241':445
'65.##6.66.203':445
'65.##6.52.35':445
'65.##6.134.24':445
'65.##6.121.134':445
'65.##6.163.20':139
'65.##6.66.203':139
'65.##6.142.173':139
'65.##6.102.132':139
'65.##6.121.134':139
'65.##6.18.78':139
'65.##6.140.241':139
'65.##6.180.102':139
'65.##6.115.72':139
'65.##6.34.81':139
'65.##6.65.50':139
'65.##6.59.46':139
'65.##6.154.145':139
'65.##6.72.227':139
'65.##6.184.201':139
'65.##6.41.93':139
'65.##6.141.228':139
'65.##6.151.56':445
'65.##6.177.96':445
'65.##6.11.252':139
'65.##6.106.242':139
'65.##6.4.186':139
'65.##6.147.79':139
'65.##6.219.85':139
'65.##6.76.82':139
'65.##6.124.162':139
'65.##6.53.240':139
'65.##6.251.155':445
'65.##6.59.46':445
'65.##6.154.145':445
'65.##6.72.227':445
'65.##6.142.173':445
'65.##6.102.132':445
'65.##6.180.102':445
'65.##6.115.72':445
'65.##6.119.116':445
'65.##6.127.118':445
'65.##6.70.194':445
'65.##6.34.81':445
'65.##6.65.50':445
'65.##6.163.20':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней