Trojan.Starman.5780

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'83.##3.55.24':445
'83.##3.46.85':445
'83.##3.173.68':445
'83.##3.163.63':445
'83.##3.68.143':445
'83.##3.56.187':445
'83.##3.10.46':445
'83.##3.24.35':445
'83.#23.3.54':445
'83.##3.125.159':445
'83.##3.159.79':445
'83.##3.229.244':445
'83.##3.152.174':445
'83.##3.101.115':445
'83.#23.80.2':445
'83.##3.11.229':445
'83.##3.189.151':445
'83.##3.144.159':445
'83.##3.212.232':445
'83.##3.128.184':445
'83.##3.47.189':445
'83.##3.13.179':445
'83.##3.33.229':139
'83.##3.23.147':139
'83.##3.148.112':139
'83.##3.172.64':445
'83.##3.168.22':139
'83.##3.152.9':139
'83.##3.112.177':139
'83.##3.84.153':139
'83.##3.170.209':139
'83.##3.54.189':139
'83.##3.157.54':139
'83.##3.147.141':445
'83.##3.92.171':445
'83.##3.12.161':445
'83.##3.89.245':445
'83.##3.52.82':445
'83.##3.42.66':445
'83.##3.172.64':139
'83.##3.253.190':445
'83.##3.253.190':139
'83.##3.38.97':445
'83.##3.191.18':445
'83.##3.92.69':445
'83.##3.159.79':139
'83.#23.3.54':139
'83.##3.125.159':139
'83.##3.46.85':139
'83.##3.56.187':139
'83.##3.10.46':139
'83.##3.12.161':139
'83.##3.147.141':139
'83.##3.52.82':139
'83.##3.24.35':139
'83.##3.89.245':139
'83.##3.13.179':139
'83.##3.128.184':139
'83.##3.47.189':139
'83.##3.152.174':139
'83.##3.189.151':139
'83.##3.144.159':139
'83.##3.173.68':139
'83.##3.55.24':139
'83.##3.68.143':139
'83.##3.212.232':139
'83.##3.163.63':139
'83.##3.24.253':445
'83.##3.100.125':445
'83.##3.0.162':445
'83.##3.157.141':445
'83.##3.77.69':445
'83.##3.71.202':445
'83.##3.134.83':445
'83.##3.233.5':445
'83.##3.31.168':445
'83.##3.168.71':445
'83.#23.90.9':445
'83.##3.191.18':139
'83.##3.220.250':445
'83.##3.38.97':139
'83.##3.92.171':139
'83.##3.42.66':139
'83.##3.105.150':445
'83.##3.157.172':445
'83.##3.255.240':445
'83.##3.163.0':445
'83.##3.168.193':445
'83.##3.107.119':445
'83.##3.230.134':139
'83.##3.254.18':445
'83.##3.34.249':445
'83.##3.18.195':445
'83.##3.185.104':445
'83.##3.123.165':445
'83.##3.157.254':445
'83.##3.245.21':445
'83.##3.26.251':445
'83.##3.59.144':445
'83.##3.174.201':445
'83.##3.36.110':445
'83.##3.230.134':445
'83.##3.113.248':445
'83.##3.84.153':445
'83.##3.170.209':445
'83.##3.112.177':445
'83.##3.238.178':445
'83.##3.241.7':445
'83.##3.220.240':445
'83.##3.7.237':445
'83.##3.126.203':445
'83.##3.187.227':445
'83.##3.63.105':445
'83.##3.149.124':445
'83.##3.104.132':445
'83.##3.220.141':445
'83.##3.132.175':445
'83.##3.43.78':445
'83.##3.75.253':139
'83.##3.31.96':139
'83.##3.69.214':445
'83.##3.103.43':445
'83.##3.66.252':445
'83.##3.79.180':445
'83.##3.20.189':445
'83.##3.180.140':445
'83.##3.139.13':445
'83.##3.140.139':445
'83.##3.226.188':445
'83.##3.151.230':445
'83.##3.27.254':445
'83.##3.218.248':445
'83.##3.19.118':445
'83.##3.79.48':445
'83.##3.157.54':445
'83.##3.36.110':139
'83.##3.59.144':139
'83.##3.174.201':139
'83.##3.34.249':139
'83.##3.157.254':139
'83.##3.245.21':139
'83.##3.180.140':139
'83.##3.79.180':139
'83.##3.140.139':139
'83.##3.26.251':139
'83.##3.139.13':139
'83.##3.187.227':139
'83.##3.7.237':139
'83.##3.126.203':139
'83.##3.113.248':139
'83.##3.238.178':139
'83.##3.241.7':139
'83.##3.18.195':139
'83.##3.254.18':139
'83.##3.123.165':139
'83.##3.220.240':139
'83.##3.185.104':139
'83.##3.66.252':139
'83.##3.69.214':139
'83.##3.103.43':139
'83.##3.149.124':139
'83.##3.43.78':139
'83.##3.168.22':445
'83.##3.152.9':445
'83.##3.54.189':445
'83.##3.23.147':445
'83.##3.148.112':445
'83.##3.33.229':445
'83.##3.79.48':139
'83.##3.218.248':139
'83.##3.19.118':139
'83.##3.20.189':139
'83.##3.226.188':139
'83.##3.151.230':139
'83.##3.104.132':139
'83.##3.63.105':139
'83.##3.132.175':139
'83.##3.27.254':139
'83.##3.220.141':139
'83.##3.39.84':445
'83.##3.17.166':445
'83.##3.173.242':445
'83.##3.79.214':445
'83.##3.242.228':445
'83.##3.155.23':445
'83.##3.192.24':445
'83.##3.161.149':445
'83.##3.75.179':445
'83.##3.192.193':445
'83.##3.179.117':445
'83.#23.1.79':139
'83.##3.228.19':139
'83.##3.105.63':139
'83.##3.83.77':139
'83.##3.240.82':139
'83.##3.0.228':139
'83.##3.221.234':445
'83.##3.113.254':445
'83.##3.127.46':445
'83.##3.59.135':445
'83.##3.39.174':445
'83.##3.12.219':445
'83.##3.16.208':445
'83.##3.196.191':445
'83.##3.75.127':445
'83.#23.31.3':445
'83.##3.37.96':445
'83.##3.22.99':445
'83.##3.144.68':445
'83.##3.210.37':445
'83.##3.77.20':445
'83.##3.163.147':445
'83.##3.137.219':445
'83.##3.80.74':445
'83.##3.194.3':445
'83.##3.48.253':445
'83.##3.17.249':445
'83.##3.71.181':445
'83.##3.42.190':445
'83.##3.127.198':445
'83.##3.31.225':445
'83.##3.131.71':445
'83.##3.225.130':445
'83.##3.104.175':139
'83.##3.192.24':139
'83.##3.161.149':139
'83.##3.75.179':139
'83.##3.192.193':139
'83.##3.179.117':139
'83.##3.48.253':139
'83.##3.80.74':139
'83.##3.71.181':139
'83.##3.137.219':139
'83.##3.17.249':139
'83.##3.194.3':139
'83.##3.59.135':139
'83.##3.221.234':139
'83.##3.127.46':139
'83.##3.113.254':139
'83.##3.39.174':139
'83.##3.79.214':139
'83.##3.17.166':139
'83.##3.155.23':139
'83.##3.39.84':139
'83.##3.242.228':139
'83.##3.173.242':139
'83.##3.22.99':139
'83.##3.144.68':139
'83.##3.210.37':139
'83.##3.77.20':139
'83.##3.163.147':139
'83.##3.139.113':139
'83.##3.14.114':139
'83.##3.159.14':139
'83.##3.113.235':139
'83.##3.126.140':139
'83.##3.235.125':139
'83.##3.42.190':139
'83.##3.127.198':139
'83.##3.31.225':139
'83.##3.131.71':139
'83.##3.225.130':139
'83.##3.75.127':139
'83.##3.16.208':139
'83.##3.37.96':139
'83.##3.12.219':139
'83.#23.31.3':139
'83.##3.196.191':139
'83.##3.139.113':445
'83.##3.168.30':445
'83.##3.54.114':445
'83.##3.195.39':445
'83.##3.10.23':445
'83.##3.20.93':445
'83.##3.156.214':445
'83.##3.239.35':445
'83.##3.220.250':139
'83.##3.45.203':445
'83.##3.45.203':139
'83.##3.239.35':139
'83.##3.249.107':445
'83.##3.126.173':445
'83.##3.107.247':445
'83.##3.70.100':445
'83.##3.78.243':445
'83.##3.59.148':445
'83.##3.199.248':445
'83.##3.182.153':445
'83.##3.248.175':445
'83.##3.182.29':445
'83.##3.175.195':445
'83.##3.31.168':139
'83.##3.134.83':139
'83.#23.90.9':139
'83.##3.71.202':139
'83.##3.168.71':139
'83.##3.233.5':139
'83.##3.101.115':139
'83.##3.229.244':139
'83.##3.11.229':139
'83.##3.92.69':139
'83.#23.80.2':139
'83.##3.163.0':139
'83.##3.157.172':139
'83.##3.107.119':139
'83.##3.105.150':139
'83.##3.168.193':139
'83.##3.255.240':139
'83.##3.24.253':139
'83.##3.100.125':139
'83.##3.0.162':139
'83.##3.157.141':139
'83.##3.77.69':139
'83.##3.156.214':139
'83.##3.137.219':9988
'83.##3.59.135':9988
'83.##3.80.74':9988
'83.##3.0.228':445
'83.##3.17.166':9988
'83.##3.17.249':9988
'83.##3.75.179':9988
'83.##3.161.149':9988
'83.##3.173.242':9988
'83.##3.155.23':9988
'83.##3.113.254':9988
'83.##3.14.114':445
'83.##3.159.14':445
'83.##3.113.235':445
'83.##3.126.140':445
'83.##3.235.125':445
'83.##3.104.175':445
'83.#23.1.79':445
'83.##3.228.19':445
'83.##3.105.63':445
'83.##3.83.77':445
'83.##3.240.82':445
'83.##3.248.175':139
'83.##3.199.248':139
'83.##3.175.195':139
'83.##3.59.148':139
'83.##3.182.29':139
'83.##3.182.153':139
'83.##3.168.30':139
'83.##3.54.114':139
'83.##3.195.39':139
'83.##3.10.23':139
'83.##3.20.93':139
'83.##3.221.234':9988
'83.##3.192.24':9988
'83.##3.48.253':9988
'83.##3.192.193':9988
'83.##3.79.214':9988
'83.##3.179.117':9988
'83.##3.249.107':139
'83.##3.126.173':139
'83.##3.107.247':139
'83.##3.70.100':139
'83.##3.78.243':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней