Trojan.Starman.5898

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'61.##5.81.112':139
'61.##5.238.223':139
'61.##5.68.18':139
'61.##5.230.241':139
'61.##5.42.209':139
'61.##5.140.142':139
'61.##5.14.185':139
'61.##5.211.21':139
'61.##5.189.201':139
'61.##5.106.203':139
'61.##5.242.165':139
'61.##5.27.95':139
'61.##5.4.172':139
'61.##5.119.106':445
'61.##5.207.248':445
'61.##5.173.187':445
'61.##5.38.127':139
'61.##5.166.26':139
'61.##5.38.169':139
'61.##5.157.203':139
'61.##5.173.0':139
'61.##5.42.209':445
'61.##5.68.18':445
'61.##5.230.241':445
'61.##5.166.26':445
'61.##5.242.165':445
'61.##5.106.203':445
'61.##5.211.21':445
'61.##5.189.201':445
'61.##5.81.112':445
'61.##5.238.223':445
'61.##5.38.127':445
'61.##5.27.56':139
'61.##5.92.18':139
'61.##5.47.209':139
'61.##5.240.183':139
'61.##5.96.155':139
'61.##5.173.0':445
'61.##5.38.169':445
'61.##5.157.203':445
'61.##5.27.95':445
'61.##5.4.172':445
'61.##5.149.182':445
'61.##5.149.182':139
'61.##5.207.248':139
'61.#35.52.6':139
'61.##5.130.137':139
'61.##5.182.9':139
'61.##5.15.119':445
'61.##5.146.164':445
'61.##5.7.197':445
'61.##5.173.187':139
'61.##5.119.106':139
'61.##5.137.3':139
'61.##5.10.114':139
'61.##5.16.130':139
'61.##5.161.150':139
'61.##5.227.118':139
'61.##5.182.76':139
'61.##5.11.87':139
'61.##5.115.162':139
'61.##5.248.134':139
'61.##5.23.188':139
'61.##5.51.134':139
'61.##5.248.134':445
'61.##5.11.87':445
'61.##5.51.134':445
'61.##5.16.130':445
'61.##5.23.188':445
'61.##5.182.9':445
'61.#35.52.6':445
'61.##5.130.137':445
'61.##5.115.162':445
'61.##5.137.3':445
'61.##5.10.114':445
'61.#35.9.20':445
'61.##5.13.77':445
'61.##5.14.189':445
'61.##5.63.151':445
'61.##5.9.195':445
'61.##5.182.76':445
'61.##5.161.150':445
'61.##5.227.118':445
'61.##5.20.91':445
'61.##5.126.250':445
'61.##5.140.142':445
'61.##5.202.223':445
'61.##5.41.62':445
'61.##5.54.147':445
'61.##5.80.133':445
'61.##5.114.80':445
'61.##5.45.188':139
'61.##5.13.161':139
'61.##5.188.12':445
'61.##5.183.2':445
'61.##5.12.183':445
'61.##5.176.69':445
'61.##5.11.183':445
'61.##5.75.11':445
'61.##5.8.144':445
'61.##5.23.172':445
'61.##5.124.159':445
'61.##5.149.224':445
'61.##5.242.148':445
'61.##5.197.228':445
'61.##5.22.42':445
'61.##5.128.100':445
'61.##5.55.189':139
'61.##5.110.10':139
'61.##5.67.200':139
'61.##5.24.85':139
'61.##5.158.92':139
'61.##5.46.192':139
'61.##5.124.78':139
'61.##5.56.103':139
'61.##5.252.31':139
'61.##5.207.16':139
'61.##5.180.181':139
'61.##5.158.102':139
'61.##5.191.125':139
'61.##5.226.61':139
'61.##5.212.49':139
'61.##5.93.77':139
'61.##5.2.106':139
'61.##5.204.65':139
'61.##5.106.214':139
'61.##5.6.191':139
'61.##5.79.55':139
'61.##5.144.27':445
'61.##5.144.27':139
'61.##5.23.172':139
'61.#35.3.73':139
'61.##5.120.77':139
'61.##5.236.35':139
'61.##5.75.11':139
'61.##5.22.42':139
'61.##5.11.183':139
'61.##5.124.159':139
'61.##5.8.144':139
'61.##5.61.200':139
'61.##5.47.209':445
'61.##5.27.56':445
'61.##5.96.155':445
'61.##5.14.185':445
'61.##5.240.183':445
'61.##5.245.227':139
'61.##5.199.128':139
'61.##5.245.121':139
'61.##5.92.18':445
'61.##5.82.161':139
'61.##5.245.121':445
'61.##5.245.227':445
'61.##5.82.161':445
'61.##5.12.183':139
'61.##5.188.12':139
'61.##5.236.35':445
'61.#35.3.73':445
'61.##5.120.77':445
'61.##5.199.128':445
'61.##5.61.200':445
'61.##5.183.2':139
'61.##5.242.148':139
'61.##5.176.69':139
'61.##5.149.224':139
'61.##5.128.100':139
'61.##5.197.228':139
'61.##5.202.223':139
'61.##5.41.62':139
'61.##5.54.147':139
'61.##5.80.133':139
'61.##5.114.80':139
'61.##5.126.250':139
'61.##5.8.178':445
'61.##5.136.123':445
'61.##5.251.92':445
'61.##5.222.110':445
'61.##5.175.53':445
'61.##5.252.147':445
'61.##5.44.95':445
'61.##5.198.2':445
'61.##5.165.136':445
'61.##5.232.39':445
'61.##5.25.11':445
'61.##5.14.18':139
'61.##5.255.252':139
'61.##5.60.210':139
'61.##5.244.119':139
'61.##5.162.1':139
'61.##5.212.202':445
'61.#35.4.84':445
'61.##5.39.218':139
'61.##5.157.232':139
'61.##5.52.184':139
'61.##5.77.162':445
'61.##5.122.247':445
'61.##5.84.222':445
'61.#35.85.1':445
'61.##5.156.0':445
'61.##5.192.165':445
'61.##5.18.112':445
'61.##5.99.25':445
'61.##5.86.23':445
'61.##5.118.117':445
'61.#35.5.28':445
'61.##5.90.163':445
'61.##5.131.191':445
'61.##5.162.240':445
'61.##5.169.55':445
'61.##5.240.168':445
'61.##5.105.120':445
'61.##5.62.108':445
'61.##5.38.80':445
'61.##5.61.111':445
'61.##5.152.80':445
'61.##5.140.223':139
'61.##5.240.168':139
'61.##5.162.240':139
'61.##5.169.55':139
'61.##5.252.147':139
'61.##5.44.95':139
'61.##5.152.80':139
'61.##5.38.80':139
'61.##5.61.111':139
'61.##5.90.163':139
'61.##5.131.191':139
'61.##5.198.2':139
'61.##5.222.110':139
'61.##5.175.53':139
'61.##5.212.202':139
'61.#35.4.84':139
'61.##5.25.11':139
'61.##5.165.136':139
'61.##5.232.39':139
'61.##5.136.123':139
'61.##5.251.92':139
'61.##5.8.178':139
'61.##5.204.189':139
'61.##5.125.77':139
'61.##5.228.32':139
'61.##5.192.165':139
'61.##5.18.112':139
'61.##5.125.178':139
'61.##5.8.121':139
'61.##5.115.196':139
'61.##5.29.135':139
'61.#35.48.0':139
'61.##5.99.25':139
'61.#35.85.1':139
'61.##5.156.0':139
'61.#35.5.28':139
'61.##5.105.120':139
'61.##5.62.108':139
'61.##5.86.23':139
'61.##5.118.117':139
'61.##5.122.247':139
'61.##5.84.222':139
'61.##5.77.162':139
'61.##5.228.32':445
'61.##5.125.166':445
'61.##5.50.121':445
'61.##5.166.144':445
'61.##5.246.216':445
'61.#35.0.92':445
'61.##5.191.88':445
'61.##5.124.189':445
'61.##5.127.145':445
'61.##5.236.181':445
'61.##5.239.236':445
'61.##5.62.170':445
'61.##5.198.38':139
'61.##5.91.244':139
'61.##5.38.112':139
'61.##5.234.59':139
'61.##5.34.240':139
'61.##5.51.212':139
'61.#35.83.2':139
'61.##5.37.99':139
'61.##5.64.232':139
'61.##5.22.93':139
'61.##5.146.164':139
'61.##5.63.151':139
'61.##5.15.119':139
'61.#35.83.2':445
'61.##5.7.197':139
'61.##5.13.77':139
'61.##5.20.91':139
'61.#35.9.20':139
'61.##5.9.195':139
'61.##5.14.189':139
'61.##5.51.212':445
'61.##5.34.240':445
'61.##5.38.112':445
'61.##5.234.59':445
'61.##5.186.217':445
'61.##5.142.27':445
'61.##5.22.93':445
'61.##5.37.99':445
'61.##5.64.232':445
'61.##5.198.38':445
'61.##5.91.244':445
'61.##5.142.27':139
'61.##5.52.184':445
'61.##5.39.218':445
'61.##5.157.232':445
'61.##5.14.18':445
'61.##5.255.252':445
'61.##5.136.123':9988
'61.##5.165.136':9988
'61.##5.251.92':9988
'61.##5.222.110':9988
'61.##5.25.11':9988
'61.##5.60.210':445
'61.#35.48.0':445
'61.##5.115.196':445
'61.##5.29.135':445
'61.##5.204.189':445
'61.##5.125.77':445
'61.##5.244.119':445
'61.##5.162.1':445
'61.##5.140.223':445
'61.##5.125.178':445
'61.##5.8.121':445
'61.##5.50.121':139
'61.##5.236.181':139
'61.##5.125.166':139
'61.#35.0.92':139
'61.##5.166.144':139
'61.##5.124.189':139
'61.##5.186.217':139
'61.##5.191.88':139
'61.##5.239.236':139
'61.##5.127.145':139
'61.##5.246.216':139
'61.##5.90.163':9988
'61.##5.131.191':9988
'61.##5.240.168':9988
'61.##5.169.55':9988
'61.##5.162.240':9988
'61.##5.86.23':9988
'61.##5.62.170':139
'61.#35.5.28':9988
'61.##5.61.111':9988
'61.##5.152.80':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней