Trojan.Starman.5903

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'69.##7.178.216':139
'69.##7.92.62':139
'69.##7.217.40':139
'69.##7.239.110':139
'69.##7.217.157':139
'69.##7.150.213':139
'69.##7.2.142':139
'69.##7.10.159':139
'69.##7.111.169':139
'69.##7.29.58':139
'69.##7.83.79':445
'69.##7.86.177':445
'69.##7.33.86':445
'69.##7.203.190':445
'69.##7.155.32':445
'69.##7.28.245':445
'69.##7.204.117':445
'69.##7.1.185':445
'69.##7.65.164':445
'69.##7.77.241':445
'69.#27.94.5':445
'69.##7.218.60':139
'69.##7.2.142':445
'69.##7.218.60':445
'69.##7.150.213':445
'69.##7.29.58':445
'69.##7.10.159':445
'69.##7.227.84':445
'69.##7.184.20':445
'69.##7.41.253':445
'69.##7.80.218':445
'69.##7.75.80':445
'69.##7.111.169':445
'69.##7.227.84':139
'69.##7.184.20':139
'69.##7.41.253':139
'69.##7.80.218':139
'69.##7.75.80':139
'69.##7.178.216':445
'69.##7.92.62':445
'69.##7.217.40':445
'69.##7.239.110':445
'69.##7.217.157':445
'69.#27.94.5':139
'69.##7.65.164':139
'69.##7.77.241':139
'69.##7.86.177':139
'69.##7.33.86':139
'69.##7.201.73':445
'69.##7.156.80':445
'69.##7.83.79':139
'69.##7.204.117':139
'69.##7.1.185':139
'69.##7.203.190':139
'69.##7.242.109':139
'69.##7.178.78':139
'69.##7.109.212':139
'69.##7.91.107':139
'69.##7.86.129':139
'69.##7.155.32':139
'69.##7.28.245':139
'69.##7.79.50':139
'69.##7.31.176':139
'69.##7.213.185':139
'69.##7.231.142':445
'69.##7.86.129':445
'69.##7.109.212':445
'69.##7.91.107':445
'69.##7.146.74':445
'69.##7.218.26':445
'69.##7.213.185':445
'69.##7.79.50':445
'69.##7.31.176':445
'69.##7.242.109':445
'69.##7.178.78':445
'69.##7.2.225':445
'69.##7.71.78':445
'69.##7.33.184':445
'69.##7.78.85':445
'69.##7.101.191':445
'69.##7.85.94':445
'69.##7.153.27':445
'69.##7.202.152':445
'69.##7.115.175':445
'69.##7.215.142':445
'69.##7.143.19':445
'69.##7.31.88':445
'69.##7.121.188':445
'69.##7.87.168':445
'69.##7.105.87':445
'69.##7.168.105':445
'69.##7.74.114':445
'69.##7.50.17':445
'69.##7.114.95':445
'69.##7.253.118':445
'69.##7.136.193':445
'69.##7.97.74':445
'69.##7.165.13':445
'69.##7.35.185':445
'69.##7.59.236':445
'69.##7.107.213':445
'69.##7.103.88':445
'69.#27.15.6':445
'69.##7.190.190':445
'69.##7.59.40':445
'69.##7.142.113':445
'69.##7.161.142':445
'69.#27.8.69':445
'69.##7.18.42':139
'69.##7.253.73':139
'69.##7.32.170':139
'69.##7.119.108':139
'69.##7.81.68':139
'69.##7.214.191':139
'69.##7.138.214':139
'69.##7.152.15':139
'69.##7.93.48':139
'69.##7.223.164':139
'69.##7.106.216':139
'69.##7.9.104':445
'69.##7.224.238':445
'69.##7.10.111':445
'69.##7.12.253':445
'69.##7.111.13':445
'69.#27.57.1':139
'69.##7.162.244':139
'69.##7.44.103':139
'69.##7.218.105':139
'69.##7.163.90':139
'69.##7.161.142':139
'69.##7.59.40':139
'69.##7.142.113':139
'69.##7.165.13':139
'69.##7.35.185':139
'69.##7.105.87':139
'69.##7.168.105':139
'69.##7.97.74':139
'69.#27.15.6':139
'69.##7.190.190':139
'69.##7.59.236':139
'69.##7.63.147':139
'69.##7.18.77':139
'69.##7.104.173':139
'69.##7.121.106':139
'69.##7.38.166':139
'69.##7.107.213':139
'69.##7.103.88':139
'69.##7.163.186':139
'69.##7.247.212':139
'69.##7.186.167':139
'69.##7.87.168':139
'69.##7.38.166':445
'69.##7.104.173':445
'69.##7.121.106':445
'69.##7.9.104':139
'69.##7.224.238':139
'69.##7.186.167':445
'69.##7.163.186':445
'69.##7.247.212':445
'69.##7.63.147':445
'69.##7.18.77':445
'69.##7.10.111':139
'69.##7.136.193':139
'69.##7.114.95':139
'69.##7.253.118':139
'69.##7.31.88':139
'69.##7.121.188':139
'69.##7.12.253':139
'69.##7.111.13':139
'69.#27.8.69':139
'69.##7.74.114':139
'69.##7.50.17':139
'69.##7.199.38':445
'69.##7.230.198':445
'69.##7.137.108':445
'69.##7.33.118':445
'69.##7.54.252':445
'69.##7.208.23':445
'69.##7.254.174':445
'69.##7.77.105':445
'69.##7.245.230':445
'69.##7.10.48':445
'69.##7.142.243':445
'69.##7.57.45':139
'69.##7.152.254':139
'69.##7.32.139':139
'69.##7.69.40':139
'69.##7.138.237':139
'69.##7.35.232':445
'69.##7.25.142':445
'69.##7.129.93':139
'69.##7.209.214':139
'69.##7.71.247':139
'69.##7.212.210':445
'69.##7.50.213':445
'69.##7.223.233':445
'69.##7.156.98':445
'69.##7.63.59':445
'69.##7.6.236':445
'69.##7.213.243':445
'69.##7.200.31':445
'69.##7.72.137':445
'69.##7.194.215':445
'69.##7.30.96':445
'69.##7.244.31':445
'69.##7.165.40':445
'69.##7.154.212':445
'69.##7.83.162':445
'69.##7.135.105':445
'69.##7.223.135':445
'69.#27.2.48':445
'69.##7.105.1':445
'69.##7.48.163':445
'69.#27.9.98':445
'69.##7.163.30':445
'69.##7.135.105':139
'69.##7.223.135':139
'69.##7.212.210':139
'69.##7.208.23':139
'69.##7.254.174':139
'69.#27.9.98':139
'69.##7.163.30':139
'69.##7.154.212':139
'69.##7.83.162':139
'69.##7.165.40':139
'69.##7.77.105':139
'69.##7.33.118':139
'69.##7.54.252':139
'69.##7.142.243':139
'69.##7.25.142':139
'69.##7.35.232':139
'69.##7.245.230':139
'69.##7.10.48':139
'69.##7.230.198':139
'69.##7.137.108':139
'69.##7.199.38':139
'69.##7.48.163':139
'69.##7.144.168':139
'69.##7.166.63':139
'69.##7.220.199':139
'69.##7.213.243':139
'69.##7.200.31':139
'69.##7.6.118':139
'69.##7.228.114':139
'69.##7.46.217':139
'69.##7.186.166':139
'69.##7.247.150':139
'69.##7.72.137':139
'69.##7.63.59':139
'69.##7.6.236':139
'69.##7.244.31':139
'69.#27.2.48':139
'69.##7.105.1':139
'69.##7.194.215':139
'69.##7.30.96':139
'69.##7.223.233':139
'69.##7.156.98':139
'69.##7.50.213':139
'69.##7.239.226':445
'69.##7.204.197':445
'69.##7.138.201':445
'69.##7.58.195':445
'69.##7.64.233':445
'69.##7.238.184':445
'69.##7.73.61':445
'69.##7.184.139':445
'69.##7.1.133':445
'69.##7.140.1':445
'69.##7.223.141':139
'69.##7.238.184':139
'69.##7.73.61':139
'69.##7.184.139':139
'69.##7.1.133':139
'69.##7.140.1':139
'69.##7.83.37':139
'69.##7.156.113':139
'69.##7.234.53':139
'69.##7.80.241':139
'69.##7.102.85':139
'69.##7.80.241':445
'69.##7.143.19':139
'69.##7.115.175':139
'69.##7.215.142':139
'69.##7.71.78':139
'69.##7.33.184':139
'69.##7.146.74':139
'69.##7.218.26':139
'69.##7.2.225':139
'69.##7.153.27':139
'69.##7.202.152':139
'69.##7.78.85':139
'69.##7.156.113':445
'69.##7.223.141':445
'69.##7.83.37':445
'69.##7.102.85':445
'69.##7.234.53':445
'69.##7.101.191':139
'69.##7.85.94':139
'69.##7.231.142':139
'69.##7.201.73':139
'69.##7.156.80':139
'69.##7.71.247':445
'69.##7.129.93':445
'69.##7.209.214':445
'69.##7.57.45':445
'69.##7.152.254':445
'69.##7.54.252':9988
'69.##7.137.108':9988
'69.##7.142.243':9988
'69.##7.35.232':9988
'69.##7.33.118':9988
'69.##7.32.139':445
'69.##7.186.166':445
'69.##7.247.150':445
'69.##7.166.63':445
'69.##7.220.199':445
'69.##7.144.168':445
'69.##7.69.40':445
'69.##7.138.237':445
'69.##7.228.114':445
'69.##7.46.217':445
'69.##7.6.118':445
'69.##7.77.105':9988
'69.##7.234.45':445
'69.##7.195.131':445
'69.##7.48.47':445
'69.##7.234.45':139
'69.##7.195.131':139
'69.##7.239.226':139
'69.##7.204.197':139
'69.##7.138.201':139
'69.##7.58.195':139
'69.##7.64.233':139
'69.##7.48.47':139
'69.##7.194.215':9988
'69.##7.223.135':9988
'69.##7.72.137':9988
'69.##7.83.162':9988
'69.#27.2.48':9988
'69.##7.154.212':9988
'69.##7.220.199':9988
'69.##7.213.243':9988
'69.##7.30.96':9988
'69.##7.212.210':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней