Trojan.Starman.5300

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12.##9.29.57':139
'12.#79.1.86':139
'12.##9.58.63':139
'12.##9.193.186':139
'12.##9.14.203':139
'12.##9.89.140':139
'12.##9.186.94':139
'12.##9.208.111':139
'12.##9.90.65':139
'12.##9.111.95':139
'12.##9.198.188':139
'12.##9.35.41':139
'12.##9.25.59':139
'12.##9.89.117':139
'12.##9.191.28':139
'12.##9.117.190':139
'12.##9.216.83':139
'12.##9.157.139':139
'12.##9.171.121':139
'12.##9.87.67':139
'12.##9.156.215':139
'12.##9.254.44':139
'12.##9.117.190':445
'12.##9.89.117':445
'12.##9.191.28':445
'12.##9.0.153':445
'12.##9.221.4':445
'12.##9.156.215':445
'12.##9.171.121':445
'12.##9.87.67':445
'12.##9.35.41':445
'12.##9.25.59':445
'12.##9.43.65':445
'12.##9.106.142':139
'12.##9.217.114':139
'12.##9.214.49':139
'12.##9.58.125':139
'12.##9.167.65':139
'12.##9.4.244':445
'12.##9.65.49':445
'12.##9.251.30':445
'12.##9.2.239':139
'12.##9.11.45':445
'12.##9.221.4':139
'12.##9.60.30':139
'12.##9.234.59':139
'12.##9.29.235':139
'12.##9.130.244':139
'12.##9.5.232':139
'12.##9.170.75':139
'12.##9.163.238':139
'12.##9.195.60':139
'12.##9.192.214':139
'12.##9.61.144':139
'12.##9.243.220':139
'12.##9.194.139':445
'12.##9.163.138':445
'12.##9.0.102':445
'12.##9.50.137':445
'12.##9.130.250':445
'12.##9.49.115':139
'12.##9.33.151':139
'12.##9.85.180':139
'12.##9.9.249':139
'12.##9.244.123':139
'12.##9.9.249':445
'12.##9.163.238':445
'12.##9.11.45':139
'12.##9.170.75':445
'12.##9.61.144':445
'12.##9.195.60':445
'12.##9.43.65':139
'12.##9.0.153':139
'12.##9.65.49':139
'12.##9.251.30':139
'12.##9.4.244':139
'12.##9.192.214':445
'12.##9.33.151':445
'12.##9.243.220':445
'12.##9.49.115':445
'12.##9.244.123':445
'12.##9.85.180':445
'12.##9.60.30':445
'12.##9.234.59':445
'12.##9.29.235':445
'12.##9.130.244':445
'12.##9.5.232':445
'12.##9.53.180':139
'12.##9.128.169':139
'12.##9.39.73':139
'12.##9.181.109':139
'12.##9.108.119':139
'12.##9.57.130':139
'12.##9.236.18':139
'12.##9.30.192':139
'12.##9.62.191':139
'12.##9.242.97':139
'12.##9.76.95':139
'12.##9.75.235':445
'12.##9.28.194':445
'12.##9.33.238':445
'12.##9.59.37':445
'12.##9.10.137':445
'12.##9.188.179':139
'12.##9.26.188':139
'12.##9.180.0':445
'12.##9.64.97':445
'12.##9.167.143':445
'12.##9.156.240':139
'12.##9.159.128':139
'12.##9.87.191':139
'12.##9.110.5':139
'12.##9.154.196':139
'12.##9.5.199':139
'12.##9.86.122':139
'12.##9.244.224':139
'12.##9.144.189':139
'12.##9.238.176':139
'12.##9.134.40':139
'12.##9.161.158':139
'12.##9.157.229':139
'12.##9.127.165':139
'12.##9.4.137':139
'12.##9.50.38':139
'12.##9.44.234':139
'12.##9.139.38':139
'12.##9.177.139':139
'12.##9.39.81':139
'12.##9.149.144':139
'12.##9.46.48':139
'12.##9.103.217':445
'12.##9.58.125':445
'12.##9.167.65':445
'12.##9.254.44':445
'12.##9.89.140':445
'12.##9.186.94':445
'12.##9.2.239':445
'12.##9.169.103':139
'12.##9.217.114':445
'12.##9.214.49':445
'12.##9.106.142':445
'12.##9.208.111':445
'12.##9.193.186':445
'12.##9.14.203':445
'12.##9.198.188':445
'12.##9.216.83':445
'12.##9.157.139':445
'12.##9.90.65':445
'12.##9.111.95':445
'12.#79.1.86':445
'12.##9.58.63':445
'12.##9.29.57':445
'12.##9.18.105':139
'12.##9.169.103':445
'12.##9.18.105':445
'12.##9.180.0':139
'12.##9.64.97':139
'12.##9.167.143':139
'12.##9.112.94':445
'12.##9.217.111':445
'12.##9.159.177':445
'12.##9.54.88':445
'12.##9.77.13':445
'12.##9.28.194':139
'12.##9.112.94':139
'12.##9.217.111':139
'12.##9.159.177':139
'12.##9.54.88':139
'12.##9.77.13':139
'12.##9.33.238':139
'12.##9.75.235':139
'12.##9.10.137':139
'12.##9.103.217':139
'12.##9.59.37':139
'12.##9.185.238':445
'12.##9.242.206':445
'12.##9.249.8':445
'12.##9.122.75':445
'12.##9.171.105':445
'12.##9.235.190':445
'12.##9.234.210':445
'12.##9.65.113':445
'12.##9.210.186':445
'12.##9.223.138':445
'12.##9.237.217':445
'12.##9.208.41':445
'12.##9.137.249':139
'12.##9.232.43':139
'12.##9.128.217':139
'12.##9.126.127':139
'12.##9.178.79':139
'12.##9.230.16':445
'12.##9.190.229':445
'12.##9.117.145':445
'12.##9.145.27':139
'12.##9.255.183':139
'12.##9.130.175':445
'12.##9.8.166':445
'12.##9.13.137':445
'12.#79.3.77':445
'12.##9.170.248':445
'12.##9.34.130':445
'12.##9.56.168':445
'12.##9.170.196':445
'12.##9.221.10':445
'12.##9.27.121':445
'12.##9.247.252':445
'12.##9.170.243':445
'12.##9.11.23':445
'12.##9.248.232':445
'12.##9.114.47':445
'12.##9.238.162':445
'12.##9.54.218':445
'12.#79.43.9':445
'12.##9.243.40':445
'12.##9.183.171':445
'12.##9.37.146':445
'12.##9.171.192':445
'12.##9.127.125':139
'12.##9.130.175':139
'12.##9.238.162':139
'12.##9.65.113':139
'12.##9.210.186':139
'12.##9.234.210':139
'12.##9.248.232':139
'12.##9.37.146':139
'12.##9.11.23':139
'12.##9.54.218':139
'12.##9.114.47':139
'12.##9.237.217':139
'12.##9.230.16':139
'12.##9.117.145':139
'12.##9.235.190':139
'12.##9.208.41':139
'12.##9.122.75':139
'12.##9.249.8':139
'12.##9.223.138':139
'12.##9.242.206':139
'12.##9.190.229':139
'12.##9.171.105':139
'12.##9.171.192':139
'12.##9.21.171':139
'12.##9.185.56':139
'12.##9.170.196':139
'12.##9.221.10':139
'12.##9.56.168':139
'12.##9.249.69':139
'12.##9.124.249':139
'12.##9.69.209':139
'12.##9.201.240':139
'12.##9.209.31':139
'12.##9.247.252':139
'12.##9.170.243':139
'12.##9.170.248':139
'12.##9.243.40':139
'12.##9.183.171':139
'12.#79.43.9':139
'12.##9.13.137':139
'12.##9.27.121':139
'12.##9.8.166':139
'12.##9.34.130':139
'12.#79.3.77':139
'12.##9.193.189':445
'12.##9.111.234':445
'12.##9.163.138':139
'12.##9.0.102':139
'12.##9.194.139':139
'12.##9.20.114':445
'12.##9.141.165':445
'12.##9.43.157':445
'12.##9.211.83':445
'12.##9.236.174':445
'12.##9.130.250':139
'12.##9.210.121':139
'12.##9.45.125':139
'12.##9.42.32':139
'12.##9.120.154':139
'12.##9.85.138':139
'12.##9.185.238':139
'12.##9.50.137':139
'12.##9.239.77':139
'12.##9.101.201':139
'12.#79.78.8':139
'12.##9.35.96':445
'12.##9.85.138':445
'12.##9.42.32':445
'12.##9.120.154':445
'12.##9.106.67':445
'12.##9.153.212':445
'12.#79.78.8':445
'12.##9.239.77':445
'12.##9.101.201':445
'12.##9.210.121':445
'12.##9.45.125':445
'12.##9.129.108':445
'12.##9.124.181':445
'12.##9.118.18':445
'12.##9.56.114':445
'12.##9.39.213':445
'12.##9.97.44':445
'12.##9.41.82':445
'12.##9.106.41':445
'12.##9.68.44':445
'12.##9.51.121':445
'12.##9.15.16':445
'12.##9.153.212':139
'12.##9.255.183':445
'12.##9.230.16':9988
'12.##9.145.27':445
'12.##9.137.249':445
'12.##9.232.43':445
'12.##9.210.186':9988
'12.##9.234.210':9988
'12.##9.237.217':9988
'12.##9.249.8':9988
'12.##9.223.138':9988
'12.##9.128.217':445
'12.##9.209.31':445
'12.##9.69.209':445
'12.##9.201.240':445
'12.##9.21.171':445
'12.##9.185.56':445
'12.##9.126.127':445
'12.##9.178.79':445
'12.##9.127.125':445
'12.##9.249.69':445
'12.##9.124.249':445
'12.##9.65.113':9988
'12.##9.51.121':139
'12.##9.15.16':139
'12.##9.118.18':139
'12.##9.56.114':139
'12.##9.124.181':139
'12.##9.129.108':139
'12.##9.106.67':139
'12.##9.106.41':139
'12.##9.68.44':139
'12.##9.41.82':139
'12.##9.97.44':139
'12.##9.211.83':139
'12.##9.236.174':139
'12.##9.111.234':139
'12.##9.114.47':9988
'12.##9.193.189':139
'12.##9.35.96':139
'12.##9.39.213':139
'12.##9.141.165':139
'12.##9.43.157':139
'12.##9.20.114':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней