Trojan.Starman.5707

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'69.##1.122.199':139
'69.##1.191.223':139
'69.##1.22.139':139
'69.##1.45.151':139
'69.##1.139.45':139
'69.##1.50.80':139
'69.##1.147.75':139
'69.##1.85.42':139
'69.##1.204.39':139
'69.##1.245.171':139
'69.##1.150.235':139
'69.#51.3.92':139
'69.##1.183.78':139
'69.##1.172.73':445
'69.##1.57.81':445
'69.##1.166.195':445
'69.##1.213.221':139
'69.##1.82.178':139
'69.##1.247.89':139
'69.##1.226.187':139
'69.##1.177.111':139
'69.##1.139.45':445
'69.##1.22.139':445
'69.##1.45.151':445
'69.##1.82.178':445
'69.##1.150.235':445
'69.##1.245.171':445
'69.##1.85.42':445
'69.##1.204.39':445
'69.##1.122.199':445
'69.##1.191.223':445
'69.##1.213.221':445
'69.##1.75.157':139
'69.##1.87.75':139
'69.##1.157.250':139
'69.##1.200.146':139
'69.##1.250.199':139
'69.##1.177.111':445
'69.##1.247.89':445
'69.##1.226.187':445
'69.#51.3.92':445
'69.##1.183.78':445
'69.##1.128.189':445
'69.##1.128.189':139
'69.##1.57.81':139
'69.##1.196.32':139
'69.##1.71.60':139
'69.##1.194.201':139
'69.##1.228.27':445
'69.##1.159.228':445
'69.##1.27.180':445
'69.##1.166.195':139
'69.##1.172.73':139
'69.##1.184.39':139
'69.##1.65.36':139
'69.##1.249.64':139
'69.##1.35.121':139
'69.##1.80.226':139
'69.##1.214.90':139
'69.##1.165.169':139
'69.##1.70.229':139
'69.##1.171.87':139
'69.##1.92.249':139
'69.##1.178.93':139
'69.##1.171.87':445
'69.##1.165.169':445
'69.##1.178.93':445
'69.##1.249.64':445
'69.##1.92.249':445
'69.##1.194.201':445
'69.##1.196.32':445
'69.##1.71.60':445
'69.##1.70.229':445
'69.##1.184.39':445
'69.##1.65.36':445
'69.##1.236.210':445
'69.##1.143.128':445
'69.##1.118.152':445
'69.##1.74.149':445
'69.##1.152.104':445
'69.##1.214.90':445
'69.##1.35.121':445
'69.##1.80.226':445
'69.##1.28.222':445
'69.##1.101.35':445
'69.##1.50.80':445
'69.##1.19.142':445
'69.##1.197.27':445
'69.##1.231.27':445
'69.##1.125.176':445
'69.##1.179.147':445
'69.##1.127.244':139
'69.##1.10.132':139
'69.##1.244.252':445
'69.##1.49.26':445
'69.##1.54.201':445
'69.##1.41.98':445
'69.##1.21.233':445
'69.##1.165.128':445
'69.##1.96.16':445
'69.##1.26.17':445
'69.#51.4.45':445
'69.##1.33.187':445
'69.##1.252.187':445
'69.##1.57.253':445
'69.##1.46.177':445
'69.##1.16.156':445
'69.##1.134.117':139
'69.##1.167.98':139
'69.##1.179.89':139
'69.##1.83.212':139
'69.##1.8.221':139
'69.##1.223.111':139
'69.##1.143.150':139
'69.##1.37.41':139
'69.##1.155.49':139
'69.##1.201.67':139
'69.##1.98.21':139
'69.##1.7.104':139
'69.##1.228.152':139
'69.##1.133.23':139
'69.##1.71.184':139
'69.#51.20.5':139
'69.##1.195.208':139
'69.##1.193.195':139
'69.##1.40.166':139
'69.##1.156.13':139
'69.##1.58.89':139
'69.##1.135.181':445
'69.##1.135.181':139
'69.##1.26.17':139
'69.##1.91.99':139
'69.##1.122.197':139
'69.##1.173.219':139
'69.##1.165.128':139
'69.##1.46.177':139
'69.##1.21.233':139
'69.#51.4.45':139
'69.##1.96.16':139
'69.##1.150.154':139
'69.##1.157.250':445
'69.##1.75.157':445
'69.##1.250.199':445
'69.##1.147.75':445
'69.##1.200.146':445
'69.##1.20.159':139
'69.##1.143.174':139
'69.##1.203.138':139
'69.##1.87.75':445
'69.##1.62.46':139
'69.##1.203.138':445
'69.##1.20.159':445
'69.##1.62.46':445
'69.##1.54.201':139
'69.##1.244.252':139
'69.##1.173.219':445
'69.##1.91.99':445
'69.##1.122.197':445
'69.##1.143.174':445
'69.##1.150.154':445
'69.##1.49.26':139
'69.##1.252.187':139
'69.##1.41.98':139
'69.##1.33.187':139
'69.##1.16.156':139
'69.##1.57.253':139
'69.##1.19.142':139
'69.##1.197.27':139
'69.##1.231.27':139
'69.##1.125.176':139
'69.##1.179.147':139
'69.##1.101.35':139
'69.##1.81.219':445
'69.##1.92.42':445
'69.##1.127.49':445
'69.##1.83.91':445
'69.##1.115.104':445
'69.##1.229.38':445
'69.##1.110.229':445
'69.##1.146.48':445
'69.##1.79.245':445
'69.##1.194.137':445
'69.##1.149.97':445
'69.##1.211.243':139
'69.##1.17.176':139
'69.##1.77.39':139
'69.##1.80.84':139
'69.##1.21.82':139
'69.##1.83.45':445
'69.##1.207.72':445
'69.##1.17.78':139
'69.##1.25.148':139
'69.##1.139.25':139
'69.#51.61.7':445
'69.##1.28.147':445
'69.##1.6.187':445
'69.##1.43.42':445
'69.##1.23.170':445
'69.##1.44.177':445
'69.##1.166.44':445
'69.##1.112.162':445
'69.##1.229.151':445
'69.##1.203.23':445
'69.##1.167.83':445
'69.##1.140.76':445
'69.##1.118.7':445
'69.##1.150.129':445
'69.##1.139.120':445
'69.##1.71.20':445
'69.##1.149.215':445
'69.##1.12.202':445
'69.##1.81.122':445
'69.##1.225.185':445
'69.##1.25.83':445
'69.##1.69.200':139
'69.##1.71.20':139
'69.##1.150.129':139
'69.##1.139.120':139
'69.##1.229.38':139
'69.##1.110.229':139
'69.##1.25.83':139
'69.##1.81.122':139
'69.##1.225.185':139
'69.##1.140.76':139
'69.##1.118.7':139
'69.##1.146.48':139
'69.##1.83.91':139
'69.##1.115.104':139
'69.##1.149.97':139
'69.##1.83.45':139
'69.##1.207.72':139
'69.##1.79.245':139
'69.##1.194.137':139
'69.##1.92.42':139
'69.##1.127.49':139
'69.##1.81.219':139
'69.##1.225.9':139
'69.##1.99.197':139
'69.#51.45.3':139
'69.##1.44.177':139
'69.##1.166.44':139
'69.##1.233.237':139
'69.##1.48.243':139
'69.##1.122.184':139
'69.##1.155.74':139
'69.##1.232.171':139
'69.##1.112.162':139
'69.##1.43.42':139
'69.##1.23.170':139
'69.##1.167.83':139
'69.##1.149.215':139
'69.##1.12.202':139
'69.##1.229.151':139
'69.##1.203.23':139
'69.##1.28.147':139
'69.##1.6.187':139
'69.#51.61.7':139
'69.#51.45.3':445
'69.##1.29.37':445
'69.##1.83.29':445
'69.##1.37.140':445
'69.##1.107.231':445
'69.##1.37.35':445
'69.##1.100.251':445
'69.##1.85.197':445
'69.##1.230.98':445
'69.##1.237.113':445
'69.##1.18.120':445
'69.##1.29.22':445
'69.##1.118.117':139
'69.##1.250.253':139
'69.##1.117.227':139
'69.##1.221.40':139
'69.##1.218.207':139
'69.##1.87.185':139
'69.##1.41.215':139
'69.##1.45.128':139
'69.##1.213.202':139
'69.##1.78.61':139
'69.##1.159.228':139
'69.##1.74.149':139
'69.##1.228.27':139
'69.##1.41.215':445
'69.##1.27.180':139
'69.##1.143.128':139
'69.##1.28.222':139
'69.##1.236.210':139
'69.##1.152.104':139
'69.##1.118.152':139
'69.##1.87.185':445
'69.##1.218.207':445
'69.##1.117.227':445
'69.##1.221.40':445
'69.##1.232.223':445
'69.##1.249.162':445
'69.##1.78.61':445
'69.##1.45.128':445
'69.##1.213.202':445
'69.##1.118.117':445
'69.##1.250.253':445
'69.##1.249.162':139
'69.##1.139.25':445
'69.##1.17.78':445
'69.##1.25.148':445
'69.##1.211.243':445
'69.##1.17.176':445
'69.##1.207.72':9988
'69.##1.79.245':9988
'69.##1.149.97':9988
'69.##1.83.45':9988
'69.##1.83.91':9988
'69.##1.77.39':445
'69.##1.232.171':445
'69.##1.122.184':445
'69.##1.155.74':445
'69.##1.225.9':445
'69.##1.99.197':445
'69.##1.80.84':445
'69.##1.21.82':445
'69.##1.69.200':445
'69.##1.233.237':445
'69.##1.48.243':445
'69.##1.83.29':139
'69.##1.237.113':139
'69.##1.29.37':139
'69.##1.37.35':139
'69.##1.37.140':139
'69.##1.85.197':139
'69.##1.232.223':139
'69.##1.100.251':139
'69.##1.18.120':139
'69.##1.230.98':139
'69.##1.107.231':139
'69.##1.118.7':9988
'69.##1.25.83':9988
'69.##1.229.38':9988
'69.##1.194.137':9988
'69.##1.146.48':9988
'69.##1.229.151':9988
'69.##1.29.22':139
'69.##1.167.83':9988
'69.##1.149.215':9988
'69.##1.12.202':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней