Trojan.Starman.5827

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'87.##4.104.105':139
'87.##4.49.154':139
'87.##4.104.236':139
'87.##4.73.183':139
'87.##4.139.224':139
'87.##4.24.41':139
'87.##4.74.24':139
'87.##4.155.213':139
'87.##4.38.219':139
'87.##4.108.233':139
'87.##4.53.137':139
'87.#14.4.15':139
'87.#14.6.46':139
'87.##4.12.16':139
'87.##4.243.70':139
'87.##4.16.54':139
'87.##4.108.86':139
'87.##4.193.108':139
'87.##4.21.29':139
'87.##4.15.16':139
'87.##4.221.14':139
'87.##4.225.73':139
'87.##4.193.108':445
'87.##4.53.137':445
'87.##4.108.86':445
'87.##4.221.14':445
'87.##4.21.29':445
'87.##4.104.105':445
'87.##4.49.154':445
'87.##4.104.236':445
'87.##4.73.183':445
'87.##4.139.224':445
'87.##4.15.16':445
'87.##4.238.212':139
'87.##4.84.59':139
'87.##4.219.137':139
'87.##4.128.23':139
'87.##4.168.202':139
'87.#14.4.15':445
'87.#14.6.46':445
'87.##4.12.16':445
'87.##4.243.70':445
'87.##4.16.54':445
'87.##4.203.88':139
'87.##4.186.114':139
'87.##4.104.186':139
'87.##4.83.112':139
'87.##4.52.191':139
'87.##4.103.24':445
'87.##4.178.252':445
'87.##4.113.221':139
'87.#14.8.3':139
'87.##4.84.243':139
'87.##4.201.205':139
'87.##4.111.240':139
'87.##4.7.182':139
'87.##4.117.126':139
'87.##4.59.42':139
'87.##4.142.236':139
'87.##4.234.3':139
'87.##4.43.187':139
'87.##4.141.112':139
'87.##4.7.238':139
'87.##4.96.116':139
'87.##4.75.112':445
'87.##4.52.191':445
'87.##4.104.186':445
'87.##4.83.112':445
'87.##4.43.187':445
'87.##4.201.205':445
'87.##4.84.243':445
'87.##4.113.221':445
'87.#14.8.3':445
'87.##4.203.88':445
'87.##4.186.114':445
'87.##4.234.3':445
'87.##4.142.236':445
'87.##4.117.126':445
'87.##4.59.42':445
'87.#14.78.9':445
'87.##4.121.225':445
'87.##4.96.116':445
'87.##4.141.112':445
'87.##4.7.238':445
'87.##4.111.240':445
'87.##4.7.182':445
'87.##4.199.22':445
'87.##4.199.113':445
'87.##4.22.247':445
'87.##4.90.95':445
'87.##4.75.71':445
'87.##4.154.226':139
'87.##4.25.34':139
'87.##4.43.27':139
'87.##4.229.62':139
'87.##4.103.144':139
'87.##4.95.124':445
'87.##4.155.7':445
'87.##4.66.16':445
'87.##4.123.45':445
'87.##4.22.54':445
'87.##4.64.45':445
'87.##4.81.189':445
'87.##4.16.105':445
'87.##4.139.43':445
'87.##4.219.181':445
'87.##4.79.219':445
'87.##4.212.24':139
'87.##4.101.73':139
'87.##4.87.197':139
'87.#14.55.5':139
'87.##4.97.123':139
'87.##4.74.73':139
'87.##4.74.169':139
'87.##4.99.168':139
'87.##4.169.80':139
'87.##4.83.159':139
'87.##4.80.173':139
'87.##4.195.121':139
'87.##4.13.192':139
'87.#14.6.90':139
'87.##4.192.30':139
'87.##4.92.152':139
'87.##4.231.246':139
'87.##4.16.68':139
'87.##4.244.169':139
'87.##4.68.96':139
'87.##4.5.249':139
'87.#14.96.6':139
'87.##4.5.187':139
'87.##4.224.118':139
'87.##4.16.241':139
'87.##4.174.249':139
'87.##4.149.175':139
'87.##4.22.54':139
'87.##4.64.45':139
'87.##4.96.216':139
'87.##4.205.175':139
'87.##4.66.206':139
'87.##4.84.59':445
'87.##4.24.41':445
'87.##4.74.24':445
'87.##4.155.213':445
'87.##4.38.219':445
'87.##4.108.233':445
'87.##4.219.137':445
'87.##4.238.212':445
'87.##4.168.202':445
'87.##4.225.73':445
'87.##4.128.23':445
'87.##4.123.45':139
'87.##4.149.175':445
'87.##4.16.241':445
'87.##4.174.249':445
'87.##4.199.22':139
'87.##4.199.113':139
'87.##4.66.206':445
'87.##4.96.216':445
'87.##4.205.175':445
'87.##4.5.187':445
'87.##4.224.118':445
'87.##4.22.247':139
'87.##4.79.219':139
'87.##4.139.43':139
'87.##4.219.181':139
'87.##4.155.7':139
'87.##4.66.16':139
'87.##4.90.95':139
'87.##4.75.71':139
'87.##4.95.124':139
'87.##4.81.189':139
'87.##4.16.105':139
'87.##4.121.225':139
'87.##4.181.243':445
'87.##4.53.199':445
'87.##4.218.53':445
'87.##4.64.150':445
'87.##4.25.146':445
'87.##4.35.153':445
'87.##4.146.96':445
'87.##4.89.230':445
'87.##4.227.65':445
'87.##4.35.73':445
'87.##4.97.221':445
'87.##4.40.37':139
'87.##4.14.202':139
'87.##4.119.129':139
'87.##4.68.124':139
'87.##4.185.205':139
'87.##4.136.68':445
'87.##4.164.58':445
'87.##4.170.74':139
'87.##4.122.59':139
'87.##4.117.171':139
'87.##4.126.233':445
'87.##4.42.110':445
'87.##4.147.69':445
'87.##4.38.24':445
'87.##4.7.186':445
'87.##4.121.206':445
'87.##4.133.28':445
'87.##4.32.198':445
'87.##4.52.139':445
'87.##4.106.3':445
'87.##4.176.223':445
'87.##4.133.241':445
'87.#14.83.8':445
'87.##4.205.218':445
'87.##4.110.34':445
'87.##4.88.94':445
'87.##4.58.159':445
'87.##4.111.13':445
'87.##4.188.138':445
'87.##4.139.10':445
'87.##4.210.144':445
'87.##4.64.142':445
'87.##4.88.94':139
'87.##4.58.159':139
'87.##4.126.233':139
'87.##4.35.153':139
'87.##4.146.96':139
'87.##4.210.144':139
'87.##4.64.142':139
'87.##4.205.218':139
'87.##4.110.34':139
'87.#14.83.8':139
'87.##4.89.230':139
'87.##4.218.53':139
'87.##4.136.68':139
'87.##4.25.146':139
'87.##4.181.243':139
'87.##4.97.221':139
'87.##4.227.65':139
'87.##4.35.73':139
'87.##4.53.199':139
'87.##4.164.58':139
'87.##4.64.150':139
'87.##4.139.10':139
'87.##4.255.179':139
'87.##4.133.0':139
'87.##4.180.78':139
'87.##4.133.28':139
'87.##4.32.198':139
'87.##4.240.46':139
'87.##4.47.240':139
'87.##4.47.58':139
'87.##4.42.132':139
'87.##4.189.69':139
'87.##4.52.139':139
'87.##4.7.186':139
'87.##4.121.206':139
'87.##4.133.241':139
'87.##4.111.13':139
'87.##4.188.138':139
'87.##4.176.223':139
'87.##4.106.3':139
'87.##4.147.69':139
'87.##4.38.24':139
'87.##4.42.110':139
'87.##4.135.224':445
'87.##4.163.136':445
'87.##4.170.131':445
'87.##4.14.249':139
'87.##4.79.26':445
'87.##4.131.228':445
'87.##4.105.231':445
'87.##4.188.206':445
'87.##4.74.159':445
'87.##4.64.52':445
'87.##4.127.244':139
'87.##4.237.71':139
'87.##4.168.179':139
'87.##4.34.42':139
'87.##4.199.12':139
'87.##4.184.36':139
'87.##4.127.252':139
'87.##4.244.148':139
'87.##4.154.43':139
'87.#14.7.18':139
'87.#14.3.9':139
'87.##4.92.253':445
'87.##4.244.148':445
'87.##4.127.244':445
'87.##4.127.252':445
'87.#14.3.9':445
'87.##4.154.43':445
'87.##4.75.112':139
'87.#14.78.9':139
'87.##4.178.252':139
'87.##4.14.249':445
'87.##4.103.24':139
'87.#14.7.18':445
'87.##4.210.67':445
'87.##4.188.209':445
'87.##4.67.111':445
'87.##4.68.108':445
'87.##4.214.136':445
'87.##4.237.71':445
'87.##4.168.179':445
'87.##4.34.42':445
'87.##4.199.12':445
'87.##4.184.36':445
'87.##4.117.171':445
'87.##4.170.74':445
'87.##4.122.59':445
'87.##4.40.37':445
'87.##4.14.202':445
'87.##4.146.96':9988
'87.##4.126.233':9988
'87.##4.35.153':9988
'87.##4.53.199':9988
'87.##4.218.53':9988
'87.##4.119.129':445
'87.##4.42.132':445
'87.##4.189.69':445
'87.##4.133.0':445
'87.##4.180.78':445
'87.##4.255.179':445
'87.##4.68.124':445
'87.##4.185.205':445
'87.##4.47.240':445
'87.##4.47.58':445
'87.##4.240.46':445
'87.##4.88.94':9988
'87.##4.105.231':139
'87.##4.92.253':139
'87.##4.131.228':139
'87.##4.64.52':139
'87.##4.188.206':139
'87.##4.210.67':139
'87.##4.188.209':139
'87.##4.67.111':139
'87.##4.68.108':139
'87.##4.214.136':139
'87.##4.74.159':139
'87.##4.139.10':9988
'87.##4.111.13':9988
'87.##4.188.138':9988
'87.##4.121.206':9988
'87.##4.133.241':9988
'87.##4.135.224':139
'87.##4.163.136':139
'87.##4.170.131':139
'87.##4.176.223':9988
'87.##4.79.26':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней