Trojan.Starman.5352

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'60.#11.96.8':139
'60.##1.56.124':139
'60.##1.86.23':139
'60.##1.102.203':139
'60.##1.158.158':139
'60.##1.74.86':139
'60.##1.5.188':139
'60.##1.96.100':139
'60.##1.77.154':139
'60.##1.100.138':139
'60.##1.202.254':139
'60.##1.106.108':139
'60.##1.77.156':139
'60.##1.17.120':445
'60.##1.241.207':445
'60.##1.83.116':445
'60.##1.210.253':139
'60.##1.25.16':139
'60.##1.253.27':139
'60.##1.15.180':139
'60.##1.28.208':139
'60.##1.158.158':445
'60.##1.86.23':445
'60.##1.102.203':445
'60.##1.25.16':445
'60.##1.202.254':445
'60.##1.100.138':445
'60.##1.96.100':445
'60.##1.77.154':445
'60.#11.96.8':445
'60.##1.56.124':445
'60.##1.210.253':445
'60.##1.87.241':139
'60.##1.92.240':139
'60.##1.71.218':139
'60.##1.226.53':139
'60.##1.19.82':139
'60.##1.28.208':445
'60.##1.253.27':445
'60.##1.15.180':445
'60.##1.106.108':445
'60.##1.77.156':445
'60.##1.120.112':445
'60.##1.120.112':139
'60.##1.241.207':139
'60.##1.112.230':139
'60.##1.52.125':139
'60.##1.231.51':139
'60.##1.149.10':445
'60.##1.81.228':445
'60.##1.160.138':445
'60.##1.83.116':139
'60.##1.17.120':139
'60.##1.41.50':139
'60.##1.169.63':139
'60.##1.42.142':139
'60.##1.173.64':139
'60.##1.201.229':139
'60.##1.40.151':139
'60.##1.119.203':139
'60.##1.165.120':139
'60.##1.203.86':139
'60.##1.153.0':139
'60.##1.37.107':139
'60.##1.203.86':445
'60.##1.119.203':445
'60.##1.37.107':445
'60.##1.42.142':445
'60.##1.153.0':445
'60.##1.231.51':445
'60.##1.112.230':445
'60.##1.52.125':445
'60.##1.165.120':445
'60.##1.41.50':445
'60.##1.169.63':445
'60.##1.248.5':445
'60.##1.195.236':445
'60.##1.159.118':445
'60.##1.218.138':445
'60.##1.45.159':445
'60.##1.40.151':445
'60.##1.173.64':445
'60.##1.201.229':445
'60.##1.191.74':445
'60.##1.230.46':445
'60.##1.74.86':445
'60.##1.34.178':445
'60.##1.206.186':445
'60.##1.184.182':445
'60.##1.50.248':445
'60.##1.183.102':445
'60.##1.135.185':139
'60.##1.63.24':139
'60.##1.141.17':445
'60.##1.206.228':445
'60.##1.220.206':445
'60.##1.91.91':445
'60.##1.139.150':445
'60.##1.94.152':445
'60.##1.174.163':445
'60.##1.228.216':445
'60.##1.65.196':445
'60.##1.225.79':445
'60.#11.0.46':445
'60.##1.15.103':445
'60.##1.47.94':445
'60.##1.31.48':445
'60.##1.196.193':139
'60.##1.230.77':139
'60.##1.193.189':139
'60.##1.75.227':139
'60.##1.189.152':139
'60.##1.170.11':139
'60.##1.107.186':139
'60.##1.246.133':139
'60.##1.9.178':139
'60.##1.130.237':139
'60.##1.39.208':139
'60.##1.105.243':139
'60.##1.173.237':139
'60.##1.87.251':139
'60.##1.43.51':139
'60.##1.238.147':139
'60.##1.75.121':139
'60.##1.159.80':139
'60.##1.141.82':139
'60.##1.76.44':139
'60.##1.181.83':139
'60.##1.20.47':445
'60.##1.20.47':139
'60.##1.228.216':139
'60.##1.148.245':139
'60.##1.229.92':139
'60.##1.75.171':139
'60.##1.94.152':139
'60.##1.47.94':139
'60.##1.139.150':139
'60.##1.65.196':139
'60.##1.174.163':139
'60.##1.92.227':139
'60.##1.71.218':445
'60.##1.87.241':445
'60.##1.19.82':445
'60.##1.5.188':445
'60.##1.226.53':445
'60.##1.119.39':139
'60.#11.5.44':139
'60.##1.142.183':139
'60.##1.92.240':445
'60.##1.24.219':139
'60.##1.142.183':445
'60.##1.119.39':445
'60.##1.24.219':445
'60.##1.220.206':139
'60.##1.141.17':139
'60.##1.75.171':445
'60.##1.148.245':445
'60.##1.229.92':445
'60.#11.5.44':445
'60.##1.92.227':445
'60.##1.206.228':139
'60.#11.0.46':139
'60.##1.91.91':139
'60.##1.225.79':139
'60.##1.31.48':139
'60.##1.15.103':139
'60.##1.34.178':139
'60.##1.206.186':139
'60.##1.184.182':139
'60.##1.50.248':139
'60.##1.183.102':139
'60.##1.230.46':139
'60.##1.125.237':445
'60.##1.62.148':445
'60.##1.107.190':445
'60.##1.99.100':445
'60.##1.252.191':445
'60.##1.25.116':445
'60.##1.254.24':445
'60.##1.115.223':445
'60.##1.58.209':445
'60.##1.67.103':445
'60.##1.33.45':445
'60.##1.104.43':139
'60.##1.217.13':139
'60.##1.25.34':139
'60.##1.152.234':139
'60.##1.230.9':139
'60.##1.198.107':445
'60.##1.178.35':445
'60.##1.12.103':139
'60.##1.89.217':139
'60.##1.29.90':139
'60.##1.12.62':445
'60.##1.119.12':445
'60.#11.5.86':445
'60.##1.223.60':445
'60.##1.161.83':445
'60.##1.99.132':445
'60.##1.191.82':445
'60.##1.101.209':445
'60.##1.0.116':445
'60.##1.250.27':445
'60.##1.147.111':445
'60.##1.23.13':445
'60.##1.73.230':445
'60.##1.182.2':445
'60.##1.113.204':445
'60.##1.163.74':445
'60.##1.59.86':445
'60.##1.94.140':445
'60.##1.19.28':445
'60.##1.132.148':445
'60.##1.126.173':445
'60.##1.167.120':139
'60.##1.163.74':139
'60.##1.182.2':139
'60.##1.113.204':139
'60.##1.25.116':139
'60.##1.254.24':139
'60.##1.126.173':139
'60.##1.19.28':139
'60.##1.132.148':139
'60.##1.23.13':139
'60.##1.73.230':139
'60.##1.115.223':139
'60.##1.99.100':139
'60.##1.252.191':139
'60.##1.33.45':139
'60.##1.198.107':139
'60.##1.178.35':139
'60.##1.58.209':139
'60.##1.67.103':139
'60.##1.62.148':139
'60.##1.107.190':139
'60.##1.125.237':139
'60.##1.213.165':139
'60.##1.36.241':139
'60.##1.52.94':139
'60.##1.99.132':139
'60.##1.191.82':139
'60.##1.159.156':139
'60.##1.62.210':139
'60.##1.72.103':139
'60.##1.31.100':139
'60.##1.103.31':139
'60.##1.101.209':139
'60.##1.223.60':139
'60.##1.161.83':139
'60.##1.147.111':139
'60.##1.59.86':139
'60.##1.94.140':139
'60.##1.0.116':139
'60.##1.250.27':139
'60.##1.119.12':139
'60.#11.5.86':139
'60.##1.12.62':139
'60.##1.52.94':445
'60.##1.106.241':445
'60.##1.6.105':445
'60.##1.80.229':445
'60.##1.251.39':445
'60.##1.75.190':445
'60.##1.102.101':445
'60.##1.45.50':445
'60.##1.182.220':445
'60.##1.144.229':445
'60.##1.17.34':445
'60.##1.158.174':445
'60.##1.125.207':139
'60.##1.67.222':139
'60.##1.219.78':139
'60.##1.140.21':139
'60.##1.98.216':139
'60.##1.21.209':139
'60.##1.10.22':139
'60.##1.130.17':139
'60.##1.31.51':139
'60.##1.82.31':139
'60.##1.81.228':139
'60.##1.218.138':139
'60.##1.160.138':139
'60.##1.10.22':445
'60.##1.149.10':139
'60.##1.195.236':139
'60.##1.191.74':139
'60.##1.248.5':139
'60.##1.45.159':139
'60.##1.159.118':139
'60.##1.21.209':445
'60.##1.98.216':445
'60.##1.219.78':445
'60.##1.140.21':445
'60.##1.88.13':445
'60.##1.21.158':445
'60.##1.82.31':445
'60.##1.130.17':445
'60.##1.31.51':445
'60.##1.125.207':445
'60.##1.67.222':445
'60.##1.21.158':139
'60.##1.29.90':445
'60.##1.12.103':445
'60.##1.89.217':445
'60.##1.104.43':445
'60.##1.217.13':445
'60.##1.62.148':9988
'60.##1.58.209':9988
'60.##1.125.237':9988
'60.##1.178.35':9988
'60.##1.252.191':9988
'60.##1.25.34':445
'60.##1.103.31':445
'60.##1.72.103':445
'60.##1.31.100':445
'60.##1.213.165':445
'60.##1.36.241':445
'60.##1.152.234':445
'60.##1.230.9':445
'60.##1.167.120':445
'60.##1.159.156':445
'60.##1.62.210':445
'60.##1.6.105':139
'60.##1.144.229':139
'60.##1.106.241':139
'60.##1.75.190':139
'60.##1.80.229':139
'60.##1.45.50':139
'60.##1.88.13':139
'60.##1.102.101':139
'60.##1.17.34':139
'60.##1.182.220':139
'60.##1.251.39':139
'60.##1.182.2':9988
'60.##1.73.230':9988
'60.##1.23.13':9988
'60.##1.67.103':9988
'60.##1.115.223':9988
'60.##1.191.82':9988
'60.##1.158.174':139
'60.##1.250.27':9988
'60.##1.132.148':9988
'60.##1.94.140':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней