Trojan.Starman.4995

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12.##7.247.100':445
'12.##7.0.248':445
'12.#17.7.96':445
'12.##7.55.117':445
'12.##7.51.21':445
'12.##7.38.62':445
'12.##7.43.232':445
'12.##7.52.163':445
'12.##7.96.167':445
'12.##7.101.138':445
'12.##7.159.84':445
'12.##7.253.248':445
'12.##7.167.217':445
'12.##7.245.15':139
'12.##7.74.244':445
'12.##7.32.89':445
'12.##7.16.13':139
'12.##7.144.158':139
'12.##7.187.126':139
'12.##7.172.123':445
'12.##7.84.21':445
'12.##7.165.131':445
'12.##7.40.150':445
'12.##7.231.135':445
'12.##7.229.141':445
'12.##7.84.223':445
'12.##7.119.98':139
'12.#17.61.4':139
'12.##7.62.144':139
'12.##7.247.118':139
'12.##7.227.205':139
'12.##7.33.60':139
'12.##7.41.22':139
'12.##7.216.39':139
'12.##7.58.238':139
'12.##7.64.208':139
'12.##7.183.183':139
'12.##7.43.205':139
'12.##7.43.216':139
'12.##7.245.15':445
'12.##7.241.18':139
'12.##7.24.225':139
'12.##7.16.13':445
'12.##7.144.158':445
'12.##7.187.126':445
'12.##7.186.181':139
'12.##7.41.123':139
'12.##7.11.136':139
'12.##7.81.144':139
'12.##7.29.36':139
'12.##7.170.109':139
'12.##7.136.70':139
'12.##7.101.138':139
'12.##7.222.94':445
'12.##7.25.207':445
'12.##7.30.246':445
'12.##7.58.200':445
'12.##7.86.202':445
'12.##7.94.224':445
'12.##7.63.31':445
'12.##7.53.74':445
'12.#17.18.6':445
'12.##7.85.18':445
'12.##7.98.202':445
'12.##7.86.125':445
'12.##7.35.122':445
'12.##7.108.241':139
'12.##7.161.191':139
'12.##7.48.195':139
'12.##7.85.18':139
'12.##7.13.85':139
'12.##7.213.12':139
'12.##7.90.19':445
'12.##7.155.13':445
'12.##7.232.154':445
'12.##7.160.91':445
'12.##7.217.50':445
'12.##7.2.227':445
'12.#17.13.3':445
'12.##7.38.62':139
'12.##7.247.100':139
'12.##7.0.248':139
'12.##7.40.150':139
'12.##7.55.117':139
'12.##7.51.21':139
'12.#17.7.96':139
'12.##7.167.217':139
'12.##7.52.163':139
'12.##7.96.167':139
'12.##7.43.232':139
'12.##7.159.84':139
'12.##7.253.248':139
'12.##7.161.191':445
'12.##7.48.195':445
'12.##7.74.244':139
'12.##7.13.85':445
'12.##7.213.12':445
'12.##7.108.241':445
'12.##7.32.89':139
'12.##7.84.223':139
'12.##7.84.21':139
'12.##7.165.131':139
'12.##7.172.123':139
'12.##7.231.135':139
'12.##7.229.141':139
'12.##7.48.73':445
'12.##7.10.92':445
'12.##7.115.83':445
'12.##7.85.230':445
'12.##7.124.172':445
'12.##7.106.13':445
'12.##7.128.252':445
'12.#17.7.67':445
'12.#17.76.7':445
'12.##7.233.192':445
'12.##7.216.128':445
'12.##7.32.36':445
'12.##7.67.127':445
'12.##7.102.151':445
'12.##7.160.25':445
'12.##7.55.160':445
'12.##7.58.236':139
'12.##7.127.99':445
'12.##7.104.223':445
'12.##7.86.198':445
'12.##7.84.12':445
'12.##7.229.53':445
'12.##7.226.37':445
'12.##7.44.179':445
'12.##7.14.96':445
'12.##7.55.138':445
'12.##7.42.165':139
'12.##7.13.43':139
'12.##7.28.103':139
'12.##7.207.241':139
'12.##7.70.208':139
'12.##7.71.108':139
'12.##7.141.35':139
'12.##7.147.157':139
'12.##7.206.45':139
'12.##7.107.240':139
'12.##7.30.141':139
'12.##7.68.170':139
'12.##7.172.210':139
'12.##7.184.197':139
'12.##7.110.56':139
'12.##7.155.129':139
'12.##7.58.236':445
'12.##7.221.41':139
'12.##7.197.221':139
'12.##7.83.132':139
'12.##7.17.45':139
'12.##7.106.149':139
'12.##7.100.180':139
'12.##7.164.246':139
'12.##7.126.131':139
'12.##7.17.71':139
'12.##7.233.192':139
'12.#17.61.4':445
'12.##7.62.144':445
'12.##7.41.22':445
'12.##7.227.205':445
'12.##7.33.60':445
'12.##7.119.98':445
'12.##7.183.183':445
'12.##7.58.238':445
'12.##7.64.208':445
'12.##7.56.24':445
'12.##7.43.205':445
'12.##7.43.216':445
'12.##7.216.39':445
'12.##7.241.18':445
'12.##7.24.225':445
'12.##7.186.181':445
'12.##7.56.24':139
'12.##7.253.55':139
'12.##7.156.104':139
'12.##7.29.36':445
'12.##7.11.136':445
'12.##7.81.144':445
'12.##7.247.118':445
'12.##7.170.109':445
'12.##7.136.70':445
'12.##7.41.123':445
'12.##7.106.13':139
'12.##7.48.73':139
'12.##7.10.92':139
'12.##7.226.37':139
'12.##7.85.230':139
'12.##7.124.172':139
'12.##7.115.83':139
'12.##7.67.127':139
'12.#17.7.67':139
'12.#17.76.7':139
'12.##7.128.252':139
'12.##7.216.128':139
'12.##7.32.36':139
'12.##7.104.223':139
'12.##7.102.151':139
'12.##7.160.25':139
'12.##7.253.55':445
'12.##7.156.104':445
'12.##7.127.99':139
'12.##7.55.160':139
'12.##7.55.138':139
'12.##7.84.12':139
'12.##7.229.53':139
'12.##7.86.198':139
'12.##7.44.179':139
'12.##7.14.96':139
'12.#17.18.6':139
'12.##7.239.38':445
'12.##7.215.7':445
'12.##7.71.249':445
'12.##7.173.203':445
'12.##7.220.173':445
'12.##7.140.167':445
'12.##7.64.92':445
'12.##7.107.167':445
'12.##7.67.251':445
'12.##7.163.160':445
'12.##7.79.158':445
'12.##7.159.64':445
'12.##7.111.80':445
'12.##7.206.7':445
'12.##7.31.100':445
'12.##7.146.106':445
'12.##7.68.73':445
'12.##7.115.59':445
'12.##7.150.230':445
'12.##7.86.84':445
'12.##7.49.168':445
'12.##7.227.69':445
'12.##7.139.79':445
'12.##7.46.249':445
'12.##7.10.113':445
'12.##7.96.243':445
'12.##7.57.47':445
'12.##7.112.191':445
'12.##7.142.112':445
'12.##7.24.160':445
'12.##7.201.214':445
'12.#17.45.1':445
'12.##7.37.224':445
'12.##7.146.106':9988
'12.##7.223.15':9988
'12.##7.31.100':9988
'12.##7.59.193':445
'12.##7.19.194':445
'12.#17.66.2':445
'12.##7.225.79':445
'12.##7.37.220':445
'12.##7.192.23':445
'12.##7.184.186':445
'12.##7.192.168':445
'12.##7.4.121':445
'12.##7.161.179':445
'12.##7.220.183':445
'12.##7.107.221':445
'12.##7.68.178':445
'12.##7.40.154':445
'12.##7.194.40':445
'12.##7.230.1':445
'12.##7.223.15':445
'12.##7.220.173':139
'12.##7.140.167':139
'12.##7.215.7':139
'12.##7.227.69':139
'12.##7.139.79':139
'12.##7.173.203':139
'12.##7.239.38':139
'12.##7.79.158':139
'12.##7.111.80':139
'12.##7.107.167':139
'12.##7.71.249':139
'12.##7.64.92':139
'12.##7.159.64':139
'12.##7.11.202':139
'12.##7.68.73':139
'12.##7.115.59':139
'12.##7.223.15':139
'12.##7.31.100':139
'12.##7.150.230':139
'12.##7.206.7':139
'12.##7.10.113':139
'12.##7.96.243':139
'12.##7.49.168':139
'12.##7.146.106':139
'12.##7.46.249':139
'12.##7.86.84':139
'12.##7.201.214':139
'12.#17.45.1':139
'12.##7.57.47':139
'12.##7.107.221':139
'12.##7.68.178':139
'12.##7.24.160':139
'12.##7.112.191':139
'12.##7.19.194':139
'12.#17.66.2':139
'12.##7.11.202':445
'12.##7.142.112':139
'12.##7.37.224':139
'12.##7.59.193':139
'12.##7.163.160':139
'12.##7.4.121':139
'12.##7.225.79':139
'12.##7.67.251':139
'12.##7.184.186':139
'12.##7.192.168':139
'12.##7.37.220':139
'12.##7.194.40':139
'12.##7.230.1':139
'12.##7.220.183':139
'12.##7.192.23':139
'12.##7.161.179':139
'12.##7.40.154':139
'12.#17.0.80':445
'12.##7.69.38':445
'12.##7.51.69':445
'12.##7.51.76':445
'12.##7.217.26':445
'12.##7.151.97':445
'12.##7.113.39':445
'12.##7.236.87':445
'12.##7.78.78':445
'12.##7.16.166':445
'12.##7.95.198':445
'12.##7.173.164':445
'12.##7.243.154':445
'12.##7.184.94':139
'12.##7.110.13':139
'12.##7.223.252':139
'12.##7.208.67':139
'12.##7.17.89':139
'12.##7.96.17':139
'12.##7.105.40':139
'12.##7.21.151':445
'12.##7.218.2':445
'12.##7.97.228':445
'12.##7.5.197':139
'12.##7.231.60':445
'12.##7.80.137':445
'12.##7.86.202':139
'12.##7.94.224':139
'12.##7.222.94':139
'12.##7.232.154':139
'12.##7.160.91':139
'12.##7.58.200':139
'12.##7.25.207':139
'12.##7.86.125':139
'12.##7.35.122':139
'12.##7.53.74':139
'12.##7.30.246':139
'12.##7.63.31':139
'12.##7.98.202':139
'12.##7.184.94':445
'12.##7.110.13':445
'12.##7.223.252':445
'12.##7.208.67':445
'12.##7.17.89':445
'12.##7.96.17':445
'12.##7.105.40':445
'12.##7.2.227':139
'12.#17.13.3':139
'12.##7.155.13':139
'12.##7.5.197':445
'12.##7.217.50':139
'12.##7.90.19':139
'12.##7.16.166':139
'12.##7.37.224':9988
'12.##7.21.197':139
'12.##7.22.205':139
'12.##7.40.154':9988
'12.##7.194.40':9988
'12.##7.230.1':9988
'12.##7.188.164':139
'12.##7.147.209':139
'12.##7.219.86':139
'12.##7.127.153':139
'12.##7.32.139':139
'12.##7.61.221':139
'12.##7.135.136':139
'12.##7.220.173':9988
'12.##7.71.249':9988
'12.##7.64.92':9988
'12.##7.46.249':9988
'12.##7.49.168':9988
'12.##7.227.69':9988
'12.##7.159.64':9988
'12.##7.225.79':9988
'12.##7.37.220':9988
'12.##7.161.179':9988
'12.##7.107.167':9988
'12.##7.192.168':9988
'12.##7.4.121':9988
'12.##7.151.97':139
'12.#17.0.80':139
'12.##7.69.38':139
'12.##7.97.228':139
'12.##7.51.76':139
'12.##7.217.26':139
'12.##7.51.69':139
'12.##7.243.154':139
'12.##7.236.87':139
'12.##7.78.78':139
'12.##7.113.39':139
'12.##7.95.198':139
'12.##7.173.164':139
'12.##7.32.139':445
'12.##7.61.221':445
'12.##7.135.136':445
'12.##7.21.197':445
'12.##7.22.205':445
'12.##7.188.164':445
'12.##7.147.209':445
'12.##7.80.137':139
'12.##7.21.151':139
'12.##7.218.2':139
'12.##7.219.86':445
'12.##7.127.153':445
'12.##7.231.60':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней