Trojan.Starman.5792

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'66.##5.211.196':445
'66.##5.239.67':445
'66.##5.84.147':445
'66.##5.196.131':445
'66.##5.30.188':445
'66.##5.68.82':445
'66.##5.66.196':445
'66.##5.116.66':445
'66.##5.52.107':445
'66.##5.155.200':445
'66.##5.197.119':445
'66.##5.224.233':445
'66.##5.52.33':445
'66.##5.81.97':445
'66.##5.118.81':445
'66.##5.75.118':445
'66.##5.184.122':445
'66.##5.55.143':445
'66.##5.244.152':445
'66.##5.68.153':445
'66.##5.121.249':445
'66.##5.131.27':445
'66.##5.195.75':445
'66.#35.60.0':445
'66.##5.36.203':445
'66.##5.110.177':445
'66.##5.194.90':139
'66.##5.127.51':139
'66.##5.61.42':139
'66.##5.20.121':139
'66.##5.163.245':139
'66.##5.77.124':139
'66.##5.98.48':139
'66.##5.146.181':139
'66.##5.137.74':139
'66.##5.172.177':139
'66.##5.76.29':139
'66.##5.92.247':139
'66.##5.219.140':139
'66.##5.230.164':445
'66.##5.34.247':445
'66.##5.201.99':445
'66.##5.197.110':445
'66.##5.129.90':445
'66.##5.163.183':445
'66.##5.52.142':445
'66.##5.70.240':445
'66.##5.248.156':139
'66.##5.223.50':445
'66.##5.98.222':445
'66.##5.141.99':445
'66.##5.244.152':139
'66.##5.81.97':139
'66.##5.118.81':139
'66.##5.254.82':445
'66.##5.184.122':139
'66.##5.55.143':139
'66.##5.36.203':139
'66.##5.68.153':139
'66.##5.121.249':139
'66.##5.75.118':139
'66.##5.195.75':139
'66.#35.60.0':139
'66.##5.115.186':445
'66.##5.93.178':445
'66.##5.234.51':445
'66.##5.11.186':445
'66.##5.17.111':445
'66.##5.107.33':445
'66.##5.123.28':445
'66.##5.147.88':445
'66.##5.56.49':445
'66.##5.117.56':445
'66.##5.222.133':445
'66.##5.244.45':445
'66.##5.81.56':445
'66.##5.52.33':139
'66.##5.230.164':139
'66.##5.34.247':139
'66.##5.163.183':139
'66.##5.110.177':139
'66.##5.197.110':139
'66.##5.129.90':139
'66.##5.141.99':139
'66.##5.52.142':139
'66.##5.70.240':139
'66.##5.201.99':139
'66.##5.223.50':139
'66.##5.98.222':139
'66.##5.52.107':139
'66.##5.30.188':139
'66.##5.68.82':139
'66.##5.239.67':139
'66.##5.131.27':139
'66.##5.196.131':139
'66.##5.211.196':139
'66.##5.224.233':139
'66.##5.66.196':139
'66.##5.116.66':139
'66.##5.84.147':139
'66.##5.155.200':139
'66.##5.197.119':139
'66.##5.112.247':445
'66.##5.82.251':445
'66.##5.4.237':445
'66.##5.173.204':445
'66.##5.32.136':445
'66.##5.47.211':445
'66.##5.138.76':445
'66.##5.182.24':445
'66.##5.166.4':445
'66.#35.95.0':445
'66.##5.7.121':445
'66.##5.164.211':445
'66.##5.38.241':445
'66.##5.34.122':445
'66.##5.116.74':445
'66.##5.193.200':445
'66.##5.230.212':445
'66.##5.219.88':445
'66.##5.38.138':445
'66.##5.125.231':445
'66.##5.80.160':445
'66.##5.223.163':445
'66.##5.87.95':445
'66.##5.195.32':445
'66.##5.240.162':445
'66.##5.94.254':445
'66.##5.236.7':139
'66.##5.73.120':139
'66.##5.168.73':139
'66.##5.246.62':139
'66.##5.106.168':139
'66.##5.40.225':139
'66.##5.63.70':139
'66.##5.245.165':139
'66.##5.72.141':139
'66.##5.246.167':139
'66.##5.85.60':139
'66.##5.193.141':139
'66.##5.233.31':139
'66.##5.135.65':445
'66.##5.174.6':445
'66.##5.84.59':445
'66.##5.51.95':445
'66.##5.65.51':445
'66.##5.94.219':445
'66.##5.156.248':445
'66.##5.250.23':445
'66.##5.205.190':139
'66.##5.224.83':445
'66.##5.129.223':445
'66.##5.201.129':445
'66.##5.38.138':139
'66.##5.34.122':139
'66.##5.116.74':139
'66.##5.137.74':445
'66.##5.230.212':139
'66.##5.219.88':139
'66.##5.240.162':139
'66.##5.125.231':139
'66.##5.80.160':139
'66.##5.193.200':139
'66.##5.87.95':139
'66.##5.195.32':139
'66.##5.146.181':445
'66.##5.163.245':445
'66.##5.77.124':445
'66.##5.194.90':445
'66.##5.248.156':445
'66.##5.219.140':445
'66.##5.20.121':445
'66.##5.76.29':445
'66.##5.92.247':445
'66.##5.98.48':445
'66.##5.127.51':445
'66.##5.61.42':445
'66.##5.172.177':445
'66.##5.223.163':139
'66.##5.94.219':139
'66.##5.135.65':139
'66.##5.174.6':139
'66.##5.94.254':139
'66.##5.51.95':139
'66.##5.65.51':139
'66.##5.201.129':139
'66.##5.156.248':139
'66.##5.250.23':139
'66.##5.84.59':139
'66.##5.224.83':139
'66.##5.129.223':139
'66.##5.166.4':139
'66.##5.47.211':139
'66.##5.112.247':139
'66.##5.82.251':139
'66.##5.38.241':139
'66.##5.173.204':139
'66.##5.32.136':139
'66.##5.164.211':139
'66.##5.182.24':139
'66.##5.138.76':139
'66.##5.4.237':139
'66.#35.95.0':139
'66.##5.7.121':139
'66.##5.89.114':445
'66.##5.141.36':445
'66.##5.24.145':445
'66.##5.58.49':445
'66.##5.62.162':445
'66.##5.29.159':445
'66.##5.51.59':445
'66.##5.98.22':445
'66.##5.35.59':445
'66.#35.0.84':445
'66.##5.89.130':445
'66.##5.53.150':445
'66.##5.106.148':445
'66.##5.191.222':445
'66.##5.229.131':445
'66.##5.79.163':445
'66.##5.231.151':445
'66.##5.193.209':445
'66.##5.174.193':445
'66.##5.84.161':445
'66.##5.13.11':445
'66.##5.148.13':445
'66.##5.107.191':445
'66.##5.117.20':445
'66.##5.132.116':445
'66.##5.195.231':445
'66.##5.0.132':445
'66.##5.88.162':445
'66.##5.220.22':445
'66.##5.71.215':445
'66.##5.75.29':445
'66.##5.3.177':445
'66.##5.139.21':445
'66.##5.147.229':445
'66.##5.137.163':445
'66.##5.56.150':445
'66.##5.103.45':445
'66.##5.201.205':445
'66.##5.122.51':445
'66.##5.140.23':445
'66.##5.144.99':445
'66.##5.140.199':445
'66.##5.50.196':445
'66.##5.56.51':445
'66.##5.188.45':445
'66.##5.233.212':445
'66.##5.216.233':445
'66.##5.80.207':445
'66.##5.221.157':445
'66.##5.65.222':445
'66.##5.136.141':445
'66.##5.89.114':139
'66.##5.141.36':139
'66.##5.24.145':139
'66.##5.58.49':139
'66.##5.62.162':139
'66.##5.29.159':139
'66.##5.51.59':139
'66.##5.98.22':139
'66.##5.35.59':139
'66.#35.0.84':139
'66.##5.89.130':139
'66.##5.53.150':139
'66.##5.106.148':139
'66.##5.191.222':139
'66.##5.229.131':139
'66.##5.79.163':139
'66.##5.193.209':139
'66.##5.174.193':139
'66.##5.231.151':139
'66.##5.84.161':139
'66.##5.13.11':139
'66.##5.148.13':139
'66.##5.107.191':139
'66.##5.117.20':139
'66.##5.132.116':139
'66.##5.195.231':139
'66.##5.0.132':139
'66.##5.88.162':139
'66.##5.220.22':139
'66.##5.71.215':139
'66.##5.75.29':139
'66.##5.3.177':139
'66.##5.139.21':139
'66.##5.147.229':139
'66.##5.137.163':139
'66.##5.56.150':139
'66.##5.103.45':139
'66.##5.201.205':139
'66.##5.122.51':139
'66.##5.140.23':139
'66.##5.144.99':139
'66.##5.140.199':139
'66.##5.50.196':139
'66.##5.56.51':139
'66.##5.188.45':139
'66.##5.233.212':139
'66.##5.216.233':139
'66.##5.80.207':139
'66.##5.221.157':139
'66.##5.65.222':139
'66.##5.136.141':139
'66.##5.28.196':445
'66.##5.33.79':445
'66.##5.95.131':445
'66.##5.45.132':445
'66.##5.167.171':445
'66.##5.92.167':445
'66.##5.167.139':445
'66.##5.95.101':445
'66.##5.216.49':445
'66.##5.34.169':445
'66.##5.35.223':445
'66.##5.52.163':445
'66.##5.198.109':445
'66.##5.226.150':445
'66.##5.17.103':445
'66.##5.65.144':445
'66.#35.18.0':445
'66.##5.37.135':445
'66.##5.223.103':445
'66.##5.77.219':445
'66.##5.10.151':445
'66.##5.110.128':445
'66.##5.192.143':445
'66.##5.149.60':445
'66.##5.223.74':445
'66.##5.35.150':445
'66.##5.11.186':139
'66.##5.222.133':139
'66.##5.244.45':139
'66.##5.123.28':139
'66.##5.93.178':139
'66.##5.234.51':139
'66.##5.117.56':139
'66.##5.115.186':139
'66.##5.254.82':139
'66.##5.81.56':139
'66.##5.147.88':139
'66.##5.56.49':139
'66.##5.107.33':139
'66.##5.116.144':445
'66.##5.143.233':445
'66.##5.223.143':445
'66.##5.243.222':445
'66.##5.129.244':445
'66.##5.12.152':445
'66.##5.206.242':445
'66.##5.36.90':445
'66.##5.17.111':139
'66.##5.99.36':445
'66.##5.30.128':445
'66.##5.67.89':445
'66.##5.223.103':139
'66.##5.226.150':139
'66.##5.17.103':139
'66.##5.3.177':9988
'66.#35.18.0':139
'66.##5.37.135':139
'66.##5.223.74':139
'66.##5.77.219':139
'66.##5.10.151':139
'66.##5.65.144':139
'66.##5.192.143':139
'66.##5.149.60':139
'66.##5.140.23':9988
'66.##5.107.191':9988
'66.##5.106.148':9988
'66.##5.89.114':9988
'66.##5.231.151':9988
'66.##5.193.209':9988
'66.##5.79.163':9988
'66.##5.98.22':9988
'66.##5.35.59':9988
'66.##5.195.231':9988
'66.##5.24.145':9988
'66.#35.0.84':9988
'66.##5.51.59':9988
'66.##5.110.128':139
'66.##5.12.152':139
'66.##5.116.144':139
'66.##5.143.233':139
'66.##5.35.150':139
'66.##5.243.222':139
'66.##5.129.244':139
'66.##5.67.89':139
'66.##5.206.242':139
'66.##5.36.90':139
'66.##5.223.143':139
'66.##5.99.36':139
'66.##5.30.128':139
'66.##5.216.49':139
'66.##5.92.167':139
'66.##5.28.196':139
'66.##5.33.79':139
'66.##5.198.109':139
'66.##5.45.132':139
'66.##5.167.171':139
'66.##5.52.163':139
'66.##5.167.139':139
'66.##5.95.101':139
'66.##5.95.131':139
'66.##5.34.169':139
'66.##5.35.223':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней