Trojan.Starman.5223

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'58.##5.11.124':139
'58.##5.181.208':139
'58.##5.98.181':139
'58.##5.215.166':139
'58.##5.221.132':139
'58.##5.169.86':139
'58.##5.3.117':139
'58.##5.224.127':139
'58.##5.95.207':139
'58.##5.80.98':139
'58.##5.213.80':139
'58.##5.67.34':139
'58.##5.94.91':139
'58.##5.98.162':139
'58.##5.30.115':139
'58.##5.237.201':139
'58.##5.117.134':445
'58.##5.128.117':445
'58.##5.201.128':139
'58.##5.181.21':139
'58.##5.216.77':139
'58.##5.94.47':139
'58.##5.241.22':139
'58.##5.106.75':139
'58.##5.6.245':139
'58.##5.248.133':139
'58.##5.170.169':139
'58.##5.157.232':139
'58.##5.103.248':139
'58.##5.47.228':139
'58.##5.2.124':139
'58.##5.32.124':139
'58.##5.212.65':139
'58.##5.155.212':139
'58.##5.55.135':139
'58.##5.195.48':139
'58.##5.187.103':139
'58.##5.94.144':139
'58.##5.28.111':139
'58.##5.70.249':139
'58.##5.101.70':139
'58.##5.73.176':139
'58.##5.112.184':139
'58.##5.62.46':139
'58.##5.32.12':139
'58.##5.192.17':139
'58.##5.244.10':139
'58.##5.97.129':139
'58.##5.142.78':139
'58.##5.189.142':139
'58.##5.31.213':139
'58.##5.20.124':445
'58.##5.127.230':445
'58.##5.151.127':445
'58.##5.11.131':445
'58.##5.242.143':445
'58.##5.16.75':445
'58.##5.58.32':445
'58.##5.34.181':445
'58.##5.161.34':445
'58.##5.42.161':445
'58.##5.92.14':445
'58.##5.24.144':445
'58.##5.78.107':445
'58.##5.194.183':445
'58.##5.93.81':445
'58.##5.187.236':445
'58.##5.242.45':445
'58.##5.20.124':139
'58.##5.117.134':139
'58.##5.128.117':139
'58.#15.0.55':445
'58.##5.108.247':445
'58.##5.107.173':445
'58.##5.89.55':445
'58.##5.123.201':445
'58.##5.171.191':445
'58.##5.49.100':445
'58.##5.81.71':445
'58.##5.10.103':445
'58.##5.184.80':445
'58.##5.38.116':445
'58.##5.127.154':445
'58.##5.233.83':445
'58.##5.63.253':445
'58.##5.151.64':445
'58.##5.250.150':445
'58.##5.147.88':445
'58.##5.182.129':445
'58.##5.91.30':445
'58.##5.172.17':445
'58.##5.54.95':445
'58.##5.10.46':445
'58.##5.53.233':445
'58.##5.237.39':445
'58.##5.42.157':445
'58.##5.18.145':445
'58.##5.196.63':445
'58.##5.132.196':445
'58.##5.135.161':445
'58.##5.106.95':445
'58.##5.169.254':445
'58.##5.213.170':445
'58.##5.127.192':139
'58.##5.77.42':139
'58.##5.133.9':139
'58.##5.37.172':139
'58.##5.219.12':139
'58.##5.90.79':139
'58.##5.158.253':139
'58.##5.99.78':139
'58.##5.200.199':139
'58.##5.54.57':139
'58.##5.224.55':139
'58.##5.40.17':139
'58.##5.76.146':139
'58.##5.12.29':139
'58.##5.72.139':139
'58.##5.101.140':139
'58.##5.105.75':139
'58.##5.119.167':139
'58.##5.135.17':139
'58.##5.97.192':139
'58.##5.76.128':139
'58.##5.80.93':139
'58.##5.29.80':139
'58.##5.42.164':139
'58.##5.136.96':139
'58.##5.1.229':139
'58.##5.213.53':139
'58.##5.81.76':139
'58.##5.110.100':139
'58.##5.201.132':139
'58.##5.171.43':139
'58.##5.39.238':139
'58.##5.97.40':139
'58.##5.178.150':139
'58.##5.185.14':139
'58.##5.107.232':139
'58.##5.157.156':139
'58.##5.182.164':139
'58.##5.150.234':139
'58.##5.47.17':139
'58.##5.153.83':139
'58.##5.131.191':139
'58.##5.186.220':139
'58.##5.73.213':139
'58.##5.167.73':139
'58.##5.21.95':139
'58.##5.26.94':139
'58.##5.36.254':139
'58.##5.165.2':139
'58.##5.182.189':139
'58.##5.64.220':139
'58.##5.153.220':139
'58.##5.254.224':445
'58.##5.181.208':445
'58.##5.98.181':445
'58.##5.80.98':445
'58.##5.221.132':445
'58.##5.169.86':445
'58.##5.11.124':445
'58.##5.224.127':445
'58.##5.95.207':445
'58.##5.248.133':445
'58.##5.213.80':445
'58.##5.67.34':445
'58.##5.3.117':445
'58.##5.215.166':445
'58.##5.30.115':445
'58.##5.237.201':445
'58.##5.241.22':445
'58.##5.254.224':139
'58.##5.201.128':445
'58.##5.98.162':445
'58.##5.216.77':445
'58.##5.94.47':445
'58.##5.94.91':445
'58.##5.106.75':445
'58.##5.6.245':445
'58.##5.181.21':445
'58.##5.112.184':445
'58.##5.157.232':445
'58.##5.103.248':445
'58.##5.195.48':445
'58.##5.2.124':445
'58.##5.32.124':445
'58.##5.170.169':445
'58.##5.155.212':445
'58.##5.55.135':445
'58.##5.127.192':445
'58.##5.187.103':445
'58.##5.94.144':445
'58.##5.212.65':445
'58.##5.47.228':445
'58.##5.101.70':445
'58.##5.73.176':445
'58.##5.142.78':445
'58.##5.62.46':445
'58.##5.32.12':445
'58.##5.70.249':445
'58.##5.244.10':445
'58.##5.97.129':445
'58.##5.28.111':445
'58.##5.189.142':445
'58.##5.31.213':445
'58.##5.192.17':445
'58.##5.17.182':445
'58.##5.156.105':445
'58.##5.4.217':445
'58.##5.108.220':445
'58.##5.220.84':445
'58.##5.145.108':445
'58.##5.219.5':445
'58.##5.233.180':445
'58.##5.200.225':445
'58.##5.118.191':445
'58.##5.22.135':445
'58.##5.134.52':445
'58.##5.17.129':445
'58.##5.214.118':445
'58.##5.170.109':445
'58.##5.38.161':445
'58.##5.202.91':445
'58.##5.161.58':445
'58.##5.39.109':445
'58.##5.236.135':445
'58.##5.22.212':445
'58.##5.187.62':445
'58.##5.209.27':445
'58.##5.172.57':445
'58.##5.224.138':445
'58.#15.66.8':445
'58.##5.153.42':445
'58.##5.172.204':445
'58.##5.26.161':445
'58.##5.32.125':445
'58.##5.192.141':445
'58.##5.106.51':445
'58.##5.60.134':445
'58.##5.156.118':445
'58.##5.39.109':9988
'58.##5.40.13':445
'58.##5.212.154':445
'58.##5.131.241':445
'58.##5.220.108':445
'58.##5.66.212':445
'58.##5.42.180':445
'58.##5.212.2':445
'58.##5.21.66':445
'58.##5.217.20':445
'58.##5.89.95':445
'58.##5.106.59':445
'58.##5.37.10':445
'58.##5.121.117':445
'58.##5.65.41':445
'58.##5.130.90':445
'58.##5.1.125':445
'58.##5.3.107':445
'58.##5.145.108':139
'58.##5.17.182':139
'58.##5.156.105':139
'58.##5.17.129':139
'58.##5.220.84':139
'58.##5.108.220':139
'58.##5.134.52':139
'58.##5.219.5':139
'58.##5.233.180':139
'58.##5.4.217':139
'58.##5.118.191':139
'58.##5.22.135':139
'58.##5.187.62':139
'58.##5.161.58':139
'58.##5.3.107':139
'58.##5.39.109':139
'58.##5.170.109':139
'58.##5.214.118':139
'58.##5.202.91':139
'58.##5.224.138':139
'58.##5.236.135':139
'58.##5.22.212':139
'58.##5.38.161':139
'58.##5.209.27':139
'58.##5.172.57':139
'58.##5.200.225':139
'58.##5.106.51':139
'58.##5.153.42':139
'58.##5.172.204':139
'58.##5.220.108':139
'58.##5.32.125':139
'58.##5.192.141':139
'58.##5.131.241':139
'58.##5.60.134':139
'58.##5.156.118':139
'58.##5.26.161':139
'58.##5.40.13':139
'58.##5.212.154':139
'58.##5.121.117':139
'58.##5.89.95':139
'58.##5.66.212':139
'58.##5.42.180':139
'58.#15.66.8':139
'58.##5.21.66':139
'58.##5.217.20':139
'58.##5.1.125':139
'58.##5.106.59':139
'58.##5.37.10':139
'58.##5.212.2':139
'58.##5.65.41':139
'58.##5.130.90':139
'58.##5.236.135':9988
'58.##5.127.230':139
'58.##5.151.127':139
'58.##5.11.131':139
'58.##5.242.143':139
'58.##5.16.75':139
'58.##5.58.32':139
'58.##5.34.181':139
'58.##5.161.34':139
'58.##5.42.161':139
'58.##5.92.14':139
'58.##5.24.144':139
'58.##5.78.107':139
'58.##5.194.183':139
'58.##5.93.81':139
'58.##5.187.236':139
'58.##5.242.45':139
'58.##5.130.68':445
'58.##5.76.197':445
'58.##5.149.124':445
'58.#15.0.55':139
'58.##5.108.247':139
'58.##5.107.173':139
'58.##5.89.55':139
'58.##5.123.201':139
'58.##5.171.191':139
'58.##5.49.100':139
'58.##5.81.71':139
'58.##5.10.103':139
'58.##5.184.80':139
'58.##5.38.116':139
'58.##5.127.154':139
'58.##5.233.83':139
'58.##5.63.253':139
'58.##5.151.64':139
'58.##5.250.150':139
'58.##5.147.88':139
'58.##5.182.129':139
'58.##5.91.30':139
'58.##5.172.17':139
'58.##5.54.95':139
'58.##5.10.46':139
'58.##5.53.233':139
'58.##5.237.39':139
'58.##5.42.157':139
'58.##5.18.145':139
'58.##5.196.63':139
'58.##5.132.196':139
'58.##5.135.161':139
'58.##5.106.95':139
'58.##5.169.254':139
'58.##5.213.170':139
'58.##5.37.127':445
'58.##5.47.115':139
'58.##5.24.146':139
'58.##5.194.135':139
'58.##5.17.234':139
'58.##5.203.34':139
'58.#15.8.82':139
'58.##5.249.144':139
'58.##5.35.168':139
'58.##5.187.90':139
'58.##5.40.194':139
'58.##5.184.40':139
'58.##5.167.150':139
'58.##5.156.118':9988
'58.##5.145.108':9988
'58.##5.17.182':9988
'58.##5.156.105':9988
'58.##5.22.212':9988
'58.##5.17.129':9988
'58.##5.108.220':9988
'58.##5.233.180':9988
'58.##5.217.20':9988
'58.##5.131.241':9988
'58.##5.118.191':9988
'58.##5.22.135':9988
'58.##5.219.5':9988
'58.##5.57.22':139
'58.##5.167.150':445
'58.##5.249.144':445
'58.##5.35.168':445
'58.##5.194.135':445
'58.##5.40.194':445
'58.##5.184.40':445
'58.##5.145.175':445
'58.##5.173.168':445
'58.##5.255.131':445
'58.##5.187.90':445
'58.##5.57.22':445
'58.##5.129.138':445
'58.##5.24.146':445
'58.##5.255.131':139
'58.##5.37.127':139
'58.##5.130.68':139
'58.##5.129.138':139
'58.##5.145.175':139
'58.##5.173.168':139
'58.##5.203.34':445
'58.#15.8.82':445
'58.##5.47.115':445
'58.##5.76.197':139
'58.##5.149.124':139
'58.##5.17.234':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней