Trojan.Starman.4979

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'67.##1.167.111':139
'67.##1.229.206':139
'67.##1.255.229':139
'67.##1.93.50':139
'67.##1.20.224':139
'67.##1.192.171':139
'67.##1.168.139':139
'67.##1.49.18':139
'67.##1.224.4':139
'67.##1.64.190':139
'67.##1.163.239':139
'67.##1.97.252':139
'67.##1.89.118':139
'67.##1.21.127':139
'67.##1.45.44':139
'67.##1.188.221':139
'67.##1.120.188':139
'67.##1.164.203':139
'67.##1.223.70':139
'67.##1.44.206':139
'67.##1.50.44':139
'67.##1.37.95':139
'67.##1.83.190':139
'67.##1.30.52':139
'67.##1.68.249':139
'67.##1.83.199':139
'67.##1.255.223':139
'67.##1.108.111':139
'67.##1.144.15':139
'67.##1.248.247':139
'67.##1.120.188':445
'67.##1.164.203':445
'67.##1.89.118':445
'67.##1.152.217':139
'67.##1.142.216':445
'67.##1.188.221':445
'67.##1.182.168':139
'67.##1.54.224':139
'67.##1.255.239':139
'67.##1.84.154':139
'67.##1.237.38':139
'67.##1.224.69':139
'67.##1.86.65':139
'67.#31.6.86':139
'67.##1.112.6':139
'67.##1.189.129':139
'67.##1.76.242':139
'67.##1.250.227':139
'67.##1.183.174':445
'67.##1.4.184':445
'67.##1.96.203':445
'67.##1.123.13':445
'67.##1.22.217':445
'67.##1.175.22':445
'67.##1.213.177':445
'67.##1.10.238':445
'67.##1.200.88':445
'67.##1.29.243':445
'67.##1.113.27':445
'67.##1.82.84':445
'67.##1.57.128':445
'67.##1.169.157':445
'67.##1.71.179':445
'67.##1.102.177':445
'67.#31.35.0':445
'67.##1.168.11':445
'67.##1.225.100':445
'67.##1.114.26':445
'67.##1.97.163':445
'67.##1.213.194':445
'67.##1.221.19':445
'67.##1.30.221':445
'67.##1.97.95':139
'67.##1.254.56':445
'67.##1.8.151':445
'67.##1.97.39':139
'67.##1.42.153':139
'67.##1.198.239':139
'67.##1.198.239':445
'67.##1.97.95':445
'67.##1.142.216':139
'67.#31.6.26':445
'67.##1.97.39':445
'67.##1.42.153':445
'67.##1.18.157':445
'67.##1.10.226':445
'67.##1.8.229':445
'67.##1.253.4':445
'67.##1.124.32':445
'67.##1.224.137':445
'67.##1.254.56':139
'67.##1.8.151':139
'67.#31.6.26':139
'67.##1.190.150':445
'67.##1.100.237':445
'67.##1.100.14':445
'67.##1.21.127':445
'67.##1.78.140':139
'67.##1.239.78':139
'67.##1.218.112':139
'67.##1.21.122':139
'67.##1.26.148':139
'67.##1.140.26':139
'67.##1.59.87':139
'67.##1.195.18':139
'67.##1.157.183':139
'67.##1.179.102':139
'67.##1.58.179':139
'67.##1.149.147':139
'67.##1.173.156':445
'67.##1.37.199':139
'67.##1.242.155':139
'67.##1.18.204':445
'67.##1.181.55':445
'67.##1.76.181':445
'67.##1.149.105':139
'67.##1.81.168':139
'67.##1.108.81':139
'67.##1.192.186':139
'67.##1.66.228':139
'67.##1.135.35':139
'67.##1.29.86':139
'67.##1.226.245':139
'67.##1.54.147':139
'67.##1.102.123':139
'67.##1.137.60':139
'67.##1.105.250':139
'67.##1.43.204':139
'67.##1.64.65':139
'67.##1.247.219':139
'67.##1.176.125':139
'67.##1.16.177':139
'67.##1.69.17':139
'67.##1.172.206':139
'67.##1.70.172':139
'67.##1.247.196':139
'67.##1.51.35':139
'67.##1.44.106':139
'67.##1.58.77':139
'67.##1.56.13':139
'67.##1.1.226':139
'67.##1.61.156':139
'67.##1.240.3':139
'67.##1.76.241':139
'67.##1.248.53':139
'67.##1.97.252':445
'67.##1.168.139':445
'67.##1.49.18':445
'67.##1.255.229':445
'67.##1.64.190':445
'67.##1.163.239':445
'67.##1.224.69':445
'67.##1.182.168':445
'67.##1.54.224':445
'67.##1.224.4':445
'67.##1.84.154':445
'67.##1.237.38':445
'67.##1.30.52':445
'67.##1.223.70':445
'67.##1.44.206':445
'67.##1.45.44':445
'67.##1.37.95':445
'67.##1.83.190':445
'67.##1.192.171':445
'67.##1.167.111':445
'67.##1.229.206':445
'67.##1.50.44':445
'67.##1.93.50':445
'67.##1.20.224':445
'67.##1.22.214':139
'67.##1.27.84':139
'67.##1.18.204':139
'67.##1.255.223':445
'67.##1.152.217':445
'67.##1.64.252':139
'67.##1.64.252':445
'67.##1.22.214':445
'67.##1.27.84':445
'67.##1.181.55':139
'67.##1.76.181':139
'67.##1.173.156':139
'67.##1.250.227':445
'67.##1.86.65':445
'67.#31.6.86':445
'67.##1.255.239':445
'67.##1.189.129':445
'67.##1.76.242':445
'67.##1.248.247':445
'67.##1.68.249':445
'67.##1.83.199':445
'67.##1.112.6':445
'67.##1.108.111':445
'67.##1.144.15':445
'67.##1.170.38':445
'67.##1.9.161':445
'67.##1.45.62':445
'67.##1.106.74':445
'67.##1.92.127':445
'67.##1.33.57':445
'67.##1.91.41':445
'67.##1.76.140':445
'67.##1.14.75':445
'67.##1.188.83':445
'67.##1.146.181':445
'67.##1.98.203':445
'67.##1.100.192':445
'67.##1.27.101':445
'67.##1.111.27':445
'67.##1.173.119':139
'67.##1.15.63':139
'67.##1.31.191':139
'67.##1.88.197':445
'67.##1.122.239':445
'67.##1.20.97':445
'67.##1.127.111':445
'67.##1.110.127':445
'67.##1.18.50':445
'67.##1.254.84':445
'67.##1.98.22':445
'67.##1.16.121':445
'67.##1.143.229':445
'67.##1.26.164':445
'67.##1.104.156':445
'67.##1.192.163':445
'67.##1.165.191':445
'67.##1.230.104':445
'67.##1.228.221':445
'67.##1.59.66':445
'67.##1.134.21':445
'67.##1.32.35':445
'67.##1.189.193':445
'67.##1.60.197':445
'67.##1.62.14':445
'67.##1.84.14':445
'67.##1.105.178':445
'67.##1.2.136':445
'67.##1.215.2':445
'67.##1.154.245':445
'67.##1.240.60':445
'67.##1.11.51':445
'67.##1.135.142':445
'67.##1.188.83':139
'67.##1.146.181':139
'67.##1.98.203':139
'67.##1.170.38':139
'67.##1.9.161':139
'67.##1.45.62':139
'67.##1.62.14':139
'67.##1.84.14':139
'67.##1.105.178':139
'67.##1.91.41':139
'67.##1.76.140':139
'67.##1.14.75':139
'67.##1.127.111':139
'67.##1.110.127':139
'67.##1.18.50':139
'67.##1.27.101':139
'67.##1.100.192':139
'67.##1.111.27':139
'67.##1.106.74':139
'67.##1.92.127':139
'67.##1.33.57':139
'67.##1.88.197':139
'67.##1.122.239':139
'67.##1.20.97':139
'67.##1.228.221':139
'67.##1.59.66':139
'67.##1.134.21':139
'67.##1.254.84':139
'67.##1.98.22':139
'67.##1.16.121':139
'67.##1.114.230':139
'67.##1.89.115':139
'67.#31.19.5':139
'67.##1.192.163':139
'67.##1.165.191':139
'67.##1.230.104':139
'67.##1.240.60':139
'67.##1.11.51':139
'67.##1.135.142':139
'67.##1.32.35':139
'67.##1.189.193':139
'67.##1.60.197':139
'67.##1.143.229':139
'67.##1.26.164':139
'67.##1.104.156':139
'67.##1.2.136':139
'67.##1.215.2':139
'67.##1.154.245':139
'67.##1.114.230':445
'67.##1.97.163':139
'67.##1.123.13':139
'67.##1.22.217':139
'67.##1.30.221':139
'67.##1.225.100':139
'67.##1.114.26':139
'67.##1.96.203':139
'67.##1.29.243':139
'67.##1.113.27':139
'67.##1.175.22':139
'67.##1.183.174':139
'67.##1.4.184':139
'67.##1.159.228':139
'67.##1.102.177':139
'67.#31.35.0':139
'67.##1.25.15':139
'67.##1.63.254':139
'67.##1.252.190':139
'67.##1.71.179':139
'67.##1.213.194':139
'67.##1.221.19':139
'67.##1.168.11':139
'67.##1.57.128':139
'67.##1.169.157':139
'67.##1.218.32':445
'67.##1.210.80':445
'67.##1.187.235':445
'67.##1.100.14':139
'67.##1.198.65':445
'67.##1.111.220':445
'67.##1.63.254':445
'67.##1.252.190':445
'67.##1.159.228':445
'67.##1.170.46':445
'67.##1.103.85':445
'67.##1.25.15':445
'67.##1.200.88':139
'67.##1.253.4':139
'67.##1.124.32':139
'67.##1.82.84':139
'67.##1.213.177':139
'67.##1.10.238':139
'67.##1.8.229':139
'67.##1.190.150':139
'67.##1.100.237':139
'67.##1.224.137':139
'67.##1.18.157':139
'67.##1.10.226':139
'67.##1.45.62':9988
'67.##1.188.83':9988
'67.##1.98.203':9988
'67.##1.33.57':9988
'67.##1.170.38':9988
'67.##1.9.161':9988
'67.##1.189.193':9988
'67.##1.2.136':9988
'67.##1.143.229':9988
'67.##1.91.41':9988
'67.##1.14.75':9988
'67.##1.84.14':9988
'67.##1.15.63':445
'67.##1.31.191':445
'67.##1.100.192':9988
'67.##1.89.115':445
'67.#31.19.5':445
'67.##1.173.119':445
'67.##1.122.239':9988
'67.##1.106.74':9988
'67.##1.92.127':9988
'67.##1.27.101':9988
'67.##1.111.27':9988
'67.##1.88.197':9988
'67.##1.35.168':445
'67.##1.104.199':445
'67.##1.198.65':139
'67.#31.6.18':445
'67.##1.7.201':445
'67.##1.15.64':445
'67.##1.187.235':139
'67.##1.170.46':139
'67.##1.103.85':139
'67.##1.111.220':139
'67.##1.218.32':139
'67.##1.210.80':139
'67.##1.55.206':139
'67.##1.35.253':139
'67.#31.6.18':139
'67.##1.98.22':9988
'67.##1.228.221':9988
'67.##1.114.230':9988
'67.##1.104.199':139
'67.##1.55.206':445
'67.##1.35.253':445
'67.##1.7.201':139
'67.##1.15.64':139
'67.##1.35.168':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней