Trojan.Starman.5259

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Завершает или пытается завершить

следующие системные процессы:

<SYSTEM32>\svchost.exe

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#43.90.236':139
'22#.#43.41.163':445
'22#.#43.3.233':139
'22#.#43.236.154':139
'22#.#43.39.16':445
'22#.#43.2.109':445
'22#.#43.216.1':445
'22#.#43.82.124':445
'22#.#43.87.174':445
'22#.#43.220.27':139
'22#.#43.186.131':139
'22#.#43.144.126':139
'22#.#43.237.90':139
'22#.#43.75.234':139
'22#.#43.173.22':139
'22#.#43.25.98':139
'22#.#43.59.107':139
'22#.#43.51.240':139
'22#.#43.39.226':139
'22#.#43.41.179':445
'22#.#43.125.231':445
'22#.#43.84.164':445
'22#.#43.186.181':445
'22#.#43.35.58':445
'22#.#43.174.169':445
'22#.#43.7.127':445
'22#.#43.4.224':445
'22#.#43.44.12':445
'22#.#43.164.126':445
'22#.#43.255.228':445
'22#.#43.73.229':445
'22#.#43.121.133':445
'22#.#43.229.60':445
'22#.#43.36.176':445
'22#.#43.42.34':445
'22#.#43.197.216':445
'22#.#43.76.132':445
'22#.#43.34.212':445
'22#.#43.91.25':139
'22#.#43.76.132':139
'22#.#43.34.212':139
'22#.#43.73.229':139
'22#.#43.36.176':139
'22#.#43.42.34':139
'22#.#43.84.164':139
'22#.#43.186.181':139
'22#.#43.197.216':139
'22#.#43.164.126':139
'22#.#43.255.228':139
'22#.#43.39.16':139
'22#.#43.82.124':139
'22#.#43.190.70':445
'22#.#43.41.163':139
'22#.#43.87.174':139
'22#.#43.121.133':139
'22#.#43.229.60':139
'22#.#43.2.109':139
'22#.#43.216.1':139
'22#.#43.121.150':139
'22#.#43.221.103':139
'22#.#43.214.64':139
'22#.#43.20.5':139
'22#.#43.96.179':139
'22#.#43.149.106':139
'22#.#43.92.90':139
'22#.#43.236.116':139
'22#.#43.236.76':139
'22#.#43.158.190':139
'22#.#43.35.58':139
'22#.#43.4.224':139
'22#.#43.41.179':139
'22#.#43.125.231':139
'22#.#43.44.12':139
'22#.#43.80.168':139
'22#.#43.40.91':139
'22#.#43.174.169':139
'22#.#43.7.127':139
'22#.#43.13.190':139
'22#.#43.0.239':139
'22#.#43.94.250':139
'22#.#43.45.248':139
'22#.#43.214.191':139
'22#.#43.8.231':139
'22#.#43.199.101':139
'22#.#43.36.215':139
'22#.#43.27.37':139
'22#.#43.5.237':139
'22#.#43.64.27':139
'22#.#43.163.204':139
'22#.#43.233.54':139
'22#.#43.251.224':139
'22#.#43.39.30':139
'22#.#43.4.150':139
'22#.#43.211.190':139
'22#.#43.95.121':139
'22#.#43.233.95':139
'22#.#43.147.232':139
'22#.#43.80.40':139
'22#.#43.156.141':139
'22#.#43.232.197':139
'22#.#43.138.67':139
'22#.#43.88.193':139
'22#.#43.37.55':139
'22#.#43.173.99':139
'22#.#43.224.94':139
'22#.#43.189.126':139
'22#.#43.187.71':139
'22#.#43.51.175':139
'22#.#43.219.6':139
'22#.#43.193.136':139
'22#.#43.0.45':139
'22#.#43.156.48':139
'22#.#43.22.20':139
'22#.#43.219.27':139
'22#.#43.35.190':139
'22#.#43.178.15':139
'22#.#43.91.25':445
'22#.#43.237.90':445
'22#.#43.149.106':445
'22#.#43.92.90':445
'22#.#43.75.234':445
'22#.#43.173.22':445
'22#.#43.51.240':445
'22#.#43.186.131':445
'22#.#43.144.126':445
'22#.#43.236.76':445
'22#.#43.158.190':445
'22#.#43.214.64':445
'22#.#43.80.168':445
'22#.#43.40.91':445
'22#.#43.20.5':445
'22#.#43.96.179':445
'22#.#43.236.116':445
'22#.#43.121.150':445
'22#.#43.221.103':445
'22#.#43.109.144':139
'22#.#43.244.108':139
'22#.#43.18.211':139
'22#.#43.84.9':139
'22#.#43.41.25':139
'22#.#43.5.241':139
'22#.#43.238.233':139
'22#.#43.185.39':139
'22#.#43.137.98':139
'22#.#43.211.157':139
'22#.#43.59.107':445
'22#.#43.220.27':445
'22#.#43.39.226':445
'22#.#43.25.98':445
'22#.#43.3.233':445
'22#.#43.203.246':139
'22#.#43.157.40':139
'22#.#43.236.154':445
'22#.#43.90.236':445
'22#.#43.44.169':445
'22#.#43.127.148':445
'22#.#43.149.25':445
'22#.#43.10.59':139
'22#.#43.46.238':139
'22#.#43.39.17':445
'22#.#43.146.34':445
'22#.#43.202.145':445
'22#.#43.173.70':445
'22#.#43.119.246':445
'22#.#43.58.57':139
'22#.#43.51.142':139
'22#.#43.175.172':139
'22#.#43.166.132':139
'22#.#43.73.66':139
'22#.#43.103.175':139
'22#.#43.174.123':139
'22#.#43.56.174':139
'22#.#43.211.206':139
'22#.#43.137.161':139
'22#.#43.25.195':445
'22#.#43.243.156':445
'22#.#43.57.130':445
'22#.#43.22.159':445
'22#.#43.45.243':445
'22#.#43.213.92':445
'22#.#43.61.190':445
'22#.#43.163.207':445
'22#.#43.92.252':445
'22#.#43.60.76':445
'22#.#43.193.32':445
'22#.#43.135.193':445
'22#.#43.30.26':445
'22#.#43.33.8':445
'22#.#43.44.135':445
'22#.#43.135.226':445
'22#.#43.78.247':445
'22#.#43.65.55':445
'22#.#43.30.250':445
'22#.#43.237.166':139
'22#.#43.65.55':139
'22#.#43.30.250':139
'22#.#43.135.193':139
'22#.#43.44.135':139
'22#.#43.135.226':139
'22#.#43.57.130':139
'22#.#43.22.159':139
'22#.#43.78.247':139
'22#.#43.60.76':139
'22#.#43.193.32':139
'22#.#43.39.17':139
'22#.#43.173.70':139
'22#.#43.149.25':139
'22#.#43.127.148':139
'22#.#43.119.246':139
'22#.#43.30.26':139
'22#.#43.33.8':139
'22#.#43.146.34':139
'22#.#43.202.145':139
'22#.#43.154.211':139
'22#.#43.158.234':139
'22#.#43.7.158':139
'22#.#43.75.240':139
'22#.#43.82.2':139
'22#.#43.61.106':139
'22#.#43.72.167':139
'22#.#43.200.204':139
'22#.#43.174.85':139
'22#.#43.94.249':139
'22#.#43.45.243':139
'22#.#43.163.207':139
'22#.#43.25.195':139
'22#.#43.243.156':139
'22#.#43.92.252':139
'22#.#43.14.204':139
'22#.#43.90.145':139
'22#.#43.213.92':139
'22#.#43.61.190':139
'22#.#43.105.183':139
'22#.#43.27.98':139
'22#.#43.74.15':139
'22#.#43.65.71':139
'22#.#43.216.218':139
'22#.#43.29.36':139
'22#.#43.254.84':139
'22#.#43.152.9':139
'22#.#43.35.152':139
'22#.#43.237.74':139
'22#.#43.4.218':139
'22#.#43.35.45':139
'22#.#43.213.92':9988
'22#.#43.75.240':9988
'22#.#43.19.237':139
'22#.#43.83.218':139
'22#.#43.172.35':139
'22#.#43.57.139':139
'22#.#43.38.14':139
'22#.#43.105.183':445
'22#.#43.27.98':445
'22#.#43.74.15':445
'22#.#43.65.71':445
'22#.#43.216.218':445
'22#.#43.29.36':445
'22#.#43.254.84':445
'22#.#43.152.9':445
'22#.#43.35.152':445
'22#.#43.237.74':445
'22#.#43.4.218':445
'22#.#43.35.45':445
'22#.#43.44.169':139
'22#.#43.190.70':139
'22#.#43.19.237':445
'22#.#43.83.218':445
'22#.#43.172.35':445
'22#.#43.57.139':445
'22#.#43.38.14':445
'22#.#43.158.234':9988
'22#.#43.237.166':445
'22#.#43.166.132':445
'22#.#43.61.106':445
'22#.#43.72.167':445
'22#.#43.73.66':445
'22#.#43.103.175':445
'22#.#43.211.206':445
'22#.#43.51.142':445
'22#.#43.175.172':445
'22#.#43.174.85':445
'22#.#43.94.249':445
'22#.#43.7.158':445
'22#.#43.14.204':445
'22#.#43.90.145':445
'22#.#43.75.240':445
'22#.#43.82.2':445
'22#.#43.200.204':445
'22#.#43.154.211':445
'22#.#43.158.234':445
'22#.#43.60.76':9988
'22#.#43.57.130':9988
'22#.#43.135.226':9988
'22#.#43.78.247':9988
'22#.#43.45.243':9988
'22#.#43.154.211':9988
'22#.#43.90.145':9988
'22#.#43.163.207':9988
'22#.#43.7.158':9988
'22#.#43.30.250':9988
'22#.#43.56.174':445
'22#.#43.58.57':445
'22#.#43.137.161':445
'22#.#43.174.123':445
'22#.#43.10.59':445
'22#.#43.127.148':9988
'22#.#43.33.8':9988
'22#.#43.46.238':445
'22#.#43.149.25':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней