Trojan.Starman.5220

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Завершает или пытается завершить

следующие системные процессы:

<SYSTEM32>\svchost.exe

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'61.##3.24.236':445
'61.##3.103.192':445
'61.##3.105.160':445
'61.##3.33.175':445
'61.##3.0.112':445
'61.##3.137.50':445
'61.##3.31.96':445
'61.##3.255.51':445
'61.##3.79.103':445
'61.##3.42.185':445
'61.##3.66.231':445
'61.##3.78.135':445
'61.##3.25.196':445
'61.##3.159.90':445
'61.##3.187.23':445
'61.##3.126.51':445
'61.##3.123.237':445
'61.##3.104.251':445
'61.##3.18.36':445
'61.##3.250.172':445
'61.##3.8.189':445
'61.##3.60.209':445
'61.##3.134.39':445
'61.##3.71.252':139
'61.##3.22.76':445
'61.##3.58.58':445
'61.##3.240.57':445
'61.##3.101.72':139
'61.##3.210.47':139
'61.#43.6.56':139
'61.##3.143.253':139
'61.##3.34.159':139
'61.##3.135.57':139
'61.##3.15.113':139
'61.##3.58.15':139
'61.##3.102.185':445
'61.##3.20.169':445
'61.##3.47.252':445
'61.##3.58.58':139
'61.##3.15.113':445
'61.##3.58.15':445
'61.##3.134.39':139
'61.##3.240.57':139
'61.##3.22.76':139
'61.##3.219.244':445
'61.##3.24.236':139
'61.##3.103.192':139
'61.##3.105.160':139
'61.##3.33.175':139
'61.##3.0.112':139
'61.##3.137.50':139
'61.##3.31.96':139
'61.##3.255.51':139
'61.##3.79.103':139
'61.##3.42.185':139
'61.##3.66.231':139
'61.##3.78.135':139
'61.##3.25.196':139
'61.##3.159.90':139
'61.##3.187.23':139
'61.##3.126.51':139
'61.##3.123.237':139
'61.##3.104.251':139
'61.##3.18.36':139
'61.##3.250.172':139
'61.##3.8.189':139
'61.##3.60.209':139
'61.##3.161.96':445
'61.##3.104.12':445
'61.##3.38.226':445
'61.##3.19.46':445
'61.##3.40.35':445
'61.##3.41.79':445
'61.##3.89.116':445
'61.##3.244.54':445
'61.##3.127.117':445
'61.##3.67.64':445
'61.##3.117.43':445
'61.##3.238.82':445
'61.##3.156.237':445
'61.##3.102.185':139
'61.##3.20.169':139
'61.##3.47.252':139
'61.##3.246.156':445
'61.##3.29.127':445
'61.##3.82.70':445
'61.##3.191.193':445
'61.##3.22.166':445
'61.##3.159.145':445
'61.##3.75.38':445
'61.##3.104.233':445
'61.##3.235.107':445
'61.##3.42.212':445
'61.##3.167.58':445
'61.##3.130.170':445
'61.#43.86.9':445
'61.##3.114.171':445
'61.##3.49.58':445
'61.##3.3.249':445
'61.##3.158.235':445
'61.##3.24.190':445
'61.##3.68.170':445
'61.##3.203.124':445
'61.##3.112.189':445
'61.##3.216.142':445
'61.##3.22.106':445
'61.##3.208.42':445
'61.##3.57.232':445
'61.##3.129.90':445
'61.##3.36.199':445
'61.##3.94.19':445
'61.##3.15.110':445
'61.##3.130.27':445
'61.##3.109.232':445
'61.##3.137.177':445
'61.##3.161.212':445
'61.##3.117.39':139
'61.##3.156.105':139
'61.##3.86.101':139
'61.##3.105.193':139
'61.##3.2.109':139
'61.##3.193.19':139
'61.##3.210.60':445
'61.##3.135.209':445
'61.##3.213.62':445
'61.##3.91.237':445
'61.##3.23.103':445
'61.##3.181.163':445
'61.##3.154.48':445
'61.##3.206.146':445
'61.##3.149.187':445
'61.##3.130.199':445
'61.##3.253.235':445
'61.#43.6.56':445
'61.##3.75.38':139
'61.##3.104.233':139
'61.##3.235.107':139
'61.##3.42.212':139
'61.##3.167.58':139
'61.##3.130.170':139
'61.#43.86.9':139
'61.##3.114.171':139
'61.##3.49.58':139
'61.##3.3.249':139
'61.##3.158.235':139
'61.##3.24.190':139
'61.##3.68.170':139
'61.##3.203.124':139
'61.##3.112.189':139
'61.##3.216.142':139
'61.##3.22.106':139
'61.##3.208.42':139
'61.##3.57.232':139
'61.##3.129.90':139
'61.##3.36.199':139
'61.##3.94.19':139
'61.##3.15.110':139
'61.##3.130.27':139
'61.##3.109.232':139
'61.##3.137.177':139
'61.##3.161.212':139
'61.##3.71.252':445
'61.##3.143.253':445
'61.##3.210.47':445
'61.##3.135.57':445
'61.##3.101.72':445
'61.##3.34.159':445
'61.##3.210.60':139
'61.##3.135.209':139
'61.##3.213.62':139
'61.##3.91.237':139
'61.##3.23.103':139
'61.##3.181.163':139
'61.##3.154.48':139
'61.##3.206.146':139
'61.##3.149.187':139
'61.##3.130.199':139
'61.##3.253.235':139
'61.##3.219.244':139
'61.##3.158.242':445
'61.##3.18.198':445
'61.##3.171.148':445
'61.##3.248.178':445
'61.##3.144.42':445
'61.##3.127.18':445
'61.##3.108.99':445
'61.##3.23.164':445
'61.##3.96.130':445
'61.##3.217.171':445
'61.##3.228.217':445
'61.##3.52.127':139
'61.##3.46.128':139
'61.##3.219.69':139
'61.##3.147.141':139
'61.##3.214.148':139
'61.##3.167.46':139
'61.##3.218.198':445
'61.##3.216.177':445
'61.##3.5.203':445
'61.##3.13.236':445
'61.##3.83.175':445
'61.##3.246.62':445
'61.##3.169.245':445
'61.##3.63.246':445
'61.##3.207.178':445
'61.##3.231.89':445
'61.##3.118.58':445
'61.##3.156.58':445
'61.##3.71.168':445
'61.##3.2.146':445
'61.#43.3.36':445
'61.##3.56.180':445
'61.##3.139.100':445
'61.##3.108.238':445
'61.##3.106.76':445
'61.##3.17.244':445
'61.##3.52.56':445
'61.##3.183.71':445
'61.##3.176.96':445
'61.##3.164.217':445
'61.##3.184.88':445
'61.##3.172.60':445
'61.##3.52.174':445
'61.##3.41.186':139
'61.##3.108.99':139
'61.##3.23.164':139
'61.##3.96.130':139
'61.##3.217.171':139
'61.##3.228.217':139
'61.##3.17.244':139
'61.##3.108.238':139
'61.##3.183.71':139
'61.##3.139.100':139
'61.##3.52.56':139
'61.##3.106.76':139
'61.##3.5.203':139
'61.##3.216.177':139
'61.##3.218.198':139
'61.##3.13.236':139
'61.##3.83.175':139
'61.##3.248.178':139
'61.##3.18.198':139
'61.##3.127.18':139
'61.##3.158.242':139
'61.##3.144.42':139
'61.##3.171.148':139
'61.##3.156.58':139
'61.##3.71.168':139
'61.##3.2.146':139
'61.#43.3.36':139
'61.##3.56.180':139
'61.##3.99.124':139
'61.##3.223.222':139
'61.##3.217.84':139
'61.##3.229.173':139
'61.##3.140.145':139
'61.##3.45.214':139
'61.##3.176.96':139
'61.##3.164.217':139
'61.##3.184.88':139
'61.##3.172.60':139
'61.##3.52.174':139
'61.##3.207.178':139
'61.##3.169.245':139
'61.##3.118.58':139
'61.##3.246.62':139
'61.##3.231.89':139
'61.##3.63.246':139
'61.##3.210.147':139
'61.##3.22.162':139
'61.##3.194.173':139
'61.##3.185.195':445
'61.##3.41.185':445
'61.##3.179.217':139
'61.##3.210.147':445
'61.##3.22.162':445
'61.##3.194.173':445
'61.##3.204.58':139
'61.##3.82.138':139
'61.##3.62.150':445
'61.##3.83.199':445
'61.##3.208.23':445
'61.#43.62.9':445
'61.##3.22.249':445
'61.##3.27.89':445
'61.##3.41.102':445
'61.##3.20.235':445
'61.##3.12.124':445
'61.##3.131.50':445
'61.##3.12.47':445
'61.##3.161.96':139
'61.##3.104.12':139
'61.##3.38.226':139
'61.##3.19.46':139
'61.##3.40.35':139
'61.##3.41.79':139
'61.##3.89.116':139
'61.##3.244.54':139
'61.##3.127.117':139
'61.##3.67.64':139
'61.##3.117.43':139
'61.##3.238.82':139
'61.##3.156.237':139
'61.##3.82.138':445
'61.##3.179.217':445
'61.##3.204.58':445
'61.##3.246.156':139
'61.##3.29.127':139
'61.##3.82.70':139
'61.##3.191.193':139
'61.##3.22.166':139
'61.##3.159.145':139
'61.##3.183.222':445
'61.##3.216.177':9988
'61.##3.18.198':9988
'61.##3.5.203':9988
'61.##3.46.128':445
'61.##3.167.46':445
'61.##3.108.99':9988
'61.##3.217.171':9988
'61.##3.158.242':9988
'61.##3.13.236':9988
'61.##3.52.56':9988
'61.##3.171.148':9988
'61.##3.229.173':445
'61.##3.223.222':445
'61.##3.45.214':445
'61.##3.99.124':445
'61.##3.140.145':445
'61.##3.217.84':445
'61.##3.219.69':445
'61.##3.52.127':445
'61.##3.214.148':445
'61.##3.41.186':445
'61.##3.147.141':445
'61.##3.131.50':139
'61.##3.12.47':139
'61.##3.27.89':139
'61.##3.62.150':139
'61.##3.83.199':139
'61.##3.12.124':139
'61.##3.41.185':139
'61.##3.151.166':445
'61.##3.185.195':139
'61.##3.41.102':139
'61.##3.20.235':139
'61.##3.96.130':9988
'61.##3.248.178':9988
'61.##3.228.217':9988
'61.##3.218.198':9988
'61.##3.106.76':9988
'61.##3.127.18':9988
'61.##3.22.249':139
'61.##3.208.23':139
'61.#43.62.9':139
'61.##3.151.166':139
'61.##3.183.222':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней