Trojan.Starman.5450

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'87.##.22.242':445
'87.##.184.44':445
'87.##.252.183':445
'87.##.248.201':445
'87.##.117.152':445
'87.##.221.90':445
'87.#0.57.13':445
'87.##.11.185':445
'87.##.253.105':445
'87.#0.7.244':445
'87.##.37.145':445
'87.#0.28.67':445
'87.#0.74.93':445
'87.##.224.39':139
'87.##.219.223':139
'87.##.57.235':445
'87.##.163.15':139
'87.##.191.195':139
'87.##.48.160':139
'87.#0.90.96':445
'87.#0.0.46':445
'87.##.109.202':445
'87.#0.33.59':445
'87.##.78.215':445
'87.##.206.179':445
'87.##.217.123':445
'87.##.172.106':445
'87.##.215.46':445
'87.##.99.196':445
'87.##.90.221':445
'87.##.113.44':445
'87.#0.1.63':445
'87.##.55.229':445
'87.#0.50.26':445
'87.##.94.123':445
'87.##.163.15':445
'87.##.153.37':445
'87.##.208.176':445
'87.##.141.45':445
'87.##.205.82':445
'87.#0.45.74':445
'87.##.187.46':445
'87.##.102.48':445
'87.##.20.104':445
'87.##.142.35':445
'87.##.175.186':445
'87.##.58.227':445
'87.##.231.139':445
'87.##.250.48':445
'87.##.247.175':445
'87.##.36.189':445
'87.##.188.246':445
'87.##.94.123':139
'87.##.117.152':139
'87.##.221.90':139
'87.##.22.242':139
'87.##.109.202':139
'87.#0.33.59':139
'87.##.248.201':139
'87.##.184.44':139
'87.#0.28.67':139
'87.#0.74.93':139
'87.##.11.185':139
'87.##.252.183':139
'87.#0.57.13':139
'87.##.37.145':139
'87.##.218.24':445
'87.##.228.217':445
'87.##.104.112':445
'87.##.106.87':445
'87.#0.13.61':445
'87.##.226.126':445
'87.##.164.183':445
'87.##.206.179':139
'87.##.217.123':139
'87.#0.0.46':139
'87.##.57.235':139
'87.#0.90.96':139
'87.##.78.215':139
'87.##.113.44':139
'87.#0.1.63':139
'87.##.172.106':139
'87.##.231.139':139
'87.##.250.48':139
'87.##.90.221':139
'87.##.215.46':139
'87.##.208.176':139
'87.##.141.45':139
'87.#0.50.26':139
'87.##.99.196':139
'87.##.55.229':139
'87.##.153.37':139
'87.##.20.104':139
'87.##.142.35':139
'87.##.205.82':139
'87.##.253.105':139
'87.#0.7.244':139
'87.##.102.48':139
'87.#0.45.74':139
'87.##.36.189':139
'87.##.188.246':139
'87.##.58.227':139
'87.##.187.46':139
'87.##.175.186':139
'87.##.247.175':139
'87.##.191.195':445
'87.##.216.187':445
'87.##.67.224':445
'87.##.49.228':445
'87.##.166.58':445
'87.##.211.103':445
'87.##.139.59':445
'87.##.149.90':445
'87.#0.71.35':445
'87.##.231.31':445
'87.##.115.134':445
'87.#0.2.178':445
'87.##.142.119':445
'87.##.197.142':445
'87.##.209.218':445
'87.##.127.24':445
'87.##.101.78':445
'87.##.146.72':139
'87.##.221.45':445
'87.##.37.174':445
'87.##.103.226':445
'87.##.208.152':445
'87.##.114.219':445
'87.##.75.136':445
'87.##.92.218':445
'87.##.155.92':445
'87.##.76.233':445
'87.##.60.227':445
'87.##.119.216':445
'87.##.76.121':445
'87.##.247.228':445
'87.##.182.238':445
'87.##.250.217':445
'87.##.52.184':445
'87.#0.49.51':445
'87.##.245.176':445
'87.##.146.72':445
'87.##.125.132':445
'87.##.157.215':445
'87.##.121.175':445
'87.#0.47.88':445
'87.##.205.55':445
'87.##.165.192':445
'87.##.192.191':445
'87.##.195.218':445
'87.##.38.178':445
'87.#0.141.3':445
'87.#0.118.5':445
'87.#0.95.44':445
'87.##.238.63':445
'87.##.217.10':445
'87.##.44.216':445
'87.##.116.65':445
'87.##.245.176':139
'87.##.211.103':139
'87.##.139.59':139
'87.##.216.187':139
'87.##.114.219':139
'87.##.75.136':139
'87.##.166.58':139
'87.##.67.224':139
'87.##.142.119':139
'87.##.197.142':139
'87.#0.71.35':139
'87.##.49.228':139
'87.##.149.90':139
'87.#0.2.178':139
'87.##.221.45':139
'87.##.37.174':139
'87.##.209.218':139
'87.##.48.160':445
'87.##.224.39':445
'87.##.219.223':445
'87.##.127.24':139
'87.##.155.92':139
'87.##.76.233':139
'87.##.208.152':139
'87.##.101.78':139
'87.##.103.226':139
'87.##.92.218':139
'87.##.182.238':139
'87.##.250.217':139
'87.##.60.227':139
'87.##.116.65':139
'87.##.238.63':139
'87.##.247.228':139
'87.##.119.216':139
'87.##.157.215':139
'87.##.121.175':139
'87.#0.49.51':139
'87.##.76.121':139
'87.##.52.184':139
'87.##.125.132':139
'87.##.195.218':139
'87.##.38.178':139
'87.#0.47.88':139
'87.##.231.31':139
'87.##.115.134':139
'87.##.192.191':139
'87.##.205.55':139
'87.##.44.216':139
'87.#0.95.44':139
'87.#0.118.5':139
'87.##.165.192':139
'87.#0.141.3':139
'87.##.217.10':139
'87.#0.62.40':445
'87.##.56.248':445
'87.##.148.33':445
'87.##.60.102':445
'87.#0.14.52':445
'87.#0.3.250':445
'87.##.46.121':445
'87.##.216.241':445
'87.#0.78.13':445
'87.##.247.52':445
'87.##.22.149':445
'87.##.162.164':445
'87.##.141.40':445
'87.##.210.174':445
'87.##.134.231':445
'87.#0.30.24':445
'87.##.249.218':445
'87.##.235.96':445
'87.##.35.194':445
'87.##.88.141':445
'87.#0.27.37':445
'87.##.246.231':445
'87.##.191.92':445
'87.##.41.101':445
'87.##.36.229':445
'87.##.210.77':445
'87.##.167.88':445
'87.##.74.222':445
'87.##.59.121':445
'87.##.58.193':445
'87.##.44.195':445
'87.##.144.45':445
'87.##.84.161':445
'87.##.235.96':9988
'87.#0.222.5':9988
'87.##.88.141':9988
'87.#0.15.76':445
'87.##.203.17':445
'87.#0.3.93':445
'87.##.10.148':445
'87.#0.80.40':445
'87.#0.86.80':445
'87.#0.85.18':445
'87.##.133.28':445
'87.#0.4.14':445
'87.#0.26.47':445
'87.##.191.42':445
'87.#0.3.194':445
'87.##.193.170':445
'87.##.154.175':445
'87.##.218.129':445
'87.##.189.82':445
'87.#0.222.5':445
'87.#0.14.52':139
'87.#0.3.250':139
'87.#0.62.40':139
'87.##.246.231':139
'87.##.191.92':139
'87.##.60.102':139
'87.##.56.248':139
'87.##.162.164':139
'87.##.141.40':139
'87.##.216.241':139
'87.##.148.33':139
'87.##.46.121':139
'87.##.22.149':139
'87.#0.222.5':139
'87.##.134.231':139
'87.##.210.174':139
'87.#0.30.24':139
'87.##.249.218':139
'87.##.128.119':139
'87.##.35.194':139
'87.##.210.77':139
'87.##.36.229':139
'87.#0.27.37':139
'87.##.235.96':139
'87.##.88.141':139
'87.##.41.101':139
'87.##.44.195':139
'87.##.144.45':139
'87.##.167.88':139
'87.##.193.170':139
'87.#0.3.194':139
'87.##.58.193':139
'87.##.74.222':139
'87.##.203.17':139
'87.#0.3.93':139
'87.##.128.119':445
'87.##.59.121':139
'87.##.84.161':139
'87.#0.15.76':139
'87.##.133.28':139
'87.#0.4.14':139
'87.##.10.148':139
'87.#0.78.13':139
'87.##.247.52':139
'87.#0.85.18':139
'87.#0.80.40':139
'87.##.218.129':139
'87.##.189.82':139
'87.##.191.42':139
'87.#0.86.80':139
'87.#0.26.47':139
'87.##.154.175':139
'87.##.246.231':9988
'87.##.204.103':445
'87.##.40.223':445
'87.##.136.162':445
'87.##.193.80':445
'87.##.55.158':445
'87.##.85.109':445
'87.##.71.250':445
'87.#0.130.0':445
'87.##.147.36':445
'87.##.49.119':445
'87.##.103.32':445
'87.##.126.151':445
'87.##.68.152':445
'87.##.226.126':139
'87.##.218.24':139
'87.##.228.217':139
'87.##.119.13':139
'87.##.106.87':139
'87.#0.13.61':139
'87.##.104.112':139
'87.##.60.235':445
'87.#0.67.36':445
'87.#0.90.46':445
'87.##.164.183':139
'87.##.145.95':445
'87.##.21.150':445
'87.##.98.152':445
'87.#0.72.51':445
'87.##.42.178':445
'87.#0.6.48':445
'87.##.194.121':445
'87.##.91.194':445
'87.#0.1.22':445
'87.##.62.233':445
'87.#0.8.106':445
'87.##.119.13':445
'87.#0.66.76':445
'87.##.105.250':445
'87.#0.57.8':445
'87.##.116.53':445
'87.##.193.248':445
'87.##.109.175':445
'87.##.242.190':445
'87.##.120.205':445
'87.##.230.171':445
'87.##.89.209':445
'87.#0.64.20':445
'87.##.173.250':445
'87.##.215.142':445
'87.##.237.89':445
'87.##.226.244':445
'87.##.182.47':445
'87.#0.8.106':139
'87.##.55.158':139
'87.##.85.109':139
'87.##.204.103':139
'87.#0.67.36':139
'87.#0.90.46':139
'87.##.193.80':139
'87.##.40.223':139
'87.##.126.151':139
'87.##.68.152':139
'87.#0.130.0':139
'87.##.136.162':139
'87.##.71.250':139
'87.##.103.32':139
'87.##.22.149':9988
'87.##.141.40':9988
'87.#0.78.13':9988
'87.#0.3.250':9988
'87.#0.62.40':9988
'87.##.148.33':9988
'87.##.247.52':9988
'87.##.145.95':139
'87.##.21.150':139
'87.##.60.235':139
'87.#0.4.14':9988
'87.#0.80.40':9988
'87.##.154.175':9988
'87.##.194.121':139
'87.##.91.194':139
'87.##.98.152':139
'87.##.173.250':139
'87.##.215.142':139
'87.#0.6.48':139
'87.#0.72.51':139
'87.##.105.250':139
'87.#0.57.8':139
'87.##.62.233':139
'87.##.42.178':139
'87.#0.1.22':139
'87.#0.66.76':139
'87.##.120.205':139
'87.##.230.171':139
'87.##.116.53':139
'87.##.147.36':139
'87.##.49.119':139
'87.##.242.190':139
'87.##.193.248':139
'87.##.226.244':139
'87.##.182.47':139
'87.#0.64.20':139
'87.##.109.175':139
'87.##.89.209':139
'87.##.237.89':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней