Trojan.Starman.5419

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'88.##1.204.194':445
'88.##1.35.78':445
'88.#21.2.59':445
'88.##1.100.202':445
'88.##1.59.100':445
'88.##1.232.35':445
'88.##1.107.43':445
'88.##1.52.23':445
'88.##1.248.202':445
'88.##1.6.105':445
'88.##1.155.165':445
'88.##1.217.178':445
'88.##1.84.35':445
'88.##1.178.90':445
'88.##1.176.253':445
'88.##1.91.28':445
'88.##1.217.73':445
'88.##1.180.111':445
'88.##1.135.166':445
'88.##1.139.128':445
'88.##1.59.184':445
'88.##1.198.62':445
'88.##1.215.44':445
'88.##1.33.215':139
'88.##1.191.252':445
'88.##1.135.144':445
'88.##1.109.100':445
'88.##1.24.183':139
'88.##1.207.135':139
'88.##1.30.207':139
'88.##1.136.26':139
'88.##1.134.104':139
'88.##1.99.221':139
'88.##1.14.101':139
'88.##1.227.187':139
'88.##1.223.183':445
'88.##1.200.57':445
'88.#21.5.58':445
'88.##1.135.144':139
'88.##1.14.101':445
'88.##1.227.187':445
'88.##1.215.44':139
'88.##1.109.100':139
'88.##1.191.252':139
'88.##1.92.83':445
'88.##1.204.194':139
'88.##1.35.78':139
'88.#21.2.59':139
'88.##1.100.202':139
'88.##1.59.100':139
'88.##1.232.35':139
'88.##1.107.43':139
'88.##1.52.23':139
'88.##1.248.202':139
'88.##1.6.105':139
'88.##1.155.165':139
'88.##1.217.178':139
'88.##1.84.35':139
'88.##1.178.90':139
'88.##1.176.253':139
'88.##1.91.28':139
'88.##1.217.73':139
'88.##1.180.111':139
'88.##1.135.166':139
'88.##1.139.128':139
'88.##1.59.184':139
'88.##1.198.62':139
'88.##1.136.187':445
'88.##1.115.54':445
'88.##1.196.117':445
'88.##1.220.15':445
'88.##1.50.189':445
'88.#21.52.1':445
'88.##1.50.226':445
'88.##1.249.151':445
'88.##1.24.103':445
'88.##1.209.42':445
'88.##1.62.103':445
'88.##1.117.126':445
'88.##1.33.217':445
'88.##1.223.183':139
'88.##1.200.57':139
'88.#21.5.58':139
'88.##1.15.236':445
'88.##1.70.88':445
'88.##1.230.70':445
'88.##1.66.247':445
'88.##1.233.86':445
'88.##1.45.169':445
'88.##1.184.96':445
'88.##1.143.52':445
'88.##1.158.80':445
'88.##1.52.29':445
'88.##1.80.219':445
'88.##1.86.130':445
'88.##1.90.123':445
'88.##1.183.231':445
'88.##1.195.3':445
'88.##1.127.39':445
'88.##1.3.127':445
'88.##1.81.163':445
'88.##1.169.193':445
'88.##1.55.66':445
'88.##1.107.60':445
'88.##1.140.94':445
'88.##1.74.25':445
'88.##1.134.230':445
'88.##1.248.153':445
'88.##1.45.174':445
'88.##1.110.124':445
'88.##1.58.16':445
'88.##1.241.226':445
'88.##1.105.35':445
'88.##1.78.81':445
'88.##1.226.33':445
'88.##1.251.183':445
'88.##1.94.86':139
'88.##1.70.126':139
'88.##1.47.62':139
'88.##1.135.138':139
'88.##1.149.249':139
'88.##1.110.245':139
'88.##1.7.243':445
'88.##1.69.193':445
'88.##1.138.147':445
'88.##1.250.200':445
'88.##1.226.12':445
'88.##1.152.42':445
'88.##1.17.250':445
'88.##1.207.17':445
'88.##1.249.183':445
'88.##1.74.136':445
'88.##1.184.133':445
'88.##1.30.207':445
'88.##1.184.96':139
'88.##1.143.52':139
'88.##1.158.80':139
'88.##1.52.29':139
'88.##1.80.219':139
'88.##1.86.130':139
'88.##1.90.123':139
'88.##1.183.231':139
'88.##1.195.3':139
'88.##1.127.39':139
'88.##1.3.127':139
'88.##1.81.163':139
'88.##1.169.193':139
'88.##1.55.66':139
'88.##1.107.60':139
'88.##1.140.94':139
'88.##1.74.25':139
'88.##1.134.230':139
'88.##1.248.153':139
'88.##1.45.174':139
'88.##1.110.124':139
'88.##1.58.16':139
'88.##1.241.226':139
'88.##1.105.35':139
'88.##1.78.81':139
'88.##1.226.33':139
'88.##1.251.183':139
'88.##1.33.215':445
'88.##1.136.26':445
'88.##1.207.135':445
'88.##1.99.221':445
'88.##1.24.183':445
'88.##1.134.104':445
'88.##1.7.243':139
'88.##1.69.193':139
'88.##1.138.147':139
'88.##1.250.200':139
'88.##1.226.12':139
'88.##1.152.42':139
'88.##1.17.250':139
'88.##1.207.17':139
'88.##1.249.183':139
'88.##1.74.136':139
'88.##1.184.133':139
'88.##1.92.83':139
'88.##1.50.46':445
'88.##1.117.49':445
'88.##1.63.54':445
'88.##1.46.51':445
'88.##1.177.45':445
'88.##1.76.117':445
'88.##1.26.137':445
'88.##1.117.244':445
'88.##1.13.91':445
'88.##1.237.148':445
'88.##1.118.72':445
'88.##1.56.168':139
'88.##1.59.151':139
'88.##1.226.199':139
'88.##1.0.225':139
'88.##1.59.93':139
'88.##1.3.242':139
'88.##1.118.73':445
'88.##1.50.220':445
'88.##1.189.90':445
'88.##1.142.187':445
'88.##1.214.125':445
'88.##1.17.252':445
'88.##1.75.252':445
'88.##1.10.159':445
'88.##1.70.217':445
'88.##1.90.199':445
'88.##1.239.214':445
'88.##1.230.144':445
'88.##1.228.165':445
'88.##1.132.3':445
'88.##1.215.239':445
'88.##1.3.216':445
'88.##1.230.28':445
'88.##1.149.229':445
'88.##1.28.183':445
'88.##1.117.118':445
'88.##1.183.116':445
'88.##1.0.210':445
'88.##1.150.202':445
'88.##1.195.225':445
'88.##1.203.28':445
'88.##1.65.125':445
'88.##1.104.50':445
'88.##1.115.40':139
'88.##1.26.137':139
'88.##1.117.244':139
'88.##1.13.91':139
'88.##1.237.148':139
'88.##1.118.72':139
'88.##1.117.118':139
'88.##1.149.229':139
'88.##1.0.210':139
'88.##1.230.28':139
'88.##1.183.116':139
'88.##1.28.183':139
'88.##1.189.90':139
'88.##1.50.220':139
'88.##1.118.73':139
'88.##1.214.125':139
'88.##1.142.187':139
'88.##1.46.51':139
'88.##1.117.49':139
'88.##1.76.117':139
'88.##1.50.46':139
'88.##1.177.45':139
'88.##1.63.54':139
'88.##1.230.144':139
'88.##1.228.165':139
'88.##1.132.3':139
'88.##1.215.239':139
'88.##1.3.216':139
'88.##1.228.175':139
'88.##1.115.12':139
'88.##1.207.210':139
'88.##1.51.106':139
'88.#21.7.49':139
'88.##1.174.84':139
'88.##1.150.202':139
'88.##1.195.225':139
'88.##1.203.28':139
'88.##1.65.125':139
'88.##1.104.50':139
'88.##1.70.217':139
'88.##1.75.252':139
'88.##1.239.214':139
'88.##1.17.252':139
'88.##1.90.199':139
'88.##1.10.159':139
'88.##1.24.138':139
'88.##1.222.237':139
'88.##1.171.40':139
'88.##1.224.185':445
'88.##1.98.132':445
'88.##1.57.157':139
'88.##1.24.138':445
'88.##1.222.237':445
'88.##1.171.40':445
'88.##1.206.118':139
'88.##1.40.108':139
'88.##1.196.1':445
'88.##1.38.158':445
'88.##1.221.41':445
'88.##1.20.161':445
'88.##1.64.159':445
'88.##1.49.76':445
'88.##1.20.193':445
'88.##1.200.224':445
'88.##1.71.154':445
'88.#21.3.85':445
'88.##1.66.224':445
'88.##1.136.187':139
'88.##1.115.54':139
'88.##1.196.117':139
'88.##1.220.15':139
'88.##1.50.189':139
'88.#21.52.1':139
'88.##1.50.226':139
'88.##1.249.151':139
'88.##1.24.103':139
'88.##1.209.42':139
'88.##1.62.103':139
'88.##1.117.126':139
'88.##1.33.217':139
'88.##1.40.108':445
'88.##1.57.157':445
'88.##1.206.118':445
'88.##1.15.236':139
'88.##1.70.88':139
'88.##1.230.70':139
'88.##1.66.247':139
'88.##1.233.86':139
'88.##1.45.169':139
'88.##1.14.108':445
'88.##1.117.118':9988
'88.##1.214.125':9988
'88.##1.183.116':9988
'88.##1.59.151':445
'88.##1.3.242':445
'88.##1.28.183':9988
'88.##1.46.51':9988
'88.##1.50.46':9988
'88.##1.177.45':9988
'88.##1.26.137':9988
'88.##1.13.91':9988
'88.##1.51.106':445
'88.##1.115.12':445
'88.##1.174.84':445
'88.##1.228.175':445
'88.#21.7.49':445
'88.##1.207.210':445
'88.##1.226.199':445
'88.##1.56.168':445
'88.##1.59.93':445
'88.##1.115.40':445
'88.##1.0.225':445
'88.#21.3.85':139
'88.##1.66.224':139
'88.##1.49.76':139
'88.##1.196.1':139
'88.##1.38.158':139
'88.##1.71.154':139
'88.##1.98.132':139
'88.##1.212.48':445
'88.##1.224.185':139
'88.##1.20.193':139
'88.##1.200.224':139
'88.##1.230.28':9988
'88.##1.63.54':9988
'88.##1.117.244':9988
'88.##1.237.148':9988
'88.##1.117.49':9988
'88.##1.118.73':9988
'88.##1.64.159':139
'88.##1.221.41':139
'88.##1.20.161':139
'88.##1.212.48':139
'88.##1.14.108':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней