Trojan.Starman.5446

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#64.179.109':445
'19#.#64.254.179':445
'19#.#64.109.57':445
'19#.#64.136.106':445
'19#.#64.119.19':445
'19#.#64.110.126':139
'19#.#64.98.96':139
'19#.#64.32.196':139
'19#.#64.107.45':445
'19#.#64.133.28':139
'19#.#64.195.235':445
'19#.#64.76.113':445
'19#.#64.186.140':445
'19#.#64.191.243':445
'19#.#64.166.120':445
'19#.#64.147.182':445
'19#.#64.208.192':445
'19#.#64.8.41':445
'19#.#64.72.43':445
'19#.#64.105.230':445
'19#.#64.211.202':139
'19#.#64.180.222':139
'19#.#64.148.164':139
'19#.#64.71.74':139
'19#.#64.76.165':139
'19#.#64.0.154':139
'19#.#64.99.251':139
'19#.#64.25.209':139
'19#.#64.12.241':139
'19#.#64.175.4':139
'19#.#64.111.254':139
'19#.#64.32.196':445
'19#.#64.110.126':445
'19#.#64.133.28':445
'19#.#64.118.130':139
'19#.#64.119.216':139
'19#.#64.119.216':445
'19#.#64.176.219':139
'19#.#64.118.130':445
'19#.#64.98.96':445
'19#.#64.211.202':445
'19#.#64.97.76':445
'19#.#64.107.45':139
'19#.#64.52.31':445
'19#.#64.254.179':139
'19#.#64.109.57':139
'19#.#64.179.109':139
'19#.#64.24.58':445
'19#.#64.109.120':445
'19#.#64.140.145':445
'19#.#64.96.111':445
'19#.#64.86.100':445
'19#.#64.72.43':139
'19#.#64.105.230':139
'19#.#64.76.113':139
'19#.#64.186.140':139
'19#.#64.195.235':139
'19#.#64.136.106':139
'19#.#64.119.19':139
'19#.#64.208.192':139
'19#.#64.8.41':139
'19#.#64.147.182':139
'19#.#64.139.120':445
'19#.#64.192.137':445
'19#.#64.6.56':445
'19#.#64.238.169':445
'19#.#64.129.203':445
'19#.#64.170.101':445
'19#.#64.41.192':445
'19#.#64.68.43':445
'19#.#64.217.64':445
'19#.#64.137.246':445
'19#.#64.101.6':445
'19#.#64.31.156':445
'19#.#64.196.22':445
'19#.#64.2.88':445
'19#.#64.4.107':445
'19#.#64.93.4':445
'19#.#64.182.176':445
'19#.#64.5.157':445
'19#.#64.192.2':445
'19#.#64.63.3':445
'19#.#64.252.62':445
'19#.#64.235.196':139
'19#.#64.29.178':445
'19#.#64.133.245':445
'19#.#64.203.130':445
'19#.#64.12.29':445
'19#.#64.236.158':445
'19#.#64.121.0':445
'19#.#64.20.39':445
'19#.#64.106.32':445
'19#.#64.97.139':445
'19#.#64.14.3':445
'19#.#64.135.213':445
'19#.#64.219.22':445
'19#.#64.87.236':445
'19#.#64.25.209':445
'19#.#64.235.196':445
'19#.#64.39.187':445
'19#.#64.7.35':445
'19#.#64.53.40':445
'19#.#64.119.176':445
'19#.#64.56.72':445
'19#.#64.253.248':445
'19#.#64.202.24':139
'19#.#64.5.167':139
'19#.#64.226.75':445
'19#.#64.116.202':445
'19#.#64.113.0':445
'19#.#64.165.190':139
'19#.#64.86.208':139
'19#.#64.3.232':139
'19#.#64.7.17':139
'19#.#64.39.128':139
'19#.#64.33.62':445
'19#.#64.57.226':445
'19#.#64.206.54':445
'19#.#64.129.243':445
'19#.#64.249.32':445
'19#.#64.84.99':445
'19#.#64.183.145':445
'19#.#64.172.42':445
'19#.#64.42.91':445
'19#.#64.24.68':445
'19#.#64.99.251':445
'19#.#64.97.139':139
'19#.#64.14.3':139
'19#.#64.133.245':139
'19#.#64.203.130':139
'19#.#64.29.178':139
'19#.#64.253.248':139
'19#.#64.129.243':139
'19#.#64.20.39':139
'19#.#64.106.32':139
'19#.#64.121.0':139
'19#.#64.119.176':139
'19#.#64.56.72':139
'19#.#64.219.22':139
'19#.#64.87.236':139
'19#.#64.135.213':139
'19#.#64.12.29':139
'19#.#64.236.158':139
'19#.#64.7.35':139
'19#.#64.53.40':139
'19#.#64.39.187':139
'19#.#64.249.32':139
'19#.#64.0.154':445
'19#.#64.71.74':445
'19#.#64.76.165':445
'19#.#64.226.75':139
'19#.#64.176.219':445
'19#.#64.111.254':445
'19#.#64.12.241':445
'19#.#64.175.4':445
'19#.#64.180.222':445
'19#.#64.148.164':445
'19#.#64.42.91':139
'19#.#64.24.68':139
'19#.#64.57.226':139
'19#.#64.206.54':139
'19#.#64.33.62':139
'19#.#64.116.202':139
'19#.#64.113.0':139
'19#.#64.183.145':139
'19#.#64.172.42':139
'19#.#64.84.99':139
'19#.#64.166.120':139
'19#.#64.172.173':445
'19#.#64.71.78':445
'19#.#64.229.112':445
'19#.#64.229.177':445
'19#.#64.112.229':445
'19#.#64.187.96':445
'19#.#64.192.85':445
'19#.#64.86.64':445
'19#.#64.11.18':445
'19#.#64.79.177':445
'19#.#64.239.167':139
'19#.#64.79.153':139
'19#.#64.186.56':139
'19#.#64.227.129':139
'19#.#64.11.13':139
'19#.#64.92.98':139
'19#.#64.38.193':445
'19#.#64.160.121':139
'19#.#64.21.64':139
'19#.#64.165.150':139
'19#.#64.65.92':445
'19#.#64.133.148':445
'19#.#64.182.70':445
'19#.#64.78.103':445
'19#.#64.165.32':445
'19#.#64.147.113':445
'19#.#64.245.243':445
'19#.#64.94.58':445
'19#.#64.159.10':445
'19#.#64.20.25':445
'19#.#64.196.225':445
'19#.#64.120.142':445
'19#.#64.218.119':445
'19#.#64.147.158':445
'19#.#64.234.37':445
'19#.#64.60.187':445
'19#.#64.211.149':445
'19#.#64.132.63':445
'19#.#64.0.152':445
'19#.#64.182.218':445
'19#.#64.201.182':445
'19#.#64.223.224':139
'19#.#64.60.187':139
'19#.#64.147.158':139
'19#.#64.234.37':139
'19#.#64.192.85':139
'19#.#64.65.92':139
'19#.#64.201.182':139
'19#.#64.0.152':139
'19#.#64.182.218':139
'19#.#64.120.142':139
'19#.#64.218.119':139
'19#.#64.229.112':139
'19#.#64.172.173':139
'19#.#64.112.229':139
'19#.#64.38.193':139
'19#.#64.229.177':139
'19#.#64.86.64':139
'19#.#64.187.96':139
'19#.#64.79.177':139
'19#.#64.71.78':139
'19#.#64.11.18':139
'19#.#64.211.149':139
'19#.#64.232.37':139
'19#.#64.82.84':139
'19#.#64.1.94':139
'19#.#64.94.58':139
'19#.#64.214.93':139
'19#.#64.217.238':139
'19#.#64.146.174':139
'19#.#64.7.98':139
'19#.#64.0.78':139
'19#.#64.240.1':139
'19#.#64.78.103':139
'19#.#64.133.148':139
'19#.#64.147.113':139
'19#.#64.132.63':139
'19#.#64.165.32':139
'19#.#64.159.10':139
'19#.#64.245.243':139
'19#.#64.196.225':139
'19#.#64.182.70':139
'19#.#64.20.25':139
'19#.#64.214.93':445
'19#.#64.96.111':139
'19#.#64.86.100':139
'19#.#64.52.31':139
'19#.#64.117.233':445
'19#.#64.59.52':445
'19#.#64.139.120':139
'19#.#64.4.107':139
'19#.#64.109.120':139
'19#.#64.140.145':139
'19#.#64.24.58':139
'19#.#64.117.233':139
'19#.#64.59.52':139
'19#.#64.123.146':139
'19#.#64.226.164':139
'19#.#64.182.226':139
'19#.#64.182.226':445
'19#.#64.123.146':445
'19#.#64.226.164':445
'19#.#64.39.20':445
'19#.#64.0.217':445
'19#.#64.93.4':139
'19#.#64.137.246':139
'19#.#64.101.6':139
'19#.#64.6.56':139
'19#.#64.238.169':139
'19#.#64.192.137':139
'19#.#64.97.76':139
'19#.#64.191.243':139
'19#.#64.68.43':139
'19#.#64.217.64':139
'19#.#64.41.192':139
'19#.#64.63.3':139
'19#.#64.252.62':139
'19#.#64.196.22':139
'19#.#64.2.88':139
'19#.#64.31.156':139
'19#.#64.129.203':139
'19#.#64.170.101':139
'19#.#64.5.157':139
'19#.#64.192.2':139
'19#.#64.182.176':139
'19#.#64.0.217':139
'19#.#64.79.153':445
'19#.#64.21.64':445
'19#.#64.239.167':445
'19#.#64.11.13':445
'19#.#64.186.56':445
'19#.#64.112.229':9988
'19#.#64.229.112':9988
'19#.#64.92.98':445
'19#.#64.165.150':445
'19#.#64.160.121':445
'19#.#64.0.78':445
'19#.#64.240.1':445
'19#.#64.82.84':445
'19#.#64.1.94':445
'19#.#64.232.37':445
'19#.#64.223.224':445
'19#.#64.227.129':445
'19#.#64.146.174':445
'19#.#64.7.98':445
'19#.#64.217.238':445
'19#.#64.229.177':9988
'19#.#64.132.63':9988
'19#.#64.245.243':9988
'19#.#64.165.32':9988
'19#.#64.182.218':9988
'19#.#64.94.58':9988
'19#.#64.232.37':9988
'19#.#64.39.20':139
'19#.#64.159.10':9988
'19#.#64.147.113':9988
'19#.#64.1.94':9988
'19#.#64.65.92':9988
'19#.#64.192.85':9988
'19#.#64.187.96':9988
'19#.#64.79.177':9988
'19#.#64.86.64':9988
'19#.#64.120.142':9988
'19#.#64.218.119':9988
'19#.#64.147.158':9988
'19#.#64.234.37':9988
'19#.#64.60.187':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней