Trojan.Starman.5674

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#38.129.63':139
'20#.#38.162.23':139
'20#.#38.72.234':139
'20#.#38.85.210':139
'20#.#38.154.233':139
'20#.#38.12.96':139
'20#.#38.46.79':139
'20#.#38.14.57':139
'20#.#38.70.14':139
'20#.#38.8.133':139
'20#.#38.199.85':139
'20#.#38.222.142':139
'20#.#38.76.129':139
'20#.#38.129.52':445
'20#.#38.122.185':445
'20#.#38.137.106':445
'20#.#38.85.202':445
'20#.#38.41.77':445
'20#.#38.22.170':445
'20#.#38.228.164':445
'20#.#38.239.34':445
'20#.#38.12.218':139
'20#.#38.31.13':139
'20#.#38.141.149':445
'20#.#38.253.140':445
'20#.#38.40.253':445
'20#.#38.199.85':445
'20#.#38.222.142':445
'20#.#38.76.129':445
'20#.#38.162.23':445
'20#.#38.72.234':445
'20#.#38.46.79':445
'20#.#38.14.57':445
'20#.#38.18.32':445
'20#.#38.246.140':445
'20#.#38.23.22':445
'20#.#38.70.14':445
'20#.#38.8.133':445
'20#.#38.2.58':445
'20#.#38.23.22':139
'20#.#38.181.38':139
'20#.#38.39.153':139
'20#.#38.2.58':139
'20#.#38.18.32':139
'20#.#38.246.140':139
'20#.#38.98.217':139
'20#.#38.154.233':445
'20#.#38.12.96':445
'20#.#38.129.63':445
'20#.#38.12.218':445
'20#.#38.31.13':445
'20#.#38.85.210':445
'20#.#38.21.228':139
'20#.#38.167.93':139
'20#.#38.215.16':139
'20#.#38.180.142':139
'20#.#38.244.210':139
'20#.#38.107.89':139
'20#.#38.40.8':139
'20#.#38.85.202':139
'20#.#38.41.77':139
'20#.#38.22.170':139
'20#.#38.52.225':139
'20#.#38.179.53':139
'20#.#38.204.152':139
'20#.#38.108.148':445
'20#.#38.36.199':445
'20#.#38.12.37':139
'20#.#38.60.89':445
'20#.#38.156.161':445
'20#.#38.10.205':445
'20#.#38.196.11':139
'20#.#38.132.84':139
'20#.#38.192.237':139
'20#.#38.77.26':139
'20#.#38.55.6':139
'20#.#38.92.161':139
'20#.#38.32.92':139
'20#.#38.180.142':445
'20#.#38.244.210':445
'20#.#38.107.89':445
'20#.#38.132.84':445
'20#.#38.192.237':445
'20#.#38.77.26':445
'20#.#38.21.228':445
'20#.#38.52.225':445
'20#.#38.179.53':445
'20#.#38.204.152':445
'20#.#38.167.93':445
'20#.#38.215.16':445
'20#.#38.40.8':445
'20#.#38.228.164':139
'20#.#38.141.149':139
'20#.#38.253.140':139
'20#.#38.129.52':139
'20#.#38.122.185':139
'20#.#38.137.106':139
'20#.#38.40.253':139
'20#.#38.55.6':445
'20#.#38.92.161':445
'20#.#38.32.92':445
'20#.#38.239.34':139
'20#.#38.12.37':445
'20#.#38.196.11':445
'20#.#38.181.38':445
'20#.#38.157.33':139
'20#.#38.212.47':139
'20#.#38.247.242':139
'20#.#38.124.32':139
'20#.#38.5.204':139
'20#.#38.201.68':139
'20#.#38.90.247':139
'20#.#38.162.177':139
'20#.#38.195.161':139
'20#.#38.78.107':139
'20#.#38.96.91':139
'20#.#38.36.97':139
'20#.#38.45.94':139
'20#.#38.82.89':445
'20#.#38.205.151':445
'20#.#38.98.171':445
'20#.#38.42.203':445
'20#.#38.66.42':445
'20#.#38.189.65':445
'20#.#38.14.143':445
'20#.#38.7.91':139
'20#.#38.180.218':139
'20#.#38.116.216':139
'20#.#38.215.14':445
'20#.#38.254.112':139
'20#.#38.252.224':139
'20#.#38.96.91':445
'20#.#38.36.97':445
'20#.#38.45.94':445
'20#.#38.212.47':445
'20#.#38.247.242':445
'20#.#38.90.247':445
'20#.#38.162.177':445
'20#.#38.17.38':445
'20#.#38.47.187':445
'20#.#38.125.47':445
'20#.#38.195.161':445
'20#.#38.78.107':445
'20#.#38.183.196':445
'20#.#38.125.47':139
'20#.#38.254.112':445
'20#.#38.252.224':445
'20#.#38.183.196':139
'20#.#38.17.38':139
'20#.#38.47.187':139
'20#.#38.7.91':445
'20#.#38.5.204':445
'20#.#38.201.68':445
'20#.#38.157.33':445
'20#.#38.180.218':445
'20#.#38.116.216':445
'20#.#38.124.32':445
'20#.#38.234.138':139
'20#.#38.205.51':139
'20#.#38.183.205':139
'20#.#38.47.47':139
'20#.#38.167.46':139
'20#.#38.158.37':139
'20#.#38.111.160':139
'20#.#38.42.203':139
'20#.#38.66.42':139
'20#.#38.189.65':139
'20#.#38.9.65':139
'20#.#38.73.48':139
'20#.#38.183.79':139
'20#.#38.61.168':139
'20#.#38.3.124':139
'20#.#38.197.21':139
'20#.#38.39.153':445
'20#.#38.98.217':445
'20#.#38.36.245':139
'20#.#38.39.212':139
'20#.#38.19.188':139
'20#.#38.169.19':139
'20#.#38.155.125':139
'20#.#38.125.114':139
'20#.#38.175.120':139
'20#.#38.188.77':139
'20#.#38.47.47':445
'20#.#38.167.46':445
'20#.#38.158.37':445
'20#.#38.19.188':445
'20#.#38.169.19':445
'20#.#38.155.125':445
'20#.#38.234.138':445
'20#.#38.9.65':445
'20#.#38.73.48':445
'20#.#38.183.79':445
'20#.#38.205.51':445
'20#.#38.183.205':445
'20#.#38.111.160':445
'20#.#38.14.143':139
'20#.#38.215.14':139
'20#.#38.36.245':445
'20#.#38.82.89':139
'20#.#38.205.151':139
'20#.#38.98.171':139
'20#.#38.61.168':445
'20#.#38.125.114':445
'20#.#38.175.120':445
'20#.#38.188.77':445
'20#.#38.3.124':445
'20#.#38.197.21':445
'20#.#38.39.212':445
'20#.#38.7.159':445
'20#.#38.88.78':445
'20#.#38.255.88':445
'20#.#38.129.34':445
'20#.#38.184.63':445
'20#.#38.35.45':445
'20#.#38.49.28':445
'20#.#38.10.187':445
'20#.#38.227.49':445
'20#.#38.82.13':445
'20#.#38.164.210':445
'20#.#38.239.6':445
'20#.#38.105.157':445
'20#.#38.139.171':445
'20#.#38.44.189':445
'20#.#38.240.118':445
'20#.#38.89.123':445
'20#.#38.165.153':445
'20#.#38.1.67':445
'20#.#38.144.120':445
'20#.#38.72.94':445
'20#.#38.221.231':445
'20#.#38.209.221':445
'20#.#38.94.209':445
'20#.#38.158.224':445
'20#.#38.155.5':445
'20#.#38.232.154':445
'20#.#38.196.162':445
'20#.#38.81.241':445
'20#.#38.112.147':445
'20#.#38.181.71':445
'20#.#38.83.163':445
'20#.#38.98.188':445
'20#.#38.198.119':445
'20#.#38.48.81':445
'20#.#38.144.120':9988
'20#.#38.221.231':9988
'20#.#38.208.198':445
'20#.#38.27.227':445
'20#.#38.81.10':445
'20#.#38.100.148':445
'20#.#38.144.79':445
'20#.#38.117.146':445
'20#.#38.235.15':445
'20#.#38.187.220':445
'20#.#38.48.111':445
'20#.#38.101.117':445
'20#.#38.24.247':445
'20#.#38.39.77':445
'20#.#38.2.42':445
'20#.#38.93.41':445
'20#.#38.181.252':445
'20#.#38.7.15':445
'20#.#38.49.28':139
'20#.#38.88.78':139
'20#.#38.255.88':139
'20#.#38.94.209':139
'20#.#38.184.63':139
'20#.#38.35.45':139
'20#.#38.129.34':139
'20#.#38.105.157':139
'20#.#38.227.49':139
'20#.#38.82.13':139
'20#.#38.10.187':139
'20#.#38.239.6':139
'20#.#38.139.171':139
'20#.#38.144.120':139
'20#.#38.240.118':139
'20#.#38.33.18':139
'20#.#38.165.153':139
'20#.#38.1.67':139
'20#.#38.89.123':139
'20#.#38.44.189':139
'20#.#38.232.154':139
'20#.#38.221.231':139
'20#.#38.209.221':139
'20#.#38.72.94':139
'20#.#38.158.224':139
'20#.#38.155.5':139
'20#.#38.98.188':139
'20#.#38.196.162':139
'20#.#38.81.241':139
'20#.#38.2.42':139
'20#.#38.181.71':139
'20#.#38.83.163':139
'20#.#38.112.147':139
'20#.#38.81.10':139
'20#.#38.48.81':139
'20#.#38.33.18':445
'20#.#38.198.119':139
'20#.#38.208.198':139
'20#.#38.27.227':139
'20#.#38.48.111':139
'20#.#38.100.148':139
'20#.#38.144.79':139
'20#.#38.164.210':139
'20#.#38.235.15':139
'20#.#38.187.220':139
'20#.#38.117.146':139
'20#.#38.7.15':139
'20#.#38.24.247':139
'20#.#38.39.77':139
'20#.#38.101.117':139
'20#.#38.93.41':139
'20#.#38.181.252':139
'20#.#38.94.209':9988
'20#.#38.95.225':139
'20#.#38.211.95':139
'20#.#38.128.76':139
'20#.#38.144.187':445
'20#.#38.236.235':139
'20#.#38.39.39':139
'20#.#38.84.55':139
'20#.#38.134.174':139
'20#.#38.188.155':139
'20#.#38.223.196':139
'20#.#38.108.171':139
'20#.#38.218.73':139
'20#.#38.175.110':139
'20#.#38.166.240':445
'20#.#38.199.48':445
'20#.#38.151.223':445
'20#.#38.203.61':445
'20#.#38.78.43':445
'20#.#38.146.176':445
'20#.#38.112.61':445
'20#.#38.238.213':445
'20#.#38.149.154':445
'20#.#38.165.247':445
'20#.#38.53.183':445
'20#.#38.238.229':445
'20#.#38.213.238':445
'20#.#38.108.171':445
'20#.#38.218.73':445
'20#.#38.175.110':445
'20#.#38.211.95':445
'20#.#38.128.76':445
'20#.#38.84.55':445
'20#.#38.134.174':445
'20#.#38.46.225':445
'20#.#38.81.130':445
'20#.#38.177.94':445
'20#.#38.188.155':445
'20#.#38.223.196':445
'20#.#38.67.60':445
'20#.#38.177.94':139
'20#.#38.7.159':139
'20#.#38.60.89':139
'20#.#38.67.60':139
'20#.#38.46.225':139
'20#.#38.81.130':139
'20#.#38.156.161':139
'20#.#38.236.235':445
'20#.#38.39.39':445
'20#.#38.95.225':445
'20#.#38.10.205':139
'20#.#38.108.148':139
'20#.#38.36.199':139
'20#.#38.228.154':139
'20#.#38.92.228':139
'20#.#38.52.103':139
'20#.#38.72.143':139
'20#.#38.194.57':139
'20#.#38.135.180':139
'20#.#38.53.120':139
'20#.#38.203.61':139
'20#.#38.78.43':139
'20#.#38.146.176':139
'20#.#38.187.52':139
'20#.#38.233.186':139
'20#.#38.61.233':139
'20#.#38.129.34':9988
'20#.#38.10.187':9988
'20#.#38.239.6':9988
'20#.#38.35.45':9988
'20#.#38.49.28':9988
'20#.#38.88.78':9988
'20#.#38.100.148':9988
'20#.#38.227.35':139
'20#.#38.178.28':139
'20#.#38.119.228':139
'20#.#38.144.79':9988
'20#.#38.32.169':139
'20#.#38.35.140':139
'20#.#38.72.143':445
'20#.#38.194.57':445
'20#.#38.135.180':445
'20#.#38.227.35':445
'20#.#38.178.28':445
'20#.#38.119.228':445
'20#.#38.228.154':445
'20#.#38.187.52':445
'20#.#38.233.186':445
'20#.#38.61.233':445
'20#.#38.92.228':445
'20#.#38.52.103':445
'20#.#38.53.120':445
'20#.#38.112.61':139
'20#.#38.53.183':139
'20#.#38.238.229':139
'20#.#38.166.240':139
'20#.#38.199.48':139
'20#.#38.151.223':139
'20#.#38.213.238':139
'20#.#38.144.187':139
'20#.#38.32.169':445
'20#.#38.35.140':445
'20#.#38.238.213':139
'20#.#38.149.154':139
'20#.#38.165.247':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней