Trojan.Starman.5712

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'58.##4.46.238':139
'58.##4.236.197':139
'58.##4.93.165':139
'58.##4.60.29':139
'58.##4.125.118':139
'58.##4.244.91':139
'58.##4.11.197':139
'58.##4.119.245':139
'58.##4.93.214':139
'58.##4.170.158':139
'58.##4.171.9':139
'58.##4.2.211':445
'58.##4.112.167':445
'58.##4.211.3':445
'58.##4.30.216':445
'58.##4.211.49':445
'58.##4.207.22':139
'58.##4.240.162':139
'58.##4.162.184':139
'58.#84.64.2':445
'58.##4.154.230':139
'58.##4.93.214':445
'58.##4.170.158':445
'58.##4.236.197':445
'58.##4.93.165':445
'58.##4.46.238':445
'58.#84.9.56':445
'58.##4.151.164':445
'58.##4.11.197':445
'58.##4.119.245':445
'58.##4.244.91':445
'58.##4.125.118':445
'58.##4.16.152':139
'58.##4.154.230':445
'58.##4.152.69':139
'58.#84.9.56':139
'58.##4.151.164':139
'58.##4.171.9':445
'58.##4.60.29':445
'58.##4.240.162':445
'58.##4.162.184':445
'58.##4.207.22':445
'58.##4.176.182':445
'58.##4.2.211':139
'58.##4.112.167':139
'58.##4.211.3':139
'58.##4.30.216':139
'58.##4.211.49':139
'58.##4.236.22':445
'58.##4.50.220':445
'58.##4.150.32':445
'58.#84.64.2':139
'58.##4.61.47':445
'58.##4.176.182':139
'58.##4.60.222':139
'58.##4.205.79':139
'58.##4.105.103':139
'58.##4.187.172':139
'58.##4.49.15':139
'58.#84.8.20':139
'58.##4.183.156':139
'58.#84.7.32':139
'58.##4.62.198':139
'58.##4.66.66':139
'58.##4.60.222':445
'58.##4.205.79':445
'58.##4.105.103':445
'58.##4.187.172':445
'58.##4.49.15':445
'58.#84.8.20':445
'58.##4.183.156':445
'58.#84.7.32':445
'58.##4.62.198':445
'58.##4.66.66':445
'58.##4.121.35':445
'58.##4.95.106':445
'58.##4.179.95':445
'58.##4.105.225':445
'58.##4.53.198':445
'58.##4.219.52':445
'58.##4.209.122':445
'58.##4.112.209':445
'58.##4.16.188':445
'58.##4.93.162':445
'58.##4.103.171':445
'58.##4.95.252':445
'58.##4.81.45':445
'58.##4.54.240':445
'58.##4.98.134':445
'58.##4.162.137':445
'58.##4.144.151':445
'58.##4.146.155':445
'58.##4.169.41':445
'58.##4.193.19':445
'58.##4.45.35':445
'58.##4.235.66':445
'58.##4.90.130':445
'58.##4.69.194':445
'58.##4.135.225':445
'58.##4.133.239':445
'58.##4.209.92':445
'58.##4.55.212':445
'58.##4.126.43':445
'58.##4.121.230':445
'58.##4.82.66':445
'58.#84.47.6':445
'58.##4.146.15':139
'58.##4.216.111':139
'58.##4.246.165':139
'58.##4.198.198':139
'58.##4.192.128':139
'58.##4.115.199':139
'58.##4.68.147':139
'58.##4.26.133':139
'58.##4.83.203':139
'58.##4.152.83':139
'58.##4.19.90':139
'58.##4.32.132':139
'58.##4.21.32':139
'58.##4.178.82':139
'58.##4.192.246':445
'58.##4.82.193':445
'58.##4.76.80':139
'58.##4.135.165':139
'58.##4.112.226':139
'58.##4.66.77':139
'58.##4.204.251':139
'58.##4.235.242':445
'58.##4.90.130':139
'58.##4.69.194':139
'58.##4.135.225':139
'58.##4.133.239':139
'58.##4.209.92':139
'58.##4.55.212':139
'58.##4.126.43':139
'58.##4.121.230':139
'58.##4.82.66':139
'58.#84.47.6':139
'58.##4.235.242':139
'58.##4.62.22':139
'58.##4.85.196':139
'58.##4.109.23':139
'58.##4.152.69':445
'58.##4.16.152':445
'58.##4.131.14':139
'58.##4.243.130':139
'58.##4.209.199':139
'58.#84.0.7':139
'58.##4.41.146':139
'58.##4.62.22':445
'58.##4.85.196':445
'58.##4.109.23':445
'58.##4.192.246':139
'58.##4.82.193':139
'58.##4.131.14':445
'58.##4.243.130':445
'58.##4.209.199':445
'58.#84.0.7':445
'58.##4.41.146':445
'58.##4.146.155':139
'58.##4.54.240':139
'58.##4.95.252':139
'58.##4.162.137':139
'58.##4.235.66':139
'58.##4.98.134':139
'58.##4.169.41':139
'58.##4.144.151':139
'58.##4.45.35':139
'58.##4.81.45':139
'58.##4.193.19':139
'58.##4.121.35':139
'58.##4.250.170':445
'58.##4.134.149':445
'58.##4.196.101':445
'58.##4.94.127':445
'58.#84.0.27':445
'58.##4.82.112':445
'58.##4.4.181':445
'58.##4.183.199':445
'58.##4.165.1':445
'58.##4.2.132':445
'58.##4.182.253':445
'58.##4.70.207':139
'58.##4.27.237':139
'58.##4.234.74':139
'58.##4.33.187':139
'58.##4.115.146':139
'58.##4.192.28':445
'58.##4.156.127':445
'58.##4.212.105':139
'58.##4.33.47':139
'58.##4.20.147':139
'58.##4.71.137':445
'58.##4.101.233':445
'58.##4.18.68':445
'58.##4.184.225':445
'58.##4.205.191':445
'58.##4.154.226':445
'58.##4.217.225':445
'58.##4.5.242':445
'58.##4.127.12':445
'58.##4.160.215':445
'58.##4.127.50':445
'58.##4.67.139':445
'58.##4.140.207':445
'58.##4.215.183':445
'58.##4.11.106':445
'58.##4.28.77':445
'58.##4.80.31':445
'58.##4.43.172':445
'58.##4.118.44':445
'58.##4.33.48':445
'58.##4.33.155':445
'58.##4.66.140':139
'58.##4.28.77':139
'58.##4.215.183':139
'58.##4.11.106':139
'58.##4.82.112':139
'58.##4.4.181':139
'58.##4.33.155':139
'58.##4.118.44':139
'58.##4.33.48':139
'58.##4.67.139':139
'58.##4.140.207':139
'58.##4.183.199':139
'58.##4.94.127':139
'58.#84.0.27':139
'58.##4.156.127':139
'58.##4.192.28':139
'58.##4.182.253':139
'58.##4.2.132':139
'58.##4.165.1':139
'58.##4.134.149':139
'58.##4.196.101':139
'58.##4.250.170':139
'58.##4.231.24':139
'58.##4.144.21':139
'58.##4.63.202':139
'58.##4.154.226':139
'58.##4.217.225':139
'58.##4.62.110':139
'58.##4.159.3':139
'58.##4.238.239':139
'58.##4.249.142':139
'58.##4.35.59':139
'58.##4.5.242':139
'58.##4.184.225':139
'58.##4.205.191':139
'58.##4.127.50':139
'58.##4.80.31':139
'58.##4.43.172':139
'58.##4.127.12':139
'58.##4.160.215':139
'58.##4.101.233':139
'58.##4.18.68':139
'58.##4.71.137':139
'58.##4.203.146':445
'58.##4.66.211':445
'58.##4.185.50':445
'58.##4.56.28':445
'58.##4.89.56':445
'58.##4.49.45':445
'58.##4.13.184':445
'58.##4.45.60':445
'58.##4.139.215':445
'58.##4.82.37':445
'58.##4.184.147':445
'58.##4.234.187':139
'58.##4.197.56':139
'58.##4.197.159':139
'58.##4.49.45':139
'58.##4.13.184':139
'58.##4.132.79':139
'58.##4.110.54':445
'58.##4.18.114':139
'58.##4.253.92':139
'58.##4.114.100':139
'58.##4.95.106':139
'58.##4.179.95':139
'58.##4.105.225':139
'58.##4.53.198':139
'58.##4.219.52':139
'58.##4.209.122':139
'58.##4.112.209':139
'58.##4.16.188':139
'58.##4.93.162':139
'58.##4.103.171':139
'58.##4.50.220':139
'58.##4.253.92':445
'58.##4.114.100':445
'58.##4.197.56':445
'58.##4.197.159':445
'58.##4.234.187':445
'58.##4.150.32':139
'58.##4.236.22':139
'58.##4.61.47':139
'58.##4.18.114':445
'58.##4.132.79':445
'58.##4.45.60':139
'58.##4.33.47':445
'58.##4.20.147':445
'58.##4.27.237':445
'58.##4.234.74':445
'58.##4.70.207':445
'58.##4.94.127':9988
'58.#84.0.27':9988
'58.##4.192.28':9988
'58.##4.212.105':445
'58.##4.182.253':9988
'58.##4.115.146':445
'58.##4.249.142':445
'58.##4.35.59':445
'58.##4.144.21':445
'58.##4.63.202':445
'58.##4.231.24':445
'58.##4.66.140':445
'58.##4.33.187':445
'58.##4.159.3':445
'58.##4.238.239':445
'58.##4.62.110':445
'58.##4.56.28':139
'58.##4.89.56':139
'58.##4.184.147':139
'58.##4.160.215':9988
'58.##4.110.54':139
'58.##4.139.215':139
'58.##4.82.37':139
'58.##4.66.211':139
'58.##4.185.50':139
'58.##4.203.146':139
'58.##4.101.233':9988
'58.##4.82.112':9988
'58.##4.11.106':9988
'58.##4.134.149':9988
'58.##4.196.101':9988
'58.##4.250.170':9988
'58.##4.184.225':9988
'58.##4.127.12':9988
'58.##4.80.31':9988
'58.##4.215.183':9988
'58.##4.140.207':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней