Trojan.Starman.5298

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'65.##3.251.244':445
'65.##3.176.252':445
'65.##3.199.176':445
'65.##3.35.238':445
'65.##3.169.232':445
'65.##3.245.61':445
'65.##3.224.161':445
'65.##3.100.128':139
'65.##3.157.86':139
'65.##3.47.190':445
'65.##3.129.72':445
'65.##3.197.167':445
'65.##3.168.99':445
'65.##3.220.172':445
'65.##3.141.252':445
'65.##3.33.152':445
'65.##3.203.202':445
'65.#33.3.14':445
'65.##3.31.204':445
'65.##3.101.112':445
'65.##3.46.81':445
'65.##3.207.24':445
'65.#33.47.6':445
'65.##3.211.248':445
'65.##3.121.34':139
'65.##3.5.160':139
'65.#33.34.5':139
'65.#33.49.1':139
'65.#33.31.1':139
'65.##3.111.81':139
'65.##3.83.36':139
'65.##3.100.128':445
'65.##3.157.86':445
'65.##3.121.34':445
'65.##3.162.126':139
'65.##3.136.149':139
'65.##3.92.137':139
'65.##3.169.202':139
'65.##3.30.169':139
'65.##3.84.160':139
'65.##3.233.248':139
'65.##3.147.234':139
'65.##3.139.174':139
'65.##3.31.38':139
'65.##3.16.238':139
'65.##3.238.54':139
'65.##3.13.161':139
'65.##3.95.251':139
'65.##3.26.180':139
'65.##3.56.37':445
'65.##3.38.77':445
'65.##3.81.21':445
'65.##3.21.150':445
'65.##3.154.183':445
'65.##3.84.195':445
'65.##3.150.37':445
'65.##3.204.93':139
'65.##3.56.37':139
'65.##3.33.152':139
'65.##3.3.154':139
'65.##3.151.250':139
'65.##3.217.62':139
'65.##3.81.228':445
'65.##3.132.68':445
'65.##3.248.109':445
'65.##3.23.28':445
'65.##3.37.24':445
'65.##3.20.75':445
'65.##3.195.102':445
'65.##3.3.195':445
'65.##3.124.129':445
'65.#33.2.94':445
'65.##3.202.212':445
'65.##3.53.188':445
'65.##3.203.202':139
'65.##3.199.176':139
'65.##3.47.190':139
'65.##3.129.72':139
'65.##3.245.61':139
'65.##3.251.244':139
'65.##3.176.252':139
'65.##3.151.250':445
'65.##3.217.62':445
'65.##3.204.93':445
'65.##3.197.167':139
'65.##3.224.161':139
'65.##3.3.154':445
'65.##3.141.252':139
'65.##3.207.24':139
'65.#33.47.6':139
'65.#33.3.14':139
'65.##3.168.99':139
'65.##3.220.172':139
'65.##3.46.81':139
'65.##3.35.238':139
'65.##3.169.232':139
'65.##3.211.248':139
'65.##3.31.204':139
'65.##3.101.112':139
'65.##3.133.133':445
'65.##3.59.133':445
'65.##3.246.58':445
'65.##3.231.56':445
'65.##3.183.189':445
'65.##3.34.171':445
'65.##3.96.190':445
'65.##3.210.30':445
'65.##3.42.232':445
'65.##3.199.104':445
'65.##3.4.184':445
'65.##3.122.153':445
'65.##3.201.139':445
'65.##3.140.136':445
'65.##3.43.123':445
'65.##3.224.10':445
'65.##3.203.223':445
'65.##3.1.211':445
'65.##3.42.67':445
'65.##3.59.144':445
'65.##3.27.98':445
'65.##3.95.43':445
'65.##3.12.149':445
'65.##3.42.134':445
'65.##3.149.136':445
'65.#33.5.92':139
'65.##3.96.206':139
'65.##3.205.122':139
'65.##3.59.91':139
'65.##3.134.149':139
'65.##3.14.22':139
'65.##3.25.45':139
'65.##3.35.25':139
'65.##3.194.34':139
'65.##3.132.247':139
'65.##3.91.240':139
'65.##3.66.101':139
'65.##3.160.246':139
'65.##3.177.251':139
'65.##3.32.46':139
'65.##3.58.202':139
'65.##3.250.58':139
'65.##3.207.180':139
'65.##3.249.16':139
'65.##3.128.231':139
'65.##3.161.132':139
'65.##3.26.86':139
'65.##3.16.191':139
'65.##3.17.59':139
'65.##3.43.163':445
'65.##3.5.160':445
'65.#33.34.5':445
'65.#33.49.1':445
'65.#33.31.1':445
'65.##3.111.81':445
'65.##3.83.36':445
'65.##3.98.226':139
'65.##3.43.163':139
'65.##3.224.10':139
'65.##3.162.126':445
'65.##3.136.149':445
'65.##3.92.137':445
'65.##3.169.202':445
'65.##3.30.169':445
'65.##3.84.160':445
'65.##3.233.248':445
'65.##3.147.234':445
'65.##3.139.174':445
'65.##3.31.38':445
'65.##3.16.238':445
'65.##3.238.54':445
'65.##3.13.161':445
'65.##3.95.251':445
'65.##3.26.180':445
'65.##3.203.223':139
'65.##3.246.58':139
'65.##3.199.104':139
'65.##3.4.184':139
'65.##3.34.171':139
'65.##3.133.133':139
'65.##3.59.133':139
'65.##3.42.232':139
'65.##3.149.136':139
'65.##3.98.226':445
'65.##3.122.153':139
'65.##3.96.190':139
'65.##3.210.30':139
'65.##3.43.123':139
'65.##3.95.43':139
'65.##3.12.149':139
'65.##3.1.211':139
'65.##3.201.139':139
'65.##3.140.136':139
'65.##3.27.98':139
'65.##3.231.56':139
'65.##3.183.189':139
'65.##3.42.134':139
'65.##3.42.67':139
'65.##3.59.144':139
'65.##3.249.63':445
'65.##3.166.166':445
'65.##3.230.79':445
'65.##3.31.169':445
'65.##3.69.250':445
'65.##3.23.180':445
'65.##3.155.196':445
'65.##3.79.155':445
'65.##3.19.79':445
'65.#33.51.2':445
'65.##3.199.151':445
'65.##3.197.30':445
'65.##3.221.137':445
'65.##3.136.9':445
'65.##3.60.115':445
'65.##3.12.54':139
'65.##3.173.175':445
'65.##3.149.229':445
'65.##3.59.31':445
'65.##3.26.239':445
'65.##3.45.230':445
'65.##3.8.150':445
'65.##3.205.39':445
'65.##3.92.79':445
'65.##3.195.137':445
'65.##3.254.6':445
'65.##3.219.156':445
'65.##3.156.181':445
'65.##3.144.128':445
'65.##3.250.9':445
'65.##3.2.113':445
'65.##3.87.152':445
'65.##3.2.219':445
'65.##3.104.85':445
'65.##3.201.219':445
'65.##3.49.202':445
'65.##3.47.207':445
'65.##3.189.225':445
'65.##3.116.6':445
'65.##3.148.109':445
'65.##3.176.20':445
'65.#33.3.20':445
'65.##3.235.189':445
'65.##3.237.167':445
'65.##3.132.245':445
'65.##3.131.84':445
'65.##3.175.113':445
'65.##3.3.166':445
'65.##3.41.119':445
'65.##3.220.234':139
'65.##3.166.166':139
'65.##3.230.79':139
'65.#33.51.2':139
'65.##3.69.250':139
'65.##3.23.180':139
'65.##3.249.63':139
'65.##3.79.155':139
'65.##3.19.79':139
'65.##3.195.137':139
'65.##3.199.151':139
'65.##3.197.30':139
'65.##3.155.196':139
'65.##3.221.137':139
'65.##3.136.9':139
'65.##3.173.175':139
'65.##3.8.150':139
'65.##3.205.39':139
'65.##3.149.229':139
'65.##3.26.239':139
'65.##3.45.230':139
'65.##3.31.169':139
'65.##3.60.115':139
'65.##3.92.79':139
'65.##3.59.31':139
'65.##3.176.20':139
'65.##3.156.181':139
'65.##3.219.156':139
'65.##3.201.219':139
'65.##3.250.9':139
'65.##3.2.113':139
'65.##3.254.6':139
'65.##3.2.219':139
'65.##3.104.85':139
'65.##3.85.137':139
'65.##3.49.202':139
'65.##3.47.207':139
'65.##3.87.152':139
'65.##3.116.6':139
'65.##3.148.109':139
'65.##3.175.113':139
'65.#33.3.20':139
'65.##3.235.189':139
'65.##3.189.225':139
'65.##3.132.245':139
'65.##3.131.84':139
'65.##3.144.128':139
'65.##3.3.166':139
'65.##3.41.119':139
'65.##3.237.167':139
'65.##3.239.54':445
'65.##3.29.54':445
'65.##3.140.148':445
'65.##3.240.52':445
'65.##3.210.172':445
'65.##3.2.115':445
'65.##3.13.10':139
'65.##3.236.164':139
'65.##3.203.4':139
'65.##3.162.2':445
'65.##3.45.92':139
'65.##3.176.45':139
'65.##3.45.80':445
'65.##3.228.22':445
'65.##3.235.162':445
'65.##3.74.110':445
'65.##3.115.204':445
'65.##3.58.211':445
'65.##3.57.238':445
'65.##3.61.208':445
'65.##3.123.12':445
'65.##3.157.193':445
'65.##3.222.219':445
'65.##3.91.247':445
'65.##3.85.176':139
'65.##3.150.37':139
'65.##3.21.150':139
'65.##3.81.21':139
'65.##3.154.183':139
'65.##3.84.195':139
'65.##3.38.77':139
'65.##3.236.164':445
'65.##3.203.4':445
'65.##3.85.176':445
'65.##3.45.92':445
'65.##3.176.45':445
'65.##3.13.10':445
'65.##3.20.75':139
'65.##3.132.68':139
'65.##3.248.109':139
'65.##3.23.28':139
'65.##3.37.24':139
'65.##3.81.228':139
'65.##3.195.102':139
'65.##3.3.195':139
'65.##3.124.129':139
'65.#33.2.94':139
'65.##3.202.212':139
'65.##3.53.188':139
'65.#33.23.7':445
'65.##3.212.56':139
'65.##3.177.226':139
'65.##3.53.240':139
'65.##3.197.30':9988
'65.##3.79.155':9988
'65.#33.3.20':9988
'65.##3.239.54':139
'65.##3.157.193':139
'65.##3.22.184':139
'65.##3.139.18':139
'65.##3.27.165':139
'65.##3.103.169':139
'65.##3.221.137':9988
'65.##3.173.175':9988
'65.##3.205.39':9988
'65.##3.85.137':445
'65.##3.220.234':445
'65.##3.12.54':445
'65.#33.51.2':9988
'65.##3.199.151':9988
'65.##3.155.196':9988
'65.##3.59.31':9988
'65.##3.69.250':9988
'65.##3.230.79':9988
'65.##3.235.162':139
'65.##3.140.148':139
'65.##3.162.2':139
'65.##3.177.226':445
'65.##3.115.204':139
'65.##3.2.115':139
'65.##3.29.54':139
'65.##3.27.165':445
'65.##3.103.169':445
'65.##3.22.184':445
'65.##3.212.56':445
'65.##3.139.18':445
'65.##3.53.240':445
'65.##3.61.208':139
'65.##3.240.52':139
'65.##3.123.12':139
'65.##3.222.219':139
'65.##3.57.238':139
'65.##3.91.247':139
'65.##3.210.172':139
'65.##3.74.110':139
'65.##3.45.80':139
'65.#33.23.7':139
'65.##3.228.22':139
'65.##3.58.211':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней