Trojan.Starman.5927

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'65.##7.73.54':445
'65.##7.78.141':445
'65.##7.242.33':445
'65.##7.108.163':445
'65.##7.136.210':445
'65.##7.138.85':445
'65.##7.29.132':445
'65.##7.69.104':445
'65.##7.152.148':445
'65.##7.25.189':445
'65.##7.156.191':445
'65.##7.171.79':445
'65.##7.143.150':445
'65.##7.117.9':445
'65.##7.53.15':445
'65.##7.121.60':445
'65.##7.16.18':445
'65.##7.96.113':445
'65.##7.18.11':445
'65.##7.188.142':445
'65.#37.6.85':445
'65.##7.90.69':445
'65.##7.114.237':139
'65.##7.27.115':139
'65.##7.57.10':139
'65.##7.147.177':445
'65.##7.153.147':139
'65.##7.255.69':139
'65.##7.146.102':139
'65.##7.59.121':139
'65.##7.202.28':139
'65.##7.246.64':139
'65.##7.29.173':445
'65.##7.154.109':139
'65.##7.29.173':139
'65.##7.51.52':139
'65.##7.63.129':139
'65.##7.116.59':139
'65.##7.51.52':445
'65.##7.154.109':445
'65.##7.116.59':445
'65.##7.147.177':139
'65.##7.63.129':445
'65.##7.184.171':445
'65.##7.78.141':139
'65.##7.152.148':139
'65.##7.73.54':139
'65.##7.136.210':139
'65.##7.242.33':139
'65.##7.29.132':139
'65.##7.90.69':139
'65.##7.138.85':139
'65.##7.25.189':139
'65.##7.69.104':139
'65.##7.108.163':139
'65.##7.143.150':139
'65.##7.188.142':139
'65.##7.171.79':139
'65.##7.121.60':139
'65.##7.117.9':139
'65.##7.96.113':139
'65.##7.156.191':139
'65.##7.16.18':139
'65.#37.6.85':139
'65.##7.18.11':139
'65.##7.233.99':445
'65.##7.68.197':445
'65.##7.81.172':445
'65.##7.212.189':445
'65.##7.211.111':445
'65.##7.175.126':445
'65.##7.56.23':445
'65.##7.92.237':445
'65.##7.65.35':445
'65.##7.108.90':445
'65.##7.68.146':445
'65.##7.210.115':445
'65.##7.16.106':445
'65.##7.187.223':445
'65.##7.21.159':445
'65.##7.105.181':445
'65.##7.35.17':445
'65.##7.143.250':445
'65.##7.110.190':445
'65.##7.195.47':445
'65.##7.155.104':445
'65.##7.220.172':445
'65.##7.236.200':445
'65.##7.117.72':445
'65.##7.165.98':445
'65.##7.25.183':445
'65.##7.216.132':445
'65.##7.112.226':445
'65.##7.76.15':445
'65.##7.51.64':445
'65.##7.11.138':445
'65.##7.68.11':445
'65.##7.91.218':445
'65.##7.109.133':445
'65.##7.178.109':445
'65.##7.133.94':445
'65.##7.146.102':445
'65.##7.68.226':445
'65.##7.190.109':445
'65.##7.217.190':445
'65.##7.132.211':445
'65.##7.52.95':445
'65.##7.100.107':445
'65.##7.113.159':445
'65.##7.230.231':445
'65.##7.75.214':139
'65.##7.153.134':445
'65.##7.5.185':445
'65.##7.15.107':445
'65.##7.125.222':139
'65.##7.80.39':139
'65.##7.224.38':139
'65.##7.84.76':139
'65.##7.16.84':139
'65.##7.114.58':445
'65.##7.242.112':445
'65.##7.170.60':445
'65.##7.38.184':445
'65.##7.29.113':445
'65.##7.36.38':445
'65.##7.190.169':445
'65.##7.77.76':445
'65.##7.31.251':445
'65.#37.74.4':445
'65.##7.251.73':445
'65.##7.255.69':445
'65.##7.117.72':139
'65.##7.11.138':139
'65.##7.236.200':139
'65.##7.216.132':139
'65.##7.165.98':139
'65.##7.76.15':139
'65.##7.113.159':139
'65.##7.112.226':139
'65.##7.68.11':139
'65.##7.51.64':139
'65.##7.25.183':139
'65.##7.178.109':139
'65.##7.52.95':139
'65.##7.109.133':139
'65.##7.68.226':139
'65.##7.133.94':139
'65.##7.217.190':139
'65.##7.91.218':139
'65.##7.190.109':139
'65.##7.100.107':139
'65.##7.132.211':139
'65.##7.29.113':139
'65.##7.153.147':445
'65.##7.57.10':445
'65.##7.230.231':139
'65.##7.15.107':139
'65.##7.153.134':139
'65.##7.246.64':445
'65.##7.59.121':445
'65.##7.202.28':445
'65.##7.114.237':445
'65.##7.27.115':445
'65.##7.5.185':139
'65.##7.170.60':139
'65.#37.74.4':139
'65.##7.242.112':139
'65.##7.36.38':139
'65.##7.38.184':139
'65.##7.77.76':139
'65.##7.114.58':139
'65.##7.190.169':139
'65.##7.251.73':139
'65.##7.31.251':139
'65.##7.44.177':445
'65.##7.148.240':445
'65.##7.58.205':445
'65.##7.228.251':445
'65.##7.198.228':445
'65.##7.245.135':445
'65.##7.115.4':445
'65.##7.114.5':445
'65.##7.11.62':445
'65.##7.17.143':445
'65.##7.148.185':445
'65.##7.1.206':139
'65.##7.145.1':139
'65.##7.205.80':139
'65.##7.37.204':139
'65.##7.181.39':139
'65.##7.121.160':445
'65.##7.23.212':445
'65.##7.72.209':445
'65.##7.36.123':139
'65.##7.59.137':139
'65.##7.61.77':445
'65.##7.252.93':445
'65.##7.89.16':445
'65.##7.94.155':445
'65.##7.229.247':445
'65.##7.174.231':445
'65.##7.71.169':445
'65.##7.25.185':445
'65.##7.68.223':445
'65.##7.248.234':445
'65.##7.250.248':445
'65.##7.109.23':445
'65.##7.127.60':445
'65.##7.202.160':445
'65.##7.41.200':445
'65.##7.12.115':445
'65.##7.32.86':445
'65.##7.28.77':445
'65.##7.104.79':445
'65.##7.75.239':445
'65.##7.177.176':445
'65.##7.146.140':445
'65.##7.131.91':139
'65.##7.61.77':139
'65.##7.12.115':139
'65.##7.115.4':139
'65.##7.114.5':139
'65.##7.245.135':139
'65.##7.202.160':139
'65.##7.177.176':139
'65.##7.127.60':139
'65.##7.32.86':139
'65.##7.41.200':139
'65.##7.17.143':139
'65.##7.23.212':139
'65.##7.228.251':139
'65.##7.148.185':139
'65.##7.121.160':139
'65.##7.72.209':139
'65.##7.148.240':139
'65.##7.11.62':139
'65.##7.44.177':139
'65.##7.198.228':139
'65.##7.58.205':139
'65.##7.146.140':139
'65.##7.68.21':139
'65.##7.94.213':139
'65.##7.25.185':139
'65.##7.68.223':139
'65.##7.71.169':139
'65.##7.56.201':139
'65.##7.248.121':139
'65.##7.87.178':139
'65.##7.175.23':139
'65.##7.90.133':139
'65.##7.250.248':139
'65.##7.109.23':139
'65.##7.229.247':139
'65.##7.104.79':139
'65.##7.75.239':139
'65.##7.28.77':139
'65.##7.89.16':139
'65.##7.248.234':139
'65.##7.252.93':139
'65.##7.174.231':139
'65.##7.94.155':139
'65.##7.228.79':445
'65.##7.50.223':445
'65.##7.79.134':445
'65.##7.69.65':139
'65.##7.153.109':139
'65.##7.233.99':139
'65.##7.105.181':139
'65.##7.153.109':445
'65.##7.45.212':445
'65.##7.69.65':445
'65.##7.45.212':139
'65.##7.10.124':445
'65.##7.95.237':445
'65.##7.101.216':445
'65.##7.128.41':445
'65.##7.169.31':445
'65.##7.228.79':139
'65.##7.50.223':139
'65.##7.79.134':139
'65.##7.163.30':445
'65.##7.35.248':445
'65.##7.35.17':139
'65.##7.108.90':139
'65.##7.68.146':139
'65.##7.81.172':139
'65.##7.212.189':139
'65.##7.68.197':139
'65.##7.184.171':139
'65.##7.53.15':139
'65.##7.92.237':139
'65.##7.65.35':139
'65.##7.56.23':139
'65.##7.175.126':139
'65.##7.155.104':139
'65.##7.220.172':139
'65.##7.187.223':139
'65.##7.21.159':139
'65.##7.16.106':139
'65.##7.210.115':139
'65.##7.211.111':139
'65.##7.110.190':139
'65.##7.195.47':139
'65.##7.143.250':139
'65.##7.120.175':445
'65.##7.59.137':445
'65.##7.61.77':9988
'65.##7.36.123':445
'65.##7.1.206':445
'65.##7.145.1':445
'65.##7.23.212':9988
'65.##7.44.177':9988
'65.##7.146.140':9988
'65.##7.228.251':9988
'65.##7.148.185':9988
'65.##7.205.80':445
'65.##7.90.133':445
'65.##7.87.178':445
'65.##7.175.23':445
'65.##7.68.21':445
'65.##7.94.213':445
'65.##7.37.204':445
'65.##7.181.39':445
'65.##7.131.91':445
'65.##7.56.201':445
'65.##7.248.121':445
'65.##7.12.115':9988
'65.##7.169.31':139
'65.##7.101.216':139
'65.##7.128.41':139
'65.##7.150.220':139
'65.##7.120.175':139
'65.##7.35.248':139
'65.##7.150.220':445
'65.##7.163.30':139
'65.##7.10.124':139
'65.##7.95.237':139
'65.##7.104.79':9988
'65.##7.148.240':9988
'65.##7.174.231':9988
'65.##7.127.60':9988
'65.##7.229.247':9988
'65.##7.177.176':9988
'65.##7.41.200':9988
'65.##7.58.205':9988
'65.##7.115.4':9988
'65.##7.202.160':9988
'65.##7.198.228':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней