Trojan.Starman.5831

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'14.##9.255.221':445
'14.##9.44.144':445
'14.##9.137.65':445
'14.##9.140.23':445
'14.##9.185.138':445
'14.##9.225.33':445
'14.##9.83.39':445
'14.##9.130.10':445
'14.##9.80.111':445
'14.##9.74.80':445
'14.##9.8.197':445
'14.##9.198.81':445
'14.##9.6.125':445
'14.##9.197.145':445
'14.#79.19.0':445
'14.##9.19.230':445
'14.##9.25.149':445
'14.##9.31.52':445
'14.##9.7.127':445
'14.##9.51.113':445
'14.##9.84.127':445
'14.##9.123.84':445
'14.##9.126.187':445
'14.##9.177.20':445
'14.##9.25.208':445
'14.##9.123.252':445
'14.##9.138.172':445
'14.##9.153.72':445
'14.##9.60.123':445
'14.##9.79.20':445
'14.##9.156.56':445
'14.##9.137.116':445
'14.##9.143.234':445
'14.##9.116.36':445
'14.##9.53.168':445
'14.##9.65.12':445
'14.##9.21.34':445
'14.##9.172.130':445
'14.##9.177.147':445
'14.##9.130.177':445
'14.##9.137.116':139
'14.##9.177.147':139
'14.##9.156.56':139
'14.##9.53.168':139
'14.##9.143.234':139
'14.##9.21.34':139
'14.##9.177.20':139
'14.##9.65.12':139
'14.##9.130.177':139
'14.##9.172.130':139
'14.##9.44.144':139
'14.##9.80.111':139
'14.##9.255.221':139
'14.##9.185.138':139
'14.##9.137.65':139
'14.##9.83.39':139
'14.##9.116.36':139
'14.##9.225.33':139
'14.##9.74.80':139
'14.##9.130.10':139
'14.#79.33.6':139
'14.##9.123.150':139
'14.##9.5.138':139
'14.##9.21.145':139
'14.##9.138.14':139
'14.##9.37.126':445
'14.##9.115.236':445
'14.##9.244.104':445
'14.##9.66.240':139
'14.##9.32.113':139
'14.##9.123.84':139
'14.##9.60.123':139
'14.##9.84.127':139
'14.##9.25.208':139
'14.##9.126.187':139
'14.##9.138.172':139
'14.##9.235.131':139
'14.##9.123.252':139
'14.##9.79.20':139
'14.##9.153.72':139
'14.##9.235.131':445
'14.##9.31.234':139
'14.##9.63.30':139
'14.##9.44.167':139
'14.##9.13.182':139
'14.##9.146.96':139
'14.##9.13.225':445
'14.##9.177.159':445
'14.##9.185.212':139
'14.##9.122.102':139
'14.##9.234.54':139
'14.##9.197.36':139
'14.##9.136.61':139
'14.##9.144.49':139
'14.##9.77.159':139
'14.##9.70.78':139
'14.##9.14.68':139
'14.#79.8.39':139
'14.##9.67.165':139
'14.##9.53.99':139
'14.##9.43.72':139
'14.##9.253.64':445
'14.##9.252.252':445
'14.##9.112.100':445
'14.##9.71.148':445
'14.##9.14.182':445
'14.##9.221.55':445
'14.##9.183.221':445
'14.##9.4.222':445
'14.##9.6.253':445
'14.##9.165.6':445
'14.##9.146.8':445
'14.##9.116.146':445
'14.#79.9.51':445
'14.##9.237.60':445
'14.##9.146.214':445
'14.##9.67.236':445
'14.##9.102.26':445
'14.##9.183.104':445
'14.##9.94.116':445
'14.##9.92.94':445
'14.##9.116.146':139
'14.##9.94.116':139
'14.##9.146.8':139
'14.##9.146.214':139
'14.#79.9.51':139
'14.##9.102.26':139
'14.##9.71.148':139
'14.##9.67.236':139
'14.##9.92.94':139
'14.##9.183.104':139
'14.#79.33.6':445
'14.##9.123.150':445
'14.##9.5.138':445
'14.##9.21.145':445
'14.##9.138.14':445
'14.##9.177.159':139
'14.##9.237.60':139
'14.##9.13.225':139
'14.##9.66.240':445
'14.##9.32.113':445
'14.##9.130.173':139
'14.##9.103.61':139
'14.##9.248.75':139
'14.##9.217.48':139
'14.##9.0.207':139
'14.##9.245.143':139
'14.##9.21.102':139
'14.##9.143.137':139
'14.##9.192.102':139
'14.##9.137.191':139
'14.##9.252.252':139
'14.##9.6.253':139
'14.##9.253.64':139
'14.##9.14.182':139
'14.##9.112.100':139
'14.##9.183.221':139
'14.##9.48.184':139
'14.##9.221.55':139
'14.##9.165.6':139
'14.##9.4.222':139
'14.##9.155.215':445
'14.##9.227.42':445
'14.##9.230.157':445
'14.##9.125.60':139
'14.##9.94.191':445
'14.##9.14.219':445
'14.##9.154.251':445
'14.##9.148.19':445
'14.##9.236.108':445
'14.##9.27.216':445
'14.##9.57.179':139
'14.##9.241.208':139
'14.##9.44.66':139
'14.##9.119.106':139
'14.##9.19.239':139
'14.#79.67.9':139
'14.##9.45.124':139
'14.##9.102.2':139
'14.##9.170.87':139
'14.##9.43.20':139
'14.##9.71.211':445
'14.##9.32.55':445
'14.##9.174.170':445
'14.##9.173.69':445
'14.##9.27.173':445
'14.##9.20.59':445
'14.##9.196.5':445
'14.##9.58.207':445
'14.##9.36.234':445
'14.##9.73.146':445
'14.##9.99.180':445
'14.##9.113.135':445
'14.##9.103.158':445
'14.##9.23.245':445
'14.##9.2.241':445
'14.##9.68.39':445
'14.##9.26.137':445
'14.##9.39.53':445
'14.##9.163.7':445
'14.##9.53.67':445
'14.##9.113.135':139
'14.##9.163.7':139
'14.##9.99.180':139
'14.##9.2.241':139
'14.##9.103.158':139
'14.##9.26.137':139
'14.##9.173.69':139
'14.##9.68.39':139
'14.##9.53.67':139
'14.##9.39.53':139
'14.##9.227.42':139
'14.##9.236.108':139
'14.##9.155.215':139
'14.##9.94.191':139
'14.##9.230.157':139
'14.##9.154.251':139
'14.##9.23.245':139
'14.##9.14.219':139
'14.##9.27.216':139
'14.##9.148.19':139
'14.##9.166.9':139
'14.##9.48.99':139
'14.##9.213.44':139
'14.##9.158.105':139
'14.##9.44.225':139
'14.##9.124.186':139
'14.##9.112.231':139
'14.##9.121.253':139
'14.##9.142.199':139
'14.##9.136.82':139
'14.##9.32.55':139
'14.##9.36.234':139
'14.##9.71.211':139
'14.##9.27.173':139
'14.##9.174.170':139
'14.##9.196.5':139
'14.##9.6.127':139
'14.##9.20.59':139
'14.##9.73.146':139
'14.##9.58.207':139
'14.##9.6.127':445
'14.##9.13.222':445
'14.##9.190.106':445
'14.##9.105.149':139
'14.##9.6.213':139
'14.##9.150.2':139
'14.##9.141.220':445
'14.##9.185.129':445
'14.##9.220.194':445
'14.##9.199.17':445
'14.##9.52.214':445
'14.##9.52.214':139
'14.##9.220.194':139
'14.##9.199.17':139
'14.##9.13.222':139
'14.##9.190.106':139
'14.##9.93.137':139
'14.##9.14.249':139
'14.##9.110.210':139
'14.##9.141.220':139
'14.##9.185.129':139
'14.##9.198.81':139
'14.##9.7.127':139
'14.##9.8.197':139
'14.#79.19.0':139
'14.##9.6.125':139
'14.##9.25.149':139
'14.##9.140.23':139
'14.##9.19.230':139
'14.##9.51.113':139
'14.##9.31.52':139
'14.##9.6.213':445
'14.##9.150.2':445
'14.##9.14.249':445
'14.##9.110.210':445
'14.##9.93.137':445
'14.##9.115.236':139
'14.##9.197.145':139
'14.##9.37.126':139
'14.##9.105.149':445
'14.##9.244.104':139
'14.##9.57.179':445
'14.##9.241.208':445
'14.##9.44.66':445
'14.##9.119.106':445
'14.##9.19.239':445
'14.#79.67.9':445
'14.##9.45.124':445
'14.##9.102.2':445
'14.##9.170.87':445
'14.##9.43.20':445
'14.##9.166.9':445
'14.##9.48.99':445
'14.##9.213.44':445
'14.##9.158.105':445
'14.##9.44.225':445
'14.##9.124.186':445
'14.##9.112.231':445
'14.##9.121.253':445
'14.##9.142.199':445
'14.##9.136.82':445
'14.##9.20.59':9988
'14.##9.213.44':9988
'14.##9.173.69':9988
'14.##9.99.180':9988
'14.##9.163.7':9988
'14.##9.142.199':9988
'14.##9.71.211':9988
'14.##9.27.173':9988
'14.##9.174.170':9988
'14.##9.32.55':9988
'14.##9.155.215':9988
'14.##9.227.42':9988
'14.##9.94.191':9988
'14.##9.125.60':445
'14.##9.230.157':9988
'14.##9.148.19':9988
'14.##9.154.251':9988
'14.##9.27.216':9988
'14.##9.236.108':9988
'14.##9.14.219':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней