Trojan.Starman.5340

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'58.##9.54.159':445
'58.##9.104.39':445
'58.##9.227.237':445
'58.##9.18.72':445
'58.##9.79.64':445
'58.#19.20.4':445
'58.##9.170.45':445
'58.##9.94.44':445
'58.##9.141.159':445
'58.##9.66.117':445
'58.##9.76.37':445
'58.##9.10.203':445
'58.##9.193.111':445
'58.##9.143.43':445
'58.##9.72.51':445
'58.#19.61.4':445
'58.##9.86.244':445
'58.##9.214.86':445
'58.##9.54.215':445
'58.##9.187.195':445
'58.##9.53.176':445
'58.##9.200.205':445
'58.##9.150.226':139
'58.##9.90.140':139
'58.##9.2.189':139
'58.##9.18.244':139
'58.##9.240.242':139
'58.##9.187.219':139
'58.##9.27.214':139
'58.##9.184.195':139
'58.##9.4.142':139
'58.##9.170.181':139
'58.##9.58.26':139
'58.##9.163.224':139
'58.##9.101.18':139
'58.##9.45.54':139
'58.##9.171.154':445
'58.##9.137.137':445
'58.##9.101.18':445
'58.##9.188.105':445
'58.##9.163.224':445
'58.##9.188.105':139
'58.##9.45.54':445
'58.##9.94.44':139
'58.#19.20.4':139
'58.##9.66.117':139
'58.##9.104.39':139
'58.##9.141.159':139
'58.##9.137.137':139
'58.##9.86.222':445
'58.##9.171.154':139
'58.##9.170.45':139
'58.##9.200.205':139
'58.##9.54.159':139
'58.##9.54.215':139
'58.##9.86.244':139
'58.##9.53.176':139
'58.##9.193.111':139
'58.##9.187.195':139
'58.##9.79.64':139
'58.##9.227.237':139
'58.##9.18.72':139
'58.##9.214.86':139
'58.##9.76.37':139
'58.##9.167.150':445
'58.##9.250.208':445
'58.##9.178.73':445
'58.##9.208.195':445
'58.##9.29.81':445
'58.##9.157.20':445
'58.#19.28.9':445
'58.##9.237.27':445
'58.##9.8.216':445
'58.##9.255.226':445
'58.##9.25.154':445
'58.##9.43.79':445
'58.##9.121.96':445
'58.##9.76.247':445
'58.##9.186.67':445
'58.##9.122.3':445
'58.##9.92.128':445
'58.##9.183.15':445
'58.##9.61.61':445
'58.##9.114.208':445
'58.##9.54.40':445
'58.##9.175.224':445
'58.##9.252.26':139
'58.##9.79.89':445
'58.##9.32.212':445
'58.##9.69.20':445
'58.##9.185.174':445
'58.##9.100.234':445
'58.##9.126.46':445
'58.##9.85.53':445
'58.##9.97.249':445
'58.##9.2.109':445
'58.##9.124.254':445
'58.##9.82.199':445
'58.##9.252.26':445
'58.##9.22.211':445
'58.##9.27.214':445
'58.##9.184.195':445
'58.##9.187.219':445
'58.##9.165.81':445
'58.##9.231.164':445
'58.##9.68.213':445
'58.##9.46.111':445
'58.##9.72.145':445
'58.##9.173.61':445
'58.##9.145.224':445
'58.##9.116.145':445
'58.##9.109.210':445
'58.##9.237.214':445
'58.##9.48.237':445
'58.##9.155.157':139
'58.##9.106.208':139
'58.##9.161.19':139
'58.##9.129.117':445
'58.##9.174.92':139
'58.##9.201.228':445
'58.##9.7.216':445
'58.##9.0.158':445
'58.##9.31.27':445
'58.##9.153.148':445
'58.##9.76.13':445
'58.##9.214.132':445
'58.##9.80.214':445
'58.##9.39.66':445
'58.##9.205.60':445
'58.##9.108.14':445
'58.##9.97.249':139
'58.##9.126.46':139
'58.##9.124.254':139
'58.##9.32.212':139
'58.##9.2.109':139
'58.##9.76.13':139
'58.##9.31.27':139
'58.##9.153.148':139
'58.##9.85.53':139
'58.##9.173.61':139
'58.##9.79.89':139
'58.##9.68.213':139
'58.##9.165.81':139
'58.##9.72.145':139
'58.##9.22.211':139
'58.##9.46.111':139
'58.##9.100.234':139
'58.##9.69.20':139
'58.##9.185.174':139
'58.##9.231.164':139
'58.##9.82.199':139
'58.##9.7.216':139
'58.##9.18.244':445
'58.##9.240.242':445
'58.##9.58.26':445
'58.##9.116.145':139
'58.##9.129.117':139
'58.##9.4.142':445
'58.##9.170.181':445
'58.##9.90.140':445
'58.##9.2.189':445
'58.##9.150.226':445
'58.##9.145.224':139
'58.##9.39.66':139
'58.##9.214.132':139
'58.##9.108.14':139
'58.##9.0.158':139
'58.##9.205.60':139
'58.##9.48.237':139
'58.##9.109.210':139
'58.##9.237.214':139
'58.##9.80.214':139
'58.##9.201.228':139
'58.##9.10.203':139
'58.##9.77.60':445
'58.##9.17.84':445
'58.##9.65.99':445
'58.##9.60.82':445
'58.##9.103.157':445
'58.##9.115.130':445
'58.##9.90.129':445
'58.##9.75.223':445
'58.##9.124.10':445
'58.##9.11.242':445
'58.#19.27.5':445
'58.##9.52.195':139
'58.##9.102.236':139
'58.##9.189.142':139
'58.##9.251.149':139
'58.##9.247.34':139
'58.#19.17.6':445
'58.##9.236.41':445
'58.##9.96.155':139
'58.##9.99.104':139
'58.##9.20.35':139
'58.##9.19.37':445
'58.##9.15.182':445
'58.##9.107.73':445
'58.##9.145.246':445
'58.##9.122.137':445
'58.##9.246.23':445
'58.##9.112.98':445
'58.##9.142.203':445
'58.##9.95.219':445
'58.##9.70.40':445
'58.##9.110.114':445
'58.##9.144.247':445
'58.##9.121.61':445
'58.##9.68.47':445
'58.##9.35.95':445
'58.##9.58.166':445
'58.##9.5.253':445
'58.##9.138.183':445
'58.##9.247.137':445
'58.##9.211.141':445
'58.##9.226.19':445
'58.##9.24.226':445
'58.##9.58.166':139
'58.##9.5.253':139
'58.##9.19.37':139
'58.##9.115.130':139
'58.##9.90.129':139
'58.##9.226.19':139
'58.##9.24.226':139
'58.##9.68.47':139
'58.##9.35.95':139
'58.##9.121.61':139
'58.##9.75.223':139
'58.##9.60.82':139
'58.##9.103.157':139
'58.#19.27.5':139
'58.##9.236.41':139
'58.#19.17.6':139
'58.##9.124.10':139
'58.##9.11.242':139
'58.##9.17.84':139
'58.##9.65.99':139
'58.##9.77.60':139
'58.##9.211.141':139
'58.##9.178.173':139
'58.##9.25.11':139
'58.##9.44.214':139
'58.##9.112.98':139
'58.##9.142.203':139
'58.##9.174.63':139
'58.##9.149.188':139
'58.##9.145.218':139
'58.##9.198.146':139
'58.##9.29.43':139
'58.##9.95.219':139
'58.##9.122.137':139
'58.##9.246.23':139
'58.##9.144.247':139
'58.##9.138.183':139
'58.##9.247.137':139
'58.##9.70.40':139
'58.##9.110.114':139
'58.##9.107.73':139
'58.##9.145.246':139
'58.##9.15.182':139
'58.##9.44.214':445
'58.##9.30.44':445
'58.##9.121.150':445
'58.#19.7.48':445
'58.##9.121.150':139
'58.##9.7.253':139
'58.##9.122.3':139
'58.##9.92.128':139
'58.##9.167.150':139
'58.##9.7.253':445
'58.##9.86.222':139
'58.##9.30.44':139
'58.##9.252.170':445
'58.#19.62.5':445
'58.##9.242.232':445
'58.##9.33.229':445
'58.##9.213.10':445
'58.##9.255.79':445
'58.#19.7.48':139
'58.##9.41.16':445
'58.##9.144.216':445
'58.##9.80.71':445
'58.##9.186.67':139
'58.##9.25.154':139
'58.##9.8.216':139
'58.##9.255.226':139
'58.##9.250.208':139
'58.##9.178.73':139
'58.#19.61.4':139
'58.##9.143.43':139
'58.##9.72.51':139
'58.#19.28.9':139
'58.##9.237.27':139
'58.##9.208.195':139
'58.##9.175.224':139
'58.##9.114.208':139
'58.##9.54.40':139
'58.##9.121.96':139
'58.##9.76.247':139
'58.##9.29.81':139
'58.##9.157.20':139
'58.##9.43.79':139
'58.##9.183.15':139
'58.##9.61.61':139
'58.##9.96.155':445
'58.##9.236.41':9988
'58.##9.20.35':445
'58.##9.102.236':445
'58.##9.99.104':445
'58.##9.90.129':9988
'58.##9.107.73':9988
'58.##9.121.61':9988
'58.##9.247.137':9988
'58.#19.27.5':9988
'58.##9.52.195':445
'58.##9.29.43':445
'58.##9.145.218':445
'58.##9.198.146':445
'58.##9.178.173':445
'58.##9.25.11':445
'58.##9.247.34':445
'58.##9.189.142':445
'58.##9.251.149':445
'58.##9.174.63':445
'58.##9.149.188':445
'58.##9.103.157':9988
'58.##9.242.232':139
'58.##9.252.170':139
'58.##9.213.10':139
'58.##9.17.84':9988
'58.##9.33.229':139
'58.##9.41.16':139
'58.##9.255.79':139
'58.##9.80.71':139
'58.#19.62.5':139
'58.##9.144.216':139
'58.##9.211.141':9988
'58.##9.60.82':9988
'58.##9.75.223':9988
'58.##9.35.95':9988
'58.##9.68.47':9988
'58.##9.144.247':9988
'58.##9.112.98':9988
'58.##9.77.60':9988
'58.##9.115.130':9988
'58.##9.5.253':9988
'58.##9.19.37':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней