Trojan.Starman.5968

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'82.##7.41.181':445
'82.##7.65.44':445
'82.##7.74.90':445
'82.##7.101.150':445
'82.##7.77.101':445
'82.##7.137.195':445
'82.##7.214.116':139
'82.##7.22.91':445
'82.##7.202.180':445
'82.##7.85.252':445
'82.##7.149.213':445
'82.##7.146.247':445
'82.##7.80.240':445
'82.##7.117.248':445
'82.##7.113.161':445
'82.##7.248.111':445
'82.##7.19.37':445
'82.##7.23.88':445
'82.##7.244.102':445
'82.##7.11.90':445
'82.##7.77.52':445
'82.##7.0.202':139
'82.##7.151.12':139
'82.##7.53.60':139
'82.##7.180.83':139
'82.##7.179.211':139
'82.##7.142.106':139
'82.##7.172.24':139
'82.#07.44.7':139
'82.##7.164.121':139
'82.##7.23.224':139
'82.##7.211.198':445
'82.##7.19.161':139
'82.##7.211.198':139
'82.##7.91.88':139
'82.##7.161.33':139
'82.##7.244.160':139
'82.##7.91.88':445
'82.##7.19.161':445
'82.##7.244.160':445
'82.##7.214.116':445
'82.##7.161.33':445
'82.##7.159.47':445
'82.##7.202.180':139
'82.##7.85.252':139
'82.##7.65.44':139
'82.##7.74.90':139
'82.##7.41.181':139
'82.##7.97.176':445
'82.##7.27.90':445
'82.##7.88.242':445
'82.##7.22.91':139
'82.##7.137.195':139
'82.##7.77.101':139
'82.##7.11.90':139
'82.##7.77.52':139
'82.##7.80.240':139
'82.##7.117.248':139
'82.##7.146.247':139
'82.##7.149.213':139
'82.##7.101.150':139
'82.##7.23.88':139
'82.##7.244.102':139
'82.##7.19.37':139
'82.##7.45.26':445
'82.##7.56.118':445
'82.##7.171.220':445
'82.#07.4.90':445
'82.##7.117.130':445
'82.##7.204.221':445
'82.##7.108.100':445
'82.##7.71.224':445
'82.##7.245.55':445
'82.##7.223.245':445
'82.##7.219.244':445
'82.##7.18.171':445
'82.##7.205.83':445
'82.##7.115.245':445
'82.##7.123.27':445
'82.##7.23.194':445
'82.##7.87.201':445
'82.##7.245.86':445
'82.##7.108.253':445
'82.##7.138.205':445
'82.##7.134.167':445
'82.##7.122.249':139
'82.##7.133.218':445
'82.##7.229.169':445
'82.##7.218.188':445
'82.##7.145.49':445
'82.##7.66.229':445
'82.##7.92.232':445
'82.##7.149.175':445
'82.##7.106.174':445
'82.##7.142.86':445
'82.##7.78.56':445
'82.##7.141.23':445
'82.#07.48.9':445
'82.##7.71.81':445
'82.##7.60.250':445
'82.##7.172.24':445
'82.##7.122.249':445
'82.##7.118.35':445
'82.##7.44.71':445
'82.##7.227.5':445
'82.##7.137.71':445
'82.##7.103.148':445
'82.##7.220.107':445
'82.##7.152.152':139
'82.##7.112.236':445
'82.##7.230.118':445
'82.##7.156.62':445
'82.##7.96.24':139
'82.##7.196.95':139
'82.##7.136.152':139
'82.##7.2.106':139
'82.#07.38.3':139
'82.##7.43.216':445
'82.##7.34.22':445
'82.#07.9.27':445
'82.##7.253.225':445
'82.##7.226.81':445
'82.##7.225.183':445
'82.##7.61.95':445
'82.##7.70.24':445
'82.##7.17.163':445
'82.##7.114.163':445
'82.##7.189.129':445
'82.##7.142.106':445
'82.##7.142.86':139
'82.##7.78.56':139
'82.##7.229.169':139
'82.##7.218.188':139
'82.##7.133.218':139
'82.##7.226.81':139
'82.##7.225.183':139
'82.##7.149.175':139
'82.##7.106.174':139
'82.##7.92.232':139
'82.##7.66.229':139
'82.##7.137.71':139
'82.##7.103.148':139
'82.##7.71.81':139
'82.##7.60.250':139
'82.#07.48.9':139
'82.##7.141.23':139
'82.##7.145.49':139
'82.##7.44.71':139
'82.##7.227.5':139
'82.##7.118.35':139
'82.##7.179.211':445
'82.##7.53.60':445
'82.##7.180.83':445
'82.##7.112.236':139
'82.##7.220.107':139
'82.##7.23.224':445
'82.#07.44.7':445
'82.##7.164.121':445
'82.##7.0.202':445
'82.##7.151.12':445
'82.##7.156.62':139
'82.##7.114.163':139
'82.##7.189.129':139
'82.#07.9.27':139
'82.##7.253.225':139
'82.##7.34.22':139
'82.##7.43.216':139
'82.##7.230.118':139
'82.##7.70.24':139
'82.##7.17.163':139
'82.##7.61.95':139
'82.##7.95.153':445
'82.##7.187.188':445
'82.##7.85.53':445
'82.##7.163.243':445
'82.##7.75.218':445
'82.##7.50.195':445
'82.##7.163.50':445
'82.##7.144.228':445
'82.##7.79.248':445
'82.##7.99.28':445
'82.##7.51.113':445
'82.##7.64.206':139
'82.##7.208.204':139
'82.##7.53.37':139
'82.##7.113.28':139
'82.##7.37.157':139
'82.##7.218.136':445
'82.##7.90.58':445
'82.##7.2.220':139
'82.##7.46.168':139
'82.##7.219.187':139
'82.##7.216.90':445
'82.##7.200.108':445
'82.##7.254.8':445
'82.##7.48.143':445
'82.##7.198.48':445
'82.##7.95.66':445
'82.#07.3.93':445
'82.##7.36.231':445
'82.##7.26.98':445
'82.##7.125.229':445
'82.##7.101.146':445
'82.##7.41.184':445
'82.##7.157.41':445
'82.##7.40.45':445
'82.##7.253.162':445
'82.##7.232.253':445
'82.##7.223.114':445
'82.##7.185.194':445
'82.##7.14.219':445
'82.##7.98.157':445
'82.##7.212.98':445
'82.##7.113.86':139
'82.##7.232.253':139
'82.##7.40.45':139
'82.##7.253.162':139
'82.##7.50.195':139
'82.##7.163.50':139
'82.##7.212.98':139
'82.##7.14.219':139
'82.##7.98.157':139
'82.##7.41.184':139
'82.##7.157.41':139
'82.##7.144.228':139
'82.##7.218.136':139
'82.##7.75.218':139
'82.##7.90.58':139
'82.##7.51.113':139
'82.##7.163.243':139
'82.##7.79.248':139
'82.##7.99.28':139
'82.##7.187.188':139
'82.##7.85.53':139
'82.##7.95.153':139
'82.##7.64.160':139
'82.##7.73.29':139
'82.##7.73.100':139
'82.##7.95.66':139
'82.#07.3.93':139
'82.##7.40.251':139
'82.##7.86.159':139
'82.##7.183.248':139
'82.##7.238.175':139
'82.##7.153.1':139
'82.##7.36.231':139
'82.##7.48.143':139
'82.##7.198.48':139
'82.##7.101.146':139
'82.##7.223.114':139
'82.##7.185.194':139
'82.##7.26.98':139
'82.##7.125.229':139
'82.##7.200.108':139
'82.##7.254.8':139
'82.##7.216.90':139
'82.##7.73.100':445
'82.##7.242.75':445
'82.##7.88.242':139
'82.##7.205.34':445
'82.##7.97.244':445
'82.##7.110.99':445
'82.##7.23.194':139
'82.##7.115.245':139
'82.##7.123.27':139
'82.##7.97.176':139
'82.##7.27.90':139
'82.##7.134.186':445
'82.#07.3.17':139
'82.##7.134.186':139
'82.##7.130.57':445
'82.##7.57.140':445
'82.##7.251.172':445
'82.##7.242.75':139
'82.#07.3.17':445
'82.##7.205.34':139
'82.##7.97.244':139
'82.##7.110.99':139
'82.##7.223.245':139
'82.##7.71.224':139
'82.##7.245.55':139
'82.##7.45.26':139
'82.##7.56.118':139
'82.##7.113.161':139
'82.##7.248.111':139
'82.##7.159.47':139
'82.##7.204.221':139
'82.##7.108.100':139
'82.##7.171.220':139
'82.##7.134.167':139
'82.##7.108.253':139
'82.##7.138.205':139
'82.##7.18.171':139
'82.##7.205.83':139
'82.#07.4.90':139
'82.##7.117.130':139
'82.##7.219.244':139
'82.##7.87.201':139
'82.##7.245.86':139
'82.#07.43.9':445
'82.##7.219.187':445
'82.##7.2.220':445
'82.##7.46.168':445
'82.##7.64.206':445
'82.##7.208.204':445
'82.##7.216.90':9988
'82.##7.79.248':9988
'82.##7.185.194':9988
'82.##7.200.108':9988
'82.##7.48.143':9988
'82.##7.53.37':445
'82.##7.153.1':445
'82.##7.183.248':445
'82.##7.238.175':445
'82.##7.64.160':445
'82.##7.73.29':445
'82.##7.113.28':445
'82.##7.37.157':445
'82.##7.113.86':445
'82.##7.40.251':445
'82.##7.86.159':445
'82.##7.75.218':9988
'82.##7.91.134':139
'82.##7.99.28':9988
'82.##7.90.58':9988
'82.#07.3.93':9988
'82.##7.130.57':139
'82.##7.91.134':445
'82.##7.251.172':139
'82.#07.43.9':139
'82.##7.57.140':139
'82.##7.50.195':9988
'82.##7.36.231':9988
'82.##7.223.114':9988
'82.##7.41.184':9988
'82.##7.95.153':9988
'82.##7.254.8':9988
'82.##7.218.136':9988
'82.##7.253.162':9988
'82.##7.40.45':9988
'82.##7.212.98':9988
'82.##7.101.146':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней