Trojan.Starman.5971

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'87.##5.140.60':445
'87.##5.88.151':445
'87.##5.84.15':445
'87.##5.252.15':445
'87.##5.58.34':445
'87.##5.124.182':445
'87.##5.30.250':445
'87.##5.86.22':445
'87.##5.0.149':139
'87.##5.242.21':445
'87.#65.6.77':445
'87.##5.61.96':445
'87.##5.27.189':445
'87.##5.65.152':445
'87.##5.220.225':445
'87.##5.89.75':445
'87.##5.63.51':445
'87.##5.196.248':445
'87.##5.187.68':445
'87.##5.202.11':445
'87.##5.32.199':445
'87.##5.250.165':445
'87.##5.8.171':445
'87.##5.52.12':445
'87.##5.151.33':445
'87.##5.7.170':139
'87.#65.29.8':139
'87.##5.221.29':139
'87.##5.40.16':139
'87.##5.34.52':139
'87.##5.216.8':139
'87.##5.26.162':139
'87.##5.91.223':139
'87.##5.0.149':445
'87.##5.42.235':139
'87.##5.42.69':139
'87.##5.255.136':139
'87.##5.6.246':139
'87.##5.168.139':139
'87.##5.60.203':139
'87.##5.105.23':139
'87.#65.36.1':139
'87.##5.67.144':139
'87.#65.47.1':139
'87.##5.28.119':139
'87.##5.94.28':139
'87.##5.184.208':139
'87.##5.229.55':139
'87.##5.114.243':139
'87.##5.61.201':139
'87.##5.92.117':445
'87.##5.211.121':445
'87.##5.98.117':445
'87.##5.139.173':445
'87.##5.74.67':445
'87.##5.84.181':445
'87.##5.122.177':445
'87.##5.156.132':445
'87.##5.71.157':139
'87.##5.92.117':139
'87.##5.63.139':445
'87.##5.146.63':445
'87.##5.132.146':445
'87.##5.20.231':445
'87.##5.49.43':445
'87.##5.202.175':445
'87.##5.78.62':445
'87.##5.97.197':445
'87.##5.124.73':445
'87.##5.164.169':445
'87.##5.151.25':445
'87.##5.137.203':445
'87.##5.151.239':445
'87.##5.35.220':445
'87.##5.33.53':445
'87.##5.231.45':445
'87.##5.140.60':139
'87.##5.88.151':139
'87.##5.84.15':139
'87.##5.252.15':139
'87.##5.58.34':139
'87.##5.124.182':139
'87.##5.30.250':139
'87.##5.86.22':139
'87.##5.71.157':445
'87.##5.242.21':139
'87.#65.6.77':139
'87.##5.61.96':139
'87.##5.27.189':139
'87.##5.65.152':139
'87.##5.220.225':139
'87.##5.89.75':139
'87.##5.63.51':139
'87.##5.196.248':139
'87.##5.187.68':139
'87.##5.202.11':139
'87.##5.32.199':139
'87.##5.250.165':139
'87.##5.8.171':139
'87.##5.52.12':139
'87.##5.151.33':139
'87.##5.157.45':445
'87.##5.96.197':445
'87.##5.72.96':445
'87.##5.168.185':445
'87.##5.30.41':445
'87.##5.191.15':445
'87.##5.83.121':445
'87.##5.31.82':445
'87.##5.25.171':445
'87.##5.84.72':445
'87.##5.57.111':445
'87.##5.24.27':445
'87.##5.198.245':445
'87.##5.23.158':445
'87.##5.237.4':445
'87.##5.40.117':445
'87.##5.99.222':445
'87.##5.235.99':445
'87.##5.1.235':445
'87.##5.155.151':445
'87.##5.27.113':445
'87.##5.1.252':445
'87.##5.46.125':445
'87.##5.145.91':445
'87.##5.151.168':445
'87.##5.79.239':139
'87.##5.44.34':139
'87.##5.187.11':139
'87.##5.42.238':139
'87.##5.17.78':139
'87.##5.132.9':139
'87.##5.98.22':139
'87.##5.58.64':139
'87.##5.19.18':139
'87.##5.122.165':139
'87.##5.210.31':139
'87.##5.130.9':139
'87.##5.76.27':139
'87.##5.231.110':139
'87.##5.247.191':139
'87.##5.46.73':139
'87.##5.200.233':139
'87.##5.119.80':139
'87.##5.191.129':139
'87.##5.42.62':139
'87.##5.150.56':139
'87.##5.213.158':139
'87.##5.28.157':139
'87.##5.179.91':139
'87.##5.178.84':139
'87.##5.197.95':445
'87.##5.7.170':445
'87.#65.29.8':445
'87.##5.221.29':445
'87.##5.40.16':445
'87.##5.34.52':445
'87.##5.216.8':445
'87.##5.26.162':445
'87.##5.91.223':445
'87.##5.197.95':139
'87.##5.42.235':445
'87.##5.42.69':445
'87.##5.255.136':445
'87.##5.6.246':445
'87.##5.168.139':445
'87.##5.60.203':445
'87.##5.105.23':445
'87.#65.36.1':445
'87.##5.67.144':445
'87.#65.47.1':445
'87.##5.28.119':445
'87.##5.94.28':445
'87.##5.184.208':445
'87.##5.229.55':445
'87.##5.114.243':445
'87.##5.61.201':445
'87.##5.157.45':139
'87.##5.96.197':139
'87.##5.72.96':139
'87.##5.168.185':139
'87.##5.30.41':139
'87.##5.191.15':139
'87.##5.83.121':139
'87.##5.31.82':139
'87.##5.25.171':139
'87.##5.84.72':139
'87.##5.57.111':139
'87.##5.24.27':139
'87.##5.198.245':139
'87.##5.23.158':139
'87.##5.237.4':139
'87.##5.40.117':139
'87.##5.99.222':139
'87.##5.235.99':139
'87.##5.1.235':139
'87.##5.155.151':139
'87.##5.27.113':139
'87.##5.1.252':139
'87.##5.46.125':139
'87.##5.145.91':139
'87.##5.151.168':139
'87.##5.192.80':445
'87.##5.18.65':445
'87.##5.100.10':445
'87.##5.112.130':445
'87.##5.53.41':445
'87.##5.53.233':445
'87.##5.65.54':445
'87.##5.243.19':445
'87.##5.165.124':445
'87.##5.167.89':445
'87.##5.130.202':445
'87.##5.6.231':445
'87.##5.151.88':445
'87.##5.15.61':445
'87.##5.178.168':445
'87.##5.10.115':445
'87.##5.15.166':445
'87.##5.115.157':445
'87.##5.5.210':445
'87.##5.104.146':445
'87.##5.148.153':445
'87.##5.171.152':445
'87.##5.202.140':445
'87.##5.171.183':445
'87.##5.76.200':445
'87.##5.26.155':445
'87.##5.35.58':445
'87.##5.211.35':445
'87.#65.3.10':445
'87.##5.27.179':445
'87.##5.32.165':445
'87.##5.58.215':445
'87.##5.212.106':445
'87.##5.30.56':445
'87.##5.187.230':445
'87.##5.148.171':445
'87.##5.83.104':445
'87.##5.189.125':445
'87.##5.229.71':445
'87.##5.219.34':445
'87.##5.96.251':445
'87.##5.6.153':445
'87.##5.208.5':445
'87.##5.161.207':445
'87.##5.4.213':445
'87.##5.122.24':445
'87.##5.199.253':445
'87.##5.36.215':445
'87.##5.167.19':445
'87.##5.115.42':445
'87.##5.165.242':445
'87.##5.81.30':139
'87.##5.18.65':139
'87.##5.100.10':139
'87.##5.130.202':139
'87.##5.53.41':139
'87.##5.53.233':139
'87.##5.65.54':139
'87.##5.243.19':139
'87.##5.165.124':139
'87.##5.167.89':139
'87.##5.112.130':139
'87.##5.6.231':139
'87.##5.151.88':139
'87.##5.15.61':139
'87.##5.115.157':139
'87.##5.76.200':139
'87.##5.104.146':139
'87.##5.178.168':139
'87.##5.5.210':139
'87.##5.15.166':139
'87.##5.148.153':139
'87.##5.171.152':139
'87.##5.202.140':139
'87.##5.10.115':139
'87.##5.171.183':139
'87.##5.26.155':139
'87.##5.35.58':139
'87.##5.211.35':139
'87.#65.3.10':139
'87.##5.27.179':139
'87.##5.32.165':139
'87.##5.58.215':139
'87.##5.212.106':139
'87.##5.30.56':139
'87.##5.187.230':139
'87.##5.148.171':139
'87.##5.83.104':139
'87.##5.189.125':139
'87.##5.229.71':139
'87.##5.219.34':139
'87.##5.96.251':139
'87.##5.6.153':139
'87.##5.208.5':139
'87.##5.161.207':139
'87.##5.4.213':139
'87.##5.122.24':139
'87.##5.199.253':139
'87.##5.36.215':139
'87.##5.167.19':139
'87.##5.165.242':139
'87.##5.115.42':139
'87.##5.95.234':445
'87.##5.37.170':445
'87.##5.119.253':445
'87.#65.7.1':445
'87.##5.228.24':445
'87.#65.76.7':445
'87.##5.22.28':445
'87.##5.61.134':445
'87.##5.226.238':139
'87.##5.248.119':445
'87.##5.20.77':445
'87.##5.100.202':445
'87.##5.72.27':445
'87.##5.5.241':445
'87.##5.68.131':445
'87.##5.113.96':445
'87.##5.170.115':445
'87.##5.9.134':445
'87.##5.110.1':445
'87.##5.102.243':445
'87.##5.233.124':445
'87.##5.86.80':445
'87.##5.3.202':445
'87.##5.228.207':445
'87.##5.220.187':445
'87.##5.122.177':139
'87.##5.211.121':139
'87.##5.98.117':139
'87.##5.20.231':139
'87.##5.74.67':139
'87.##5.84.181':139
'87.##5.132.146':139
'87.##5.156.132':139
'87.##5.226.238':445
'87.##5.139.173':139
'87.##5.63.139':139
'87.##5.146.63':139
'87.##5.151.239':139
'87.##5.164.169':139
'87.##5.49.43':139
'87.##5.202.175':139
'87.##5.192.80':139
'87.##5.97.197':139
'87.##5.124.73':139
'87.##5.231.45':139
'87.##5.151.25':139
'87.##5.137.203':139
'87.##5.78.62':139
'87.##5.35.220':139
'87.##5.33.53':139
'87.##5.52.235':445
'87.##5.167.89':9988
'87.##5.229.71':9988
'87.##5.212.106':9988
'87.##5.115.42':9988
'87.##5.122.24':9988
'87.##5.208.5':9988
'87.##5.169.209':445
'87.##5.87.143':139
'87.##5.52.235':139
'87.##5.30.56':9988
'87.##5.81.30':9988
'87.##5.169.209':139
'87.##5.167.19':9988
'87.##5.15.166':9988
'87.##5.26.155':9988
'87.##5.148.153':9988
'87.##5.81.30':445
'87.##5.178.168':9988
'87.##5.5.210':9988
'87.##5.151.88':9988
'87.##5.161.207':9988
'87.##5.219.34':9988
'87.##5.171.152':9988
'87.##5.18.65':9988
'87.##5.65.54':9988
'87.##5.95.234':139
'87.##5.37.170':139
'87.##5.119.253':139
'87.#65.7.1':139
'87.##5.228.24':139
'87.#65.76.7':139
'87.##5.22.28':139
'87.##5.61.134':139
'87.##5.87.143':445
'87.##5.248.119':139
'87.##5.20.77':139
'87.##5.100.202':139
'87.##5.72.27':139
'87.##5.5.241':139
'87.##5.68.131':139
'87.##5.113.96':139
'87.##5.170.115':139
'87.##5.9.134':139
'87.##5.110.1':139
'87.##5.102.243':139
'87.##5.233.124':139
'87.##5.86.80':139
'87.##5.3.202':139
'87.##5.228.207':139
'87.##5.220.187':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней