Trojan.Starman.5405

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'83.##0.191.80':445
'83.##0.77.17':445
'83.##0.44.135':445
'83.##0.224.251':445
'83.##0.195.208':445
'83.##0.169.88':445
'83.##0.143.181':445
'83.##0.40.42':445
'83.##0.59.137':445
'83.##0.178.207':445
'83.##0.16.124':445
'83.##0.49.134':445
'83.##0.19.82':445
'83.##0.177.119':445
'83.##0.240.215':445
'83.##0.247.239':445
'83.##0.195.157':445
'83.##0.99.60':445
'83.##0.251.214':445
'83.##0.5.101':445
'83.##0.62.237':445
'83.##0.71.148':445
'83.##0.59.43':139
'83.##0.83.174':139
'83.##0.109.125':139
'83.##0.153.55':139
'83.##0.29.228':139
'83.##0.189.182':139
'83.##0.81.28':139
'83.##0.163.253':139
'83.##0.12.14':139
'83.##0.23.99':139
'83.##0.109.217':139
'83.##0.96.175':445
'83.##0.112.158':445
'83.##0.205.45':445
'83.##0.179.94':445
'83.##0.78.221':445
'83.##0.223.112':445
'83.##0.183.123':445
'83.##0.55.249':139
'83.##0.125.101':445
'83.##0.125.101':139
'83.##0.183.123':139
'83.##0.59.137':139
'83.##0.143.181':139
'83.##0.16.124':139
'83.##0.169.88':139
'83.##0.178.207':139
'83.##0.40.42':139
'83.##0.96.175':139
'83.##0.112.158':139
'83.##0.205.45':139
'83.##0.179.94':139
'83.##0.78.221':139
'83.##0.5.101':139
'83.##0.99.60':139
'83.##0.71.148':139
'83.##0.195.157':139
'83.##0.62.237':139
'83.##0.251.214':139
'83.##0.191.80':139
'83.##0.77.17':139
'83.##0.44.135':139
'83.##0.224.251':139
'83.##0.195.208':139
'83.##0.21.211':445
'83.##0.66.180':445
'83.##0.92.236':445
'83.##0.107.119':445
'83.##0.151.251':445
'83.##0.38.29':445
'83.##0.201.232':445
'83.##0.215.139':445
'83.##0.167.40':445
'83.##0.50.38':445
'83.##0.133.49':445
'83.##0.124.8':445
'83.##0.133.254':445
'83.##0.244.31':445
'83.##0.223.112':139
'83.##0.244.226':445
'83.##0.108.134':445
'83.##0.94.43':445
'83.##0.112.135':445
'83.##0.73.170':445
'83.##0.111.186':445
'83.##0.188.181':445
'83.#20.4.28':445
'83.##0.157.212':445
'83.##0.15.185':445
'83.##0.157.130':445
'83.##0.184.182':445
'83.##0.43.82':445
'83.##0.29.128':445
'83.##0.202.28':445
'83.##0.240.247':445
'83.##0.15.240':445
'83.##0.17.31':445
'83.##0.81.28':445
'83.##0.163.253':445
'83.##0.12.14':445
'83.##0.23.99':445
'83.##0.109.217':445
'83.##0.106.124':445
'83.##0.6.248':445
'83.#20.63.7':445
'83.##0.137.188':445
'83.##0.254.42':445
'83.##0.148.45':445
'83.##0.33.14':445
'83.##0.76.89':445
'83.##0.87.194':445
'83.##0.158.231':445
'83.##0.145.233':445
'83.##0.87.95':445
'83.##0.130.245':139
'83.##0.16.210':139
'83.##0.31.95':445
'83.##0.168.114':445
'83.#20.31.9':445
'83.##0.60.203':445
'83.##0.74.186':445
'83.##0.132.108':445
'83.##0.3.253':445
'83.##0.98.67':445
'83.##0.84.25':445
'83.##0.10.120':445
'83.##0.142.10':445
'83.##0.185.135':445
'83.##0.152.192':445
'83.##0.108.141':445
'83.##0.240.247':139
'83.##0.29.128':139
'83.##0.17.31':139
'83.##0.43.82':139
'83.##0.15.240':139
'83.##0.202.28':139
'83.##0.60.203':139
'83.##0.74.186':139
'83.##0.132.108':139
'83.##0.3.253':139
'83.##0.98.67':139
'83.##0.137.188':139
'83.##0.6.248':139
'83.##0.148.45':139
'83.##0.106.124':139
'83.##0.254.42':139
'83.#20.63.7':139
'83.#20.4.28':139
'83.##0.157.212':139
'83.##0.15.185':139
'83.##0.157.130':139
'83.##0.184.182':139
'83.##0.31.95':139
'83.##0.55.249':445
'83.#20.31.9':139
'83.##0.87.95':139
'83.##0.168.114':139
'83.##0.153.55':445
'83.##0.83.174':445
'83.##0.189.182':445
'83.##0.59.43':445
'83.##0.29.228':445
'83.##0.109.125':445
'83.##0.185.135':139
'83.##0.10.120':139
'83.##0.108.141':139
'83.##0.84.25':139
'83.##0.152.192':139
'83.##0.142.10':139
'83.##0.33.14':139
'83.##0.76.89':139
'83.##0.87.194':139
'83.##0.158.231':139
'83.##0.145.233':139
'83.##0.43.35':445
'83.##0.151.97':445
'83.##0.87.195':445
'83.##0.107.81':445
'83.##0.23.107':445
'83.##0.79.159':445
'83.##0.23.22':445
'83.##0.190.195':445
'83.##0.42.175':445
'83.##0.91.11':445
'83.##0.118.90':445
'83.##0.225.242':139
'83.##0.252.225':139
'83.##0.29.250':139
'83.#20.70.0':139
'83.##0.11.183':139
'83.##0.212.115':139
'83.##0.176.238':445
'83.##0.17.224':445
'83.##0.44.228':445
'83.##0.29.224':139
'83.##0.144.93':445
'83.##0.46.25':445
'83.##0.123.205':445
'83.##0.155.46':445
'83.##0.70.200':445
'83.##0.18.202':445
'83.##0.177.149':445
'83.##0.54.162':445
'83.##0.144.155':445
'83.##0.160.214':445
'83.##0.121.0':445
'83.##0.64.102':445
'83.##0.129.210':445
'83.##0.119.36':445
'83.##0.147.44':445
'83.##0.131.102':445
'83.##0.76.125':445
'83.##0.68.118':445
'83.##0.41.163':445
'83.##0.24.107':445
'83.##0.225.6':445
'83.##0.146.189':445
'83.##0.37.77':445
'83.##0.190.195':139
'83.##0.131.102':139
'83.##0.23.22':139
'83.##0.118.90':139
'83.##0.42.175':139
'83.##0.76.125':139
'83.##0.68.118':139
'83.##0.146.189':139
'83.##0.119.36':139
'83.##0.147.44':139
'83.##0.129.210':139
'83.##0.17.224':139
'83.##0.107.81':139
'83.##0.176.238':139
'83.##0.44.228':139
'83.##0.144.93':139
'83.##0.23.107':139
'83.##0.79.159':139
'83.##0.91.11':139
'83.##0.151.97':139
'83.##0.87.195':139
'83.##0.43.35':139
'83.##0.144.155':139
'83.##0.34.23':139
'83.##0.54.162':139
'83.##0.64.102':139
'83.##0.160.214':139
'83.##0.150.180':139
'83.##0.60.33':139
'83.##0.95.125':139
'83.##0.233.131':139
'83.##0.54.108':139
'83.##0.132.99':139
'83.##0.24.107':139
'83.##0.70.200':139
'83.##0.41.163':139
'83.##0.37.77':139
'83.##0.225.6':139
'83.##0.18.202':139
'83.##0.177.149':139
'83.##0.121.0':139
'83.##0.123.205':139
'83.##0.155.46':139
'83.##0.46.25':139
'83.##0.16.21':139
'83.#20.71.6':139
'83.##0.138.62':445
'83.##0.182.195':445
'83.##0.59.170':445
'83.##0.16.21':445
'83.##0.124.8':139
'83.##0.133.254':139
'83.##0.244.31':139
'83.#20.71.6':445
'83.##0.244.226':139
'83.##0.106.13':445
'83.#20.22.3':445
'83.##0.71.229':445
'83.##0.138.62':139
'83.##0.18.218':445
'83.##0.158.22':445
'83.##0.11.195':445
'83.##0.119.205':445
'83.#20.11.8':445
'83.##0.221.157':445
'83.##0.174.221':445
'83.##0.167.40':139
'83.##0.201.232':139
'83.##0.133.49':139
'83.##0.38.29':139
'83.##0.50.38':139
'83.##0.215.139':139
'83.##0.49.134':139
'83.##0.19.82':139
'83.##0.177.119':139
'83.##0.240.215':139
'83.##0.247.239':139
'83.##0.73.170':139
'83.##0.94.43':139
'83.##0.188.181':139
'83.##0.108.134':139
'83.##0.111.186':139
'83.##0.112.135':139
'83.##0.21.211':139
'83.##0.66.180':139
'83.##0.92.236':139
'83.##0.107.119':139
'83.##0.151.251':139
'83.##0.17.224':9988
'83.##0.43.35':9988
'83.##0.29.224':445
'83.##0.252.225':445
'83.##0.212.115':445
'83.##0.68.118':9988
'83.##0.24.107':9988
'83.##0.131.102':9988
'83.##0.190.195':9988
'83.##0.151.97':9988
'83.##0.79.159':9988
'83.##0.132.99':445
'83.##0.233.131':445
'83.##0.54.108':445
'83.##0.34.23':445
'83.##0.150.180':445
'83.##0.60.33':445
'83.##0.29.250':445
'83.##0.225.242':445
'83.##0.11.183':445
'83.##0.95.125':445
'83.#20.70.0':445
'83.##0.158.22':139
'83.##0.221.157':139
'83.#20.22.3':139
'83.##0.71.229':139
'83.##0.106.13':139
'83.##0.174.221':139
'83.##0.182.195':139
'83.##0.59.170':139
'83.##0.119.205':139
'83.#20.11.8':139
'83.##0.11.195':139
'83.##0.129.210':9988
'83.##0.118.90':9988
'83.##0.147.44':9988
'83.##0.176.238':9988
'83.##0.42.175':9988
'83.##0.146.189':9988
'83.##0.44.228':9988
'83.##0.18.218':139
'83.##0.87.195':9988
'83.##0.23.107':9988
'83.##0.91.11':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней