Trojan.Starman.5123

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'89.##.147.253':445
'89.##.171.201':445
'89.##.24.200':445
'89.##.170.182':445
'89.##.119.170':445
'89.##.145.202':445
'89.##.126.239':445
'89.##.203.16':445
'89.#0.142.3':445
'89.#0.41.87':445
'89.##.248.184':445
'89.##.111.136':445
'89.##.102.217':445
'89.##.128.206':445
'89.##.116.214':445
'89.#0.213.0':445
'89.##.88.239':445
'89.##.112.29':445
'89.##.227.200':445
'89.##.254.108':445
'89.##.41.254':445
'89.#0.52.17':139
'89.##.63.129':139
'89.##.131.254':139
'89.##.171.254':139
'89.##.38.171':139
'89.#0.13.76':139
'89.##.124.45':139
'89.##.234.125':139
'89.##.12.102':139
'89.#0.12.34':139
'89.##.113.196':139
'89.##.65.101':445
'89.##.101.16':139
'89.##.65.101':139
'89.#0.53.11':139
'89.##.180.65':139
'89.##.35.202':139
'89.#0.53.11':445
'89.##.101.16':445
'89.##.35.202':445
'89.#0.52.17':445
'89.##.180.65':445
'89.#0.142.3':139
'89.#0.41.87':139
'89.##.171.201':139
'89.##.24.200':139
'89.##.147.253':139
'89.#0.27.76':445
'89.##.145.27':445
'89.##.126.239':139
'89.##.203.16':139
'89.##.145.202':139
'89.##.119.170':139
'89.##.254.108':139
'89.##.41.254':139
'89.##.102.217':139
'89.##.128.206':139
'89.##.111.136':139
'89.##.248.184':139
'89.##.170.182':139
'89.##.112.29':139
'89.##.227.200':139
'89.##.88.239':139
'89.##.174.178':445
'89.#0.10.83':445
'89.##.146.169':445
'89.#0.90.16':445
'89.##.107.60':445
'89.#0.3.167':445
'89.##.81.111':445
'89.##.214.81':445
'89.##.27.165':445
'89.#0.9.24':445
'89.##.135.96':445
'89.#0.29.38':445
'89.##.56.122':445
'89.##.13.121':445
'89.##.85.239':445
'89.##.172.47':445
'89.##.248.129':445
'89.##.222.237':445
'89.##.130.156':445
'89.##.52.143':445
'89.##.114.143':445
'89.##.144.39':445
'89.##.121.189':445
'89.##.238.127':445
'89.##.17.220':445
'89.##.25.250':445
'89.##.124.148':445
'89.##.109.137':445
'89.##.114.127':445
'89.#0.18.94':445
'89.##.232.143':445
'89.##.93.232':445
'89.##.153.149':445
'89.##.68.125':445
'89.##.68.161':445
'89.##.138.62':445
'89.##.124.45':445
'89.##.234.125':445
'89.##.218.160':445
'89.##.86.182':445
'89.#0.2.185':445
'89.#0.76.30':445
'89.##.105.181':445
'89.#0.99.59':445
'89.##.26.196':445
'89.#0.20.59':139
'89.##.86.156':445
'89.##.211.210':445
'89.##.36.212':445
'89.##.83.216':139
'89.##.104.174':139
'89.##.107.47':139
'89.##.73.179':139
'89.##.35.231':139
'89.##.44.200':445
'89.##.214.98':445
'89.##.134.214':445
'89.##.220.57':445
'89.##.119.72':445
'89.##.134.10':445
'89.#0.25.86':445
'89.#0.75.36':445
'89.##.144.157':445
'89.##.204.234':445
'89.##.85.172':445
'89.##.232.143':139
'89.##.93.232':139
'89.##.238.127':139
'89.##.17.220':139
'89.##.121.189':139
'89.#0.99.59':139
'89.##.119.72':139
'89.##.114.127':139
'89.#0.18.94':139
'89.##.109.137':139
'89.##.124.148':139
'89.#0.76.30':139
'89.##.105.181':139
'89.##.68.161':139
'89.##.138.62':139
'89.##.68.125':139
'89.##.153.149':139
'89.##.25.250':139
'89.##.86.182':139
'89.#0.2.185':139
'89.##.218.160':139
'89.##.134.10':139
'89.#0.13.76':445
'89.##.171.254':445
'89.##.38.171':445
'89.##.86.156':139
'89.##.26.196':139
'89.##.113.196':445
'89.##.12.102':445
'89.#0.12.34':445
'89.##.63.129':445
'89.##.131.254':445
'89.##.36.212':139
'89.##.204.234':139
'89.##.85.172':139
'89.##.134.214':139
'89.##.220.57':139
'89.##.214.98':139
'89.##.44.200':139
'89.##.211.210':139
'89.#0.75.36':139
'89.##.144.157':139
'89.#0.25.86':139
'89.#0.213.0':139
'89.#0.24.62':445
'89.#0.37.17':445
'89.##.32.156':445
'89.##.147.21':445
'89.##.61.150':445
'89.##.135.91':445
'89.#0.42.96':445
'89.##.90.243':445
'89.##.177.87':445
'89.##.243.15':445
'89.##.48.130':445
'89.#0.52.91':139
'89.##.141.21':139
'89.##.180.115':139
'89.##.156.176':139
'89.##.48.111':139
'89.##.214.104':445
'89.##.129.214':445
'89.##.125.203':139
'89.##.96.137':139
'89.##.225.152':139
'89.#0.61.89':445
'89.#0.53.43':445
'89.#0.35.53':445
'89.#0.87.97':445
'89.##.16.218':445
'89.##.222.179':445
'89.##.117.39':445
'89.##.159.88':445
'89.##.157.60':445
'89.##.159.34':445
'89.##.127.202':445
'89.#0.38.95':445
'89.#0.7.6':445
'89.##.210.108':445
'89.#0.31.86':445
'89.##.213.20':445
'89.##.115.230':445
'89.##.135.181':445
'89.##.67.136':445
'89.#0.45.44':445
'89.##.143.198':445
'89.##.237.121':445
'89.##.213.20':139
'89.##.115.230':139
'89.#0.61.89':139
'89.##.135.91':139
'89.#0.42.96':139
'89.##.143.198':139
'89.##.237.121':139
'89.##.210.108':139
'89.#0.31.86':139
'89.#0.7.6':139
'89.##.90.243':139
'89.##.147.21':139
'89.##.61.150':139
'89.##.48.130':139
'89.##.129.214':139
'89.##.214.104':139
'89.##.177.87':139
'89.##.243.15':139
'89.#0.37.17':139
'89.##.32.156':139
'89.#0.24.62':139
'89.#0.45.44':139
'89.#0.28.89':139
'89.##.65.159':139
'89.##.62.161':139
'89.##.117.39':139
'89.##.159.88':139
'89.##.109.10':139
'89.##.41.208':139
'89.##.243.106':139
'89.##.101.239':139
'89.##.169.100':139
'89.##.157.60':139
'89.##.16.218':139
'89.##.222.179':139
'89.#0.38.95':139
'89.##.135.181':139
'89.##.67.136':139
'89.##.159.34':139
'89.##.127.202':139
'89.#0.35.53':139
'89.#0.87.97':139
'89.#0.53.43':139
'89.##.185.24':445
'89.##.237.184':445
'89.#0.61.55':445
'89.#0.53.88':139
'89.##.145.213':445
'89.##.145.27':139
'89.##.174.178':139
'89.#0.27.76':139
'89.#0.20.24':445
'89.#0.53.88':445
'89.#0.20.24':139
'89.##.44.242':445
'89.##.202.44':445
'89.##.242.92':445
'89.#0.4.72':445
'89.##.218.19':445
'89.##.185.24':139
'89.##.237.184':139
'89.#0.61.55':139
'89.##.231.202':445
'89.##.145.213':139
'89.##.172.47':139
'89.##.146.169':139
'89.#0.9.24':139
'89.#0.10.83':139
'89.#0.3.167':139
'89.#0.90.16':139
'89.##.214.81':139
'89.##.116.214':139
'89.##.81.111':139
'89.##.135.96':139
'89.##.27.165':139
'89.##.107.60':139
'89.##.13.121':139
'89.##.114.143':139
'89.##.56.122':139
'89.##.248.129':139
'89.##.85.239':139
'89.##.130.156':139
'89.#0.29.38':139
'89.##.222.237':139
'89.##.144.39':139
'89.##.52.143':139
'89.##.225.152':445
'89.##.125.203':445
'89.##.96.137':445
'89.#0.52.91':445
'89.##.141.21':445
'89.##.213.20':9988
'89.#0.61.89':9988
'89.##.237.121':9988
'89.##.147.21':9988
'89.##.222.179':9988
'89.##.180.115':445
'89.##.101.239':445
'89.##.169.100':445
'89.##.65.159':445
'89.##.62.161':445
'89.#0.28.89':445
'89.##.156.176':445
'89.##.48.111':445
'89.##.41.208':445
'89.##.243.106':445
'89.##.109.10':445
'89.#0.87.97':9988
'89.#0.4.72':139
'89.##.218.19':139
'89.#0.72.69':139
'89.##.214.104':9988
'89.##.177.87':9988
'89.##.231.202':139
'89.#0.72.69':445
'89.##.202.44':139
'89.##.242.92':139
'89.##.44.242':139
'89.##.143.198':9988
'89.##.129.214':9988
'89.#0.42.96':9988
'89.##.67.136':9988
'89.##.48.130':9988
'89.##.61.150':9988
'89.##.135.91':9988
'89.#0.37.17':9988
'89.##.115.230':9988
'89.##.16.218':9988
'89.#0.38.95':9988

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней