Trojan.Starman.5055

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'83.#6.46.20':445
'83.##.21.179':445
'83.##.171.178':139
'83.##.216.190':139
'83.##.45.108':445
'83.##.113.213':445
'83.##.73.176':445
'83.##.219.231':445
'83.##.247.49':445
'83.##.154.89':139
'83.##.201.154':139
'83.##.138.33':139
'83.#6.8.87':139
'83.##.141.179':139
'83.#6.16.41':139
'83.##.123.104':139
'83.#6.31.23':139
'83.##.137.188':139
'83.##.30.225':445
'83.##.51.151':445
'83.##.43.146':445
'83.##.236.16':445
'83.##.95.199':445
'83.##.142.32':445
'83.##.162.135':445
'83.##.71.245':445
'83.##.218.117':445
'83.##.111.30':445
'83.#6.63.80':445
'83.##.174.48':445
'83.##.174.23':445
'83.##.171.57':445
'83.#6.47.24':445
'83.#6.28.23':445
'83.#6.30.39':445
'83.#6.55.57':445
'83.#6.55.80':445
'83.##.33.181':139
'83.#6.55.57':139
'83.#6.55.80':139
'83.##.174.48':139
'83.#6.47.24':139
'83.#6.28.23':139
'83.##.95.199':139
'83.##.51.151':139
'83.#6.30.39':139
'83.##.236.16':139
'83.##.247.49':139
'83.##.113.213':139
'83.##.45.108':139
'83.##.219.231':139
'83.##.73.176':139
'83.##.171.57':139
'83.#6.63.80':139
'83.##.30.225':139
'83.##.174.23':139
'83.##.43.146':139
'83.##.46.239':139
'83.##.109.81':139
'83.##.62.187':139
'83.##.126.137':139
'83.##.221.82':139
'83.##.34.150':139
'83.##.181.114':139
'83.##.41.125':139
'83.##.176.54':139
'83.##.111.30':139
'83.##.162.135':139
'83.##.142.32':139
'83.##.218.117':139
'83.##.71.245':139
'83.##.206.49':139
'83.#6.0.129':139
'83.##.46.155':139
'83.##.101.223':139
'83.##.46.155':445
'83.##.55.107':139
'83.##.20.217':139
'83.##.130.225':139
'83.##.238.139':139
'83.##.166.20':139
'83.##.199.41':139
'83.#6.2.104':139
'83.##.54.166':139
'83.##.244.54':139
'83.##.14.220':139
'83.##.47.165':139
'83.#6.1.96':139
'83.#6.70.71':139
'83.##.201.36':139
'83.##.152.172':139
'83.#6.64.40':139
'83.#6.49.85':139
'83.#6.28.6':139
'83.##.96.214':139
'83.##.167.93':139
'83.#6.0.193':139
'83.##.206.158':139
'83.##.190.245':139
'83.##.14.153':139
'83.##.124.41':139
'83.##.30.209':139
'83.##.136.225':139
'83.##.60.183':139
'83.##.170.131':139
'83.##.31.170':139
'83.##.102.52':139
'83.##.132.101':139
'83.##.223.118':139
'83.##.22.160':139
'83.##.103.175':139
'83.##.168.134':139
'83.##.207.168':139
'83.#6.62.62':139
'83.##.181.114':445
'83.##.33.181':445
'83.##.176.54':445
'83.##.34.150':445
'83.##.138.33':445
'83.##.201.154':445
'83.##.141.179':445
'83.#6.8.87':445
'83.##.154.89':445
'83.#6.0.129':445
'83.##.62.187':445
'83.##.101.223':445
'83.##.206.49':445
'83.##.126.137':445
'83.##.221.82':445
'83.##.41.125':445
'83.##.46.239':445
'83.##.109.81':445
'83.#6.31.23':445
'83.##.145.96':139
'83.##.67.115':139
'83.##.116.160':139
'83.##.17.160':139
'83.##.20.140':139
'83.##.119.34':139
'83.##.214.68':139
'83.##.139.160':139
'83.##.132.139':139
'83.##.123.104':445
'83.##.171.178':445
'83.##.137.188':445
'83.#6.16.41':445
'83.##.216.190':445
'83.#6.3.105':139
'83.#6.79.30':139
'83.##.165.216':139
'83.#6.50.21':139
'83.##.21.179':139
'83.#6.14.52':139
'83.##.56.231':139
'83.##.154.246':139
'83.##.94.232':139
'83.##.183.139':445
'83.#6.6.107':445
'83.#6.44.61':445
'83.##.25.108':445
'83.##.166.10':445
'83.#6.95.77':139
'83.##.145.245':139
'83.#6.83.47':139
'83.##.116.52':139
'83.##.21.229':139
'83.##.175.199':139
'83.##.59.146':139
'83.##.102.14':139
'83.##.197.101':139
'83.#6.3.193':445
'83.##.232.100':445
'83.##.133.128':445
'83.##.148.199':445
'83.#6.40.22':445
'83.##.123.122':445
'83.##.228.218':445
'83.##.231.228':445
'83.##.53.139':445
'83.#6.245.9':445
'83.##.111.13':445
'83.#6.2.140':445
'83.#6.90.4':445
'83.##.248.89':445
'83.#6.9.197':445
'83.##.160.216':445
'83.##.63.151':445
'83.##.89.118':445
'83.##.56.178':445
'83.#6.47.74':139
'83.##.89.118':139
'83.##.56.178':139
'83.#6.2.140':139
'83.#6.9.197':139
'83.##.160.216':139
'83.#6.40.22':139
'83.##.232.100':139
'83.##.63.151':139
'83.##.148.199':139
'83.##.25.108':139
'83.#6.44.61':139
'83.##.166.10':139
'83.##.183.139':139
'83.#6.6.107':139
'83.##.248.89':139
'83.##.111.13':139
'83.#6.3.193':139
'83.#6.90.4':139
'83.##.133.128':139
'83.##.143.66':139
'83.##.178.23':139
'83.##.100.202':139
'83.##.128.231':139
'83.##.218.201':139
'83.#6.2.194':139
'83.##.253.178':139
'83.##.52.108':139
'83.##.135.231':139
'83.#6.245.9':139
'83.##.228.218':139
'83.##.123.122':139
'83.##.53.139':139
'83.##.231.228':139
'83.##.113.179':139
'83.#6.47.6':139
'83.##.142.206':139
'83.#6.98.21':139
'83.##.142.206':445
'83.#6.35.42':139
'83.##.255.155':139
'83.##.229.33':139
'83.##.60.126':139
'83.#6.33.10':139
'83.#6.198.7':139
'83.##.100.21':139
'83.##.210.189':139
'83.##.104.210':139
'83.##.133.128':9988
'83.##.123.122':9988
'83.#6.245.9':9988
'83.##.231.228':9988
'83.##.218.201':9988
'83.##.103.166':139
'83.##.150.45':139
'83.##.178.23':9988
'83.#6.61.16':139
'83.##.56.197':139
'83.##.104.210':445
'83.#6.198.7':445
'83.#6.33.10':445
'83.##.210.189':445
'83.##.100.21':445
'83.#6.66.10':445
'83.#6.46.20':139
'83.##.56.197':445
'83.##.178.65':445
'83.#6.61.16':445
'83.##.103.166':445
'83.##.178.65':139
'83.#6.66.10':139
'83.##.150.45':445
'83.#6.35.42':445
'83.##.255.155':445
'83.##.229.33':445
'83.##.60.126':445
'83.##.52.108':9988
'83.##.253.178':445
'83.#6.47.74':445
'83.##.135.231':445
'83.#6.2.194':445
'83.#6.83.47':445
'83.##.145.245':445
'83.##.21.229':445
'83.##.116.52':445
'83.#6.95.77':445
'83.#6.47.6':445
'83.##.100.202':445
'83.#6.98.21':445
'83.##.113.179':445
'83.##.128.231':445
'83.##.218.201':445
'83.##.52.108':445
'83.##.143.66':445
'83.##.178.23':445
'83.##.102.14':445
'83.##.111.13':9988
'83.#6.9.197':9988
'83.##.166.10':9988
'83.##.248.89':9988
'83.##.56.178':9988
'83.##.142.206':9988
'83.#6.2.194':9988
'83.#6.40.22':9988
'83.#6.98.21':9988
'83.##.59.146':445
'83.##.154.246':445
'83.##.197.101':445
'83.##.175.199':445
'83.##.94.232':445
'83.##.183.139':9988
'83.##.25.108':9988
'83.#6.14.52':445
'83.##.56.231':445

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней