Trojan.Starman.5227

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'60.#31.1.88':139
'60.##1.75.137':139
'60.##1.102.75':139
'60.##1.16.162':445
'60.##1.56.179':445
'60.##1.26.32':445
'60.##1.229.7':139
'60.##1.126.228':139
'60.##1.202.179':139
'60.##1.136.102':139
'60.##1.238.136':139
'60.##1.143.165':139
'60.##1.12.116':445
'60.##1.159.18':445
'60.##1.64.138':445
'60.##1.39.142':445
'60.##1.177.58':445
'60.##1.160.242':445
'60.##1.43.85':445
'60.##1.91.191':445
'60.##1.42.74':445
'60.##1.128.64':445
'60.##1.144.213':445
'60.##1.171.125':445
'60.##1.133.196':139
'60.##1.212.201':139
'60.##1.17.175':139
'60.##1.104.53':139
'60.##1.236.254':139
'60.##1.101.244':139
'60.##1.102.124':139
'60.##1.75.137':445
'60.##1.102.75':445
'60.##1.136.102':445
'60.##1.209.245':139
'60.##1.243.188':139
'60.#31.1.88':445
'60.##1.58.149':139
'60.##1.217.64':139
'60.##1.28.160':139
'60.##1.143.141':139
'60.##1.65.130':139
'60.##1.70.97':139
'60.##1.57.106':139
'60.##1.164.127':139
'60.##1.255.36':139
'60.##1.130.101':139
'60.##1.63.173':139
'60.##1.69.53':139
'60.##1.155.254':445
'60.##1.33.81':445
'60.##1.163.64':445
'60.##1.27.67':445
'60.##1.95.87':445
'60.##1.209.148':445
'60.##1.188.77':445
'60.##1.190.70':139
'60.##1.32.109':139
'60.##1.183.158':445
'60.##1.168.62':445
'60.##1.135.86':445
'60.##1.199.55':445
'60.##1.14.119':445
'60.##1.65.18':445
'60.##1.114.101':445
'60.##1.215.201':445
'60.##1.172.138':445
'60.##1.119.215':445
'60.##1.5.239':445
'60.##1.19.59':445
'60.##1.1.129':445
'60.#31.84.1':445
'60.##1.18.30':445
'60.##1.57.167':139
'60.##1.16.162':139
'60.##1.56.179':139
'60.##1.26.32':139
'60.##1.43.85':139
'60.##1.91.191':139
'60.##1.42.74':139
'60.##1.130.137':445
'60.##1.36.182':445
'60.##1.86.91':445
'60.##1.190.70':445
'60.##1.32.109':445
'60.##1.57.167':445
'60.##1.39.142':139
'60.##1.177.58':139
'60.##1.160.242':139
'60.##1.130.137':139
'60.##1.36.182':139
'60.##1.86.91':139
'60.##1.128.64':139
'60.##1.144.213':139
'60.##1.171.125':139
'60.##1.12.116':139
'60.##1.159.18':139
'60.##1.64.138':139
'60.##1.214.220':445
'60.##1.191.214':445
'60.##1.39.35':445
'60.##1.230.96':445
'60.##1.218.153':445
'60.##1.110.212':445
'60.##1.132.130':139
'60.##1.12.49':139
'60.##1.9.234':139
'60.##1.58.126':445
'60.##1.31.29':139
'60.##1.232.211':139
'60.##1.96.34':445
'60.##1.69.45':445
'60.##1.16.28':445
'60.##1.215.241':445
'60.##1.78.38':445
'60.##1.34.118':445
'60.##1.117.170':445
'60.##1.248.200':445
'60.##1.168.141':445
'60.##1.153.235':445
'60.##1.110.51':445
'60.##1.72.159':445
'60.##1.107.232':139
'60.##1.12.130':139
'60.##1.136.56':139
'60.##1.184.135':139
'60.##1.166.142':139
'60.##1.69.250':139
'60.##1.41.244':139
'60.##1.33.64':139
'60.##1.36.121':139
'60.##1.233.198':139
'60.##1.209.247':139
'60.##1.83.143':139
'60.##1.4.113':139
'60.##1.216.202':139
'60.##1.176.203':139
'60.##1.137.29':139
'60.##1.108.42':139
'60.##1.102.141':139
'60.##1.155.155':139
'60.##1.191.194':139
'60.##1.152.191':139
'60.##1.206.197':139
'60.##1.35.138':139
'60.##1.208.76':139
'60.##1.194.167':139
'60.##1.57.106':445
'60.##1.164.127':445
'60.##1.255.36':445
'60.##1.130.101':445
'60.##1.63.173':445
'60.##1.69.53':445
'60.##1.212.201':445
'60.##1.17.175':445
'60.##1.104.53':445
'60.##1.236.254':445
'60.##1.101.244':445
'60.##1.102.124':445
'60.##1.126.228':445
'60.##1.202.179':445
'60.##1.133.196':445
'60.##1.238.136':445
'60.##1.143.165':445
'60.##1.229.7':445
'60.##1.58.149':445
'60.##1.217.64':445
'60.##1.28.160':445
'60.##1.143.141':445
'60.##1.65.130':445
'60.##1.70.97':445
'60.##1.209.245':445
'60.##1.230.96':139
'60.##1.218.153':139
'60.##1.110.212':139
'60.##1.117.170':139
'60.##1.248.200':139
'60.##1.168.141':139
'60.##1.58.126':139
'60.##1.116.231':445
'60.##1.126.246':445
'60.##1.214.220':139
'60.##1.191.214':139
'60.##1.39.35':139
'60.##1.215.241':139
'60.##1.78.38':139
'60.##1.34.118':139
'60.##1.243.188':445
'60.##1.116.231':139
'60.##1.126.246':139
'60.##1.153.235':139
'60.##1.110.51':139
'60.##1.72.159':139
'60.##1.96.34':139
'60.##1.69.45':139
'60.##1.16.28':139
'60.##1.130.21':445
'60.##1.224.77':445
'60.##1.63.116':445
'60.##1.164.137':445
'60.##1.2.240':445
'60.##1.3.155':445
'60.##1.213.107':445
'60.##1.31.112':445
'60.##1.121.84':445
'60.##1.3.180':445
'60.##1.229.208':445
'60.##1.19.141':445
'60.##1.216.151':445
'60.##1.161.136':445
'60.##1.107.73':445
'60.##1.206.254':445
'60.##1.24.150':139
'60.##1.72.114':139
'60.##1.172.64':445
'60.##1.35.177':445
'60.##1.67.108':445
'60.##1.49.211':445
'60.##1.1.214':445
'60.##1.21.203':445
'60.##1.67.237':445
'60.##1.123.190':445
'60.##1.102.222':445
'60.##1.149.19':445
'60.##1.122.235':445
'60.##1.72.62':445
'60.##1.130.125':445
'60.##1.252.13':445
'60.##1.228.81':445
'60.##1.145.103':445
'60.##1.62.57':445
'60.##1.50.213':445
'60.##1.28.50':445
'60.##1.54.61':445
'60.##1.226.27':445
'60.##1.19.39':445
'60.##1.37.165':445
'60.##1.114.133':445
'60.##1.65.110':445
'60.##1.195.64':445
'60.#31.42.3':445
'60.##1.191.126':445
'60.##1.39.105':445
'60.##1.245.23':445
'60.##1.220.245':445
'60.##1.142.139':445
'60.##1.164.137':139
'60.##1.229.208':139
'60.##1.19.141':139
'60.##1.213.107':139
'60.##1.224.77':139
'60.##1.63.116':139
'60.##1.3.180':139
'60.##1.123.190':139
'60.##1.114.133':139
'60.##1.216.151':139
'60.##1.31.112':139
'60.##1.121.84':139
'60.##1.206.254':139
'60.##1.1.214':139
'60.##1.21.203':139
'60.##1.172.64':139
'60.##1.161.136':139
'60.##1.107.73':139
'60.##1.49.211':139
'60.##1.2.240':139
'60.##1.3.155':139
'60.##1.67.237':139
'60.##1.35.177':139
'60.##1.67.108':139
'60.##1.65.110':139
'60.##1.122.235':139
'60.##1.50.213':139
'60.##1.28.50':139
'60.##1.252.13':139
'60.##1.102.222':139
'60.##1.149.19':139
'60.##1.62.57':139
'60.##1.77.233':139
'60.##1.251.77':139
'60.##1.54.61':139
'60.##1.228.81':139
'60.##1.145.103':139
'60.##1.37.165':139
'60.##1.245.23':139
'60.##1.220.245':139
'60.##1.195.64':139
'60.##1.226.27':139
'60.##1.19.39':139
'60.##1.39.105':139
'60.##1.72.62':139
'60.##1.130.125':139
'60.##1.142.139':139
'60.#31.42.3':139
'60.##1.191.126':139
'60.##1.80.202':139
'60.##1.56.159':139
'60.##1.150.0':139
'60.##1.123.163':139
'60.##1.202.17':139
'60.##1.23.198':139
'60.##1.215.201':139
'60.##1.172.138':139
'60.##1.199.55':139
'60.##1.244.184':139
'60.##1.130.21':139
'60.##1.114.101':139
'60.##1.137.235':445
'60.##1.152.67':445
'60.##1.50.72':445
'60.#31.67.6':445
'60.##1.34.252':445
'60.##1.13.63':445
'60.##1.44.61':445
'60.##1.214.13':445
'60.##1.127.118':445
'60.##1.86.83':445
'60.##1.128.70':445
'60.##1.135.128':445
'60.##1.14.119':139
'60.##1.135.86':139
'60.##1.188.77':139
'60.##1.123.163':445
'60.##1.163.64':139
'60.##1.183.158':139
'60.##1.168.62':139
'60.##1.56.159':445
'60.##1.150.0':445
'60.##1.244.184':445
'60.##1.202.17':445
'60.##1.23.198':445
'60.##1.80.202':445
'60.##1.18.30':139
'60.##1.119.215':139
'60.##1.5.239':139
'60.##1.65.18':139
'60.##1.1.129':139
'60.#31.84.1':139
'60.##1.209.148':139
'60.##1.155.254':139
'60.##1.33.81':139
'60.##1.19.59':139
'60.##1.27.67':139
'60.##1.95.87':139
'60.##1.228.81':9988
'60.##1.62.57':9988
'60.##1.149.19':9988
'60.##1.121.84':9988
'60.##1.226.27':9988
'60.##1.220.245':9988
'60.##1.213.221':139
'60.##1.62.228':139
'60.##1.222.242':139
'60.##1.77.233':9988
'60.#31.5.89':139
'60.##1.222.5':139
'60.##1.72.114':445
'60.##1.206.254':9988
'60.##1.67.108':9988
'60.##1.77.233':445
'60.##1.251.77':445
'60.##1.24.150':445
'60.##1.3.155':9988
'60.##1.107.73':9988
'60.##1.229.208':9988
'60.##1.164.137':9988
'60.##1.2.240':9988
'60.##1.21.203':9988
'60.##1.171.165':139
'60.#31.5.89':445
'60.##1.222.5':445
'60.##1.213.221':445
'60.##1.44.61':139
'60.##1.214.13':139
'60.##1.127.118':139
'60.##1.151.55':445
'60.##1.137.37':445
'60.##1.86.10':445
'60.##1.62.228':445
'60.##1.222.242':445
'60.##1.171.165':445
'60.#31.67.6':139
'60.##1.34.252':139
'60.##1.13.63':139
'60.##1.151.55':139
'60.##1.137.37':139
'60.##1.86.10':139
'60.##1.86.83':139
'60.##1.128.70':139
'60.##1.135.128':139
'60.##1.137.235':139
'60.##1.152.67':139
'60.##1.50.72':139

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней