Trojan.Starman.6540

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'83.##.156.215':445
'83.##.70.112':445
'83.##.166.30':445
'83.##.215.17':445
'83.#6.86.98':139
'83.##.24.123':139
'83.##.155.172':445
'83.##.77.243':445
'83.#6.86.98':445
'83.##.24.123':445
'83.##.15.180':445
'83.##.137.111':445
'83.##.33.123':445
'83.##.142.43':445
'83.##.155.172':139
'83.##.215.17':139
'83.##.156.215':139
'83.##.153.149':445
'83.##.178.140':445
'83.##.95.102':445
'83.#6.86.95':445
'83.##.142.43':139
'83.##.15.180':139
'83.##.77.243':139
'83.##.33.123':139
'83.##.70.112':139
'83.##.166.30':139
'83.##.137.111':139
'83.#6.29.28':139
'83.##.170.24':139
'83.##.54.129':139
'83.#6.17.71':139
'83.##.231.93':139
'83.##.181.60':139
'83.##.81.181':139
'83.##.80.231':139
'83.##.191.80':139
'83.##.251.190':139
'83.##.231.135':139
'83.##.232.19':139
'83.##.208.78':139
'83.#6.8.61':139
'83.##.123.206':139
'83.##.232.115':139
'83.#6.67.48':139
'83.#6.10.92':139
'83.##.123.202':139
'83.##.107.154':139
'83.#6.92.35':139
'83.##.156.68':139
'83.#6.63.61':139
'83.##.106.60':139
'83.##.35.153':139
'83.##.29.136':139
'83.##.46.250':139
'83.#6.45.26':139
'83.##.95.102':139
'83.#6.86.95':139
'83.##.153.149':139
'83.##.178.140':139
'83.##.146.227':139
'83.##.77.173':139
'83.##.185.77':139
'83.##.97.151':445
'83.##.70.177':445
'83.#6.48.36':445
'83.#6.12.35':445
'83.##.180.178':445
'83.##.43.100':445
'83.##.138.180':445
'83.##.253.202':139
'83.##.12.164':139
'83.#6.24.32':139
'83.##.12.249':139
'83.##.222.147':139
'83.##.178.37':139
'83.#6.41.99':139
'83.##.109.14':139
'83.##.85.214':139
'83.##.121.46':139
'83.#6.37.20':139
'83.##.105.24':139
'83.##.42.223':139
'83.##.27.243':139
'83.##.105.24':445
'83.##.42.223':445
'83.##.27.243':445
'83.#6.24.32':445
'83.##.12.249':445
'83.##.253.202':445
'83.##.12.164':445
'83.##.146.227':445
'83.##.77.173':445
'83.##.185.77':445
'83.##.121.46':445
'83.#6.37.20':445
'83.##.109.14':445
'83.##.85.214':445
'83.##.80.209':445
'83.##.206.164':445
'83.##.230.177':445
'83.##.196.169':445
'83.##.85.191':445
'83.##.210.108':445
'83.##.102.210':445
'83.##.222.147':445
'83.##.178.37':445
'83.#6.41.99':445
'83.##.168.17':445
'83.##.21.252':445
'83.##.239.85':445
'83.#6.11.19':445
'83.##.242.251':139
'83.##.131.18':139
'83.#6.80.20':139
'83.##.185.79':139
'83.##.127.30':139
'83.#6.189.2':445
'83.##.30.109':445
'83.##.29.235':445
'83.##.44.166':139
'83.#6.56.96':139
'83.##.140.15':139
'83.##.179.188':139
'83.##.144.135':139
'83.#6.36.11':139
'83.#6.21.19':139
'83.##.29.235':139
'83.#6.80.55':445
'83.##.137.64':445
'83.##.30.109':139
'83.##.154.154':139
'83.##.178.180':139
'83.#6.189.2':139
'83.##.171.226':445
'83.##.154.154':445
'83.##.178.180':445
'83.#6.23.78':445
'83.##.192.232':445
'83.##.109.130':445
'83.##.77.109':445
'83.#6.17.53':139
'83.##.61.114':139
'83.##.152.61':139
'83.##.194.15':139
'83.##.153.156':139
'83.##.187.81':139
'83.#6.34.57':139
'83.##.227.93':139
'83.##.67.250':139
'83.#6.37.39':139
'83.#6.82.6':139
'83.##.27.152':139
'83.##.27.121':139
'83.##.30.164':139
'83.##.217.41':139
'83.#6.65.25':139
'83.##.220.74':139
'83.##.41.112':139
'83.##.77.139':139
'83.##.196.77':139
'83.##.111.196':139
'83.##.71.183':139
'83.##.154.71':139
'83.##.152.154':139
'83.##.132.84':139
'83.##.161.220':139
'83.##.75.212':139
'83.#6.8.193':139
'83.##.46.250':445
'83.#6.45.26':445
'83.##.35.153':445
'83.##.29.136':445
'83.##.123.206':445
'83.##.232.115':445
'83.#6.67.48':445
'83.##.181.60':445
'83.##.81.181':445
'83.#6.17.71':445
'83.##.231.93':445
'83.##.156.68':445
'83.#6.63.61':445
'83.##.106.60':445
'83.#6.87.97':139
'83.##.58.215':139
'83.##.174.133':139
'83.##.123.161':139
'83.#6.235.9':139
'83.##.112.176':139
'83.#6.10.60':139
'83.##.107.154':445
'83.#6.92.35':445
'83.#6.10.92':445
'83.##.123.202':445
'83.##.29.208':139
'83.##.133.111':139
'83.#6.221.3':139
'83.##.29.208':445
'83.##.133.111':445
'83.#6.221.3':445
'83.##.174.133':445
'83.##.123.161':445
'83.#6.87.97':445
'83.##.58.215':445
'83.##.77.109':139
'83.#6.23.78':139
'83.##.171.226':139
'83.##.109.130':139
'83.#6.80.55':139
'83.##.137.64':139
'83.##.192.232':139
'83.##.208.78':445
'83.#6.8.61':445
'83.##.231.135':445
'83.##.232.19':445
'83.#6.29.28':445
'83.##.170.24':445
'83.##.54.129':445
'83.#6.235.9':445
'83.##.112.176':445
'83.#6.10.60':445
'83.##.242.251':445
'83.##.80.231':445
'83.##.191.80':445
'83.##.251.190':445
'83.##.171.117':445
'83.##.24.252':445
'83.##.85.121':445
'83.##.117.235':445
'83.##.199.144':445
'83.#6.4.71':445
'83.#6.235.3':445
'83.##.39.204':445
'83.##.20.244':445
'83.#6.20.92':445
'83.##.106.120':445
'83.##.36.184':445
'83.##.158.57':445
'83.##.25.144':445
'83.##.126.135':445
'83.##.15.183':445
'83.##.196.88':445
'83.##.109.78':445
'83.##.192.159':445
'83.#6.42.45':445
'83.#6.0.96':445
'83.##.171.128':445
'83.##.145.104':445
'83.##.100.200':445
'83.#6.18.76':445
'83.##.37.196':445
'83.##.44.249':445
'83.##.181.26':445
'83.#6.42.45':9988
'83.##.141.170':9988
'83.#6.18.76':9988
'83.##.146.176':445
'83.#6.10.0':445
'83.#6.6.106':445
'83.##.111.203':445
'83.##.58.195':139
'83.##.90.248':139
'83.##.215.10':139
'83.##.251.99':9988
'83.##.171.128':9988
'83.##.145.104':9988
'83.#6.235.3':9988
'83.##.137.27':445
'83.#6.5.97':445
'83.##.152.16':445
'83.#6.15.88':445
'83.##.89.145':445
'83.##.121.135':445
'83.##.253.116':445
'83.#6.10.18':445
'83.#6.62.25':445
'83.#6.53.7':445
'83.##.251.99':445
'83.##.19.192':445
'83.##.168.170':445
'83.##.39.181':445
'83.##.100.200':139
'83.##.199.144':139
'83.#6.4.71':139
'83.##.145.104':139
'83.##.181.26':139
'83.#6.18.76':139
'83.##.171.128':139
'83.##.85.121':139
'83.##.36.184':139
'83.##.158.57':139
'83.##.24.252':139
'83.#6.235.3':139
'83.##.117.235':139
'83.##.171.117':139
'83.##.192.159':139
'83.##.141.170':139
'83.#6.42.45':139
'83.##.125.143':139
'83.##.196.242':139
'83.##.243.159':139
'83.##.136.196':139
'83.##.196.88':139
'83.##.37.196':139
'83.##.44.249':139
'83.##.15.183':139
'83.#6.0.96':139
'83.##.109.78':139
'83.##.126.135':139
'83.#6.53.7':139
'83.#6.10.0':139
'83.#6.6.106':139
'83.#6.62.25':139
'83.##.39.181':139
'83.##.251.99':139
'83.#6.10.18':139
'83.##.196.242':445
'83.##.243.159':445
'83.##.141.170':445
'83.##.125.143':445
'83.##.111.203':139
'83.##.146.176':139
'83.##.136.196':445
'83.#6.20.92':139
'83.##.89.145':139
'83.##.121.135':139
'83.##.20.244':139
'83.##.25.144':139
'83.##.106.120':139
'83.##.39.204':139
'83.##.152.16':139
'83.##.19.192':139
'83.##.168.170':139
'83.#6.5.97':139
'83.##.253.116':139
'83.#6.15.88':139
'83.##.137.27':139
'83.##.235.210':139
'83.##.114.202':139
'83.#6.72.64':139
'83.#6.4.133':139
'83.##.211.192':139
'83.##.75.254':139
'83.##.104.167':139
'83.##.144.241':139
'83.##.80.160':139
'83.##.75.254':445
'83.##.104.167':445
'83.##.247.126':139
'83.##.11.247':139
'83.##.210.243':139
'83.#6.88.74':139
'83.#6.74.19':445
'83.##.74.139':445
'83.##.149.117':445
'83.#6.85.27':445
'83.#6.58.78':445
'83.##.203.194':445
'83.##.135.198':445
'83.##.234.131':445
'83.##.136.252':445
'83.#6.54.43':445
'83.##.156.63':445
'83.#6.74.76':445
'83.#6.72.85':445
'83.#6.4.120':445
'83.##.210.108':139
'83.##.102.210':139
'83.##.196.169':139
'83.##.85.191':139
'83.##.97.151':139
'83.##.70.177':139
'83.#6.48.36':139
'83.##.239.85':139
'83.#6.11.19':139
'83.##.168.17':139
'83.##.21.252':139
'83.##.80.209':139
'83.##.206.164':139
'83.##.230.177':139
'83.#6.4.133':445
'83.##.11.247':445
'83.##.210.243':445
'83.#6.72.64':445
'83.##.144.241':445
'83.##.211.192':445
'83.##.114.202':445
'83.##.43.100':139
'83.##.138.180':139
'83.#6.12.35':139
'83.##.180.178':139
'83.#6.88.74':445
'83.##.247.126':445
'83.##.80.160':445
'83.##.77.223':139
'83.#6.58.78':139
'83.##.203.194':139
'83.##.223.140':139
'83.##.39.254':139
'83.##.93.139':139
'83.##.75.155':139
'83.##.149.117':139
'83.#6.74.76':139
'83.#6.72.85':139
'83.##.74.139':139
'83.##.135.198':139
'83.#6.85.27':139
'83.#6.74.19':139
'83.#6.50.98':139
'83.##.166.172':139
'83.##.55.167':139
'83.##.120.224':139
'83.##.102.236':139
'83.##.205.102':139
'83.##.219.241':139
'83.##.222.56':139
'83.##.78.245':139
'83.##.76.239':139
'83.##.165.68':139
'83.#6.81.41':139
'83.##.130.141':139
'83.##.171.31':139
'83.##.171.31':445
'83.##.165.68':445
'83.##.222.56':445
'83.##.130.141':445
'83.##.166.172':445
'83.##.55.167':445
'83.#6.81.41':445
'83.##.75.155':445
'83.##.223.140':445
'83.##.77.223':445
'83.##.93.139':445
'83.##.78.245':445
'83.##.76.239':445
'83.##.39.254':445
'83.#6.54.43':139
'83.##.58.195':445
'83.##.90.248':445
'83.##.136.252':139
'83.#6.4.120':139
'83.##.156.63':139
'83.##.234.131':139
'83.##.219.241':445
'83.##.120.224':445
'83.#6.50.98':445
'83.##.205.102':445
'83.##.215.10':445
'83.##.235.210':445
'83.##.102.236':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней