Поддержка
Круглосуточная поддержка

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.Starman.4942

Добавлен в вирусную базу Dr.Web: 2014-11-24

Описание добавлено:

Техническая информация

Для обеспечения автозапуска и распространения:
Создает или изменяет следующие файлы:
  • %WINDIR%\Tasks\SA.DAT
Вредоносные функции:
Запускает на исполнение:
  • '<SYSTEM32>\svchost.exe' -k netsvcs
Изменения в файловой системе:
Создает следующие файлы:
  • %CommonProgramFiles%\System\ado\tsektjkj.exe
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
  • %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
Сетевая активность:
Подключается к:
  • '21#.#43.143.13':445
  • '21#.#43.242.142':445
  • '21#.#43.101.36':445
  • '21#.#43.1.134':139
  • '21#.#43.241.234':139
  • '21#.#43.205.164':139
  • '21#.#43.33.53':445
  • '21#.#43.30.73':445
  • '21#.#43.64.30':445
  • '21#.#43.93.64':445
  • '21#.#43.76.206':445
  • '21#.#43.211.46':445
  • '21#.#43.106.214':445
  • '21#.#43.244.248':139
  • '21#.#43.101.36':139
  • '21#.#43.33.53':139
  • '21#.#43.76.206':139
  • '21#.#43.36.178':445
  • '21#.#43.143.13':139
  • '21#.#43.242.142':139
  • '21#.#43.211.46':139
  • '21#.#43.93.64':139
  • '21#.#43.9.163':139
  • '21#.#43.11.124':139
  • '21#.#43.106.214':139
  • '21#.#43.30.73':139
  • '21#.#43.64.30':139
  • '21#.#43.9.163':445
  • '21#.#43.143.18':139
  • '21#.#43.95.74':139
  • '21#.#43.170.95':139
  • '21#.#43.116.222':139
  • '21#.#43.255.2':139
  • '21#.#43.53.26':139
  • '21#.#43.152.170':139
  • '21#.#43.239.229':139
  • '21#.#43.90.149':139
  • '21#.#43.255.22':139
  • '21#.#43.255.151':139
  • '21#.#43.67.148':139
  • '21#.#43.10.68':139
  • '21#.#43.26.210':139
  • '21#.#43.241.234':445
  • '21#.#43.205.164':445
  • '21#.#43.130.224':139
  • '21#.#43.11.124':445
  • '21#.#43.244.248':445
  • '21#.#43.1.134':445
  • '21#.#43.134.244':139
  • '21#.#43.251.185':139
  • '21#.#43.54.250':139
  • '21#.#43.229.151':139
  • '21#.#43.214.148':139
  • '21#.#43.56.173':139
  • '21#.#43.168.234':139
  • '21#.#43.28.196':139
  • '21#.#43.6.34':139
  • '21#.#43.80.226':139
  • '21#.#43.99.222':139
  • '21#.#43.99.225':139
  • '21#.#43.3.181':139
  • '21#.#43.36.178':139
  • '21#.#43.43.222':445
  • '21#.#43.88.188':445
  • '21#.#43.208.239':445
  • '21#.#43.20.62':445
  • '21#.#43.155.57':445
  • '21#.#43.191.106':445
  • '21#.#43.32.222':139
  • '21#.#43.234.246':139
  • '21#.#43.62.40':139
  • '21#.#43.101.162':139
  • '21#.#43.219.240':139
  • '21#.#43.55.212':139
  • '21#.#43.150.131':139
  • '21#.#43.116.152':139
  • '21#.#43.204.181':139
  • '21#.#43.34.136':139
  • '21#.#43.18.140':139
  • '21#.#43.181.224':139
  • '21#.#43.19.213':139
  • '21#.#43.35.131':139
  • '21#.#43.82.57':445
  • '21#.#43.204.181':445
  • '21#.#43.34.136':445
  • '21#.#43.18.140':445
  • '21#.#43.181.224':445
  • '21#.#43.19.213':445
  • '21#.#43.35.131':445
  • '21#.#43.32.222':445
  • '21#.#43.28.196':445
  • '21#.#43.6.34':445
  • '21#.#43.80.226':445
  • '21#.#43.99.222':445
  • '21#.#43.99.225':445
  • '21#.#43.3.181':445
  • '21#.#43.116.152':445
  • '21#.#43.191.30':445
  • '21#.#43.230.21':445
  • '21#.#43.144.103':445
  • '21#.#43.1.15':445
  • '21#.#43.28.187':445
  • '21#.#43.175.198':445
  • '21#.#43.43.41':445
  • '21#.#43.234.246':445
  • '21#.#43.62.40':445
  • '21#.#43.101.162':445
  • '21#.#43.219.240':445
  • '21#.#43.55.212':445
  • '21#.#43.150.131':445
  • '21#.#43.22.15':445
  • '21#.#43.213.102':445
  • '21#.#43.229.210':445
  • '21#.#43.62.14':445
  • '21#.#43.38.141':445
  • '21#.#43.82.204':445
  • '21#.#43.38.32':445
  • '21#.#43.165.152':445
  • '21#.#43.200.5':139
  • '21#.#43.208.199':139
  • '21#.#43.191.38':445
  • '21#.#43.55.244':445
  • '21#.#43.42.62':445
  • '21#.#43.170.245':445
  • '21#.#43.229.210':139
  • '21#.#43.38.32':139
  • '21#.#43.191.38':139
  • '21#.#43.82.204':139
  • '21#.#43.22.15':139
  • '21#.#43.213.102':139
  • '21#.#43.55.244':139
  • '21#.#43.46.120':445
  • '21#.#43.255.93':445
  • '21#.#43.92.61':445
  • '21#.#43.42.62':139
  • '21#.#43.165.152':139
  • '21#.#43.120.6':445
  • '21#.#43.160.208':139
  • '21#.#43.208.77':139
  • '21#.#43.108.208':139
  • '21#.#43.200.108':139
  • '21#.#43.37.184':139
  • '21#.#43.112.136':139
  • '21#.#43.77.216':139
  • '21#.#43.63.200':139
  • '21#.#43.128.55':139
  • '21#.#43.101.217':139
  • '21#.#43.116.59':139
  • '21#.#43.56.82':139
  • '21#.243.6.1':139
  • '21#.#43.125.208':139
  • '21#.#43.81.204':139
  • '21#.#43.206.94':139
  • '21#.#43.59.31':139
  • '21#.#43.95.213':139
  • '21#.#43.16.7':139
  • '21#.#43.35.180':139
  • '21#.#43.42.94':139
  • '21#.#43.207.95':139
  • '21#.#43.10.146':139
  • '21#.#43.197.168':139
  • '21#.#43.29.30':139
  • '21#.#43.21.53':139
  • '21#.#43.47.81':139
  • '21#.#43.146.2':139
  • '21#.#43.168.234':445
  • '21#.#43.251.185':445
  • '21#.#43.54.250':445
  • '21#.#43.134.244':445
  • '21#.#43.214.148':445
  • '21#.#43.56.173':445
  • '21#.#43.229.151':445
  • '21#.#43.53.26':445
  • '21#.#43.143.18':445
  • '21#.#43.95.74':445
  • '21#.#43.26.210':445
  • '21#.#43.116.222':445
  • '21#.#43.255.2':445
  • '21#.#43.130.224':445
  • '21#.#43.215.164':139
  • '21#.#43.41.215':139
  • '21#.#43.120.42':139
  • '21#.#43.25.159':139
  • '21#.#43.130.33':139
  • '21#.#43.164.129':139
  • '21#.#43.119.120':139
  • '21#.#43.137.13':139
  • '21#.#43.144.252':139
  • '21#.#43.108.141':139
  • '21#.#43.203.119':139
  • '21#.#43.101.214':139
  • '21#.#43.173.197':139
  • '21#.#43.170.95':445
  • '21#.#43.137.13':445
  • '21#.#43.144.252':445
  • '21#.#43.108.141':445
  • '21#.#43.203.119':445
  • '21#.#43.101.214':445
  • '21#.#43.173.197':445
  • '21#.#43.120.6':139
  • '21#.#43.170.245':139
  • '21#.#43.62.14':139
  • '21#.#43.38.141':139
  • '21#.#43.46.120':139
  • '21#.#43.255.93':139
  • '21#.#43.92.61':139
  • '21#.#43.119.120':445
  • '21#.#43.10.68':445
  • '21#.#43.239.229':445
  • '21#.#43.90.149':445
  • '21#.#43.152.170':445
  • '21#.#43.255.151':445
  • '21#.#43.67.148':445
  • '21#.#43.255.22':445
  • '21#.#43.215.164':445
  • '21#.#43.41.215':445
  • '21#.#43.120.42':445
  • '21#.#43.25.159':445
  • '21#.#43.130.33':445
  • '21#.#43.164.129':445
  • '21#.#43.250.25':445
  • '21#.#43.196.147':445
  • '21#.#43.17.69':445
  • '21#.#43.85.225':445
  • '21#.#43.212.177':445
  • '21#.#43.7.210':445
  • '21#.#43.81.194':445
  • '21#.#43.20.143':445
  • '21#.#43.213.95':445
  • '21#.#43.67.156':445
  • '21#.#43.42.253':445
  • '21#.#43.246.34':445
  • '21#.#43.109.148':445
  • '21#.#43.174.237':445
  • '21#.#43.76.192':445
  • '21#.#43.57.157':445
  • '21#.#43.125.147':445
  • '21#.#43.96.111':445
  • '21#.#43.7.167':445
  • '21#.#43.62.157':445
  • '21#.#43.86.72':445
  • '21#.#43.3.23':445
  • '21#.#43.17.97':445
  • '21#.#43.14.151':445
  • '21#.#43.218.140':445
  • '21#.#43.65.225':445
  • '21#.#43.202.84':445
  • '21#.#43.87.227':445
  • '21#.#43.177.5':445
  • '21#.#43.116.252':445
  • '21#.#43.96.111':9988
  • '21#.#43.3.195':445
  • '21#.#43.213.71':445
  • '21#.#43.200.180':445
  • '21#.#43.43.241':9988
  • '21#.#43.202.84':9988
  • '21#.#43.166.147':9988
  • '21#.#43.254.152':9988
  • '21#.#43.111.212':9988
  • '21#.#43.86.72':9988
  • '21#.#43.218.140':9988
  • '21#.#43.170.205':445
  • '21#.#43.55.180':445
  • '21#.#43.254.152':445
  • '21#.#43.40.57':445
  • '21#.#43.84.254':445
  • '21#.#43.58.198':445
  • '21#.#43.166.147':445
  • '21#.#43.176.119':445
  • '21#.#43.178.164':445
  • '21#.#43.28.217':445
  • '21#.#43.130.243':445
  • '21#.#43.253.58':445
  • '21#.#43.29.193':445
  • '21#.#43.104.93':445
  • '21#.#43.174.237':139
  • '21#.#43.85.225':139
  • '21#.#43.212.177':139
  • '21#.#43.3.23':139
  • '21#.#43.17.97':139
  • '21#.#43.14.151':139
  • '21#.#43.7.210':139
  • '21#.#43.81.194':139
  • '21#.#43.42.253':139
  • '21#.#43.246.34':139
  • '21#.#43.250.25':139
  • '21#.#43.196.147':139
  • '21#.#43.17.69':139
  • '21#.#43.202.84':139
  • '21#.#43.96.111':139
  • '21#.#43.137.237':139
  • '21#.#43.62.157':139
  • '21#.#43.116.219':139
  • '21#.#43.43.241':139
  • '21#.#43.111.212':139
  • '21#.#43.7.167':139
  • '21#.#43.86.72':139
  • '21#.#43.218.140':139
  • '21#.#43.65.225':139
  • '21#.#43.76.192':139
  • '21#.#43.57.157':139
  • '21#.#43.125.147':139
  • '21#.#43.109.148':139
  • '21#.#43.170.205':139
  • '21#.#43.3.195':139
  • '21#.#43.213.71':139
  • '21#.#43.178.164':139
  • '21#.#43.28.217':139
  • '21#.#43.130.243':139
  • '21#.#43.200.180':139
  • '21#.#43.137.237':445
  • '21#.#43.116.219':445
  • '21#.#43.111.212':445
  • '21#.#43.177.5':139
  • '21#.#43.116.252':139
  • '21#.#43.43.241':445
  • '21#.#43.104.93':139
  • '21#.#43.87.227':139
  • '21#.#43.84.254':139
  • '21#.#43.58.198':139
  • '21#.#43.20.143':139
  • '21#.#43.213.95':139
  • '21#.#43.67.156':139
  • '21#.#43.166.147':139
  • '21#.#43.176.119':139
  • '21#.#43.253.58':139
  • '21#.#43.29.193':139
  • '21#.#43.55.180':139
  • '21#.#43.254.152':139
  • '21#.#43.40.57':139
  • '21#.#43.34.152':139
  • '21#.#43.94.84':139
  • '21#.#43.234.249':139
  • '21#.#43.10.167':139
  • '21#.#43.10.136':139
  • '21#.#43.34.232':139
  • '21#.#43.134.104':139
  • '21#.#43.64.153':139
  • '21#.#43.100.55':445
  • '21#.#43.181.24':445
  • '21#.#43.123.60':139
  • '21#.#43.92.25':139
  • '21#.#43.155.31':139
  • '21#.#43.31.111':139
  • '21#.#43.22.171':445
  • '21#.#43.175.22':445
  • '21#.#43.127.175':445
  • '21#.#43.9.22':445
  • '21#.#43.253.200':445
  • '21#.#43.171.109':445
  • '21#.#43.153.101':445
  • '21#.#43.181.24':139
  • '21#.#43.114.244':139
  • '21#.#43.79.115':139
  • '21#.#43.248.218':445
  • '21#.#43.17.185':445
  • '21#.#43.100.55':139
  • '21#.#43.114.244':445
  • '21#.#43.88.188':139
  • '21#.#43.208.239':139
  • '21#.#43.82.57':139
  • '21#.#43.155.57':139
  • '21#.#43.191.106':139
  • '21#.#43.43.222':139
  • '21#.#43.1.15':139
  • '21#.#43.230.21':139
  • '21#.#43.144.103':139
  • '21#.#43.43.41':139
  • '21#.#43.28.187':139
  • '21#.#43.175.198':139
  • '21#.#43.191.30':139
  • '21#.#43.20.62':139
  • '21#.#43.10.136':445
  • '21#.#43.34.232':445
  • '21#.#43.34.152':445
  • '21#.#43.79.115':445
  • '21#.#43.31.111':445
  • '21#.#43.10.167':445
  • '21#.#43.94.84':445
  • '21#.#43.92.25':445
  • '21#.#43.155.31':445
  • '21#.#43.64.153':445
  • '21#.#43.234.249':445
  • '21#.#43.134.104':445
  • '21#.#43.123.60':445
  • '21#.#43.235.215':139
  • '21#.#43.49.38':139
  • '21#.#43.163.223':139
  • '21#.#43.255.72':139
  • '21#.#43.22.145':139
  • '21#.#43.116.211':139
  • '21#.#43.57.73':139
  • '21#.#43.9.22':139
  • '21#.#43.253.200':139
  • '21#.#43.171.109':139
  • '21#.#43.211.65':139
  • '21#.#43.62.58':139
  • '21#.#43.31.153':139
  • '21#.#43.72.180':139
  • '21#.#43.101.244':139
  • '21#.#43.21.73':139
  • '21#.#43.1.232':139
  • '21#.#43.253.58':9988
  • '21#.#43.170.205':9988
  • '21#.#43.227.33':139
  • '21#.#43.129.236':139
  • '21#.#43.225.103':139
  • '21#.#43.200.224':139
  • '21#.#43.180.200':139
  • '21#.#43.164.5':139
  • '21#.#43.67.107':139
  • '21#.#43.103.236':139
  • '21#.#43.22.171':139
  • '21#.#43.255.72':445
  • '21#.#43.22.145':445
  • '21#.#43.116.211':445
  • '21#.#43.200.224':445
  • '21#.#43.180.200':445
  • '21#.#43.72.180':445
  • '21#.#43.235.215':445
  • '21#.#43.211.65':445
  • '21#.#43.62.58':445
  • '21#.#43.31.153':445
  • '21#.#43.49.38':445
  • '21#.#43.163.223':445
  • '21#.#43.57.73':445
  • '21#.#43.225.103':445
  • '21#.#43.248.218':139
  • '21#.#43.17.185':139
  • '21#.#43.227.33':445
  • '21#.#43.175.22':139
  • '21#.#43.127.175':139
  • '21#.#43.153.101':139
  • '21#.#43.101.244':445
  • '21#.#43.164.5':445
  • '21#.#43.67.107':445
  • '21#.#43.103.236':445
  • '21#.#43.21.73':445
  • '21#.#43.1.232':445
  • '21#.#43.129.236':445

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке