Trojan.Starman.6006

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'64.##5.39.86':445
'64.##5.8.206':445
'64.##5.227.124':445
'64.##5.23.134':139
'64.##5.116.124':139
'64.##5.86.80':445
'64.##5.187.86':445
'64.##5.76.110':445
'64.##5.189.188':445
'64.##5.94.10':445
'64.##5.104.101':445
'64.##5.86.104':445
'64.##5.46.29':139
'64.##5.51.240':139
'64.##5.68.242':139
'64.##5.70.162':139
'64.##5.85.105':139
'64.##5.41.80':139
'64.##5.248.238':139
'64.##5.115.171':139
'64.##5.94.187':139
'64.##5.167.18':139
'64.##5.46.102':139
'64.##5.220.215':139
'64.##5.184.158':445
'64.##5.137.153':445
'64.##5.146.200':445
'64.##5.175.65':445
'64.##5.221.32':445
'64.##5.140.122':445
'64.##5.20.146':445
'64.##5.85.105':445
'64.##5.41.80':445
'64.##5.46.29':445
'64.##5.40.122':445
'64.##5.77.197':445
'64.##5.70.162':445
'64.##5.250.201':445
'64.##5.96.28':445
'64.##5.31.133':445
'64.##5.251.73':445
'64.##5.232.206':445
'64.##5.201.232':445
'64.##5.67.17':445
'64.##5.44.186':445
'64.##5.32.17':445
'64.##5.150.2':445
'64.##5.240.152':445
'64.##5.130.240':445
'64.##5.77.197':139
'64.##5.173.153':445
'64.##5.181.173':445
'64.##5.199.73':445
'64.##5.176.72':139
'64.##5.11.187':445
'64.##5.183.169':445
'64.##5.8.206':139
'64.##5.227.124':139
'64.##5.94.10':139
'64.##5.176.72':445
'64.##5.86.80':139
'64.##5.39.86':139
'64.##5.57.62':445
'64.##5.247.216':445
'64.##5.37.214':445
'64.##5.171.47':445
'64.##5.247.220':445
'64.##5.60.115':445
'64.##5.173.153':139
'64.##5.181.173':139
'64.##5.199.73':139
'64.##5.114.66':445
'64.##5.11.187':139
'64.##5.183.169':139
'64.##5.104.101':139
'64.##5.44.186':139
'64.##5.32.17':139
'64.##5.221.32':139
'64.##5.240.152':139
'64.##5.130.240':139
'64.##5.67.17':139
'64.##5.146.200':139
'64.##5.175.65':139
'64.##5.40.122':139
'64.##5.140.122':139
'64.##5.20.146':139
'64.##5.137.153':139
'64.##5.189.188':139
'64.##5.184.158':139
'64.##5.251.73':139
'64.##5.86.104':139
'64.##5.187.86':139
'64.##5.76.110':139
'64.##5.96.28':139
'64.##5.31.133':139
'64.##5.150.2':139
'64.##5.232.206':139
'64.##5.201.232':139
'64.##5.250.201':139
'64.##5.51.240':445
'64.##5.143.113':139
'64.##5.132.92':445
'64.##5.104.254':445
'64.##5.116.69':139
'64.##5.86.190':139
'64.##5.239.171':139
'64.##5.216.174':445
'64.##5.200.148':445
'64.##5.87.20':445
'64.##5.248.229':445
'64.##5.59.49':445
'64.##5.48.179':445
'64.##5.240.185':139
'64.##5.120.49':139
'64.##5.72.187':139
'64.##5.230.237':139
'64.##5.88.73':139
'64.##5.185.88':139
'64.##5.41.166':139
'64.##5.203.111':139
'64.##5.56.203':139
'64.##5.20.55':139
'64.##5.127.236':139
'64.##5.103.50':139
'64.##5.123.24':445
'64.#45.99.6':445
'64.##5.39.250':445
'64.##5.87.74':445
'64.##5.255.128':445
'64.##5.62.54':445
'64.#45.6.49':445
'64.##5.88.73':445
'64.##5.185.88':445
'64.##5.240.185':445
'64.##5.172.167':445
'64.##5.125.87':445
'64.##5.230.237':445
'64.##5.104.191':445
'64.##5.249.84':445
'64.##5.72.237':445
'64.##5.138.101':445
'64.##5.28.200':445
'64.##5.136.222':445
'64.##5.100.183':445
'64.##5.225.212':445
'64.##5.191.199':445
'64.##5.232.138':445
'64.##5.132.232':445
'64.##5.11.148':445
'64.##5.125.87':139
'64.#45.1.29':445
'64.##5.140.57':445
'64.##5.27.140':445
'64.##5.236.236':139
'64.##5.69.177':139
'64.##5.233.19':139
'64.##5.132.92':139
'64.##5.104.254':139
'64.##5.248.229':139
'64.##5.236.236':445
'64.##5.69.177':445
'64.##5.233.19':445
'64.##5.220.215':445
'64.##5.248.238':445
'64.##5.115.171':445
'64.##5.68.242':445
'64.##5.167.18':445
'64.##5.46.102':445
'64.#45.1.29':139
'64.##5.140.57':139
'64.##5.27.140':139
'64.##5.94.187':445
'64.##5.23.134':445
'64.##5.116.124':445
'64.##5.59.49':139
'64.##5.225.212':139
'64.##5.191.199':139
'64.##5.255.128':139
'64.##5.132.232':139
'64.##5.11.148':139
'64.##5.100.183':139
'64.##5.39.250':139
'64.##5.87.74':139
'64.##5.172.167':139
'64.##5.62.54':139
'64.#45.6.49':139
'64.#45.99.6':139
'64.##5.87.20':139
'64.##5.123.24':139
'64.##5.138.101':139
'64.##5.48.179':139
'64.##5.216.174':139
'64.##5.200.148':139
'64.##5.249.84':139
'64.##5.72.237':139
'64.##5.232.138':139
'64.##5.28.200':139
'64.##5.136.222':139
'64.##5.104.191':139
'64.##5.92.105':445
'64.##5.14.138':445
'64.##5.207.33':445
'64.##5.225.41':445
'64.##5.83.184':445
'64.##5.131.7':445
'64.##5.111.238':445
'64.##5.58.112':445
'64.#45.4.59':445
'64.##5.100.206':445
'64.##5.23.101':445
'64.##5.120.104':445
'64.##5.137.187':445
'64.##5.24.233':445
'64.##5.17.53':445
'64.##5.7.115':139
'64.##5.112.12':445
'64.##5.221.77':445
'64.##5.56.156':445
'64.##5.21.137':445
'64.##5.12.145':445
'64.##5.79.64':445
'64.##5.120.160':445
'64.##5.83.93':445
'64.#45.78.4':445
'64.##5.32.177':445
'64.##5.177.154':445
'64.##5.245.3':445
'64.##5.45.219':445
'64.##5.66.218':445
'64.##5.87.68':445
'64.##5.238.253':445
'64.##5.117.238':445
'64.##5.180.117':445
'64.##5.55.48':445
'64.##5.193.253':445
'64.#45.4.16':445
'64.##5.128.177':445
'64.##5.87.129':445
'64.##5.255.178':445
'64.##5.74.90':445
'64.##5.119.161':445
'64.##5.11.65':445
'64.##5.201.175':445
'64.##5.23.151':445
'64.##5.85.109':445
'64.##5.47.57':445
'64.##5.100.66':445
'64.##5.133.143':445
'64.##5.242.133':139
'64.##5.14.138':139
'64.##5.207.33':139
'64.##5.100.206':139
'64.##5.83.184':139
'64.##5.131.7':139
'64.##5.92.105':139
'64.##5.58.112':139
'64.#45.4.59':139
'64.#45.78.4':139
'64.##5.23.101':139
'64.##5.120.104':139
'64.##5.111.238':139
'64.##5.137.187':139
'64.##5.17.53':139
'64.##5.79.64':139
'64.##5.221.77':139
'64.##5.24.233':139
'64.##5.112.12':139
'64.##5.21.137':139
'64.##5.12.145':139
'64.##5.225.41':139
'64.##5.120.160':139
'64.##5.83.93':139
'64.##5.56.156':139
'64.##5.74.90':139
'64.##5.177.154':139
'64.##5.245.3':139
'64.##5.55.48':139
'64.##5.66.218':139
'64.##5.87.68':139
'64.##5.32.177':139
'64.##5.117.238':139
'64.##5.180.117':139
'64.##5.102.28':139
'64.##5.193.253':139
'64.#45.4.16':139
'64.##5.238.253':139
'64.##5.87.129':139
'64.##5.255.178':139
'64.##5.47.57':139
'64.##5.119.161':139
'64.##5.11.65':139
'64.##5.128.177':139
'64.##5.23.151':139
'64.##5.85.109':139
'64.##5.45.219':139
'64.##5.100.66':139
'64.##5.133.143':139
'64.##5.201.175':139
'64.##5.102.28':445
'64.##5.112.11':445
'64.##5.125.210':445
'64.##5.251.109':445
'64.##5.176.28':445
'64.##5.91.39':445
'64.##5.123.244':445
'64.##5.92.146':445
'64.##5.33.78':445
'64.#45.5.46':445
'64.##5.212.247':445
'64.##5.121.188':445
'64.##5.156.243':445
'64.##5.53.97':139
'64.##5.171.47':139
'64.##5.247.220':139
'64.##5.137.186':139
'64.##5.98.50':139
'64.##5.147.184':139
'64.##5.37.214':139
'64.##5.114.66':139
'64.##5.244.38':445
'64.##5.60.115':139
'64.##5.57.62':139
'64.##5.247.216':139
'64.##5.182.205':445
'64.##5.209.114':445
'64.##5.42.234':445
'64.#45.4.89':445
'64.##5.37.184':445
'64.##5.94.23':445
'64.##5.152.4':445
'64.##5.98.50':445
'64.##5.147.184':445
'64.##5.53.97':445
'64.##5.134.115':445
'64.##5.167.133':445
'64.##5.137.186':445
'64.##5.215.109':445
'64.##5.96.230':445
'64.##5.21.186':445
'64.##5.143.159':445
'64.##5.44.120':445
'64.##5.176.55':445
'64.##5.217.72':445
'64.##5.71.111':445
'64.##5.82.10':445
'64.##5.100.112':445
'64.##5.11.221':445
'64.##5.38.43':445
'64.##5.167.133':139
'64.##5.7.115':9988
'64.##5.244.38':139
'64.##5.176.28':139
'64.##5.119.161':9988
'64.##5.11.65':9988
'64.#45.4.16':9988
'64.##5.125.210':139
'64.##5.251.109':139
'64.##5.212.247':139
'64.##5.91.39':139
'64.##5.123.244':139
'64.##5.112.11':139
'64.##5.83.93':9988
'64.##5.221.77':9988
'64.##5.120.160':9988
'64.##5.242.133':445
'64.##5.7.115':445
'64.##5.21.137':9988
'64.##5.111.238':9988
'64.#45.78.4':9988
'64.##5.74.90':9988
'64.##5.56.156':9988
'64.##5.12.145':9988
'64.##5.207.33':9988
'64.##5.121.188':139
'64.##5.71.111':139
'64.##5.82.10':139
'64.##5.37.184':139
'64.##5.11.221':139
'64.##5.38.43':139
'64.##5.217.72':139
'64.##5.42.234':139
'64.#45.4.89':139
'64.##5.134.115':139
'64.##5.94.23':139
'64.##5.152.4':139
'64.##5.209.114':139
'64.#45.5.46':139
'64.##5.182.205':139
'64.##5.143.159':139
'64.##5.156.243':139
'64.##5.92.146':139
'64.##5.33.78':139
'64.##5.96.230':139
'64.##5.21.186':139
'64.##5.100.112':139
'64.##5.44.120':139
'64.##5.176.55':139
'64.##5.215.109':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней