Trojan.Starman.6019

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'84.##5.154.235':139
'84.##5.11.236':139
'84.##5.235.22':139
'84.##5.6.212':139
'84.##5.237.135':139
'84.##5.120.53':139
'84.##5.91.140':139
'84.##5.39.105':139
'84.##5.99.77':139
'84.##5.3.134':139
'84.##5.22.162':139
'84.##5.186.89':139
'84.##5.70.162':139
'84.##5.86.60':139
'84.##5.243.82':445
'84.##5.126.251':445
'84.##5.198.169':139
'84.##5.12.52':139
'84.##5.81.34':139
'84.#05.4.58':139
'84.##5.161.167':139
'84.##5.55.250':139
'84.##5.6.212':445
'84.##5.237.135':445
'84.##5.22.162':445
'84.##5.198.169':445
'84.##5.12.52':445
'84.##5.99.77':445
'84.##5.3.134':445
'84.##5.11.236':445
'84.##5.235.22':445
'84.##5.154.235':445
'84.##5.81.34':445
'84.##5.241.223':139
'84.##5.89.241':139
'84.##5.224.82':139
'84.##5.61.29':139
'84.##5.116.182':139
'84.#05.4.58':445
'84.##5.161.167':445
'84.##5.70.162':445
'84.##5.86.60':445
'84.##5.186.89':445
'84.##5.96.104':139
'84.##5.149.35':139
'84.##5.15.219':139
'84.##5.252.235':139
'84.##5.189.148':139
'84.##5.94.69':445
'84.##5.36.186':445
'84.##5.126.251':139
'84.##5.88.179':139
'84.##5.243.82':139
'84.##5.204.27':139
'84.##5.250.13':139
'84.##5.157.195':139
'84.##5.180.227':139
'84.##5.190.4':139
'84.##5.11.103':139
'84.##5.214.71':139
'84.##5.192.232':139
'84.##5.250.196':139
'84.##5.174.35':139
'84.##5.67.72':139
'84.##5.42.59':445
'84.##5.204.27':445
'84.##5.252.235':445
'84.##5.192.232':445
'84.##5.250.196':445
'84.##5.214.71':445
'84.##5.149.35':445
'84.##5.88.179':445
'84.##5.96.104':445
'84.##5.189.148':445
'84.##5.15.219':445
'84.##5.67.72':445
'84.##5.39.34':445
'84.##5.190.4':445
'84.##5.244.254':445
'84.##5.44.217':445
'84.##5.255.90':445
'84.##5.157.195':445
'84.##5.174.35':445
'84.##5.250.13':445
'84.##5.11.103':445
'84.##5.180.227':445
'84.##5.146.70':445
'84.##5.165.101':445
'84.##5.100.143':445
'84.##5.12.145':445
'84.##5.143.105':445
'84.##5.65.83':139
'84.##5.255.200':139
'84.##5.113.65':139
'84.##5.197.75':445
'84.##5.246.197':445
'84.#05.2.89':445
'84.##5.169.68':445
'84.##5.190.105':445
'84.##5.1.163':445
'84.##5.97.156':445
'84.##5.165.83':445
'84.##5.228.213':445
'84.##5.215.228':445
'84.##5.214.240':445
'84.##5.126.105':445
'84.##5.146.216':445
'84.##5.12.63':139
'84.##5.57.95':139
'84.##5.241.252':139
'84.##5.201.23':139
'84.##5.217.77':139
'84.##5.149.150':139
'84.##5.130.39':139
'84.##5.237.197':139
'84.##5.24.75':139
'84.##5.20.55':139
'84.##5.117.175':139
'84.##5.179.206':139
'84.##5.254.87':139
'84.##5.152.15':139
'84.##5.222.194':139
'84.##5.113.189':139
'84.##5.169.242':139
'84.#05.7.6':139
'84.##5.212.65':139
'84.##5.48.61':139
'84.##5.24.177':139
'84.##5.39.132':139
'84.##5.194.229':139
'84.##5.205.194':139
'84.##5.131.170':139
'84.##5.142.107':139
'84.##5.196.33':139
'84.##5.1.163':139
'84.##5.169.68':139
'84.##5.165.83':139
'84.##5.104.206':139
'84.##5.97.156':139
'84.##5.174.232':139
'84.##5.55.250':445
'84.##5.61.29':445
'84.##5.91.140':445
'84.##5.39.105':445
'84.##5.120.53':445
'84.##5.89.241':445
'84.##5.61.18':139
'84.##5.241.223':445
'84.##5.116.182':445
'84.##5.224.82':445
'84.##5.190.105':139
'84.##5.174.232':445
'84.##5.142.107':445
'84.##5.61.18':445
'84.##5.197.75':139
'84.##5.246.197':139
'84.##5.205.194':445
'84.##5.104.206':445
'84.##5.194.229':445
'84.##5.196.33':445
'84.##5.131.170':445
'84.##5.165.101':139
'84.##5.228.213':139
'84.##5.215.228':139
'84.##5.214.240':139
'84.##5.126.105':139
'84.##5.146.216':139
'84.##5.100.143':139
'84.##5.146.70':139
'84.##5.143.105':139
'84.#05.2.89':139
'84.##5.12.145':139
'84.##5.221.205':445
'84.##5.241.168':445
'84.##5.205.162':445
'84.##5.237.84':445
'84.#05.87.5':445
'84.##5.211.176':445
'84.##5.33.203':445
'84.##5.136.213':445
'84.##5.54.48':445
'84.##5.139.212':445
'84.##5.84.202':445
'84.##5.185.194':139
'84.##5.221.183':139
'84.##5.244.16':139
'84.##5.220.32':139
'84.##5.16.24':139
'84.##5.220.33':445
'84.##5.202.170':445
'84.##5.24.185':139
'84.##5.19.150':139
'84.##5.42.232':139
'84.##5.166.29':445
'84.##5.114.24':445
'84.##5.237.237':445
'84.##5.109.201':445
'84.##5.96.16':445
'84.##5.158.199':445
'84.##5.174.10':445
'84.##5.220.243':445
'84.##5.171.30':445
'84.##5.41.238':445
'84.##5.141.243':445
'84.##5.6.125':445
'84.##5.56.20':445
'84.##5.15.80':445
'84.##5.132.250':445
'84.##5.11.44':445
'84.##5.47.21':445
'84.##5.91.31':445
'84.#05.63.2':445
'84.##5.247.62':445
'84.##5.208.229':445
'84.##5.208.83':445
'84.##5.11.44':139
'84.##5.47.21':139
'84.##5.166.29':139
'84.##5.211.176':139
'84.##5.33.203':139
'84.##5.208.229':139
'84.##5.208.83':139
'84.##5.15.80':139
'84.##5.132.250':139
'84.##5.56.20':139
'84.##5.136.213':139
'84.##5.237.84':139
'84.#05.87.5':139
'84.##5.84.202':139
'84.##5.202.170':139
'84.##5.220.33':139
'84.##5.54.48':139
'84.##5.139.212':139
'84.##5.241.168':139
'84.##5.205.162':139
'84.##5.221.205':139
'84.##5.247.62':139
'84.##5.43.176':139
'84.##5.103.8':139
'84.##5.206.112':139
'84.##5.174.10':139
'84.##5.220.243':139
'84.##5.109.218':139
'84.##5.90.158':139
'84.##5.218.188':139
'84.##5.120.60':139
'84.##5.75.170':139
'84.##5.171.30':139
'84.##5.96.16':139
'84.##5.158.199':139
'84.##5.6.125':139
'84.##5.91.31':139
'84.#05.63.2':139
'84.##5.41.238':139
'84.##5.141.243':139
'84.##5.237.237':139
'84.##5.109.201':139
'84.##5.114.24':139
'84.##5.25.114':445
'84.##5.21.82':445
'84.##5.185.109':445
'84.##5.126.252':445
'84.##5.68.52':445
'84.##5.210.206':445
'84.##5.140.186':445
'84.##5.252.20':445
'84.##5.247.134':445
'84.##5.47.60':445
'84.##5.144.233':139
'84.##5.47.132':139
'84.##5.215.243':139
'84.##5.141.215':139
'84.##5.221.112':139
'84.##5.133.107':139
'84.##5.19.14':139
'84.##5.182.66':139
'84.##5.14.69':139
'84.##5.36.35':139
'84.##5.69.84':139
'84.##5.56.87':445
'84.##5.94.69':139
'84.##5.36.186':139
'84.##5.144.233':445
'84.##5.19.14':445
'84.##5.182.66':445
'84.##5.244.254':139
'84.##5.39.34':139
'84.##5.255.90':139
'84.##5.42.59':139
'84.##5.44.217':139
'84.##5.14.69':445
'84.##5.221.112':445
'84.##5.133.107':445
'84.##5.65.187':445
'84.##5.1.108':445
'84.##5.0.134':445
'84.##5.36.35':445
'84.##5.69.84':445
'84.##5.215.243':445
'84.##5.141.215':445
'84.##5.47.132':445
'84.##5.42.232':445
'84.##5.24.185':445
'84.##5.19.150':445
'84.##5.185.194':445
'84.##5.221.183':445
'84.##5.241.168':9988
'84.##5.54.48':9988
'84.##5.221.205':9988
'84.##5.220.33':9988
'84.##5.205.162':9988
'84.##5.244.16':445
'84.##5.120.60':445
'84.##5.75.170':445
'84.##5.103.8':445
'84.##5.206.112':445
'84.##5.43.176':445
'84.##5.220.32':445
'84.##5.16.24':445
'84.##5.90.158':445
'84.##5.218.188':445
'84.##5.109.218':445
'84.##5.166.29':9988
'84.##5.252.20':139
'84.##5.210.206':139
'84.##5.47.60':139
'84.##5.21.82':139
'84.##5.247.134':139
'84.##5.0.134':139
'84.##5.65.187':139
'84.##5.1.108':139
'84.##5.140.186':139
'84.##5.56.87':139
'84.##5.25.114':139
'84.##5.6.125':9988
'84.##5.109.201':9988
'84.#05.63.2':9988
'84.##5.15.80':9988
'84.##5.208.229':9988
'84.##5.68.52':139
'84.##5.185.109':139
'84.##5.126.252':139
'84.##5.237.237':9988
'84.##5.171.30':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней