Trojan.Starman.6055

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'60.##.43.209':139
'60.##.106.147':139
'60.##.20.122':139
'60.#3.7.114':139
'60.#3.71.20':139
'60.##.120.121':139
'60.##.42.228':139
'60.#3.29.56':139
'60.#3.35.55':139
'60.#3.225.4':139
'60.##.116.78':139
'60.##.48.129':139
'60.##.126.166':139
'60.##.118.54':139
'60.##.47.118':139
'60.##.46.164':139
'60.##.190.57':139
'60.##.64.138':139
'60.##.54.126':139
'60.##.176.203':139
'60.##.242.205':139
'60.##.212.93':139
'60.##.31.195':139
'60.##.165.194':139
'60.#3.239.2':139
'60.##.176.111':139
'60.##.106.16':445
'60.##.120.121':445
'60.##.43.209':445
'60.##.106.147':445
'60.##.31.195':445
'60.#3.7.114':445
'60.#3.71.20':445
'60.##.20.122':445
'60.##.126.166':445
'60.#3.29.56':445
'60.#3.35.55':445
'60.##.42.228':445
'60.##.116.78':445
'60.##.48.129':445
'60.##.54.126':445
'60.##.118.54':445
'60.##.47.118':445
'60.#3.4.103':445
'60.##.190.57':445
'60.##.64.138':445
'60.##.46.164':445
'60.##.176.111':445
'60.##.242.205':445
'60.##.212.93':445
'60.##.176.203':445
'60.##.165.194':445
'60.#3.239.2':445
'60.##.149.220':139
'60.##.173.189':139
'60.#3.84.23':139
'60.##.163.97':139
'60.##.77.191':139
'60.##.57.237':139
'60.#3.125.5':139
'60.##.70.218':139
'60.##.119.43':139
'60.##.53.119':139
'60.#3.2.64':139
'60.#3.112.4':139
'60.#3.26.86':139
'60.##.234.219':445
'60.##.50.158':445
'60.##.178.240':139
'60.##.238.193':445
'60.##.197.169':445
'60.##.219.197':445
'60.##.148.219':139
'60.#3.226.3':139
'60.##.14.243':139
'60.##.16.177':139
'60.##.57.129':139
'60.##.154.147':139
'60.##.145.90':139
'60.##.242.162':139
'60.#3.2.64':445
'60.#3.112.4':445
'60.#3.26.86':445
'60.##.173.189':445
'60.#3.84.23':445
'60.#3.125.5':445
'60.##.70.218':445
'60.##.28.232':445
'60.##.106.16':139
'60.#3.4.103':139
'60.##.119.43':445
'60.##.53.119':445
'60.##.242.162':445
'60.##.57.129':445
'60.##.154.147':445
'60.##.145.90':445
'60.##.28.232':139
'60.##.178.240':445
'60.##.148.219':445
'60.#3.226.3':445
'60.##.77.191':445
'60.##.57.237':445
'60.##.149.220':445
'60.##.14.243':445
'60.##.16.177':445
'60.##.163.97':445
'60.#3.225.4':445
'60.##.152.71':139
'60.##.151.152':139
'60.#3.6.156':139
'60.#3.53.66':139
'60.##.65.195':139
'60.#3.72.92':139
'60.#3.4.28':139
'60.##.204.62':445
'60.##.243.203':445
'60.##.70.198':445
'60.##.58.133':139
'60.##.79.134':445
'60.##.120.244':445
'60.#3.61.95':139
'60.##.181.61':139
'60.##.224.180':139
'60.#3.11.12':139
'60.#3.63.59':139
'60.#3.95.12':139
'60.##.226.170':139
'60.##.145.182':139
'60.##.236.153':139
'60.#3.78.38':139
'60.##.181.137':139
'60.##.135.31':139
'60.#3.5.96':139
'60.#3.14.56':445
'60.#3.72.92':445
'60.##.152.71':445
'60.##.151.152':445
'60.#3.78.38':445
'60.#3.53.66':445
'60.##.65.195':445
'60.#3.6.156':445
'60.##.137.138':139
'60.##.116.69':139
'60.#3.2.210':139
'60.#3.4.28':445
'60.##.58.133':445
'60.##.166.248':139
'60.#3.95.12':445
'60.#3.61.95':445
'60.##.181.61':445
'60.##.20.180':445
'60.#3.11.12':445
'60.#3.63.59':445
'60.##.224.180':445
'60.#3.5.96':445
'60.##.145.182':445
'60.##.236.153':445
'60.##.226.170':445
'60.##.181.137':445
'60.##.135.31':445
'60.#3.21.47':139
'60.##.234.107':139
'60.##.71.242':139
'60.##.178.225':139
'60.##.51.103':139
'60.##.172.184':139
'60.##.255.190':139
'60.##.177.47':445
'60.##.157.131':445
'60.##.228.156':445
'60.##.21.219':139
'60.##.204.106':139
'60.##.83.218':139
'60.#3.7.101':139
'60.##.181.202':139
'60.##.115.171':139
'60.##.177.47':139
'60.##.157.131':139
'60.##.228.156':139
'60.#3.37.33':139
'60.##.50.142':139
'60.#3.29.51':139
'60.#3.55.29':139
'60.##.179.51':139
'60.##.20.185':139
'60.##.142.164':139
'60.#3.7.101':445
'60.##.21.219':445
'60.##.204.106':445
'60.##.83.218':445
'60.##.234.107':445
'60.##.71.242':445
'60.##.255.190':445
'60.##.79.134':139
'60.##.70.198':139
'60.#3.14.56':139
'60.##.20.180':139
'60.##.120.244':139
'60.##.204.62':139
'60.##.243.203':139
'60.##.179.51':445
'60.##.20.185':445
'60.##.142.164':445
'60.##.181.202':445
'60.##.115.171':445
'60.#3.37.33':445
'60.##.50.142':445
'60.##.51.103':445
'60.##.172.184':445
'60.#3.21.47':445
'60.#3.29.51':445
'60.#3.55.29':445
'60.##.178.225':445
'60.##.18.191':445
'60.##.254.171':445
'60.##.138.210':445
'60.#3.4.94':445
'60.#3.191.0':445
'60.##.21.231':445
'60.##.10.182':445
'60.##.148.243':445
'60.#3.0.246':445
'60.##.180.185':445
'60.##.67.119':445
'60.##.213.55':445
'60.##.91.211':445
'60.##.72.219':445
'60.##.62.124':445
'60.#3.90.1':445
'60.##.175.181':445
'60.##.169.41':445
'60.##.21.130':445
'60.##.205.216':445
'60.##.197.107':445
'60.##.185.159':445
'60.##.98.186':445
'60.##.218.89':445
'60.#3.89.22':445
'60.##.17.240':445
'60.#3.78.94':445
'60.##.124.18':445
'60.##.33.116':445
'60.#3.0.107':445
'60.#3.18.47':445
'60.##.110.38':445
'60.#3.18.33':445
'60.#3.6.110':445
'60.##.205.216':9988
'60.##.17.240':9988
'60.##.197.107':9988
'60.#3.108.6':445
'60.##.54.133':445
'60.##.218.89':9988
'60.##.32.247':445
'60.##.38.240':445
'60.#3.4.22':445
'60.##.141.177':445
'60.##.144.153':445
'60.##.86.208':445
'60.#3.7.46':445
'60.##.202.223':445
'60.##.180.177':445
'60.##.15.227':445
'60.##.165.83':445
'60.##.100.203':445
'60.#3.8.237':445
'60.#3.191.0':139
'60.##.18.191':139
'60.##.21.231':139
'60.##.185.159':139
'60.##.98.186':139
'60.#3.4.94':139
'60.##.138.210':139
'60.##.213.55':139
'60.##.91.211':139
'60.##.148.243':139
'60.##.254.171':139
'60.##.10.182':139
'60.##.67.119':139
'60.##.117.178':139
'60.##.72.219':139
'60.##.169.41':139
'60.##.175.181':139
'60.##.178.175':139
'60.##.21.130':139
'60.##.62.124':139
'60.#3.89.22':139
'60.##.17.240':139
'60.##.197.107':139
'60.#3.90.1':139
'60.##.218.89':139
'60.##.205.216':139
'60.#3.0.246':139
'60.##.110.38':139
'60.#3.18.33':139
'60.##.124.18':139
'60.##.180.177':139
'60.##.15.227':139
'60.#3.18.47':139
'60.##.33.116':139
'60.##.54.133':139
'60.##.117.178':445
'60.##.178.175':445
'60.#3.0.107':139
'60.#3.6.110':139
'60.#3.108.6':139
'60.##.86.208':139
'60.##.144.153':139
'60.##.32.247':139
'60.##.180.185':139
'60.#3.78.94':139
'60.##.141.177':139
'60.##.38.240':139
'60.##.100.203':139
'60.##.202.223':139
'60.#3.8.237':139
'60.#3.4.22':139
'60.#3.7.46':139
'60.##.165.83':139
'60.##.138.210':9988
'60.#3.1.82':139
'60.##.178.25':139
'60.#3.29.9':139
'60.##.157.58':139
'60.##.25.157':139
'60.##.249.25':139
'60.#3.68.71':139
'60.##.240.158':139
'60.##.246.73':139
'60.##.238.193':139
'60.#3.153.7':139
'60.##.216.152':139
'60.##.106.123':139
'60.##.158.35':139
'60.##.54.184':139
'60.##.160.12':139
'60.##.82.190':445
'60.#3.9.115':445
'60.#3.84.35':139
'60.##.252.86':139
'60.##.220.31':139
'60.#3.39.25':139
'60.#3.58.77':139
'60.##.120.250':139
'60.##.208.115':139
'60.##.197.44':139
'60.##.197.169':139
'60.##.249.25':445
'60.#3.1.82':445
'60.##.178.25':445
'60.#3.58.77':445
'60.##.157.58':445
'60.##.25.157':445
'60.#3.68.71':445
'60.##.106.123':445
'60.##.240.158':445
'60.##.246.73':445
'60.#3.29.9':445
'60.#3.153.7':445
'60.##.216.152':445
'60.#3.84.35':445
'60.##.158.35':445
'60.##.54.184':445
'60.##.219.197':139
'60.##.234.219':139
'60.##.50.158':139
'60.##.160.12':445
'60.##.197.44':445
'60.##.220.31':445
'60.#3.39.25':445
'60.##.252.86':445
'60.##.120.250':445
'60.##.208.115':445
'60.##.114.144':139
'60.##.218.12':139
'60.##.234.15':139
'60.##.144.19':139
'60.##.196.143':139
'60.##.144.196':139
'60.##.116.18':139
'60.##.12.214':139
'60.##.79.238':139
'60.##.59.129':139
'60.##.78.133':139
'60.##.102.41':139
'60.##.244.83':139
'60.#3.0.246':9988
'60.##.141.177':9988
'60.##.180.185':9988
'60.##.10.182':9988
'60.##.213.55':9988
'60.##.91.211':9988
'60.#3.78.94':9988
'60.##.17.168':139
'60.##.221.68':139
'60.#3.28.19':139
'60.##.100.203':9988
'60.#3.18.47':9988
'60.##.192.88':139
'60.##.39.101':139
'60.##.78.133':445
'60.##.102.41':445
'60.##.244.83':445
'60.##.218.12':445
'60.##.234.15':445
'60.##.116.18':445
'60.##.12.214':445
'60.#3.46.70':445
'60.##.115.85':445
'60.##.190.115':445
'60.##.79.238':445
'60.##.59.129':445
'60.##.39.101':445
'60.##.82.190':139
'60.#3.9.115':139
'60.##.192.88':445
'60.#3.46.70':139
'60.##.115.85':139
'60.##.190.115':139
'60.##.17.168':445
'60.##.196.143':445
'60.##.144.196':445
'60.##.114.144':445
'60.##.221.68':445
'60.#3.28.19':445
'60.##.144.19':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней