Trojan.Starman.6489

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'60.##4.95.119':445
'60.##4.45.180':445
'60.##4.191.9':445
'60.##4.190.5':445
'60.##4.174.28':445
'60.##4.132.114':445
'60.##4.153.38':445
'60.##4.158.63':445
'60.##4.211.31':445
'60.##4.47.19':445
'60.##4.227.115':445
'60.##4.132.20':445
'60.##4.159.132':445
'60.##4.248.162':445
'60.##4.132.56':445
'60.##4.125.27':445
'60.##4.251.36':445
'60.##4.129.207':445
'60.##4.25.165':445
'60.##4.88.56':445
'60.##4.127.106':445
'60.##4.112.185':445
'60.##4.55.153':139
'60.##4.16.29':139
'60.##4.169.248':139
'60.##4.227.36':139
'60.##4.116.145':139
'60.##4.129.226':139
'60.##4.171.165':139
'60.##4.71.171':139
'60.##4.97.88':139
'60.##4.129.110':139
'60.##4.36.129':139
'60.##4.201.243':445
'60.##4.201.201':445
'60.##4.233.83':445
'60.##4.167.158':445
'60.##4.151.4':445
'60.##4.170.179':445
'60.##4.44.101':445
'60.##4.34.129':139
'60.##4.23.139':445
'60.##4.23.139':139
'60.##4.44.101':139
'60.##4.211.31':139
'60.##4.153.38':139
'60.##4.227.115':139
'60.##4.132.114':139
'60.##4.47.19':139
'60.##4.158.63':139
'60.##4.201.243':139
'60.##4.201.201':139
'60.##4.233.83':139
'60.##4.167.158':139
'60.##4.151.4':139
'60.##4.88.56':139
'60.##4.129.207':139
'60.##4.112.185':139
'60.##4.251.36':139
'60.##4.127.106':139
'60.##4.25.165':139
'60.##4.95.119':139
'60.##4.45.180':139
'60.##4.191.9':139
'60.##4.190.5':139
'60.##4.174.28':139
'60.##4.58.155':445
'60.##4.155.32':445
'60.##4.54.234':445
'60.##4.167.84':445
'60.##4.233.214':445
'60.##4.172.154':445
'60.##4.137.58':445
'60.##4.195.136':445
'60.##4.63.249':445
'60.##4.241.97':445
'60.##4.196.121':445
'60.##4.145.230':445
'60.##4.238.181':445
'60.##4.45.182':445
'60.##4.170.179':139
'60.##4.85.94':445
'60.##4.95.36':445
'60.##4.52.128':445
'60.##4.222.137':445
'60.##4.31.220':445
'60.##4.176.161':445
'60.##4.53.94':445
'60.##4.78.17':445
'60.#04.9.34':445
'60.##4.241.218':445
'60.##4.254.79':445
'60.##4.136.253':445
'60.##4.130.9':445
'60.##4.75.239':445
'60.##4.189.140':445
'60.#04.3.28':445
'60.##4.65.130':445
'60.##4.28.66':445
'60.##4.171.165':445
'60.##4.71.171':445
'60.##4.97.88':445
'60.##4.129.110':445
'60.##4.36.129':445
'60.##4.95.152':445
'60.##4.53.61':445
'60.##4.94.151':445
'60.##4.0.187':445
'60.##4.28.79':445
'60.##4.191.245':445
'60.##4.84.187':445
'60.##4.129.85':445
'60.##4.80.10':445
'60.##4.87.219':445
'60.##4.41.128':445
'60.##4.101.129':445
'60.##4.219.27':139
'60.##4.235.122':139
'60.##4.43.34':445
'60.##4.113.124':445
'60.##4.240.230':445
'60.##4.86.35':445
'60.##4.171.227':445
'60.##4.49.198':445
'60.##4.1.122':445
'60.#04.2.1':445
'60.##4.104.172':445
'60.#04.2.70':445
'60.##4.169.36':445
'60.##4.124.147':445
'60.##4.168.171':445
'60.##4.39.165':445
'60.#04.3.28':139
'60.##4.75.239':139
'60.##4.28.66':139
'60.##4.130.9':139
'60.##4.65.130':139
'60.##4.189.140':139
'60.##4.86.35':139
'60.##4.171.227':139
'60.##4.49.198':139
'60.##4.1.122':139
'60.#04.2.1':139
'60.##4.0.187':139
'60.##4.53.61':139
'60.##4.191.245':139
'60.##4.95.152':139
'60.##4.28.79':139
'60.##4.94.151':139
'60.##4.78.17':139
'60.#04.9.34':139
'60.##4.241.218':139
'60.##4.254.79':139
'60.##4.136.253':139
'60.##4.43.34':139
'60.##4.34.129':445
'60.##4.240.230':139
'60.##4.101.129':139
'60.##4.113.124':139
'60.##4.227.36':445
'60.##4.16.29':445
'60.##4.129.226':445
'60.##4.55.153':445
'60.##4.116.145':445
'60.##4.169.248':445
'60.##4.124.147':139
'60.#04.2.70':139
'60.##4.39.165':139
'60.##4.104.172':139
'60.##4.168.171':139
'60.##4.169.36':139
'60.##4.84.187':139
'60.##4.129.85':139
'60.##4.80.10':139
'60.##4.87.219':139
'60.##4.41.128':139
'60.##4.1.162':445
'60.##4.134.1':445
'60.##4.167.253':445
'60.##4.62.29':445
'60.##4.191.61':445
'60.##4.156.84':445
'60.##4.163.174':445
'60.##4.201.123':445
'60.##4.190.31':445
'60.##4.44.21':445
'60.##4.97.148':445
'60.##4.123.207':139
'60.##4.22.204':139
'60.##4.4.209':139
'60.##4.185.97':139
'60.##4.40.238':139
'60.##4.127.214':139
'60.##4.242.127':445
'60.##4.29.158':445
'60.##4.45.25':445
'60.##4.111.242':139
'60.##4.232.183':445
'60.##4.71.29':445
'60.##4.24.166':445
'60.##4.5.245':445
'60.##4.186.97':445
'60.##4.76.129':445
'60.##4.142.253':445
'60.##4.55.97':445
'60.##4.31.29':445
'60.##4.173.120':445
'60.##4.222.197':445
'60.##4.24.232':445
'60.##4.41.122':445
'60.##4.187.3':445
'60.##4.129.254':445
'60.##4.228.229':445
'60.##4.242.228':445
'60.##4.126.87':445
'60.##4.228.226':445
'60.##4.98.156':445
'60.##4.167.190':445
'60.##4.101.126':445
'60.##4.229.17':445
'60.##4.201.123':139
'60.##4.228.229':139
'60.##4.163.174':139
'60.##4.97.148':139
'60.##4.190.31':139
'60.##4.242.228':139
'60.##4.126.87':139
'60.##4.101.126':139
'60.##4.187.3':139
'60.##4.129.254':139
'60.##4.41.122':139
'60.##4.29.158':139
'60.##4.62.29':139
'60.##4.242.127':139
'60.##4.232.183':139
'60.##4.45.25':139
'60.##4.191.61':139
'60.##4.156.84':139
'60.##4.44.21':139
'60.##4.134.1':139
'60.##4.167.253':139
'60.##4.1.162':139
'60.##4.31.29':139
'60.##4.180.133':139
'60.##4.55.97':139
'60.##4.24.232':139
'60.##4.173.120':139
'60.#04.42.1':139
'60.#04.60.9':139
'60.#04.53.3':139
'60.##4.145.48':139
'60.##4.5.190':139
'60.#04.15.9':139
'60.##4.98.156':139
'60.##4.186.97':139
'60.##4.228.226':139
'60.##4.229.17':139
'60.##4.167.190':139
'60.##4.76.129':139
'60.##4.142.253':139
'60.##4.222.197':139
'60.##4.24.166':139
'60.##4.5.245':139
'60.##4.71.29':139
'60.##4.200.156':139
'60.##4.24.186':139
'60.##4.186.2':445
'60.##4.192.109':445
'60.##4.149.20':445
'60.##4.200.156':445
'60.##4.145.230':139
'60.##4.238.181':139
'60.##4.45.182':139
'60.##4.24.186':445
'60.##4.85.94':139
'60.##4.171.203':445
'60.##4.176.247':445
'60.##4.36.186':445
'60.##4.186.2':139
'60.##4.12.90':445
'60.##4.16.11':445
'60.##4.200.24':445
'60.##4.109.200':445
'60.##4.24.76':445
'60.##4.80.27':445
'60.##4.76.247':445
'60.##4.63.249':139
'60.##4.137.58':139
'60.##4.196.121':139
'60.##4.172.154':139
'60.##4.241.97':139
'60.##4.195.136':139
'60.##4.132.20':139
'60.##4.159.132':139
'60.##4.248.162':139
'60.##4.132.56':139
'60.##4.125.27':139
'60.##4.31.220':139
'60.##4.52.128':139
'60.##4.53.94':139
'60.##4.95.36':139
'60.##4.176.161':139
'60.##4.222.137':139
'60.##4.58.155':139
'60.##4.155.32':139
'60.##4.54.234':139
'60.##4.167.84':139
'60.##4.233.214':139
'60.##4.201.123':9988
'60.##4.44.21':9988
'60.##4.111.242':445
'60.##4.22.204':445
'60.##4.127.214':445
'60.##4.228.226':9988
'60.##4.156.84':9988
'60.##4.242.228':9988
'60.##4.41.122':9988
'60.##4.29.158':9988
'60.##4.163.174':9988
'60.#04.15.9':445
'60.##4.145.48':445
'60.##4.5.190':445
'60.##4.180.133':445
'60.#04.42.1':445
'60.#04.60.9':445
'60.##4.4.209':445
'60.##4.123.207':445
'60.##4.40.238':445
'60.#04.53.3':445
'60.##4.185.97':445
'60.##4.16.11':139
'60.##4.80.27':139
'60.##4.176.247':139
'60.##4.36.186':139
'60.##4.171.203':139
'60.##4.76.247':139
'60.##4.192.109':139
'60.##4.149.20':139
'60.##4.109.200':139
'60.##4.24.76':139
'60.##4.200.24':139
'60.##4.242.127':9988
'60.##4.45.25':9988
'60.##4.228.229':9988
'60.##4.167.253':9988
'60.##4.232.183':9988
'60.##4.167.190':9988
'60.##4.191.61':9988
'60.##4.12.90':139
'60.##4.97.148':9988
'60.##4.129.254':9988
'60.##4.190.31':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней