Trojan.Starman.6490

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'80.##7.98.237':445
'80.##7.120.183':445
'80.##7.115.189':445
'80.##7.11.170':445
'80.#37.0.68':445
'80.##7.233.211':445
'80.##7.156.131':445
'80.##7.13.195':445
'80.##7.192.228':445
'80.##7.52.92':445
'80.##7.59.59':445
'80.##7.21.219':445
'80.##7.169.85':445
'80.##7.39.55':445
'80.##7.117.219':445
'80.##7.28.102':445
'80.##7.85.52':445
'80.##7.218.84':445
'80.##7.82.13':445
'80.##7.2.130':445
'80.##7.1.252':445
'80.##7.85.71':445
'80.##7.116.135':445
'80.##7.126.213':445
'80.##7.73.126':445
'80.##7.130.101':445
'80.##7.44.76':445
'80.##7.202.126':445
'80.##7.81.132':445
'80.##7.26.107':445
'80.##7.98.64':445
'80.##7.134.204':139
'80.##7.193.178':139
'80.##7.115.123':139
'80.##7.138.96':139
'80.##7.47.184':139
'80.##7.14.60':139
'80.##7.162.6':445
'80.##7.203.109':445
'80.##7.184.64':445
'80.##7.15.184':445
'80.##7.87.193':445
'80.##7.245.243':445
'80.##7.10.158':445
'80.#37.7.24':445
'80.##7.100.253':445
'80.##7.242.29':445
'80.##7.239.200':445
'80.##7.201.206':445
'80.##7.23.202':445
'80.##7.165.136':445
'80.##7.1.252':139
'80.##7.85.71':139
'80.##7.169.85':139
'80.##7.126.213':139
'80.##7.73.126':139
'80.##7.2.130':139
'80.##7.98.237':139
'80.##7.120.183':139
'80.##7.115.189':139
'80.##7.11.170':139
'80.#37.0.68':139
'80.##7.233.211':139
'80.##7.116.135':139
'80.##7.95.60':445
'80.##7.247.108':445
'80.##7.165.136':139
'80.##7.240.162':445
'80.##7.171.229':445
'80.##7.20.242':445
'80.##7.39.55':139
'80.##7.117.219':139
'80.##7.28.102':139
'80.##7.85.52':139
'80.##7.218.84':139
'80.##7.82.13':139
'80.##7.100.253':139
'80.##7.242.29':139
'80.##7.162.6':139
'80.##7.201.206':139
'80.##7.23.202':139
'80.#37.7.24':139
'80.##7.130.101':139
'80.##7.44.76':139
'80.##7.202.126':139
'80.##7.81.132':139
'80.##7.26.107':139
'80.##7.98.64':139
'80.##7.239.200':139
'80.##7.156.131':139
'80.##7.13.195':139
'80.##7.192.228':139
'80.##7.52.92':139
'80.##7.59.59':139
'80.##7.21.219':139
'80.##7.203.109':139
'80.##7.184.64':139
'80.##7.15.184':139
'80.##7.87.193':139
'80.##7.245.243':139
'80.##7.10.158':139
'80.##7.138.96':445
'80.##7.125.168':445
'80.##7.153.89':445
'80.##7.21.47':445
'80.##7.98.140':445
'80.##7.107.73':445
'80.##7.254.252':445
'80.##7.134.102':445
'80.##7.79.224':445
'80.##7.40.225':445
'80.##7.124.85':445
'80.##7.15.63':445
'80.##7.101.161':445
'80.##7.106.120':445
'80.##7.242.235':445
'80.##7.160.186':445
'80.##7.214.45':445
'80.##7.40.62':445
'80.##7.196.142':445
'80.##7.235.196':445
'80.##7.6.137':445
'80.##7.76.127':445
'80.##7.140.156':445
'80.##7.65.117':445
'80.##7.118.224':445
'80.##7.45.182':445
'80.##7.163.125':445
'80.##7.42.126':445
'80.##7.119.68':445
'80.##7.30.82':445
'80.##7.74.170':445
'80.##7.148.204':445
'80.##7.100.31':139
'80.##7.28.161':139
'80.##7.210.247':139
'80.##7.72.109':139
'80.##7.86.41':139
'80.##7.224.86':139
'80.##7.33.100':445
'80.##7.254.253':445
'80.##7.208.254':445
'80.##7.191.208':445
'80.##7.155.214':445
'80.##7.124.220':445
'80.##7.254.42':445
'80.##7.61.85':445
'80.##7.213.121':445
'80.##7.100.123':445
'80.##7.128.192':445
'80.##7.215.128':445
'80.##7.201.140':445
'80.##7.145.138':445
'80.##7.76.127':139
'80.##7.140.156':139
'80.##7.106.120':139
'80.##7.118.224':139
'80.##7.45.182':139
'80.##7.6.137':139
'80.##7.125.168':139
'80.##7.153.89':139
'80.##7.21.47':139
'80.##7.98.140':139
'80.##7.107.73':139
'80.##7.254.252':139
'80.##7.65.117':139
'80.##7.193.178':445
'80.##7.115.123':445
'80.##7.145.138':139
'80.##7.47.184':445
'80.##7.14.60':445
'80.##7.134.204':445
'80.##7.242.235':139
'80.##7.160.186':139
'80.##7.214.45':139
'80.##7.40.62':139
'80.##7.196.142':139
'80.##7.235.196':139
'80.##7.213.121':139
'80.##7.100.123':139
'80.##7.33.100':139
'80.##7.215.128':139
'80.##7.201.140':139
'80.##7.61.85':139
'80.##7.163.125':139
'80.##7.42.126':139
'80.##7.119.68':139
'80.##7.30.82':139
'80.##7.74.170':139
'80.##7.148.204':139
'80.##7.128.192':139
'80.##7.134.102':139
'80.##7.79.224':139
'80.##7.40.225':139
'80.##7.124.85':139
'80.##7.15.63':139
'80.##7.101.161':139
'80.##7.254.253':139
'80.##7.208.254':139
'80.##7.191.208':139
'80.##7.155.214':139
'80.##7.124.220':139
'80.##7.254.42':139
'80.##7.39.170':445
'80.##7.113.164':445
'80.##7.143.27':445
'80.##7.39.220':445
'80.##7.207.39':445
'80.##7.229.220':445
'80.##7.165.25':445
'80.##7.220.108':445
'80.##7.188.166':445
'80.##7.102.214':445
'80.##7.73.102':445
'80.##7.241.72':445
'80.##7.90.198':445
'80.##7.171.226':445
'80.##7.223.126':445
'80.##7.85.92':445
'80.##7.126.55':445
'80.##7.176.171':445
'80.##7.87.233':445
'80.##7.93.180':445
'80.#37.40.2':445
'80.##7.226.113':445
'80.##7.206.27':445
'80.##7.226.5':445
'80.##7.45.111':445
'80.#37.2.67':445
'80.##7.107.202':445
'80.##7.54.10':445
'80.##7.198.199':445
'80.##7.76.162':445
'80.##7.146.156':445
'80.##7.72.240':445
'80.##7.131.73':445
'80.##7.111.220':445
'80.##7.147.135':445
'80.##7.66.46':445
'80.##7.68.130':445
'80.##7.108.155':445
'80.##7.238.31':445
'80.##7.56.84':445
'80.#37.8.51':445
'80.##7.117.141':445
'80.##7.213.117':445
'80.##7.131.219':445
'80.##7.105.123':445
'80.##7.230.78':445
'80.##7.148.157':445
'80.##7.216.132':445
'80.##7.254.64':445
'80.##7.43.38':445
'80.##7.9.200':139
'80.##7.39.170':139
'80.##7.113.164':139
'80.##7.143.27':139
'80.##7.39.220':139
'80.##7.207.39':139
'80.##7.229.220':139
'80.##7.165.25':139
'80.##7.220.108':139
'80.##7.188.166':139
'80.##7.102.214':139
'80.##7.73.102':139
'80.##7.241.72':139
'80.##7.90.198':139
'80.##7.126.55':139
'80.##7.223.126':139
'80.##7.85.92':139
'80.##7.176.171':139
'80.##7.87.233':139
'80.##7.171.226':139
'80.##7.93.180':139
'80.#37.40.2':139
'80.##7.226.113':139
'80.##7.206.27':139
'80.##7.226.5':139
'80.##7.45.111':139
'80.#37.2.67':139
'80.##7.107.202':139
'80.##7.54.10':139
'80.##7.198.199':139
'80.##7.76.162':139
'80.##7.146.156':139
'80.##7.72.240':139
'80.##7.131.73':139
'80.##7.111.220':139
'80.##7.147.135':139
'80.##7.66.46':139
'80.##7.68.130':139
'80.##7.108.155':139
'80.##7.238.31':139
'80.##7.56.84':139
'80.#37.8.51':139
'80.##7.117.141':139
'80.##7.213.117':139
'80.##7.131.219':139
'80.##7.105.123':139
'80.##7.230.78':139
'80.##7.148.157':139
'80.##7.216.132':139
'80.##7.254.64':139
'80.##7.43.38':139
'80.##7.9.200':445
'80.##7.184.186':445
'80.##7.178.184':445
'80.##7.10.178':445
'80.##7.18.155':445
'80.##7.241.101':445
'80.##7.186.157':445
'80.##7.80.145':445
'80.##7.163.230':445
'80.##7.162.163':445
'80.##7.226.10':445
'80.##7.2.198':445
'80.##7.62.127':445
'80.##7.44.78':445
'80.##7.56.220':445
'80.##7.31.166':445
'80.##7.169.56':445
'80.##7.38.90':445
'80.##7.84.253':445
'80.##7.216.134':445
'80.##7.65.96':445
'80.##7.36.168':445
'80.##7.78.85':445
'80.##7.151.61':445
'80.##7.143.83':445
'80.##7.23.181':445
'80.##7.230.165':445
'80.##7.98.133':445
'80.#37.3.73':139
'80.##7.184.207':445
'80.##7.242.187':445
'80.##7.92.244':445
'80.##7.95.60':139
'80.##7.247.108':139
'80.#37.3.73':445
'80.##7.240.162':139
'80.##7.171.229':139
'80.##7.20.242':139
'80.##7.140.201':445
'80.##7.48.87':445
'80.##7.180.11':445
'80.##7.48.227':445
'80.##7.47.30':445
'80.##7.186.77':445
'80.##7.94.186':445
'80.##7.183.251':445
'80.##7.30.203':445
'80.##7.57.46':445
'80.##7.243.124':445
'80.##7.131.184':445
'80.##7.251.131':445
'80.##7.87.54':445
'80.##7.36.168':139
'80.##7.78.85':139
'80.##7.44.78':139
'80.##7.143.83':139
'80.##7.23.181':139
'80.##7.65.96':139
'80.##7.184.186':139
'80.##7.178.184':139
'80.##7.10.178':139
'80.##7.18.155':139
'80.##7.241.101':139
'80.##7.186.157':139
'80.##7.151.61':139
'80.##7.111.220':9988
'80.##7.78.96':139
'80.##7.87.54':139
'80.##7.93.180':9988
'80.##7.126.55':9988
'80.##7.76.162':9988
'80.##7.56.220':139
'80.##7.31.166':139
'80.##7.169.56':139
'80.##7.38.90':139
'80.##7.84.253':139
'80.##7.216.134':139
'80.##7.30.203':139
'80.##7.57.46':139
'80.##7.140.201':139
'80.##7.131.184':139
'80.##7.251.131':139
'80.##7.183.251':139
'80.##7.230.165':139
'80.##7.98.133':139
'80.##7.78.96':445
'80.##7.184.207':139
'80.##7.242.187':139
'80.##7.92.244':139
'80.##7.243.124':139
'80.##7.80.145':139
'80.##7.163.230':139
'80.##7.162.163':139
'80.##7.226.10':139
'80.##7.2.198':139
'80.##7.62.127':139
'80.##7.48.87':139
'80.##7.180.11':139
'80.##7.48.227':139
'80.##7.47.30':139
'80.##7.186.77':139
'80.##7.94.186':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней