Trojan.Starman.6309

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'58.##9.19.24':445
'58.##9.236.122':445
'58.##9.71.86':445
'58.##9.27.127':445
'58.##9.47.193':445
'58.##9.117.5':445
'58.##9.139.227':445
'58.##9.138.79':139
'58.##9.35.52':139
'58.##9.69.83':139
'58.##9.191.50':139
'58.##9.119.102':139
'58.##9.78.249':139
'58.##9.50.181':445
'58.#69.3.56':445
'58.##9.49.168':445
'58.##9.203.142':445
'58.##9.66.203':445
'58.##9.34.89':445
'58.##9.155.245':445
'58.##9.98.168':445
'58.##9.206.231':445
'58.##9.194.206':445
'58.##9.88.208':445
'58.##9.155.187':445
'58.##9.228.159':445
'58.##9.153.152':139
'58.##9.252.197':139
'58.##9.111.213':139
'58.##9.145.53':139
'58.##9.45.150':139
'58.##9.152.112':139
'58.##9.141.142':139
'58.##9.90.83':139
'58.##9.136.243':139
'58.##9.114.15':139
'58.##9.8.235':139
'58.##9.57.254':139
'58.##9.110.148':139
'58.##9.78.249':445
'58.##9.35.52':445
'58.##9.69.83':445
'58.##9.191.50':445
'58.##9.119.102':445
'58.##9.138.79':445
'58.##9.116.196':139
'58.##9.78.31':139
'58.##9.70.62':139
'58.##9.16.151':139
'58.##9.236.149':139
'58.##9.115.93':139
'58.##9.247.98':139
'58.##9.14.223':445
'58.##9.155.187':139
'58.##9.228.159':139
'58.##9.98.168':139
'58.##9.49.168':139
'58.##9.155.245':139
'58.##9.88.208':139
'58.##9.206.231':139
'58.##9.117.5':139
'58.##9.19.24':139
'58.##9.236.122':139
'58.##9.194.206':139
'58.##9.27.127':139
'58.##9.47.193':139
'58.##9.194.234':139
'58.##9.64.85':139
'58.##9.33.174':139
'58.##9.165.246':139
'58.##9.162.167':139
'58.##9.234.22':139
'58.##9.201.141':139
'58.##9.34.89':139
'58.##9.50.181':139
'58.#69.3.56':139
'58.##9.14.223':139
'58.##9.203.142':139
'58.##9.66.203':139
'58.##9.129.132':445
'58.##9.144.24':445
'58.##9.84.51':445
'58.##9.208.43':445
'58.##9.143.142':445
'58.##9.31.186':445
'58.##9.165.246':445
'58.##9.64.85':445
'58.##9.33.174':445
'58.##9.201.141':445
'58.##9.234.22':445
'58.##9.162.167':445
'58.##9.194.234':445
'58.##9.81.131':445
'58.#69.31.9':445
'58.##9.241.84':445
'58.##9.71.86':139
'58.##9.139.227':139
'58.##9.194.180':445
'58.##9.237.5':445
'58.##9.229.202':445
'58.##9.216.67':445
'58.##9.251.171':445
'58.##9.58.43':445
'58.##9.42.197':445
'58.##9.67.236':445
'58.##9.86.125':139
'58.##9.235.114':139
'58.##9.48.196':139
'58.##9.34.245':139
'58.##9.169.182':445
'58.##9.17.172':445
'58.##9.133.18':445
'58.##9.18.11':139
'58.##9.48.196':445
'58.##9.34.245':445
'58.##9.18.11':445
'58.##9.92.154':139
'58.##9.228.190':139
'58.##9.235.114':445
'58.##9.56.51':445
'58.##9.106.33':445
'58.##9.33.167':445
'58.##9.146.10':445
'58.##9.129.241':445
'58.##9.153.231':445
'58.##9.19.74':445
'58.##9.10.212':445
'58.##9.242.36':445
'58.##9.57.181':445
'58.##9.123.81':445
'58.##9.38.49':445
'58.##9.107.188':445
'58.##9.1.203':139
'58.##9.63.170':139
'58.#69.94.9':139
'58.##9.239.40':139
'58.##9.124.63':139
'58.##9.48.102':139
'58.##9.231.215':139
'58.##9.140.214':139
'58.#69.87.6':139
'58.##9.130.233':139
'58.##9.71.104':139
'58.##9.165.227':139
'58.##9.214.165':139
'58.##9.153.87':139
'58.##9.40.202':139
'58.##9.169.33':139
'58.##9.92.154':445
'58.##9.228.190':445
'58.##9.87.200':139
'58.##9.220.219':139
'58.##9.234.233':139
'58.##9.163.50':139
'58.##9.225.28':139
'58.##9.158.225':139
'58.##9.10.238':139
'58.##9.225.131':139
'58.##9.30.232':445
'58.##9.38.49':139
'58.##9.107.188':139
'58.##9.242.36':139
'58.##9.106.33':139
'58.##9.19.74':139
'58.##9.123.81':139
'58.##9.10.212':139
'58.##9.133.18':139
'58.##9.116.196':445
'58.##9.236.149':445
'58.##9.57.181':139
'58.##9.169.182':139
'58.##9.17.172':139
'58.##9.155.239':139
'58.##9.9.106':139
'58.##9.96.86':139
'58.##9.230.151':139
'58.##9.255.5':139
'58.##9.85.192':139
'58.##9.142.34':139
'58.##9.153.231':139
'58.##9.56.51':139
'58.##9.33.167':139
'58.##9.30.232':139
'58.##9.146.10':139
'58.##9.129.241':139
'58.##9.136.243':445
'58.##9.114.15':445
'58.##9.86.125':445
'58.##9.57.254':445
'58.##9.110.148':445
'58.##9.90.83':445
'58.##9.230.151':445
'58.##9.9.106':445
'58.##9.96.86':445
'58.##9.142.34':445
'58.##9.255.5':445
'58.##9.85.192':445
'58.##9.155.239':445
'58.##9.70.62':445
'58.##9.16.151':445
'58.##9.145.53':445
'58.##9.115.93':445
'58.##9.247.98':445
'58.##9.78.31':445
'58.##9.45.150':445
'58.##9.111.213':445
'58.##9.141.142':445
'58.##9.8.235':445
'58.##9.152.112':445
'58.##9.153.152':445
'58.##9.252.197':445
'58.##9.84.51':139
'58.##9.31.178':445
'58.##9.140.75':445
'58.##9.11.52':445
'58.##9.71.252':445
'58.##9.36.122':445
'58.##9.55.102':445
'58.##9.46.220':445
'58.##9.32.197':445
'58.##9.52.36':445
'58.##9.179.51':445
'58.##9.91.111':445
'58.##9.15.168':445
'58.##9.139.236':445
'58.##9.54.235':445
'58.##9.144.207':445
'58.##9.186.28':445
'58.##9.31.130':445
'58.##9.234.202':445
'58.##9.93.225':445
'58.##9.191.128':445
'58.##9.173.58':445
'58.##9.159.185':445
'58.#69.44.9':445
'58.##9.139.191':445
'58.##9.161.116':445
'58.##9.223.29':445
'58.##9.45.155':445
'58.##9.45.43':445
'58.##9.142.196':445
'58.##9.112.36':445
'58.##9.252.125':445
'58.##9.84.24':445
'58.##9.253.142':445
'58.##9.31.130':9988
'58.##9.161.116':9988
'58.##9.159.185':9988
'58.##9.168.253':445
'58.#69.0.59':445
'58.##9.124.31':445
'58.##9.46.211':445
'58.##9.51.31':445
'58.##9.225.50':445
'58.##9.43.244':445
'58.##9.88.159':445
'58.##9.37.81':445
'58.##9.113.237':445
'58.##9.96.212':445
'58.##9.205.96':445
'58.##9.88.205':445
'58.##9.124.163':445
'58.##9.187.74':445
'58.##9.36.79':445
'58.##9.29.246':445
'58.##9.36.122':139
'58.##9.55.102':139
'58.##9.31.178':139
'58.##9.159.185':139
'58.#69.44.9':139
'58.##9.71.252':139
'58.##9.140.75':139
'58.##9.15.168':139
'58.##9.139.236':139
'58.##9.32.197':139
'58.##9.11.52':139
'58.##9.46.220':139
'58.##9.91.111':139
'58.##9.31.130':139
'58.##9.234.202':139
'58.##9.54.235':139
'58.##9.29.246':139
'58.##9.74.174':139
'58.##9.93.225':139
'58.##9.144.207':139
'58.##9.161.116':139
'58.##9.223.29':139
'58.##9.173.58':139
'58.##9.186.28':139
'58.##9.191.128':139
'58.##9.139.191':139
'58.##9.252.125':139
'58.##9.84.24':139
'58.##9.45.155':139
'58.##9.205.96':139
'58.##9.88.205':139
'58.##9.112.36':139
'58.##9.45.43':139
'58.#69.0.59':139
'58.##9.124.31':139
'58.##9.74.174':445
'58.##9.142.196':139
'58.##9.253.142':139
'58.##9.168.253':139
'58.##9.88.159':139
'58.##9.37.81':139
'58.##9.46.211':139
'58.##9.52.36':139
'58.##9.179.51':139
'58.##9.43.244':139
'58.##9.51.31':139
'58.##9.187.74':139
'58.##9.36.79':139
'58.##9.96.212':139
'58.##9.225.50':139
'58.##9.113.237':139
'58.##9.124.163':139
'58.##9.139.236':9988
'58.##9.10.46':445
'58.##9.3.237':445
'58.##9.105.169':445
'58.##9.18.39':445
'58.##9.168.88':445
'58.##9.174.48':445
'58.##9.105.133':445
'58.##9.151.48':445
'58.##9.110.151':139
'58.##9.84.223':139
'58.##9.25.60':445
'58.##9.28.187':445
'58.##9.74.103':445
'58.##9.97.148':445
'58.##9.49.248':445
'58.##9.134.49':445
'58.##9.136.83':445
'58.##9.210.100':445
'58.##9.14.105':445
'58.##9.12.105':445
'58.##9.170.135':445
'58.##9.204.170':445
'58.##9.188.62':445
'58.##9.16.27':445
'58.##9.18.98':445
'58.##9.215.44':445
'58.##9.42.197':139
'58.##9.229.202':139
'58.##9.67.236':139
'58.##9.241.84':139
'58.##9.237.5':139
'58.##9.58.43':139
'58.##9.216.67':139
'58.##9.31.186':139
'58.##9.129.132':139
'58.##9.144.24':139
'58.##9.251.171':139
'58.##9.208.43':139
'58.##9.143.142':139
'58.##9.181.64':139
'58.##9.110.151':445
'58.##9.84.223':445
'58.##9.29.142':139
'58.##9.119.22':139
'58.##9.199.5':139
'58.##9.29.142':445
'58.##9.194.180':139
'58.##9.81.131':139
'58.#69.31.9':139
'58.##9.119.22':445
'58.##9.199.5':445
'58.##9.181.64':445
'58.##9.242.146':445
'58.##9.136.83':139
'58.##9.210.100':139
'58.##9.14.105':139
'58.##9.7.209':139
'58.##9.80.196':139
'58.##9.242.146':139
'58.##9.97.148':139
'58.##9.16.27':139
'58.##9.18.98':139
'58.##9.215.44':139
'58.##9.49.248':139
'58.##9.134.49':139
'58.##9.12.105':139
'58.##9.78.61':139
'58.##9.84.191':139
'58.##9.106.44':139
'58.##9.52.36':9988
'58.##9.187.74':9988
'58.##9.124.31':9988
'58.##9.5.238':139
'58.##9.52.198':139
'58.##9.61.250':139
'58.##9.58.242':139
'58.##9.37.217':139
'58.##9.19.228':139
'58.##9.49.20':139
'58.##9.106.44':445
'58.##9.5.238':445
'58.##9.37.217':445
'58.##9.151.48':139
'58.##9.78.61':445
'58.##9.84.191':445
'58.##9.19.228':445
'58.##9.58.242':445
'58.##9.7.209':445
'58.##9.80.196':445
'58.##9.49.20':445
'58.##9.52.198':445
'58.##9.61.250':445
'58.##9.18.39':139
'58.##9.168.88':139
'58.##9.174.48':139
'58.##9.170.135':139
'58.##9.204.170':139
'58.##9.188.62':139
'58.##9.10.46':139
'58.##9.25.60':139
'58.##9.28.187':139
'58.##9.74.103':139
'58.##9.3.237':139
'58.##9.105.169':139
'58.##9.105.133':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней