Trojan.Starman.6338

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'62.##3.54.39':139
'62.##3.75.12':139
'62.##3.209.109':139
'62.##3.163.177':139
'62.##3.243.218':139
'62.##3.112.113':139
'62.##3.228.217':139
'62.##3.38.174':139
'62.##3.128.181':139
'62.##3.114.186':139
'62.##3.64.210':139
'62.##3.243.1':445
'62.##3.101.243':445
'62.##3.160.244':445
'62.##3.192.23':445
'62.##3.136.104':445
'62.##3.16.47':139
'62.##3.33.16':139
'62.##3.47.63':445
'62.##3.138.100':445
'62.##3.183.242':445
'62.##3.38.174':445
'62.##3.112.113':445
'62.##3.114.186':445
'62.##3.75.12':445
'62.##3.128.181':445
'62.##3.52.76':445
'62.##3.75.23':445
'62.##3.27.77':445
'62.##3.228.217':445
'62.##3.227.237':445
'62.##3.54.39':445
'62.##3.75.23':139
'62.##3.16.47':445
'62.##3.52.76':139
'62.##3.227.237':139
'62.##3.27.77':139
'62.##3.243.218':445
'62.##3.209.109':445
'62.##3.163.177':445
'62.##3.33.16':445
'62.##3.64.210':445
'62.##3.36.47':445
'62.##3.138.100':139
'62.##3.183.242':139
'62.##3.101.243':139
'62.##3.160.244':139
'62.##3.243.1':139
'62.##3.195.219':445
'62.##3.17.180':445
'62.##3.249.168':445
'62.##3.47.63':139
'62.##3.158.82':445
'62.##3.136.104':139
'62.##3.204.123':139
'62.##3.156.148':139
'62.##3.198.40':139
'62.##3.85.70':139
'62.##3.124.80':139
'62.##3.36.47':139
'62.##3.192.23':139
'62.##3.54.85':139
'62.##3.89.156':139
'62.##3.191.88':139
'62.##3.124.80':445
'62.##3.198.40':445
'62.##3.85.70':445
'62.#13.5.48':445
'62.##3.70.67':445
'62.##3.191.88':445
'62.##3.54.85':445
'62.##3.89.156':445
'62.##3.204.123':445
'62.##3.156.148':445
'62.##3.92.222':445
'62.##3.202.153':445
'62.##3.200.142':445
'62.##3.185.227':445
'62.##3.218.96':445
'62.##3.237.173':445
'62.#13.50.5':445
'62.##3.105.146':445
'62.##3.64.154':445
'62.#13.6.48':445
'62.##3.60.233':445
'62.##3.168.235':445
'62.##3.189.108':445
'62.##3.250.70':445
'62.#13.56.6':445
'62.##3.14.216':445
'62.##3.41.140':445
'62.##3.133.226':445
'62.##3.54.140':445
'62.##3.110.91':445
'62.##3.208.250':445
'62.##3.195.21':445
'62.##3.188.216':445
'62.##3.127.170':445
'62.##3.216.202':445
'62.##3.120.208':445
'62.##3.203.128':445
'62.##3.36.57':445
'62.##3.21.143':445
'62.##3.146.222':445
'62.##3.237.247':445
'62.##3.62.238':445
'62.##3.217.117':139
'62.##3.174.58':139
'62.##3.186.60':139
'62.##3.160.123':139
'62.##3.61.19':139
'62.##3.72.163':139
'62.##3.128.200':139
'62.##3.118.150':139
'62.##3.120.140':139
'62.##3.97.167':139
'62.##3.120.157':139
'62.##3.205.178':445
'62.##3.12.236':139
'62.##3.180.54':445
'62.##3.159.165':445
'62.##3.215.158':445
'62.##3.126.90':139
'62.##3.116.77':139
'62.##3.89.180':139
'62.##3.72.191':139
'62.##3.73.230':139
'62.##3.70.47':445
'62.##3.237.247':139
'62.##3.62.238':139
'62.##3.127.170':139
'62.##3.216.202':139
'62.##3.188.216':139
'62.##3.195.21':139
'62.#13.56.6':139
'62.##3.21.143':139
'62.##3.146.222':139
'62.##3.36.57':139
'62.##3.203.128':139
'62.##3.241.59':139
'62.##3.102.241':139
'62.##3.27.179':139
'62.##3.40.75':139
'62.##3.138.6':139
'62.##3.70.47':139
'62.##3.120.208':139
'62.##3.211.37':139
'62.##3.241.241':139
'62.##3.105.231':139
'62.##3.138.6':445
'62.##3.27.179':445
'62.##3.40.75':445
'62.##3.180.54':139
'62.##3.205.178':139
'62.##3.105.231':445
'62.##3.211.37':445
'62.##3.241.241':445
'62.##3.241.59':445
'62.##3.102.241':445
'62.##3.215.158':139
'62.##3.189.108':139
'62.##3.110.91':139
'62.##3.168.235':139
'62.##3.14.216':139
'62.##3.250.70':139
'62.##3.133.226':139
'62.##3.159.165':139
'62.##3.41.140':139
'62.##3.208.250':139
'62.##3.54.140':139
'62.##3.60.12':445
'62.##3.65.95':445
'62.##3.172.182':445
'62.##3.34.231':445
'62.##3.245.34':445
'62.##3.93.91':445
'62.##3.43.93':445
'62.##3.14.20':445
'62.##3.14.244':445
'62.##3.131.112':445
'62.#13.81.4':445
'62.##3.186.240':139
'62.##3.41.187':139
'62.##3.10.250':139
'62.##3.121.167':139
'62.##3.124.190':139
'62.##3.88.251':445
'62.##3.53.203':445
'62.##3.101.56':139
'62.##3.112.207':139
'62.##3.139.132':139
'62.##3.6.252':445
'62.##3.199.198':445
'62.##3.152.212':445
'62.##3.119.73':445
'62.##3.8.151':445
'62.##3.62.168':445
'62.##3.51.93':445
'62.##3.136.59':445
'62.##3.227.189':445
'62.##3.59.153':445
'62.##3.65.179':445
'62.##3.223.67':445
'62.#13.9.67':445
'62.##3.180.196':445
'62.##3.43.43':445
'62.##3.103.17':445
'62.##3.28.63':445
'62.##3.179.247':445
'62.##3.121.134':445
'62.##3.111.168':445
'62.##3.74.15':445
'62.##3.239.112':139
'62.##3.103.17':139
'62.##3.180.196':139
'62.##3.43.43':139
'62.##3.93.91':139
'62.##3.43.93':139
'62.##3.74.15':139
'62.##3.121.134':139
'62.##3.111.168':139
'62.##3.223.67':139
'62.#13.9.67':139
'62.##3.14.20':139
'62.##3.34.231':139
'62.##3.245.34':139
'62.#13.81.4':139
'62.##3.53.203':139
'62.##3.88.251':139
'62.##3.14.244':139
'62.##3.131.112':139
'62.##3.65.95':139
'62.##3.172.182':139
'62.##3.60.12':139
'62.##3.144.254':139
'62.##3.236.55':139
'62.##3.25.103':139
'62.##3.62.168':139
'62.##3.51.93':139
'62.##3.223.229':139
'62.##3.149.223':139
'62.##3.19.26':139
'62.##3.107.130':139
'62.##3.35.126':139
'62.##3.136.59':139
'62.##3.119.73':139
'62.##3.8.151':139
'62.##3.65.179':139
'62.##3.28.63':139
'62.##3.179.247':139
'62.##3.227.189':139
'62.##3.59.153':139
'62.##3.199.198':139
'62.##3.152.212':139
'62.##3.6.252':139
'62.##3.181.135':445
'62.##3.77.181':445
'62.##3.157.216':445
'62.##3.20.136':445
'62.##3.143.42':445
'62.##3.203.22':445
'62.#13.61.5':445
'62.##3.22.54':445
'62.##3.101.77':445
'62.##3.135.151':445
'62.#13.25.9':445
'62.#13.61.5':139
'62.##3.12.147':139
'62.##3.203.22':139
'62.##3.135.151':139
'62.##3.22.54':139
'62.##3.31.226':445
'62.##3.249.19':445
'62.##3.206.250':139
'62.##3.254.98':139
'62.##3.181.73':139
'62.##3.60.233':139
'62.##3.64.154':139
'62.#13.6.48':139
'62.##3.202.153':139
'62.##3.200.142':139
'62.#13.5.48':139
'62.##3.70.67':139
'62.##3.92.222':139
'62.#13.50.5':139
'62.##3.105.146':139
'62.##3.185.227':139
'62.##3.206.250':445
'62.##3.158.82':139
'62.##3.181.73':445
'62.##3.12.147':445
'62.##3.254.98':445
'62.##3.218.96':139
'62.##3.237.173':139
'62.##3.17.180':139
'62.##3.249.168':139
'62.##3.195.219':139
'62.##3.101.77':139
'62.##3.112.207':445
'62.##3.139.132':445
'62.##3.41.187':445
'62.##3.10.250':445
'62.##3.186.240':445
'62.##3.88.251':9988
'62.##3.34.231':9988
'62.#13.81.4':9988
'62.##3.101.56':445
'62.##3.53.203':9988
'62.##3.124.190':445
'62.##3.107.130':445
'62.##3.35.126':445
'62.##3.236.55':445
'62.##3.25.103':445
'62.##3.144.254':445
'62.##3.239.112':445
'62.##3.121.167':445
'62.##3.149.223':445
'62.##3.19.26':445
'62.##3.223.229':445
'62.##3.249.19':139
'62.#13.25.9':139
'62.##3.31.226':139
'62.##3.152.212':9988
'62.##3.59.153':9988
'62.##3.181.135':139
'62.##3.77.181':139
'62.##3.157.216':139
'62.##3.20.136':139
'62.##3.143.42':139
'62.##3.199.198':9988
'62.##3.14.244':9988
'62.##3.131.112':9988
'62.##3.65.95':9988
'62.##3.245.34':9988
'62.##3.172.182':9988
'62.##3.227.189':9988
'62.##3.51.93':9988
'62.#13.9.67':9988
'62.##3.103.17':9988
'62.##3.223.67':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней