Trojan.Starman.6573

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12.##.128.97':139
'12.##.33.121':139
'12.##.227.214':139
'12.##.171.53':139
'12.##.79.170':139
'12.#8.51.97':139
'12.##.186.222':139
'12.##.235.98':139
'12.##.69.224':139
'12.#8.90.61':139
'12.##.159.141':139
'12.#8.24.72':139
'12.##.96.195':139
'12.##.247.228':139
'12.##.195.54':139
'12.##.94.195':139
'12.#8.55.83':139
'12.##.248.59':139
'12.##.115.173':139
'12.#8.84.83':139
'12.##.44.201':139
'12.##.212.37':139
'12.#8.31.41':139
'12.#8.51.43':139
'12.##.245.45':445
'12.##.10.129':445
'12.##.254.235':445
'12.##.148.226':139
'12.##.125.196':445
'12.##.120.196':445
'12.##.96.195':445
'12.##.247.228':445
'12.##.195.54':445
'12.##.94.195':445
'12.#8.55.83':445
'12.##.224.218':139
'12.##.69.148':139
'12.##.111.172':139
'12.#8.40.6':139
'12.##.46.252':139
'12.#8.5.190':139
'12.#8.8.88':139
'12.##.161.41':139
'12.##.243.210':139
'12.#8.6.2':139
'12.#8.6.201':139
'12.##.16.147':139
'12.##.120.196':139
'12.##.169.84':445
'12.##.61.177':445
'12.##.229.68':445
'12.##.107.207':445
'12.##.100.193':445
'12.##.101.201':445
'12.##.89.143':445
'12.##.83.136':445
'12.##.189.31':445
'12.##.205.38':445
'12.##.178.117':445
'12.##.143.78':445
'12.##.26.162':445
'12.##.124.132':445
'12.##.235.198':445
'12.##.119.193':445
'12.##.226.119':445
'12.##.228.212':445
'12.##.45.206':445
'12.##.78.112':445
'12.##.91.249':445
'12.##.204.165':445
'12.##.248.204':445
'12.##.156.92':445
'12.##.126.151':445
'12.##.93.240':445
'12.##.121.169':445
'12.##.251.135':445
'12.#8.70.6':445
'12.##.241.209':445
'12.##.91.242':445
'12.##.10.129':139
'12.##.245.45':139
'12.##.125.196':139
'12.##.254.235':139
'12.##.204.223':445
'12.##.204.223':139
'12.#8.70.6':139
'12.##.251.135':139
'12.##.159.155':445
'12.##.57.210':139
'12.##.121.169':139
'12.##.91.242':139
'12.##.57.210':445
'12.##.241.209':139
'12.##.126.151':139
'12.##.93.240':139
'12.##.248.59':445
'12.#8.158.8':139
'12.##.225.157':139
'12.#8.9.20':139
'12.##.240.143':139
'12.#8.0.159':139
'12.##.38.232':139
'12.##.70.182':139
'12.##.74.141':139
'12.##.138.251':139
'12.##.141.156':139
'12.##.69.212':139
'12.##.139.198':139
'12.##.216.108':139
'12.#8.52.98':139
'12.##.44.203':139
'12.##.63.250':445
'12.##.204.65':139
'12.#8.4.47':139
'12.##.164.138':139
'12.##.62.101':139
'12.##.138.56':139
'12.##.151.50':139
'12.#8.57.70':139
'12.##.11.254':139
'12.#8.59.79':139
'12.##.129.114':139
'12.#8.79.60':139
'12.##.88.116':139
'12.#8.60.88':139
'12.##.48.118':139
'12.##.216.108':445
'12.#8.52.98':445
'12.##.44.203':445
'12.##.234.121':139
'12.##.204.65':445
'12.##.116.28':139
'12.##.154.47':139
'12.#8.52.11':139
'12.##.25.238':139
'12.##.19.236':139
'12.##.236.34':139
'12.#8.92.66':139
'12.##.214.49':139
'12.##.41.183':139
'12.##.144.238':139
'12.##.100.234':139
'12.##.145.132':139
'12.##.147.90':445
'12.##.186.222':445
'12.##.235.98':445
'12.##.69.224':445
'12.#8.90.61':445
'12.##.159.141':445
'12.#8.51.43':445
'12.##.69.148':445
'12.##.111.172':445
'12.#8.40.6':445
'12.##.46.252':445
'12.#8.5.190':445
'12.#8.51.97':445
'12.##.115.173':445
'12.#8.84.83':445
'12.##.44.201':445
'12.##.212.37':445
'12.#8.31.41':445
'12.#8.24.72':445
'12.##.128.97':445
'12.##.33.121':445
'12.##.227.214':445
'12.##.171.53':445
'12.##.79.170':445
'12.#8.8.88':445
'12.##.165.64':139
'12.##.119.240':445
'12.##.63.250':139
'12.##.196.91':139
'12.##.147.90':139
'12.##.142.253':445
'12.##.196.91':445
'12.##.165.64':445
'12.##.91.220':445
'12.##.185.35':445
'12.##.220.184':445
'12.##.91.220':139
'12.##.161.41':445
'12.##.243.210':445
'12.#8.6.2':445
'12.#8.6.201':445
'12.##.16.147':445
'12.##.224.218':445
'12.##.185.35':139
'12.##.220.184':139
'12.##.142.253':139
'12.##.148.226':445
'12.##.119.240':139
'12.##.125.52':445
'12.#8.43.26':445
'12.#8.2.2':445
'12.##.181.245':445
'12.#8.22.42':445
'12.#8.3.211':445
'12.#8.33.29':445
'12.#8.43.71':445
'12.#8.35.13':445
'12.##.216.113':445
'12.##.246.66':445
'12.##.31.131':445
'12.##.219.109':445
'12.#8.59.33':445
'12.##.156.126':139
'12.##.34.157':139
'12.##.239.110':139
'12.##.109.86':445
'12.#8.59.74':445
'12.##.166.207':445
'12.#8.2.9':445
'12.##.82.199':445
'12.##.28.113':445
'12.#8.1.9':445
'12.##.39.141':445
'12.##.212.30':445
'12.#8.7.246':445
'12.##.130.136':445
'12.##.27.222':445
'12.#8.74.24':445
'12.##.147.236':445
'12.##.191.147':445
'12.##.236.241':445
'12.##.151.73':445
'12.##.140.53':445
'12.##.140.192':445
'12.#8.74.45':445
'12.##.123.87':445
'12.##.207.19':445
'12.##.100.194':445
'12.##.34.146':445
'12.##.153.159':445
'12.##.42.228':445
'12.##.192.42':445
'12.##.47.193':445
'12.##.108.221':445
'12.##.103.237':445
'12.##.48.242':139
'12.##.216.113':139
'12.##.246.66':139
'12.#8.3.211':139
'12.##.125.52':139
'12.#8.43.26':139
'12.#8.35.13':139
'12.##.100.194':139
'12.##.34.146':139
'12.#8.1.9':139
'12.#8.33.29':139
'12.#8.43.71':139
'12.#8.2.2':139
'12.##.109.86':139
'12.##.219.109':139
'12.#8.59.33':139
'12.##.28.113':139
'12.#8.59.74':139
'12.#8.2.9':139
'12.##.181.245':139
'12.#8.22.42':139
'12.##.31.131':139
'12.##.82.199':139
'12.##.166.207':139
'12.##.207.19':139
'12.##.151.73':139
'12.##.140.53':139
'12.#8.74.24':139
'12.##.39.141':139
'12.##.212.30':139
'12.##.236.241':139
'12.##.191.245':139
'12.##.104.230':139
'12.#8.90.66':139
'12.##.147.236':139
'12.##.191.147':139
'12.#8.7.246':139
'12.##.108.221':139
'12.##.103.237':139
'12.##.153.159':139
'12.#8.74.45':139
'12.##.123.87':139
'12.##.47.193':139
'12.##.130.136':139
'12.##.27.222':139
'12.##.140.192':139
'12.##.42.228':139
'12.##.192.42':139
'12.#8.90.66':445
'12.##.91.249':139
'12.##.178.117':139
'12.##.169.84':139
'12.##.205.38':139
'12.##.248.204':139
'12.##.61.177':139
'12.##.229.68':139
'12.##.107.207':139
'12.##.45.206':139
'12.##.100.193':139
'12.##.101.201':139
'12.##.204.165':139
'12.##.110.157':139
'12.##.194.42':139
'12.##.125.240':139
'12.##.209.170':139
'12.#8.160.9':139
'12.##.119.193':139
'12.##.124.132':139
'12.##.228.212':139
'12.##.235.198':139
'12.##.226.119':139
'12.##.26.162':139
'12.##.78.112':139
'12.#8.61.71':445
'12.##.172.206':445
'12.#8.21.69':445
'12.#8.3.95':445
'12.##.152.226':445
'12.#8.20.93':445
'12.##.110.157':445
'12.##.194.42':445
'12.##.125.240':445
'12.##.209.170':445
'12.#8.160.9':445
'12.##.142.139':445
'12.##.83.136':139
'12.##.156.92':139
'12.##.89.143':139
'12.##.143.78':139
'12.##.189.31':139
'12.##.159.155':139
'12.##.17.166':445
'12.##.95.104':445
'12.##.116.122':445
'12.#8.51.51':445
'12.##.78.107':445
'12.#8.20.93':139
'12.##.34.146':9988
'12.##.207.19':9988
'12.##.100.194':9988
'12.#8.43.71':9988
'12.#8.1.9':9988
'12.#8.74.45':9988
'12.#8.74.24':9988
'12.##.18.174':139
'12.##.103.237':9988
'12.##.123.87':9988
'12.##.108.221':9988
'12.#8.35.13':9988
'12.##.34.157':445
'12.##.239.110':445
'12.##.48.242':445
'12.##.191.245':445
'12.##.104.230':445
'12.##.156.126':445
'12.##.216.113':9988
'12.##.246.66':9988
'12.#8.3.211':9988
'12.#8.59.74':9988
'12.#8.43.26':9988
'12.##.182.214':139
'12.##.142.139':139
'12.##.95.104':139
'12.##.116.122':139
'12.#8.51.51':139
'12.##.78.107':139
'12.##.17.166':139
'12.#8.21.69':139
'12.#8.61.71':139
'12.##.172.206':139
'12.##.152.226':139
'12.#8.3.95':139
'12.#8.56.74':445
'12.##.135.252':139
'12.#8.56.74':139
'12.##.253.26':139
'12.##.130.30':139
'12.##.26.130':139
'12.##.18.174':445
'12.##.253.26':445
'12.##.135.252':445
'12.##.26.130':445
'12.##.182.214':445
'12.##.130.30':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней