Trojan.Starman.6598

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'67.##.81.213':445
'67.##.166.128':445
'67.#3.9.135':445
'67.#3.14.90':445
'67.##.210.209':445
'67.#3.83.65':445
'67.##.144.191':445
'67.##.48.234':445
'67.##.44.207':445
'67.#3.95.83':445
'67.##.119.214':445
'67.##.130.253':445
'67.#3.55.84':445
'67.##.253.73':445
'67.##.141.228':445
'67.##.175.168':445
'67.##.147.162':445
'67.##.80.172':445
'67.##.98.155':445
'67.##.235.55':445
'67.##.239.147':445
'67.##.149.189':445
'67.#3.7.60':139
'67.##.87.237':139
'67.##.199.114':139
'67.##.202.91':445
'67.##.71.161':139
'67.#3.31.74':139
'67.#3.98.18':139
'67.##.98.230':139
'67.##.171.14':139
'67.##.178.76':139
'67.##.234.177':139
'67.##.109.141':445
'67.##.126.212':139
'67.#3.63.27':445
'67.##.141.150':445
'67.##.235.238':445
'67.#3.7.104':139
'67.#3.7.104':445
'67.##.91.199':445
'67.##.126.212':445
'67.##.91.199':139
'67.##.202.91':139
'67.#3.95.83':139
'67.##.119.214':139
'67.#3.83.65':139
'67.##.81.213':139
'67.##.166.128':139
'67.##.44.207':139
'67.##.235.238':139
'67.#3.63.27':139
'67.##.141.150':139
'67.##.144.191':139
'67.##.48.234':139
'67.##.239.147':139
'67.##.149.189':139
'67.##.147.162':139
'67.##.130.253':139
'67.#3.55.84':139
'67.##.235.55':139
'67.##.210.209':139
'67.#3.9.135':139
'67.#3.14.90':139
'67.##.80.172':139
'67.##.98.155':139
'67.#3.133.4':445
'67.##.238.251':445
'67.#3.46.71':445
'67.##.60.191':445
'67.##.127.60':445
'67.##.159.248':445
'67.##.18.223':445
'67.#3.35.51':445
'67.##.228.139':445
'67.##.253.98':445
'67.##.139.253':445
'67.##.183.164':445
'67.##.130.183':445
'67.#3.89.11':445
'67.##.109.141':139
'67.#3.71.8':445
'67.##.61.234':445
'67.#3.70.66':445
'67.##.64.189':445
'67.##.166.87':445
'67.##.239.236':445
'67.##.71.239':445
'67.##.210.119':445
'67.##.142.65':445
'67.##.95.134':445
'67.##.182.161':445
'67.#3.1.183':445
'67.##.11.231':445
'67.##.11.247':445
'67.##.140.147':445
'67.##.253.21':445
'67.#3.25.22':445
'67.##.43.135':445
'67.##.16.154':445
'67.##.20.107':445
'67.##.98.230':445
'67.##.171.14':445
'67.#3.98.18':445
'67.##.153.243':445
'67.##.253.253':445
'67.##.248.109':445
'67.##.105.67':445
'67.##.35.104':445
'67.##.99.207':445
'67.##.19.213':445
'67.##.243.198':445
'67.##.32.127':445
'67.##.85.188':445
'67.##.126.85':445
'67.##.202.95':445
'67.##.153.249':139
'67.#3.4.167':139
'67.##.17.161':139
'67.##.196.119':445
'67.##.229.219':139
'67.##.145.28':445
'67.##.119.114':445
'67.#3.31.71':445
'67.##.55.135':445
'67.##.72.124':445
'67.##.40.140':445
'67.#3.6.115':445
'67.##.219.219':445
'67.##.154.113':445
'67.##.131.223':445
'67.#3.39.5':445
'67.#3.25.22':139
'67.##.43.135':139
'67.##.11.231':139
'67.##.210.119':139
'67.##.142.65':139
'67.##.253.21':139
'67.##.72.124':139
'67.#3.31.71':139
'67.##.55.135':139
'67.##.11.247':139
'67.##.140.147':139
'67.##.35.104':139
'67.##.99.207':139
'67.##.153.243':139
'67.##.16.154':139
'67.##.20.107':139
'67.##.105.67':139
'67.#3.1.183':139
'67.##.95.134':139
'67.##.182.161':139
'67.##.253.253':139
'67.##.248.109':139
'67.##.196.119':139
'67.##.71.161':445
'67.##.202.95':139
'67.##.19.213':139
'67.##.243.198':139
'67.##.199.114':445
'67.##.178.76':445
'67.##.234.177':445
'67.#3.31.74':445
'67.#3.7.60':445
'67.##.87.237':445
'67.##.131.223':139
'67.#3.39.5':139
'67.##.40.140':139
'67.##.145.28':139
'67.##.119.114':139
'67.##.154.113':139
'67.##.126.85':139
'67.##.32.127':139
'67.##.85.188':139
'67.#3.6.115':139
'67.##.219.219':139
'67.##.253.73':139
'67.#3.2.166':445
'67.#3.48.47':445
'67.##.187.96':445
'67.##.163.75':445
'67.##.42.137':445
'67.##.207.42':445
'67.##.41.238':445
'67.#3.99.42':445
'67.##.238.51':445
'67.##.157.18':445
'67.#3.56.35':445
'67.##.126.170':139
'67.##.201.158':139
'67.##.171.220':139
'67.##.156.23':139
'67.##.165.156':139
'67.##.229.196':139
'67.##.42.170':445
'67.##.30.150':445
'67.##.126.59':445
'67.##.174.147':139
'67.##.219.46':445
'67.##.218.152':445
'67.##.179.29':445
'67.#3.15.38':445
'67.##.237.203':445
'67.#3.90.35':445
'67.#3.94.98':445
'67.#3.43.81':445
'67.##.122.22':445
'67.##.226.190':445
'67.##.227.88':445
'67.#3.44.13':445
'67.##.197.181':445
'67.#3.31.76':445
'67.##.175.253':445
'67.##.114.99':445
'67.##.92.114':445
'67.##.163.32':445
'67.##.209.187':445
'67.##.174.101':445
'67.##.187.81':445
'67.#3.51.23':445
'67.##.47.131':445
'67.#3.99.42':139
'67.##.114.99':139
'67.##.41.238':139
'67.#3.56.35':139
'67.##.238.51':139
'67.##.92.114':139
'67.##.163.32':139
'67.#3.51.23':139
'67.#3.31.76':139
'67.##.175.253':139
'67.##.197.181':139
'67.##.30.150':139
'67.##.163.75':139
'67.##.42.170':139
'67.##.126.59':139
'67.##.219.46':139
'67.##.42.137':139
'67.##.207.42':139
'67.##.157.18':139
'67.#3.48.47':139
'67.##.187.96':139
'67.#3.2.166':139
'67.##.122.22':139
'67.##.214.229':139
'67.#3.43.81':139
'67.#3.44.13':139
'67.##.226.190':139
'67.##.172.197':139
'67.##.137.80':139
'67.##.111.97':139
'67.##.40.146':139
'67.##.200.147':139
'67.#3.89.37':139
'67.##.174.101':139
'67.##.237.203':139
'67.##.209.187':139
'67.##.47.131':139
'67.##.187.81':139
'67.#3.90.35':139
'67.#3.94.98':139
'67.##.227.88':139
'67.##.179.29':139
'67.#3.15.38':139
'67.##.218.152':139
'67.#3.50.82':139
'67.##.171.42':139
'67.##.171.46':139
'67.##.39.204':445
'67.##.39.249':445
'67.##.149.15':139
'67.##.149.15':445
'67.#3.71.8':139
'67.##.171.42':445
'67.##.171.46':445
'67.#3.50.82':445
'67.##.41.129':445
'67.##.134.183':445
'67.##.133.62':445
'67.##.215.116':445
'67.##.97.151':445
'67.##.22.201':445
'67.#3.51.26':445
'67.##.203.192':445
'67.#3.4.92':445
'67.##.146.43':445
'67.#3.92.48':445
'67.##.159.248':139
'67.##.253.98':139
'67.##.238.251':139
'67.#3.46.71':139
'67.#3.133.4':139
'67.##.139.253':139
'67.##.141.228':139
'67.##.175.168':139
'67.#3.35.51':139
'67.##.228.139':139
'67.##.18.223':139
'67.##.61.234':139
'67.##.239.236':139
'67.##.130.183':139
'67.#3.89.11':139
'67.##.183.164':139
'67.##.71.239':139
'67.##.60.191':139
'67.##.127.60':139
'67.##.64.189':139
'67.##.166.87':139
'67.#3.70.66':139
'67.##.187.81':9988
'67.#3.51.23':9988
'67.##.174.147':445
'67.##.201.158':445
'67.##.229.196':445
'67.#3.31.76':9988
'67.##.126.59':9988
'67.#3.99.42':9988
'67.##.42.170':9988
'67.##.175.253':9988
'67.##.157.18':9988
'67.#3.89.37':445
'67.##.40.146':445
'67.##.200.147':445
'67.##.214.229':445
'67.##.172.197':445
'67.##.137.80':445
'67.##.171.220':445
'67.##.126.170':445
'67.##.165.156':445
'67.##.111.97':445
'67.##.156.23':445
'67.##.22.201':139
'67.##.146.43':139
'67.##.134.183':139
'67.##.133.62':139
'67.##.41.129':139
'67.#3.92.48':139
'67.##.39.204':139
'67.##.39.249':139
'67.##.203.192':139
'67.#3.4.92':139
'67.#3.51.26':139
'67.##.197.181':9988
'67.##.163.75':9988
'67.##.187.96':9988
'67.##.47.131':9988
'67.##.42.137':9988
'67.##.41.238':9988
'67.##.215.116':139
'67.##.97.151':139
'67.##.30.150':9988
'67.##.207.42':9988
'67.#3.48.47':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней