Trojan.Starman.6355

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'69.##6.210.199':445
'69.##6.220.89':445
'69.##6.229.64':445
'69.#56.1.8':445
'69.##6.173.197':445
'69.##6.184.173':445
'69.##6.19.70':445
'69.##6.164.32':445
'69.##6.91.115':139
'69.##6.165.90':139
'69.##6.142.73':445
'69.##6.66.164':445
'69.##6.81.111':445
'69.##6.94.71':445
'69.##6.229.64':139
'69.##6.19.70':139
'69.##6.142.73':139
'69.##6.184.173':139
'69.##6.210.199':139
'69.##6.220.89':139
'69.##6.66.164':139
'69.##6.115.168':445
'69.##6.83.63':445
'69.##6.132.192':445
'69.##6.81.111':139
'69.##6.164.32':139
'69.##6.121.43':445
'69.##6.97.43':139
'69.##6.63.67':139
'69.##6.125.22':139
'69.##6.69.204':139
'69.##6.238.69':139
'69.##6.153.182':139
'69.##6.16.79':139
'69.##6.44.238':139
'69.##6.73.172':139
'69.##6.100.30':139
'69.##6.149.137':139
'69.##6.96.28':139
'69.#56.4.62':139
'69.#56.3.51':139
'69.##6.146.78':139
'69.##6.166.152':139
'69.##6.217.166':139
'69.##6.23.98':139
'69.##6.55.131':139
'69.##6.62.196':139
'69.##6.12.16':139
'69.##6.43.86':139
'69.##6.109.62':139
'69.##6.65.214':139
'69.##6.67.56':139
'69.##6.61.99':139
'69.##6.100.80':139
'69.##6.39.119':445
'69.##6.204.83':445
'69.##6.99.107':445
'69.##6.83.208':445
'69.#56.5.84':445
'69.##6.227.82':445
'69.##6.102.51':445
'69.##6.27.148':445
'69.##6.71.154':445
'69.##6.216.35':445
'69.##6.209.188':445
'69.##6.215.124':445
'69.##6.32.70':445
'69.##6.65.202':445
'69.##6.245.32':139
'69.##6.86.98':139
'69.##6.150.121':139
'69.##6.11.22':139
'69.##6.116.158':139
'69.##6.59.126':139
'69.##6.131.47':139
'69.##6.77.86':139
'69.##6.119.248':139
'69.##6.207.218':445
'69.##6.73.136':139
'69.##6.1.229':139
'69.##6.163.29':139
'69.##6.163.29':445
'69.##6.77.86':445
'69.##6.119.248':445
'69.##6.131.47':445
'69.##6.73.136':445
'69.##6.1.229':445
'69.##6.121.43':139
'69.##6.94.71':139
'69.#56.1.8':139
'69.##6.173.197':139
'69.##6.115.168':139
'69.##6.83.63':139
'69.##6.132.192':139
'69.##6.150.121':445
'69.##6.154.187':445
'69.##6.108.154':445
'69.#56.2.47':445
'69.##6.54.155':445
'69.##6.248.128':445
'69.##6.187.123':445
'69.##6.140.233':445
'69.##6.59.126':445
'69.##6.245.32':445
'69.##6.86.98':445
'69.##6.246.140':445
'69.##6.11.22':445
'69.##6.116.158':445
'69.##6.83.211':445
'69.##6.15.46':445
'69.##6.63.58':139
'69.##6.135.191':445
'69.##6.148.34':445
'69.##6.47.90':445
'69.##6.101.176':139
'69.##6.43.103':139
'69.##6.191.253':139
'69.##6.239.113':139
'69.#56.0.79':139
'69.##6.34.109':139
'69.##6.26.72':139
'69.##6.113.87':445
'69.##6.118.157':445
'69.##6.129.42':445
'69.##6.226.107':445
'69.##6.47.90':139
'69.##6.83.211':139
'69.##6.15.46':139
'69.##6.66.252':445
'69.##6.123.128':445
'69.##6.120.123':445
'69.##6.100.2':445
'69.##6.26.181':445
'69.##6.29.177':445
'69.##6.112.25':445
'69.##6.1.141':139
'69.##6.95.148':139
'69.##6.101.249':139
'69.##6.120.83':139
'69.##6.49.73':139
'69.##6.51.45':139
'69.##6.203.101':139
'69.##6.55.72':139
'69.##6.81.90':139
'69.##6.153.188':139
'69.##6.67.167':139
'69.##6.85.26':139
'69.##6.56.36':139
'69.##6.132.70':139
'69.##6.191.7':139
'69.##6.68.191':139
'69.##6.190.68':139
'69.##6.147.238':139
'69.##6.74.147':139
'69.##6.114.141':139
'69.##6.65.128':139
'69.##6.4.227':139
'69.##6.136.131':139
'69.##6.226.246':139
'69.##6.212.2':139
'69.##6.195.211':139
'69.##6.248.9':139
'69.##6.100.80':445
'69.##6.43.86':445
'69.##6.109.62':445
'69.##6.12.16':445
'69.##6.67.56':445
'69.##6.61.99':445
'69.##6.65.214':445
'69.##6.153.182':445
'69.##6.97.43':445
'69.##6.63.67':445
'69.#56.3.51':445
'69.##6.69.204':445
'69.##6.238.69':445
'69.##6.217.166':445
'69.##6.168.158':139
'69.##6.104.123':139
'69.##6.16.22':139
'69.##6.241.60':139
'69.##6.198.192':139
'69.##6.159.20':139
'69.##6.91.115':445
'69.##6.62.196':445
'69.##6.146.78':445
'69.##6.166.152':445
'69.##6.165.90':445
'69.##6.23.98':445
'69.##6.55.131':445
'69.##6.66.252':139
'69.##6.26.181':139
'69.##6.29.177':139
'69.##6.118.157':139
'69.##6.129.42':139
'69.##6.226.107':139
'69.##6.112.25':139
'69.##6.113.87':139
'69.##6.135.191':139
'69.##6.148.34':139
'69.##6.123.128':139
'69.##6.120.123':139
'69.##6.100.2':139
'69.##6.16.22':445
'69.##6.96.28':445
'69.#56.4.62':445
'69.##6.44.238':445
'69.##6.125.22':445
'69.##6.16.79':445
'69.##6.149.137':445
'69.##6.73.172':445
'69.##6.159.20':445
'69.##6.168.158':445
'69.##6.104.123':445
'69.##6.100.30':445
'69.##6.241.60':445
'69.##6.198.192':445
'69.##6.246.140':139
'69.##6.129.189':445
'69.##6.19.12':445
'69.##6.31.237':445
'69.##6.185.67':445
'69.##6.149.219':445
'69.##6.32.224':445
'69.##6.110.45':445
'69.##6.108.102':445
'69.##6.123.108':445
'69.##6.21.36':445
'69.##6.149.11':445
'69.##6.97.235':445
'69.##6.113.63':445
'69.##6.165.147':445
'69.##6.232.107':445
'69.##6.65.17':445
'69.##6.107.197':445
'69.##6.177.223':445
'69.##6.203.193':445
'69.##6.93.115':445
'69.##6.104.134':445
'69.##6.133.161':445
'69.##6.243.134':445
'69.##6.16.254':445
'69.##6.101.104':445
'69.##6.44.40':445
'69.##6.81.141':445
'69.##6.154.68':445
'69.##6.52.247':445
'69.##6.90.46':445
'69.##6.164.167':445
'69.##6.34.103':445
'69.##6.24.46':445
'69.##6.134.234':445
'69.##6.104.134':9988
'69.##6.81.141':9988
'69.##6.133.161':9988
'69.##6.20.63':9988
'69.##6.203.193':9988
'69.##6.232.107':9988
'69.##6.51.110':445
'69.##6.10.11':445
'69.##6.49.109':445
'69.##6.116.128':445
'69.##6.248.47':445
'69.##6.170.247':445
'69.##6.10.76':445
'69.##6.41.149':445
'69.##6.73.21':445
'69.##6.63.97':445
'69.##6.18.69':445
'69.##6.55.73':445
'69.##6.80.247':445
'69.##6.168.80':445
'69.##6.185.67':139
'69.##6.149.219':139
'69.##6.32.224':139
'69.##6.133.161':139
'69.##6.16.254':139
'69.##6.165.147':139
'69.##6.129.189':139
'69.##6.149.11':139
'69.##6.97.235':139
'69.##6.113.63':139
'69.##6.19.12':139
'69.##6.31.237':139
'69.##6.110.45':139
'69.##6.243.134':139
'69.##6.177.223':139
'69.##6.203.193':139
'69.##6.232.107':139
'69.##6.193.124':139
'69.##6.20.63':139
'69.##6.135.194':139
'69.##6.93.115':139
'69.##6.101.104':139
'69.##6.44.40':139
'69.##6.81.141':139
'69.##6.107.197':139
'69.##6.65.17':139
'69.##6.104.134':139
'69.##6.164.167':139
'69.##6.34.103':139
'69.##6.24.46':139
'69.##6.63.97':139
'69.##6.18.69':139
'69.##6.51.110':139
'69.##6.154.68':139
'69.##6.20.63':445
'69.##6.193.124':445
'69.##6.135.194':445
'69.##6.52.247':139
'69.##6.90.46':139
'69.##6.134.234':139
'69.##6.73.21':139
'69.##6.248.47':139
'69.##6.170.247':139
'69.##6.10.76':139
'69.##6.108.102':139
'69.##6.123.108':139
'69.##6.21.36':139
'69.##6.10.11':139
'69.##6.55.73':139
'69.##6.80.247':139
'69.##6.168.80':139
'69.##6.49.109':139
'69.##6.116.128':139
'69.##6.41.149':139
'69.##6.99.154':445
'69.##6.115.128':445
'69.##6.218.123':445
'69.##6.119.0':139
'69.##6.5.116':139
'69.#56.4.19':445
'69.##6.70.218':445
'69.##6.81.245':445
'69.##6.253.33':445
'69.##6.127.211':445
'69.##6.82.126':445
'69.##6.171.50':445
'69.##6.104.43':445
'69.##6.164.98':139
'69.##6.218.123':139
'69.##6.70.218':139
'69.##6.82.126':139
'69.#56.4.19':139
'69.##6.99.154':139
'69.##6.115.128':139
'69.##6.171.50':139
'69.##6.127.211':139
'69.##6.118.88':139
'69.##6.251.96':139
'69.##6.104.43':139
'69.##6.81.245':139
'69.##6.253.33':139
'69.##6.27.148':139
'69.##6.71.154':139
'69.##6.216.35':139
'69.##6.209.188':139
'69.##6.215.124':139
'69.##6.32.70':139
'69.##6.54.155':139
'69.##6.108.154':139
'69.#56.2.47':139
'69.##6.140.233':139
'69.##6.248.128':139
'69.##6.187.123':139
'69.##6.154.187':139
'69.##6.102.51':139
'69.##6.119.0':445
'69.##6.5.116':445
'69.##6.207.218':139
'69.##6.118.88':445
'69.##6.251.96':445
'69.##6.164.98':445
'69.##6.65.202':139
'69.##6.39.119':139
'69.##6.204.83':139
'69.##6.99.107':139
'69.##6.83.208':139
'69.#56.5.84':139
'69.##6.227.82':139
'69.##6.244.209':139
'69.##6.164.103':139
'69.##6.59.177':139
'69.##6.109.8':139
'69.##6.208.234':139
'69.##6.30.125':139
'69.##6.111.8':139
'69.##6.129.46':139
'69.##6.85.206':139
'69.##6.32.40':139
'69.##6.144.112':139
'69.##6.40.145':139
'69.##6.171.141':139
'69.##6.186.121':139
'69.##6.113.63':9988
'69.##6.10.76':9988
'69.##6.51.110':9988
'69.##6.16.254':9988
'69.##6.32.224':9988
'69.##6.149.11':9988
'69.##6.90.46':9988
'69.##6.101.184':139
'69.##6.43.106':139
'69.##6.235.243':139
'69.##6.134.234':9988
'69.##6.198.138':139
'69.##6.82.199':139
'69.##6.144.112':445
'69.##6.40.145':445
'69.##6.171.141':445
'69.##6.164.103':445
'69.##6.59.177':445
'69.##6.111.8':445
'69.##6.129.46':445
'69.##6.171.35':445
'69.##6.134.180':445
'69.##6.97.82':445
'69.##6.85.206':445
'69.##6.32.40':445
'69.##6.49.32':445
'69.##6.244.209':445
'69.##6.97.82':139
'69.##6.198.138':445
'69.##6.82.199':445
'69.##6.49.32':139
'69.##6.171.35':139
'69.##6.134.180':139
'69.##6.101.184':445
'69.##6.109.8':445
'69.##6.208.234':445
'69.##6.30.125':445
'69.##6.43.106':445
'69.##6.235.243':445
'69.##6.186.121':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней