Trojan.Starman.6094

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#3.50.62':139
'21#.#3.31.114':139
'21#.#3.138.164':139
'21#.#3.23.44':139
'21#.#3.106.170':139
'21#.#3.109.65':139
'21#.#3.70.121':139
'21#.#3.55.70':139
'21#.#3.75.55':139
'21#.#3.235.254':139
'21#.#3.241.235':139
'21#.#3.102.172':139
'21#.#3.209.190':139
'21#.#3.187.42':139
'21#.#3.20.225':139
'21#.#3.191.181':139
'21#.#3.209.66':139
'21#.#3.74.19':139
'21#.#3.167.2':139
'21#.#3.248.210':139
'21#.#3.26.47':139
'21#.#3.219.144':139
'21#.#3.103.221':139
'21#.#3.107.123':139
'21#.#3.141.59':139
'21#.#3.31.29':139
'21#.#3.111.64':139
'21#.#3.212.229':139
'21#.#3.33.221':139
'21#.#3.243.112':139
'21#.#3.114.243':139
'21#.#3.140.10':139
'21#.#3.227.5':139
'21#.#3.48.19':445
'21#.#3.232.235':139
'21#.#3.78.75':139
'21#.#3.104.232':139
'21#.#3.81.247':139
'21#.#3.110.217':139
'21#.#3.51.52':139
'21#.#3.175.50':139
'21#.#3.244.74':139
'21#.#3.8.144':139
'21#.#3.108.28':139
'21#.#3.78.164':139
'21#.#3.12.88':139
'21#.#3.194.86':139
'21#.#3.55.109':139
'21#.#3.150.22':139
'21#.#3.195.67':139
'21#.#3.59.22':445
'21#.#3.24.149':445
'21#.#3.16.241':445
'21#.#3.221.45':445
'21#.#3.120.137':445
'21#.#3.26.226':445
'21#.#3.143.177':445
'21#.#3.242.190':445
'21#.#3.187.189':445
'21#.#3.245.22':445
'21#.#3.20.211':445
'21#.#3.129.78':445
'21#.#3.213.99':445
'21#.#3.109.231':445
'21#.#3.144.141':445
'21#.#3.89.183':445
'21#.#3.86.41':445
'21#.#3.174.54':445
'21#.#3.54.155':445
'21#.#3.65.82':445
'21#.#3.184.252':445
'21#.#3.46.80':445
'21#.#3.80.160':445
'21#.#3.192.32':445
'21#.#3.160.191':445
'21#.#3.247.211':445
'21#.#3.29.242':445
'21#.#3.149.48':445
'21#.63.16.7':445
'21#.#3.211.63':445
'21#.#3.215.245':445
'21#.#3.242.226':445
'21#.#3.48.19':139
'21#.#3.31.212':139
'21#.#3.28.151':445
'21#.#3.244.9':445
'21#.#3.119.220':445
'21#.#3.214.140':445
'21#.#3.246.230':445
'21#.#3.132.153':445
'21#.#3.109.222':445
'21#.#3.14.95':445
'21#.#3.15.152':445
'21#.#3.231.14':445
'21#.#3.239.242':445
'21#.#3.146.184':445
'21#.#3.140.138':445
'21#.#3.19.106':445
'21#.#3.17.222':445
'21#.#3.227.149':445
'21#.#3.31.212':445
'21#.#3.63.97':139
'21#.#3.144.180':139
'21#.#3.115.114':139
'21#.63.0.12':139
'21#.#3.42.110':139
'21#.#3.97.22':139
'21#.#3.149.105':139
'21#.#3.71.167':139
'21#.#3.136.212':139
'21#.#3.78.46':139
'21#.#3.180.49':139
'21#.#3.190.144':139
'21#.#3.164.131':139
'21#.#3.199.175':139
'21#.#3.247.149':139
'21#.#3.235.112':139
'21#.#3.141.197':139
'21#.#3.108.65':139
'21#.#3.224.64':139
'21#.#3.111.142':139
'21#.#3.128.140':139
'21#.#3.232.128':139
'21#.#3.9.146':139
'21#.#3.151.166':139
'21#.#3.177.44':139
'21#.#3.89.201':139
'21#.63.6.86':139
'21#.#3.49.242':139
'21#.#3.24.208':139
'21#.#3.148.24':139
'21#.#3.233.210':139
'21#.#3.85.90':139
'21#.#3.152.22':139
'21#.#3.227.82':139
'21#.63.95.6':139
'21#.#3.150.94':139
'21#.#3.38.188':139
'21#.#3.39.244':139
'21#.#3.183.140':139
'21#.#3.52.141':139
'21#.#3.103.52':139
'21#.#3.237.144':139
'21#.#3.17.182':139
'21#.#3.86.17':139
'21#.#3.71.94':139
'21#.#3.87.72':139
'21#.#3.80.15':139
'21#.#3.200.102':139
'21#.#3.11.201':139
'21#.#3.160.119':139
'21#.#3.50.62':445
'21#.#3.31.114':445
'21#.#3.138.164':445
'21#.#3.23.44':445
'21#.#3.106.170':445
'21#.#3.109.65':445
'21#.#3.70.121':445
'21#.#3.55.70':445
'21#.#3.75.55':445
'21#.#3.235.254':445
'21#.#3.241.235':445
'21#.#3.102.172':445
'21#.#3.209.190':445
'21#.#3.187.42':445
'21#.#3.20.225':445
'21#.#3.191.181':445
'21#.#3.209.66':445
'21#.#3.74.19':445
'21#.#3.167.2':445
'21#.#3.248.210':445
'21#.#3.26.47':445
'21#.#3.219.144':445
'21#.#3.103.221':445
'21#.#3.107.123':445
'21#.#3.141.59':445
'21#.#3.31.29':445
'21#.#3.111.64':445
'21#.#3.212.229':445
'21#.#3.33.221':445
'21#.#3.243.112':445
'21#.#3.114.243':445
'21#.#3.140.10':445
'21#.#3.227.5':445
'21#.#3.197.227':139
'21#.#3.232.235':445
'21#.#3.78.75':445
'21#.#3.104.232':445
'21#.#3.81.247':445
'21#.#3.110.217':445
'21#.#3.51.52':445
'21#.#3.175.50':445
'21#.#3.244.74':445
'21#.#3.8.144':445
'21#.#3.108.28':445
'21#.#3.78.164':445
'21#.#3.12.88':445
'21#.#3.194.86':445
'21#.#3.55.109':445
'21#.#3.150.22':445
'21#.#3.195.67':445
'21#.#3.110.122':445
'21#.#3.195.23':445
'21#.#3.122.42':445
'21#.#3.89.43':445
'21#.#3.204.142':445
'21#.#3.224.249':445
'21#.#3.114.77':445
'21#.#3.76.114':445
'21#.#3.250.75':445
'21#.#3.72.36':445
'21#.#3.165.72':445
'21#.#3.70.133':445
'21#.#3.80.172':445
'21#.#3.192.231':445
'21#.#3.189.103':445
'21#.#3.12.16':445
'21#.#3.35.106':139
'21#.#3.82.64':445
'21#.#3.223.70':445
'21#.#3.227.178':445
'21#.#3.93.50':445
'21#.#3.50.93':445
'21#.#3.1.232':445
'21#.#3.128.64':445
'21#.#3.190.251':445
'21#.#3.61.136':445
'21#.#3.54.119':445
'21#.#3.199.53':445
'21#.#3.40.241':445
'21#.#3.250.130':445
'21#.#3.35.75':445
'21#.#3.55.62':445
'21#.#3.152.209':445
'21#.#3.205.137':445
'21#.#3.21.51':445
'21#.#3.5.161':445
'21#.#3.45.69':445
'21#.#3.54.186':445
'21#.#3.70.175':445
'21#.#3.194.14':445
'21#.#3.240.193':445
'21#.#3.97.206':445
'21#.#3.80.198':445
'21#.63.99.5':445
'21#.#3.253.37':445
'21#.#3.224.137':445
'21#.#3.135.101':445
'21#.#3.140.162':445
'21#.#3.159.41':445
'21#.#3.180.225':445
'21#.#3.195.23':139
'21#.#3.122.42':139
'21#.#3.72.36':139
'21#.#3.204.142':139
'21#.#3.224.249':139
'21#.#3.110.122':139
'21#.#3.76.114':139
'21#.#3.250.75':139
'21#.#3.97.206':139
'21#.#3.165.72':139
'21#.#3.70.133':139
'21#.#3.114.77':139
'21#.#3.89.43':139
'21#.#3.189.103':139
'21#.#3.12.16':139
'21#.#3.1.232':139
'21#.#3.223.70':139
'21#.#3.82.64':139
'21#.#3.192.231':139
'21#.#3.93.50':139
'21#.#3.50.93':139
'21#.#3.80.172':139
'21#.#3.128.64':139
'21#.#3.190.251':139
'21#.#3.227.178':139
'21#.#3.54.119':139
'21#.#3.199.53':139
'21#.#3.21.51':139
'21#.#3.250.130':139
'21#.#3.35.75':139
'21#.#3.61.136':139
'21#.#3.152.209':139
'21#.#3.205.137':139
'21#.#3.68.246':139
'21#.#3.5.161':139
'21#.#3.45.69':139
'21#.#3.55.62':139
'21#.#3.40.241':139
'21#.#3.194.14':139
'21#.#3.240.193':139
'21#.#3.140.162':139
'21#.#3.80.198':139
'21#.63.99.5':139
'21#.#3.70.175':139
'21#.#3.224.137':139
'21#.#3.135.101':139
'21#.#3.54.186':139
'21#.#3.159.41':139
'21#.#3.180.225':139
'21#.#3.253.37':139
'21#.#3.68.246':445
'21#.#3.59.22':139
'21#.#3.24.149':139
'21#.#3.245.22':139
'21#.#3.120.137':139
'21#.#3.213.99':139
'21#.#3.16.241':139
'21#.#3.242.190':139
'21#.#3.143.177':139
'21#.#3.14.95':139
'21#.#3.20.211':139
'21#.#3.129.78':139
'21#.#3.187.189':139
'21#.#3.26.226':139
'21#.#3.144.141':139
'21#.#3.89.183':139
'21#.#3.184.252':139
'21#.#3.54.155':139
'21#.#3.174.54':139
'21#.#3.109.231':139
'21#.#3.80.160':139
'21#.#3.46.80':139
'21#.#3.221.45':139
'21#.#3.65.82':139
'21#.#3.192.32':139
'21#.#3.160.191':139
'21#.#3.29.242':139
'21#.#3.149.48':139
'21#.#3.28.151':139
'21#.#3.211.63':139
'21#.#3.247.211':139
'21#.#3.215.245':139
'21#.#3.197.237':445
'21#.#3.123.20':445
'21#.#3.147.125':445
'21#.#3.244.9':139
'21#.#3.119.220':139
'21#.#3.242.226':139
'21#.63.16.7':139
'21#.#3.132.153':139
'21#.#3.109.222':139
'21#.#3.19.106':139
'21#.#3.15.152':139
'21#.#3.231.14':139
'21#.#3.246.230':139
'21#.#3.146.184':139
'21#.#3.140.138':139
'21#.#3.214.140':139
'21#.#3.17.222':139
'21#.#3.227.149':139
'21#.#3.239.242':139
'21#.#3.152.209':9988
'21#.#3.205.137':9988
'21#.#3.68.246':9988
'21#.#3.224.137':9988
'21#.#3.199.53':9988
'21#.#3.21.51':9988
'21#.#3.139.213':139
'21#.#3.11.91':139
'21#.#3.186.188':139
'21#.#3.35.106':9988
'21#.#3.32.56':139
'21#.#3.106.132':139
'21#.#3.180.225':9988
'21#.#3.82.64':9988
'21#.#3.128.64':9988
'21#.#3.190.251':9988
'21#.#3.35.106':445
'21#.#3.12.16':9988
'21#.#3.192.231':9988
'21#.#3.80.172':9988
'21#.#3.89.43':9988
'21#.#3.72.36':9988
'21#.#3.227.178':9988
'21#.#3.93.50':9988
'21#.#3.50.93':9988
'21#.#3.73.28':445
'21#.#3.229.175':445
'21#.#3.66.103':445
'21#.#3.180.186':445
'21#.#3.9.180':445
'21#.#3.0.127':445
'21#.#3.123.20':139
'21#.#3.147.125':139
'21#.#3.86.41':139
'21#.#3.13.223':445
'21#.#3.249.104':445
'21#.#3.197.237':139
'21#.#3.186.188':445
'21#.#3.73.28':139
'21#.#3.229.175':139
'21#.#3.66.103':139
'21#.#3.180.186':139
'21#.#3.9.180':139
'21#.#3.0.127':139
'21#.#3.106.132':445
'21#.#3.139.213':445
'21#.#3.11.91':445
'21#.#3.13.223':139
'21#.#3.249.104':139
'21#.#3.32.56':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней