Trojan.Starman.6121

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'72.##.228.80':139
'72.##.38.208':139
'72.#4.57.31':139
'72.##.152.18':139
'72.##.255.191':139
'72.##.167.155':139
'72.##.162.30':139
'72.##.182.161':139
'72.##.63.182':139
'72.##.174.57':139
'72.##.25.174':139
'72.##.248.213':139
'72.##.234.136':445
'72.#4.70.52':139
'72.#4.60.6':139
'72.#4.28.21':445
'72.##.180.207':445
'72.##.157.252':445
'72.#4.112.7':139
'72.##.226.111':139
'72.##.155.226':139
'72.##.111.81':139
'72.##.47.248':139
'72.#4.8.48':139
'72.#4.5.131':139
'72.##.232.238':139
'72.##.66.233':139
'72.##.233.202':139
'72.##.91.248':139
'72.##.223.91':139
'72.##.231.245':139
'72.##.33.215':139
'72.##.90.234':139
'72.#4.5.156':139
'72.##.250.148':139
'72.##.240.249':139
'72.##.92.108':139
'72.##.188.58':139
'72.#4.10.43':139
'72.##.228.245':139
'72.##.62.189':139
'72.#4.85.97':139
'72.##.182.230':139
'72.##.101.232':139
'72.##.61.249':139
'72.##.118.32':139
'72.##.170.130':139
'72.##.238.170':139
'72.#4.12.61':139
'72.##.103.45':445
'72.##.131.54':445
'72.##.156.117':445
'72.##.105.195':445
'72.##.249.240':445
'72.##.26.126':445
'72.##.124.200':445
'72.#4.5.226':445
'72.##.21.198':445
'72.##.180.13':445
'72.##.131.95':445
'72.##.77.145':445
'72.##.109.204':445
'72.##.235.178':445
'72.##.50.129':445
'72.##.157.252':139
'72.##.234.136':139
'72.##.139.16':445
'72.##.114.133':445
'72.##.95.103':445
'72.##.238.95':445
'72.##.255.193':445
'72.##.103.29':445
'72.##.148.148':445
'72.##.206.231':445
'72.##.235.245':445
'72.##.242.115':445
'72.##.172.212':445
'72.#4.8.135':445
'72.##.252.16':445
'72.#4.42.67':445
'72.##.18.234':445
'72.##.136.176':445
'72.#4.118.0':445
'72.#4.20.74':445
'72.##.72.100':445
'72.##.233.221':445
'72.#4.51.10':445
'72.##.77.235':445
'72.#4.214.6':445
'72.##.116.186':445
'72.##.150.30':445
'72.##.16.245':445
'72.##.25.200':445
'72.##.62.126':445
'72.##.138.249':445
'72.##.37.164':445
'72.##.41.229':445
'72.##.11.223':445
'72.##.204.73':139
'72.##.27.145':139
'72.##.53.176':139
'72.##.136.235':139
'72.#4.0.169':139
'72.##.100.53':139
'72.#4.11.20':139
'72.#4.6.23':139
'72.#4.30.20':139
'72.##.129.32':139
'72.##.180.178':139
'72.##.53.180':139
'72.##.175.57':445
'72.##.34.103':445
'72.##.236.56':445
'72.##.90.234':445
'72.#4.5.156':445
'72.#4.58.10':445
'72.##.189.102':139
'72.##.177.169':139
'72.##.253.204':139
'72.##.225.13':445
'72.#4.1.87':445
'72.#4.36.1':139
'72.#4.57.44':139
'72.##.150.240':139
'72.##.18.103':139
'72.##.13.150':139
'72.##.216.15':139
'72.##.141.37':139
'72.##.241.125':139
'72.##.113.254':139
'72.##.239.178':139
'72.##.139.198':139
'72.#4.6.138':139
'72.##.223.44':139
'72.##.117.31':139
'72.##.185.193':139
'72.##.44.186':139
'72.##.147.26':139
'72.#4.0.53':139
'72.##.96.118':139
'72.##.203.238':139
'72.##.128.56':139
'72.##.138.202':139
'72.##.188.144':139
'72.##.27.171':139
'72.##.156.41':139
'72.#4.15.62':139
'72.##.255.191':445
'72.##.167.155':445
'72.##.228.80':445
'72.##.226.111':445
'72.##.155.226':445
'72.##.152.18':445
'72.##.25.174':445
'72.##.248.213':445
'72.##.162.30':445
'72.##.38.208':445
'72.#4.57.31':445
'72.##.174.57':445
'72.##.236.56':139
'72.##.225.13':139
'72.#4.1.87':139
'72.#4.58.10':139
'72.##.175.57':139
'72.##.34.103':139
'72.##.47.248':445
'72.#4.8.48':445
'72.#4.112.7':445
'72.#4.70.52':445
'72.#4.60.6':445
'72.##.111.81':445
'72.##.182.161':445
'72.##.223.91':445
'72.##.231.245':445
'72.##.232.238':445
'72.##.61.249':445
'72.##.118.32':445
'72.##.91.248':445
'72.##.240.249':445
'72.##.92.108':445
'72.##.33.215':445
'72.##.66.233':445
'72.##.233.202':445
'72.##.250.148':445
'72.#4.85.97':445
'72.##.182.230':445
'72.##.188.58':445
'72.##.63.182':445
'72.#4.5.131':445
'72.##.62.189':445
'72.##.238.170':445
'72.#4.12.61':445
'72.##.101.232':445
'72.#4.10.43':445
'72.##.228.245':445
'72.##.170.130':445
'72.##.93.118':445
'72.#4.171.2':445
'72.##.203.252':445
'72.##.22.141':445
'72.#4.17.23':445
'72.##.28.203':445
'72.##.33.176':445
'72.##.123.39':445
'72.#4.65.25':445
'72.#4.61.4':445
'72.#4.46.47':445
'72.##.17.149':445
'72.##.187.95':445
'72.##.146.200':445
'72.##.146.250':445
'72.##.148.77':139
'72.##.130.76':139
'72.#4.136.1':445
'72.##.56.209':445
'72.##.159.202':445
'72.##.208.157':445
'72.##.159.109':445
'72.##.202.146':445
'72.#4.96.10':445
'72.#4.56.65':445
'72.##.194.35':445
'72.##.134.241':445
'72.##.15.135':445
'72.#4.12.17':445
'72.##.126.11':445
'72.##.35.156':445
'72.##.11.113':445
'72.##.234.76':445
'72.#4.5.22':445
'72.##.134.154':445
'72.#4.43.61':445
'72.#4.19.75':445
'72.##.200.45':445
'72.#4.50.65':445
'72.#4.98.76':445
'72.##.164.71':445
'72.##.66.218':445
'72.##.45.180':445
'72.##.135.235':445
'72.##.216.75':445
'72.#4.39.98':445
'72.##.106.189':445
'72.#4.0.11':445
'72.##.132.16':445
'72.##.203.252':139
'72.#4.61.4':139
'72.#4.46.47':139
'72.##.28.203':139
'72.##.93.118':139
'72.#4.171.2':139
'72.#4.65.25':139
'72.#4.56.65':139
'72.##.164.71':139
'72.##.17.149':139
'72.##.33.176':139
'72.##.123.39':139
'72.##.187.95':139
'72.##.159.109':139
'72.##.146.200':139
'72.##.56.209':139
'72.#4.136.1':139
'72.#4.96.10':139
'72.##.208.157':139
'72.##.22.141':139
'72.#4.17.23':139
'72.##.146.250':139
'72.##.202.146':139
'72.##.159.202':139
'72.##.66.218':139
'72.##.15.135':139
'72.##.134.154':139
'72.#4.43.61':139
'72.##.35.156':139
'72.##.194.35':139
'72.##.134.241':139
'72.#4.5.22':139
'72.#4.21.46':139
'72.##.247.70':139
'72.#4.19.75':139
'72.##.11.113':139
'72.##.234.76':139
'72.#4.98.76':139
'72.##.106.189':139
'72.#4.0.11':139
'72.##.45.180':139
'72.##.200.45':139
'72.#4.50.65':139
'72.#4.39.98':139
'72.#4.12.17':139
'72.##.126.11':139
'72.##.132.16':139
'72.##.135.235':139
'72.##.216.75':139
'72.##.156.117':139
'72.##.180.13':139
'72.##.131.95':139
'72.##.26.126':139
'72.##.103.45':139
'72.##.131.54':139
'72.##.21.198':139
'72.##.206.231':139
'72.##.116.186':139
'72.##.77.145':139
'72.##.124.200':139
'72.#4.5.226':139
'72.##.50.129':139
'72.##.255.193':139
'72.##.103.29':139
'72.##.139.16':139
'72.##.109.204':139
'72.##.235.178':139
'72.##.238.95':139
'72.##.105.195':139
'72.##.249.240':139
'72.##.148.148':139
'72.##.114.133':139
'72.##.95.103':139
'72.##.150.30':139
'72.##.172.212':139
'72.#4.20.74':139
'72.##.72.100':139
'72.#4.42.67':139
'72.##.235.245':139
'72.##.242.115':139
'72.#4.118.0':139
'72.#4.28.21':139
'72.##.180.207':139
'72.##.233.221':139
'72.##.18.234':139
'72.##.136.176':139
'72.#4.214.6':139
'72.##.37.164':139
'72.##.41.229':139
'72.##.16.245':139
'72.#4.51.10':139
'72.##.77.235':139
'72.##.138.249':139
'72.#4.8.135':139
'72.##.252.16':139
'72.##.11.223':139
'72.##.25.200':139
'72.##.62.126':139
'72.##.200.45':9988
'72.#4.50.65':9988
'72.##.135.235':9988
'72.##.164.71':9988
'72.##.66.218':9988
'72.##.45.180':9988
'72.##.148.77':9988
'72.##.130.76':9988
'72.##.65.225':139
'72.##.216.75':9988
'72.#4.12.17':9988
'72.##.134.241':9988
'72.##.130.76':445
'72.##.159.109':9988
'72.##.202.146':9988
'72.#4.21.46':445
'72.##.247.70':445
'72.##.148.77':445
'72.#4.61.4':9988
'72.#4.46.47':9988
'72.##.123.39':9988
'72.##.93.118':9988
'72.#4.171.2':9988
'72.##.203.252':9988
'72.##.170.160':139
'72.##.38.173':445
'72.##.38.213':445
'72.##.83.207':445
'72.##.170.160':445
'72.##.118.170':445
'72.##.237.99':445
'72.#4.27.2':445
'72.##.129.225':445
'72.#4.99.61':445
'72.#4.47.84':445
'72.##.186.46':445
'72.##.150.186':445
'72.##.38.213':139
'72.##.83.207':139
'72.#4.47.84':139
'72.##.118.170':139
'72.##.237.99':139
'72.##.38.173':139
'72.##.129.225':139
'72.#4.99.61':139
'72.##.65.225':445
'72.##.186.46':139
'72.##.150.186':139
'72.#4.27.2':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней