Trojan.Starman.6142

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'83.##1.149.64':445
'83.##1.24.167':445
'83.##1.115.116':445
'83.##1.70.184':445
'83.##1.166.220':445
'83.##1.86.73':445
'83.##1.198.33':445
'83.##1.125.9':445
'83.##1.230.85':445
'83.##1.181.240':445
'83.##1.95.152':445
'83.##1.195.11':445
'83.##1.58.22':445
'83.##1.161.37':445
'83.##1.228.71':445
'83.##1.73.75':445
'83.##1.246.20':445
'83.##1.16.118':445
'83.##1.110.16':445
'83.##1.149.211':445
'83.##1.4.174':445
'83.##1.97.13':445
'83.##1.230.205':139
'83.##1.92.108':139
'83.##1.229.125':139
'83.##1.213.83':139
'83.##1.126.37':139
'83.##1.0.173':139
'83.##1.131.136':139
'83.##1.20.135':139
'83.##1.102.72':139
'83.#41.26.8':139
'83.##1.119.129':139
'83.##1.118.117':445
'83.##1.37.67':445
'83.##1.11.192':445
'83.##1.213.156':445
'83.##1.192.213':445
'83.#41.77.9':445
'83.##1.139.112':445
'83.##1.252.226':445
'83.##1.252.226':139
'83.##1.223.230':445
'83.##1.139.112':139
'83.##1.230.85':139
'83.##1.198.33':139
'83.##1.95.152':139
'83.##1.86.73':139
'83.##1.181.240':139
'83.##1.125.9':139
'83.##1.118.117':139
'83.##1.37.67':139
'83.##1.11.192':139
'83.##1.213.156':139
'83.##1.192.213':139
'83.##1.149.211':139
'83.##1.16.118':139
'83.##1.97.13':139
'83.##1.246.20':139
'83.##1.4.174':139
'83.##1.110.16':139
'83.##1.149.64':139
'83.##1.24.167':139
'83.##1.115.116':139
'83.##1.70.184':139
'83.##1.166.220':139
'83.##1.173.138':445
'83.##1.195.44':445
'83.##1.58.209':445
'83.##1.13.240':445
'83.##1.64.39':445
'83.##1.21.134':445
'83.##1.153.247':445
'83.##1.71.154':445
'83.##1.247.75':445
'83.##1.30.21':445
'83.##1.76.38':445
'83.##1.171.137':445
'83.##1.37.31':445
'83.##1.187.84':445
'83.#41.77.9':139
'83.##1.223.230':139
'83.##1.205.229':445
'83.##1.255.15':445
'83.##1.201.60':445
'83.##1.225.224':445
'83.##1.14.212':445
'83.##1.93.160':445
'83.##1.222.20':139
'83.##1.192.44':445
'83.##1.110.96':445
'83.##1.41.137':445
'83.##1.20.249':445
'83.##1.19.158':445
'83.##1.86.198':445
'83.##1.74.156':445
'83.##1.67.104':445
'83.##1.156.23':445
'83.##1.38.87':445
'83.##1.116.61':445
'83.##1.20.135':445
'83.##1.222.20':445
'83.##1.131.136':445
'83.##1.119.129':445
'83.##1.102.72':445
'83.##1.26.191':445
'83.##1.20.109':445
'83.##1.135.32':445
'83.##1.208.146':445
'83.##1.240.26':445
'83.##1.28.248':445
'83.##1.114.163':445
'83.#41.1.33':445
'83.##1.221.158':445
'83.##1.99.130':445
'83.##1.251.20':445
'83.##1.203.214':445
'83.##1.171.129':139
'83.##1.134.207':139
'83.##1.75.44':445
'83.##1.94.134':445
'83.##1.44.85':445
'83.##1.139.33':445
'83.##1.177.91':445
'83.##1.26.146':445
'83.##1.119.103':445
'83.##1.146.119':445
'83.##1.44.28':445
'83.##1.43.27':445
'83.##1.147.25':445
'83.##1.40.200':445
'83.##1.41.68':445
'83.##1.255.131':445
'83.##1.156.23':139
'83.##1.74.156':139
'83.##1.116.61':139
'83.##1.86.198':139
'83.##1.38.87':139
'83.##1.67.104':139
'83.##1.139.33':139
'83.##1.177.91':139
'83.##1.26.146':139
'83.##1.119.103':139
'83.##1.146.119':139
'83.##1.208.146':139
'83.##1.20.109':139
'83.##1.28.248':139
'83.##1.26.191':139
'83.##1.240.26':139
'83.##1.135.32':139
'83.##1.192.44':139
'83.##1.110.96':139
'83.##1.41.137':139
'83.##1.20.249':139
'83.##1.19.158':139
'83.##1.75.44':139
'83.##1.213.83':445
'83.##1.44.85':139
'83.##1.203.214':139
'83.##1.94.134':139
'83.##1.126.37':445
'83.##1.0.173':445
'83.#41.26.8':445
'83.##1.92.108':445
'83.##1.229.125':445
'83.##1.230.205':445
'83.##1.40.200':139
'83.##1.43.27':139
'83.##1.255.131':139
'83.##1.44.28':139
'83.##1.41.68':139
'83.##1.147.25':139
'83.##1.114.163':139
'83.#41.1.33':139
'83.##1.221.158':139
'83.##1.99.130':139
'83.##1.251.20':139
'83.##1.58.22':139
'83.##1.139.249':445
'83.##1.105.97':445
'83.##1.250.43':445
'83.##1.251.182':445
'83.##1.102.210':445
'83.##1.190.171':445
'83.##1.207.175':445
'83.##1.135.177':445
'83.##1.30.55':445
'83.##1.195.109':445
'83.##1.184.214':445
'83.##1.126.119':139
'83.##1.2.231':139
'83.##1.64.141':139
'83.##1.124.24':139
'83.##1.107.56':139
'83.##1.109.146':139
'83.#41.72.9':445
'83.##1.121.59':445
'83.##1.138.54':445
'83.##1.14.252':139
'83.#41.36.2':445
'83.##1.17.55':445
'83.##1.194.172':445
'83.##1.237.6':445
'83.##1.136.66':445
'83.##1.207.249':445
'83.##1.15.90':445
'83.##1.143.2':445
'83.##1.103.253':445
'83.##1.240.131':445
'83.##1.86.122':445
'83.##1.21.79':445
'83.##1.110.183':445
'83.##1.34.141':445
'83.##1.236.74':445
'83.#41.6.92':445
'83.##1.28.200':445
'83.##1.10.85':445
'83.##1.166.159':445
'83.##1.70.121':445
'83.##1.159.118':445
'83.##1.233.183':445
'83.##1.118.233':445
'83.##1.135.177':139
'83.#41.6.92':139
'83.##1.207.175':139
'83.##1.184.214':139
'83.##1.30.55':139
'83.##1.28.200':139
'83.##1.10.85':139
'83.##1.233.183':139
'83.##1.34.141':139
'83.##1.236.74':139
'83.##1.110.183':139
'83.##1.121.59':139
'83.##1.251.182':139
'83.#41.72.9':139
'83.##1.138.54':139
'83.#41.36.2':139
'83.##1.102.210':139
'83.##1.190.171':139
'83.##1.195.109':139
'83.##1.105.97':139
'83.##1.250.43':139
'83.##1.139.249':139
'83.##1.103.253':139
'83.##1.58.27':139
'83.##1.143.2':139
'83.##1.21.79':139
'83.##1.240.131':139
'83.##1.184.141':139
'83.##1.57.183':139
'83.##1.204.138':139
'83.##1.13.212':139
'83.##1.12.97':139
'83.##1.108.249':139
'83.##1.70.121':139
'83.##1.136.66':139
'83.##1.166.159':139
'83.##1.118.233':139
'83.##1.159.118':139
'83.##1.207.249':139
'83.##1.15.90':139
'83.##1.86.122':139
'83.##1.194.172':139
'83.##1.237.6':139
'83.##1.17.55':139
'83.##1.58.27':445
'83.##1.145.253':445
'83.##1.53.146':445
'83.##1.253.196':445
'83.##1.226.63':445
'83.##1.23.183':445
'83.##1.103.172':139
'83.##1.187.84':139
'83.##1.171.137':139
'83.##1.163.239':445
'83.##1.163.239':139
'83.##1.103.172':445
'83.##1.119.24':445
'83.##1.107.84':445
'83.##1.59.85':445
'83.##1.53.146':139
'83.##1.17.181':445
'83.##1.27.23':445
'83.##1.125.233':445
'83.##1.129.9':445
'83.##1.189.21':445
'83.##1.217.26':445
'83.##1.115.55':445
'83.##1.76.38':139
'83.##1.247.75':139
'83.##1.30.21':139
'83.##1.195.44':139
'83.##1.21.134':139
'83.##1.153.247':139
'83.##1.161.37':139
'83.##1.195.11':139
'83.##1.73.75':139
'83.##1.71.154':139
'83.##1.228.71':139
'83.##1.93.160':139
'83.##1.225.224':139
'83.##1.14.212':139
'83.##1.37.31':139
'83.##1.205.229':139
'83.##1.255.15':139
'83.##1.58.209':139
'83.##1.173.138':139
'83.##1.64.39':139
'83.##1.201.60':139
'83.##1.13.240':139
'83.##1.136.66':9988
'83.##1.28.200':9988
'83.##1.17.55':9988
'83.##1.109.146':445
'83.##1.14.252':445
'83.##1.207.249':9988
'83.##1.251.182':9988
'83.##1.184.214':9988
'83.##1.121.59':9988
'83.##1.236.74':9988
'83.##1.135.177':9988
'83.##1.13.212':445
'83.##1.57.183':445
'83.##1.108.249':445
'83.##1.184.141':445
'83.##1.12.97':445
'83.##1.204.138':445
'83.##1.126.119':445
'83.##1.2.231':445
'83.##1.64.141':445
'83.##1.124.24':445
'83.##1.107.56':445
'83.##1.115.55':139
'83.##1.189.21':139
'83.##1.217.26':139
'83.##1.107.84':139
'83.##1.27.23':139
'83.##1.125.233':139
'83.##1.253.196':139
'83.##1.145.253':139
'83.##1.23.183':139
'83.##1.129.9':139
'83.##1.226.63':139
'83.##1.10.85':9988
'83.##1.30.55':9988
'83.#41.36.2':9988
'83.##1.190.171':9988
'83.##1.195.109':9988
'83.##1.139.249':9988
'83.##1.59.85':139
'83.##1.119.24':139
'83.##1.17.181':139
'83.##1.138.54':9988
'83.##1.118.233':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней