Trojan.Starman.6120

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'88.#1.108.4':445
'88.##.239.107':445
'88.##.111.253':445
'88.##.134.213':445
'88.##.208.220':445
'88.##.110.141':445
'88.#1.75.1':445
'88.##.132.167':139
'88.##.221.152':139
'88.##.217.210':139
'88.#1.24.32':445
'88.##.221.175':139
'88.##.170.52':139
'88.##.134.213':139
'88.##.208.220':139
'88.##.110.141':139
'88.##.234.111':445
'88.#1.17.74':139
'88.##.213.16':139
'88.#1.108.4':139
'88.#1.24.32':139
'88.#1.17.74':445
'88.##.213.16':445
'88.##.239.107':139
'88.##.111.253':139
'88.#1.75.1':139
'88.##.254.79':139
'88.#1.35.56':139
'88.##.244.35':139
'88.#1.6.182':139
'88.##.35.191':139
'88.##.182.136':139
'88.##.111.74':139
'88.##.74.242':139
'88.#1.97.23':139
'88.##.255.73':139
'88.##.130.189':139
'88.##.82.135':139
'88.##.101.166':139
'88.##.163.101':139
'88.##.103.254':139
'88.##.14.150':139
'88.#1.32.34':139
'88.#1.30.74':139
'88.#1.95.53':139
'88.#1.184.7':139
'88.##.176.42':139
'88.#1.10.82':139
'88.#1.174.4':139
'88.##.244.153':139
'88.##.130.175':139
'88.##.88.142':139
'88.##.82.213':139
'88.##.71.131':445
'88.##.211.36':445
'88.##.225.50':445
'88.##.159.13':445
'88.##.234.111':139
'88.##.142.231':445
'88.##.110.47':445
'88.##.59.159':445
'88.#1.70.68':445
'88.#1.3.51':445
'88.#1.222.0':445
'88.##.69.225':445
'88.#1.28.88':445
'88.##.152.110':445
'88.##.106.236':139
'88.##.59.209':139
'88.#1.85.60':139
'88.##.215.219':139
'88.##.199.115':139
'88.#1.57.92':139
'88.##.72.163':139
'88.#1.78.38':139
'88.#1.4.139':139
'88.##.71.131':139
'88.##.16.107':139
'88.##.249.140':139
'88.##.159.76':139
'88.##.146.222':445
'88.#1.57.92':445
'88.##.106.236':445
'88.##.59.209':445
'88.#1.30.20':445
'88.##.215.219':445
'88.##.199.115':445
'88.#1.85.60':445
'88.##.159.76':445
'88.#1.78.38':445
'88.#1.4.139':445
'88.##.72.163':445
'88.##.16.107':445
'88.##.249.140':445
'88.#1.13.11':445
'88.##.198.50':445
'88.##.62.110':445
'88.#1.22.13':445
'88.##.140.168':445
'88.##.26.191':445
'88.#1.8.197':445
'88.#1.45.31':445
'88.##.143.206':445
'88.##.239.235':445
'88.##.121.251':445
'88.##.163.44':445
'88.##.15.196':445
'88.##.182.205':139
'88.##.52.213':139
'88.##.220.47':139
'88.#1.6.27':139
'88.##.31.214':445
'88.##.222.31':445
'88.#1.24.29':139
'88.##.112.206':139
'88.#1.169.2':139
'88.##.163.205':139
'88.#1.4.45':139
'88.##.90.124':139
'88.##.152.123':139
'88.##.144.214':139
'88.##.31.214':139
'88.##.222.31':139
'88.##.77.227':445
'88.#1.78.97':139
'88.##.196.84':139
'88.##.196.11':139
'88.#1.86.78':445
'88.#1.78.97':445
'88.##.196.84':445
'88.##.196.11':445
'88.##.197.85':445
'88.##.159.197':445
'88.#1.188.3':445
'88.##.91.192':139
'88.#1.10.59':139
'88.##.65.148':139
'88.##.114.138':139
'88.##.191.73':139
'88.##.71.246':139
'88.##.180.240':139
'88.##.138.85':139
'88.##.79.143':139
'88.##.57.130':139
'88.##.102.75':139
'88.##.112.190':139
'88.##.174.123':139
'88.##.26.225':139
'88.##.199.244':139
'88.##.249.199':139
'88.##.21.195':139
'88.#1.5.165':139
'88.##.112.94':139
'88.##.245.102':139
'88.##.154.182':139
'88.##.198.172':139
'88.#1.32.46':139
'88.##.29.254':139
'88.##.138.154':139
'88.#1.40.45':139
'88.#1.17.33':139
'88.#1.188.3':139
'88.#1.184.7':445
'88.##.103.254':445
'88.##.14.150':445
'88.##.254.79':445
'88.#1.30.74':445
'88.#1.95.53':445
'88.#1.32.34':445
'88.##.82.213':445
'88.#1.10.82':445
'88.#1.174.4':445
'88.##.176.42':445
'88.##.130.175':445
'88.##.88.142':445
'88.#1.83.51':139
'88.##.99.153':139
'88.##.219.143':139
'88.##.40.145':139
'88.##.144.242':139
'88.##.140.81':139
'88.##.38.191':139
'88.##.132.167':445
'88.##.221.152':445
'88.##.217.210':445
'88.##.112.78':139
'88.##.221.175':445
'88.##.170.52':445
'88.##.244.153':445
'88.##.140.81':445
'88.#1.83.51':445
'88.##.99.153':445
'88.##.182.205':445
'88.##.40.145':445
'88.##.144.242':445
'88.##.219.143':445
'88.#1.86.78':139
'88.##.197.85':139
'88.##.159.197':139
'88.##.38.191':445
'88.##.112.78':445
'88.##.77.227':139
'88.#1.35.56':445
'88.##.244.35':445
'88.#1.6.182':445
'88.##.35.191':445
'88.##.182.136':445
'88.##.111.74':445
'88.##.74.242':445
'88.#1.97.23':445
'88.##.255.73':445
'88.##.130.189':445
'88.##.82.135':445
'88.##.101.166':445
'88.##.163.101':445
'88.##.157.81':445
'88.##.197.68':445
'88.##.139.206':445
'88.##.110.70':445
'88.##.68.235':445
'88.##.235.174':445
'88.#1.74.1':445
'88.#1.72.36':445
'88.##.56.112':445
'88.##.216.240':445
'88.##.36.164':445
'88.##.231.36':445
'88.##.48.175':445
'88.#1.22.53':445
'88.#1.14.28':445
'88.##.195.185':445
'88.##.39.200':445
'88.##.152.202':445
'88.#1.13.58':445
'88.##.144.228':445
'88.##.162.47':445
'88.#1.38.62':445
'88.##.14.251':445
'88.##.18.113':445
'88.##.226.186':445
'88.##.197.196':445
'88.##.108.253':445
'88.##.148.176':445
'88.##.76.221':445
'88.##.77.120':445
'88.##.228.251':445
'88.##.183.61':445
'88.#1.24.34':445
'88.##.30.161':445
'88.##.197.196':9988
'88.##.231.36':9988
'88.##.157.81':9988
'88.##.42.191':445
'88.##.58.153':9988
'88.##.18.113':9988
'88.#1.4.46':445
'88.#1.52.71':445
'88.#1.58.31':445
'88.##.191.72':445
'88.##.229.191':445
'88.#1.29.59':445
'88.##.146.198':445
'88.##.88.104':445
'88.##.205.53':445
'88.##.119.223':445
'88.##.253.81':445
'88.##.150.253':445
'88.##.48.222':445
'88.##.156.163':445
'88.##.110.70':139
'88.##.235.174':139
'88.##.68.235':139
'88.##.162.47':139
'88.#1.38.62':139
'88.##.14.251':139
'88.##.197.68':139
'88.##.36.164':139
'88.##.231.36':139
'88.#1.72.36':139
'88.##.157.81':139
'88.##.139.206':139
'88.#1.74.1':139
'88.##.152.202':139
'88.##.58.153':139
'88.#1.13.58':139
'88.##.39.200':139
'88.##.87.168':139
'88.##.156.163':139
'88.#1.22.53':139
'88.##.18.113':139
'88.##.226.186':139
'88.##.197.196':139
'88.#1.14.28':139
'88.##.195.185':139
'88.##.144.228':139
'88.##.48.175':139
'88.##.228.251':139
'88.##.183.61':139
'88.#1.24.34':139
'88.##.205.53':139
'88.##.88.104':139
'88.##.119.223':139
'88.##.148.176':139
'88.##.42.191':139
'88.##.58.153':445
'88.##.87.168':445
'88.##.76.221':139
'88.##.77.120':139
'88.##.30.161':139
'88.##.191.72':139
'88.##.229.191':139
'88.#1.29.59':139
'88.##.56.112':139
'88.##.216.240':139
'88.##.108.253':139
'88.#1.4.46':139
'88.##.253.81':139
'88.##.150.253':139
'88.##.48.222':139
'88.#1.52.71':139
'88.#1.58.31':139
'88.##.146.198':139
'88.##.56.112':9988
'88.##.34.169':445
'88.##.86.186':445
'88.##.201.27':445
'88.##.12.132':139
'88.##.170.126':139
'88.##.231.177':139
'88.##.41.202':445
'88.##.12.132':445
'88.##.170.126':445
'88.##.231.177':445
'88.##.15.232':445
'88.##.184.141':445
'88.##.157.217':445
'88.##.144.156':445
'88.##.158.85':445
'88.##.190.195':445
'88.#1.111.3':445
'88.##.101.111':445
'88.##.239.100':445
'88.##.34.169':139
'88.##.15.232':139
'88.##.184.141':139
'88.##.157.217':139
'88.##.86.186':139
'88.##.201.27':139
'88.##.41.202':139
'88.##.142.231':139
'88.##.198.50':139
'88.##.62.110':139
'88.#1.8.197':139
'88.##.140.168':139
'88.##.26.191':139
'88.#1.13.11':139
'88.##.121.251':139
'88.##.143.206':139
'88.##.239.235':139
'88.#1.30.20':139
'88.##.163.44':139
'88.##.15.196':139
'88.#1.45.31':139
'88.##.159.13':139
'88.##.59.159':139
'88.##.69.225':139
'88.##.110.47':139
'88.##.211.36':139
'88.##.225.50':139
'88.#1.28.88':139
'88.#1.222.0':139
'88.##.146.222':139
'88.#1.22.13':139
'88.##.152.110':139
'88.#1.70.68':139
'88.#1.3.51':139
'88.##.14.170':445
'88.#1.3.248':139
'88.##.204.92':139
'88.##.207.194':139
'88.##.187.114':139
'88.##.135.187':139
'88.##.219.135':139
'88.#1.18.29':139
'88.##.92.122':139
'88.#1.26.92':139
'88.#1.51.26':139
'88.##.166.24':139
'88.##.245.240':139
'88.##.121.246':139
'88.##.76.221':9988
'88.##.183.61':9988
'88.##.148.176':9988
'88.#1.52.71':9988
'88.##.253.81':9988
'88.##.30.161':9988
'88.#1.15.44':139
'88.##.214.68':139
'88.##.118.244':139
'88.#1.68.80':139
'88.#1.73.45':139
'88.#1.5.32':139
'88.##.68.185':139
'88.##.14.170':139
'88.#1.3.248':445
'88.##.204.92':445
'88.##.207.194':445
'88.##.187.114':445
'88.##.135.187':445
'88.##.219.135':445
'88.#1.18.29':445
'88.##.92.122':445
'88.#1.26.92':445
'88.#1.51.26':445
'88.##.166.24':445
'88.##.245.240':445
'88.##.121.246':445
'88.##.144.156':139
'88.##.158.85':139
'88.##.190.195':139
'88.#1.111.3':139
'88.##.101.111':139
'88.##.239.100':139
'88.#1.15.44':445
'88.##.214.68':445
'88.##.118.244':445
'88.#1.68.80':445
'88.#1.73.45':445
'88.#1.5.32':445
'88.##.68.185':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней