Trojan.Starman.6141

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'83.##.200.137':139
'83.##.200.212':139
'83.#1.13.84':139
'83.#1.45.59':139
'83.##.83.164':139
'83.##.234.200':139
'83.#1.198.0':139
'83.#1.63.53':139
'83.##.137.107':139
'83.##.41.143':139
'83.##.106.85':139
'83.#1.68.31':139
'83.#1.46.68':139
'83.##.55.214':139
'83.##.158.235':139
'83.#1.67.48':139
'83.##.116.175':139
'83.##.123.86':139
'83.#1.86.25':139
'83.##.152.111':139
'83.#1.4.195':139
'83.#1.50.45':139
'83.##.69.207':139
'83.##.204.190':445
'83.##.144.229':445
'83.#1.6.147':445
'83.##.228.104':445
'83.##.21.251':445
'83.##.177.68':445
'83.##.37.124':445
'83.#1.45.79':445
'83.#1.2.54':445
'83.##.76.184':445
'83.##.153.76':445
'83.##.192.122':139
'83.##.73.186':139
'83.##.22.241':139
'83.##.237.251':139
'83.#1.54.6':139
'83.##.119.105':139
'83.##.107.82':139
'83.##.211.29':139
'83.#1.27.53':139
'83.##.131.79':139
'83.##.101.26':139
'83.##.68.127':139
'83.##.138.27':445
'83.##.197.226':445
'83.##.63.204':445
'83.##.75.221':445
'83.##.254.74':445
'83.##.39.198':445
'83.##.15.252':445
'83.#1.59.84':445
'83.##.97.174':445
'83.#1.209.2':445
'83.#1.39.80':445
'83.##.74.177':445
'83.##.163.173':445
'83.##.91.127':445
'83.##.63.227':445
'83.#1.63.62':445
'83.##.114.119':445
'83.##.45.194':445
'83.##.132.203':445
'83.##.51.136':445
'83.##.59.240':445
'83.##.227.225':445
'83.##.116.71':445
'83.#1.2.54':139
'83.##.37.124':139
'83.##.153.76':139
'83.##.177.68':139
'83.##.76.184':139
'83.#1.45.79':139
'83.##.249.57':139
'83.##.127.108':139
'83.##.116.233':139
'83.##.114.174':139
'83.##.83.145':139
'83.#1.6.200':445
'83.#1.4.158':445
'83.##.61.194':445
'83.##.161.183':445
'83.#1.80.37':445
'83.#1.99.5':445
'83.##.204.190':139
'83.##.144.229':139
'83.#1.6.147':139
'83.##.228.104':139
'83.##.21.251':139
'83.##.102.89':139
'83.##.106.217':139
'83.#1.47.4':139
'83.##.21.197':139
'83.#1.3.244':139
'83.##.182.195':139
'83.##.84.221':139
'83.#1.76.79':139
'83.##.155.218':139
'83.#1.5.153':139
'83.##.225.69':139
'83.##.198.206':139
'83.##.161.61':139
'83.##.207.22':139
'83.#1.36.89':139
'83.#1.22.36':139
'83.#1.92.15':139
'83.#1.12.44':139
'83.#1.8.37':139
'83.##.43.201':139
'83.#1.2.210':139
'83.##.200.142':139
'83.##.199.47':139
'83.##.93.168':139
'83.##.122.40':139
'83.##.168.90':139
'83.#1.15.82':139
'83.#1.6.202':139
'83.#1.9.205':139
'83.#1.129.8':139
'83.##.214.128':139
'83.##.167.180':139
'83.#1.253.9':139
'83.##.222.177':139
'83.##.154.163':139
'83.##.210.234':139
'83.##.223.63':139
'83.#1.196.6':139
'83.##.142.10':139
'83.##.199.211':139
'83.#1.64.51':139
'83.##.175.35':139
'83.##.51.124':139
'83.##.30.117':139
'83.##.123.106':139
'83.#1.4.148':139
'83.##.152.111':445
'83.##.123.86':445
'83.#1.50.45':445
'83.##.116.175':445
'83.#1.4.195':445
'83.#1.86.25':445
'83.##.200.137':445
'83.##.200.212':445
'83.#1.13.84':445
'83.#1.45.59':445
'83.##.83.164':445
'83.##.249.57':445
'83.##.127.108':445
'83.##.116.233':445
'83.##.114.174':445
'83.##.83.145':445
'83.##.68.127':445
'83.#1.68.31':445
'83.#1.46.68':445
'83.##.55.214':445
'83.##.158.235':445
'83.#1.67.48':445
'83.##.234.200':445
'83.#1.27.53':445
'83.##.107.82':445
'83.##.101.26':445
'83.##.119.105':445
'83.##.131.79':445
'83.##.211.29':445
'83.##.225.120':139
'83.##.47.109':139
'83.##.156.125':139
'83.#1.48.73':139
'83.##.86.166':139
'83.#1.198.0':445
'83.#1.63.53':445
'83.##.137.107':445
'83.##.41.143':445
'83.##.106.85':445
'83.##.69.207':445
'83.##.192.122':445
'83.##.73.186':445
'83.##.22.241':445
'83.##.237.251':445
'83.#1.54.6':445
'83.#1.73.24':445
'83.##.175.105':445
'83.##.177.89':445
'83.##.38.121':445
'83.##.139.13':445
'83.#1.7.139':445
'83.##.115.15':445
'83.##.166.12':445
'83.##.121.51':445
'83.##.12.218':445
'83.#1.8.22':445
'83.#1.88.45':445
'83.##.112.127':139
'83.##.183.112':139
'83.##.126.252':139
'83.##.94.145':139
'83.##.252.94':139
'83.##.198.32':445
'83.##.145.175':445
'83.#1.42.27':445
'83.##.156.113':445
'83.#1.3.150':445
'83.##.76.125':445
'83.##.219.116':445
'83.##.111.87':445
'83.##.111.64':445
'83.#1.4.99':445
'83.##.38.129':445
'83.#1.11.14':445
'83.##.185.252':445
'83.#1.57.51':445
'83.##.185.28':445
'83.##.12.213':445
'83.##.241.139':445
'83.#1.36.24':445
'83.##.26.139':445
'83.##.181.132':445
'83.#1.1.235':445
'83.#1.2.9':445
'83.##.232.131':445
'83.#1.101.6':445
'83.##.174.47':445
'83.##.198.61':445
'83.##.43.182':445
'83.##.218.123':445
'83.#1.25.54':445
'83.##.219.170':139
'83.##.12.218':139
'83.##.166.12':139
'83.#1.88.45':139
'83.##.115.15':139
'83.#1.8.22':139
'83.##.121.51':139
'83.#1.1.235':139
'83.##.26.139':139
'83.##.232.131':139
'83.##.219.116':139
'83.#1.2.9':139
'83.#1.3.150':139
'83.##.156.113':139
'83.##.198.32':139
'83.#1.42.27':139
'83.##.76.125':139
'83.##.145.175':139
'83.##.175.105':139
'83.##.177.89':139
'83.##.38.121':139
'83.##.139.13':139
'83.#1.7.139':139
'83.##.181.132':139
'83.##.12.213':139
'83.#1.57.51':139
'83.#1.36.24':139
'83.##.185.252':139
'83.##.241.139':139
'83.##.185.28':139
'83.##.98.151':139
'83.##.191.149':139
'83.#1.1.140':139
'83.##.164.19':139
'83.##.252.213':139
'83.##.43.182':139
'83.##.174.47':139
'83.#1.25.54':139
'83.#1.101.6':139
'83.##.218.123':139
'83.##.198.61':139
'83.##.111.87':139
'83.##.111.64':139
'83.#1.4.99':139
'83.##.38.129':139
'83.#1.11.14':139
'83.##.97.174':139
'83.##.15.252':139
'83.#1.39.80':139
'83.##.39.198':139
'83.#1.209.2':139
'83.#1.59.84':139
'83.##.61.194':139
'83.#1.6.200':139
'83.#1.80.37':139
'83.##.116.71':139
'83.##.161.183':139
'83.##.51.136':139
'83.##.45.194':139
'83.##.227.225':139
'83.##.114.119':139
'83.##.59.240':139
'83.##.132.203':139
'83.##.138.27':139
'83.##.197.226':139
'83.##.63.204':139
'83.##.75.221':139
'83.##.254.74':139
'83.#1.4.158':139
'83.#1.34.42':445
'83.##.113.35':445
'83.##.62.209':445
'83.##.79.190':445
'83.##.19.254':445
'83.##.164.224':445
'83.##.143.33':445
'83.##.11.133':445
'83.##.179.180':445
'83.##.108.70':445
'83.##.207.155':445
'83.##.26.244':445
'83.#1.75.32':445
'83.#1.8.89':445
'83.#1.99.5':139
'83.##.160.126':445
'83.##.158.209':445
'83.##.174.95':445
'83.#1.2.110':445
'83.##.199.110':445
'83.##.217.158':445
'83.##.164.217':445
'83.##.163.173':139
'83.##.115.15':9988
'83.#1.88.45':9988
'83.##.145.175':9988
'83.##.38.121':9988
'83.##.156.113':9988
'83.#1.101.6':9988
'83.#1.8.89':139
'83.##.26.244':139
'83.##.160.126':139
'83.##.218.123':9988
'83.##.183.112':9988
'83.##.98.151':445
'83.##.191.149':445
'83.#1.1.140':445
'83.##.164.19':445
'83.##.252.213':445
'83.##.219.170':445
'83.##.112.127':445
'83.##.183.112':445
'83.##.126.252':445
'83.##.94.145':445
'83.##.252.94':445
'83.#1.75.32':139
'83.##.179.180':139
'83.##.143.33':139
'83.##.207.155':139
'83.##.164.224':139
'83.##.108.70':139
'83.##.11.133':139
'83.##.91.127':139
'83.##.74.177':139
'83.#1.63.62':139
'83.#1.73.24':139
'83.##.63.227':139
'83.##.199.110':139
'83.##.174.95':139
'83.##.164.217':139
'83.##.158.209':139
'83.##.217.158':139
'83.#1.2.110':139
'83.#1.34.42':139
'83.##.113.35':139
'83.##.62.209':139
'83.##.79.190':139
'83.##.19.254':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней