Trojan.Starman.6698

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'63.##8.35.39':139
'63.##8.17.115':139
'63.##8.112.156':139
'63.##8.108.145':139
'63.##8.208.252':139
'63.##8.101.108':139
'63.##8.15.101':139
'63.##8.48.147':139
'63.##8.163.181':139
'63.##8.9.246':139
'63.##8.180.7':139
'63.##8.48.252':139
'63.##8.75.239':139
'63.##8.146.42':139
'63.##8.106.153':139
'63.##8.38.152':139
'63.##8.190.207':139
'63.#38.7.64':139
'63.##8.39.119':139
'63.##8.70.217':139
'63.##8.119.70':139
'63.##8.231.15':139
'63.#38.7.64':445
'63.##8.180.7':445
'63.##8.190.207':445
'63.##8.119.70':445
'63.##8.39.119':445
'63.##8.35.39':445
'63.##8.17.115':445
'63.##8.112.156':445
'63.##8.108.145':445
'63.##8.208.252':445
'63.##8.70.217':445
'63.##8.16.156':139
'63.##8.87.77':139
'63.##8.90.165':139
'63.##8.245.175':139
'63.##8.154.210':139
'63.##8.48.252':445
'63.##8.75.239':445
'63.##8.146.42':445
'63.##8.106.153':445
'63.##8.38.152':445
'63.##8.18.117':139
'63.##8.42.225':139
'63.##8.160.73':139
'63.##8.88.169':139
'63.##8.64.172':139
'63.##8.153.120':445
'63.##8.235.107':445
'63.##8.139.120':139
'63.##8.80.233':139
'63.##8.103.242':139
'63.##8.119.98':139
'63.##8.196.8':139
'63.##8.158.195':139
'63.##8.58.60':139
'63.##8.189.176':139
'63.##8.64.231':139
'63.##8.178.146':139
'63.##8.247.197':139
'63.##8.58.74':139
'63.##8.108.99':139
'63.##8.172.19':139
'63.##8.198.33':445
'63.##8.64.172':445
'63.##8.160.73':445
'63.##8.88.169':445
'63.##8.247.197':445
'63.##8.119.98':445
'63.##8.103.242':445
'63.##8.139.120':445
'63.##8.80.233':445
'63.##8.18.117':445
'63.##8.42.225':445
'63.##8.178.146':445
'63.##8.64.231':445
'63.##8.58.60':445
'63.##8.189.176':445
'63.##8.17.198':445
'63.##8.69.56':445
'63.##8.172.19':445
'63.##8.58.74':445
'63.##8.108.99':445
'63.##8.196.8':445
'63.##8.158.195':445
'63.##8.53.61':445
'63.##8.114.201':445
'63.##8.142.152':445
'63.##8.13.212':445
'63.##8.180.109':445
'63.##8.130.139':139
'63.##8.192.115':139
'63.##8.249.55':139
'63.##8.104.129':139
'63.##8.168.231':139
'63.##8.137.172':445
'63.##8.23.63':445
'63.##8.48.219':445
'63.##8.192.118':445
'63.##8.11.44':445
'63.##8.133.210':445
'63.##8.168.137':445
'63.##8.118.228':445
'63.##8.211.50':445
'63.##8.51.137':445
'63.##8.136.45':445
'63.##8.236.196':139
'63.##8.193.132':139
'63.##8.160.144':139
'63.#38.5.92':139
'63.##8.81.240':139
'63.##8.92.81':139
'63.##8.183.112':139
'63.##8.118.164':139
'63.##8.210.59':139
'63.##8.25.141':139
'63.##8.12.29':139
'63.##8.240.20':139
'63.##8.209.25':139
'63.##8.146.12':139
'63.##8.201.203':139
'63.##8.157.50':139
'63.##8.241.38':139
'63.##8.240.225':139
'63.##8.247.69':139
'63.##8.203.5':139
'63.##8.185.61':139
'63.##8.217.247':139
'63.##8.59.70':139
'63.##8.15.106':139
'63.##8.40.178':139
'63.##8.105.249':139
'63.##8.147.119':139
'63.##8.11.44':139
'63.##8.133.210':139
'63.##8.192.124':139
'63.##8.169.219':139
'63.##8.62.82':139
'63.##8.87.77':445
'63.##8.101.108':445
'63.##8.15.101':445
'63.##8.48.147':445
'63.##8.163.181':445
'63.##8.9.246':445
'63.##8.90.165':445
'63.##8.16.156':445
'63.##8.154.210':445
'63.##8.231.15':445
'63.##8.245.175':445
'63.##8.192.118':139
'63.##8.147.119':445
'63.##8.40.178':445
'63.##8.105.249':445
'63.##8.53.61':139
'63.##8.114.201':139
'63.##8.62.82':445
'63.##8.192.124':445
'63.##8.169.219':445
'63.##8.59.70':445
'63.##8.15.106':445
'63.##8.142.152':139
'63.##8.136.45':139
'63.##8.211.50':139
'63.##8.51.137':139
'63.##8.23.63':139
'63.##8.48.219':139
'63.##8.13.212':139
'63.##8.180.109':139
'63.##8.137.172':139
'63.##8.168.137':139
'63.##8.118.228':139
'63.##8.69.56':139
'63.##8.106.180':445
'63.##8.62.204':445
'63.##8.80.209':445
'63.##8.204.210':445
'63.##8.26.27':445
'63.##8.108.33':445
'63.##8.146.105':445
'63.##8.174.252':445
'63.##8.159.149':445
'63.##8.57.159':445
'63.##8.241.235':445
'63.##8.85.249':139
'63.##8.139.165':139
'63.##8.121.8':139
'63.##8.240.216':139
'63.##8.39.133':139
'63.##8.13.64':445
'63.##8.22.62':445
'63.##8.189.242':139
'63.##8.143.139':139
'63.#38.95.4':139
'63.##8.231.12':445
'63.##8.100.20':445
'63.##8.190.28':445
'63.##8.19.78':445
'63.##8.4.102':445
'63.##8.247.131':445
'63.##8.182.4':445
'63.##8.254.62':445
'63.##8.106.237':445
'63.##8.119.141':445
'63.##8.54.167':445
'63.##8.88.36':445
'63.#38.5.44':445
'63.##8.82.154':445
'63.##8.1.214':445
'63.##8.23.231':445
'63.##8.62.239':445
'63.##8.195.37':445
'63.##8.36.236':445
'63.##8.37.184':445
'63.##8.195.142':445
'63.##8.183.187':445
'63.##8.23.231':139
'63.##8.62.239':139
'63.##8.231.12':139
'63.##8.108.33':139
'63.##8.146.105':139
'63.##8.195.142':139
'63.##8.183.187':139
'63.##8.82.154':139
'63.##8.1.214':139
'63.#38.5.44':139
'63.##8.174.252':139
'63.##8.13.64':139
'63.##8.26.27':139
'63.##8.241.235':139
'63.##8.22.62':139
'63.##8.106.180':139
'63.##8.159.149':139
'63.##8.57.159':139
'63.##8.62.204':139
'63.##8.204.210':139
'63.##8.80.209':139
'63.##8.37.184':139
'63.##8.24.35':139
'63.##8.206.23':139
'63.##8.34.231':139
'63.##8.182.4':139
'63.##8.254.62':139
'63.##8.222.220':139
'63.##8.216.222':139
'63.##8.92.86':139
'63.##8.20.119':139
'63.##8.61.26':139
'63.##8.106.237':139
'63.##8.4.102':139
'63.##8.247.131':139
'63.##8.88.36':139
'63.##8.195.37':139
'63.##8.36.236':139
'63.##8.119.141':139
'63.##8.54.167':139
'63.##8.190.28':139
'63.##8.19.78':139
'63.##8.100.20':139
'63.##8.68.135':445
'63.##8.212.160':445
'63.##8.135.107':445
'63.##8.6.189':139
'63.##8.107.190':445
'63.##8.32.200':445
'63.##8.186.135':445
'63.##8.224.68':445
'63.##8.19.215':445
'63.##8.72.216':445
'63.##8.212.72':139
'63.##8.5.251':139
'63.##8.26.141':139
'63.##8.45.159':139
'63.##8.118.225':139
'63.##8.98.215':139
'63.##8.208.181':139
'63.##8.50.206':139
'63.##8.181.175':139
'63.##8.21.27':139
'63.##8.163.247':139
'63.##8.74.186':445
'63.##8.50.206':445
'63.##8.212.72':445
'63.##8.208.181':445
'63.##8.163.247':445
'63.##8.181.175':445
'63.##8.198.33':139
'63.##8.17.198':139
'63.##8.235.107':139
'63.##8.6.189':445
'63.##8.153.120':139
'63.##8.21.27':445
'63.##8.250.193':445
'63.##8.154.95':445
'63.##8.135.96':445
'63.##8.218.230':445
'63.##8.96.96':445
'63.##8.5.251':445
'63.##8.26.141':445
'63.##8.45.159':445
'63.##8.118.225':445
'63.##8.98.215':445
'63.#38.95.4':445
'63.##8.189.242':445
'63.##8.143.139':445
'63.##8.85.249':445
'63.##8.139.165':445
'63.##8.159.149':9988
'63.##8.23.231':9988
'63.##8.80.209':9988
'63.##8.13.64':9988
'63.##8.204.210':9988
'63.##8.121.8':445
'63.##8.20.119':445
'63.##8.61.26':445
'63.##8.206.23':445
'63.##8.34.231':445
'63.##8.24.35':445
'63.##8.240.216':445
'63.##8.39.133':445
'63.##8.216.222':445
'63.##8.92.86':445
'63.##8.222.220':445
'63.##8.82.154':9988
'63.##8.186.135':139
'63.##8.74.186':139
'63.##8.32.200':139
'63.##8.72.216':139
'63.##8.224.68':139
'63.##8.250.193':139
'63.##8.154.95':139
'63.##8.135.96':139
'63.##8.218.230':139
'63.##8.96.96':139
'63.##8.19.215':139
'63.##8.4.102':9988
'63.##8.19.78':9988
'63.##8.106.237':9988
'63.##8.100.20':9988
'63.##8.88.36':9988
'63.##8.68.135':139
'63.##8.212.160':139
'63.##8.135.107':139
'63.##8.182.4':9988
'63.##8.107.190':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней