Trojan.Starman.6128

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'88.##1.222.31':139
'88.##1.34.222':139
'88.##1.232.34':139
'88.##1.32.124':139
'88.##1.168.7':139
'88.##1.31.168':139
'88.##1.6.220':139
'88.##1.253.43':139
'88.##1.18.187':139
'88.##1.231.231':139
'88.##1.19.216':139
'88.##1.193.4':139
'88.##1.53.71':139
'88.##1.2.129':445
'88.##1.140.128':445
'88.#21.1.90':139
'88.##1.62.123':445
'88.##1.165.178':445
'88.##1.66.20':445
'88.##1.28.130':139
'88.##1.57.61':139
'88.##1.71.57':139
'88.##1.194.164':139
'88.##1.38.128':139
'88.##1.193.226':139
'88.##1.37.198':139
'88.##1.168.7':445
'88.##1.31.168':445
'88.##1.222.31':445
'88.##1.71.57':445
'88.##1.53.71':445
'88.##1.32.124':445
'88.##1.19.216':445
'88.##1.193.4':445
'88.##1.6.220':445
'88.##1.34.222':445
'88.##1.232.34':445
'88.##1.231.231':445
'88.##1.57.61':445
'88.##1.56.149':139
'88.##1.156.57':139
'88.##1.59.147':139
'88.##1.82.229':139
'88.##1.139.163':139
'88.##1.51.182':139
'88.##1.38.128':445
'88.##1.193.226':445
'88.##1.28.130':445
'88.##1.244.186':139
'88.#21.1.90':445
'88.##1.194.164':445
'88.##1.198.23':139
'88.##1.30.125':139
'88.#21.37.8':139
'88.##1.60.205':139
'88.##1.34.127':139
'88.##1.98.222':139
'88.##1.240.87':139
'88.##1.19.154':139
'88.##1.187.47':139
'88.##1.148.36':139
'88.##1.26.70':139
'88.##1.16.129':139
'88.##1.85.235':139
'88.##1.101.141':445
'88.##1.95.103':445
'88.##1.81.102':445
'88.##1.49.91':445
'88.##1.186.68':445
'88.##1.43.186':445
'88.##1.1.115':445
'88.##1.32.100':139
'88.##1.119.206':139
'88.##1.26.232':445
'88.##1.150.47':445
'88.##1.7.188':445
'88.##1.72.176':139
'88.##1.148.36':445
'88.##1.26.70':445
'88.##1.16.129':445
'88.##1.198.23':445
'88.##1.30.125':445
'88.#21.37.8':445
'88.##1.72.176':445
'88.##1.177.62':445
'88.##1.33.60':445
'88.##1.240.87':445
'88.##1.19.154':445
'88.##1.187.47':445
'88.##1.98.222':445
'88.##1.165.178':139
'88.##1.66.20':139
'88.##1.2.129':139
'88.##1.177.62':139
'88.##1.33.60':139
'88.##1.62.123':139
'88.##1.85.235':445
'88.##1.60.205':445
'88.##1.34.127':445
'88.##1.140.128':139
'88.##1.32.100':445
'88.##1.119.206':445
'88.##1.86.65':139
'88.##1.50.139':139
'88.##1.207.124':139
'88.##1.173.77':139
'88.##1.6.203':139
'88.##1.139.171':139
'88.##1.100.35':139
'88.##1.32.182':139
'88.##1.17.91':139
'88.##1.203.207':139
'88.##1.16.204':139
'88.##1.31.167':139
'88.##1.34.230':139
'88.##1.2.107':445
'88.##1.203.60':445
'88.##1.31.172':139
'88.##1.190.224':445
'88.##1.231.24':445
'88.##1.44.13':445
'88.##1.180.22':139
'88.##1.203.205':139
'88.##1.230.16':139
'88.##1.37.17':139
'88.##1.85.95':139
'88.##1.1.225':139
'88.##1.28.41':139
'88.##1.6.203':445
'88.##1.139.171':445
'88.##1.86.65':445
'88.##1.230.16':445
'88.##1.34.230':445
'88.##1.173.77':445
'88.##1.16.204':445
'88.##1.31.167':445
'88.##1.100.35':445
'88.##1.50.139':445
'88.##1.207.124':445
'88.##1.203.207':445
'88.##1.203.205':445
'88.##1.249.26':139
'88.##1.202.13':139
'88.##1.76.153':139
'88.##1.68.136':139
'88.##1.72.68':139
'88.##1.105.213':139
'88.##1.85.95':445
'88.##1.1.225':445
'88.##1.180.22':445
'88.##1.147.155':139
'88.##1.31.172':445
'88.##1.37.17':445
'88.##1.83.196':139
'88.##1.227.54':139
'88.##1.212.14':139
'88.##1.44.172':139
'88.##1.144.214':139
'88.##1.187.133':139
'88.##1.66.197':139
'88.##1.21.116':139
'88.##1.73.119':139
'88.##1.96.235':139
'88.##1.165.111':139
'88.##1.40.146':139
'88.##1.62.231':139
'88.##1.82.229':445
'88.##1.139.163':445
'88.##1.51.182':445
'88.##1.253.43':445
'88.##1.18.187':445
'88.##1.37.198':445
'88.##1.244.186':445
'88.##1.205.79':139
'88.##1.177.7':139
'88.##1.56.149':445
'88.##1.156.57':445
'88.##1.59.147':445
'88.##1.186.123':139
'88.##1.96.235':445
'88.##1.165.111':445
'88.##1.40.146':445
'88.##1.83.196':445
'88.##1.227.54':445
'88.##1.212.14':445
'88.##1.186.123':445
'88.##1.108.119':445
'88.##1.193.0':445
'88.##1.66.197':445
'88.##1.21.116':445
'88.##1.73.119':445
'88.##1.187.133':445
'88.##1.231.24':139
'88.##1.44.13':139
'88.##1.2.107':139
'88.##1.108.119':139
'88.##1.193.0':139
'88.##1.190.224':139
'88.##1.62.231':445
'88.##1.44.172':445
'88.##1.144.214':445
'88.##1.203.60':139
'88.##1.205.79':445
'88.##1.177.7':445
'88.##1.198.187':445
'88.##1.77.17':445
'88.##1.178.34':445
'88.##1.86.200':445
'88.##1.130.101':445
'88.##1.50.228':445
'88.##1.183.235':445
'88.##1.218.143':445
'88.##1.234.70':445
'88.##1.138.79':445
'88.##1.70.247':445
'88.##1.63.104':445
'88.##1.201.59':445
'88.##1.48.48':445
'88.##1.96.228':445
'88.##1.251.248':445
'88.##1.104.200':445
'88.##1.135.188':445
'88.##1.55.93':445
'88.##1.191.12':445
'88.##1.81.234':445
'88.##1.188.28':445
'88.##1.63.234':445
'88.##1.65.29':445
'88.##1.241.104':445
'88.##1.69.241':445
'88.##1.13.43':445
'88.##1.238.62':445
'88.##1.86.36':445
'88.##1.129.239':445
'88.##1.126.162':445
'88.##1.106.240':445
'88.##1.176.84':445
'88.##1.154.196':445
'88.##1.21.152':445
'88.##1.112.113':445
'88.##1.244.15':445
'88.##1.147.234':445
'88.##1.195.236':445
'88.##1.162.99':445
'88.##1.15.147':445
'88.##1.84.52':445
'88.##1.145.101':445
'88.##1.190.198':445
'88.##1.37.191':445
'88.##1.10.95':445
'88.#21.7.54':445
'88.##1.188.108':445
'88.##1.55.90':445
'88.##1.152.36':445
'88.##1.198.240':445
'88.##1.198.198':445
'88.##1.77.17':139
'88.##1.178.34':139
'88.##1.86.200':139
'88.##1.130.101':139
'88.##1.50.228':139
'88.##1.183.235':139
'88.##1.218.143':139
'88.##1.234.70':139
'88.##1.138.79':139
'88.##1.70.247':139
'88.##1.63.104':139
'88.##1.201.59':139
'88.##1.48.48':139
'88.##1.251.248':139
'88.##1.191.12':139
'88.##1.96.228':139
'88.##1.135.188':139
'88.##1.188.28':139
'88.##1.55.93':139
'88.##1.69.241':139
'88.##1.81.234':139
'88.##1.63.234':139
'88.##1.65.29':139
'88.##1.104.200':139
'88.##1.241.104':139
'88.##1.13.43':139
'88.##1.238.62':139
'88.##1.86.36':139
'88.##1.129.239':139
'88.##1.126.162':139
'88.##1.106.240':139
'88.##1.176.84':139
'88.##1.154.196':139
'88.##1.21.152':139
'88.##1.112.113':139
'88.##1.244.15':139
'88.##1.147.234':139
'88.##1.195.236':139
'88.##1.162.99':139
'88.##1.15.147':139
'88.##1.84.52':139
'88.##1.145.101':139
'88.##1.190.198':139
'88.##1.37.191':139
'88.##1.10.95':139
'88.#21.7.54':139
'88.##1.188.108':139
'88.##1.55.90':139
'88.##1.152.36':139
'88.##1.198.240':139
'88.##1.198.198':139
'88.##1.204.209':139
'88.##1.123.205':139
'88.##1.92.123':139
'88.##1.181.90':139
'88.##1.237.45':139
'88.##1.29.217':139
'88.##1.107.15':139
'88.##1.198.187':139
'88.##1.49.91':139
'88.##1.98.44':139
'88.##1.116.80':139
'88.##1.99.116':139
'88.##1.245.107':139
'88.##1.148.67':445
'88.##1.247.81':445
'88.#21.3.28':445
'88.##1.40.66':445
'88.##1.244.39':445
'88.##1.209.105':445
'88.##1.153.189':139
'88.##1.39.146':139
'88.##1.172.126':139
'88.##1.221.224':139
'88.##1.61.120':139
'88.##1.209.181':139
'88.##1.186.68':139
'88.##1.237.45':445
'88.##1.29.217':445
'88.##1.204.209':445
'88.##1.172.126':445
'88.##1.245.107':445
'88.##1.181.90':445
'88.##1.116.80':445
'88.##1.99.116':445
'88.##1.107.15':445
'88.##1.123.205':445
'88.##1.92.123':445
'88.##1.98.44':445
'88.##1.39.146':445
'88.##1.81.102':139
'88.##1.26.232':139
'88.##1.150.47':139
'88.##1.43.186':139
'88.##1.101.141':139
'88.##1.95.103':139
'88.##1.61.120':445
'88.##1.209.181':445
'88.##1.153.189':445
'88.##1.7.188':139
'88.##1.1.115':139
'88.##1.221.224':445
'88.##1.36.95':139
'88.##1.72.193':139
'88.##1.46.28':139
'88.#21.7.54':9988
'88.##1.162.99':9988
'88.##1.198.13':139
'88.##1.157.230':139
'88.##1.187.15':139
'88.##1.12.82':139
'88.##1.17.28':139
'88.##1.240.239':139
'88.##1.143.240':139
'88.##1.198.240':9988
'88.##1.48.48':9988
'88.##1.77.17':9988
'88.##1.70.247':9988
'88.##1.191.12':9988
'88.##1.251.248':9988
'88.##1.63.234':9988
'88.##1.190.198':9988
'88.##1.10.95':9988
'88.##1.84.52':9988
'88.##1.63.104':9988
'88.##1.13.43':9988
'88.##1.37.191':9988
'88.##1.163.244':139
'88.##1.143.240':445
'88.##1.157.230':445
'88.##1.187.15':445
'88.##1.46.28':445
'88.##1.17.28':445
'88.##1.240.239':445
'88.##1.46.182':445
'88.##1.105.231':445
'88.##1.66.57':445
'88.##1.12.82':445
'88.##1.163.244':445
'88.##1.11.232':445
'88.##1.72.193':445
'88.##1.66.57':139
'88.##1.40.66':139
'88.##1.244.39':139
'88.##1.46.182':139
'88.##1.11.232':139
'88.##1.105.231':139
'88.#21.3.28':139
'88.##1.198.13':445
'88.##1.36.95':445
'88.##1.209.105':139
'88.##1.148.67':139
'88.##1.247.81':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней