Trojan.Starman.6437

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'14.##9.223.108':445
'14.##9.120.195':445
'14.##9.232.97':445
'14.##9.157.195':445
'14.##9.176.14':445
'14.##9.73.220':445
'14.##9.128.230':445
'14.##9.215.236':445
'14.##9.251.11':445
'14.##9.253.33':445
'14.##9.34.109':445
'14.##9.201.137':445
'14.##9.18.32':445
'14.##9.118.62':445
'14.##9.49.90':445
'14.##9.63.49':445
'14.##9.169.212':445
'14.#49.7.37':445
'14.##9.43.113':445
'14.##9.4.159':445
'14.##9.117.42':445
'14.##9.212.206':445
'14.##9.243.242':139
'14.##9.100.124':139
'14.##9.96.88':139
'14.##9.192.35':445
'14.##9.58.51':139
'14.##9.160.22':139
'14.##9.58.95':139
'14.##9.212.51':139
'14.#49.9.4':139
'14.##9.22.30':139
'14.##9.66.19':139
'14.##9.151.120':445
'14.##9.67.235':139
'14.##9.208.21':445
'14.##9.75.97':445
'14.#49.9.24':445
'14.##9.130.179':139
'14.##9.130.179':445
'14.##9.44.37':445
'14.##9.67.235':445
'14.##9.44.37':139
'14.##9.192.35':139
'14.##9.253.33':139
'14.##9.34.109':139
'14.##9.73.220':139
'14.##9.223.108':139
'14.##9.120.195':139
'14.##9.251.11':139
'14.#49.9.24':139
'14.##9.208.21':139
'14.##9.75.97':139
'14.##9.128.230':139
'14.##9.215.236':139
'14.##9.117.42':139
'14.##9.212.206':139
'14.##9.169.212':139
'14.##9.201.137':139
'14.##9.18.32':139
'14.##9.4.159':139
'14.##9.176.14':139
'14.##9.232.97':139
'14.##9.157.195':139
'14.#49.7.37':139
'14.##9.43.113':139
'14.##9.162.49':445
'14.##9.51.38':445
'14.##9.49.214':445
'14.##9.165.38':445
'14.##9.22.70':445
'14.##9.86.83':445
'14.##9.217.191':445
'14.##9.249.241':445
'14.##9.191.201':445
'14.##9.74.43':445
'14.##9.180.251':445
'14.##9.10.17':445
'14.##9.154.163':445
'14.##9.137.249':445
'14.##9.151.120':139
'14.##9.198.90':445
'14.##9.72.202':445
'14.##9.180.110':445
'14.##9.236.180':445
'14.##9.55.70':445
'14.##9.151.45':445
'14.##9.46.40':445
'14.##9.22.184':445
'14.##9.70.55':445
'14.##9.130.87':445
'14.##9.29.86':445
'14.##9.142.0':445
'14.##9.44.70':445
'14.##9.91.137':445
'14.##9.207.131':445
'14.##9.34.55':445
'14.##9.71.196':445
'14.##9.32.134':445
'14.##9.8.146':445
'14.##9.32.158':445
'14.##9.212.51':445
'14.#49.9.4':445
'14.##9.58.95':445
'14.##9.120.135':445
'14.##9.50.48':445
'14.##9.252.34':445
'14.##9.235.88':445
'14.##9.193.119':445
'14.##9.35.49':445
'14.##9.103.213':445
'14.##9.35.96':445
'14.##9.151.156':445
'14.##9.13.228':445
'14.##9.156.14':445
'14.##9.76.130':445
'14.##9.149.64':139
'14.##9.156.169':139
'14.##9.64.99':139
'14.##9.79.76':445
'14.##9.249.253':139
'14.##9.83.250':445
'14.##9.110.146':445
'14.##9.90.20':445
'14.##9.6.237':445
'14.##9.20.52':445
'14.##9.179.137':445
'14.##9.127.171':445
'14.##9.47.95':445
'14.##9.60.235':445
'14.##9.61.198':445
'14.##9.27.247':445
'14.##9.71.196':139
'14.##9.32.134':139
'14.##9.44.70':139
'14.##9.22.184':139
'14.##9.70.55':139
'14.##9.34.55':139
'14.##9.20.52':139
'14.##9.90.20':139
'14.##9.6.237':139
'14.##9.91.137':139
'14.##9.207.131':139
'14.##9.193.119':139
'14.##9.35.49':139
'14.##9.120.135':139
'14.##9.8.146':139
'14.##9.32.158':139
'14.##9.235.88':139
'14.##9.142.0':139
'14.##9.130.87':139
'14.##9.29.86':139
'14.##9.50.48':139
'14.##9.252.34':139
'14.##9.79.76':139
'14.##9.58.51':445
'14.##9.76.130':139
'14.##9.103.213':139
'14.##9.35.96':139
'14.##9.96.88':445
'14.##9.22.30':445
'14.##9.66.19':445
'14.##9.160.22':445
'14.##9.243.242':445
'14.##9.100.124':445
'14.##9.61.198':139
'14.##9.27.247':139
'14.##9.179.137':139
'14.##9.83.250':139
'14.##9.110.146':139
'14.##9.60.235':139
'14.##9.156.14':139
'14.##9.151.156':139
'14.##9.13.228':139
'14.##9.127.171':139
'14.##9.47.95':139
'14.##9.118.62':139
'14.##9.127.66':445
'14.##9.134.95':445
'14.##9.153.242':445
'14.##9.172.163':445
'14.##9.241.126':445
'14.##9.188.1':445
'14.##9.162.189':445
'14.##9.211.162':445
'14.##9.203.237':445
'14.##9.17.161':445
'14.##9.40.212':445
'14.##9.40.243':139
'14.##9.84.160':139
'14.##9.242.243':139
'14.##9.43.149':139
'14.##9.244.42':139
'14.##9.67.227':139
'14.##9.64.204':445
'14.##9.103.196':445
'14.##9.196.59':445
'14.##9.132.68':139
'14.##9.178.224':445
'14.##9.158.11':445
'14.##9.68.145':445
'14.##9.10.211':445
'14.##9.121.190':445
'14.##9.11.176':445
'14.##9.186.27':445
'14.##9.147.123':445
'14.##9.37.22':445
'14.##9.179.120':445
'14.##9.54.133':445
'14.##9.115.123':445
'14.##9.65.12':445
'14.##9.117.167':445
'14.##9.214.178':445
'14.##9.58.48':445
'14.##9.148.99':445
'14.##9.238.5':445
'14.##9.122.54':445
'14.##9.190.235':445
'14.##9.17.131':445
'14.#49.0.53':445
'14.#49.46.5':445
'14.##9.211.162':139
'14.##9.58.48':139
'14.##9.162.189':139
'14.##9.40.212':139
'14.##9.203.237':139
'14.##9.148.99':139
'14.##9.238.5':139
'14.#49.0.53':139
'14.##9.117.167':139
'14.##9.214.178':139
'14.##9.65.12':139
'14.##9.196.59':139
'14.##9.103.196':139
'14.##9.64.204':139
'14.##9.178.224':139
'14.##9.172.163':139
'14.##9.241.126':139
'14.##9.188.1':139
'14.##9.17.161':139
'14.##9.134.95':139
'14.##9.153.242':139
'14.##9.127.66':139
'14.##9.37.22':139
'14.##9.40.224':139
'14.##9.147.123':139
'14.##9.115.123':139
'14.##9.179.120':139
'14.##9.154.77':139
'14.##9.145.64':139
'14.##9.0.247':139
'14.##9.11.128':139
'14.##9.218.217':139
'14.##9.97.175':139
'14.##9.190.235':139
'14.##9.121.190':139
'14.##9.122.54':139
'14.#49.46.5':139
'14.##9.17.131':139
'14.##9.11.176':139
'14.##9.186.27':139
'14.##9.54.133':139
'14.##9.68.145':139
'14.##9.10.211':139
'14.##9.158.11':139
'14.##9.146.167':139
'14.##9.141.241':139
'14.##9.251.212':139
'14.##9.41.93':445
'14.##9.111.53':445
'14.##9.90.187':139
'14.##9.90.187':445
'14.##9.198.90':139
'14.##9.141.241':445
'14.##9.251.212':445
'14.##9.146.167':445
'14.##9.198.139':445
'14.##9.110.200':445
'14.##9.67.10':445
'14.##9.232.131':445
'14.##9.79.149':445
'14.##9.17.143':445
'14.##9.181.28':445
'14.##9.35.190':445
'14.#49.28.3':445
'14.##9.57.244':445
'14.##9.91.163':445
'14.##9.86.83':139
'14.##9.74.43':139
'14.##9.51.38':139
'14.##9.49.214':139
'14.##9.162.49':139
'14.##9.180.251':139
'14.##9.49.90':139
'14.##9.63.49':139
'14.##9.249.241':139
'14.##9.191.201':139
'14.##9.217.191':139
'14.##9.72.202':139
'14.##9.151.45':139
'14.##9.154.163':139
'14.##9.137.249':139
'14.##9.10.17':139
'14.##9.46.40':139
'14.##9.165.38':139
'14.##9.22.70':139
'14.##9.236.180':139
'14.##9.55.70':139
'14.##9.180.110':139
'14.##9.17.131':9988
'14.##9.178.224':9988
'14.##9.132.68':445
'14.##9.84.160':445
'14.##9.67.227':445
'14.#49.0.53':9988
'14.##9.17.161':9988
'14.##9.127.66':9988
'14.##9.241.126':9988
'14.##9.117.167':9988
'14.##9.58.48':9988
'14.##9.97.175':445
'14.##9.11.128':445
'14.##9.218.217':445
'14.##9.40.224':445
'14.##9.154.77':445
'14.##9.145.64':445
'14.##9.242.243':445
'14.##9.40.243':445
'14.##9.244.42':445
'14.##9.0.247':445
'14.##9.43.149':445
'14.##9.17.143':139
'14.##9.57.244':139
'14.##9.110.200':139
'14.##9.67.10':139
'14.##9.198.139':139
'14.##9.91.163':139
'14.##9.41.93':139
'14.##9.111.53':139
'14.##9.35.190':139
'14.#49.28.3':139
'14.##9.181.28':139
'14.##9.196.59':9988
'14.##9.10.211':9988
'14.##9.172.163':9988
'14.##9.203.237':9988
'14.##9.190.235':9988
'14.##9.40.212':9988
'14.##9.232.131':139
'14.##9.79.149':139
'14.##9.211.162':9988
'14.##9.122.54':9988
'14.##9.11.176':9988

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней