Trojan.Starman.6336

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'72.##3.227.135':445
'72.##3.166.227':445
'72.##3.163.166':445
'72.##3.144.178':445
'72.##3.12.118':445
'72.##3.254.181':445
'72.##3.131.164':445
'72.##3.188.226':445
'72.##3.9.186':445
'72.##3.87.170':445
'72.##3.239.191':445
'72.##3.144.179':445
'72.##3.227.144':445
'72.##3.87.170':139
'72.##3.212.50':139
'72.##3.237.212':139
'72.##3.227.144':139
'72.##3.188.226':139
'72.##3.9.186':139
'72.##3.23.177':139
'72.##3.139.54':445
'72.##3.194.191':445
'72.##3.179.12':445
'72.##3.67.130':139
'72.##3.201.44':445
'72.##3.153.67':445
'72.##3.212.50':445
'72.##3.241.101':139
'72.##3.71.131':139
'72.##3.190.79':139
'72.##3.105.98':139
'72.##3.27.56':139
'72.##3.180.85':139
'72.##3.215.46':139
'72.##3.254.107':139
'72.##3.107.172':139
'72.##3.33.96':139
'72.##3.7.163':139
'72.##3.87.141':139
'72.##3.214.67':139
'72.##3.125.137':139
'72.##3.200.37':139
'72.##3.27.26':139
'72.##3.237.212':445
'72.##3.23.177':445
'72.##3.67.130':445
'72.##3.144.46':139
'72.##3.48.142':139
'72.##3.100.48':139
'72.##3.207.143':139
'72.##3.106.116':139
'72.##3.12.103':139
'72.##3.142.54':139
'72.##3.144.179':139
'72.##3.107.43':445
'72.##3.201.189':445
'72.##3.67.57':445
'72.##3.206.181':445
'72.##3.13.163':445
'72.##3.43.40':445
'72.##3.105.181':445
'72.##3.79.11':445
'72.#53.9.79':445
'72.##3.85.31':445
'72.##3.76.71':445
'72.##3.11.194':445
'72.##3.11.72':445
'72.##3.47.81':139
'72.##3.77.142':139
'72.##3.85.188':139
'72.##3.160.155':139
'72.##3.116.108':139
'72.##3.143.1':139
'72.##3.189.175':139
'72.##3.46.215':139
'72.##3.85.58':445
'72.##3.121.224':445
'72.##3.95.86':139
'72.##3.161.16':139
'72.##3.124.252':139
'72.##3.182.126':445
'72.##3.194.191':139
'72.##3.179.12':139
'72.##3.144.178':139
'72.##3.201.44':139
'72.##3.153.67':139
'72.##3.139.54':139
'72.##3.12.118':139
'72.##3.163.166':139
'72.##3.131.164':139
'72.##3.239.191':139
'72.##3.254.181':139
'72.##3.227.135':139
'72.##3.166.227':139
'72.##3.116.108':445
'72.##3.143.1':445
'72.##3.47.81':445
'72.##3.198.210':445
'72.##3.122.198':445
'72.##3.160.155':445
'72.##3.77.142':445
'72.##3.161.16':445
'72.##3.124.252':445
'72.##3.46.215':445
'72.##3.85.188':445
'72.##3.189.175':445
'72.##3.95.86':445
'72.##3.46.82':139
'72.##3.218.233':445
'72.##3.14.237':445
'72.##3.135.48':445
'72.##3.3.185':445
'72.##3.14.184':445
'72.##3.234.171':445
'72.##3.32.217':445
'72.##3.168.180':445
'72.##3.45.73':139
'72.##3.71.31':139
'72.##3.22.24':445
'72.#53.9.45':445
'72.##3.180.133':445
'72.##3.148.200':445
'72.##3.206.149':445
'72.##3.26.129':445
'72.##3.180.133':139
'72.##3.168.180':139
'72.##3.104.74':445
'72.##3.142.105':445
'72.##3.14.72':445
'72.##3.167.231':445
'72.#53.3.48':445
'72.##3.208.178':445
'72.##3.173.128':445
'72.##3.128.64':445
'72.##3.199.198':139
'72.##3.229.0':139
'72.##3.2.191':139
'72.##3.229.218':139
'72.##3.155.0':139
'72.##3.77.173':139
'72.#53.1.38':139
'72.##3.49.12':139
'72.##3.123.9':139
'72.##3.225.232':139
'72.##3.233.198':139
'72.##3.179.6':139
'72.##3.94.24':139
'72.##3.156.87':139
'72.##3.49.251':139
'72.##3.98.111':139
'72.##3.102.156':139
'72.##3.241.87':139
'72.##3.21.52':139
'72.##3.217.220':139
'72.##3.156.44':139
'72.##3.243.218':139
'72.##3.237.243':139
'72.##3.156.216':139
'72.##3.65.77':139
'72.##3.109.46':139
'72.##3.219.108':139
'72.#53.9.45':139
'72.##3.27.56':445
'72.##3.180.85':445
'72.##3.241.101':445
'72.##3.100.48':445
'72.##3.207.143':445
'72.##3.105.98':445
'72.##3.71.131':445
'72.##3.87.141':445
'72.##3.214.67':445
'72.##3.254.107':445
'72.##3.190.79':445
'72.##3.215.46':445
'72.##3.7.163':445
'72.##3.5.178':139
'72.##3.42.222':139
'72.##3.125.137':445
'72.##3.135.80':139
'72.##3.183.38':139
'72.##3.237.88':139
'72.##3.200.37':445
'72.##3.12.103':445
'72.##3.142.54':445
'72.##3.48.142':445
'72.##3.27.26':445
'72.##3.144.46':445
'72.##3.106.116':445
'72.##3.107.172':445
'72.##3.167.231':139
'72.#53.3.48':139
'72.##3.3.185':139
'72.##3.173.128':139
'72.##3.128.64':139
'72.##3.14.72':139
'72.##3.14.184':139
'72.##3.135.48':139
'72.##3.32.217':139
'72.##3.22.24':139
'72.##3.234.171':139
'72.##3.218.233':139
'72.##3.14.237':139
'72.##3.183.38':445
'72.##3.237.88':445
'72.##3.5.178':445
'72.##3.33.96':445
'72.##3.46.82':445
'72.##3.135.80':445
'72.##3.42.222':445
'72.##3.26.129':139
'72.##3.142.105':139
'72.##3.208.178':139
'72.##3.104.74':139
'72.##3.148.200':139
'72.##3.206.149':139
'72.##3.130.225':445
'72.##3.161.56':445
'72.##3.135.143':445
'72.##3.29.87':445
'72.##3.194.206':445
'72.##3.235.112':445
'72.##3.49.99':445
'72.##3.180.168':445
'72.##3.48.189':445
'72.##3.41.130':445
'72.##3.99.235':445
'72.##3.103.171':445
'72.##3.47.155':445
'72.##3.0.120':445
'72.##3.19.134':445
'72.##3.55.244':445
'72.##3.82.188':445
'72.##3.189.177':445
'72.##3.241.155':445
'72.##3.226.152':445
'72.##3.184.100':445
'72.##3.37.42':445
'72.##3.103.198':445
'72.##3.104.220':445
'72.##3.222.230':445
'72.##3.52.80':445
'72.##3.191.180':445
'72.##3.31.237':445
'72.##3.27.252':445
'72.##3.77.103':445
'72.##3.243.106':445
'72.##3.84.30':445
'72.##3.155.133':445
'72.##3.135.86':445
'72.##3.55.244':9988
'72.##3.0.120':9988
'72.##3.235.112':9988
'72.##3.102.135':445
'72.##3.206.182':9988
'72.##3.189.177':9988
'72.#53.9.71':445
'72.##3.184.156':445
'72.#53.50.0':445
'72.##3.60.42':445
'72.##3.248.55':445
'72.##3.54.49':445
'72.##3.208.100':445
'72.#53.9.12':445
'72.##3.49.31':445
'72.##3.106.250':445
'72.##3.181.244':445
'72.##3.95.140':445
'72.##3.255.173':445
'72.##3.22.99':445
'72.##3.29.87':139
'72.##3.194.206':139
'72.##3.235.112':139
'72.##3.184.100':139
'72.##3.37.42':139
'72.##3.103.198':139
'72.##3.130.225':139
'72.##3.99.235':139
'72.##3.103.171':139
'72.##3.47.155':139
'72.##3.161.56':139
'72.##3.135.143':139
'72.##3.49.99':139
'72.##3.39.119':139
'72.##3.82.188':139
'72.##3.241.155':139
'72.##3.22.99':139
'72.##3.189.177':139
'72.##3.206.182':139
'72.##3.0.120':139
'72.##3.104.220':139
'72.##3.222.230':139
'72.##3.52.80':139
'72.##3.19.134':139
'72.##3.55.244':139
'72.##3.226.152':139
'72.##3.180.168':139
'72.##3.243.106':139
'72.##3.84.30':139
'72.##3.155.133':139
'72.#53.9.12':139
'72.##3.49.31':139
'72.##3.106.250':139
'72.##3.31.237':139
'72.##3.102.135':139
'72.##3.206.182':445
'72.##3.39.119':445
'72.##3.27.252':139
'72.##3.77.103':139
'72.##3.135.86':139
'72.##3.60.42':139
'72.##3.248.55':139
'72.##3.54.49':139
'72.##3.48.189':139
'72.##3.191.180':139
'72.##3.41.130':139
'72.#53.9.71':139
'72.##3.181.244':139
'72.##3.95.140':139
'72.##3.255.173':139
'72.##3.184.156':139
'72.#53.50.0':139
'72.##3.208.100':139
'72.##3.135.143':9988
'72.##3.169.43':445
'72.##3.168.30':445
'72.##3.137.118':445
'72.##3.146.107':445
'72.##3.16.218':445
'72.##3.120.224':445
'72.##3.39.62':445
'72.#53.2.53':445
'72.##3.32.103':445
'72.##3.194.32':445
'72.##3.138.168':445
'72.##3.226.52':445
'72.##3.91.225':445
'72.##3.194.32':139
'72.##3.240.61':139
'72.##3.167.143':139
'72.##3.91.225':139
'72.#53.2.53':139
'72.##3.32.103':139
'72.##3.101.212':139
'72.##3.119.162':139
'72.##3.160.55':139
'72.##3.76.122':139
'72.##3.38.210':139
'72.##3.61.88':139
'72.##3.74.164':139
'72.##3.240.61':445
'72.##3.105.181':139
'72.##3.76.71':139
'72.##3.11.194':139
'72.##3.107.43':139
'72.##3.201.189':139
'72.##3.67.57':139
'72.##3.11.72':139
'72.##3.182.126':139
'72.##3.198.210':139
'72.##3.122.198':139
'72.##3.79.11':139
'72.#53.9.79':139
'72.##3.85.31':139
'72.##3.61.88':445
'72.##3.74.164':445
'72.##3.119.162':445
'72.##3.167.143':445
'72.##3.101.212':445
'72.##3.38.210':445
'72.##3.160.55':445
'72.##3.206.181':139
'72.##3.13.163':139
'72.##3.43.40':139
'72.##3.76.122':445
'72.##3.85.58':139
'72.##3.121.224':139
'72.##3.226.52':139
'72.##3.132.132':139
'72.##3.20.196':139
'72.##3.60.21':139
'72.##3.220.244':139
'72.##3.219.82':139
'72.##3.230.219':139
'72.##3.23.117':139
'72.##3.96.236':139
'72.#53.42.2':139
'72.##3.107.58':139
'72.##3.175.181':139
'72.##3.28.221':139
'72.##3.119.54':139
'72.##3.49.31':9988
'72.##3.155.133':9988
'72.##3.31.237':9988
'72.##3.180.168':9988
'72.##3.41.130':9988
'72.##3.255.173':9988
'72.##3.135.86':9988
'72.##3.56.226':139
'72.##3.26.15':139
'72.##3.97.152':139
'72.##3.241.102':139
'72.##3.149.69':139
'72.##3.50.114':139
'72.##3.241.102':445
'72.#53.42.2':445
'72.##3.107.58':445
'72.##3.146.107':139
'72.##3.28.221':445
'72.##3.119.54':445
'72.##3.96.236':445
'72.##3.16.218':139
'72.##3.137.118':139
'72.##3.39.62':139
'72.##3.138.168':139
'72.##3.120.224':139
'72.##3.169.43':139
'72.##3.168.30':139
'72.##3.26.15':445
'72.##3.97.152':445
'72.##3.220.244':445
'72.##3.149.69':445
'72.##3.50.114':445
'72.##3.56.226':445
'72.##3.219.82':445
'72.##3.60.21':445
'72.##3.23.117':445
'72.##3.175.181':445
'72.##3.230.219':445
'72.##3.132.132':445
'72.##3.20.196':445

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней