Trojan.Starman.6625

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'80.##2.137.183':139
'80.##2.173.63':139
'80.##2.158.173':139
'80.##2.11.135':139
'80.##2.2.216':139
'80.##2.165.198':139
'80.##2.138.173':139
'80.##2.137.7':139
'80.##2.215.90':139
'80.##2.221.158':139
'80.##2.139.185':139
'80.##2.155.225':139
'80.##2.255.78':139
'80.##2.107.232':139
'80.##2.15.168':139
'80.##2.22.200':139
'80.##2.27.19':139
'80.##2.22.65':139
'80.##2.227.172':139
'80.#42.6.16':139
'80.##2.14.184':139
'80.##2.254.14':139
'80.##2.110.115':139
'80.##2.70.143':139
'80.##2.66.12':139
'80.##2.91.139':139
'80.##2.177.174':139
'80.##2.47.218':139
'80.##2.196.119':139
'80.##2.87.13':139
'80.##2.248.204':139
'80.##2.47.26':139
'80.##2.167.75':139
'80.##2.101.44':139
'80.##2.112.123':139
'80.##2.208.31':139
'80.##2.129.121':139
'80.##2.191.101':139
'80.##2.79.216':139
'80.##2.249.8':139
'80.##2.219.93':139
'80.##2.119.203':139
'80.##2.15.205':139
'80.##2.34.101':139
'80.##2.9.221':139
'80.##2.77.118':139
'80.##2.13.37':139
'80.##2.84.254':139
'80.##2.118.213':139
'80.##2.25.159':139
'80.##2.163.125':139
'80.##2.54.69':445
'80.##2.165.211':445
'80.##2.8.244':445
'80.##2.198.83':445
'80.##2.161.229':445
'80.##2.156.226':445
'80.##2.21.59':445
'80.##2.11.170':445
'80.##2.242.73':445
'80.##2.75.166':445
'80.##2.234.137':445
'80.##2.233.101':445
'80.##2.31.98':445
'80.##2.255.229':445
'80.##2.181.176':445
'80.#42.71.3':445
'80.##2.38.159':445
'80.##2.101.77':445
'80.#42.7.21':445
'80.##2.39.80':445
'80.##2.181.68':445
'80.##2.252.180':445
'80.##2.252.70':445
'80.##2.27.252':445
'80.##2.219.153':445
'80.#42.92.5':445
'80.##2.249.172':445
'80.##2.6.190':445
'80.##2.182.173':445
'80.##2.145.28':445
'80.##2.66.233':445
'80.##2.43.237':445
'80.##2.198.85':445
'80.##2.231.197':445
'80.##2.28.222':445
'80.##2.207.127':445
'80.##2.191.207':445
'80.##2.103.61':445
'80.##2.139.7':445
'80.##2.106.85':445
'80.##2.94.105':445
'80.##2.49.77':445
'80.##2.129.238':445
'80.##2.211.76':445
'80.##2.146.218':445
'80.##2.58.219':445
'80.##2.22.59':445
'80.##2.223.21':445
'80.##2.77.94':445
'80.##2.16.192':445
'80.##2.218.223':445
'80.##2.153.74':139
'80.##2.165.228':139
'80.##2.245.211':139
'80.##2.250.243':139
'80.##2.80.220':139
'80.##2.5.185':139
'80.##2.210.1':139
'80.##2.154.209':139
'80.##2.126.157':139
'80.##2.132.65':139
'80.##2.64.56':139
'80.##2.173.222':139
'80.##2.35.183':139
'80.##2.171.152':139
'80.##2.31.114':139
'80.##2.17.234':139
'80.##2.190.192':139
'80.##2.219.132':139
'80.##2.51.254':139
'80.##2.171.112':139
'80.##2.110.55':139
'80.##2.126.186':139
'80.##2.237.17':139
'80.##2.9.237':139
'80.##2.81.147':139
'80.##2.150.230':139
'80.##2.35.33':139
'80.##2.88.106':139
'80.##2.30.25':139
'80.##2.241.194':139
'80.##2.234.253':139
'80.##2.205.191':139
'80.##2.147.121':139
'80.##2.158.152':139
'80.##2.17.198':139
'80.##2.201.57':139
'80.##2.86.149':139
'80.##2.222.250':139
'80.##2.195.9':139
'80.##2.104.103':139
'80.##2.32.124':139
'80.##2.2.178':139
'80.##2.34.230':139
'80.##2.173.203':139
'80.##2.57.23':139
'80.##2.118.100':139
'80.##2.166.118':139
'80.##2.251.74':139
'80.##2.82.212':139
'80.##2.2.105':139
'80.##2.40.92':139
'80.##2.137.183':445
'80.##2.173.63':445
'80.##2.158.173':445
'80.##2.11.135':445
'80.##2.2.216':445
'80.##2.165.198':445
'80.##2.138.173':445
'80.##2.137.7':445
'80.##2.215.90':445
'80.##2.221.158':445
'80.##2.139.185':445
'80.##2.155.225':445
'80.##2.255.78':445
'80.##2.107.232':445
'80.##2.15.168':445
'80.##2.22.200':445
'80.##2.27.19':445
'80.##2.22.65':445
'80.##2.227.172':445
'80.#42.6.16':445
'80.##2.14.184':445
'80.##2.254.14':445
'80.##2.110.115':445
'80.##2.70.143':445
'80.##2.66.12':445
'80.##2.91.139':445
'80.##2.177.174':445
'80.##2.47.218':445
'80.##2.196.119':445
'80.##2.87.13':445
'80.##2.248.204':445
'80.##2.47.26':445
'80.##2.167.75':445
'80.##2.101.44':445
'80.##2.112.123':445
'80.##2.208.31':445
'80.##2.129.121':445
'80.##2.191.101':445
'80.##2.79.216':445
'80.##2.249.8':445
'80.##2.219.93':445
'80.##2.119.203':445
'80.##2.15.205':445
'80.##2.34.101':445
'80.##2.9.221':445
'80.##2.77.118':445
'80.##2.13.37':445
'80.##2.84.254':445
'80.##2.118.213':445
'80.##2.25.159':445
'80.##2.163.125':445
'80.##2.27.246':445
'80.##2.107.124':445
'80.##2.100.107':445
'80.##2.120.41':445
'80.##2.36.96':445
'80.##2.12.80':445
'80.##2.27.218':445
'80.##2.95.102':445
'80.##2.144.243':445
'80.##2.36.14':445
'80.##2.175.248':445
'80.##2.200.230':445
'80.##2.21.125':445
'80.#42.48.2':445
'80.##2.217.40':445
'80.##2.159.11':445
'80.##2.204.242':445
'80.##2.213.40':445
'80.##2.10.196':445
'80.##2.45.117':445
'80.##2.157.220':445
'80.##2.97.43':445
'80.##2.25.81':445
'80.##2.60.80':445
'80.##2.221.237':445
'80.##2.108.144':445
'80.##2.65.175':445
'80.##2.85.170':445
'80.##2.29.202':445
'80.##2.64.22':445
'80.##2.162.216':445
'80.##2.174.162':445
'80.##2.252.54':445
'80.##2.246.82':445
'80.##2.207.246':445
'80.##2.64.218':445
'80.##2.124.209':445
'80.##2.128.57':445
'80.##2.172.63':445
'80.##2.111.146':445
'80.##2.18.153':445
'80.##2.134.213':445
'80.##2.243.108':445
'80.##2.124.103':445
'80.##2.98.100':445
'80.##2.62.34':445
'80.##2.127.61':445
'80.##2.136.127':445
'80.##2.239.134':445
'80.##2.16.94':445
'80.##2.34.100':445
'80.##2.27.246':139
'80.##2.107.124':139
'80.##2.100.107':139
'80.##2.120.41':139
'80.##2.36.96':139
'80.##2.12.80':139
'80.##2.27.218':139
'80.##2.95.102':139
'80.##2.144.243':139
'80.##2.36.14':139
'80.##2.175.248':139
'80.##2.200.230':139
'80.##2.21.125':139
'80.#42.48.2':139
'80.##2.217.40':139
'80.##2.159.11':139
'80.##2.213.40':139
'80.##2.204.242':139
'80.##2.10.196':139
'80.##2.45.117':139
'80.##2.157.220':139
'80.##2.97.43':139
'80.##2.25.81':139
'80.##2.60.80':139
'80.##2.221.237':139
'80.##2.108.144':139
'80.##2.65.175':139
'80.##2.85.170':139
'80.##2.29.202':139
'80.##2.64.22':139
'80.##2.162.216':139
'80.##2.174.162':139
'80.##2.252.54':139
'80.##2.246.82':139
'80.##2.207.246':139
'80.##2.64.218':139
'80.##2.124.209':139
'80.##2.128.57':139
'80.##2.172.63':139
'80.##2.111.146':139
'80.##2.18.153':139
'80.##2.134.213':139
'80.##2.243.108':139
'80.##2.124.103':139
'80.##2.98.100':139
'80.##2.62.34':139
'80.##2.127.61':139
'80.##2.136.127':139
'80.##2.239.134':139
'80.##2.16.94':139
'80.##2.34.100':139
'80.##2.54.69':139
'80.##2.165.211':139
'80.##2.75.166':139
'80.##2.198.83':139
'80.##2.161.229':139
'80.##2.156.226':139
'80.##2.21.59':139
'80.##2.11.170':139
'80.##2.242.73':139
'80.##2.8.244':139
'80.##2.234.137':139
'80.##2.233.101':139
'80.##2.31.98':139
'80.##2.255.229':139
'80.##2.181.176':139
'80.#42.71.3':139
'80.##2.38.159':139
'80.##2.101.77':139
'80.#42.7.21':139
'80.##2.39.80':139
'80.##2.181.68':139
'80.##2.252.180':139
'80.##2.252.70':139
'80.##2.27.252':139
'80.##2.219.153':139
'80.#42.92.5':139
'80.##2.249.172':139
'80.##2.6.190':139
'80.##2.182.173':139
'80.##2.145.28':139
'80.##2.66.233':139
'80.##2.43.237':139
'80.##2.198.85':139
'80.##2.231.197':139
'80.##2.28.222':139
'80.##2.207.127':139
'80.##2.191.207':139
'80.##2.103.61':139
'80.##2.139.7':139
'80.##2.106.85':139
'80.##2.94.105':139
'80.##2.77.94':139
'80.##2.129.238':139
'80.##2.211.76':139
'80.##2.146.218':139
'80.##2.58.219':139
'80.##2.22.59':139
'80.##2.223.21':139
'80.##2.49.77':139
'80.##2.16.192':139
'80.##2.218.223':139
'80.##2.85.170':9988
'80.##2.93.208':139
'80.##2.25.76':139
'80.##2.27.218':9988
'80.##2.108.144':9988
'80.##2.111.146':9988
'80.##2.230.101':139
'80.##2.72.202':139
'80.##2.172.42':139
'80.##2.25.111':139
'80.##2.185.25':139
'80.##2.121.243':139
'80.##2.100.107':9988
'80.##2.213.40':9988
'80.##2.204.242':9988
'80.##2.159.11':9988
'80.##2.10.196':9988
'80.##2.217.40':9988
'80.#42.48.2':9988
'80.##2.107.124':9988
'80.##2.95.102':9988
'80.##2.200.230':9988
'80.##2.45.117':9988
'80.##2.120.41':9988
'80.##2.12.80':9988
'80.##2.93.145':139
'80.##2.49.118':445
'80.##2.93.145':445
'80.##2.107.57':445
'80.##2.230.101':445
'80.##2.185.25':445
'80.##2.172.42':445
'80.##2.157.86':445
'80.##2.250.77':445
'80.##2.158.78':445
'80.##2.254.211':445
'80.##2.250.143':445
'80.##2.85.250':445
'80.##2.72.202':445
'80.##2.250.143':139
'80.##2.85.250':139
'80.##2.157.86':139
'80.##2.107.57':139
'80.##2.49.118':139
'80.##2.254.211':139
'80.##2.25.76':445
'80.##2.25.111':445
'80.##2.121.243':445
'80.##2.250.77':139
'80.##2.158.78':139
'80.##2.93.208':445

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней