Trojan.Starman.5267

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'14#.#25.144.74':139
'14#.#25.65.189':139
'14#.#25.114.222':139
'14#.#25.95.39':139
'14#.#25.74.142':139
'14#.#25.55.252':139
'14#.#25.64.248':139
'14#.#25.36.198':139
'14#.#25.101.242':139
'14#.#25.41.126':139
'14#.#25.39.51':139
'14#.#25.91.34':139
'14#.#25.106.10':139
'14#.#25.28.146':139
'14#.#25.141.30':139
'14#.#25.9.243':139
'14#.#25.56.103':139
'14#.#25.37.75':139
'14#.#25.187.21':139
'14#.#25.60.142':139
'14#.#25.44.23':139
'14#.#25.28.146':445
'14#.#25.91.34':445
'14#.#25.9.243':445
'14#.#25.252.148':445
'14#.#25.141.30':445
'14#.#25.187.21':445
'14#.#25.56.103':445
'14#.#25.44.23':445
'14#.#25.106.10':445
'14#.#25.60.142':445
'14#.#25.148.218':445
'14#.#25.107.165':139
'14#.#25.41.34':445
'14#.#25.36.211':139
'14#.#25.150.248':139
'14#.#25.81.23':139
'14#.#25.178.139':445
'14#.#25.179.144':445
'14#.#25.140.133':445
'14#.#25.2.111':445
'14#.#25.134.24':445
'14#.#25.89.193':139
'14#.#25.179.114':139
'14#.#25.106.215':139
'14#.#25.46.172':139
'14#.#25.26.174':139
'14#.#25.117.224':445
'14#.#25.67.160':445
'14#.#25.218.168':445
'14#.#25.40.164':445
'14#.#25.208.85':445
'14#.#25.12.97':139
'14#.#25.249.72':139
'14#.#25.216.192':139
'14#.#25.67.160':139
'14#.#25.218.168':139
'14#.#25.117.224':139
'14#.#25.153.41':139
'14#.#25.249.152':139
'14#.#25.144.169':139
'14#.#25.141.19':139
'14#.#25.209.186':139
'14#.#25.2.111':139
'14#.#25.134.24':139
'14#.#25.41.34':139
'14#.#25.89.193':445
'14#.#25.179.114':445
'14#.#25.148.218':139
'14#.#25.252.148':139
'14#.#25.179.144':139
'14#.#25.140.133':139
'14#.#25.178.139':139
'14#.#25.106.215':445
'14#.#25.209.186':445
'14#.#25.144.169':445
'14#.#25.141.19':445
'14#.#25.249.72':445
'14#.#25.216.192':445
'14#.#25.46.172':445
'14#.#25.26.174':445
'14#.#25.12.97':445
'14#.#25.153.41':445
'14#.#25.249.152':445
'14#.#25.37.75':445
'14#.#25.13.223':139
'14#.#25.226.76':139
'14#.#25.194.244':139
'14#.#25.91.213':139
'14#.#25.49.148':139
'14#.#25.186.76':139
'14#.#25.244.201':139
'14#.#25.13.182':139
'14#.#25.255.184':139
'14#.#25.87.193':139
'14#.#25.200.205':139
'14#.#25.146.233':445
'14#.#25.25.85':445
'14#.#25.77.8':445
'14#.#25.170.112':445
'14#.#25.136.145':445
'14#.#25.163.198':445
'14#.#25.21.78':139
'14#.#25.127.210':445
'14#.#25.9.229':445
'14#.#25.65.63':445
'14#.#25.58.125':139
'14#.#25.237.118':139
'14#.#25.152.246':139
'14#.#25.212.98':139
'14#.#25.246.212':139
'14#.#25.45.232':139
'14#.#25.234.132':139
'14#.#25.178.225':139
'14#.#25.255.225':139
'14#.#25.151.228':139
'14#.#25.32.183':139
'14#.#25.54.99':139
'14#.#25.16.61':139
'14#.#25.22.189':139
'14#.#25.85.245':139
'14#.#25.115.7':139
'14#.#25.178.44':139
'14#.#25.64.94':139
'14#.#25.62.62':139
'14#.#25.147.170':139
'14#.#25.43.167':139
'14#.#25.107.165':445
'14#.#25.141.20':139
'14#.#25.36.211':445
'14#.#25.150.248':445
'14#.#25.81.23':445
'14#.#25.186.42':139
'14#.#25.69.186':139
'14#.#25.32.38':139
'14#.#25.31.0':139
'14#.#25.149.22':139
'14#.#25.64.248':445
'14#.#25.114.222':445
'14#.#25.144.74':445
'14#.#25.74.142':445
'14#.#25.39.51':445
'14#.#25.95.39':445
'14#.#25.36.198':445
'14#.#25.55.252':445
'14#.#25.41.126':445
'14#.#25.65.189':445
'14#.#25.101.242':445
'14#.#25.149.22':445
'14#.#25.32.38':445
'14#.#25.31.0':445
'14#.#25.163.198':139
'14#.#25.141.20':445
'14#.#25.251.252':445
'14#.#25.168.64':445
'14#.#25.107.181':445
'14#.#25.186.42':445
'14#.#25.69.186':445
'14#.#25.127.210':139
'14#.#25.170.112':139
'14#.#25.136.145':139
'14#.#25.168.64':139
'14#.#25.107.181':139
'14#.#25.251.252':139
'14#.#25.9.229':139
'14#.#25.65.63':139
'14#.#25.25.85':139
'14#.#25.77.8':139
'14#.#25.146.233':139
'14#.#25.208.85':139
'14#.#25.127.33':445
'14#.#25.131.183':445
'14#.#25.64.143':445
'14#.#25.192.195':445
'14#.#25.219.23':445
'14#.#25.136.116':445
'14#.#25.40.195':445
'14#.#25.45.166':445
'14#.#25.52.218':445
'14#.#25.64.16':445
'14#.#25.230.86':445
'14#.#25.221.15':139
'14#.#25.138.210':139
'14#.#25.134.26':139
'14#.#25.225.66':139
'14#.#25.26.81':139
'14#.#25.103.19':139
'14#.#25.86.190':445
'14#.#25.66.44':139
'14#.#25.221.194':139
'14#.#25.83.165':139
'14#.#25.25.34':445
'14#.#25.39.44':445
'14#.#25.130.41':445
'14#.#25.112.218':445
'14#.#25.41.165':445
'14#.#25.35.145':445
'14#.#25.84.163':445
'14#.#25.128.104':445
'14#.#25.68.230':445
'14#.#25.81.13':445
'14#.#25.127.103':445
'14#.#25.62.64':445
'14#.#25.201.58':445
'14#.#25.22.178':445
'14#.#25.97.40':445
'14#.#25.111.5':445
'14#.#25.253.244':445
'14#.#25.103.254':445
'14#.#25.245.68':445
'14#.#25.110.201':445
'14#.#25.69.111':445
'14#.#25.22.178':139
'14#.#25.62.64':139
'14#.#25.111.5':139
'14#.#25.40.195':139
'14#.#25.97.40':139
'14#.#25.245.68':139
'14#.#25.253.244':139
'14#.#25.69.111':139
'14#.#25.201.58':139
'14#.#25.110.201':139
'14#.#25.136.116':139
'14#.#25.219.23':139
'14#.#25.64.143':139
'14#.#25.192.195':139
'14#.#25.86.190':139
'14#.#25.230.86':139
'14#.#25.64.16':139
'14#.#25.45.166':139
'14#.#25.52.218':139
'14#.#25.127.33':139
'14#.#25.131.183':139
'14#.#25.148.85':139
'14#.#25.56.148':139
'14#.#25.85.124':139
'14#.#25.84.163':139
'14#.#25.151.110':139
'14#.#25.41.251':139
'14#.#25.82.247':139
'14#.#25.176.120':139
'14#.#25.93.181':139
'14#.#25.178.61':139
'14#.#25.35.145':139
'14#.#25.41.165':139
'14#.#25.130.41':139
'14#.#25.112.218':139
'14#.#25.103.254':139
'14#.#25.127.103':139
'14#.#25.81.13':139
'14#.#25.128.104':139
'14#.#25.68.230':139
'14#.#25.25.34':139
'14#.#25.39.44':139
'14#.#25.151.110':445
'14#.#25.30.206':445
'14#.#25.65.7':445
'14#.#25.212.168':139
'14#.#25.178.174':139
'14#.#25.154.184':139
'14#.#25.30.18':445
'14#.#25.15.234':445
'14#.#25.18.85':445
'14#.#25.77.96':445
'14#.#25.199.12':445
'14#.#25.175.18':139
'14#.#25.241.219':139
'14#.#25.19.18':139
'14#.#25.114.226':139
'14#.#25.20.161':139
'14#.#25.46.101':139
'14#.#25.189.26':139
'14#.#25.232.172':139
'14#.#25.69.204':139
'14#.125.6.7':139
'14#.#25.66.36':139
'14#.#25.189.26':445
'14#.#25.232.172':445
'14#.#25.69.204':445
'14#.125.6.7':445
'14#.#25.66.36':445
'14#.#25.212.168':445
'14#.#25.40.164':139
'14#.#25.154.184':445
'14#.#25.175.18':445
'14#.#25.178.174':445
'14#.#25.19.18':445
'14#.#25.3.103':445
'14#.#25.191.145':445
'14#.#25.211.187':445
'14#.#25.38.181':445
'14#.#25.180.199':445
'14#.#25.114.226':445
'14#.#25.241.219':445
'14#.#25.46.101':445
'14#.#25.22.3':445
'14#.#25.20.161':445
'14#.#25.83.165':445
'14#.#25.66.44':445
'14#.#25.221.194':445
'14#.#25.221.15':445
'14#.#25.138.210':445
'14#.#25.192.195':9988
'14#.#25.64.16':9988
'14#.#25.86.190':9988
'14#.#25.103.19':445
'14#.#25.230.86':9988
'14#.#25.134.26':445
'14#.#25.93.181':445
'14#.#25.178.61':445
'14#.#25.56.148':445
'14#.#25.85.124':445
'14#.#25.148.85':445
'14#.#25.225.66':445
'14#.#25.26.81':445
'14#.#25.82.247':445
'14#.#25.176.120':445
'14#.#25.41.251':445
'14#.#25.15.234':139
'14#.#25.38.181':139
'14#.#25.30.18':139
'14#.#25.199.12':139
'14#.#25.18.85':139
'14#.#25.191.145':139
'14#.#25.22.3':139
'14#.#25.3.103':139
'14#.#25.180.199':139
'14#.#25.211.187':139
'14#.#25.77.96':139
'14#.#25.103.254':9988
'14#.#25.127.103':9988
'14#.#25.62.64':9988
'14#.#25.111.5':9988
'14#.#25.22.178':9988
'14#.#25.30.206':139
'14#.#25.65.7':139
'14#.#25.85.124':9988
'14#.#25.128.104':9988
'14#.#25.93.181':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней