Trojan.Starman.4987

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#72.188.43':445
'22#.#72.154.22':445
'22#.#72.58.107':445
'22#.#72.102.118':445
'22#.#72.2.52':445
'22#.#72.128.242':445
'22#.#72.90.223':445
'22#.#72.254.4':445
'22#.#72.247.114':445
'22#.#72.94.66':445
'22#.#72.155.247':445
'22#.#72.47.155':445
'22#.#72.42.44':445
'22#.#72.119.201':445
'22#.#72.57.86':445
'22#.#72.185.181':445
'22#.#72.2.36':445
'22#.#72.233.249':445
'22#.#72.52.11':445
'22#.#72.132.191':445
'22#.#72.158.70':445
'22#.#72.209.157':445
'22#.#72.104.90':445
'22#.#72.6.119':445
'22#.#72.88.2':445
'22#.#72.106.225':445
'22#.#72.208.106':445
'22#.#72.182.4':445
'22#.#72.225.114':445
'22#.#72.232.211':445
'22#.#72.40.215':445
'22#.#72.188.38':445
'22#.#72.38.16':445
'22#.#72.214.248':445
'22#.#72.211.16':445
'22#.#72.228.17':445
'22#.#72.164.13':445
'22#.#72.69.96':445
'22#.#72.221.230':445
'22#.#72.235.91':445
'22#.#72.40.215':139
'22#.#72.188.38':139
'22#.#72.38.16':139
'22#.#72.214.248':139
'22#.#72.211.16':139
'22#.#72.228.17':139
'22#.#72.164.13':139
'22#.#72.69.96':139
'22#.#72.221.230':139
'22#.#72.132.191':139
'22#.#72.188.43':139
'22#.#72.154.22':139
'22#.#72.58.107':139
'22#.#72.102.118':139
'22#.#72.2.52':139
'22#.#72.128.242':139
'22#.#72.90.223':139
'22#.#72.254.4':139
'22#.#72.247.114':139
'22#.#72.232.211':139
'22#.#72.6.31':139
'22#.#72.44.38':139
'22#.#72.34.253':139
'22#.#72.36.42':139
'22#.#72.229.206':139
'22#.#72.69.7':445
'22#.#72.218.139':445
'22#.#72.76.171':139
'22#.#72.125.77':139
'22#.#72.192.245':139
'22#.#72.158.70':139
'22#.#72.209.157':139
'22#.#72.104.90':139
'22#.#72.6.119':139
'22#.#72.88.2':139
'22#.#72.106.225':139
'22#.#72.208.106':139
'22#.#72.182.4':139
'22#.#72.225.114':139
'22#.#72.192.245':445
'22#.#72.127.14':139
'22#.#72.38.127':139
'22#.#72.116.67':139
'22#.#72.118.85':139
'22#.#72.91.109':139
'22#.#72.173.111':139
'22#.#72.66.139':139
'22#.#72.25.183':139
'22#.#72.199.202':139
'22#.#72.113.65':139
'22#.#72.149.88':139
'22#.#72.20.112':139
'22#.#72.42.225':139
'22#.#72.77.124':139
'22#.#72.230.20':139
'22#.#72.99.180':139
'22#.#72.214.16':139
'22#.#72.214.142':139
'22#.#72.50.214':139
'22#.#72.27.116':445
'22#.#72.224.53':445
'22#.#72.56.200':445
'22#.#72.11.22':445
'22#.#72.166.150':445
'22#.#72.109.96':445
'22#.#72.166.226':445
'22#.#72.49.166':445
'22#.#72.121.51':445
'22#.#72.215.241':445
'22#.#72.71.54':445
'22#.#72.29.174':445
'22#.#72.106.129':445
'22#.#72.16.107':445
'22#.#72.246.233':445
'22#.#72.153.169':445
'22#.#72.174.65':445
'22#.#72.53.249':445
'22#.#72.217.153':445
'22#.#72.86.217':445
'22#.#72.104.161':139
'22#.#72.29.174':139
'22#.#72.106.129':139
'22#.#72.16.107':139
'22#.#72.246.233':139
'22#.#72.153.169':139
'22#.#72.174.65':139
'22#.#72.53.249':139
'22#.#72.217.153':139
'22#.#72.86.217':139
'22#.#72.27.116':139
'22#.#72.6.31':445
'22#.#72.44.38':445
'22#.#72.34.253':445
'22#.#72.36.42':445
'22#.#72.229.206':445
'22#.#72.8.29':139
'22#.#72.8.29':445
'22#.#72.76.171':445
'22#.#72.125.77':445
'22#.#72.71.54':139
'22#.#72.248.30':139
'22#.#72.196.145':139
'22#.#72.194.71':139
'22#.#72.79.194':139
'22#.#72.0.28':139
'22#.#72.241.217':139
'22#.#72.184.241':139
'22#.#72.106.251':139
'22#.#72.5.181':139
'22#.#72.161.126':139
'22#.#72.224.53':139
'22#.#72.56.200':139
'22#.#72.11.22':139
'22#.#72.166.150':139
'22#.#72.109.96':139
'22#.#72.166.226':139
'22#.#72.49.166':139
'22#.#72.121.51':139
'22#.#72.215.241':139
'22#.#72.245.241':445
'22#.#72.58.213':445
'22#.#72.226.37':139
'22#.#72.231.190':445
'22#.#72.107.79':445
'22#.#72.85.118':445
'22#.#72.69.50':445
'22#.#72.241.140':445
'22#.#72.168.227':445
'22#.#72.37.208':139
'22#.#72.102.132':139
'22#.#72.173.135':139
'22#.#72.197.66':139
'22#.#72.237.196':139
'22#.#72.163.140':139
'22#.#72.54.233':139
'22#.#72.232.5':139
'22#.#72.147.11':139
'22#.#72.0.232':139
'22#.#72.6.17':445
'22#.#72.92.93':445
'22#.#72.4.116':445
'22#.#72.88.85':445
'22#.#72.82.42':445
'22#.#72.19.206':445
'22#.#72.48.24':445
'22#.#72.176.143':445
'22#.#72.102.169':445
'22#.#72.133.86':445
'22#.#72.251.39':445
'22#.#72.119.112':445
'22#.#72.252.223':445
'22#.#72.21.82':445
'22#.#72.11.49':445
'22#.#72.198.252':445
'22#.#72.38.31':445
'22#.#72.70.22':445
'22#.#72.216.198':445
'22#.#72.119.196':445
'22#.#72.66.183':139
'22#.#72.252.223':139
'22#.#72.198.252':139
'22#.#72.11.49':139
'22#.#72.119.112':139
'22#.#72.216.198':139
'22#.#72.70.22':139
'22#.#72.251.39':139
'22#.#72.119.196':139
'22#.#72.38.31':139
'22#.#72.21.82':139
'22#.#72.58.213':139
'22#.#72.107.79':139
'22#.#72.245.241':139
'22#.#72.231.190':139
'22#.#72.241.140':139
'22#.#72.69.50':139
'22#.#72.6.17':139
'22#.#72.168.227':139
'22#.#72.85.118':139
'22#.#72.88.85':139
'22#.#72.12.11':139
'22#.#72.54.122':139
'22#.#72.2.139':139
'22#.#72.72.16':139
'22#.#72.14.188':139
'22#.#72.132.22':139
'22#.#72.183.83':139
'22#.#72.15.133':139
'22#.#72.191.114':139
'22#.#72.160.134':139
'22#.#72.4.116':139
'22#.#72.19.206':139
'22#.#72.82.42':139
'22#.#72.92.93':139
'22#.#72.102.169':139
'22#.#72.176.143':139
'22#.#72.174.244':139
'22#.#72.133.86':139
'22#.#72.48.24':139
'22#.#72.174.244':445
'22#.#72.239.132':139
'22#.#72.131.177':139
'22#.#72.83.187':139
'22#.#72.190.66':139
'22#.#72.165.101':445
'22#.#72.221.71':445
'22#.#72.69.79':445
'22#.#72.10.214':445
'22#.#72.71.137':445
'22#.#72.160.129':139
'22#.#72.226.225':139
'22#.#72.226.225':445
'22#.#72.38.31':9988
'22#.#72.70.22':9988
'22#.#72.165.101':139
'22#.#72.221.71':139
'22#.#72.69.79':139
'22#.#72.10.214':139
'22#.#72.71.137':139
'22#.#72.160.129':445
'22#.#72.47.155':139
'22#.#72.57.86':139
'22#.#72.119.201':139
'22#.#72.155.247':139
'22#.#72.233.249':139
'22#.#72.2.36':139
'22#.#72.94.66':139
'22#.#72.52.11':139
'22#.#72.185.181':139
'22#.#72.42.44':139
'22#.#72.239.132':445
'22#.#72.131.177':445
'22#.#72.83.187':445
'22#.#72.190.66':445
'22#.#72.247.131':139
'22#.#72.218.139':139
'22#.#72.235.91':139
'22#.#72.247.131':445
'22#.#72.69.7':139
'22#.#72.82.42':9988
'22#.#72.237.196':445
'22#.#72.102.132':445
'22#.#72.66.183':445
'22#.#72.197.66':445
'22#.#72.173.135':445
'22#.#72.0.232':445
'22#.#72.54.233':445
'22#.#72.163.140':445
'22#.#72.147.11':445
'22#.#72.183.83':445
'22#.#72.72.16':445
'22#.#72.12.11':445
'22#.#72.160.134':445
'22#.#72.2.139':445
'22#.#72.54.122':445
'22#.#72.191.114':445
'22#.#72.132.22':445
'22#.#72.14.188':445
'22#.#72.15.133':445
'22#.#72.232.5':445
'22#.#72.88.85':9988
'22#.#72.176.143':9988
'22#.#72.6.17':9988
'22#.#72.252.223':9988
'22#.#72.4.116':9988
'22#.#72.2.139':9988
'22#.#72.198.252':9988
'22#.#72.19.206':9988
'22#.#72.119.196':9988
'22#.#72.69.50':9988
'22#.#72.107.79':9988
'22#.#72.245.241':9988
'22#.#72.37.208':445
'22#.#72.226.37':445
'22#.#72.231.190':9988
'22#.#72.168.227':9988
'22#.#72.85.118':9988
'22#.#72.58.213':9988
'22#.#72.241.140':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней