Trojan.Starman.5176

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#6.86.66':139
'19#.#6.55.60':139
'19#.#6.87.46':139
'19#.#6.43.93':139
'19#.#6.139.172':139
'19#.#6.195.104':139
'19#.#6.5.243':139
'19#.#6.34.187':139
'19#.#6.251.225':139
'19#.#6.146.189':139
'19#.96.76.6':139
'19#.#6.14.88':139
'19#.#6.184.120':139
'19#.#6.194.37':445
'19#.#6.213.39':139
'19#.#6.41.207':139
'19#.#6.20.251':445
'19#.#6.255.206':445
'19#.#6.145.46':445
'19#.96.29.8':139
'19#.#6.80.42':139
'19#.#6.164.246':139
'19#.#6.131.213':139
'19#.#6.245.29':139
'19#.#6.77.245':139
'19#.#6.8.149':139
'19#.#6.87.46':445
'19#.#6.5.243':445
'19#.96.76.6':445
'19#.#6.195.104':445
'19#.#6.86.66':445
'19#.#6.55.60':445
'19#.#6.14.88':445
'19#.#6.146.189':445
'19#.#6.56.115':445
'19#.#6.12.75':445
'19#.#6.184.120':445
'19#.#6.34.187':445
'19#.#6.251.225':445
'19#.#6.213.39':445
'19#.96.29.8':445
'19#.#6.245.29':445
'19#.#6.56.115':139
'19#.#6.12.75':139
'19#.#6.41.207':445
'19#.#6.77.245':445
'19#.#6.131.213':445
'19#.#6.43.93':445
'19#.#6.139.172':445
'19#.#6.8.149':445
'19#.#6.80.42':445
'19#.#6.164.246':445
'19#.#6.0.101':445
'19#.#6.124.209':139
'19#.#6.83.130':139
'19#.#6.175.225':139
'19#.#6.237.101':139
'19#.#6.48.245':139
'19#.#6.209.34':139
'19#.#6.1.184':139
'19#.96.8.62':139
'19#.#6.62.138':139
'19#.#6.0.101':139
'19#.#6.77.110':139
'19#.#6.215.41':139
'19#.#6.186.30':139
'19#.#6.116.72':139
'19#.#6.28.189':139
'19#.#6.25.234':139
'19#.#6.233.101':445
'19#.#6.172.232':445
'19#.#6.188.172':445
'19#.#6.187.163':139
'19#.#6.51.132':139
'19#.#6.75.35':139
'19#.#6.157.74':139
'19#.#6.209.187':139
'19#.#6.40.69':139
'19#.#6.131.241':139
'19#.#6.209.34':445
'19#.#6.124.209':445
'19#.#6.83.130':445
'19#.#6.157.74':445
'19#.#6.237.101':445
'19#.#6.48.245':445
'19#.#6.175.225':445
'19#.#6.186.30':445
'19#.96.8.62':445
'19#.#6.62.138':445
'19#.#6.1.184':445
'19#.#6.77.110':445
'19#.#6.215.41':445
'19#.#6.194.37':139
'19#.#6.116.72':445
'19#.#6.28.189':445
'19#.#6.20.251':139
'19#.#6.255.206':139
'19#.#6.145.46':139
'19#.#6.25.234':445
'19#.#6.131.241':445
'19#.#6.51.132':445
'19#.#6.75.35':445
'19#.#6.187.163':445
'19#.#6.209.187':445
'19#.#6.40.69':445
'19#.#6.243.79':139
'19#.#6.49.253':139
'19#.#6.158.213':139
'19#.#6.94.252':139
'19#.#6.33.126':139
'19#.#6.86.230':139
'19#.#6.152.144':139
'19#.#6.127.65':139
'19#.#6.115.124':139
'19#.#6.122.155':445
'19#.#6.9.140':139
'19#.#6.83.38':139
'19#.#6.225.54':139
'19#.#6.8.216':139
'19#.#6.205.55':139
'19#.#6.127.245':139
'19#.#6.191.56':445
'19#.#6.122.155':139
'19#.#6.230.213':139
'19#.#6.40.254':139
'19#.#6.125.107':139
'19#.#6.70.125':139
'19#.#6.73.71':139
'19#.#6.107.20':139
'19#.#6.12.77':139
'19#.#6.195.82':139
'19#.#6.49.253':445
'19#.#6.9.140':445
'19#.#6.158.213':445
'19#.#6.86.230':445
'19#.#6.243.79':445
'19#.#6.152.144':445
'19#.#6.83.38':445
'19#.#6.15.169':139
'19#.#6.166.36':139
'19#.#6.145.172':139
'19#.#6.225.54':445
'19#.#6.127.65':445
'19#.#6.115.124':445
'19#.#6.127.245':445
'19#.#6.40.254':445
'19#.#6.107.20':445
'19#.#6.230.213':445
'19#.#6.8.216':445
'19#.#6.205.55':445
'19#.#6.12.77':445
'19#.#6.73.71':445
'19#.#6.94.252':445
'19#.#6.33.126':445
'19#.#6.195.82':445
'19#.#6.125.107':445
'19#.#6.70.125':445
'19#.#6.34.197':445
'19#.#6.73.217':139
'19#.#6.97.46':139
'19#.#6.224.171':139
'19#.#6.89.121':139
'19#.#6.223.161':139
'19#.#6.35.243':139
'19#.#6.138.152':139
'19#.#6.143.254':139
'19#.#6.47.144':139
'19#.#6.34.197':139
'19#.#6.27.86':139
'19#.#6.209.26':139
'19#.#6.149.247':139
'19#.#6.239.63':139
'19#.#6.225.145':139
'19#.#6.244.200':139
'19#.#6.165.102':139
'19#.#6.42.164':139
'19#.#6.64.43':139
'19#.#6.209.211':139
'19#.#6.225.33':139
'19#.#6.159.123':139
'19#.#6.26.162':139
'19#.#6.68.210':139
'19#.#6.206.68':139
'19#.#6.238.155':139
'19#.#6.35.243':445
'19#.#6.73.217':445
'19#.#6.97.46':445
'19#.#6.26.162':445
'19#.#6.89.121':445
'19#.#6.223.161':445
'19#.#6.224.171':445
'19#.#6.149.247':445
'19#.#6.143.254':445
'19#.#6.47.144':445
'19#.#6.138.152':445
'19#.#6.27.86':445
'19#.#6.209.26':445
'19#.#6.64.43':445
'19#.#6.239.63':445
'19#.#6.225.145':445
'19#.#6.191.56':139
'19#.#6.165.102':445
'19#.#6.42.164':445
'19#.#6.244.200':445
'19#.#6.238.155':445
'19#.#6.225.33':445
'19#.#6.159.123':445
'19#.#6.209.211':445
'19#.#6.68.210':445
'19#.#6.206.68':445
'19#.#6.186.92':445
'19#.#6.8.187':445
'19#.#6.181.227':445
'19#.96.1.34':445
'19#.#6.144.0':445
'19#.#6.92.143':445
'19#.#6.46.48':445
'19#.96.22.5':445
'19#.#6.45.161':445
'19#.#6.89.45':445
'19#.#6.194.42':445
'19#.#6.143.3':445
'19#.#6.59.56':445
'19#.#6.65.102':445
'19#.#6.62.176':445
'19#.#6.21.88':445
'19#.#6.71.172':445
'19#.#6.87.30':445
'19#.#6.84.64':445
'19#.#6.248.101':445
'19#.#6.1.197':445
'19#.#6.4.215':445
'19#.#6.39.114':445
'19#.#6.238.247':445
'19#.#6.107.95':445
'19#.#6.16.69':445
'19#.#6.166.161':445
'19#.#6.198.104':445
'19#.#6.93.62':445
'19#.#6.97.135':445
'19#.#6.252.82':445
'19#.#6.23.151':445
'19#.#6.50.217':445
'19#.#6.87.30':9988
'19#.#6.84.64':9988
'19#.#6.65.102':9988
'19#.#6.85.230':445
'19#.#6.36.182':445
'19#.#6.89.61':445
'19#.#6.68.26':445
'19#.#6.108.207':445
'19#.#6.211.99':445
'19#.#6.95.141':445
'19#.#6.68.185':445
'19#.#6.11.95':445
'19#.#6.169.63':445
'19#.#6.199.0':445
'19#.#6.58.57':445
'19#.#6.135.14':445
'19#.#6.109.239':445
'19#.#6.134.62':445
'19#.#6.114.109':445
'19#.#6.182.63':445
'19#.#6.144.0':139
'19#.#6.92.143':139
'19#.#6.186.92':139
'19#.#6.4.215':139
'19#.#6.39.114':139
'19#.96.1.34':139
'19#.#6.8.187':139
'19#.#6.143.3':139
'19#.#6.59.56':139
'19#.96.22.5':139
'19#.#6.181.227':139
'19#.#6.46.48':139
'19#.#6.194.42':139
'19#.#6.87.30':139
'19#.#6.84.64':139
'19#.#6.65.102':139
'19#.#6.69.212':139
'19#.#6.182.63':139
'19#.#6.71.172':139
'19#.#6.62.176':139
'19#.#6.107.95':139
'19#.#6.16.69':139
'19#.#6.1.197':139
'19#.#6.21.88':139
'19#.#6.248.101':139
'19#.#6.238.247':139
'19#.#6.252.82':139
'19#.#6.23.151':139
'19#.#6.166.161':139
'19#.#6.58.57':139
'19#.#6.135.14':139
'19#.#6.97.135':139
'19#.#6.198.104':139
'19#.#6.36.182':139
'19#.#6.89.61':139
'19#.#6.69.212':445
'19#.#6.93.62':139
'19#.#6.50.217':139
'19#.#6.85.230':139
'19#.#6.68.185':139
'19#.#6.11.95':139
'19#.#6.68.26':139
'19#.#6.45.161':139
'19#.#6.89.45':139
'19#.#6.95.141':139
'19#.#6.108.207':139
'19#.#6.109.239':139
'19#.#6.114.109':139
'19#.#6.199.0':139
'19#.#6.211.99':139
'19#.#6.169.63':139
'19#.#6.134.62':139
'19#.96.2.63':139
'19#.#6.126.186':139
'19#.#6.170.195':139
'19#.#6.255.128':139
'19#.#6.80.195':139
'19#.#6.124.12':139
'19#.#6.17.190':139
'19#.#6.137.106':139
'19#.#6.140.137':139
'19#.#6.134.56':139
'19#.#6.14.87':139
'19#.#6.48.234':139
'19#.#6.107.9':139
'19#.#6.97.58':445
'19#.#6.68.97':445
'19#.#6.2.125':445
'19#.#6.29.17':445
'19#.#6.96.169':445
'19#.#6.57.109':445
'19#.#6.58.106':445
'19#.#6.22.17':139
'19#.#6.71.219':139
'19#.#6.128.187':139
'19#.#6.123.57':139
'19#.#6.18.107':139
'19#.#6.196.73':139
'19#.#6.170.195':445
'19#.#6.17.190':445
'19#.#6.14.87':445
'19#.#6.124.12':445
'19#.96.2.63':445
'19#.#6.126.186':445
'19#.#6.48.234':445
'19#.#6.134.56':445
'19#.#6.102.180':445
'19#.#6.135.84':445
'19#.#6.107.9':445
'19#.#6.137.106':445
'19#.#6.140.137':445
'19#.#6.172.232':139
'19#.#6.188.172':139
'19#.#6.123.57':445
'19#.#6.135.84':139
'19#.#6.102.180':139
'19#.#6.233.101':139
'19#.#6.18.107':445
'19#.#6.128.187':445
'19#.#6.80.195':445
'19#.#6.255.128':445
'19#.#6.196.73':445
'19#.#6.22.17':445
'19#.#6.71.219':445
'19#.#6.234.214':445
'19#.#6.103.144':139
'19#.#6.28.69':139
'19#.#6.239.207':139
'19#.#6.55.28':139
'19#.#6.44.168':139
'19#.#6.143.12':139
'19#.#6.201.241':139
'19#.96.34.9':139
'19#.96.6.16':139
'19#.#6.174.7':139
'19#.#6.40.163':139
'19#.#6.247.36':139
'19#.#6.9.206':139
'19#.#6.186.92':9988
'19#.#6.8.187':9988
'19#.#6.181.227':9988
'19#.#6.248.101':9988
'19#.#6.144.0':9988
'19#.#6.92.143':9988
'19#.#6.194.42':9988
'19#.#6.26.154':139
'19#.#6.130.248':139
'19#.#6.27.216':139
'19#.#6.97.135':9988
'19#.#6.252.82':9988
'19#.#6.198.104':9988
'19#.#6.28.69':445
'19#.#6.239.207':445
'19#.#6.201.241':445
'19#.#6.44.168':445
'19#.#6.143.12':445
'19#.#6.103.144':445
'19#.#6.247.36':445
'19#.96.6.16':445
'19#.#6.174.7':445
'19#.#6.57.207':445
'19#.#6.9.206':445
'19#.#6.40.163':445
'19#.96.34.9':445
'19#.#6.96.169':139
'19#.#6.57.109':139
'19#.#6.97.58':139
'19#.#6.57.207':139
'19#.#6.234.214':139
'19#.#6.29.17':139
'19#.#6.68.97':139
'19#.#6.55.28':445
'19#.#6.27.216':445
'19#.#6.130.248':445
'19#.#6.2.125':139
'19#.#6.58.106':139
'19#.#6.26.154':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней