Trojan.Starman.5483

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12#.#95.51.199':445
'12#.#95.111.35':445
'12#.#95.232.92':445
'12#.#95.179.95':445
'12#.#95.93.167':445
'12#.#95.213.211':445
'12#.#95.33.101':445
'12#.#95.92.36':445
'12#.#95.68.245':445
'12#.#95.36.181':445
'12#.#95.216.185':445
'12#.#95.25.170':445
'12#.#95.91.92':445
'12#.#95.176.147':445
'12#.#95.3.61':445
'12#.#95.66.248':445
'12#.#95.87.227':445
'12#.#95.247.76':445
'12#.#95.28.174':445
'12#.#95.120.64':445
'12#.#95.80.242':445
'12#.#95.175.100':445
'12#.#95.14.138':139
'12#.#95.204.133':139
'12#.#95.2.138':139
'12#.#95.214.209':139
'12#.#95.227.120':139
'12#.#95.124.32':139
'12#.#95.181.123':139
'12#.#95.32.235':139
'12#.#95.93.26':139
'12#.#95.17.4':139
'12#.#95.140.86':139
'12#.#95.149.155':445
'12#.#95.111.178':139
'12#.#95.99.38':445
'12#.#95.85.68':445
'12#.#95.38.226':445
'12#.#95.80.180':139
'12#.#95.195.223':139
'12#.#95.49.188':445
'12#.#95.49.188':139
'12#.#95.111.178':445
'12#.#95.45.141':445
'12#.#95.213.211':139
'12#.#95.33.101':139
'12#.#95.92.36':139
'12#.#95.111.35':139
'12#.#95.36.181':139
'12#.#95.99.38':139
'12#.#95.149.155':139
'12#.#95.38.226':139
'12#.#95.175.100':139
'12#.#95.85.68':139
'12#.#95.68.245':139
'12#.#95.87.227':139
'12#.#95.247.76':139
'12#.#95.28.174':139
'12#.#95.127.99':139
'12#.#95.66.248':139
'12#.#95.232.92':139
'12#.#95.51.199':139
'12#.#95.93.167':139
'12#.#95.216.185':139
'12#.#95.179.95':139
'12#.#95.35.142':445
'12#.#95.139.99':445
'12#.#95.125.216':445
'12#.#95.35.78':445
'12#.#95.178.172':445
'12#.#95.12.200':445
'12#.#95.125.80':445
'12#.#95.110.228':445
'12#.#95.127.99':445
'12#.#95.99.125':445
'12#.#95.32.139':445
'12#.#95.238.218':445
'12#.#95.181.224':445
'12#.#95.91.76':445
'12#.#95.158.119':445
'12#.#95.231.237':445
'12#.#95.216.9':445
'12#.#95.85.228':445
'12#.#95.173.54':445
'12#.#95.6.72':445
'12#.#95.239.32':445
'12#.#95.80.158':445
'12#.#95.175.88':445
'12#.#95.75.17':445
'12#.#95.152.4':445
'12#.#95.183.70':445
'12#.#95.134.79':445
'12#.#95.223.200':445
'12#.#95.58.224':445
'12#.#95.200.183':445
'12#.#95.116.198':445
'12#.#95.65.162':445
'12#.#95.65.215':445
'12#.#95.124.32':445
'12#.#95.181.123':445
'12#.#95.32.235':445
'12#.#95.93.26':445
'12#.#95.17.4':445
'12#.#95.57.127':445
'12#.#95.70.119':445
'12#.#95.13.86':445
'12#.#95.65.252':445
'12#.#95.93.207':445
'12#.#95.183.239':445
'12#.#95.12.246':445
'12#.#95.228.12':445
'12#.#95.231.184':445
'12#.#95.219.93':445
'12#.#95.214.218':445
'12#.#95.132.178':139
'12#.#95.22.182':139
'12#.#95.207.168':445
'12#.#95.194.162':445
'12#.#95.23.5':445
'12#.#95.93.170':445
'12#.#95.234.172':445
'12#.#95.159.106':445
'12#.#95.75.199':445
'12#.#95.22.36':445
'12#.#95.206.102':445
'12#.#95.1.40':445
'12#.#95.170.1':445
'12#.#95.126.2':445
'12#.#95.163.158':445
'12#.#95.19.8':445
'12#.#95.204.133':445
'12#.#95.223.200':139
'12#.#95.58.224':139
'12#.#95.200.183':139
'12#.#95.116.198':139
'12#.#95.65.162':139
'12#.#95.75.199':139
'12#.#95.234.172':139
'12#.#95.206.102':139
'12#.#95.183.239':139
'12#.#95.22.36':139
'12#.#95.75.17':139
'12#.#95.57.127':139
'12#.#95.70.119':139
'12#.#95.13.86':139
'12#.#95.65.252':139
'12#.#95.93.207':139
'12#.#95.152.4':139
'12#.#95.175.88':139
'12#.#95.134.79':139
'12#.#95.65.215':139
'12#.#95.183.70':139
'12#.#95.159.106':139
'12#.#95.80.180':445
'12#.#95.195.223':445
'12#.#95.207.168':139
'12#.#95.194.162':139
'12#.#95.23.5':139
'12#.#95.2.138':445
'12#.#95.14.138':445
'12#.#95.227.120':445
'12#.#95.140.86':445
'12#.#95.214.209':445
'12#.#95.228.12':139
'12#.#95.1.40':139
'12#.#95.170.1':139
'12#.#95.126.2':139
'12#.#95.163.158':139
'12#.#95.19.8':139
'12#.#95.231.184':139
'12#.#95.12.246':139
'12#.#95.214.218':139
'12#.#95.93.170':139
'12#.#95.219.93':139
'12#.#95.32.139':139
'12#.#95.27.112':445
'12#.#95.147.91':445
'12#.#95.237.11':445
'12#.#95.43.246':445
'12#.#95.188.107':445
'12#.#95.195.40':445
'12#.#95.124.194':445
'12#.#95.220.188':445
'12#.#95.212.147':445
'12#.#95.177.212':445
'12#.#95.13.242':445
'12#.#95.166.198':139
'12#.#95.15.64':139
'12#.#95.72.246':139
'12#.#95.54.67':139
'12#.#95.37.215':139
'12#.#95.174.30':445
'12#.#95.240.154':445
'12#.#95.30.32':445
'12#.#95.249.199':139
'12#.#95.239.253':139
'12#.#95.30.236':445
'12#.#95.74.78':445
'12#.#95.250.199':445
'12#.#95.188.252':445
'12#.#95.99.10':445
'12#.#95.252.232':445
'12#.#95.126.34':445
'12#.#95.75.46':445
'12#.#95.81.210':445
'12#.#95.239.65':445
'12#.#95.114.113':445
'12#.#95.1.95':445
'12#.#95.14.117':445
'12#.#95.85.205':445
'12#.#95.109.213':445
'12#.#95.75.182':445
'12#.#95.191.75':445
'12#.#95.200.3':445
'12#.#95.123.51':445
'12#.#95.127.132':445
'12#.#95.14.93':445
'12#.#95.43.171':445
'12#.#95.114.240':139
'12#.#95.30.236':139
'12#.#95.75.182':139
'12#.#95.124.194':139
'12#.#95.220.188':139
'12#.#95.195.40':139
'12#.#95.85.205':139
'12#.#95.14.93':139
'12#.#95.14.117':139
'12#.#95.191.75':139
'12#.#95.109.213':139
'12#.#95.177.212':139
'12#.#95.13.242':139
'12#.#95.43.246':139
'12#.#95.240.154':139
'12#.#95.30.32':139
'12#.#95.174.30':139
'12#.#95.147.91':139
'12#.#95.212.147':139
'12#.#95.27.112':139
'12#.#95.188.107':139
'12#.#95.237.11':139
'12#.#95.43.171':139
'12#.#95.79.209':139
'12#.#95.96.45':139
'12#.#95.75.46':139
'12#.#95.81.210':139
'12#.#95.126.34':139
'12#.#95.200.13':139
'12#.#95.184.99':139
'12#.#95.56.92':139
'12#.#95.176.99':139
'12#.#95.219.176':139
'12#.#95.114.113':139
'12#.#95.1.95':139
'12#.#95.99.10':139
'12#.#95.123.51':139
'12#.#95.127.132':139
'12#.#95.200.3':139
'12#.#95.250.199':139
'12#.#95.239.65':139
'12#.#95.74.78':139
'12#.#95.252.232':139
'12#.#95.188.252':139
'12#.#95.49.64':445
'12#.#95.120.79':445
'12#.#95.120.79':139
'12#.#95.43.214':445
'12#.#95.49.64':139
'12#.#95.158.119':139
'12#.#95.181.224':139
'12#.#95.216.9':139
'12#.#95.35.142':139
'12#.#95.231.237':139
'12#.#95.129.171':445
'12#.#95.69.117':445
'12#.#95.52.212':445
'12#.#95.141.41':445
'12#.#95.43.214':139
'12#.#95.8.121':445
'12#.#95.164.7':445
'12#.#95.102.2':445
'12#.#95.194.200':445
'12#.#95.127.207':445
'12#.#95.134.68':445
'12#.#95.91.76':139
'12#.#95.45.141':139
'12#.#95.110.228':139
'12#.#95.35.78':139
'12#.#95.125.216':139
'12#.#95.91.92':139
'12#.#95.99.125':139
'12#.#95.139.99':139
'12#.#95.125.80':139
'12#.#95.176.147':139
'12#.#95.80.242':139
'12#.#95.3.61':139
'12#.#95.85.228':139
'12#.#95.173.54':139
'12#.#95.6.72':139
'12#.#95.239.32':139
'12#.#95.80.158':139
'12#.#95.25.170':139
'12#.#95.120.64':139
'12#.#95.238.218':139
'12#.#95.178.172':139
'12#.#95.12.200':139
'12#.#95.129.171':139
'12#.#95.239.253':445
'12#.#95.240.154':9988
'12#.#95.249.199':445
'12#.#95.166.198':445
'12#.#95.15.64':445
'12#.#95.174.30':9988
'12#.#95.85.205':9988
'12#.#95.212.147':9988
'12#.#95.43.171':9988
'12#.#95.124.194':9988
'12#.#95.72.246':445
'12#.#95.219.176':445
'12#.#95.56.92':445
'12#.#95.176.99':445
'12#.#95.79.209':445
'12#.#95.96.45':445
'12#.#95.54.67':445
'12#.#95.37.215':445
'12#.#95.114.240':445
'12#.#95.200.13':445
'12#.#95.184.99':445
'12#.#95.220.188':9988
'12#.#95.69.117':139
'12#.#95.52.212':139
'12#.#95.141.41':139
'12#.#95.14.117':9988
'12#.#95.8.121':139
'12#.#95.164.7':139
'12#.#95.102.2':139
'12#.#95.194.200':139
'12#.#95.127.207':139
'12#.#95.134.68':139
'12#.#95.147.91':9988
'12#.#95.237.11':9988
'12#.#95.30.236':9988
'12#.#95.43.246':9988
'12#.#95.177.212':9988
'12#.#95.30.32':9988
'12#.#95.27.112':9988
'12#.#95.195.40':9988
'12#.#95.13.242':9988
'12#.#95.188.107':9988
'12#.#95.14.93':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней