Trojan.Starman.5411

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#20.187.149':445
'21#.#20.96.220':445
'21#.#20.44.9':445
'21#.#20.86.247':445
'21#.#20.26.131':445
'21#.#20.128.156':445
'21#.#20.1.250':445
'21#.#20.105.2':445
'21#.#20.23.0':445
'21#.#20.220.219':445
'21#.#20.23.155':445
'21#.#20.240.121':445
'21#.#20.204.209':445
'21#.#20.30.75':445
'21#.#20.103.167':445
'21#.#20.98.69':445
'21#.#20.192.10':445
'21#.#20.9.217':445
'21#.#20.230.67':445
'21#.#20.101.88':445
'21#.#20.33.168':445
'21#.#20.184.221':445
'21#.#20.140.115':139
'21#.#20.182.140':139
'21#.#20.152.197':139
'21#.#20.130.181':445
'21#.#20.31.243':139
'21#.#20.182.114':139
'21#.#20.179.186':139
'21#.#20.21.10':139
'21#.#20.67.147':139
'21#.#20.24.69':139
'21#.#20.169.220':139
'21#.#20.235.249':445
'21#.#20.248.233':139
'21#.#20.9.159':445
'21#.#20.95.105':445
'21#.#20.174.94':445
'21#.#20.215.55':139
'21#.#20.215.55':445
'21#.#20.178.254':445
'21#.#20.248.233':445
'21#.#20.178.254':139
'21#.#20.130.181':139
'21#.#20.220.219':139
'21#.#20.23.155':139
'21#.#20.128.156':139
'21#.#20.187.149':139
'21#.#20.96.220':139
'21#.#20.23.0':139
'21#.#20.174.94':139
'21#.#20.9.159':139
'21#.#20.95.105':139
'21#.#20.1.250':139
'21#.#20.105.2':139
'21#.#20.33.168':139
'21#.#20.184.221':139
'21#.#20.192.10':139
'21#.#20.240.121':139
'21#.#20.204.209':139
'21#.#20.101.88':139
'21#.#20.26.131':139
'21#.#20.44.9':139
'21#.#20.86.247':139
'21#.#20.9.217':139
'21#.#20.230.67':139
'21#.#20.111.21':445
'21#.#20.2.240':445
'21#.#20.68.143':445
'21#.#20.9.37':445
'21#.#20.97.160':445
'21#.#20.119.72':445
'21#.#20.219.30':445
'21#.#20.65.218':445
'21#.#20.199.106':445
'21#.#20.67.119':445
'21#.#20.92.126':445
'21#.#20.142.246':445
'21#.#20.36.230':445
'21#.#20.7.42':445
'21#.#20.235.249':139
'21#.#20.135.216':445
'21#.#20.99.59':445
'21#.#20.15.34':445
'21#.#20.9.201':445
'21#.#20.45.7':445
'21#.#20.35.189':445
'21#.#20.6.204':445
'21#.#20.82.177':445
'21#.#20.243.19':445
'21#.#20.120.248':445
'21#.#20.59.59':445
'21#.#20.247.208':445
'21#.#20.126.37':445
'21#.#20.168.186':445
'21#.120.8.3':445
'21#.#20.62.137':445
'21#.#20.97.243':445
'21#.#20.104.232':445
'21#.#20.115.29':445
'21#.#20.152.209':445
'21#.#20.21.10':445
'21#.#20.67.147':445
'21#.#20.179.186':445
'21#.#20.46.245':445
'21#.#20.213.147':445
'21#.#20.126.9':445
'21#.#20.100.232':445
'21#.#20.31.47':445
'21#.#20.187.245':445
'21#.#20.187.13':445
'21#.#20.76.187':445
'21#.#20.174.188':445
'21#.#20.251.143':445
'21#.#20.233.253':445
'21#.#20.11.77':445
'21#.#20.179.50':139
'21#.#20.9.65':139
'21#.#20.71.240':139
'21#.#20.191.172':445
'21#.#20.14.95':139
'21#.#20.70.237':445
'21#.#20.150.218':445
'21#.#20.223.166':445
'21#.#20.216.30':445
'21#.#20.166.215':445
'21#.#20.154.208':445
'21#.#20.99.213':445
'21#.#20.71.131':445
'21#.#20.213.89':445
'21#.#20.109.71':445
'21#.#20.158.48':445
'21#.#20.97.243':139
'21#.#20.104.232':139
'21#.#20.126.37':139
'21#.#20.82.177':139
'21#.#20.243.19':139
'21#.#20.62.137':139
'21#.#20.166.215':139
'21#.#20.223.166':139
'21#.#20.216.30':139
'21#.#20.168.186':139
'21#.120.8.3':139
'21#.#20.31.47':139
'21#.#20.187.245':139
'21#.#20.46.245':139
'21#.#20.115.29':139
'21#.#20.152.209':139
'21#.#20.100.232':139
'21#.#20.247.208':139
'21#.#20.120.248':139
'21#.#20.59.59':139
'21#.#20.213.147':139
'21#.#20.126.9':139
'21#.#20.191.172':139
'21#.#20.31.243':445
'21#.#20.11.77':139
'21#.#20.187.13':139
'21#.#20.76.187':139
'21#.#20.152.197':445
'21#.#20.24.69':445
'21#.#20.169.220':445
'21#.#20.182.114':445
'21#.#20.140.115':445
'21#.#20.182.140':445
'21#.#20.109.71':139
'21#.#20.158.48':139
'21#.#20.154.208':139
'21#.#20.70.237':139
'21#.#20.150.218':139
'21#.#20.213.89':139
'21#.#20.233.253':139
'21#.#20.174.188':139
'21#.#20.251.143':139
'21#.#20.99.213':139
'21#.#20.71.131':139
'21#.#20.30.75':139
'21#.#20.254.140':445
'21#.#20.29.30':445
'21#.#20.46.45':445
'21#.#20.28.84':445
'21#.#20.193.28':445
'21#.120.4.2':445
'21#.#20.246.220':445
'21#.#20.69.57':445
'21#.#20.14.245':445
'21#.#20.93.125':445
'21#.#20.245.92':445
'21#.#20.24.11':139
'21#.#20.92.165':139
'21#.#20.96.8':139
'21#.#20.216.241':139
'21#.#20.33.33':139
'21#.#20.41.74':139
'21#.#20.224.85':445
'21#.#20.89.8':445
'21#.#20.138.208':445
'21#.#20.65.49':139
'21#.#20.96.61':445
'21#.#20.122.215':445
'21#.#20.188.159':445
'21#.#20.177.66':445
'21#.#20.171.38':445
'21#.#20.209.100':445
'21#.#20.39.112':445
'21#.#20.19.78':445
'21#.#20.88.1':445
'21#.#20.143.197':445
'21#.#20.172.250':445
'21#.#20.84.120':445
'21#.#20.63.241':445
'21#.#20.25.249':445
'21#.#20.241.30':445
'21#.#20.159.230':445
'21#.#20.174.248':445
'21#.#20.162.17':445
'21#.#20.96.144':445
'21#.#20.122.60':445
'21#.#20.70.124':445
'21#.#20.52.236':445
'21#.#20.109.190':445
'21#.#20.69.57':139
'21#.#20.159.230':139
'21#.#20.246.220':139
'21#.#20.245.92':139
'21#.#20.14.245':139
'21#.#20.174.248':139
'21#.#20.162.17':139
'21#.#20.52.236':139
'21#.#20.25.249':139
'21#.#20.241.30':139
'21#.#20.63.241':139
'21#.#20.89.8':139
'21#.#20.28.84':139
'21#.#20.224.85':139
'21#.#20.96.61':139
'21#.#20.138.208':139
'21#.#20.193.28':139
'21#.120.4.2':139
'21#.#20.93.125':139
'21#.#20.29.30':139
'21#.#20.46.45':139
'21#.#20.254.140':139
'21#.#20.88.1':139
'21#.#20.118.88':139
'21#.#20.19.78':139
'21#.#20.84.120':139
'21#.#20.143.197':139
'21#.#20.125.153':139
'21#.#20.141.49':139
'21#.#20.180.189':139
'21#.#20.28.13':139
'21#.#20.236.174':139
'21#.#20.248.34':139
'21#.#20.122.60':139
'21#.#20.171.38':139
'21#.#20.96.144':139
'21#.#20.109.190':139
'21#.#20.70.124':139
'21#.#20.209.100':139
'21#.#20.39.112':139
'21#.#20.172.250':139
'21#.#20.188.159':139
'21#.#20.177.66':139
'21#.#20.122.215':139
'21#.#20.59.133':139
'21#.#20.233.250':139
'21#.#20.156.249':139
'21#.#20.74.191':445
'21#.#20.24.30':445
'21#.#20.99.162':139
'21#.#20.99.162':445
'21#.#20.135.216':139
'21#.#20.233.250':445
'21#.#20.156.249':445
'21#.#20.59.133':445
'21#.#20.207.116':445
'21#.#20.28.28':445
'21#.#20.117.53':445
'21#.#20.129.30':445
'21#.#20.37.143':445
'21#.#20.243.89':445
'21#.#20.112.95':445
'21#.#20.38.30':445
'21#.#20.247.132':445
'21#.#20.145.65':445
'21#.#20.10.162':445
'21#.#20.119.72':139
'21#.#20.67.119':139
'21#.#20.2.240':139
'21#.#20.68.143':139
'21#.#20.111.21':139
'21#.#20.92.126':139
'21#.#20.103.167':139
'21#.#20.98.69':139
'21#.#20.65.218':139
'21#.#20.199.106':139
'21#.#20.219.30':139
'21#.#20.99.59':139
'21#.#20.35.189':139
'21#.#20.36.230':139
'21#.#20.7.42':139
'21#.#20.142.246':139
'21#.#20.6.204':139
'21#.#20.9.37':139
'21#.#20.97.160':139
'21#.#20.9.201':139
'21#.#20.45.7':139
'21#.#20.15.34':139
'21#.#20.122.215':9988
'21#.#20.174.248':9988
'21#.#20.65.49':445
'21#.#20.92.165':445
'21#.#20.41.74':445
'21#.#20.96.61':9988
'21#.#20.69.57':9988
'21#.#20.171.38':9988
'21#.#20.46.45':9988
'21#.#20.245.92':9988
'21#.#20.25.249':9988
'21#.#20.248.34':445
'21#.#20.28.13':445
'21#.#20.236.174':445
'21#.#20.118.88':445
'21#.#20.125.153':445
'21#.#20.141.49':445
'21#.#20.96.8':445
'21#.#20.24.11':445
'21#.#20.33.33':445
'21#.#20.180.189':445
'21#.#20.216.241':445
'21#.#20.243.89':139
'21#.#20.145.65':139
'21#.#20.28.28':139
'21#.#20.117.53':139
'21#.#20.207.116':139
'21#.#20.10.162':139
'21#.#20.74.191':139
'21#.#20.24.30':139
'21#.#20.38.30':139
'21#.#20.247.132':139
'21#.#20.112.95':139
'21#.#20.246.220':9988
'21#.#20.138.208':9988
'21#.#20.159.230':9988
'21#.#20.193.28':9988
'21#.#20.254.140':9988
'21#.#20.93.125':9988
'21#.#20.129.30':139
'21#.#20.37.143':139
'21#.#20.14.245':9988
'21#.#20.28.84':9988
'21#.#20.224.85':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней