Trojan.Starman.5440

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#7.116.190':445
'21#.#7.47.252':445
'21#.#7.194.119':445
'21#.#7.154.59':445
'21#.#7.43.20':445
'21#.#7.38.233':445
'21#.#7.55.191':445
'21#.#7.48.217':445
'21#.#7.145.151':445
'21#.#7.66.240':445
'21#.17.0.39':445
'21#.#7.39.182':445
'21#.#7.59.157':445
'21#.#7.142.17':139
'21#.#7.136.155':445
'21#.#7.104.218':445
'21#.#7.170.131':139
'21#.#7.226.134':139
'21#.#7.87.125':139
'21#.#7.83.20':445
'21#.#7.48.134':445
'21#.#7.156.208':445
'21#.#7.229.36':445
'21#.#7.234.37':445
'21#.#7.10.234':445
'21#.#7.83.152':445
'21#.#7.40.186':445
'21#.#7.222.217':445
'21#.#7.74.154':445
'21#.#7.29.73':445
'21#.#7.157.67':445
'21#.#7.185.224':445
'21#.#7.48.197':445
'21#.#7.170.131':445
'21#.#7.226.134':445
'21#.#7.160.110':445
'21#.#7.66.160':445
'21#.#7.146.210':445
'21#.#7.185.68':445
'21#.#7.150.79':445
'21#.#7.8.150':445
'21#.#7.115.182':445
'21#.#7.41.122':445
'21#.#7.244.246':445
'21#.#7.95.164':445
'21#.#7.218.149':445
'21#.#7.116.218':445
'21#.#7.202.118':445
'21#.#7.79.181':445
'21#.#7.118.134':445
'21#.#7.160.98':445
'21#.#7.43.20':139
'21#.#7.38.233':139
'21#.#7.116.190':139
'21#.#7.156.208':139
'21#.#7.59.157':139
'21#.#7.154.59':139
'21#.17.0.39':139
'21#.#7.39.182':139
'21#.#7.55.191':139
'21#.#7.47.252':139
'21#.#7.194.119':139
'21#.#7.66.240':139
'21#.#7.48.134':139
'21#.#7.146.99':139
'21#.#7.36.71':445
'21#.#7.146.99':445
'21#.17.12.5':445
'21#.#7.205.52':445
'21#.#7.36.71':139
'21#.#7.234.37':139
'21#.#7.10.234':139
'21#.#7.83.20':139
'21#.#7.136.155':139
'21#.#7.104.218':139
'21#.#7.229.36':139
'21#.#7.48.217':139
'21#.#7.157.67':139
'21#.#7.185.224':139
'21#.#7.40.186':139
'21#.#7.202.118':139
'21#.#7.185.68':139
'21#.#7.29.73':139
'21#.#7.66.160':139
'21#.#7.146.210':139
'21#.#7.48.197':139
'21#.#7.222.217':139
'21#.#7.74.154':139
'21#.#7.160.110':139
'21#.#7.116.218':139
'21#.#7.244.246':139
'21#.#7.95.164':139
'21#.#7.150.79':139
'21#.#7.145.151':139
'21#.#7.83.152':139
'21#.#7.41.122':139
'21#.#7.118.134':139
'21#.#7.160.98':139
'21#.#7.218.149':139
'21#.#7.8.150':139
'21#.#7.115.182':139
'21#.#7.79.181':139
'21#.#7.87.125':445
'21#.17.8.95':445
'21#.#7.224.184':445
'21#.#7.83.98':445
'21#.#7.108.37':445
'21#.#7.200.20':445
'21#.#7.238.247':445
'21#.#7.54.228':445
'21#.#7.108.38':445
'21#.#7.203.178':445
'21#.#7.86.230':445
'21#.#7.245.141':445
'21#.#7.210.2':445
'21#.#7.208.80':445
'21#.#7.69.238':445
'21#.#7.141.95':445
'21#.#7.17.198':445
'21#.#7.178.160':139
'21#.#7.198.245':139
'21#.#7.42.100':139
'21#.#7.65.151':445
'21#.#7.20.232':445
'21#.#7.87.75':445
'21#.#7.70.165':445
'21#.#7.82.44':445
'21#.#7.32.20':445
'21#.#7.223.5':445
'21#.#7.212.22':445
'21#.#7.182.213':445
'21#.#7.52.35':445
'21#.#7.185.187':445
'21#.#7.45.90':445
'21#.#7.31.212':445
'21#.#7.54.204':445
'21#.#7.178.160':445
'21#.#7.198.245':445
'21#.#7.40.29':445
'21#.#7.238.148':445
'21#.17.62.0':445
'21#.#7.84.58':445
'21#.17.83.6':445
'21#.#7.155.227':445
'21#.#7.117.64':445
'21#.#7.142.223':445
'21#.#7.102.21':445
'21#.#7.84.203':445
'21#.#7.108.7':445
'21#.#7.19.212':445
'21#.#7.141.41':445
'21#.#7.101.138':445
'21#.#7.133.218':445
'21#.#7.22.172':445
'21#.#7.200.20':139
'21#.#7.238.247':139
'21#.17.8.95':139
'21#.#7.87.75':139
'21#.#7.208.80':139
'21#.#7.108.37':139
'21#.#7.245.141':139
'21#.#7.210.2':139
'21#.#7.54.228':139
'21#.#7.224.184':139
'21#.#7.83.98':139
'21#.#7.86.230':139
'21#.#7.20.232':139
'21#.17.2.51':445
'21#.#7.81.63':445
'21#.#7.141.95':139
'21#.#7.142.17':445
'21#.17.2.51':139
'21#.#7.81.63':139
'21#.#7.82.44':139
'21#.#7.32.20':139
'21#.#7.65.151':139
'21#.#7.69.238':139
'21#.#7.17.198':139
'21#.#7.70.165':139
'21#.#7.108.38':139
'21#.#7.45.90':139
'21#.#7.212.22':139
'21#.#7.31.212':139
'21#.#7.141.41':139
'21#.#7.84.58':139
'21#.#7.185.187':139
'21#.#7.238.148':139
'21#.17.62.0':139
'21#.#7.54.204':139
'21#.#7.182.213':139
'21#.#7.52.35':139
'21#.#7.40.29':139
'21#.#7.19.212':139
'21#.#7.102.21':139
'21#.#7.84.203':139
'21#.17.83.6':139
'21#.#7.203.178':139
'21#.#7.223.5':139
'21#.#7.142.223':139
'21#.#7.133.218':139
'21#.#7.22.172':139
'21#.#7.108.7':139
'21#.#7.155.227':139
'21#.#7.117.64':139
'21#.#7.101.138':139
'21#.#7.125.155':445
'21#.#7.153.207':445
'21#.#7.54.15':445
'21#.#7.11.143':445
'21#.#7.250.153':445
'21#.#7.11.236':445
'21#.#7.70.100':445
'21#.#7.147.218':445
'21#.#7.159.141':445
'21#.#7.145.208':445
'21#.#7.237.252':445
'21#.#7.84.238':445
'21#.#7.48.87':445
'21#.#7.218.212':445
'21#.#7.185.181':445
'21#.#7.40.164':445
'21#.#7.121.182':445
'21#.#7.118.235':445
'21#.#7.72.42':445
'21#.#7.60.111':445
'21#.#7.177.101':445
'21#.#7.101.223':445
'21#.#7.150.33':445
'21#.#7.54.119':445
'21#.#7.101.159':445
'21#.#7.27.82':445
'21#.#7.182.145':445
'21#.#7.236.51':445
'21#.#7.93.139':445
'21#.#7.218.236':445
'21#.#7.52.22':445
'21#.#7.93.137':445
'21#.#7.149.219':445
'21#.#7.62.185':445
'21#.#7.103.146':445
'21#.#7.34.142':445
'21#.#7.189.37':445
'21#.#7.216.34':445
'21#.17.9.1':445
'21#.#7.9.143':445
'21#.#7.231.147':445
'21#.#7.88.40':445
'21#.#7.18.213':445
'21#.#7.166.181':445
'21#.#7.69.161':445
'21#.#7.21.230':445
'21#.#7.70.60':445
'21#.#7.165.33':445
'21#.#7.99.127':445
'21#.#7.147.203':445
'21#.#7.82.173':445
'21#.#7.159.209':445
'21#.#7.153.207':139
'21#.#7.54.15':139
'21#.#7.11.143':139
'21#.#7.250.153':139
'21#.#7.11.236':139
'21#.#7.70.100':139
'21#.#7.147.218':139
'21#.#7.159.141':139
'21#.#7.145.208':139
'21#.#7.237.252':139
'21#.#7.84.238':139
'21#.#7.48.87':139
'21#.#7.218.212':139
'21#.#7.54.119':139
'21#.#7.40.164':139
'21#.#7.72.42':139
'21#.#7.185.181':139
'21#.#7.118.235':139
'21#.#7.60.111':139
'21#.#7.101.223':139
'21#.#7.177.101':139
'21#.#7.150.33':139
'21#.#7.121.182':139
'21#.#7.101.159':139
'21#.#7.27.82':139
'21#.#7.182.145':139
'21#.#7.149.219':139
'21#.#7.189.37':139
'21#.17.9.1':139
'21#.#7.52.22':139
'21#.#7.236.51':139
'21#.#7.218.236':139
'21#.#7.62.185':139
'21#.#7.103.146':139
'21#.#7.34.142':139
'21#.#7.216.34':139
'21#.#7.93.139':139
'21#.#7.93.137':139
'21#.#7.9.143':139
'21#.#7.231.147':139
'21#.#7.88.40':139
'21#.#7.18.213':139
'21#.#7.166.181':139
'21#.#7.69.161':139
'21#.#7.21.230':139
'21#.#7.70.60':139
'21#.#7.165.33':139
'21#.#7.99.127':139
'21#.#7.147.203':139
'21#.#7.82.173':139
'21#.#7.159.209':139
'21#.#7.54.119':9988
'21#.#7.135.44':445
'21#.#7.181.226':445
'21#.#7.182.203':445
'21#.#7.99.136':445
'21#.#7.194.251':445
'21#.#7.94.173':445
'21#.#7.104.80':445
'21#.#7.39.16':445
'21#.#7.250.73':445
'21#.#7.25.228':445
'21#.#7.82.26':445
'21#.#7.228.110':445
'21#.#7.71.63':445
'21#.17.12.5':139
'21#.#7.205.52':139
'21#.#7.231.30':445
'21#.17.2.72':139
'21#.#7.155.1':139
'21#.#7.125.155':139
'21#.#7.106.13':445
'21#.#7.48.106':445
'21#.#7.94.48':445
'21#.#7.29.220':445
'21#.#7.209.158':445
'21#.#7.41.172':445
'21#.#7.243.7':445
'21#.#7.65.94':445
'21#.#7.83.129':445
'21#.#7.108.2':445
'21#.#7.177.168':445
'21#.#7.161.118':445
'21#.#7.203.26':445
'21#.#7.71.118':445
'21#.17.2.72':445
'21#.#7.155.1':445
'21#.#7.24.87':445
'21#.#7.208.227':445
'21#.#7.117.208':445
'21#.#7.169.89':445
'21#.#7.67.62':445
'21#.#7.15.181':445
'21#.#7.240.136':445
'21#.#7.173.225':445
'21#.#7.151.220':445
'21#.#7.134.59':445
'21#.#7.32.85':445
'21#.#7.79.164':445
'21#.#7.99.177':445
'21#.#7.112.213':445
'21#.#7.236.251':445
'21#.#7.125.237':445
'21#.#7.194.251':139
'21#.#7.94.173':139
'21#.#7.135.44':139
'21#.#7.94.48':139
'21#.#7.71.63':139
'21#.#7.99.136':139
'21#.#7.82.26':139
'21#.#7.228.110':139
'21#.#7.104.80':139
'21#.#7.181.226':139
'21#.#7.182.203':139
'21#.#7.25.228':139
'21#.#7.48.106':139
'21#.#7.182.145':9988
'21#.#7.69.161':9988
'21#.#7.82.173':9988
'21#.#7.250.153':9988
'21#.#7.70.100':9988
'21#.#7.159.141':9988
'21#.#7.209.158':139
'21#.#7.41.172':139
'21#.#7.106.13':139
'21#.#7.99.127':9988
'21#.#7.231.30':139
'21#.#7.29.220':139
'21#.#7.39.16':139
'21#.#7.161.118':139
'21#.#7.203.26':139
'21#.#7.65.94':139
'21#.#7.99.177':139
'21#.#7.169.89':139
'21#.#7.177.168':139
'21#.#7.208.227':139
'21#.#7.117.208':139
'21#.#7.71.118':139
'21#.#7.83.129':139
'21#.#7.108.2':139
'21#.#7.24.87':139
'21#.#7.79.164':139
'21#.#7.151.220':139
'21#.#7.134.59':139
'21#.#7.67.62':139
'21#.#7.250.73':139
'21#.#7.243.7':139
'21#.#7.173.225':139
'21#.#7.236.251':139
'21#.#7.125.237':139
'21#.#7.32.85':139
'21#.#7.15.181':139
'21#.#7.240.136':139
'21#.#7.112.213':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней