Trojan.Starman.5435

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#80.178.253':139
'21#.#80.137.179':139
'21#.#80.222.77':139
'21#.#80.19.205':139
'21#.#80.206.144':139
'21#.#80.8.209':139
'21#.#80.254.178':139
'21#.#80.25.250':139
'21#.#80.1.158':139
'21#.#80.45.226':139
'21#.#80.87.173':139
'21#.#80.179.87':139
'21#.#80.47.9':139
'21#.#80.153.210':445
'21#.#80.168.210':445
'21#.#80.6.228':445
'21#.#80.23.245':445
'21#.#80.186.216':445
'21#.#80.210.186':445
'21#.#80.77.177':139
'21#.#80.161.202':139
'21#.#80.107.250':139
'21#.#80.159.45':445
'21#.#80.238.42':139
'21#.#80.4.238':139
'21#.#80.77.177':445
'21#.#80.161.202':445
'21#.#80.107.250':445
'21#.#80.151.180':139
'21#.#80.238.42':445
'21#.#80.4.238':445
'21#.#80.8.209':445
'21#.#80.178.253':445
'21#.#80.137.179':445
'21#.#80.47.9':445
'21#.#80.19.205':445
'21#.#80.206.144':445
'21#.180.8.0':139
'21#.#80.189.238':139
'21#.#80.182.189':139
'21#.#80.40.31':139
'21#.#80.59.182':139
'21#.#80.29.252':139
'21#.#80.143.125':139
'21#.#80.55.239':139
'21#.#80.151.71':139
'21#.#80.226.111':139
'21#.#80.159.136':139
'21#.#80.88.167':139
'21#.#80.69.226':139
'21#.#80.27.41':445
'21#.#80.121.16':445
'21#.#80.10.17':445
'21#.#80.157.153':445
'21#.#80.10.158':445
'21#.#80.230.74':445
'21#.#80.113.35':139
'21#.#80.64.14':139
'21#.#80.87.63':139
'21#.#80.100.202':139
'21#.#80.52.217':139
'21#.#80.238.133':139
'21#.#80.154.106':445
'21#.#80.32.131':445
'21#.#80.15.20':445
'21#.#80.39.50':445
'21#.#80.30.184':445
'21#.#80.202.13':445
'21#.#80.73.202':445
'21#.#80.255.58':445
'21#.#80.192.87':445
'21#.#80.167.218':445
'21#.#80.227.167':445
'21#.#80.26.239':445
'21#.#80.138.62':445
'21#.#80.113.35':445
'21#.#80.64.14':445
'21#.#80.87.63':445
'21#.#80.100.202':445
'21#.#80.52.217':445
'21#.#80.238.133':445
'21#.#80.112.195':445
'21#.#80.137.196':445
'21#.#80.130.137':445
'21#.#80.65.186':445
'21#.#80.197.112':445
'21#.#80.231.171':445
'21#.#80.159.45':139
'21#.#80.197.112':139
'21#.#80.137.196':139
'21#.#80.130.137':139
'21#.#80.65.186':139
'21#.#80.231.171':139
'21#.#80.112.195':139
'21#.#80.153.210':139
'21#.#80.168.210':139
'21#.#80.6.228':139
'21#.#80.23.245':139
'21#.#80.186.216':139
'21#.#80.210.186':139
'21#.#80.222.77':445
'21#.#80.249.104':139
'21#.#80.199.204':139
'21#.#80.66.130':139
'21#.#80.63.232':139
'21#.#80.33.147':139
'21#.#80.243.108':139
'21#.#80.176.146':139
'21#.#80.139.176':139
'21#.#80.89.139':139
'21#.#80.4.46':139
'21#.#80.147.252':139
'21#.#80.164.136':139
'21#.#80.142.195':139
'21#.#80.167.196':445
'21#.#80.164.128':445
'21#.#80.64.152':445
'21#.#80.46.20':445
'21#.#80.136.49':445
'21#.#80.116.110':445
'21#.#80.78.132':139
'21#.#80.253.60':139
'21#.#80.255.253':139
'21#.#80.236.108':445
'21#.#80.186.166':445
'21#.#80.237.186':139
'21#.#80.78.132':445
'21#.#80.253.60':445
'21#.#80.255.253':445
'21#.#80.93.133':139
'21#.#80.28.81':139
'21#.#80.237.186':445
'21#.#80.243.108':445
'21#.#80.249.104':445
'21#.#80.199.204':445
'21#.#80.142.195':445
'21#.#80.63.232':445
'21#.#80.33.147':445
'21#.#80.6.205':139
'21#.#80.132.222':139
'21#.#80.152.163':139
'21#.#80.27.152':139
'21#.#80.9.22':139
'21#.#80.203.96':139
'21#.#80.172.50':139
'21#.#80.149.17':139
'21#.#80.221.127':139
'21#.#80.63.108':139
'21#.#80.36.27':139
'21#.#80.62.36':139
'21#.#80.3.126':139
'21#.#80.151.71':445
'21#.#80.226.111':445
'21#.180.8.0':445
'21#.#80.88.167':445
'21#.#80.69.226':445
'21#.#80.55.239':445
'21#.#80.33.15':139
'21#.#80.59.67':139
'21#.#80.109.170':139
'21#.#80.151.180':445
'21#.#80.115.170':139
'21#.#80.186.73':139
'21#.#80.159.136':445
'21#.#80.254.178':445
'21#.#80.25.250':445
'21#.#80.1.158':445
'21#.#80.45.226':445
'21#.#80.87.173':445
'21#.#80.179.87':445
'21#.#80.182.189':445
'21#.#80.189.238':445
'21#.#80.40.31':445
'21#.#80.59.182':445
'21#.#80.29.252':445
'21#.#80.143.125':445
'21#.#80.33.15':445
'21#.#80.59.67':445
'21#.#80.109.170':445
'21#.#80.186.166':139
'21#.#80.115.170':445
'21#.#80.186.73':445
'21#.#80.197.30':445
'21#.#80.53.100':445
'21#.#80.116.136':445
'21#.#80.49.160':445
'21#.#80.94.65':445
'21#.#80.30.94':445
'21#.#80.236.108':139
'21#.#80.197.30':139
'21#.#80.53.100':139
'21#.#80.116.136':139
'21#.#80.49.160':139
'21#.#80.94.65':139
'21#.#80.30.94':139
'21#.#80.167.196':139
'21#.#80.164.128':139
'21#.#80.64.152':139
'21#.#80.46.20':139
'21#.#80.136.49':139
'21#.#80.116.110':139
'21#.#80.249.239':445
'21#.#80.60.195':445
'21#.#80.230.238':445
'21#.#80.52.93':445
'21#.#80.160.233':445
'21#.#80.177.126':445
'21#.#80.44.170':445
'21#.#80.149.100':445
'21#.#80.134.85':445
'21#.#80.24.106':445
'21#.#80.82.134':445
'21#.#80.170.167':445
'21#.#80.11.56':445
'21#.#80.227.205':445
'21#.#80.13.123':445
'21#.#80.155.58':445
'21#.#80.62.207':139
'21#.#80.205.117':445
'21#.#80.140.249':445
'21#.#80.66.47':445
'21#.#80.141.182':445
'21#.#80.114.103':445
'21#.#80.48.132':445
'21#.#80.164.121':445
'21#.#80.235.226':445
'21#.#80.20.125':445
'21#.#80.238.67':445
'21#.#80.227.204':445
'21#.#80.104.117':445
'21#.#80.165.95':445
'21#.#80.133.165':445
'21#.#80.215.0':445
'21#.#80.213.186':445
'21#.#80.2.54':445
'21#.#80.89.156':445
'21#.#80.197.81':445
'21#.#80.102.197':445
'21#.#80.242.102':445
'21#.#80.148.60':445
'21#.#80.68.54':445
'21#.#80.250.57':445
'21#.#80.28.227':445
'21#.#80.160.28':445
'21#.#80.117.117':445
'21#.#80.247.21':445
'21#.#80.248.234':445
'21#.#80.168.248':445
'21#.#80.44.250':445
'21#.#80.92.45':445
'21#.#80.87.92':445
'21#.#80.60.195':139
'21#.#80.230.238':139
'21#.#80.24.106':139
'21#.#80.160.233':139
'21#.#80.177.126':139
'21#.#80.249.239':139
'21#.#80.149.100':139
'21#.#80.134.85':139
'21#.#80.28.227':139
'21#.#80.82.134':139
'21#.#80.170.167':139
'21#.#80.44.170':139
'21#.#80.52.93':139
'21#.#80.164.121':139
'21#.#80.205.117':139
'21#.#80.140.249':139
'21#.#80.155.58':139
'21#.#80.227.205':139
'21#.#80.13.123':139
'21#.#80.141.182':139
'21#.#80.114.103':139
'21#.#80.11.56':139
'21#.#80.48.132':139
'21#.#80.235.226':139
'21#.#80.66.47':139
'21#.#80.238.67':139
'21#.#80.227.204':139
'21#.#80.89.156':139
'21#.#80.165.95':139
'21#.#80.133.165':139
'21#.#80.20.125':139
'21#.#80.213.186':139
'21#.#80.2.54':139
'21#.#80.58.7':139
'21#.#80.197.81':139
'21#.#80.102.197':139
'21#.#80.215.0':139
'21#.#80.104.117':139
'21#.#80.68.54':139
'21#.#80.250.57':139
'21#.#80.44.250':139
'21#.#80.160.28':139
'21#.#80.117.117':139
'21#.#80.148.60':139
'21#.#80.248.234':139
'21#.#80.168.248':139
'21#.#80.242.102':139
'21#.#80.92.45':139
'21#.#80.87.92':139
'21#.#80.247.21':139
'21#.#80.58.7':445
'21#.#80.75.146':139
'21#.#80.179.175':139
'21#.#80.30.184':139
'21#.#80.232.27':139
'21#.#80.41.246':139
'21#.#80.13.201':139
'21#.#80.15.20':139
'21#.#80.39.50':139
'21#.#80.227.167':139
'21#.#80.202.13':139
'21#.#80.73.202':139
'21#.#80.32.131':139
'21#.#80.115.132':139
'21#.#80.60.181':445
'21#.#80.192.202':445
'21#.#80.113.23':139
'21#.#80.210.65':445
'21#.#80.5.166':445
'21#.#80.143.134':445
'21#.#80.209.88':139
'21#.#80.220.128':139
'21#.#80.40.113':139
'21#.#80.87.113':139
'21#.#80.101.200':139
'21#.#80.193.54':139
'21#.#80.209.88':445
'21#.#80.220.128':445
'21#.#80.40.113':445
'21#.#80.87.113':445
'21#.#80.101.200':445
'21#.#80.193.54':445
'21#.#80.13.201':445
'21#.#80.75.146':445
'21#.#80.179.175':445
'21#.#80.115.132':445
'21#.#80.232.27':445
'21#.#80.41.246':445
'21#.#80.113.23':445
'21#.#80.192.87':139
'21#.#80.167.218':139
'21#.#80.154.106':139
'21#.#80.26.239':139
'21#.#80.138.62':139
'21#.#80.255.58':139
'21#.#80.27.41':139
'21#.#80.121.16':139
'21#.#80.10.17':139
'21#.#80.157.153':139
'21#.#80.10.158':139
'21#.#80.230.74':139
'21#.#80.117.117':9988
'21#.#80.38.63':139
'21#.#80.5.154':139
'21#.#80.149.100':9988
'21#.#80.134.85':9988
'21#.#80.28.227':9988
'21#.#80.1.28':139
'21#.#80.70.171':139
'21#.#80.129.61':139
'21#.#80.17.177':139
'21#.#80.55.18':139
'21#.#80.144.4':139
'21#.#80.170.167':9988
'21#.#80.155.58':9988
'21#.#80.141.182':9988
'21#.#80.114.103':9988
'21#.#80.62.207':445
'21#.#80.140.249':9988
'21#.#80.205.117':9988
'21#.#80.177.126':9988
'21#.#80.249.239':9988
'21#.#80.60.195':9988
'21#.#80.11.56':9988
'21#.#80.52.93':9988
'21#.#80.160.233':9988
'21#.#80.70.171':445
'21#.#80.1.28':445
'21#.#80.129.61':445
'21#.#80.17.177':445
'21#.#80.55.18':445
'21#.#80.144.4':445
'21#.#80.210.105':445
'21#.#80.125.210':445
'21#.#80.93.193':445
'21#.#80.106.191':445
'21#.#80.24.119':445
'21#.#80.106.105':445
'21#.#80.5.154':445
'21#.#80.210.105':139
'21#.#80.125.210':139
'21#.#80.93.193':139
'21#.#80.106.191':139
'21#.#80.24.119':139
'21#.#80.106.105':139
'21#.#80.60.181':139
'21#.#80.192.202':139
'21#.#80.38.63':445
'21#.#80.210.65':139
'21#.#80.5.166':139
'21#.#80.143.134':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней