Trojan.Starman.5796

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#08.163.158':139
'21#.#08.20.65':139
'21#.#08.50.236':139
'21#.#08.55.20':139
'21#.#08.50.20':139
'21#.#08.30.245':139
'21#.#08.145.8':139
'21#.#08.245.38':139
'21#.#08.49.106':139
'21#.#08.85.19':139
'21#.#08.145.109':445
'21#.#08.46.204':445
'21#.#08.124.197':445
'21#.#08.21.111':445
'21#.#08.145.170':445
'21#.#08.111.224':445
'21#.#08.179.235':445
'21#.#08.109.139':445
'21#.#08.97.191':445
'21#.#08.71.66':445
'21#.#08.73.101':445
'21#.#08.8.10':445
'21#.#08.137.151':445
'21#.#08.145.8':445
'21#.#08.245.38':445
'21#.#08.30.245':445
'21#.#08.99.119':139
'21#.#08.188.200':139
'21#.#08.84.31':139
'21#.#08.252.207':445
'21#.#08.254.27':445
'21#.#08.85.19':445
'21#.#08.254.27':139
'21#.#08.55.20':445
'21#.#08.252.207':139
'21#.#08.8.10':139
'21#.#08.137.151':139
'21#.#08.20.65':445
'21#.#08.49.106':445
'21#.#08.163.158':445
'21#.#08.50.20':445
'21#.#08.50.236':445
'21#.#08.112.233':445
'21#.#08.179.235':139
'21#.#08.109.139':139
'21#.#08.97.191':139
'21#.#08.71.66':139
'21#.#08.73.101':139
'21#.#08.236.2':445
'21#.#08.233.235':445
'21#.#08.2.98':445
'21#.#08.145.109':139
'21#.#08.100.158':445
'21#.#08.124.197':139
'21#.#08.113.100':139
'21#.#08.239.40':139
'21#.#08.144.206':139
'21#.#08.23.64':139
'21#.#08.120.5':139
'21#.#08.21.111':139
'21#.#08.46.204':139
'21#.#08.111.224':139
'21#.#08.112.233':139
'21#.#08.145.170':139
'21#.#08.4.87':445
'21#.#08.64.4':445
'21#.#08.86.139':445
'21#.#08.53.165':445
'21#.#08.139.34':445
'21#.#08.113.100':445
'21#.#08.239.40':445
'21#.#08.144.206':445
'21#.#08.23.64':445
'21#.#08.120.5':445
'21#.#08.69.137':445
'21#.#08.214.35':445
'21#.#08.100.33':445
'21#.#08.98.67':445
'21#.#08.163.157':445
'21#.#08.255.249':445
'21#.#08.95.29':445
'21#.#08.165.204':445
'21#.#08.12.212':445
'21#.#08.209.99':445
'21#.#08.220.167':445
'21#.#08.140.143':445
'21#.#08.42.222':445
'21#.#08.149.39':445
'21#.#08.244.50':445
'21#.#08.222.9':445
'21#.#08.204.66':445
'21#.#08.74.87':445
'21#.#08.155.155':445
'21#.#08.156.206':445
'21#.#08.231.234':445
'21#.#08.82.47':445
'21#.#08.8.106':445
'21#.#08.171.116':445
'21#.#08.230.101':445
'21#.#08.33.134':445
'21#.#08.8.100':445
'21#.#08.154.119':445
'21#.#08.41.217':445
'21#.#08.91.1':445
'21#.#08.58.171':445
'21#.#08.1.59':445
'21#.#08.39.143':139
'21#.#08.216.115':139
'21#.#08.72.30':139
'21#.#08.183.146':139
'21#.#08.241.175':139
'21#.#08.36.198':139
'21#.#08.36.248':139
'21#.#08.30.145':139
'21#.#08.57.216':139
'21#.#08.220.57':139
'21#.#08.25.205':139
'21#.#08.11.8':445
'21#.#08.125.167':445
'21#.#08.219.204':445
'21#.#08.13.147':445
'21#.#08.204.1':445
'21#.#08.165.118':139
'21#.#08.142.174':139
'21#.#08.53.17':139
'21#.#08.213.159':445
'21#.#08.27.80':445
'21#.#08.23.163':445
'21#.#08.154.119':139
'21#.#08.41.217':139
'21#.#08.91.1':139
'21#.#08.58.171':139
'21#.#08.1.59':139
'21#.#08.149.39':139
'21#.#08.140.143':139
'21#.#08.222.9':139
'21#.#08.82.47':139
'21#.#08.244.50':139
'21#.#08.171.116':139
'21#.#08.25.129':139
'21#.#08.188.93':139
'21#.#08.95.70':139
'21#.#08.104.180':139
'21#.#08.29.127':139
'21#.#08.230.101':139
'21#.#08.8.106':139
'21#.#08.8.100':139
'21#.#08.23.163':139
'21#.#08.33.134':139
'21#.#08.99.119':445
'21#.#08.188.200':445
'21#.#08.84.31':445
'21#.#08.213.159':139
'21#.#08.27.80':139
'21#.#08.25.129':445
'21#.#08.188.93':445
'21#.#08.95.70':445
'21#.#08.104.180':445
'21#.#08.29.127':445
'21#.#08.125.167':139
'21#.#08.155.155':139
'21#.#08.204.66':139
'21#.#08.231.234':139
'21#.#08.42.222':139
'21#.#08.156.206':139
'21#.#08.219.204':139
'21#.#08.11.8':139
'21#.#08.204.1':139
'21#.#08.74.87':139
'21#.#08.13.147':139
'21#.#08.216.19':445
'21#.#08.66.138':445
'21#.#08.250.246':445
'21#.#08.95.62':445
'21#.#08.54.208':445
'21#.#08.56.158':445
'21#.#08.225.253':445
'21#.#08.165.142':445
'21#.#08.228.181':445
'21#.#08.175.212':445
'21#.#08.18.26':445
'21#.#08.196.40':139
'21#.#08.77.196':139
'21#.#08.30.183':139
'21#.#08.102.86':139
'21#.#08.14.8':139
'21#.#08.153.11':445
'21#.#08.44.131':445
'21#.#08.94.80':139
'21#.#08.198.144':139
'21#.#08.10.176':139
'21#.#08.46.141':445
'21#.#08.99.97':445
'21#.#08.132.76':445
'21#.#08.255.96':445
'21#.#08.19.106':445
'21#.#08.125.57':445
'21#.#08.69.60':445
'21#.#08.57.223':445
'21#.#08.217.155':445
'21#.#08.222.217':445
'21#.#08.131.240':445
'21#.#08.68.184':445
'21#.#08.174.125':445
'21#.#08.186.101':445
'21#.#08.8.16':445
'21#.#08.129.214':445
'21#.#08.237.183':445
'21#.#08.206.179':445
'21#.#08.244.29':445
'21#.#08.58.189':445
'21#.#08.131.6':445
'21#.#08.80.104':139
'21#.#08.129.214':139
'21#.#08.186.101':139
'21#.#08.8.16':139
'21#.#08.56.158':139
'21#.#08.225.253':139
'21#.#08.131.6':139
'21#.#08.244.29':139
'21#.#08.58.189':139
'21#.#08.68.184':139
'21#.#08.174.125':139
'21#.#08.165.142':139
'21#.#08.54.208':139
'21#.#08.18.26':139
'21#.#08.95.62':139
'21#.#08.153.11':139
'21#.#08.250.246':139
'21#.#08.228.181':139
'21#.#08.175.212':139
'21#.#08.66.138':139
'21#.#08.44.131':139
'21#.#08.216.19':139
'21#.#08.16.17':139
'21#.#08.42.53':139
'21#.#08.156.72':139
'21#.#08.125.57':139
'21#.#08.69.60':139
'21#.#08.85.248':139
'21#.#08.104.144':139
'21#.#08.83.145':139
'21#.#08.117.186':139
'21#.#08.95.117':139
'21#.#08.57.223':139
'21#.#08.255.96':139
'21#.#08.19.106':139
'21#.#08.131.240':139
'21#.#08.237.183':139
'21#.#08.206.179':139
'21#.#08.217.155':139
'21#.#08.222.217':139
'21#.#08.99.97':139
'21#.#08.132.76':139
'21#.#08.46.141':139
'21#.#08.188.23':445
'21#.#08.41.30':445
'21#.#08.68.117':445
'21#.#08.236.133':445
'21#.#08.6.82':445
'21#.#08.128.25':445
'21#.#08.73.128':445
'21#.#08.91.121':445
'21#.#08.100.71':445
'21#.#08.148.154':445
'21#.#08.203.181':445
'21#.#08.148.154':139
'21#.#08.91.121':139
'21#.#08.100.71':139
'21#.#08.188.23':139
'21#.#08.41.30':139
'21#.#08.22.82':445
'21#.#08.170.212':445
'21#.#08.200.72':139
'21#.#08.128.25':139
'21#.#08.73.128':139
'21#.#08.165.204':139
'21#.#08.69.137':139
'21#.#08.95.29':139
'21#.#08.220.167':139
'21#.#08.12.212':139
'21#.#08.4.87':139
'21#.#08.64.4':139
'21#.#08.86.139':139
'21#.#08.53.165':139
'21#.#08.139.34':139
'21#.#08.209.99':139
'21#.#08.236.2':139
'21#.#08.233.235':139
'21#.#08.2.98':139
'21#.#08.200.72':445
'21#.#08.100.158':139
'21#.#08.214.35':139
'21#.#08.100.33':139
'21#.#08.98.67':139
'21#.#08.163.157':139
'21#.#08.255.249':139
'21#.#08.68.117':139
'21#.#08.198.144':445
'21#.#08.10.176':445
'21#.#08.77.196':445
'21#.#08.30.183':445
'21#.#08.196.40':445
'21#.#08.153.11':9988
'21#.#08.18.26':9988
'21#.#08.44.131':9988
'21#.#08.94.80':445
'21#.#08.250.246':9988
'21#.#08.14.8':445
'21#.#08.117.186':445
'21#.#08.95.117':445
'21#.#08.42.53':445
'21#.#08.156.72':445
'21#.#08.16.17':445
'21#.#08.80.104':445
'21#.#08.102.86':445
'21#.#08.104.144':445
'21#.#08.83.145':445
'21#.#08.85.248':445
'21#.#08.186.107':139
'21#.#08.186.107':445
'21#.#08.237.183':9988
'21#.#08.255.96':9988
'21#.#08.131.240':9988
'21#.#08.236.133':139
'21#.#08.6.82':139
'21#.#08.203.181':139
'21#.#08.22.82':139
'21#.#08.170.212':139
'21#.#08.131.6':9988
'21#.#08.175.212':9988
'21#.#08.165.142':9988
'21#.#08.228.181':9988
'21#.#08.216.19':9988
'21#.#08.66.138':9988
'21#.#08.58.189':9988
'21#.#08.206.179':9988
'21#.#08.8.16':9988
'21#.#08.56.158':9988
'21#.#08.225.253':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней