Trojan.Starman.5913

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#13.140.234':139
'22#.#13.124.141':139
'22#.#13.76.124':139
'22#.#13.74.34':139
'22#.#13.179.13':139
'22#.#13.235.69':139
'22#.#13.8.76':139
'22#.#13.232.51':445
'22#.#13.112.80':445
'22#.#13.139.77':445
'22#.#13.164.183':139
'22#.#13.42.245':139
'22#.#13.0.50':445
'22#.#13.63.188':139
'22#.#13.3.188':139
'22#.#13.163.165':139
'22#.#13.112.80':139
'22#.#13.139.77':139
'22#.#13.128.82':139
'22#.#13.97.161':139
'22#.#13.17.160':139
'22#.#13.65.137':139
'22#.#13.16.20':139
'22#.#13.63.69':139
'22#.#13.253.240':139
'22#.#13.84.108':139
'22#.#13.128.82':445
'22#.#13.8.76':445
'22#.#13.164.183':445
'22#.#13.42.245':445
'22#.#13.140.234':445
'22#.#13.124.141':445
'22#.#13.76.124':445
'22#.#13.37.43':139
'22#.#13.65.192':139
'22#.#13.10.183':139
'22#.#13.209.186':139
'22#.#13.91.232':139
'22#.#13.62.57':139
'22#.#13.183.162':139
'22#.#13.97.161':445
'22#.#13.63.69':445
'22#.#13.253.240':445
'22#.#13.63.188':445
'22#.#13.163.165':445
'22#.#13.3.188':445
'22#.#13.84.108':445
'22#.#13.74.34':445
'22#.#13.179.13':445
'22#.#13.235.69':445
'22#.#13.17.160':445
'22#.#13.65.137':445
'22#.#13.16.20':445
'22#.#13.214.131':139
'22#.#13.80.214':139
'22#.#13.137.222':139
'22#.#13.138.32':139
'22#.#13.50.25':139
'22#.#13.66.206':139
'22#.#13.81.242':139
'22#.#13.13.67':139
'22#.#13.69.124':445
'22#.#13.5.69':445
'22#.#13.203.254':139
'22#.#13.205.92':139
'22#.#13.217.182':139
'22#.#13.231.111':139
'22#.#13.143.210':139
'22#.#13.188.143':139
'22#.#13.169.239':139
'22#.#13.31.190':139
'22#.#13.159.184':139
'22#.#13.162.188':139
'22#.#13.77.34':139
'22#.#13.249.95':139
'22#.#13.246.237':139
'22#.#13.161.162':139
'22#.#13.222.161':139
'22#.#13.136.222':139
'22#.#13.95.4':445
'22#.#13.214.131':445
'22#.#13.80.214':445
'22#.#13.137.222':445
'22#.#13.138.32':445
'22#.#13.66.206':445
'22#.#13.50.25':445
'22#.#13.81.242':445
'22#.#13.205.92':445
'22#.#13.0.50':139
'22#.#13.232.51':139
'22#.#13.203.254':445
'22#.#13.217.182':445
'22#.#13.13.67':445
'22#.#13.231.111':445
'22#.#13.143.210':445
'22#.#13.188.143':445
'22#.#13.169.239':445
'22#.#13.31.190':445
'22#.#13.159.184':445
'22#.#13.162.188':445
'22#.#13.77.34':445
'22#.#13.249.95':445
'22#.#13.246.237':445
'22#.#13.161.162':445
'22#.#13.136.222':445
'22#.#13.222.161':445
'22#.#13.174.22':139
'22#.#13.71.219':139
'22#.#13.53.122':445
'22#.#13.47.166':139
'22#.#13.169.124':139
'22#.#13.23.21':139
'22#.#13.152.82':445
'22#.#13.91.218':445
'22#.#13.155.84':445
'22#.#13.249.27':445
'22#.#13.171.238':445
'22#.#13.225.78':445
'22#.#13.115.251':445
'22#.#13.161.94':139
'22#.#13.13.223':139
'22#.#13.99.91':139
'22#.#13.155.84':139
'22#.#13.249.27':139
'22#.#13.95.42':139
'22#.#13.174.46':139
'22#.#13.94.20':139
'22#.#13.253.40':139
'22#.#13.124.230':139
'22#.#13.5.175':139
'22#.#13.192.52':139
'22#.#13.133.74':139
'22#.#13.95.42':445
'22#.#13.214.141':139
'22#.#13.56.127':139
'22#.#13.137.212':139
'22#.#13.174.22':445
'22#.#13.71.219':445
'22#.113.2.2':139
'22#.#13.62.245':139
'22#.#13.68.169':139
'22#.#13.205.134':139
'22#.#13.86.88':139
'22#.#13.3.249':139
'22#.#13.38.130':139
'22#.#13.169.37':139
'22#.#13.174.46':445
'22#.#13.5.175':445
'22#.#13.192.52':445
'22#.#13.13.223':445
'22#.#13.161.94':445
'22#.#13.99.91':445
'22#.#13.133.74':445
'22#.#13.47.166':445
'22#.#13.169.124':445
'22#.#13.23.21':445
'22#.#13.94.20':445
'22#.#13.253.40':445
'22#.#13.124.230':445
'22#.#13.209.183':139
'22#.#13.137.1':139
'22#.#13.115.23':139
'22#.#13.192.228':139
'22#.#13.21.91':139
'22#.#13.60.89':139
'22#.#13.225.67':139
'22#.#13.183.162':445
'22#.#13.65.192':445
'22#.#13.10.183':445
'22#.#13.37.43':445
'22#.#13.91.232':445
'22#.#13.62.57':445
'22#.#13.150.169':139
'22#.#13.120.38':139
'22#.#13.187.148':139
'22#.#13.183.233':139
'22#.#13.162.198':139
'22#.#13.42.212':139
'22#.#13.147.187':139
'22#.#13.163.189':139
'22#.#13.22.239':139
'22#.#13.228.78':139
'22#.#13.81.147':139
'22#.#13.217.89':139
'22#.#13.48.183':139
'22#.#13.209.186':445
'22#.#13.209.183':445
'22#.#13.137.1':445
'22#.#13.115.23':445
'22#.#13.192.228':445
'22#.#13.21.91':445
'22#.#13.60.89':445
'22#.#13.225.67':445
'22#.#13.171.238':139
'22#.#13.91.218':139
'22#.#13.115.251':139
'22#.#13.53.122':139
'22#.#13.152.82':139
'22#.#13.225.78':139
'22#.#13.150.169':445
'22#.#13.120.38':445
'22#.#13.187.148':445
'22#.#13.183.233':445
'22#.#13.162.198':445
'22#.#13.42.212':445
'22#.#13.147.187':445
'22#.#13.163.189':445
'22#.#13.22.239':445
'22#.#13.228.78':445
'22#.#13.81.147':445
'22#.#13.217.89':445
'22#.#13.48.183':445
'22#.#13.95.4':139
'22#.#13.78.175':445
'22#.#13.38.2':445
'22#.#13.130.247':445
'22#.#13.23.197':445
'22#.#13.62.240':445
'22#.#13.216.62':445
'22#.#13.196.140':445
'22#.#13.28.6':445
'22#.#13.117.126':445
'22#.#13.188.23':445
'22#.#13.61.19':445
'22#.#13.98.146':445
'22#.#13.34.88':445
'22#.#13.231.214':445
'22#.#13.87.81':445
'22#.#13.23.163':445
'22#.#13.96.168':445
'22#.#13.13.184':445
'22#.#13.197.62':445
'22#.#13.253.141':445
'22#.#13.165.25':445
'22#.#13.30.172':445
'22#.#13.16.40':445
'22#.#13.128.176':445
'22#.#13.4.217':445
'22#.#13.89.104':445
'22#.#13.198.195':445
'22#.#13.29.114':445
'22#.#13.172.177':445
'22#.#13.136.212':445
'22#.#13.38.233':445
'22#.#13.220.69':445
'22#.#13.186.138':445
'22#.#13.176.102':445
'22#.#13.87.81':9988
'22#.#13.23.163':9988
'22#.#13.128.176':9988
'22#.#13.217.227':445
'22#.#13.91.254':445
'22#.#13.60.113':9988
'22#.#13.89.84':445
'22#.#13.62.207':445
'22#.#13.56.181':445
'22#.#13.31.169':445
'22#.#13.109.181':445
'22#.#13.230.52':445
'22#.#13.87.94':445
'22#.#13.114.171':445
'22#.#13.77.51':445
'22#.#13.235.101':445
'22#.#13.48.87':445
'22#.#13.254.47':445
'22#.#13.107.234':445
'22#.#13.62.240':139
'22#.#13.216.62':139
'22#.#13.78.175':139
'22#.#13.30.172':139
'22#.#13.16.40':139
'22#.#13.23.197':139
'22#.#13.38.2':139
'22#.#13.98.146':139
'22#.#13.34.88':139
'22#.#13.28.6':139
'22#.#13.130.247':139
'22#.#13.196.140':139
'22#.#13.61.19':139
'22#.#13.13.184':139
'22#.#13.197.62':139
'22#.#13.231.214':139
'22#.#13.249.242':139
'22#.#13.60.113':139
'22#.#13.96.168':139
'22#.#13.87.81':139
'22#.#13.4.217':139
'22#.#13.89.104':139
'22#.#13.165.25':139
'22#.#13.23.163':139
'22#.#13.253.141':139
'22#.#13.128.176':139
'22#.#13.117.126':139
'22#.#13.220.69':139
'22#.#13.186.138':139
'22#.#13.29.114':139
'22#.#13.77.51':139
'22#.#13.235.101':139
'22#.#13.38.233':139
'22#.#13.172.177':139
'22#.#13.91.254':139
'22#.#13.249.242':445
'22#.#13.60.113':445
'22#.#13.136.212':139
'22#.#13.176.102':139
'22#.#13.217.227':139
'22#.#13.109.181':139
'22#.#13.230.52':139
'22#.#13.89.84':139
'22#.#13.188.23':139
'22#.#13.198.195':139
'22#.#13.31.169':139
'22#.#13.62.207':139
'22#.#13.254.47':139
'22#.#13.107.234':139
'22#.#13.114.171':139
'22#.#13.56.181':139
'22#.#13.87.94':139
'22#.#13.48.87':139
'22#.#13.198.158':139
'22#.#13.209.26':139
'22#.#13.99.119':139
'22#.#13.108.247':139
'22#.#13.170.244':139
'22#.#13.6.118':139
'22#.#13.58.202':139
'22#.#13.4.33':139
'22#.#13.216.252':139
'22#.#13.93.217':139
'22#.#13.61.61':139
'22#.#13.113.225':139
'22#.#13.110.56':139
'22#.#13.232.216':139
'22#.#13.201.72':139
'22#.#13.150.37':139
'22#.#13.24.69':445
'22#.#13.5.36':445
'22#.#13.12.125':445
'22#.#13.135.119':139
'22#.#13.157.240':139
'22#.#13.115.35':139
'22#.#13.157.224':139
'22#.#13.234.196':139
'22#.#13.246.190':139
'22#.#13.106.105':139
'22#.#13.160.68':139
'22#.#13.58.202':445
'22#.#13.61.61':445
'22#.#13.113.225':445
'22#.#13.198.158':445
'22#.#13.209.26':445
'22#.#13.99.119':445
'22#.#13.110.56':445
'22#.#13.160.68':445
'22#.#13.69.124':139
'22#.#13.5.69':139
'22#.#13.4.33':445
'22#.#13.216.252':445
'22#.#13.93.217':445
'22#.#13.135.119':445
'22#.#13.234.196':445
'22#.#13.106.105':445
'22#.#13.232.216':445
'22#.#13.201.72':445
'22#.#13.150.37':445
'22#.#13.246.190':445
'22#.#13.108.247':445
'22#.#13.170.244':445
'22#.#13.6.118':445
'22#.#13.157.240':445
'22#.#13.115.35':445
'22#.#13.157.224':445
'22#.#13.233.175':139
'22#.#13.2.40':139
'22#.#13.51.153':139
'22#.#13.185.112':139
'22#.#13.36.84':139
'22#.#13.76.174':139
'22#.#13.74.150':139
'22#.#13.208.117':139
'22#.#13.188.199':139
'22#.#13.118.189':139
'22#.#13.42.153':139
'22#.#13.126.12':139
'22#.#13.78.126':139
'22#.#13.130.247':9988
'22#.#13.196.140':9988
'22#.#13.98.146':9988
'22#.#13.4.217':9988
'22#.#13.165.25':9988
'22#.#13.38.2':9988
'22#.#13.34.88':9988
'22#.#13.189.88':139
'22#.#13.152.155':139
'22#.#13.77.46':139
'22#.#13.28.6':9988
'22#.#13.56.181':9988
'22#.#13.235.101':9988
'22#.#13.86.28':139
'22#.#13.42.153':445
'22#.#13.126.12':445
'22#.#13.78.126':445
'22#.#13.2.40':445
'22#.#13.51.153':445
'22#.#13.74.150':445
'22#.#13.208.117':445
'22#.#13.31.25':445
'22#.#13.113.30':445
'22#.#13.211.112':445
'22#.#13.188.199':445
'22#.#13.118.189':445
'22#.#13.86.28':445
'22#.#13.24.69':139
'22#.#13.5.36':139
'22#.#13.12.125':139
'22#.#13.31.25':139
'22#.#13.113.30':139
'22#.#13.211.112':139
'22#.#13.189.88':445
'22#.#13.36.84':445
'22#.#13.76.174':445
'22#.#13.233.175':445
'22#.#13.152.155':445
'22#.#13.77.46':445
'22#.#13.185.112':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней