Trojan.Starman.5921

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#13.41.219':139
'22#.#13.109.254':139
'22#.#13.204.207':139
'22#.#13.63.163':139
'22#.#13.196.99':139
'22#.#13.159.126':139
'22#.#13.148.103':139
'22#.#13.44.237':445
'22#.#13.170.244':445
'22#.#13.40.108':139
'22#.#13.252.32':139
'22#.#13.51.152':139
'22#.#13.234.17':139
'22#.#13.106.234':139
'22#.#13.85.116':139
'22#.#13.93.32':139
'22#.#13.101.143':139
'22#.#13.94.7':139
'22#.#13.12.167':139
'22#.#13.250.183':139
'22#.213.2.2':139
'22#.#13.184.220':139
'22#.#13.1.18':139
'22#.#13.202.145':139
'22#.#13.2.132':445
'22#.#13.24.146':445
'22#.#13.70.240':445
'22#.#13.185.93':445
'22#.#13.47.15':445
'22#.#13.98.106':445
'22#.#13.220.35':445
'22#.#13.192.219':445
'22#.#13.106.193':445
'22#.#13.104.176':445
'22#.#13.154.13':445
'22#.#13.35.229':445
'22#.#13.251.154':445
'22#.#13.84.26':445
'22#.#13.172.252':445
'22#.#13.18.127':445
'22#.#13.164.164':445
'22#.#13.154.164':445
'22#.#13.151.239':445
'22#.#13.248.115':445
'22#.#13.208.198':445
'22#.#13.246.221':445
'22#.#13.224.179':445
'22#.#13.108.107':445
'22#.#13.74.139':139
'22#.#13.1.80':445
'22#.#13.89.26':445
'22#.#13.251.70':445
'22#.#13.146.170':445
'22#.#13.76.103':445
'22#.#13.106.148':445
'22#.#13.170.244':139
'22#.#13.18.127':139
'22#.#13.164.164':139
'22#.#13.211.189':445
'22#.#13.204.89':445
'22#.#13.44.237':139
'22#.#13.186.142':445
'22#.#13.106.186':445
'22#.#13.26.111':445
'22#.#13.118.139':445
'22#.#13.25.4':445
'22#.#13.141.242':445
'22#.#13.160.195':445
'22#.#13.0.73':445
'22#.#13.161.223':445
'22#.#13.121.193':445
'22#.#13.20.100':445
'22#.#13.67.191':445
'22#.#13.70.240':139
'22#.#13.104.176':139
'22#.#13.154.13':139
'22#.#13.98.106':139
'22#.#13.2.132':139
'22#.#13.24.146':139
'22#.#13.106.193':139
'22#.#13.30.71':139
'22#.#13.137.202':139
'22#.#13.35.229':139
'22#.#13.220.35':139
'22#.#13.192.219':139
'22#.#13.172.252':139
'22#.#13.246.221':139
'22#.#13.224.179':139
'22#.#13.154.164':139
'22#.#13.251.154':139
'22#.#13.84.26':139
'22#.#13.208.198':139
'22#.#13.185.93':139
'22#.#13.47.15':139
'22#.#13.108.107':139
'22#.#13.151.239':139
'22#.#13.248.115':139
'22#.#13.30.71':445
'22#.#13.21.7':139
'22#.#13.87.254':139
'22#.#13.226.137':139
'22#.#13.60.81':139
'22#.#13.75.223':139
'22#.#13.156.54':139
'22#.#13.143.216':139
'22#.#13.162.160':139
'22#.#13.232.225':139
'22#.#13.42.156':139
'22#.#13.111.107':139
'22#.#13.30.165':139
'22#.#13.212.213':139
'22#.#13.87.237':139
'22#.#13.102.89':139
'22#.#13.68.252':139
'22#.#13.3.41':139
'22#.#13.21.69':139
'22#.#13.236.243':139
'22#.#13.216.236':139
'22#.#13.50.156':139
'22#.#13.8.112':139
'22#.#13.19.173':139
'22#.#13.242.140':139
'22#.#13.174.178':445
'22#.#13.121.164':445
'22#.#13.63.188':445
'22#.#13.153.210':445
'22#.#13.113.110':445
'22#.#13.217.207':445
'22#.#13.31.46':445
'22#.#13.87.31':445
'22#.#13.68.100':445
'22#.#13.119.244':445
'22#.#13.12.187':445
'22#.#13.45.105':445
'22#.#13.170.123':445
'22#.#13.122.170':445
'22#.#13.103.122':445
'22#.#13.149.117':139
'22#.#13.13.182':139
'22#.#13.180.116':445
'22#.#13.200.107':445
'22#.#13.149.21':445
'22#.#13.152.229':445
'22#.#13.51.103':445
'22#.#13.200.205':445
'22#.#13.108.21':445
'22#.#13.0.221':139
'22#.#13.196.99':445
'22#.#13.159.126':445
'22#.#13.41.219':445
'22#.#13.250.183':445
'22#.213.2.2':445
'22#.#13.63.163':445
'22#.#13.252.32':445
'22#.#13.51.152':445
'22#.#13.148.103':445
'22#.#13.109.254':445
'22#.#13.204.207':445
'22#.#13.40.108':445
'22#.#13.101.143':445
'22#.#13.94.7':445
'22#.#13.234.17':445
'22#.#13.137.202':445
'22#.#13.74.139':445
'22#.#13.93.32':445
'22#.#13.1.18':445
'22#.#13.202.145':445
'22#.#13.12.167':445
'22#.#13.106.234':445
'22#.#13.85.116':445
'22#.#13.184.220':445
'22#.#13.63.188':139
'22#.#13.119.244':139
'22#.#13.12.187':139
'22#.#13.217.207':139
'22#.#13.174.178':139
'22#.#13.121.164':139
'22#.#13.68.100':139
'22#.#13.54.32':139
'22#.#13.148.99':139
'22#.#13.45.105':139
'22#.#13.31.46':139
'22#.#13.87.31':139
'22#.#13.103.122':139
'22#.#13.51.103':139
'22#.#13.200.205':139
'22#.#13.180.116':139
'22#.#13.170.123':139
'22#.#13.122.170':139
'22#.#13.152.229':139
'22#.#13.153.210':139
'22#.#13.113.110':139
'22#.#13.108.21':139
'22#.#13.200.107':139
'22#.#13.149.21':139
'22#.#13.109.53':445
'22#.#13.89.42':445
'22#.#13.90.89':445
'22#.#13.11.45':445
'22#.#13.38.24':445
'22#.#13.151.14':445
'22#.#13.200.160':445
'22#.#13.52.128':445
'22#.#13.46.52':445
'22#.#13.176.10':445
'22#.#13.236.232':445
'22#.#13.179.216':445
'22#.#13.67.37':445
'22#.#13.75.142':445
'22#.#13.125.94':445
'22#.#13.72.2':445
'22#.#13.105.194':139
'22#.#13.217.162':139
'22#.#13.55.112':445
'22#.#13.57.184':445
'22#.#13.81.138':445
'22#.#13.210.214':445
'22#.#13.227.63':445
'22#.#13.149.140':445
'22#.#13.203.221':445
'22#.#13.150.168':445
'22#.#13.235.142':445
'22#.#13.17.18':445
'22#.#13.1.82':445
'22#.#13.6.58':445
'22#.#13.159.180':445
'22#.#13.97.195':445
'22#.#13.61.181':445
'22#.#13.119.81':445
'22#.#13.88.66':445
'22#.#13.61.83':445
'22#.#13.0.52':445
'22#.#13.205.45':445
'22#.#13.55.189':445
'22#.#13.19.76':445
'22#.#13.115.199':445
'22#.#13.199.57':445
'22#.#13.45.151':445
'22#.#13.74.45':445
'22#.#13.73.164':445
'22#.#13.164.88':445
'22#.#13.15.212':445
'22#.#13.29.84':445
'22#.#13.43.89':445
'22#.#13.109.250':139
'22#.#13.11.45':139
'22#.#13.236.232':139
'22#.#13.179.216':139
'22#.#13.200.160':139
'22#.#13.89.42':139
'22#.#13.90.89':139
'22#.#13.176.10':139
'22#.#13.115.199':139
'22#.#13.199.57':139
'22#.#13.67.37':139
'22#.#13.52.128':139
'22#.#13.46.52':139
'22#.#13.72.2':139
'22#.#13.227.63':139
'22#.#13.149.140':139
'22#.#13.55.112':139
'22#.#13.75.142':139
'22#.#13.125.94':139
'22#.#13.210.214':139
'22#.#13.38.24':139
'22#.#13.151.14':139
'22#.#13.203.221':139
'22#.#13.57.184':139
'22#.#13.81.138':139
'22#.#13.17.18':139
'22#.#13.88.66':139
'22#.#13.61.83':139
'22#.#13.159.180':139
'22#.#13.150.168':139
'22#.#13.235.142':139
'22#.#13.119.81':139
'22#.#13.143.119':139
'22#.#13.215.202':139
'22#.#13.0.52':139
'22#.#13.97.195':139
'22#.#13.61.181':139
'22#.#13.19.76':139
'22#.#13.15.212':139
'22#.#13.29.84':139
'22#.#13.45.151':139
'22#.#13.205.45':139
'22#.#13.55.189':139
'22#.#13.164.88':139
'22#.#13.1.82':139
'22#.#13.6.58':139
'22#.#13.43.89':139
'22#.#13.74.45':139
'22#.#13.73.164':139
'22#.#13.143.119':445
'22#.#13.251.70':139
'22#.#13.211.189':139
'22#.#13.204.89':139
'22#.#13.106.148':139
'22#.#13.1.80':139
'22#.#13.89.26':139
'22#.#13.124.69':445
'22#.#13.39.179':445
'22#.#13.40.63':445
'22#.#13.190.113':445
'22#.#13.146.218':445
'22#.#13.176.135':445
'22#.#13.26.111':139
'22#.#13.121.193':139
'22#.#13.20.100':139
'22#.#13.141.242':139
'22#.#13.186.142':139
'22#.#13.106.186':139
'22#.#13.161.223':139
'22#.#13.146.170':139
'22#.#13.76.103':139
'22#.#13.67.191':139
'22#.#13.160.195':139
'22#.#13.0.73':139
'22#.#13.87.35':445
'22#.#13.113.53':445
'22#.#13.21.70':445
'22#.#13.98.57':445
'22#.#13.21.160':445
'22#.#13.162.226':445
'22#.#13.142.217':445
'22#.#13.97.58':445
'22#.#13.2.154':445
'22#.#13.23.157':445
'22#.#13.41.23':445
'22#.#13.2.233':445
'22#.#13.126.43':445
'22#.#13.162.203':445
'22#.#13.152.28':445
'22#.#13.42.68':445
'22#.#13.239.37':445
'22#.#13.128.13':445
'22#.#13.228.176':445
'22#.#13.238.145':445
'22#.#13.121.167':445
'22#.#13.24.194':445
'22#.#13.251.232':445
'22#.#13.156.92':445
'22#.#13.25.4':139
'22#.#13.0.52':9988
'22#.#13.190.113':139
'22#.#13.146.218':139
'22#.#13.176.10':9988
'22#.#13.115.199':9988
'22#.#13.199.57':9988
'22#.#13.40.63':139
'22#.#13.42.68':139
'22#.#13.239.37':139
'22#.#13.176.135':139
'22#.#13.124.69':139
'22#.#13.39.179':139
'22#.#13.217.162':445
'22#.#13.149.140':9988
'22#.#13.125.94':9988
'22#.#13.215.202':445
'22#.#13.109.250':445
'22#.#13.105.194':445
'22#.#13.38.24':9988
'22#.#13.203.221':9988
'22#.#13.236.232':9988
'22#.#13.89.42':9988
'22#.#13.200.160':9988
'22#.#13.151.14':9988
'22#.#13.21.70':139
'22#.#13.23.157':139
'22#.#13.41.23':139
'22#.#13.162.226':139
'22#.#13.87.35':139
'22#.#13.113.53':139
'22#.#13.2.154':139
'22#.#13.109.53':139
'22#.#13.118.139':139
'22#.#13.2.233':139
'22#.#13.142.217':139
'22#.#13.97.58':139
'22#.#13.152.28':139
'22#.#13.24.194':139
'22#.#13.251.232':139
'22#.#13.128.13':139
'22#.#13.126.43':139
'22#.#13.162.203':139
'22#.#13.98.57':139
'22#.#13.121.167':139
'22#.#13.21.160':139
'22#.#13.156.92':139
'22#.#13.228.176':139
'22#.#13.238.145':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней