Trojan.Starman.5731

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#7.42.12':445
'21#.#7.149.7':139
'21#.#7.82.76':139
'21#.#7.229.199':445
'21#.#7.224.224':445
'21#.#7.12.225':445
'21#.#7.248.187':139
'21#.97.9.72':139
'21#.#7.22.99':139
'21#.#7.69.211':139
'21#.#7.1.252':139
'21#.#7.151.7':139
'21#.#7.59.229':139
'21#.#7.229.199':139
'21#.#7.224.224':139
'21#.#7.12.225':139
'21#.#7.195.139':139
'21#.#7.194.54':139
'21#.#7.251.88':139
'21#.#7.42.12':139
'21#.#7.195.139':445
'21#.#7.194.54':445
'21#.#7.251.88':445
'21#.#7.164.118':445
'21#.#7.59.253':445
'21#.#7.24.52':445
'21#.#7.3.180':139
'21#.#7.160.5':139
'21#.#7.2.160':139
'21#.#7.79.176':139
'21#.#7.6.116':139
'21#.#7.19.211':139
'21#.97.5.20':139
'21#.#7.226.120':139
'21#.97.5.44':139
'21#.#7.214.113':139
'21#.#7.116.214':139
'21#.#7.9.237':139
'21#.#7.251.124':139
'21#.#7.103.46':139
'21#.#7.188.81':139
'21#.#7.61.61':139
'21#.#7.128.155':139
'21#.#7.248.53':139
'21#.#7.196.35':139
'21#.#7.136.253':139
'21#.97.9.51':139
'21#.#7.164.117':139
'21#.#7.216.168':139
'21#.#7.141.30':139
'21#.#7.96.170':139
'21#.#7.25.240':139
'21#.#7.0.229':139
'21#.#7.22.13':445
'21#.#7.159.242':445
'21#.#7.192.160':445
'21#.#7.237.99':445
'21#.#7.12.224':445
'21#.#7.160.40':445
'21#.#7.142.35':445
'21#.#7.67.13':445
'21#.97.2.93':445
'21#.#7.40.42':445
'21#.#7.247.113':445
'21#.#7.135.13':445
'21#.#7.205.88':445
'21#.#7.99.86':139
'21#.#7.242.80':139
'21#.#7.144.131':139
'21#.#7.199.39':139
'21#.#7.199.166':139
'21#.#7.140.144':139
'21#.#7.198.42':139
'21#.#7.21.155':445
'21#.#7.105.206':445
'21#.#7.168.105':445
'21#.#7.195.111':139
'21#.#7.52.77':139
'21#.#7.144.112':445
'21#.#7.171.80':445
'21#.#7.140.144':445
'21#.#7.99.86':445
'21#.#7.242.80':445
'21#.#7.138.172':445
'21#.#7.199.39':445
'21#.#7.199.166':445
'21#.#7.144.131':445
'21#.#7.164.118':139
'21#.#7.59.253':139
'21#.#7.24.52':139
'21#.#7.198.42':445
'21#.#7.195.111':445
'21#.#7.52.77':445
'21#.#7.150.105':445
'21#.#7.145.136':445
'21#.#7.121.17':445
'21#.#7.151.51':445
'21#.#7.194.203':445
'21#.#7.169.200':445
'21#.#7.89.185':445
'21#.#7.155.40':445
'21#.#7.168.152':445
'21#.#7.95.72':445
'21#.#7.43.112':445
'21#.#7.112.142':445
'21#.#7.20.123':445
'21#.#7.76.199':139
'21#.#7.43.194':139
'21#.#7.76.31':139
'21#.#7.3.174':139
'21#.#7.45.166':139
'21#.#7.194.45':139
'21#.#7.3.158':139
'21#.#7.15.219':139
'21#.#7.62.89':139
'21#.#7.211.158':139
'21#.#7.5.108':139
'21#.#7.161.138':139
'21#.#7.84.98':139
'21#.#7.237.137':139
'21#.#7.134.223':445
'21#.#7.106.134':445
'21#.#7.225.114':445
'21#.#7.205.7':139
'21#.#7.146.41':139
'21#.#7.44.137':445
'21#.#7.199.250':445
'21#.#7.205.7':445
'21#.#7.146.41':445
'21#.#7.166.105':139
'21#.#7.33.221':445
'21#.#7.93.76':445
'21#.#7.171.59':445
'21#.#7.75.183':139
'21#.#7.92.224':139
'21#.#7.107.201':139
'21#.#7.43.91':139
'21#.#7.162.208':139
'21#.#7.151.111':139
'21#.#7.216.150':139
'21#.#7.213.243':139
'21#.#7.252.63':139
'21#.#7.121.161':139
'21#.#7.93.186':139
'21#.#7.192.205':139
'21#.#7.71.26':139
'21#.#7.15.87':139
'21#.#7.99.186':139
'21#.#7.243.150':139
'21#.#7.1.202':139
'21#.#7.164.33':139
'21#.#7.100.29':139
'21#.#7.194.156':139
'21#.#7.179.207':139
'21#.#7.74.43':139
'21#.#7.49.251':139
'21#.#7.148.187':139
'21#.#7.224.216':139
'21#.#7.55.224':139
'21#.#7.205.55':139
'21#.#7.136.253':445
'21#.#7.188.81':445
'21#.#7.61.61':445
'21#.#7.3.180':445
'21#.#7.248.53':445
'21#.#7.196.35':445
'21#.#7.128.155':445
'21#.#7.0.229':445
'21#.#7.164.117':445
'21#.#7.216.168':445
'21#.97.9.51':445
'21#.#7.96.170':445
'21#.#7.25.240':445
'21#.#7.94.18':139
'21#.#7.149.7':445
'21#.#7.82.76':445
'21#.#7.94.65':139
'21#.#7.2.104':139
'21#.#7.135.44':139
'21#.#7.248.187':445
'21#.97.9.72':445
'21#.#7.22.99':445
'21#.#7.69.211':445
'21#.#7.1.252':445
'21#.#7.151.7':445
'21#.#7.59.229':445
'21#.#7.141.30':445
'21#.#7.135.44':445
'21#.#7.94.18':445
'21#.#7.44.137':139
'21#.#7.76.199':445
'21#.#7.94.65':445
'21#.#7.2.104':445
'21#.#7.134.223':139
'21#.#7.33.221':139
'21#.#7.93.76':139
'21#.#7.171.59':139
'21#.#7.106.134':139
'21#.#7.225.114':139
'21#.#7.199.250':139
'21#.#7.160.5':445
'21#.#7.2.160':445
'21#.#7.79.176':445
'21#.#7.6.116':445
'21#.#7.19.211':445
'21#.97.5.20':445
'21#.#7.226.120':445
'21#.97.5.44':445
'21#.#7.214.113':445
'21#.#7.116.214':445
'21#.#7.9.237':445
'21#.#7.251.124':445
'21#.#7.103.46':445
'21#.#7.138.172':139
'21#.#7.124.235':445
'21#.#7.102.143':445
'21#.#7.58.57':445
'21#.#7.105.54':445
'21#.#7.185.237':445
'21#.#7.23.98':445
'21#.#7.66.13':445
'21#.#7.244.167':445
'21#.#7.10.251':445
'21#.#7.32.43':445
'21#.#7.189.88':445
'21#.#7.103.189':445
'21#.97.58.7':445
'21#.#7.229.216':445
'21#.#7.29.231':445
'21#.#7.102.66':445
'21#.#7.165.97':445
'21#.#7.204.250':445
'21#.#7.62.202':445
'21#.#7.125.124':445
'21#.#7.175.119':445
'21#.#7.217.30':445
'21#.#7.46.177':445
'21#.#7.211.64':445
'21#.#7.180.211':445
'21#.#7.224.136':445
'21#.#7.10.64':445
'21#.#7.112.150':445
'21#.#7.230.210':445
'21#.#7.228.148':445
'21#.#7.37.120':445
'21#.#7.15.37':445
'21#.#7.241.187':445
'21#.#7.113.228':445
'21#.#7.102.66':9988
'21#.#7.211.64':9988
'21#.#7.224.136':9988
'21#.#7.212.113':445
'21#.#7.143.107':445
'21#.#7.165.97':9988
'21#.#7.131.165':445
'21#.#7.224.126':445
'21#.#7.66.143':445
'21#.#7.226.76':445
'21#.#7.233.170':445
'21#.#7.50.106':445
'21#.#7.17.251':445
'21#.#7.36.45':445
'21#.#7.196.36':445
'21#.#7.146.99':445
'21#.#7.34.49':445
'21#.#7.233.14':445
'21#.#7.130.32':445
'21#.#7.185.237':139
'21#.#7.23.98':139
'21#.#7.124.235':139
'21#.#7.217.30':139
'21#.#7.46.177':139
'21#.#7.105.54':139
'21#.#7.102.143':139
'21#.#7.103.189':139
'21#.97.58.7':139
'21#.#7.244.167':139
'21#.#7.58.57':139
'21#.#7.66.13':139
'21#.#7.189.88':139
'21#.#7.201.204':139
'21#.#7.62.202':139
'21#.#7.229.216':139
'21#.#7.88.210':139
'21#.#7.204.250':139
'21#.#7.165.97':139
'21#.#7.29.231':139
'21#.#7.180.211':139
'21#.#7.224.136':139
'21#.#7.175.119':139
'21#.#7.102.66':139
'21#.#7.125.124':139
'21#.#7.211.64':139
'21#.#7.10.251':139
'21#.#7.15.37':139
'21#.#7.241.187':139
'21#.#7.112.150':139
'21#.#7.196.36':139
'21#.#7.146.99':139
'21#.#7.37.120':139
'21#.#7.230.210':139
'21#.#7.143.107':139
'21#.#7.201.204':445
'21#.#7.88.210':445
'21#.#7.228.148':139
'21#.#7.113.228':139
'21#.#7.212.113':139
'21#.#7.233.170':139
'21#.#7.50.106':139
'21#.#7.131.165':139
'21#.#7.32.43':139
'21#.#7.10.64':139
'21#.#7.226.76':139
'21#.#7.224.126':139
'21#.#7.233.14':139
'21#.#7.130.32':139
'21#.#7.36.45':139
'21#.#7.66.143':139
'21#.#7.17.251':139
'21#.#7.34.49':139
'21#.#7.244.167':9988
'21#.#7.117.143':445
'21#.#7.18.81':445
'21#.#7.178.18':445
'21#.#7.77.233':445
'21#.#7.230.246':445
'21#.#7.73.117':445
'21#.#7.200.178':445
'21#.#7.21.155':139
'21#.#7.105.206':139
'21#.#7.168.105':139
'21#.#7.229.41':445
'21#.#7.6.168':445
'21#.#7.144.112':139
'21#.#7.77.233':139
'21#.#7.230.246':139
'21#.#7.73.117':139
'21#.#7.68.69':445
'21#.#7.54.73':445
'21#.97.0.3':139
'21#.#7.117.143':139
'21#.#7.229.41':139
'21#.#7.6.168':139
'21#.97.0.3':445
'21#.#7.18.81':139
'21#.#7.178.18':139
'21#.#7.200.178':139
'21#.#7.237.99':139
'21#.#7.150.105':139
'21#.#7.145.136':139
'21#.#7.121.17':139
'21#.#7.151.51':139
'21#.#7.194.203':139
'21#.#7.169.200':139
'21#.#7.89.185':139
'21#.#7.155.40':139
'21#.#7.168.152':139
'21#.#7.95.72':139
'21#.#7.43.112':139
'21#.#7.112.142':139
'21#.#7.20.123':139
'21#.#7.159.242':139
'21#.#7.192.160':139
'21#.#7.142.35':139
'21#.#7.12.224':139
'21#.#7.160.40':139
'21#.#7.22.13':139
'21#.#7.247.113':139
'21#.97.2.93':139
'21#.#7.40.42':139
'21#.#7.171.80':139
'21#.#7.135.13':139
'21#.#7.205.88':139
'21#.#7.67.13':139
'21#.#7.11.180':139
'21#.#7.120.230':139
'21#.#7.46.21':139
'21#.#7.72.160':139
'21#.#7.235.45':139
'21#.#7.17.177':139
'21#.#7.68.192':139
'21#.#7.110.146':139
'21#.#7.154.110':139
'21#.#7.132.208':139
'21#.#7.54.76':139
'21#.#7.96.250':139
'21#.#7.46.251':139
'21#.#7.224.126':9988
'21#.#7.66.143':9988
'21#.#7.233.14':9988
'21#.#7.32.43':9988
'21#.#7.50.106':9988
'21#.#7.233.170':9988
'21#.#7.112.150':9988
'21#.#7.89.125':139
'21#.#7.136.31':139
'21#.#7.160.136':139
'21#.#7.230.210':9988
'21#.#7.143.107':9988
'21#.#7.203.190':139
'21#.#7.146.189':139
'21#.#7.54.76':445
'21#.#7.96.250':445
'21#.#7.46.251':445
'21#.#7.120.230':445
'21#.#7.46.21':445
'21#.#7.68.192':445
'21#.#7.110.146':445
'21#.#7.165.133':445
'21#.#7.6.246':445
'21#.#7.147.22':445
'21#.#7.154.110':445
'21#.#7.132.208':445
'21#.#7.146.189':445
'21#.#7.68.69':139
'21#.#7.54.73':139
'21#.#7.203.190':445
'21#.#7.165.133':139
'21#.#7.6.246':139
'21#.#7.147.22':139
'21#.#7.89.125':445
'21#.#7.235.45':445
'21#.#7.17.177':445
'21#.#7.11.180':445
'21#.#7.136.31':445
'21#.#7.160.136':445
'21#.#7.72.160':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней