Trojan.Starman.5730

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#48.96.135':139
'21#.#48.228.49':139
'21#.#48.216.228':139
'21#.#48.53.196':139
'21#.#48.83.61':139
'21#.#48.66.47':139
'21#.#48.178.70':139
'21#.#48.240.177':139
'21#.#48.61.240':139
'21#.#48.129.217':139
'21#.#48.93.129':139
'21#.#48.71.93':139
'21#.#48.141.90':445
'21#.#48.55.153':445
'21#.#48.167.174':445
'21#.#48.224.39':445
'21#.#48.15.49':445
'21#.#48.118.15':445
'21#.#48.88.62':445
'21#.#48.41.35':139
'21#.#48.231.249':139
'21#.#48.53.205':445
'21#.#48.69.63':445
'21#.#48.43.211':445
'21#.#48.176.54':139
'21#.#48.61.234':139
'21#.#48.56.126':139
'21#.#48.23.208':139
'21#.#48.6.205':139
'21#.#48.181.237':139
'21#.#48.231.249':445
'21#.#48.53.196':445
'21#.#48.83.61':445
'21#.#48.155.39':139
'21#.#48.242.250':139
'21#.#48.41.35':445
'21#.#48.166.246':139
'21#.#48.61.225':139
'21#.#48.167.119':139
'21#.#48.22.62':139
'21#.#48.131.220':139
'21#.#48.246.47':139
'21#.#48.29.207':139
'21#.#48.62.30':139
'21#.#48.52.62':139
'21#.#48.31.66':139
'21#.#48.63.62':139
'21#.#48.9.68':139
'21#.#48.30.130':445
'21#.#48.129.119':445
'21#.#48.64.16':445
'21#.#48.177.96':445
'21#.#48.51.75':445
'21#.#48.255.140':445
'21#.#48.27.9':445
'21#.#48.99.144':445
'21#.#48.18.113':445
'21#.#48.172.18':445
'21#.#48.240.197':445
'21#.#48.97.131':445
'21#.#48.68.227':445
'21#.#48.61.68':445
'21#.#48.127.45':445
'21#.#48.36.227':445
'21#.#48.23.39':445
'21#.#48.250.206':445
'21#.#48.68.21':445
'21#.#48.9.73':445
'21#.#48.143.100':445
'21#.#48.74.205':445
'21#.#48.125.54':445
'21#.#48.236.124':445
'21#.#48.157.80':445
'21#.#48.69.63':139
'21#.#48.43.211':139
'21#.#48.88.62':139
'21#.#48.55.153':139
'21#.#48.167.174':139
'21#.#48.53.205':139
'21#.#48.57.103':445
'21#.#48.205.77':445
'21#.#48.44.77':445
'21#.#48.81.129':445
'21#.#48.16.8':445
'21#.#48.40.146':445
'21#.#48.40.146':139
'21#.#48.57.103':139
'21#.#48.205.77':139
'21#.#48.88.152':445
'21#.#48.81.129':139
'21#.#48.16.8':139
'21#.#48.15.49':139
'21#.#48.118.15':139
'21#.#48.141.90':139
'21#.#48.44.77':139
'21#.#48.30.130':139
'21#.#48.224.39':139
'21#.#48.66.47':445
'21#.#48.234.157':139
'21#.#48.54.235':139
'21#.#48.15.109':139
'21#.#48.78.167':445
'21#.#48.67.30':445
'21#.#48.29.42':139
'21#.#48.78.156':139
'21#.#48.139.78':139
'21#.#48.98.95':139
'21#.#48.187.45':139
'21#.#48.253.52':139
'21#.#48.156.190':139
'21#.#48.229.241':445
'21#.#48.245.228':445
'21#.#48.63.246':445
'21#.#48.16.146':445
'21#.#48.249.157':445
'21#.#48.23.30':445
'21#.#48.113.107':445
'21#.#48.204.218':445
'21#.#48.63.176':445
'21#.#48.92.254':445
'21#.#48.244.85':445
'21#.#48.107.184':445
'21#.#48.48.187':139
'21#.#48.154.0':139
'21#.#48.171.95':139
'21#.#48.239.146':139
'21#.#48.61.162':139
'21#.#48.208.145':139
'21#.#48.110.237':139
'21#.#48.5.111':139
'21#.#48.102.5':139
'21#.#48.148.171':139
'21#.#48.93.148':139
'21#.#48.3.80':139
'21#.#48.55.147':139
'21#.#48.175.136':139
'21#.#48.153.10':139
'21#.#48.46.14':139
'21#.#48.221.7':139
'21#.#48.103.111':139
'21#.#48.96.78':139
'21#.#48.23.42':139
'21#.#48.155.35':139
'21#.#48.116.246':139
'21#.#48.31.117':139
'21#.#48.219.30':139
'21#.#48.60.50':445
'21#.#48.31.66':445
'21#.#48.63.62':445
'21#.#48.9.68':445
'21#.#48.166.246':445
'21#.#48.61.225':445
'21#.#48.167.119':445
'21#.#48.23.208':445
'21#.#48.6.205':445
'21#.#48.181.237':445
'21#.#48.29.207':445
'21#.#48.62.30':445
'21#.#48.52.62':445
'21#.#48.129.217':445
'21#.#48.93.129':445
'21#.#48.71.93':445
'21#.#48.96.135':445
'21#.#48.228.49':445
'21#.#48.216.228':445
'21#.#48.22.62':445
'21#.#48.131.220':445
'21#.#48.246.47':445
'21#.#48.178.70':445
'21#.#48.240.177':445
'21#.#48.61.240':445
'21#.#48.244.85':139
'21#.#48.107.184':139
'21#.#48.113.107':139
'21#.#48.245.228':139
'21#.#48.63.246':139
'21#.#48.92.254':139
'21#.#48.67.30':139
'21#.#48.206.197':445
'21#.#48.102.231':445
'21#.#48.204.218':139
'21#.#48.63.176':139
'21#.#48.78.167':139
'21#.#48.155.39':445
'21#.#48.242.250':445
'21#.#48.206.197':139
'21#.#48.176.54':445
'21#.#48.61.234':445
'21#.#48.56.126':445
'21#.#48.249.157':139
'21#.#48.23.30':139
'21#.#48.229.241':139
'21#.#48.102.231':139
'21#.#48.60.50':139
'21#.#48.16.146':139
'21#.#48.38.219':445
'21#.#48.46.130':445
'21#.#48.182.185':445
'21#.#48.160.74':445
'21#.#48.128.219':445
'21#.#48.224.185':445
'21#.#48.181.182':445
'21#.#48.191.237':445
'21#.#48.123.177':445
'21#.#48.238.242':445
'21#.#48.103.49':445
'21#.#48.150.103':445
'21#.#48.1.156':445
'21#.#48.82.96':445
'21#.#48.11.82':445
'21#.#48.170.10':445
'21#.#48.18.251':139
'21#.#48.100.73':139
'21#.#48.169.154':445
'21#.#48.108.18':445
'21#.#48.149.116':445
'21#.#48.37.76':445
'21#.#48.227.169':445
'21#.#48.180.227':445
'21#.#48.18.181':445
'21#.#48.205.54':445
'21#.#48.43.206':445
'21#.#48.37.42':445
'21#.#48.0.244':445
'21#.#48.255.90':445
'21#.#48.159.139':445
'21#.#48.4.180':445
'21#.#48.54.182':445
'21#.#48.85.184':445
'21#.#48.5.206':445
'21#.#48.249.140':445
'21#.#48.72.245':445
'21#.#48.72.26':445
'21#.#48.202.38':445
'21#.#48.196.136':445
'21#.#48.58.73':445
'21#.#48.7.108':445
'21#.#48.146.16':445
'21#.#48.81.74':445
'21#.#48.142.78':445
'21#.#48.49.113':445
'21#.#48.3.188':445
'21#.#48.174.188':445
'21#.#48.74.144':445
'21#.#48.72.43':139
'21#.#48.160.74':139
'21#.#48.103.49':139
'21#.#48.150.103':139
'21#.#48.181.182':139
'21#.#48.46.130':139
'21#.#48.182.185':139
'21#.#48.238.242':139
'21#.#48.58.73':139
'21#.#48.7.108':139
'21#.#48.1.156':139
'21#.#48.191.237':139
'21#.#48.123.177':139
'21#.#48.170.10':139
'21#.#48.227.169':139
'21#.#48.180.227':139
'21#.#48.169.154':139
'21#.#48.82.96':139
'21#.#48.11.82':139
'21#.#48.37.76':139
'21#.#48.128.219':139
'21#.#48.224.185':139
'21#.#48.18.181':139
'21#.#48.108.18':139
'21#.#48.149.116':139
'21#.#48.37.42':139
'21#.#48.5.206':139
'21#.#48.249.140':139
'21#.#48.159.139':139
'21#.#48.205.54':139
'21#.#48.43.206':139
'21#.#48.85.184':139
'21#.#48.93.225':139
'21#.#48.42.154':139
'21#.#48.72.245':139
'21#.#48.4.180':139
'21#.#48.54.182':139
'21#.#48.196.136':139
'21#.#48.3.188':139
'21#.#48.174.188':139
'21#.#48.72.26':139
'21#.#48.146.16':139
'21#.#48.202.38':139
'21#.#48.49.113':139
'21#.#48.0.244':139
'21#.#48.255.90':139
'21#.#48.74.144':139
'21#.#48.81.74':139
'21#.#48.142.78':139
'21#.#48.93.225':445
'21#.#48.23.39':139
'21#.#48.250.206':139
'21#.#48.68.21':139
'21#.#48.150.175':139
'21#.#48.193.138':139
'21#.#48.38.219':139
'21#.#48.125.54':139
'21#.#48.236.124':139
'21#.#48.157.80':139
'21#.#48.61.68':139
'21#.#48.127.45':139
'21#.#48.36.227':139
'21#.#48.39.14':445
'21#.#48.51.102':445
'21#.#48.156.83':445
'21#.#48.111.203':445
'21#.#48.242.108':445
'21#.#48.99.15':445
'21#.#48.198.177':139
'21#.#48.212.198':139
'21#.#48.15.41':139
'21#.#48.226.194':139
'21#.#48.92.109':139
'21#.#48.178.92':139
'21#.#48.88.152':139
'21#.#48.226.194':445
'21#.#48.92.109':445
'21#.#48.99.144':139
'21#.#48.18.113':139
'21#.#48.172.18':139
'21#.#48.15.41':445
'21#.#48.150.175':445
'21#.#48.193.138':445
'21#.#48.178.92':445
'21#.#48.198.177':445
'21#.#48.212.198':445
'21#.#48.51.75':139
'21#.#48.255.140':139
'21#.#48.27.9':139
'21#.#48.9.73':139
'21#.#48.143.100':139
'21#.#48.74.205':139
'21#.#48.240.197':139
'21#.#48.97.131':139
'21#.#48.68.227':139
'21#.#48.129.119':139
'21#.#48.64.16':139
'21#.#48.177.96':139
'21#.#48.87.52':445
'21#.#48.150.103':9988
'21#.#48.191.237':9988
'21#.#48.3.188':9988
'21#.#48.46.130':9988
'21#.#48.160.74':9988
'21#.#48.103.49':9988
'21#.#48.34.177':139
'21#.#48.237.25':139
'21#.#48.2.166':139
'21#.#48.174.188':9988
'21#.#48.142.78':9988
'21#.#48.159.139':9988
'21#.#48.100.73':445
'21#.#48.170.10':9988
'21#.#48.37.76':9988
'21#.#48.42.154':445
'21#.#48.72.43':445
'21#.#48.18.251':445
'21#.#48.224.185':9988
'21#.#48.128.219':9988
'21#.#48.181.182':9988
'21#.#48.11.82':9988
'21#.#48.82.96':9988
'21#.#48.169.154':9988
'21#.#48.237.25':445
'21#.#48.2.166':445
'21#.#48.8.234':445
'21#.#48.51.102':139
'21#.#48.156.83':139
'21#.#48.34.177':445
'21#.#48.211.42':445
'21#.#48.212.174':445
'21#.#48.233.88':445
'21#.#48.88.104':445
'21#.#48.250.11':445
'21#.#48.42.249':445
'21#.#48.42.249':139
'21#.#48.211.42':139
'21#.#48.212.174':139
'21#.#48.8.234':139
'21#.#48.88.104':139
'21#.#48.250.11':139
'21#.#48.242.108':139
'21#.#48.99.15':139
'21#.#48.39.14':139
'21#.#48.233.88':139
'21#.#48.87.52':139
'21#.#48.111.203':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней