Trojan.Starman.5874

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'13#.#8.219.46':445
'13#.#8.5.220':445
'13#.#8.221.5':445
'13#.#8.161.180':445
'13#.#8.19.191':445
'13#.#8.119.188':445
'13#.#8.226.206':445
'13#.#8.214.226':139
'13#.#8.18.59':139
'13#.#8.114.221':445
'13#.#8.50.17':445
'13#.#8.206.129':445
'13#.#8.45.141':445
'13#.#8.105.211':445
'13#.#8.154.141':445
'13#.#8.236.122':445
'13#.#8.66.118':445
'13#.#8.110.84':445
'13#.#8.30.129':445
'13#.#8.63.13':445
'13#.#8.181.62':445
'13#.#8.171.219':445
'13#.#8.213.4':445
'13#.#8.134.226':445
'13#.#8.152.123':139
'13#.#8.76.219':139
'13#.#8.44.103':139
'13#.#8.231.203':139
'13#.#8.182.151':139
'13#.#8.54.183':139
'13#.#8.39.48':139
'13#.#8.214.226':445
'13#.#8.18.59':445
'13#.#8.152.123':445
'13#.#8.118.213':139
'13#.#8.252.95':139
'13#.#8.185.176':139
'13#.#8.191.54':139
'13#.#8.211.190':139
'13#.#8.29.112':139
'13#.#8.86.125':139
'13#.#8.136.140':139
'13#.#8.54.160':139
'13#.#8.174.26':139
'13#.#8.66.109':139
'13#.#8.224.4':139
'13#.#8.156.108':139
'13#.#8.145.67':139
'13#.#8.16.68':139
'13#.#8.88.246':445
'13#.#8.138.206':445
'13#.#8.19.30':445
'13#.#8.103.103':445
'13#.#8.20.11':445
'13#.#8.177.9':445
'13#.#8.81.37':445
'13#.#8.246.56':139
'13#.#8.88.246':139
'13#.#8.236.122':139
'13#.#8.202.145':139
'13#.#8.243.202':139
'13#.#8.145.239':139
'13#.#8.105.86':445
'13#.#8.32.34':445
'13#.#8.137.217':445
'13#.#8.210.0':445
'13#.#8.105.210':445
'13#.#8.102.106':445
'13#.#8.182.140':445
'13#.#8.46.182':445
'13#.#8.11.46':445
'13#.#8.191.106':445
'13#.#8.79.249':445
'13#.#8.62.115':445
'13#.#8.66.118':139
'13#.#8.221.5':139
'13#.#8.114.221':139
'13#.#8.50.17':139
'13#.#8.119.188':139
'13#.#8.219.46':139
'13#.#8.5.220':139
'13#.#8.243.202':445
'13#.#8.145.239':445
'13#.#8.246.56':445
'13#.#8.206.129':139
'13#.#8.226.206':139
'13#.#8.202.145':445
'13#.#8.154.141':139
'13#.#8.171.219':139
'13#.#8.213.4':139
'13#.#8.110.84':139
'13#.#8.45.141':139
'13#.#8.105.211':139
'13#.#8.181.62':139
'13#.#8.161.180':139
'13#.#8.19.191':139
'13#.#8.134.226':139
'13#.#8.30.129':139
'13#.#8.63.13':139
'13#.#8.121.86':445
'13#.#8.243.119':445
'13#.#8.144.150':445
'13#.78.47.6':445
'13#.#8.136.244':445
'13#.#8.228.187':445
'13#.#8.11.133':445
'13#.#8.56.33':445
'13#.#8.177.206':445
'13#.#8.168.229':445
'13#.#8.222.111':445
'13#.#8.231.17':445
'13#.#8.85.14':445
'13#.#8.43.176':445
'13#.#8.25.181':445
'13#.#8.20.130':445
'13#.#8.204.5':445
'13#.78.38.2':445
'13#.#8.134.12':445
'13#.#8.8.107':445
'13#.#8.31.85':445
'13#.#8.193.204':445
'13#.#8.244.79':445
'13#.#8.129.200':445
'13#.#8.46.202':445
'13#.#8.206.46':139
'13#.#8.176.131':139
'13#.#8.1.244':139
'13#.#8.223.208':139
'13#.#8.251.223':139
'13#.#8.41.32':139
'13#.#8.122.170':139
'13#.#8.123.110':139
'13#.#8.71.231':139
'13#.#8.211.245':139
'13#.#8.165.233':139
'13#.#8.150.230':139
'13#.#8.173.143':139
'13#.#8.51.197':139
'13#.#8.225.51':139
'13#.#8.23.188':139
'13#.#8.64.16':139
'13#.#8.13.174':139
'13#.#8.119.171':139
'13#.#8.118.231':139
'13#.#8.27.116':139
'13#.#8.17.100':139
'13#.#8.169.30':139
'13#.#8.154.36':139
'13#.#8.196.118':445
'13#.#8.76.219':445
'13#.#8.44.103':445
'13#.#8.231.203':445
'13#.#8.182.151':445
'13#.#8.54.183':445
'13#.#8.39.48':445
'13#.#8.66.213':139
'13#.#8.196.118':139
'13#.#8.20.130':139
'13#.#8.118.213':445
'13#.#8.252.95':445
'13#.#8.185.176':445
'13#.#8.211.190':445
'13#.#8.191.54':445
'13#.#8.29.112':445
'13#.#8.86.125':445
'13#.#8.136.140':445
'13#.#8.54.160':445
'13#.#8.174.26':445
'13#.#8.66.109':445
'13#.#8.224.4':445
'13#.#8.156.108':445
'13#.#8.145.67':445
'13#.#8.16.68':445
'13#.#8.204.5':139
'13#.#8.144.150':139
'13#.#8.168.229':139
'13#.#8.222.111':139
'13#.#8.228.187':139
'13#.#8.121.86':139
'13#.#8.243.119':139
'13#.#8.177.206':139
'13#.#8.46.202':139
'13#.#8.66.213':445
'13#.#8.231.17':139
'13#.#8.11.133':139
'13#.#8.56.33':139
'13#.#8.25.181':139
'13#.#8.193.204':139
'13#.#8.129.200':139
'13#.78.38.2':139
'13#.#8.85.14':139
'13#.#8.43.176':139
'13#.#8.31.85':139
'13#.78.47.6':139
'13#.#8.136.244':139
'13#.#8.244.79':139
'13#.#8.134.12':139
'13#.#8.8.107':139
'13#.#8.26.198':445
'13#.#8.249.201':445
'13#.#8.123.126':445
'13#.#8.239.226':445
'13#.#8.149.180':445
'13#.#8.96.159':445
'13#.#8.88.236':445
'13#.#8.57.242':445
'13#.#8.25.95':445
'13#.#8.61.223':445
'13#.#8.103.244':445
'13#.#8.59.22':445
'13#.#8.53.133':445
'13#.78.67.4':445
'13#.#8.31.245':445
'13#.#8.168.207':139
'13#.#8.210.163':445
'13#.#8.133.53':445
'13#.#8.121.218':445
'13#.#8.19.119':445
'13#.#8.180.147':445
'13#.#8.13.142':445
'13#.#8.203.206':445
'13#.78.6.65':445
'13#.#8.103.195':445
'13#.#8.118.0':445
'13#.#8.155.106':445
'13#.#8.22.61':445
'13#.#8.45.207':445
'13#.#8.154.20':445
'13#.#8.61.122':445
'13#.#8.129.221':445
'13#.#8.204.171':445
'13#.#8.74.146':445
'13#.#8.21.113':445
'13#.78.8.98':445
'13#.#8.145.8':445
'13#.#8.154.214':445
'13#.#8.28.93':445
'13#.#8.217.190':445
'13#.#8.169.87':445
'13#.#8.38.82':445
'13#.78.33.6':445
'13#.#8.243.46':445
'13#.#8.20.243':445
'13#.#8.142.211':445
'13#.#8.13.87':445
'13#.#8.108.179':445
'13#.#8.125.87':445
'13#.#8.22.200':139
'13#.#8.249.201':139
'13#.#8.123.126':139
'13#.#8.61.223':139
'13#.#8.149.180':139
'13#.#8.96.159':139
'13#.#8.26.198':139
'13#.#8.57.242':139
'13#.#8.25.95':139
'13#.#8.103.195':139
'13#.#8.103.244':139
'13#.#8.59.22':139
'13#.#8.88.236':139
'13#.78.67.4':139
'13#.#8.31.245':139
'13#.#8.13.142':139
'13#.#8.210.163':139
'13#.#8.133.53':139
'13#.#8.53.133':139
'13#.#8.19.119':139
'13#.#8.180.147':139
'13#.#8.239.226':139
'13#.#8.203.206':139
'13#.78.6.65':139
'13#.#8.121.218':139
'13#.#8.169.87':139
'13#.#8.155.106':139
'13#.#8.22.61':139
'13#.#8.21.113':139
'13#.#8.154.20':139
'13#.#8.61.122':139
'13#.#8.118.0':139
'13#.#8.204.171':139
'13#.#8.74.146':139
'13#.#8.254.174':139
'13#.78.8.98':139
'13#.#8.145.8':139
'13#.#8.129.221':139
'13#.#8.28.93':139
'13#.#8.217.190':139
'13#.#8.13.87':139
'13#.#8.38.82':139
'13#.78.33.6':139
'13#.#8.154.214':139
'13#.#8.20.243':139
'13#.#8.142.211':139
'13#.#8.45.207':139
'13#.#8.108.179':139
'13#.#8.125.87':139
'13#.#8.243.46':139
'13#.#8.59.166':445
'13#.#8.162.101':445
'13#.#8.26.181':445
'13#.#8.149.59':445
'13#.#8.26.149':445
'13#.#8.24.59':445
'13#.#8.135.85':139
'13#.78.26.2':139
'13#.#8.108.39':139
'13#.78.80.9':445
'13#.78.14.9':139
'13#.#8.214.29':139
'13#.78.4.69':445
'13#.#8.76.33':445
'13#.#8.83.250':445
'13#.78.3.41':445
'13#.#8.105.217':445
'13#.#8.115.5':445
'13#.#8.4.171':445
'13#.#8.140.5':445
'13#.#8.59.140':445
'13#.#8.196.83':445
'13#.#8.14.196':445
'13#.#8.116.159':445
'13#.#8.0.134':139
'13#.#8.138.206':139
'13#.#8.19.30':139
'13#.#8.103.103':139
'13#.#8.20.11':139
'13#.#8.177.9':139
'13#.#8.81.37':139
'13#.78.26.2':445
'13#.#8.108.39':445
'13#.#8.0.134':445
'13#.78.14.9':445
'13#.#8.214.29':445
'13#.#8.135.85':445
'13#.#8.105.86':139
'13#.#8.32.34':139
'13#.#8.137.217':139
'13#.#8.210.0':139
'13#.#8.105.210':139
'13#.#8.102.106':139
'13#.#8.182.140':139
'13#.#8.46.182':139
'13#.#8.11.46':139
'13#.#8.191.106':139
'13#.#8.79.249':139
'13#.#8.62.115':139
'13#.#8.128.245':445
'13#.#8.109.52':139
'13#.#8.150.160':139
'13#.#8.235.146':139
'13#.#8.204.171':9988
'13#.#8.254.174':9988
'13#.#8.22.200':9988
'13#.#8.244.240':139
'13#.#8.128.245':139
'13#.78.3.41':139
'13#.#8.206.145':139
'13#.#8.100.207':139
'13#.#8.104.130':139
'13#.#8.38.82':9988
'13#.#8.169.87':9988
'13#.#8.103.195':9988
'13#.#8.254.174':445
'13#.#8.22.200':445
'13#.#8.168.207':445
'13#.#8.45.207':9988
'13#.#8.155.106':9988
'13#.#8.145.8':9988
'13#.78.33.6':9988
'13#.#8.13.87':9988
'13#.#8.20.243':9988
'13#.#8.105.217':139
'13#.#8.26.181':139
'13#.78.80.9':139
'13#.#8.109.52':445
'13#.#8.24.59':139
'13#.#8.59.166':139
'13#.#8.162.101':139
'13#.#8.100.207':445
'13#.#8.104.130':445
'13#.#8.244.240':445
'13#.#8.150.160':445
'13#.#8.235.146':445
'13#.#8.206.145':445
'13#.#8.83.250':139
'13#.#8.196.83':139
'13#.#8.14.196':139
'13#.#8.115.5':139
'13#.78.4.69':139
'13#.#8.76.33':139
'13#.#8.59.140':139
'13#.#8.149.59':139
'13#.#8.26.149':139
'13#.#8.116.159':139
'13#.#8.4.171':139
'13#.#8.140.5':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней