Trojan.Starman.6002

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#5.80.27':445
'20#.#5.96.99':445
'20#.#5.96.73':445
'20#.#5.23.53':445
'20#.#5.14.142':445
'20#.#5.65.79':445
'20#.#5.10.37':445
'20#.#5.146.55':445
'20#.#5.199.88':445
'20#.#5.234.19':445
'20#.#5.132.249':445
'20#.#5.42.145':445
'20#.#5.255.98':445
'20#.#5.1.101':445
'20#.#5.236.110':445
'20#.#5.116.126':445
'20#.65.5.20':445
'20#.#5.43.86':445
'20#.#5.3.214':445
'20#.65.37.3':445
'20#.#5.52.84':445
'20#.#5.164.80':445
'20#.#5.53.196':445
'20#.#5.33.204':445
'20#.#5.128.85':445
'20#.#5.213.187':139
'20#.#5.198.213':139
'20#.#5.50.199':139
'20#.#5.201.216':139
'20#.#5.31.201':139
'20#.#5.188.31':139
'20#.#5.226.77':139
'20#.#5.71.218':445
'20#.#5.248.70':445
'20#.#5.197.50':139
'20#.#5.24.197':139
'20#.#5.120.230':139
'20#.#5.248.70':139
'20#.#5.51.195':139
'20#.#5.64.136':139
'20#.#5.52.240':445
'20#.#5.225.189':445
'20#.#5.71.218':139
'20#.#5.93.174':139
'20#.65.2.50':139
'20#.#5.202.58':139
'20#.#5.136.93':139
'20#.#5.85.236':139
'20#.#5.173.224':139
'20#.#5.21.173':445
'20#.#5.107.158':139
'20#.#5.175.172':139
'20#.#5.87.65':139
'20#.#5.52.219':445
'20#.#5.36.244':445
'20#.#5.168.174':445
'20#.#5.43.86':139
'20#.#5.1.101':139
'20#.#5.236.110':139
'20#.#5.21.173':139
'20#.#5.116.126':139
'20#.65.5.20':139
'20#.#5.113.136':445
'20#.#5.66.100':445
'20#.#5.132.54':445
'20#.#5.245.117':445
'20#.#5.188.178':445
'20#.#5.6.155':445
'20#.#5.34.63':445
'20#.#5.28.115':445
'20#.#5.245.28':445
'20#.#5.118.223':445
'20#.#5.201.156':445
'20#.#5.151.201':445
'20#.#5.255.98':139
'20#.#5.199.88':139
'20#.#5.10.37':139
'20#.#5.146.55':139
'20#.#5.96.73':139
'20#.#5.132.249':139
'20#.#5.234.19':139
'20#.#5.107.158':445
'20#.#5.175.172':445
'20#.#5.87.65':445
'20#.#5.128.85':139
'20#.#5.52.240':139
'20#.#5.225.189':139
'20#.#5.3.214':139
'20#.65.37.3':139
'20#.#5.52.84':139
'20#.#5.164.80':139
'20#.#5.53.196':139
'20#.#5.33.204':139
'20#.#5.65.79':139
'20#.#5.96.99':139
'20#.#5.42.145':139
'20#.#5.23.53':139
'20#.#5.14.142':139
'20#.#5.80.27':139
'20#.#5.51.195':445
'20#.#5.76.156':445
'20#.#5.152.137':445
'20#.#5.30.120':445
'20#.#5.66.125':445
'20#.#5.179.186':445
'20#.#5.99.27':445
'20#.#5.125.183':445
'20#.#5.67.91':445
'20#.#5.158.67':445
'20#.#5.253.46':445
'20#.#5.7.253':445
'20#.#5.137.250':445
'20#.#5.110.214':445
'20#.#5.168.140':445
'20#.#5.140.194':445
'20#.#5.153.17':445
'20#.#5.147.153':445
'20#.#5.57.25':445
'20#.#5.197.190':445
'20#.#5.162.197':445
'20#.#5.214.162':445
'20#.#5.144.140':445
'20#.#5.150.26':445
'20#.#5.82.29':445
'20#.#5.111.158':445
'20#.#5.24.10':139
'20#.#5.182.22':139
'20#.#5.126.127':139
'20#.#5.254.163':139
'20#.#5.182.82':139
'20#.#5.86.30':139
'20#.#5.128.136':139
'20#.#5.218.83':139
'20#.#5.153.73':139
'20#.#5.183.129':139
'20#.#5.145.29':139
'20#.#5.116.252':139
'20#.#5.49.20':445
'20#.#5.179.22':139
'20#.65.6.28':139
'20#.#5.252.111':445
'20#.65.7.48':445
'20#.#5.54.158':445
'20#.#5.214.230':139
'20#.#5.48.240':139
'20#.#5.39.153':139
'20#.#5.83.107':139
'20#.#5.56.249':139
'20#.#5.249.150':139
'20#.#5.100.79':445
'20#.#5.120.230':445
'20#.#5.226.77':445
'20#.#5.66.225':139
'20#.#5.50.199':445
'20#.#5.197.50':445
'20#.#5.24.197':445
'20#.#5.57.25':139
'20#.#5.110.214':139
'20#.#5.168.140':139
'20#.#5.100.79':139
'20#.#5.153.17':139
'20#.#5.147.153':139
'20#.#5.173.224':445
'20#.#5.93.174':445
'20#.65.2.50':445
'20#.#5.85.236':445
'20#.#5.64.136':445
'20#.#5.136.93':445
'20#.#5.188.31':445
'20#.#5.213.187':445
'20#.#5.198.213':445
'20#.#5.202.58':445
'20#.#5.201.216':445
'20#.#5.31.201':445
'20#.#5.140.194':139
'20#.#5.125.183':139
'20#.#5.67.91':139
'20#.#5.158.67':139
'20#.#5.253.46':139
'20#.#5.7.253':139
'20#.#5.137.250':139
'20#.#5.54.158':139
'20#.#5.49.20':139
'20#.#5.66.225':445
'20#.#5.111.158':139
'20#.#5.252.111':139
'20#.65.7.48':139
'20#.#5.197.190':139
'20#.#5.162.197':139
'20#.#5.214.162':139
'20#.#5.144.140':139
'20#.#5.150.26':139
'20#.#5.82.29':139
'20#.#5.76.156':139
'20#.#5.152.137':139
'20#.#5.30.120':139
'20#.#5.66.125':139
'20#.#5.179.186':139
'20#.#5.99.27':139
'20#.#5.60.223':445
'20#.#5.117.60':445
'20#.#5.208.125':445
'20#.#5.157.113':445
'20#.#5.238.252':445
'20#.#5.223.239':445
'20#.#5.54.226':445
'20#.#5.111.58':445
'20#.#5.128.111':445
'20#.#5.147.146':445
'20#.#5.25.148':445
'20#.#5.206.238':445
'20#.#5.174.190':445
'20#.#5.5.241':445
'20#.#5.116.216':445
'20#.#5.118.177':139
'20#.#5.216.114':445
'20#.#5.59.239':445
'20#.#5.172.51':445
'20#.#5.137.20':445
'20#.#5.173.222':445
'20#.#5.147.205':445
'20#.#5.136.66':445
'20#.#5.96.252':445
'20#.#5.165.134':445
'20#.#5.209.238':445
'20#.#5.43.77':445
'20#.#5.31.85':445
'20#.#5.63.177':445
'20#.#5.134.216':445
'20#.#5.77.143':445
'20#.#5.244.116':445
'20#.#5.219.243':445
'20#.#5.87.219':445
'20#.#5.27.14':445
'20#.#5.67.34':445
'20#.#5.230.160':445
'20#.#5.104.28':445
'20#.#5.240.222':445
'20#.#5.10.156':445
'20#.#5.9.181':445
'20#.#5.155.232':445
'20#.#5.219.251':445
'20#.#5.189.228':445
'20#.#5.136.247':445
'20#.#5.253.146':445
'20#.#5.18.90':445
'20#.#5.64.18':445
'20#.#5.4.122':445
'20#.#5.234.69':139
'20#.#5.117.60':139
'20#.#5.208.125':139
'20#.#5.147.146':139
'20#.#5.238.252':139
'20#.#5.223.239':139
'20#.#5.60.223':139
'20#.#5.111.58':139
'20#.#5.128.111':139
'20#.#5.165.134':139
'20#.#5.25.148':139
'20#.#5.206.238':139
'20#.#5.54.226':139
'20#.#5.59.239':139
'20#.#5.147.205':139
'20#.#5.96.252':139
'20#.#5.172.51':139
'20#.#5.116.216':139
'20#.#5.216.114':139
'20#.#5.137.20':139
'20#.#5.173.222':139
'20#.#5.157.113':139
'20#.#5.5.241':139
'20#.#5.174.190':139
'20#.#5.136.66':139
'20#.#5.9.181':139
'20#.#5.43.77':139
'20#.#5.31.85':139
'20#.#5.27.14':139
'20#.#5.134.216':139
'20#.#5.77.143':139
'20#.#5.209.238':139
'20#.#5.219.243':139
'20#.#5.87.219':139
'20#.#5.254.87':139
'20#.#5.67.34':139
'20#.#5.230.160':139
'20#.#5.244.116':139
'20#.#5.240.222':139
'20#.#5.10.156':139
'20#.#5.18.90':139
'20#.#5.155.232':139
'20#.#5.219.251':139
'20#.#5.104.28':139
'20#.#5.136.247':139
'20#.#5.253.146':139
'20#.#5.63.177':139
'20#.#5.64.18':139
'20#.#5.4.122':139
'20#.#5.189.228':139
'20#.#5.254.87':445
'20#.#5.66.14':445
'20#.#5.113.160':445
'20#.65.9.66':445
'20#.#5.57.70':445
'20#.#5.205.89':445
'20#.#5.84.57':445
'20#.#5.13.148':445
'20#.#5.221.127':445
'20#.#5.129.161':445
'20#.#5.142.77':445
'20#.#5.183.128':445
'20#.#5.56.13':445
'20#.#5.148.186':445
'20#.#5.156.148':445
'20#.#5.163.156':445
'20#.#5.96.49':445
'20#.#5.208.96':445
'20#.#5.216.194':445
'20#.#5.13.135':445
'20#.#5.25.178':445
'20#.#5.83.90':445
'20#.#5.35.126':445
'20#.#5.132.196':445
'20#.#5.213.165':445
'20#.#5.86.254':139
'20#.#5.245.28':139
'20#.#5.52.219':139
'20#.#5.36.244':139
'20#.#5.151.201':139
'20#.#5.34.63':139
'20#.#5.28.115':139
'20#.#5.94.123':445
'20#.#5.122.45':445
'20#.#5.46.206':445
'20#.#5.168.174':139
'20#.#5.86.254':445
'20#.#5.236.203':445
'20#.#5.46.206':139
'20#.#5.245.117':139
'20#.#5.188.178':139
'20#.#5.236.203':139
'20#.#5.94.123':139
'20#.#5.122.45':139
'20#.#5.132.54':139
'20#.#5.118.223':139
'20#.#5.201.156':139
'20#.#5.6.155':139
'20#.#5.113.136':139
'20#.#5.66.100':139
'20#.#5.49.166':445
'20#.#5.249.8':139
'20#.#5.169.248':139
'20#.#5.166.170':139
'20#.#5.103.52':139
'20#.#5.166.28':139
'20#.#5.56.111':139
'20#.#5.216.194':139
'20#.#5.148.186':139
'20#.#5.156.148':139
'20#.#5.49.166':139
'20#.#5.96.49':139
'20#.#5.208.96':139
'20#.#5.172.51':9988
'20#.#5.147.146':9988
'20#.#5.206.238':9988
'20#.#5.234.69':445
'20#.#5.118.177':445
'20#.#5.137.20':9988
'20#.#5.10.156':9988
'20#.#5.18.90':9988
'20#.#5.230.160':9988
'20#.#5.9.181':9988
'20#.#5.219.251':9988
'20#.#5.104.28':9988
'20#.#5.163.156':139
'20#.#5.13.148':139
'20#.#5.221.127':139
'20#.#5.129.161':139
'20#.#5.142.77':139
'20#.#5.183.128':139
'20#.#5.56.13':139
'20#.#5.249.8':445
'20#.#5.169.248':445
'20#.#5.166.170':445
'20#.#5.103.52':445
'20#.#5.56.111':445
'20#.#5.166.28':445
'20#.#5.13.135':139
'20#.#5.25.178':139
'20#.#5.83.90':139
'20#.#5.35.126':139
'20#.#5.132.196':139
'20#.#5.213.165':139
'20#.#5.113.160':139
'20#.#5.66.14':139
'20#.65.9.66':139
'20#.#5.205.89':139
'20#.#5.57.70':139
'20#.#5.84.57':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней