Trojan.Starman.6040

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12#.#52.175.179':445
'12#.#52.248.86':445
'12#.#52.74.56':445
'12#.#52.192.73':445
'12#.#52.164.216':445
'12#.#52.220.195':445
'12#.#52.104.65':445
'12#.#52.122.12':445
'12#.#52.152.21':445
'12#.#52.156.151':445
'12#.#52.27.125':445
'12#.#52.162.213':445
'12#.#52.98.162':445
'12#.#52.22.186':445
'12#.#52.89.99':445
'12#.#52.209.59':445
'12#.#52.111.62':445
'12#.#52.74.151':445
'12#.#52.232.98':445
'12#.#52.11.139':445
'12#.#52.151.155':445
'12#.#52.99.174':139
'12#.#52.138.200':139
'12#.#52.109.19':139
'12#.#52.144.105':139
'12#.#52.224.71':139
'12#.#52.196.194':139
'12#.#52.176.196':139
'12#.#52.17.249':139
'12#.#52.185.12':139
'12#.#52.196.185':139
'12#.#52.128.193':139
'12#.#52.60.138':139
'12#.#52.197.135':445
'12#.#52.1.37':139
'12#.#52.197.135':139
'12#.#52.178.11':139
'12#.#52.4.237':139
'12#.#52.85.141':139
'12#.#52.60.138':445
'12#.#52.178.11':445
'12#.#52.1.37':445
'12#.#52.125.117':445
'12#.#52.122.12':139
'12#.#52.220.195':139
'12#.#52.156.151':139
'12#.#52.248.86':139
'12#.#52.152.21':139
'12#.#52.110.12':445
'12#.#52.111.104':445
'12#.#52.91.0':445
'12#.#52.104.65':139
'12#.#52.115.26':445
'12#.#52.175.179':139
'12#.#52.232.98':139
'12#.#52.111.62':139
'12#.#52.151.155':139
'12#.#52.98.162':139
'12#.#52.11.139':139
'12#.#52.164.216':139
'12#.#52.74.56':139
'12#.#52.192.73':139
'12#.#52.74.151':139
'12#.#52.27.125':139
'12#.#52.129.113':445
'12#.#52.176.79':445
'12#.#52.189.148':445
'12#.#52.36.178':445
'12#.#52.31.179':445
'12#.#52.96.122':445
'12#.#52.117.42':445
'12#.#52.217.234':445
'12#.#52.78.241':445
'12#.#52.35.6':445
'12#.#52.140.98':445
'12#.#52.95.17':445
'12#.#52.88.199':445
'12#.#52.254.43':445
'12#.#52.45.170':445
'12#.#52.228.228':445
'12#.#52.66.80':445
'12#.#52.27.85':445
'12#.#52.205.216':445
'12#.#52.3.202':445
'12#.#52.173.226':445
'12#.#52.151.172':445
'12#.#52.147.151':445
'12#.#52.63.187':445
'12#.#52.0.180':445
'12#.#52.150.57':445
'12#.#52.51.30':445
'12#.#52.77.191':445
'12#.#52.73.71':445
'12#.#52.33.203':445
'12#.#52.121.81':445
'12#.#52.170.87':445
'12#.#52.176.196':445
'12#.#52.84.176':445
'12#.#52.196.194':445
'12#.#52.196.185':445
'12#.#52.17.249':445
'12#.#52.142.201':445
'12#.#52.47.234':445
'12#.#52.106.214':445
'12#.#52.137.241':445
'12#.#52.4.28':445
'12#.#52.229.190':445
'12#.#52.63.112':445
'12#.#52.191.121':445
'12#.#52.145.41':445
'12#.#52.121.200':445
'12#.#52.101.173':139
'12#.#52.179.53':139
'12#.#52.173.250':139
'12#.#52.217.57':445
'12#.#52.250.143':139
'12#.#52.92.1':445
'12#.#52.181.180':445
'12#.#52.132.241':445
'12#.#52.111.27':445
'12#.#52.249.52':445
'12#.#52.96.180':445
'12#.#52.150.80':445
'12#.#52.221.3':445
'12#.#52.179.249':445
'12#.#52.61.157':445
'12#.#52.67.22':445
'12#.#52.185.12':445
'12#.#52.73.71':139
'12#.#52.51.30':139
'12#.#52.121.81':139
'12#.#52.147.151':139
'12#.#52.33.203':139
'12#.#52.111.27':139
'12#.#52.181.180':139
'12#.#52.96.180':139
'12#.#52.77.191':139
'12#.#52.249.52':139
'12#.#52.151.172':139
'12#.#52.106.214':139
'12#.#52.142.201':139
'12#.#52.4.28':139
'12#.#52.84.176':139
'12#.#52.137.241':139
'12#.#52.150.57':139
'12#.#52.63.187':139
'12#.#52.0.180':139
'12#.#52.47.234':139
'12#.#52.170.87':139
'12#.#52.85.141':445
'12#.#52.128.193':445
'12#.#52.4.237':445
'12#.#52.63.112':139
'12#.#52.217.57':139
'12#.#52.99.174':445
'12#.#52.138.200':445
'12#.#52.109.19':445
'12#.#52.144.105':445
'12#.#52.224.71':445
'12#.#52.229.190':139
'12#.#52.179.249':139
'12#.#52.150.80':139
'12#.#52.67.22':139
'12#.#52.132.241':139
'12#.#52.61.157':139
'12#.#52.121.200':139
'12#.#52.191.121':139
'12#.#52.145.41':139
'12#.#52.221.3':139
'12#.#52.92.1':139
'12#.#52.162.213':139
'12#.#52.14.43':445
'12#.#52.101.25':445
'12#.#52.71.174':445
'12#.#52.216.185':445
'12#.#52.250.198':445
'12#.#52.81.159':445
'12#.#52.59.80':445
'12#.#52.36.134':445
'12#.#52.174.151':445
'12#.#52.143.146':445
'12#.#52.75.239':445
'12#.#52.87.159':139
'12#.#52.101.168':139
'12#.#52.31.144':139
'12#.#52.86.67':139
'12#.#52.153.111':139
'12#.#52.72.47':445
'12#.#52.19.206':445
'12#.#52.76.219':139
'12#.#52.203.168':139
'12#.#52.60.162':139
'12#.#52.47.134':445
'12#.#52.113.61':445
'12#.#52.52.179':445
'12#.#52.64.107':445
'12#.#52.178.231':445
'12#.#52.167.110':445
'12#.#52.232.6':445
'12#.#52.110.199':445
'12#.#52.46.113':445
'12#.#52.41.41':445
'12#.#52.45.28':445
'12#.#52.163.202':445
'12#.#52.103.208':445
'12#.#52.203.59':445
'12#.#52.231.176':445
'12#.#52.59.231':445
'12#.#52.240.221':445
'12#.#52.56.165':445
'12#.#52.85.108':445
'12#.#52.91.98':445
'12#.#52.43.26':445
'12#.#52.87.55':139
'12#.#52.59.231':139
'12#.#52.203.59':139
'12#.#52.231.176':139
'12#.#52.81.159':139
'12#.#52.59.80':139
'12#.#52.43.26':139
'12#.#52.85.108':139
'12#.#52.91.98':139
'12#.#52.163.202':139
'12#.#52.103.208':139
'12#.#52.36.134':139
'12#.#52.216.185':139
'12#.#52.250.198':139
'12#.#52.75.239':139
'12#.#52.72.47':139
'12#.#52.19.206':139
'12#.#52.174.151':139
'12#.#52.143.146':139
'12#.#52.101.25':139
'12#.#52.71.174':139
'12#.#52.14.43':139
'12#.#52.144.202':139
'12#.#52.168.232':139
'12#.#52.5.148':139
'12#.#52.167.110':139
'12#.#52.232.6':139
'12#.#52.244.53':139
'12#.#52.53.81':139
'12#.#52.53.204':139
'12#.#52.249.118':139
'12#.#52.205.81':139
'12#.#52.110.199':139
'12#.#52.64.107':139
'12#.#52.178.231':139
'12#.#52.45.28':139
'12#.#52.240.221':139
'12#.#52.56.165':139
'12#.#52.46.113':139
'12#.#52.41.41':139
'12#.#52.113.61':139
'12#.#52.52.179':139
'12#.#52.47.134':139
'12#.#52.91.0':139
'12#.#52.110.12':139
'12#.#52.115.26':139
'12#.#52.23.234':445
'12#.#52.167.90':445
'12#.#52.254.43':139
'12#.#52.95.17':139
'12#.#52.228.228':139
'12#.#52.111.104':139
'12#.#52.45.170':139
'12#.#52.233.126':445
'12#.#52.80.132':445
'12#.#52.74.79':445
'12#.#52.255.135':445
'12#.#52.36.95':445
'12#.#52.136.15':445
'12#.#52.167.90':139
'12#.#52.127.74':445
'12#.#52.23.234':139
'12#.#52.127.74':139
'12#.#52.233.126':139
'12#.#52.217.234':139
'12#.#52.96.122':139
'12#.#52.35.6':139
'12#.#52.176.79':139
'12#.#52.78.241':139
'12#.#52.209.59':139
'12#.#52.22.186':139
'12#.#52.89.99':139
'12#.#52.117.42':139
'12#.#52.125.117':139
'12#.#52.129.113':139
'12#.#52.205.216':139
'12#.#52.66.80':139
'12#.#52.173.226':139
'12#.#52.88.199':139
'12#.#52.3.202':139
'12#.#52.31.179':139
'12#.#52.189.148':139
'12#.#52.36.178':139
'12#.#52.27.85':139
'12#.#52.140.98':139
'12#.#52.74.79':139
'12#.#52.203.168':445
'12#.#52.60.162':445
'12#.#52.101.168':445
'12#.#52.31.144':445
'12#.#52.87.159':445
'12#.#52.43.26':9988
'12#.#52.174.151':9988
'12#.#52.143.146':9988
'12#.#52.76.219':445
'12#.#52.14.43':9988
'12#.#52.153.111':445
'12#.#52.249.118':445
'12#.#52.205.81':445
'12#.#52.168.232':445
'12#.#52.5.148':445
'12#.#52.144.202':445
'12#.#52.87.55':445
'12#.#52.86.67':445
'12#.#52.53.81':445
'12#.#52.53.204':445
'12#.#52.244.53':445
'12#.#52.59.231':9988
'12#.#52.216.185':9988
'12#.#52.203.59':9988
'12#.#52.103.208':9988
'12#.#52.231.176':9988
'12#.#52.255.135':139
'12#.#52.80.132':139
'12#.#52.136.15':139
'12#.#52.45.28':9988
'12#.#52.36.95':139
'12#.#52.52.179':9988
'12#.#52.75.239':9988
'12#.#52.91.98':9988
'12#.#52.36.134':9988
'12#.#52.85.108':9988
'12#.#52.163.202':9988
'12#.#52.240.221':9988
'12#.#52.178.231':9988
'12#.#52.64.107':9988
'12#.#52.101.25':9988
'12#.#52.72.47':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней