Trojan.Starman.6051

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#33.53.167':445
'22#.#33.133.1':445
'22#.#33.40.22':445
'22#.#33.162.211':445
'22#.#33.196.162':445
'22#.#33.56.123':445
'22#.#33.93.47':445
'22#.#33.82.31':445
'22#.#33.254.27':445
'22#.#33.126.19':445
'22#.#33.152.58':445
'22#.#33.154.165':445
'22#.#33.50.64':445
'22#.#33.165.99':445
'22#.#33.253.246':445
'22#.#33.99.210':445
'22#.#33.197.161':445
'22#.#33.200.11':445
'22#.#33.208.128':445
'22#.#33.61.88':445
'22#.#33.192.206':445
'22#.#33.98.20':445
'22#.#33.195.35':139
'22#.#33.2.214':139
'22#.#33.35.110':139
'22#.#33.66.227':445
'22#.#33.108.141':139
'22#.#33.157.95':139
'22#.#33.20.159':139
'22#.#33.212.133':139
'22#.#33.231.101':139
'22#.#33.120.157':139
'22#.#33.1.120':139
'22#.#33.147.59':445
'22#.#33.104.201':139
'22#.#33.212.210':445
'22#.#33.161.129':445
'22#.#33.58.232':445
'22#.#33.76.45':139
'22#.#33.76.45':445
'22#.#33.151.51':445
'22#.#33.104.201':445
'22#.#33.151.51':139
'22#.#33.66.227':139
'22#.#33.126.19':139
'22#.#33.152.58':139
'22#.#33.56.123':139
'22#.#33.53.167':139
'22#.#33.133.1':139
'22#.#33.254.27':139
'22#.#33.58.232':139
'22#.#33.212.210':139
'22#.#33.161.129':139
'22#.#33.93.47':139
'22#.#33.82.31':139
'22#.#33.192.206':139
'22#.#33.98.20':139
'22#.#33.197.161':139
'22#.#33.154.165':139
'22#.#33.50.64':139
'22#.#33.61.88':139
'22#.#33.196.162':139
'22#.#33.40.22':139
'22#.#33.162.211':139
'22#.#33.200.11':139
'22#.#33.208.128':139
'22#.#33.51.28':445
'22#.#33.87.28':445
'22#.#33.147.3':445
'22#.#33.216.28':445
'22#.#33.208.92':445
'22#.#33.21.51':445
'22#.#33.2.26':445
'22#.#33.214.36':445
'22#.#33.15.194':445
'22#.#33.89.224':445
'22#.#33.103.55':445
'22#.#33.32.146':445
'22#.#33.57.17':445
'22#.#33.4.223':445
'22#.#33.147.59':139
'22#.#33.245.12':445
'22#.#33.86.59':445
'22#.#33.10.135':445
'22#.#33.109.201':445
'22#.#33.78.216':445
'22#.#33.223.86':445
'22#.#33.123.134':445
'22#.#33.2.215':445
'22#.#33.240.130':445
'22#.#33.152.202':445
'22#.#33.73.187':445
'22#.#33.254.14':445
'22#.#33.245.239':445
'22#.#33.8.81':445
'22#.#33.64.21':445
'22#.#33.68.200':445
'22#.#33.25.246':445
'22#.#33.25.170':445
'22#.#33.209.0':445
'22#.#33.238.208':445
'22#.#33.212.133':445
'22#.#33.231.101':445
'22#.#33.20.159':445
'22#.#33.208.238':445
'22#.#33.113.117':445
'22#.#33.95.233':445
'22#.#33.132.90':445
'22#.#33.48.106':445
'22#.#33.90.134':445
'22#.#33.17.33':445
'22#.#33.12.216':445
'22#.#33.150.113':445
'22#.#33.40.246':445
'22#.#33.176.28':445
'22#.#33.6.16':445
'22#.#33.89.139':139
'22#.#33.147.153':139
'22#.#33.102.128':139
'22#.#33.184.230':445
'22#.#33.81.156':139
'22#.#33.49.159':445
'22#.#33.8.224':445
'22#.#33.171.34':445
'22#.#33.142.125':445
'22#.#33.163.1':445
'22#.#33.162.143':445
'22#.#33.242.248':445
'22#.#33.138.226':445
'22#.#33.216.58':445
'22#.#33.197.218':445
'22#.#33.23.7':445
'22#.#33.25.246':139
'22#.#33.25.170':139
'22#.#33.245.239':139
'22#.#33.2.215':139
'22#.#33.240.130':139
'22#.#33.68.200':139
'22#.#33.163.1':139
'22#.#33.171.34':139
'22#.#33.142.125':139
'22#.#33.8.81':139
'22#.#33.64.21':139
'22#.#33.48.106':139
'22#.#33.90.134':139
'22#.#33.208.238':139
'22#.#33.209.0':139
'22#.#33.238.208':139
'22#.#33.132.90':139
'22#.#33.254.14':139
'22#.#33.152.202':139
'22#.#33.73.187':139
'22#.#33.113.117':139
'22#.#33.95.233':139
'22#.#33.184.230':139
'22#.#33.108.141':445
'22#.#33.6.16':139
'22#.#33.17.33':139
'22#.#33.12.216':139
'22#.#33.35.110':445
'22#.#33.120.157':445
'22#.#33.1.120':445
'22#.#33.157.95':445
'22#.#33.195.35':445
'22#.#33.2.214':445
'22#.#33.197.218':139
'22#.#33.23.7':139
'22#.#33.162.143':139
'22#.#33.49.159':139
'22#.#33.8.224':139
'22#.#33.216.58':139
'22#.#33.176.28':139
'22#.#33.150.113':139
'22#.#33.40.246':139
'22#.#33.242.248':139
'22#.#33.138.226':139
'22#.#33.165.99':139
'22#.#33.170.217':445
'22#.#33.119.149':445
'22#.#33.183.175':445
'22#.#33.105.37':445
'22#.#33.4.146':445
'22#.#33.217.162':445
'22#.#33.59.21':445
'22#.#33.11.31':445
'22#.#33.141.105':445
'22#.#33.150.128':445
'22#.#33.66.150':445
'22#.#33.42.81':139
'22#.#33.152.232':139
'22#.#33.203.6':139
'22#.#33.31.227':139
'22#.#33.21.250':139
'22#.#33.55.221':139
'22#.#33.74.103':445
'22#.#33.53.74':445
'22#.#33.133.2':445
'22#.#33.43.175':139
'22#.#33.28.244':445
'22#.#33.228.212':445
'22#.#33.174.0':445
'22#.#33.9.210':445
'22#.133.9.9':445
'22#.#33.104.49':445
'22#.#33.26.135':445
'22#.#33.147.124':445
'22#.#33.70.130':445
'22#.#33.54.16':445
'22#.#33.143.138':445
'22#.#33.84.153':445
'22#.#33.181.102':445
'22#.#33.161.144':445
'22#.#33.161.101':445
'22#.#33.90.237':445
'22#.#33.239.145':445
'22#.#33.106.162':445
'22#.#33.35.68':445
'22#.#33.84.175':445
'22#.#33.168.147':445
'22#.#33.101.159':445
'22#.#33.147.140':445
'22#.#33.11.31':139
'22#.#33.90.237':139
'22#.#33.59.21':139
'22#.#33.66.150':139
'22#.#33.141.105':139
'22#.#33.239.145':139
'22#.#33.106.162':139
'22#.#33.101.159':139
'22#.#33.161.144':139
'22#.#33.161.101':139
'22#.#33.181.102':139
'22#.#33.53.74':139
'22#.#33.105.37':139
'22#.#33.74.103':139
'22#.#33.133.2':139
'22#.#33.28.244':139
'22#.#33.4.146':139
'22#.#33.217.162':139
'22#.#33.150.128':139
'22#.#33.119.149':139
'22#.#33.183.175':139
'22#.#33.170.217':139
'22#.#33.70.130':139
'22#.#33.10.70':139
'22#.#33.147.124':139
'22#.#33.84.153':139
'22#.#33.54.16':139
'22#.#33.19.11':139
'22#.#33.119.145':139
'22#.#33.207.211':139
'22#.#33.49.48':139
'22#.#33.52.147':139
'22#.#33.148.110':139
'22#.#33.84.175':139
'22#.133.9.9':139
'22#.#33.35.68':139
'22#.#33.147.140':139
'22#.#33.168.147':139
'22#.#33.104.49':139
'22#.#33.26.135':139
'22#.#33.143.138':139
'22#.#33.174.0':139
'22#.#33.9.210':139
'22#.#33.228.212':139
'22#.#33.10.37':139
'22#.#33.63.110':139
'22#.#33.218.43':139
'22#.#33.136.243':445
'22#.#33.43.137':445
'22#.#33.12.193':139
'22#.#33.12.193':445
'22#.#33.245.12':139
'22#.#33.63.110':445
'22#.#33.218.43':445
'22#.#33.10.37':445
'22#.#33.139.86':445
'22#.#33.36.224':445
'22#.#33.107.188':445
'22#.#33.121.79':445
'22#.#33.231.121':445
'22#.#33.155.140':445
'22#.#33.6.99':445
'22#.#33.253.178':445
'22#.#33.227.39':445
'22#.#33.136.43':445
'22#.#33.217.160':445
'22#.#33.21.51':139
'22#.#33.89.224':139
'22#.#33.87.28':139
'22#.#33.147.3':139
'22#.#33.51.28':139
'22#.#33.103.55':139
'22#.#33.253.246':139
'22#.#33.99.210':139
'22#.#33.214.36':139
'22#.#33.15.194':139
'22#.#33.2.26':139
'22#.#33.86.59':139
'22#.#33.223.86':139
'22#.#33.57.17':139
'22#.#33.4.223':139
'22#.#33.32.146':139
'22#.#33.123.134':139
'22#.#33.216.28':139
'22#.#33.208.92':139
'22#.#33.109.201':139
'22#.#33.78.216':139
'22#.#33.10.135':139
'22#.#33.133.2':9988
'22#.#33.59.21':9988
'22#.#33.43.175':445
'22#.#33.152.232':445
'22#.#33.55.221':445
'22#.#33.53.74':9988
'22#.#33.66.150':9988
'22#.#33.90.237':9988
'22#.#33.161.101':9988
'22#.#33.28.244':9988
'22#.#33.239.145':9988
'22#.#33.148.110':445
'22#.#33.49.48':445
'22#.#33.52.147':445
'22#.#33.10.70':445
'22#.#33.19.11':445
'22#.#33.119.145':445
'22#.#33.203.6':445
'22#.#33.42.81':445
'22#.#33.21.250':445
'22#.#33.207.211':445
'22#.#33.31.227':445
'22#.#33.155.140':139
'22#.#33.136.43':139
'22#.#33.36.224':139
'22#.#33.107.188':139
'22#.#33.139.86':139
'22#.#33.217.160':139
'22#.#33.136.243':139
'22#.#33.43.137':139
'22#.#33.253.178':139
'22#.#33.227.39':139
'22#.#33.6.99':139
'22#.#33.4.146':9988
'22#.#33.150.128':9988
'22#.133.9.9':9988
'22#.#33.183.175':9988
'22#.#33.181.102':9988
'22#.#33.228.212':9988
'22#.#33.121.79':139
'22#.#33.231.121':139
'22#.#33.217.162':9988
'22#.#33.105.37':9988
'22#.#33.11.31':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней