Trojan.Starman.6378

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'13#.#1.23.251':139
'13#.#1.51.22':139
'13#.#1.234.37':139
'13#.#1.16.38':139
'13#.#1.37.234':139
'13#.#1.122.232':139
'13#.#1.137.123':139
'13#.#1.232.208':139
'13#.#1.183.149':139
'13#.#1.125.84':139
'13#.#1.102.84':139
'13#.#1.111.60':139
'13#.#1.124.159':139
'13#.#1.60.192':139
'13#.#1.77.40':139
'13#.#1.6.162':139
'13#.#1.76.146':139
'13#.#1.84.76':139
'13#.#1.80.161':139
'13#.#1.63.81':139
'13#.#1.27.172':139
'13#.#1.60.192':445
'13#.#1.111.60':445
'13#.#1.6.162':445
'13#.#1.34.186':445
'13#.#1.77.40':445
'13#.#1.80.161':445
'13#.#1.76.146':445
'13#.#1.27.172':445
'13#.#1.124.159':445
'13#.#1.63.81':445
'13#.#1.213.42':445
'13#.#1.254.137':139
'13#.#1.42.236':139
'13#.#1.64.32':139
'13#.#1.90.137':139
'13#.#1.132.27':139
'13#.#1.1.182':445
'13#.#1.125.27':445
'13#.#1.181.193':445
'13#.#1.63.210':445
'13#.#1.193.63':445
'13#.#1.34.186':139
'13#.#1.218.228':139
'13#.#1.241.218':139
'13#.#1.228.177':139
'13#.#1.58.85':139
'13#.#1.101.8':139
'13#.#1.0.140':445
'13#.#1.18.171':445
'13#.#1.223.79':445
'13#.#1.120.76':139
'13#.#1.209.112':139
'13#.#1.228.201':139
'13#.#1.32.19':139
'13#.#1.105.32':139
'13#.#1.18.171':139
'13#.#1.223.79':139
'13#.#1.0.140':139
'13#.#1.13.178':139
'13#.#1.122.179':139
'13#.#1.21.211':139
'13#.11.41.9':139
'13#.#1.220.75':139
'13#.#1.209.112':445
'13#.#1.63.210':139
'13#.#1.120.76':445
'13#.#1.218.228':445
'13#.#1.241.218':445
'13#.#1.125.27':139
'13#.#1.213.42':139
'13#.#1.1.182':139
'13#.#1.193.63':139
'13#.#1.181.193':139
'13#.#1.228.177':445
'13#.#1.220.75':445
'13#.#1.21.211':445
'13#.11.41.9':445
'13#.#1.32.19':445
'13#.#1.105.32':445
'13#.#1.58.85':445
'13#.#1.101.8':445
'13#.#1.228.201':445
'13#.#1.13.178':445
'13#.#1.122.179':445
'13#.#1.84.76':445
'13#.#1.175.250':139
'13#.#1.147.58':139
'13#.#1.235.21':139
'13#.#1.94.47':139
'13#.#1.14.241':139
'13#.#1.207.207':139
'13#.11.22.2':139
'13#.#1.72.198':139
'13#.#1.43.83':139
'13#.#1.198.18':139
'13#.#1.173.148':139
'13#.#1.65.137':445
'13#.#1.39.161':445
'13#.#1.67.221':445
'13#.#1.170.222':445
'13#.#1.62.188':445
'13#.#1.91.34':445
'13#.#1.17.66':139
'13#.#1.125.13':445
'13#.#1.146.78':445
'13#.#1.55.194':445
'13#.#1.18.154':139
'13#.#1.123.190':139
'13#.#1.154.40':139
'13#.#1.113.84':139
'13#.#1.159.250':139
'13#.#1.36.21':139
'13#.#1.200.251':139
'13#.#1.69.67':139
'13#.#1.70.74':139
'13#.#1.228.91':139
'13#.#1.84.52':139
'13#.#1.100.86':139
'13#.#1.53.122':139
'13#.#1.44.128':139
'13#.#1.104.167':139
'13#.#1.128.143':139
'13#.#1.13.170':139
'13#.#1.52.17':139
'13#.#1.137.157':139
'13#.#1.165.48':139
'13#.#1.34.111':139
'13#.#1.81.20':445
'13#.#1.254.137':445
'13#.#1.42.236':445
'13#.#1.64.32':445
'13#.#1.90.137':445
'13#.#1.132.27':445
'13#.#1.76.198':139
'13#.#1.204.76':139
'13#.#1.6.206':139
'13#.#1.109.70':139
'13#.#1.40.49':139
'13#.#1.137.123':445
'13#.#1.234.37':445
'13#.#1.23.251':445
'13#.#1.37.234':445
'13#.#1.102.84':445
'13#.#1.16.38':445
'13#.#1.232.208':445
'13#.#1.122.232':445
'13#.#1.125.84':445
'13#.#1.51.22':445
'13#.#1.183.149':445
'13#.#1.40.49':445
'13#.#1.6.206':445
'13#.#1.109.70':445
'13#.#1.125.13':139
'13#.#1.91.34':139
'13#.#1.170.230':445
'13#.#1.15.80':445
'13#.#1.49.204':445
'13#.#1.76.198':445
'13#.#1.204.76':445
'13#.#1.55.194':139
'13#.#1.81.20':139
'13#.#1.170.222':139
'13#.#1.15.80':139
'13#.#1.49.204':139
'13#.#1.170.230':139
'13#.#1.39.161':139
'13#.#1.146.78':139
'13#.#1.65.137':139
'13#.#1.62.188':139
'13#.#1.67.221':139
'13#.#1.7.227':445
'13#.#1.196.60':445
'13#.#1.252.138':445
'13#.#1.239.113':445
'13#.#1.79.183':445
'13#.#1.2.151':445
'13#.#1.101.2':445
'13#.#1.151.103':445
'13#.#1.180.26':445
'13#.#1.230.156':445
'13#.#1.183.63':445
'13#.#1.185.53':139
'13#.11.1.62':139
'13#.#1.54.63':139
'13#.#1.196.73':139
'13#.#1.235.41':139
'13#.#1.127.172':445
'13#.#1.237.67':445
'13#.#1.88.210':139
'13#.#1.181.33':139
'13#.#1.180.180':139
'13#.#1.49.106':445
'13#.#1.97.17':445
'13#.#1.53.144':445
'13#.#1.154.218':445
'13#.#1.202.87':445
'13#.#1.13.145':445
'13#.#1.12.209':445
'13#.#1.24.155':445
'13#.#1.66.226':445
'13#.#1.73.44':445
'13#.#1.15.102':445
'13#.#1.177.245':445
'13#.#1.142.203':445
'13#.#1.71.176':445
'13#.#1.118.200':445
'13#.#1.182.32':445
'13#.#1.107.174':445
'13#.#1.59.137':445
'13#.#1.70.149':445
'13#.#1.252.43':445
'13#.#1.72.177':445
'13#.#1.99.238':139
'13#.#1.182.32':139
'13#.#1.71.176':139
'13#.#1.118.200':139
'13#.#1.2.151':139
'13#.#1.101.2':139
'13#.#1.72.177':139
'13#.#1.70.149':139
'13#.#1.252.43':139
'13#.#1.177.245':139
'13#.#1.142.203':139
'13#.#1.151.103':139
'13#.#1.183.63':139
'13#.#1.79.183':139
'13#.#1.239.113':139
'13#.#1.127.172':139
'13#.#1.237.67':139
'13#.#1.180.26':139
'13#.#1.230.156':139
'13#.#1.196.60':139
'13#.#1.252.138':139
'13#.#1.7.227':139
'13#.#1.239.39':139
'13#.#1.206.185':139
'13#.#1.244.247':139
'13#.#1.13.145':139
'13#.#1.12.209':139
'13#.#1.175.128':139
'13#.#1.238.174':139
'13#.#1.128.101':139
'13#.#1.89.35':139
'13#.#1.202.83':139
'13#.#1.24.155':139
'13#.#1.154.218':139
'13#.#1.202.87':139
'13#.#1.15.102':139
'13#.#1.107.174':139
'13#.#1.59.137':139
'13#.#1.66.226':139
'13#.#1.73.44':139
'13#.#1.97.17':139
'13#.#1.53.144':139
'13#.#1.49.106':139
'13#.#1.244.247':445
'13#.#1.52.27':445
'13#.#1.52.136':445
'13#.#1.192.136':445
'13#.11.3.66':139
'13#.#1.108.195':139
'13#.#1.120.95':445
'13#.#1.20.191':445
'13#.#1.90.42':445
'13#.#1.222.51':445
'13#.#1.239.215':445
'13#.#1.59.28':139
'13#.#1.170.33':139
'13#.#1.44.86':139
'13#.#1.59.169':139
'13#.#1.115.14':139
'13#.#1.167.182':139
'13#.#1.164.253':139
'13#.#1.191.150':139
'13#.#1.253.168':139
'13#.#1.112.128':139
'13#.#1.163.90':139
'13#.#1.163.90':445
'13#.#1.253.168':445
'13#.#1.112.128':445
'13#.#1.170.33':445
'13#.#1.44.86':445
'13#.11.3.66':445
'13#.#1.108.195':445
'13#.#1.59.28':445
'13#.#1.164.253':445
'13#.#1.191.150':445
'13#.#1.59.169':445
'13#.#1.87.164':445
'13#.#1.33.96':445
'13#.#1.14.90':445
'13#.#1.99.183':445
'13#.#1.42.115':445
'13#.#1.115.14':445
'13#.#1.167.182':445
'13#.#1.191.156':445
'13#.#1.108.33':445
'13#.#1.62.237':445
'13#.#1.191.156':139
'13#.#1.180.180':445
'13#.#1.88.210':445
'13#.#1.181.33':445
'13#.#1.185.53':445
'13#.11.1.62':445
'13#.#1.252.138':9988
'13#.#1.230.156':9988
'13#.#1.7.227':9988
'13#.#1.127.172':9988
'13#.#1.183.63':9988
'13#.#1.54.63':445
'13#.#1.202.83':445
'13#.#1.128.101':445
'13#.#1.89.35':445
'13#.#1.239.39':445
'13#.#1.206.185':445
'13#.#1.196.73':445
'13#.#1.235.41':445
'13#.#1.99.238':445
'13#.#1.175.128':445
'13#.#1.238.174':445
'13#.#1.99.183':139
'13#.#1.42.115':139
'13#.#1.20.191':139
'13#.#1.90.42':139
'13#.#1.120.95':139
'13#.#1.108.33':139
'13#.#1.62.237':139
'13#.#1.33.96':139
'13#.#1.14.90':139
'13#.#1.87.164':139
'13#.#1.239.215':139
'13#.#1.70.149':9988
'13#.#1.13.145':9988
'13#.#1.72.177':9988
'13#.#1.180.26':9988
'13#.#1.252.43':9988
'13#.#1.52.136':139
'13#.#1.222.51':139
'13#.#1.52.27':139
'13#.#1.175.128':9988
'13#.#1.192.136':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней