Trojan.Starman.6392

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#66.15.140':139
'21#.#66.144.15':139
'21#.#66.242.147':139
'21#.#66.190.117':139
'21#.#66.59.251':139
'21#.#66.24.143':139
'21#.#66.2.187':139
'21#.#66.205.121':139
'21#.#66.81.208':139
'21#.#66.219.82':139
'21#.#66.96.7':139
'21#.#66.191.57':139
'21#.#66.165.206':139
'21#.#66.35.112':139
'21#.#66.127.35':139
'21#.#66.254.49':139
'21#.#66.117.235':139
'21#.#66.8.80':139
'21#.#66.194.215':139
'21#.#66.125.210':139
'21#.#66.59.53':139
'21#.#66.194.215':445
'21#.#66.125.210':445
'21#.#66.191.57':445
'21#.#66.165.206':445
'21#.#66.96.7':445
'21#.#66.190.117':445
'21#.#66.59.251':445
'21#.#66.117.235':445
'21#.#66.8.80':445
'21#.#66.254.49':445
'21#.#66.225.66':445
'21#.#66.209.173':445
'21#.#66.42.123':445
'21#.#66.124.131':139
'21#.#66.8.16':445
'21#.#66.35.112':445
'21#.#66.127.35':445
'21#.#66.84.37':445
'21#.#66.18.110':445
'21#.#66.249.220':445
'21#.#66.208.88':445
'21#.#66.168.165':445
'21#.#66.112.209':445
'21#.#66.51.18':139
'21#.#66.207.154':139
'21#.#66.71.240':445
'21#.#66.172.60':445
'21#.#66.1.186':445
'21#.#66.174.52':445
'21#.#66.242.230':445
'21#.#66.17.150':139
'21#.#66.97.249':139
'21#.#66.59.18':139
'21#.#66.37.37':139
'21#.#66.112.37':139
'21#.#66.78.38':139
'21#.#66.195.156':139
'21#.#66.22.102':139
'21#.#66.66.155':139
'21#.#66.4.40':139
'21#.#66.4.58':445
'21#.#66.8.16':139
'21#.#66.42.123':139
'21#.#66.207.154':445
'21#.#66.195.156':445
'21#.#66.51.18':445
'21#.#66.249.220':139
'21#.#66.84.37':139
'21#.#66.18.110':139
'21#.#66.225.66':139
'21#.#66.209.173':139
'21#.#66.59.18':445
'21#.#66.17.150':445
'21#.#66.112.37':445
'21#.#66.26.117':445
'21#.#66.37.37':445
'21#.#66.22.102':445
'21#.#66.78.38':445
'21#.#66.4.40':445
'21#.#66.97.249':445
'21#.#66.66.155':445
'21#.#66.242.147':445
'21#.#66.197.6':139
'21#.#66.35.248':139
'21#.#66.53.242':139
'21#.#66.204.20':445
'21#.#66.41.129':445
'21#.#66.7.229':139
'21#.#66.30.19':139
'21#.#66.46.4':139
'21#.#66.50.230':139
'21#.#66.192.99':139
'21#.#66.40.177':445
'21#.#66.116.194':445
'21#.#66.116.69':445
'21#.#66.175.74':445
'21#.#66.61.5':445
'21#.#66.92.140':445
'21#.#66.254.66':445
'21#.#66.103.132':445
'21#.#66.90.154':445
'21#.#66.148.152':445
'21#.#66.127.112':139
'21#.#66.170.241':139
'21#.#66.43.170':139
'21#.#66.34.67':139
'21#.#66.209.144':139
'21#.#66.109.26':139
'21#.#66.237.177':139
'21#.#66.6.44':139
'21#.#66.105.201':139
'21#.#66.56.184':139
'21#.#66.115.87':139
'21#.#66.69.115':139
'21#.#66.26.249':139
'21#.#66.115.3':139
'21#.#66.172.192':139
'21#.#66.230.111':139
'21#.#66.124.58':139
'21#.#66.52.2':139
'21#.#66.1.81':139
'21#.#66.2.220':139
'21#.#66.82.2':139
'21#.#66.122.128':139
'21#.#66.79.217':139
'21#.#66.177.219':139
'21#.#66.185.173':139
'21#.#66.251.154':139
'21#.#66.65.79':139
'21#.#66.175.74':139
'21#.#66.111.166':139
'21#.#66.224.59':139
'21#.#66.93.155':139
'21#.#66.219.82':445
'21#.#66.205.121':445
'21#.#66.81.208':445
'21#.#66.15.140':445
'21#.#66.144.15':445
'21#.#66.124.131':445
'21#.#66.110.217':139
'21#.#66.59.53':445
'21#.#66.24.143':445
'21#.#66.2.187':445
'21#.#66.61.5':139
'21#.#66.177.219':445
'21#.#66.122.128':445
'21#.#66.251.154':445
'21#.#66.110.217':445
'21#.#66.185.173':445
'21#.#66.111.166':445
'21#.#66.65.79':445
'21#.#66.93.155':445
'21#.#66.79.217':445
'21#.#66.224.59':445
'21#.#66.90.154':139
'21#.#66.148.152':139
'21#.#66.116.194':139
'21#.#66.116.69':139
'21#.#66.40.177':139
'21#.#66.204.20':139
'21#.#66.41.129':139
'21#.#66.254.66':139
'21#.#66.103.132':139
'21#.#66.92.140':139
'21#.#66.26.117':139
'21#.#66.222.227':445
'21#.#66.46.141':445
'21#.#66.53.12':445
'21#.#66.146.236':445
'21#.#66.144.197':445
'21#.#66.88.169':445
'21#.#66.155.88':445
'21#.#66.210.122':445
'21#.#66.193.111':445
'21#.#66.231.180':445
'21#.#66.211.171':139
'21#.#66.1.249':139
'21#.#66.44.136':139
'21#.#66.208.112':139
'21#.#66.2.253':139
'21#.#66.51.91':139
'21#.#66.173.111':139
'21#.#66.91.12':139
'21#.#66.63.254':139
'21#.#66.12.155':139
'21#.#66.198.182':445
'21#.#66.4.174':445
'21#.#66.148.215':445
'21#.#66.183.113':445
'21#.#66.77.194':445
'21#.#66.90.226':445
'21#.#66.140.14':445
'21#.#66.33.234':445
'21#.#66.36.151':445
'21#.#66.144.68':445
'21#.#66.189.73':445
'21#.#66.42.25':445
'21#.#66.70.140':445
'21#.#66.8.205':445
'21#.#66.48.229':445
'21#.#66.158.200':445
'21#.#66.181.163':445
'21#.#66.101.26':445
'21#.#66.35.142':445
'21#.#66.53.35':445
'21#.#66.104.140':445
'21#.#66.8.205':139
'21#.#66.42.25':139
'21#.#66.158.200':139
'21#.#66.198.182':139
'21#.#66.48.229':139
'21#.#66.35.142':139
'21#.#66.181.163':139
'21#.#66.104.140':139
'21#.#66.70.140':139
'21#.#66.53.35':139
'21#.#66.222.227':139
'21#.#66.46.141':139
'21#.#66.53.12':139
'21#.#66.144.197':139
'21#.#66.146.236':139
'21#.#66.88.169':139
'21#.#66.155.88':139
'21#.#66.210.122':139
'21#.#66.193.111':139
'21#.#66.231.180':139
'21#.#66.101.26':139
'21#.#66.136.105':139
'21#.#66.80.239':139
'21#.#66.168.132':139
'21#.#66.97.228':139
'21#.#66.51.246':139
'21#.#66.87.164':139
'21#.#66.112.87':139
'21#.#66.16.56':139
'21#.#66.142.122':139
'21#.#66.56.106':139
'21#.#66.4.174':139
'21#.#66.148.215':139
'21#.#66.183.113':139
'21#.#66.77.194':139
'21#.#66.90.226':139
'21#.#66.140.14':139
'21#.#66.33.234':139
'21#.#66.36.151':139
'21#.#66.144.68':139
'21#.#66.189.73':139
'21#.#66.97.228':445
'21#.#66.67.159':445
'21#.#66.213.47':445
'21#.#66.223.217':139
'21#.#66.229.203':139
'21#.#66.217.242':139
'21#.#66.223.27':445
'21#.#66.103.211':445
'21#.#66.229.221':445
'21#.#66.203.149':445
'21#.#66.133.202':445
'21#.#66.173.76':139
'21#.#66.156.172':139
'21#.#66.76.46':139
'21#.#66.103.211':139
'21#.#66.253.52':139
'21#.#66.61.244':139
'21#.#66.176.10':139
'21#.#66.155.126':139
'21#.#66.122.53':139
'21#.#66.89.209':139
'21#.#66.253.52':445
'21#.#66.168.165':139
'21#.#66.174.52':139
'21#.#66.208.88':139
'21#.#66.223.217':445
'21#.#66.112.209':139
'21#.#66.172.60':139
'21#.#66.4.58':139
'21#.#66.71.240':139
'21#.#66.242.230':139
'21#.#66.1.186':139
'21#.#66.122.53':445
'21#.#66.89.209':445
'21#.#66.156.172':445
'21#.#66.76.46':445
'21#.#66.173.76':445
'21#.#66.229.203':445
'21#.#66.217.242':445
'21#.#66.176.10':445
'21#.#66.155.126':445
'21#.#66.61.244':445
'21#.#66.1.249':445
'21#.#66.63.254':445
'21#.#66.211.171':445
'21#.#66.2.253':445
'21#.#66.44.136':445
'21#.#66.173.111':445
'21#.#66.222.227':9988
'21#.#66.51.91':445
'21#.#66.12.155':445
'21#.#66.91.12':445
'21#.#66.80.239':445
'21#.#66.142.122':445
'21#.#66.136.105':445
'21#.#66.51.246':445
'21#.#66.168.132':445
'21#.#66.112.87':445
'21#.#66.208.112':445
'21#.#66.87.164':445
'21#.#66.56.106':445
'21#.#66.16.56':445
'21#.#66.53.12':9988
'21#.#66.44.136':9988
'21#.#66.67.159':139
'21#.#66.56.106':9988
'21#.#66.36.151':9988
'21#.#66.97.228':9988
'21#.#66.229.221':139
'21#.#66.223.27':139
'21#.#66.133.202':139
'21#.#66.213.47':139
'21#.#66.203.149':139
'21#.#66.155.88':9988
'21#.#66.198.182':9988
'21#.#66.46.141':9988
'21#.#66.146.236':9988
'21#.#66.144.197':9988
'21#.#66.181.163':9988
'21#.#66.144.68':9988
'21#.#66.104.140':9988
'21#.#66.48.229':9988
'21#.#66.42.25':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней