Trojan.Starman.6538

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#1.15.45':139
'20#.#1.85.182':139
'20#.#1.173.85':139
'20#.#1.73.228':139
'20#.#1.168.252':139
'20#.#1.30.169':139
'20#.#1.55.55':139
'20#.#1.113.55':139
'20#.#1.72.113':139
'20#.#1.136.173':139
'20#.#1.19.136':139
'20#.#1.55.19':139
'20#.#1.194.110':139
'20#.#1.4.199':139
'20#.#1.238.162':139
'20#.#1.86.75':139
'20#.#1.30.69':139
'20#.#1.165.15':139
'20#.#1.66.185':139
'20#.#1.74.59':139
'20#.#1.18.185':139
'20#.#1.32.173':139
'20#.#1.127.166':139
'20#.#1.187.127':139
'20#.#1.7.187':139
'20#.#1.19.149':139
'20#.#1.18.185':445
'20#.#1.32.173':445
'20#.#1.194.110':445
'20#.#1.187.127':445
'20#.#1.7.187':445
'20#.#1.74.59':445
'20#.#1.15.45':445
'20#.#1.85.182':445
'20#.#1.173.85':445
'20#.#1.73.228':445
'20#.#1.168.252':445
'20#.#1.30.169':445
'20#.#1.127.166':445
'20#.#1.68.25':139
'20#.#1.244.149':445
'20#.#1.128.1':445
'20#.#1.39.161':139
'20#.81.2.85':139
'20#.#1.198.2':139
'20#.#1.4.199':445
'20#.#1.238.162':445
'20#.#1.86.75':445
'20#.#1.30.69':445
'20#.#1.165.15':445
'20#.#1.66.185':445
'20#.#1.128.1':139
'20#.#1.108.198':139
'20#.#1.231.108':139
'20#.#1.22.193':139
'20#.#1.171.129':139
'20#.#1.93.154':139
'20#.#1.34.86':139
'20#.#1.70.187':139
'20#.#1.25.217':139
'20#.#1.228.247':139
'20#.#1.252.29':139
'20#.#1.183.119':139
'20#.#1.181.247':139
'20#.#1.129.204':139
'20#.#1.95.211':445
'20#.#1.231.95':445
'20#.#1.136.231':445
'20#.#1.65.249':445
'20#.#1.246.91':445
'20#.#1.211.245':445
'20#.#1.224.44':445
'20#.#1.130.236':445
'20#.#1.204.35':445
'20#.#1.43.137':445
'20#.#1.60.44':445
'20#.#1.121.1':445
'20#.#1.97.186':139
'20#.#1.25.217':445
'20#.#1.228.247':445
'20#.#1.97.186':445
'20#.#1.183.119':445
'20#.#1.181.247':445
'20#.#1.70.187':445
'20#.#1.81.249':445
'20#.#1.179.82':445
'20#.#1.244.149':139
'20#.81.60.8':445
'20#.#1.118.79':445
'20#.#1.143.76':445
'20#.#1.252.29':445
'20#.#1.81.249':139
'20#.#1.179.82':139
'20#.#1.129.204':445
'20#.81.60.8':139
'20#.#1.118.79':139
'20#.#1.143.76':139
'20#.#1.108.198':445
'20#.#1.231.108':445
'20#.#1.22.193':445
'20#.#1.171.129':445
'20#.#1.93.154':445
'20#.#1.34.86':445
'20#.#1.136.173':445
'20#.#1.108.13':139
'20#.#1.73.108':139
'20#.#1.76.73':139
'20#.#1.233.120':139
'20#.#1.193.211':139
'20#.#1.166.131':139
'20#.#1.83.244':139
'20#.#1.112.197':139
'20#.#1.159.154':139
'20#.#1.88.99':139
'20#.#1.112.202':139
'20#.#1.13.231':139
'20#.#1.243.36':139
'20#.#1.186.182':139
'20#.#1.21.24':139
'20#.#1.221.201':139
'20#.#1.248.96':139
'20#.#1.95.133':139
'20#.#1.239.151':139
'20#.#1.121.193':139
'20#.#1.238.212':139
'20#.#1.109.140':139
'20#.#1.157.249':139
'20#.#1.34.209':139
'20#.#1.200.21':139
'20#.#1.87.138':139
'20#.#1.238.212':445
'20#.#1.109.140':445
'20#.#1.243.36':445
'20#.#1.34.209':445
'20#.#1.200.21':445
'20#.#1.121.193':445
'20#.#1.108.13':445
'20#.#1.73.108':445
'20#.#1.76.73':445
'20#.#1.233.120':445
'20#.#1.193.211':445
'20#.#1.166.131':445
'20#.#1.157.249':445
'20#.#1.90.156':445
'20#.#1.55.234':445
'20#.#1.145.252':445
'20#.#1.96.192':139
'20#.#1.94.86':139
'20#.#1.58.228':445
'20#.#1.186.182':445
'20#.#1.21.24':445
'20#.#1.221.201':445
'20#.#1.248.96':445
'20#.#1.95.133':445
'20#.#1.239.151':445
'20#.#1.145.252':139
'20#.#1.108.137':139
'20#.#1.129.43':139
'20#.#1.161.28':139
'20#.#1.211.141':139
'20#.#1.171.42':139
'20#.#1.87.96':139
'20#.#1.22.194':139
'20#.#1.52.33':139
'20#.#1.17.179':139
'20#.#1.3.245':139
'20#.#1.242.210':139
'20#.#1.239.157':139
'20#.#1.75.234':139
'20#.#1.113.55':445
'20#.#1.72.113':445
'20#.#1.19.149':445
'20#.#1.19.136':445
'20#.#1.55.19':445
'20#.#1.55.55':445
'20#.#1.68.25':445
'20#.81.4.3':139
'20#.#1.49.200':139
'20#.#1.39.161':445
'20#.81.2.85':445
'20#.#1.198.2':445
'20#.#1.168.245':139
'20#.#1.52.33':445
'20#.#1.17.179':445
'20#.#1.168.245':445
'20#.#1.242.210':445
'20#.#1.239.157':445
'20#.#1.22.194':445
'20#.#1.58.228':139
'20#.#1.90.156':139
'20#.#1.55.234':139
'20#.#1.152.134':445
'20#.#1.6.154':445
'20#.#1.245.56':445
'20#.#1.3.245':445
'20#.81.4.3':445
'20#.#1.49.200':445
'20#.#1.75.234':445
'20#.#1.152.134':139
'20#.#1.6.154':139
'20#.#1.245.56':139
'20#.#1.108.137':445
'20#.#1.129.43':445
'20#.#1.161.28':445
'20#.#1.211.141':445
'20#.#1.171.42':445
'20#.#1.87.96':445
'20#.#1.201.232':445
'20#.#1.74.118':445
'20#.#1.81.251':445
'20#.#1.136.48':445
'20#.#1.11.113':445
'20#.#1.108.156':445
'20#.#1.118.139':445
'20#.#1.49.172':445
'20#.81.9.4':445
'20#.#1.86.157':445
'20#.#1.208.135':445
'20#.#1.92.204':445
'20#.#1.171.229':445
'20#.#1.2.231':445
'20#.#1.72.171':445
'20#.#1.151.124':445
'20#.#1.157.217':445
'20#.#1.216.193':445
'20#.#1.181.72':445
'20#.#1.22.224':445
'20#.#1.10.47':445
'20#.#1.223.27':445
'20#.#1.235.223':445
'20#.#1.26.83':445
'20#.#1.79.159':445
'20#.#1.71.210':445
'20#.#1.237.150':445
'20#.#1.252.182':445
'20#.#1.100.163':445
'20#.#1.248.75':445
'20#.#1.29.90':445
'20#.#1.168.84':445
'20#.#1.65.90':445
'20#.#1.11.35':445
'20#.#1.231.184':445
'20#.#1.216.193':9988
'20#.#1.24.64':445
'20#.#1.111.231':445
'20#.#1.192.183':445
'20#.#1.51.197':445
'20#.#1.125.182':445
'20#.#1.195.176':445
'20#.#1.92.24':445
'20#.#1.18.19':445
'20#.#1.123.185':445
'20#.#1.182.123':445
'20#.#1.85.159':445
'20#.#1.18.209':445
'20#.#1.227.250':445
'20#.#1.22.246':445
'20#.#1.39.224':445
'20#.#1.44.39':445
'20#.#1.86.93':445
'20#.#1.118.139':139
'20#.#1.74.118':139
'20#.#1.81.251':139
'20#.#1.2.231':139
'20#.#1.11.113':139
'20#.#1.108.156':139
'20#.#1.171.229':139
'20#.#1.49.172':139
'20#.81.9.4':139
'20#.#1.136.48':139
'20#.#1.208.135':139
'20#.#1.92.204':139
'20#.#1.235.223':139
'20#.#1.151.124':139
'20#.#1.86.93':139
'20#.#1.26.83':139
'20#.#1.216.193':139
'20#.#1.157.217':139
'20#.#1.181.72':139
'20#.#1.71.210':139
'20#.#1.10.47':139
'20#.#1.223.27':139
'20#.#1.72.171':139
'20#.#1.22.224':139
'20#.#1.79.159':139
'20#.#1.86.157':139
'20#.#1.65.90':139
'20#.#1.252.182':139
'20#.#1.100.163':139
'20#.#1.51.197':139
'20#.#1.29.90':139
'20#.#1.168.84':139
'20#.#1.192.183':139
'20#.#1.11.35':139
'20#.#1.231.184':139
'20#.#1.248.75':139
'20#.#1.24.64':139
'20#.#1.111.231':139
'20#.#1.227.250':139
'20#.#1.182.123':139
'20#.#1.125.182':139
'20#.#1.195.176':139
'20#.#1.237.150':139
'20#.#1.18.19':139
'20#.#1.123.185':139
'20#.#1.44.39':139
'20#.#1.85.159':139
'20#.#1.18.209':139
'20#.#1.92.24':139
'20#.#1.22.246':139
'20#.#1.39.224':139
'20#.#1.72.171':9988
'20#.#1.68.143':139
'20#.#1.27.136':139
'20#.#1.242.42':139
'20#.#1.189.197':139
'20#.#1.235.231':139
'20#.#1.142.122':139
'20#.#1.211.245':139
'20#.#1.95.211':139
'20#.#1.231.95':139
'20#.#1.201.232':139
'20#.#1.65.249':139
'20#.#1.246.91':139
'20#.#1.28.168':139
'20#.#1.19.51':139
'20#.#1.182.229':139
'20#.#1.243.78':139
'20#.#1.37.230':139
'20#.#1.46.145':139
'20#.#1.101.97':139
'20#.#1.140.103':139
'20#.#1.137.78':139
'20#.#1.165.131':139
'20#.#1.148.41':139
'20#.#1.200.170':139
'20#.#1.221.167':139
'20#.#1.136.231':139
'20#.#1.137.78':445
'20#.#1.165.131':445
'20#.#1.28.168':445
'20#.#1.200.170':445
'20#.#1.221.167':445
'20#.#1.140.103':445
'20#.#1.68.143':445
'20#.#1.27.136':445
'20#.#1.242.42':445
'20#.#1.189.197':445
'20#.#1.235.231':445
'20#.#1.142.122':445
'20#.#1.148.41':445
'20#.#1.224.44':139
'20#.#1.130.236':139
'20#.#1.204.35':139
'20#.#1.43.137':139
'20#.#1.60.44':139
'20#.#1.121.1':139
'20#.#1.19.51':445
'20#.#1.243.78':445
'20#.#1.182.229':445
'20#.#1.37.230':445
'20#.#1.46.145':445
'20#.#1.101.97':445
'20#.#1.3.231':445
'20#.#1.21.45':139
'20#.#1.100.193':139
'20#.#1.159.52':139
'20#.#1.125.182':9988
'20#.#1.119.120':139
'20#.#1.235.26':139
'20#.81.63.0':139
'20#.#1.196.207':139
'20#.#1.32.170':139
'20#.#1.46.210':139
'20#.81.9.15':139
'20#.#1.188.164':139
'20#.#1.182.123':9988
'20#.#1.11.113':9988
'20#.#1.108.156':9988
'20#.#1.81.251':9988
'20#.#1.86.93':9988
'20#.#1.151.124':9988
'20#.#1.71.210':9988
'20#.81.9.4':9988
'20#.#1.237.150':9988
'20#.#1.123.185':9988
'20#.#1.208.135':9988
'20#.#1.171.229':9988
'20#.#1.49.172':9988
'20#.#1.161.4':139
'20#.#1.196.207':445
'20#.#1.32.170':445
'20#.#1.161.4':445
'20#.#1.188.164':445
'20#.81.9.15':445
'20#.81.63.0':445
'20#.#1.161.149':445
'20#.#1.231.19':445
'20#.#1.57.156':445
'20#.#1.40.193':445
'20#.#1.180.111':445
'20#.#1.84.139':445
'20#.#1.46.210':445
'20#.#1.161.149':139
'20#.#1.57.156':139
'20#.#1.231.19':139
'20#.#1.40.193':139
'20#.#1.84.139':139
'20#.#1.180.111':139
'20#.#1.21.45':445
'20#.#1.100.193':445
'20#.#1.159.52':445
'20#.#1.3.231':139
'20#.#1.119.120':445
'20#.#1.235.26':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней