Trojan.Starman.6531

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#00.120.171':445
'21#.#00.110.47':445
'21#.#00.4.240':445
'21#.#00.188.88':445
'21#.#00.160.233':445
'21#.#00.80.159':445
'21#.#00.229.40':445
'21#.#00.36.189':445
'21#.#00.28.107':445
'21#.#00.68.229':445
'21#.#00.97.129':445
'21#.#00.28.230':445
'21#.#00.56.149':445
'21#.#00.8.204':445
'21#.#00.123.135':445
'21#.#00.203.228':445
'21#.#00.117.63':445
'21#.#00.121.1':445
'21#.#00.121.149':445
'21#.#00.145.56':445
'21#.#00.25.41':445
'21#.#00.86.209':445
'21#.#00.159.21':139
'21#.#00.87.28':139
'21#.#00.112.127':139
'21#.#00.236.27':139
'21#.#00.26.153':139
'21#.#00.215.203':139
'21#.#00.202.215':139
'21#.#00.141.250':139
'21#.#00.74.151':139
'21#.#00.53.30':139
'21#.#00.131.123':139
'21#.#00.134.47':139
'21#.#00.49.89':139
'21#.#00.125.66':139
'21#.#00.36.108':445
'21#.#00.66.36':139
'21#.#00.49.89':445
'21#.#00.147.72':139
'21#.#00.134.47':445
'21#.#00.66.36':445
'21#.#00.125.66':445
'21#.#00.36.189':139
'21#.#00.80.159':139
'21#.#00.68.229':139
'21#.#00.110.47':139
'21#.#00.28.107':139
'21#.#00.199.131':445
'21#.#00.132.179':445
'21#.#00.36.108':139
'21#.#00.229.40':139
'21#.#00.86.209':139
'21#.#00.120.171':139
'21#.#00.121.149':139
'21#.#00.117.63':139
'21#.#00.25.41':139
'21#.#00.56.149':139
'21#.#00.145.56':139
'21#.#00.160.233':139
'21#.#00.4.240':139
'21#.#00.188.88':139
'21#.#00.121.1':139
'21#.#00.97.129':139
'21#.#00.100.61':445
'21#.#00.18.203':445
'21#.#00.33.4':445
'21#.#00.150.39':445
'21#.#00.140.74':445
'21#.#00.89.153':445
'21#.#00.197.9':445
'21#.#00.213.121':445
'21#.#00.15.181':445
'21#.#00.12.203':445
'21#.#00.94.166':445
'21#.#00.134.254':445
'21#.#00.26.224':445
'21#.#00.23.67':445
'21#.#00.197.12':445
'21#.#00.243.50':445
'21#.#00.92.192':445
'21#.#00.124.63':445
'21#.#00.223.183':445
'21#.#00.247.40':445
'21#.#00.181.68':445
'21#.#00.150.230':445
'21#.#00.155.8':445
'21#.#00.141.58':445
'21#.#00.10.134':445
'21#.#00.91.168':445
'21#.#00.176.208':445
'21#.#00.168.10':445
'21#.#00.143.185':445
'21#.#00.123.228':445
'21#.#00.72.235':445
'21#.#00.135.197':445
'21#.100.9.2':445
'21#.#00.202.215':445
'21#.#00.150.122':445
'21#.#00.215.203':445
'21#.#00.53.30':445
'21#.#00.141.250':445
'21#.#00.230.113':445
'21#.#00.228.150':445
'21#.#00.114.72':445
'21#.#00.151.103':445
'21#.#00.71.209':445
'21#.#00.70.41':445
'21#.#00.196.145':445
'21#.#00.231.189':445
'21#.#00.177.11':445
'21#.#00.44.173':445
'21#.#00.150.44':445
'21#.#00.172.99':139
'21#.#00.16.89':139
'21#.#00.194.78':139
'21#.#00.189.231':445
'21#.#00.112.105':139
'21#.#00.173.11':445
'21#.#00.109.206':445
'21#.#00.31.109':445
'21#.#00.206.26':445
'21#.#00.15.182':445
'21#.#00.50.46':445
'21#.#00.42.181':445
'21#.#00.15.46':445
'21#.#00.43.147':445
'21#.#00.127.31':445
'21#.#00.33.147':445
'21#.#00.123.228':139
'21#.#00.168.10':139
'21#.#00.135.197':139
'21#.#00.141.58':139
'21#.#00.72.235':139
'21#.#00.50.46':139
'21#.#00.206.26':139
'21#.#00.15.182':139
'21#.#00.143.185':139
'21#.#00.70.41':139
'21#.#00.155.8':139
'21#.#00.114.72':139
'21#.#00.230.113':139
'21#.#00.71.209':139
'21#.#00.150.122':139
'21#.#00.151.103':139
'21#.#00.176.208':139
'21#.#00.10.134':139
'21#.#00.91.168':139
'21#.#00.228.150':139
'21#.100.9.2':139
'21#.#00.109.206':139
'21#.#00.131.123':445
'21#.#00.236.27':445
'21#.#00.147.72':445
'21#.#00.231.189':139
'21#.#00.189.231':139
'21#.#00.87.28':445
'21#.#00.74.151':445
'21#.#00.159.21':445
'21#.#00.26.153':445
'21#.#00.112.127':445
'21#.#00.196.145':139
'21#.#00.43.147':139
'21#.#00.42.181':139
'21#.#00.33.147':139
'21#.#00.31.109':139
'21#.#00.127.31':139
'21#.#00.150.44':139
'21#.#00.177.11':139
'21#.#00.44.173':139
'21#.#00.15.46':139
'21#.#00.173.11':139
'21#.#00.43.31':445
'21#.#00.19.224':445
'21#.#00.206.22':445
'21#.#00.66.154':445
'21#.#00.116.193':445
'21#.#00.185.202':445
'21#.#00.131.186':445
'21#.#00.38.228':445
'21#.#00.59.24':445
'21#.#00.120.166':445
'21#.#00.154.69':445
'21#.#00.142.177':139
'21#.#00.42.48':139
'21#.#00.71.120':139
'21#.#00.130.12':139
'21#.#00.120.90':139
'21#.#00.126.105':445
'21#.#00.69.112':445
'21#.#00.139.150':139
'21#.#00.38.226':139
'21#.#00.182.74':139
'21#.#00.35.139':445
'21#.#00.186.164':445
'21#.#00.211.253':445
'21#.#00.0.244':445
'21#.#00.78.76':445
'21#.#00.222.158':445
'21#.#00.31.9':445
'21#.#00.159.46':445
'21#.#00.188.107':445
'21#.#00.78.166':445
'21#.#00.141.83':445
'21#.#00.50.168':445
'21#.#00.70.55':445
'21#.#00.242.171':445
'21#.#00.218.238':445
'21#.#00.130.131':445
'21#.#00.206.173':445
'21#.#00.200.24':445
'21#.#00.117.187':445
'21#.#00.148.250':445
'21#.#00.47.35':445
'21#.#00.250.243':445
'21#.#00.130.131':139
'21#.#00.206.173':139
'21#.#00.35.139':139
'21#.#00.185.202':139
'21#.#00.131.186':139
'21#.#00.47.35':139
'21#.#00.250.243':139
'21#.#00.242.171':139
'21#.#00.218.238':139
'21#.#00.70.55':139
'21#.#00.38.228':139
'21#.#00.66.154':139
'21#.#00.116.193':139
'21#.#00.154.69':139
'21#.#00.126.105':139
'21#.#00.69.112':139
'21#.#00.59.24':139
'21#.#00.120.166':139
'21#.#00.19.224':139
'21#.#00.206.22':139
'21#.#00.43.31':139
'21#.#00.148.250':139
'21#.#00.174.59':139
'21#.#00.226.77':139
'21#.#00.25.93':139
'21#.#00.31.9':139
'21#.#00.159.46':139
'21#.#00.17.148':139
'21#.#00.227.211':139
'21#.#00.82.60':139
'21#.#00.164.87':139
'21#.#00.60.228':139
'21#.#00.188.107':139
'21#.#00.78.76':139
'21#.#00.222.158':139
'21#.#00.50.168':139
'21#.#00.200.24':139
'21#.#00.117.187':139
'21#.#00.78.166':139
'21#.#00.141.83':139
'21#.#00.211.253':139
'21#.#00.0.244':139
'21#.#00.186.164':139
'21#.#00.131.168':445
'21#.#00.199.131':139
'21#.#00.178.101':445
'21#.#00.45.202':445
'21#.#00.140.223':445
'21#.#00.92.192':139
'21#.#00.197.12':139
'21#.#00.243.50':139
'21#.#00.132.179':139
'21#.#00.100.61':139
'21#.#00.131.168':139
'21#.#00.84.200':445
'21#.#00.55.216':445
'21#.#00.166.162':445
'21#.#00.98.242':445
'21#.#00.162.190':445
'21#.#00.140.223':139
'21#.#00.178.101':139
'21#.#00.45.202':139
'21#.#00.124.55':445
'21#.#00.10.124':445
'21#.#00.26.224':139
'21#.#00.15.181':139
'21#.#00.197.9':139
'21#.#00.94.166':139
'21#.#00.33.4':139
'21#.#00.12.203':139
'21#.#00.8.204':139
'21#.#00.28.230':139
'21#.#00.203.228':139
'21#.#00.213.121':139
'21#.#00.123.135':139
'21#.#00.18.203':139
'21#.#00.247.40':139
'21#.#00.124.63':139
'21#.#00.150.230':139
'21#.#00.23.67':139
'21#.#00.181.68':139
'21#.#00.89.153':139
'21#.#00.150.39':139
'21#.#00.140.74':139
'21#.#00.223.183':139
'21#.#00.134.254':139
'21#.#00.182.74':445
'21#.#00.139.150':445
'21#.#00.38.226':445
'21#.#00.142.177':445
'21#.#00.42.48':445
'21#.#00.19.224':9988
'21#.#00.154.69':9988
'21#.#00.206.173':9988
'21#.#00.211.253':9988
'21#.#00.116.193':9988
'21#.#00.71.120':445
'21#.#00.164.87':445
'21#.#00.60.228':445
'21#.#00.226.77':445
'21#.#00.25.93':445
'21#.#00.174.59':445
'21#.#00.130.12':445
'21#.#00.120.90':445
'21#.#00.227.211':445
'21#.#00.82.60':445
'21#.#00.17.148':445
'21#.#00.185.202':9988
'21#.#00.98.242':139
'21#.#00.162.190':139
'21#.#00.43.31':9988
'21#.#00.131.186':9988
'21#.#00.59.24':9988
'21#.#00.124.55':139
'21#.#00.10.124':139
'21#.#00.55.216':139
'21#.#00.166.162':139
'21#.#00.84.200':139
'21#.#00.38.228':9988
'21#.#00.69.112':9988
'21#.#00.70.55':9988
'21#.#00.35.139':9988
'21#.#00.126.105':9988
'21#.#00.148.250':9988
'21#.#00.200.24':9988
'21#.#00.218.238':9988
'21#.#00.130.131':9988
'21#.#00.0.244':9988
'21#.#00.78.166':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней