Trojan.Starman.6425

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#2.46.203':445
'21#.#2.114.95':445
'21#.#2.215.167':445
'21#.#2.108.194':445
'21#.#2.143.109':445
'21#.#2.100.135':445
'21#.#2.64.121':445
'21#.#2.184.177':445
'21#.#2.14.64':445
'21#.#2.138.14':445
'21#.#2.116.15':445
'21#.#2.47.176':445
'21#.#2.107.47':445
'21#.#2.175.196':445
'21#.#2.46.84':445
'21#.#2.196.149':445
'21#.#2.29.134':445
'21#.#2.113.199':445
'21#.#2.87.165':445
'21#.#2.27.169':445
'21#.#2.189.79':445
'21#.#2.212.136':445
'21#.62.27.6':139
'21#.#2.230.189':139
'21#.#2.67.108':139
'21#.62.2.47':445
'21#.#2.133.2':445
'21#.#2.134.150':139
'21#.#2.19.237':139
'21#.#2.107.37':139
'21#.#2.223.23':139
'21#.#2.54.183':139
'21#.#2.247.228':445
'21#.#2.48.196':139
'21#.#2.247.228':139
'21#.#2.159.125':139
'21#.#2.202.223':445
'21#.#2.247.90':139
'21#.#2.159.125':445
'21#.#2.48.196':445
'21#.#2.247.90':445
'21#.62.2.47':139
'21#.#2.133.2':139
'21#.#2.107.51':445
'21#.#2.114.95':139
'21#.#2.14.64':139
'21#.#2.46.203':139
'21#.#2.143.109':139
'21#.#2.215.167':139
'21#.#2.64.121':139
'21#.#2.212.136':139
'21#.#2.100.135':139
'21#.#2.138.14':139
'21#.#2.184.177':139
'21#.#2.108.194':139
'21#.#2.107.47':139
'21#.#2.27.169':139
'21#.#2.47.176':139
'21#.#2.196.149':139
'21#.#2.175.196':139
'21#.#2.113.199':139
'21#.#2.116.15':139
'21#.#2.29.134':139
'21#.#2.189.79':139
'21#.#2.87.165':139
'21#.#2.202.223':139
'21#.#2.89.139':445
'21#.#2.234.89':445
'21#.#2.138.114':445
'21#.62.43.3':445
'21#.#2.230.42':445
'21#.#2.218.222':445
'21#.#2.126.218':445
'21#.#2.209.10':445
'21#.#2.61.234':445
'21#.#2.204.61':445
'21#.#2.3.118':445
'21#.#2.129.101':445
'21#.#2.126.180':445
'21#.#2.84.70':445
'21#.#2.104.49':445
'21#.#2.140.30':445
'21#.#2.47.201':445
'21#.#2.249.55':445
'21#.#2.196.28':445
'21#.#2.23.192':445
'21#.#2.29.24':445
'21#.#2.21.54':139
'21#.#2.150.4':445
'21#.#2.14.194':445
'21#.#2.250.29':445
'21#.#2.109.94':445
'21#.#2.30.135':445
'21#.#2.202.29':445
'21#.#2.5.100':445
'21#.#2.44.72':445
'21#.#2.97.193':445
'21#.#2.142.205':445
'21#.#2.30.183':445
'21#.#2.120.244':445
'21#.#2.52.53':445
'21#.#2.80.140':445
'21#.#2.21.54':445
'21#.#2.48.92':445
'21#.#2.238.172':445
'21#.#2.32.41':445
'21#.#2.249.79':445
'21#.#2.75.39':445
'21#.#2.232.139':445
'21#.#2.55.26':445
'21#.#2.59.247':445
'21#.#2.101.60':139
'21#.#2.97.127':445
'21#.#2.142.228':445
'21#.#2.86.222':445
'21#.#2.138.40':139
'21#.#2.112.44':139
'21#.#2.41.84':139
'21#.#2.50.189':139
'21#.#2.83.225':139
'21#.#2.134.2':445
'21#.#2.184.143':445
'21#.#2.170.39':445
'21#.#2.59.67':445
'21#.#2.21.34':445
'21#.#2.121.21':445
'21#.#2.180.125':445
'21#.#2.17.54':445
'21#.#2.24.91':445
'21#.#2.218.211':445
'21#.62.97.9':445
'21#.#2.19.237':445
'21#.#2.14.194':139
'21#.#2.97.193':139
'21#.#2.150.4':139
'21#.#2.30.135':139
'21#.#2.250.29':139
'21#.#2.5.100':139
'21#.#2.55.26':139
'21#.#2.202.29':139
'21#.#2.142.205':139
'21#.#2.44.72':139
'21#.#2.109.94':139
'21#.#2.52.53':139
'21#.#2.75.39':139
'21#.#2.120.244':139
'21#.#2.48.92':139
'21#.#2.80.140':139
'21#.#2.32.41':139
'21#.#2.30.183':139
'21#.#2.238.172':139
'21#.#2.232.139':139
'21#.#2.249.79':139
'21#.#2.21.34':139
'21#.#2.67.108':445
'21#.62.27.6':445
'21#.#2.59.247':139
'21#.#2.86.222':139
'21#.#2.97.127':139
'21#.#2.107.37':445
'21#.#2.134.150':445
'21#.#2.54.183':445
'21#.#2.230.189':445
'21#.#2.223.23':445
'21#.#2.142.228':139
'21#.#2.170.39':139
'21#.#2.218.211':139
'21#.#2.184.143':139
'21#.#2.121.21':139
'21#.#2.59.67':139
'21#.#2.17.54':139
'21#.#2.134.2':139
'21#.#2.180.125':139
'21#.62.97.9':139
'21#.#2.24.91':139
'21#.#2.46.84':139
'21#.62.4.11':445
'21#.#2.3.124':445
'21#.#2.10.65':445
'21#.#2.213.136':445
'21#.#2.65.183':445
'21#.#2.107.232':445
'21#.#2.170.107':445
'21#.#2.105.31':445
'21#.#2.8.122':445
'21#.#2.27.132':445
'21#.#2.80.226':445
'21#.#2.77.37':139
'21#.#2.134.218':139
'21#.#2.35.60':139
'21#.#2.36.100':139
'21#.#2.108.91':139
'21#.#2.6.218':445
'21#.#2.178.194':445
'21#.#2.28.24':445
'21#.#2.133.42':139
'21#.#2.92.132':139
'21#.#2.206.134':445
'21#.#2.109.34':445
'21#.#2.186.40':445
'21#.#2.86.11':445
'21#.#2.100.13':445
'21#.#2.97.238':445
'21#.#2.103.153':445
'21#.#2.69.103':445
'21#.#2.85.13':445
'21#.#2.234.236':445
'21#.#2.37.236':445
'21#.#2.136.70':445
'21#.#2.203.8':445
'21#.#2.156.54':445
'21#.#2.8.202':445
'21#.#2.219.129':445
'21#.#2.96.34':445
'21#.#2.72.211':445
'21#.#2.20.103':445
'21#.#2.124.199':445
'21#.#2.72.243':445
'21#.#2.223.154':445
'21#.#2.190.172':139
'21#.#2.206.134':139
'21#.#2.219.129':139
'21#.#2.170.107':139
'21#.#2.105.31':139
'21#.#2.107.232':139
'21#.#2.156.54':139
'21#.#2.72.243':139
'21#.#2.203.8':139
'21#.#2.96.34':139
'21#.#2.8.202':139
'21#.#2.27.132':139
'21#.#2.80.226':139
'21#.#2.213.136':139
'21#.#2.178.194':139
'21#.#2.6.218':139
'21#.#2.28.24':139
'21#.#2.3.124':139
'21#.#2.8.122':139
'21#.62.4.11':139
'21#.#2.65.183':139
'21#.#2.10.65':139
'21#.#2.223.154':139
'21#.#2.76.69':139
'21#.#2.200.75':139
'21#.#2.69.103':139
'21#.#2.37.236':139
'21#.#2.103.153':139
'21#.#2.135.85':139
'21#.#2.244.234':139
'21#.#2.157.34':139
'21#.#2.82.54':139
'21#.#2.18.103':139
'21#.#2.85.13':139
'21#.#2.136.70':139
'21#.#2.100.13':139
'21#.#2.20.103':139
'21#.#2.124.199':139
'21#.#2.72.211':139
'21#.#2.186.40':139
'21#.#2.234.236':139
'21#.#2.109.34':139
'21#.#2.97.238':139
'21#.#2.86.11':139
'21#.#2.76.69':445
'21#.#2.186.50':139
'21#.#2.161.213':445
'21#.#2.251.197':139
'21#.#2.240.179':139
'21#.#2.2.153':139
'21#.#2.251.197':445
'21#.#2.186.50':445
'21#.#2.2.153':445
'21#.#2.179.210':445
'21#.#2.240.179':445
'21#.#2.179.210':139
'21#.#2.180.114':445
'21#.#2.20.20':445
'21#.62.6.42':445
'21#.#2.5.193':445
'21#.#2.113.78':445
'21#.#2.191.204':445
'21#.#2.161.213':139
'21#.#2.156.214':445
'21#.#2.39.56':445
'21#.#2.214.48':445
'21#.#2.104.49':139
'21#.#2.234.89':139
'21#.#2.61.234':139
'21#.#2.89.139':139
'21#.#2.230.42':139
'21#.#2.138.114':139
'21#.#2.126.218':139
'21#.#2.107.51':139
'21#.#2.218.222':139
'21#.#2.204.61':139
'21#.#2.209.10':139
'21#.62.43.3':139
'21#.#2.126.180':139
'21#.#2.23.192':139
'21#.#2.129.101':139
'21#.#2.140.30':139
'21#.#2.84.70':139
'21#.#2.249.55':139
'21#.#2.3.118':139
'21#.#2.47.201':139
'21#.#2.29.24':139
'21#.#2.196.28':139
'21#.#2.86.100':445
'21#.#2.8.122':9988
'21#.#2.72.211':9988
'21#.#2.92.132':445
'21#.#2.134.218':445
'21#.#2.133.42':445
'21#.#2.8.202':9988
'21#.#2.80.226':9988
'21#.#2.65.183':9988
'21#.#2.86.11':9988
'21#.#2.213.136':9988
'21#.#2.77.37':445
'21#.#2.157.34':445
'21#.#2.135.85':445
'21#.#2.18.103':445
'21#.#2.200.75':445
'21#.#2.82.54':445
'21#.#2.108.91':445
'21#.#2.35.60':445
'21#.#2.36.100':445
'21#.#2.244.234':445
'21#.#2.190.172':445
'21#.#2.28.24':9988
'21#.#2.180.114':139
'21#.#2.20.20':139
'21#.62.6.42':139
'21#.#2.5.193':139
'21#.#2.113.78':139
'21#.#2.191.204':139
'21#.#2.70.164':445
'21#.#2.156.214':139
'21#.#2.39.56':139
'21#.#2.214.48':139
'21#.#2.86.100':139
'21#.#2.178.194':9988
'21#.#2.234.236':9988
'21#.#2.136.70':9988
'21#.#2.170.107':9988
'21#.#2.27.132':9988
'21#.#2.10.65':9988
'21#.#2.70.164':139
'21#.62.4.11':9988
'21#.#2.6.218':9988
'21#.#2.206.134':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней