Trojan.Starman.6345

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12#.#01.59.225':445
'12#.#01.49.186':445
'12#.#01.14.22':445
'12#.#01.142.74':445
'12#.#01.16.151':445
'12#.#01.104.79':445
'12#.#01.197.239':445
'12#.#01.206.219':445
'12#.#01.240.102':445
'12#.#01.133.247':445
'12#.#01.28.234':445
'12#.#01.98.42':445
'12#.#01.94.220':445
'12#.#01.109.165':445
'12#.#01.142.214':445
'12#.#01.177.212':445
'12#.#01.162.107':445
'12#.#01.63.130':445
'12#.#01.87.180':445
'12#.#01.202.167':445
'12#.#01.228.130':445
'12#.#01.22.32':445
'12#.#01.209.54':139
'12#.#01.40.52':139
'12#.#01.226.9':139
'12#.#01.87.87':445
'12#.#01.102.177':139
'12#.#01.134.115':139
'12#.#01.62.243':139
'12#.#01.85.100':139
'12#.#01.42.240':139
'12#.#01.94.76':139
'12#.#01.171.171':139
'12#.#01.69.104':445
'12#.#01.19.135':445
'12#.#01.37.222':445
'12#.#01.128.12':445
'12#.#01.236.101':445
'12#.#01.129.136':445
'12#.#01.87.87':139
'12#.#01.73.27':445
'12#.#01.73.27':139
'12#.#01.7.100':445
'12#.#01.163.6':445
'12#.#01.214.116':445
'12#.#01.28.234':139
'12#.#01.240.102':139
'12#.#01.133.247':139
'12#.#01.49.186':139
'12#.#01.104.79':139
'12#.#01.197.239':139
'12#.#01.37.222':139
'12#.#01.69.104':139
'12#.#01.236.101':139
'12#.#01.206.219':139
'12#.#01.128.12':139
'12#.#01.22.32':139
'12#.#01.202.167':139
'12#.#01.228.130':139
'12#.#01.94.220':139
'12#.#01.162.107':139
'12#.#01.63.130':139
'12#.#01.14.22':139
'12#.#01.59.225':139
'12#.#01.16.151':139
'12#.#01.87.180':139
'12#.#01.142.74':139
'12#.#01.185.181':445
'12#.#01.117.123':445
'12#.#01.182.30':445
'12#.#01.69.13':445
'12#.#01.140.84':445
'12#.#01.14.221':445
'12#.#01.236.195':445
'12#.#01.117.170':445
'12#.#01.59.6':445
'12#.#01.115.12':445
'12#.#01.137.92':445
'12#.#01.163.6':139
'12#.#01.255.241':445
'12#.#01.7.100':139
'12#.#01.19.135':139
'12#.#01.129.136':139
'12#.#01.6.186':445
'12#.#01.69.100':445
'12#.#01.131.160':445
'12#.#01.139.86':445
'12#.#01.76.22':445
'12#.#01.177.64':445
'12#.#01.160.113':139
'12#.#01.73.88':445
'12#.#01.86.242':445
'12#.#01.51.83':445
'12#.#01.153.107':445
'12#.#01.142.153':445
'12#.#01.50.74':445
'12#.#01.183.70':445
'12#.#01.181.124':445
'12#.#01.11.91':445
'12#.#01.249.208':445
'12#.#01.212.113':445
'12#.#01.160.113':445
'12#.#01.25.161':445
'12#.#01.85.100':445
'12#.#01.42.240':445
'12#.#01.62.243':445
'12#.#01.17.26':445
'12#.#01.68.88':445
'12#.#01.118.174':445
'12#.#01.70.136':445
'12#.#01.197.17':445
'12#.#01.248.196':445
'12#.#01.173.32':445
'12#.#01.138.215':445
'12#.#01.245.119':445
'12#.#01.34.111':445
'12#.#01.243.2':445
'12#.#01.71.173':445
'12#.#01.24.152':139
'12#.#01.8.228':139
'12#.#01.82.127':445
'12#.#01.102.176':445
'12#.#01.127.102':445
'12#.#01.148.229':445
'12#.#01.212.122':445
'12#.#01.160.201':445
'12#.#01.149.79':445
'12#.#01.178.151':445
'12#.#01.107.79':445
'12#.#01.183.249':445
'12#.#01.10.213':445
'12#.#01.140.7':445
'12#.#01.189.107':445
'12#.#01.245.210':445
'12#.#01.171.171':445
'12#.#01.212.113':139
'12#.#01.11.91':139
'12#.#01.249.208':139
'12#.#01.86.242':139
'12#.#01.50.74':139
'12#.#01.183.70':139
'12#.#01.160.201':139
'12#.#01.148.229':139
'12#.#01.178.151':139
'12#.#01.181.124':139
'12#.#01.149.79':139
'12#.#01.248.196':139
'12#.#01.70.136':139
'12#.#01.197.17':139
'12#.#01.25.161':139
'12#.#01.17.26':139
'12#.#01.68.88':139
'12#.#01.51.83':139
'12#.#01.73.88':139
'12#.#01.142.153':139
'12#.#01.118.174':139
'12#.#01.153.107':139
'12#.#01.127.102':139
'12#.#01.82.127':139
'12#.#01.102.176':139
'12#.#01.138.215':139
'12#.#01.71.173':139
'12#.#01.102.177':445
'12#.#01.134.115':445
'12#.#01.94.76':445
'12#.#01.40.52':445
'12#.#01.226.9':445
'12#.#01.209.54':445
'12#.#01.245.210':139
'12#.#01.140.7':139
'12#.#01.189.107':139
'12#.#01.212.122':139
'12#.#01.107.79':139
'12#.#01.183.249':139
'12#.#01.245.119':139
'12#.#01.173.32':139
'12#.#01.243.2':139
'12#.#01.10.213':139
'12#.#01.34.111':139
'12#.#01.63.54':445
'12#.#01.8.150':445
'12#.#01.251.231':445
'12#.#01.139.170':445
'12#.#01.32.132':445
'12#.#01.83.241':445
'12#.#01.121.188':445
'12#.#01.12.245':445
'12#.#01.43.190':445
'12#.#01.255.53':445
'12#.#01.198.144':445
'12#.#01.202.234':139
'12#.#01.192.26':139
'12#.#01.122.73':139
'12#.#01.249.21':139
'12#.#01.97.198':139
'12#.#01.11.78':139
'12#.#01.43.252':445
'12#.#01.132.220':445
'12#.#01.81.99':445
'12#.#01.204.4':445
'12#.#01.99.174':445
'12#.#01.197.97':445
'12#.#01.8.196':445
'12#.#01.118.52':445
'12#.#01.123.133':445
'12#.#01.52.123':445
'12#.#01.58.54':445
'12#.#01.68.7':445
'12#.#01.151.125':445
'12#.#01.224.108':445
'12#.#01.43.27':445
'12#.#01.224.42':445
'12#.#01.217.217':445
'12#.#01.153.6':445
'12#.#01.192.134':445
'12#.#01.141.5':445
'12#.#01.156.80':445
'12#.#01.186.59':445
'12#.#01.69.115':445
'12#.#01.80.58':445
'12#.#01.144.193':445
'12#.#01.219.199':445
'12#.#01.198.237':445
'12#.#01.31.171':139
'12#.#01.121.188':139
'12#.#01.12.245':139
'12#.#01.43.190':139
'12#.#01.255.53':139
'12#.#01.198.144':139
'12#.#01.141.5':139
'12#.#01.153.6':139
'12#.#01.186.59':139
'12#.#01.217.217':139
'12#.#01.156.80':139
'12#.#01.192.134':139
'12#.#01.43.252':139
'12#.#01.204.4':139
'12#.#01.99.174':139
'12#.#01.81.99':139
'12#.#01.132.220':139
'12#.#01.139.170':139
'12#.#01.8.150':139
'12#.#01.83.241':139
'12#.#01.63.54':139
'12#.#01.32.132':139
'12#.#01.251.231':139
'12#.#01.68.7':139
'12#.#01.151.125':139
'12#.#01.224.108':139
'12#.#01.43.27':139
'12#.#01.224.42':139
'12#.#01.194.24':139
'12#.#01.233.2':139
'12#.#01.52.137':139
'12#.#01.92.193':139
'12#.#01.160.136':139
'12#.#01.147.62':139
'12#.#01.69.115':139
'12#.#01.80.58':139
'12#.#01.144.193':139
'12#.#01.219.199':139
'12#.#01.198.237':139
'12#.#01.123.133':139
'12#.#01.8.196':139
'12#.#01.58.54':139
'12#.#01.197.97':139
'12#.#01.52.123':139
'12#.#01.118.52':139
'12#.#01.194.24':445
'12#.#01.158.58':445
'12#.#01.19.31':445
'12#.#01.32.215':445
'12#.#01.153.30':445
'12#.#01.50.199':445
'12#.#01.108.28':445
'12#.#01.241.151':445
'12#.#01.255.241':139
'12#.#01.152.132':445
'12#.#01.152.132':139
'12#.#01.241.151':139
'12#.#01.67.212':445
'12#.#01.1.197':445
'12#.#01.180.213':445
'12#.#01.181.63':445
'12#.#01.163.147':445
'12#.#01.183.202':445
'12#.#01.128.142':445
'12#.#01.30.80':445
'12#.#01.168.12':445
'12#.#01.48.12':445
'12#.#01.63.43':445
'12#.#01.59.6':139
'12#.#01.236.195':139
'12#.#01.137.92':139
'12#.#01.14.221':139
'12#.#01.115.12':139
'12#.#01.117.170':139
'12#.#01.109.165':139
'12#.#01.98.42':139
'12#.#01.177.212':139
'12#.#01.214.116':139
'12#.#01.142.214':139
'12#.#01.139.86':139
'12#.#01.69.100':139
'12#.#01.177.64':139
'12#.#01.6.186':139
'12#.#01.76.22':139
'12#.#01.131.160':139
'12#.#01.185.181':139
'12#.#01.117.123':139
'12#.#01.182.30':139
'12#.#01.69.13':139
'12#.#01.140.84':139
'12#.#01.108.28':139
'12#.#01.43.190':9988
'12#.#01.12.245':9988
'12#.#01.192.134':9988
'12#.#01.11.78':445
'12#.#01.217.217':9988
'12#.#01.198.144':9988
'12#.#01.43.252':9988
'12#.#01.132.220':9988
'12#.#01.99.174':9988
'12#.#01.121.188':9988
'12#.#01.63.54':9988
'12#.#01.233.2':445
'12#.#01.52.137':445
'12#.#01.92.193':445
'12#.#01.160.136':445
'12#.#01.147.62':445
'12#.#01.31.171':445
'12#.#01.202.234':445
'12#.#01.192.26':445
'12#.#01.122.73':445
'12#.#01.249.21':445
'12#.#01.97.198':445
'12#.#01.168.12':139
'12#.#01.128.142':139
'12#.#01.63.43':139
'12#.#01.183.202':139
'12#.#01.48.12':139
'12#.#01.30.80':139
'12#.#01.158.58':139
'12#.#01.19.31':139
'12#.#01.32.215':139
'12#.#01.153.30':139
'12#.#01.50.199':139
'12#.#01.153.6':9988
'12#.#01.204.4':9988
'12#.#01.255.53':9988
'12#.#01.8.150':9988
'12#.#01.83.241':9988
'12#.#01.251.231':9988
'12#.#01.67.212':139
'12#.#01.1.197':139
'12#.#01.180.213':139
'12#.#01.181.63':139
'12#.#01.163.147':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней