Trojan.Starman.6628

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'66.##0.81.129':445
'66.##0.140.158':445
'66.##0.39.180':445
'66.##0.199.93':445
'66.##0.187.111':445
'66.##0.125.195':445
'66.##0.33.24':445
'66.##0.17.249':445
'66.##0.82.18':445
'66.##0.220.81':445
'66.##0.248.145':445
'66.##0.99.102':445
'66.##0.142.14':445
'66.##0.247.46':139
'66.##0.166.25':445
'66.##0.175.79':445
'66.##0.92.138':139
'66.##0.160.87':139
'66.##0.55.254':139
'66.##0.14.95':445
'66.##0.116.48':445
'66.##0.90.116':445
'66.##0.251.128':445
'66.##0.29.187':445
'66.##0.4.151':445
'66.##0.70.163':445
'66.#60.47.4':445
'66.##0.117.251':445
'66.##0.143.104':445
'66.##0.162.126':445
'66.##0.218.190':445
'66.##0.37.110':445
'66.##0.106.198':445
'66.##0.93.127':445
'66.##0.214.230':445
'66.##0.92.138':445
'66.##0.246.210':445
'66.##0.171.240':445
'66.##0.175.13':445
'66.##0.13.134':445
'66.##0.248.250':445
'66.##0.66.106':445
'66.##0.74.79':445
'66.##0.232.167':445
'66.##0.163.48':445
'66.##0.170.58':445
'66.##0.93.153':445
'66.##0.241.114':445
'66.##0.189.226':445
'66.##0.62.171':445
'66.##0.108.77':445
'66.##0.10.171':445
'66.##0.214.230':139
'66.##0.187.111':139
'66.##0.125.195':139
'66.##0.81.129':139
'66.##0.90.116':139
'66.##0.251.128':139
'66.##0.199.93':139
'66.##0.140.158':139
'66.##0.99.102':139
'66.##0.142.14':139
'66.##0.17.249':139
'66.##0.39.180':139
'66.##0.33.24':139
'66.##0.248.145':139
'66.##0.85.215':445
'66.##0.193.178':445
'66.##0.94.81':445
'66.##0.181.160':445
'66.#60.5.6':445
'66.##0.214.220':445
'66.##0.166.25':139
'66.##0.4.151':139
'66.##0.70.163':139
'66.##0.116.48':139
'66.##0.175.79':139
'66.##0.14.95':139
'66.##0.29.187':139
'66.##0.218.190':139
'66.##0.37.110':139
'66.#60.47.4':139
'66.##0.241.114':139
'66.##0.189.226':139
'66.##0.162.126':139
'66.##0.117.251':139
'66.##0.171.240':139
'66.##0.175.13':139
'66.##0.93.127':139
'66.##0.143.104':139
'66.##0.106.198':139
'66.##0.246.210':139
'66.##0.232.167':139
'66.##0.163.48':139
'66.##0.13.134':139
'66.##0.82.18':139
'66.##0.220.81':139
'66.##0.74.79':139
'66.##0.248.250':139
'66.##0.108.77':139
'66.##0.10.171':139
'66.##0.93.153':139
'66.##0.66.106':139
'66.##0.170.58':139
'66.##0.62.171':139
'66.##0.19.216':445
'66.##0.183.74':445
'66.##0.55.64':445
'66.##0.1.158':445
'66.##0.214.65':445
'66.##0.249.175':445
'66.##0.138.159':445
'66.##0.131.163':445
'66.##0.244.9':445
'66.##0.33.170':445
'66.##0.147.48':445
'66.##0.45.245':445
'66.##0.125.192':445
'66.##0.8.220':445
'66.##0.255.61':445
'66.##0.65.183':445
'66.##0.10.95':139
'66.##0.57.137':445
'66.##0.133.199':445
'66.##0.59.175':445
'66.##0.86.225':445
'66.##0.215.165':445
'66.#60.45.4':445
'66.##0.125.108':445
'66.##0.212.89':445
'66.##0.225.212':445
'66.##0.48.247':445
'66.##0.51.56':445
'66.##0.16.166':445
'66.##0.254.188':445
'66.##0.13.91':445
'66.##0.87.42':445
'66.##0.189.196':445
'66.##0.34.225':445
'66.##0.42.218':445
'66.##0.10.95':445
'66.##0.35.217':445
'66.##0.83.81':445
'66.##0.187.20':445
'66.##0.160.220':445
'66.##0.50.173':445
'66.##0.120.99':445
'66.##0.93.240':445
'66.##0.77.102':445
'66.##0.236.109':445
'66.##0.134.149':445
'66.##0.160.17':445
'66.##0.27.53':445
'66.##0.84.209':445
'66.##0.25.41':445
'66.##0.186.169':445
'66.##0.32.188':445
'66.##0.42.218':139
'66.##0.214.65':139
'66.##0.249.175':139
'66.##0.19.216':139
'66.##0.215.165':139
'66.#60.45.4':139
'66.##0.1.158':139
'66.##0.183.74':139
'66.##0.45.245':139
'66.##0.125.192':139
'66.##0.131.163':139
'66.##0.55.64':139
'66.##0.138.159':139
'66.##0.147.48':139
'66.##0.57.137':139
'66.##0.133.199':139
'66.##0.8.220':139
'66.##0.160.87':445
'66.##0.55.254':445
'66.##0.247.46':445
'66.##0.255.61':139
'66.##0.212.89':139
'66.##0.225.212':139
'66.##0.86.225':139
'66.##0.65.183':139
'66.##0.59.175':139
'66.##0.125.108':139
'66.##0.13.91':139
'66.##0.87.42':139
'66.##0.48.247':139
'66.##0.27.53':139
'66.##0.84.209':139
'66.##0.254.188':139
'66.##0.51.56':139
'66.##0.83.81':139
'66.##0.187.20':139
'66.##0.34.225':139
'66.##0.16.166':139
'66.##0.189.196':139
'66.##0.35.217':139
'66.##0.77.102':139
'66.##0.236.109':139
'66.##0.160.220':139
'66.##0.244.9':139
'66.##0.33.170':139
'66.##0.93.240':139
'66.##0.50.173':139
'66.##0.186.169':139
'66.##0.32.188':139
'66.##0.160.17':139
'66.##0.120.99':139
'66.##0.134.149':139
'66.##0.25.41':139
'66.##0.34.210':445
'66.##0.17.250':445
'66.##0.247.30':445
'66.##0.194.148':445
'66.##0.12.155':445
'66.##0.252.208':445
'66.##0.130.129':445
'66.##0.142.178':445
'66.##0.17.53':445
'66.##0.252.250':445
'66.##0.135.215':445
'66.##0.41.254':445
'66.##0.81.115':445
'66.##0.53.202':445
'66.##0.225.231':445
'66.##0.205.46':445
'66.##0.217.120':445
'66.##0.110.80':445
'66.##0.201.139':445
'66.##0.52.119':445
'66.##0.157.154':445
'66.##0.166.134':445
'66.##0.26.170':445
'66.##0.131.193':445
'66.##0.60.131':445
'66.##0.161.60':445
'66.##0.45.250':445
'66.##0.83.72':445
'66.##0.47.50':445
'66.##0.34.206':445
'66.##0.229.248':445
'66.##0.250.229':445
'66.##0.30.179':445
'66.##0.201.139':9988
'66.##0.17.250':9988
'66.##0.52.119':9988
'66.##0.5.215':445
'66.##0.175.90':445
'66.##0.41.175':445
'66.##0.12.212':445
'66.##0.122.156':445
'66.##0.88.38':445
'66.##0.59.252':445
'66.##0.21.237':445
'66.##0.129.101':445
'66.##0.2.176':445
'66.##0.109.8':445
'66.##0.213.99':445
'66.##0.166.106':445
'66.##0.192.165':445
'66.##0.227.228':445
'66.##0.212.10':445
'66.##0.215.109':445
'66.##0.12.155':139
'66.##0.252.208':139
'66.##0.34.210':139
'66.##0.166.134':139
'66.##0.26.170':139
'66.##0.194.148':139
'66.##0.17.250':139
'66.##0.41.254':139
'66.##0.81.115':139
'66.##0.142.178':139
'66.##0.247.30':139
'66.##0.130.129':139
'66.##0.135.215':139
'66.##0.110.80':139
'66.##0.201.139':139
'66.##0.53.202':139
'66.##0.217.120':139
'66.##0.99.215':139
'66.##0.215.109':139
'66.##0.225.231':139
'66.##0.60.131':139
'66.##0.161.60':139
'66.##0.157.154':139
'66.##0.205.46':139
'66.##0.52.119':139
'66.##0.131.193':139
'66.##0.229.248':139
'66.##0.250.229':139
'66.##0.45.250':139
'66.##0.213.99':139
'66.##0.166.106':139
'66.##0.34.206':139
'66.##0.83.72':139
'66.##0.175.90':139
'66.##0.41.175':139
'66.##0.99.215':445
'66.##0.47.50':139
'66.##0.30.179':139
'66.##0.5.215':139
'66.##0.21.237':139
'66.##0.129.101':139
'66.##0.12.212':139
'66.##0.17.53':139
'66.##0.252.250':139
'66.##0.59.252':139
'66.##0.122.156':139
'66.##0.227.228':139
'66.##0.212.10':139
'66.##0.109.8':139
'66.##0.88.38':139
'66.##0.2.176':139
'66.##0.192.165':139
'66.##0.46.86':445
'66.##0.26.43':445
'66.##0.91.197':445
'66.##0.74.113':445
'66.##0.60.201':445
'66.##0.149.14':445
'66.##0.209.57':445
'66.##0.64.144':445
'66.##0.223.249':445
'66.##0.48.250':445
'66.##0.76.118':445
'66.##0.17.55':445
'66.##0.172.7':445
'66.##0.214.220':139
'66.##0.85.215':139
'66.##0.193.178':139
'66.##0.153.192':139
'66.##0.181.160':139
'66.#60.5.6':139
'66.##0.94.81':139
'66.##0.254.92':445
'66.##0.13.64':445
'66.##0.1.123':445
'66.##0.24.20':445
'66.##0.88.15':445
'66.##0.201.63':445
'66.##0.101.68':445
'66.##0.77.212':445
'66.##0.47.204':445
'66.##0.123.83':445
'66.##0.176.102':445
'66.##0.146.157':445
'66.##0.14.157':445
'66.##0.86.240':445
'66.##0.192.86':445
'66.##0.153.192':445
'66.##0.72.136':445
'66.#60.29.0':445
'66.##0.239.204':445
'66.#60.6.42':445
'66.##0.132.5':445
'66.##0.124.132':445
'66.##0.241.135':445
'66.##0.85.18':445
'66.##0.129.23':445
'66.##0.226.124':445
'66.##0.52.244':445
'66.#60.17.1':445
'66.##0.137.47':445
'66.##0.124.126':445
'66.##0.51.52':445
'66.##0.107.232':445
'66.##0.192.86':139
'66.##0.60.201':139
'66.##0.149.14':139
'66.##0.46.86':139
'66.##0.13.64':139
'66.##0.1.123':139
'66.##0.74.113':139
'66.##0.26.43':139
'66.##0.17.55':139
'66.##0.172.7':139
'66.##0.64.144':139
'66.##0.91.197':139
'66.##0.209.57':139
'66.##0.76.118':139
'66.##0.166.134':9988
'66.##0.252.208':9988
'66.##0.135.215':9988
'66.##0.131.193':9988
'66.##0.161.60':9988
'66.##0.26.170':9988
'66.##0.217.120':9988
'66.##0.88.15':139
'66.##0.254.92':139
'66.##0.201.63':139
'66.##0.17.53':9988
'66.##0.2.176':9988
'66.##0.24.20':139
'66.##0.176.102':139
'66.##0.146.157':139
'66.##0.101.68':139
'66.#60.17.1':139
'66.##0.137.47':139
'66.##0.123.83':139
'66.##0.77.212':139
'66.#60.29.0':139
'66.##0.239.204':139
'66.##0.86.240':139
'66.##0.47.204':139
'66.##0.14.157':139
'66.##0.72.136':139
'66.##0.85.18':139
'66.##0.129.23':139
'66.#60.6.42':139
'66.##0.223.249':139
'66.##0.48.250':139
'66.##0.241.135':139
'66.##0.132.5':139
'66.##0.51.52':139
'66.##0.107.232':139
'66.##0.52.244':139
'66.##0.124.132':139
'66.##0.226.124':139
'66.##0.124.126':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней