Trojan.Starman.6059

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#3.229.191':445
'22#.#3.183.229':445
'22#.#3.123.106':445
'22#.#3.191.55':445
'22#.#3.120.184':445
'22#.#3.138.158':445
'22#.#3.150.130':445
'22#.#3.96.121':445
'22#.#3.129.10':445
'22#.#3.53.211':445
'22#.#3.76.121':445
'22#.#3.103.76':445
'22#.#3.213.125':445
'22#.#3.185.72':445
'22#.#3.47.104':445
'22#.#3.149.220':445
'22#.#3.51.23':445
'22#.#3.56.69':445
'22#.#3.175.45':445
'22#.#3.118.108':445
'22#.#3.6.165':445
'22#.#3.34.78':445
'22#.#3.126.212':445
'22#.#3.37.136':445
'22#.#3.156.176':445
'22#.#3.250.46':445
'22#.#3.115.4':445
'22#.#3.150.80':445
'22#.#3.28.250':445
'22#.#3.72.80':445
'22#.#3.195.130':445
'22#.#3.225.166':445
'22#.#3.129.81':445
'22#.#3.211.195':445
'22#.#3.53.76':445
'22#.#3.250.52':445
'22#.#3.14.123':445
'22#.#3.25.196':445
'22#.#3.197.117':445
'22#.#3.14.123':139
'22#.#3.25.196':139
'22#.#3.195.130':139
'22#.#3.211.195':139
'22#.#3.53.76':139
'22#.#3.34.78':139
'22#.#3.126.212':139
'22#.#3.250.52':139
'22#.#3.28.250':139
'22#.#3.72.80':139
'22#.#3.120.184':139
'22#.#3.96.121':139
'22#.#3.229.191':139
'22#.#3.183.229':139
'22#.#3.129.10':139
'22#.#3.225.166':139
'22#.#3.129.81':139
'22#.#3.138.158':139
'22#.#3.150.130':139
'22#.#3.154.81':139
'22#.#3.136.64':139
'22#.#3.69.189':139
'22#.#3.147.185':139
'22#.#3.35.161':139
'22#.33.25.3':445
'22#.#3.17.191':445
'22#.#3.46.216':139
'22#.#3.238.139':139
'22#.#3.116.192':139
'22#.#3.37.136':139
'22#.#3.115.4':139
'22#.#3.118.108':139
'22#.#3.6.165':139
'22#.#3.150.80':139
'22#.#3.134.133':139
'22#.33.33.0':139
'22#.#3.156.176':139
'22#.#3.250.46':139
'22#.#3.134.133':445
'22#.33.8.24':139
'22#.#3.8.249':139
'22#.#3.68.218':139
'22#.#3.125.211':139
'22#.#3.10.195':139
'22#.#3.19.58':139
'22#.#3.78.254':139
'22#.#3.243.10':139
'22#.#3.40.174':139
'22#.#3.218.35':139
'22#.#3.178.80':139
'22#.#3.179.152':139
'22#.#3.124.18':139
'22#.#3.246.43':139
'22#.#3.36.18':139
'22#.#3.27.53':139
'22#.#3.36.27':139
'22#.#3.52.39':139
'22#.#3.53.35':139
'22#.#3.178.141':445
'22#.#3.120.98':445
'22#.#3.184.90':445
'22#.#3.48.60':445
'22#.#3.176.212':445
'22#.#3.198.95':445
'22#.#3.74.198':445
'22#.#3.56.42':445
'22#.#3.130.224':445
'22#.#3.218.25':445
'22#.#3.171.238':445
'22#.#3.198.126':445
'22#.#3.109.62':139
'22#.#3.244.161':139
'22#.33.57.4':445
'22#.#3.154.59':445
'22#.#3.44.132':445
'22#.#3.106.56':445
'22#.#3.253.105':445
'22#.#3.18.249':139
'22#.#3.106.56':139
'22#.#3.253.105':139
'22#.#3.198.126':139
'22#.33.57.4':139
'22#.#3.154.59':139
'22#.#3.184.90':139
'22#.#3.48.60':139
'22#.#3.44.132':139
'22#.#3.218.25':139
'22#.#3.171.238':139
'22#.#3.69.189':445
'22#.#3.147.185':445
'22#.33.33.0':445
'22#.#3.116.192':445
'22#.#3.154.81':445
'22#.#3.46.216':445
'22#.#3.238.139':445
'22#.#3.136.64':445
'22#.#3.35.161':445
'22#.#3.2.173':139
'22#.#3.90.179':139
'22#.#3.220.179':139
'22#.#3.146.220':139
'22#.#3.2.224':139
'22#.#3.127.229':139
'22#.#3.135.185':139
'22#.#3.77.117':139
'22#.#3.48.26':139
'22#.#3.119.34':139
'22#.#3.176.212':139
'22#.#3.56.42':139
'22#.#3.178.141':139
'22#.#3.120.98':139
'22#.#3.130.224':139
'22#.#3.167.78':139
'22#.#3.56.114':139
'22#.#3.198.95':139
'22#.#3.74.198':139
'22#.#3.191.55':139
'22#.#3.165.31':445
'22#.#3.145.72':445
'22#.#3.37.66':139
'22#.#3.58.40':139
'22#.#3.48.251':445
'22#.#3.104.96':445
'22#.#3.28.215':445
'22#.#3.42.208':445
'22#.#3.78.63':445
'22#.#3.132.168':139
'22#.#3.98.157':139
'22#.#3.137.218':139
'22#.#3.211.51':139
'22#.#3.180.55':139
'22#.#3.141.254':139
'22#.#3.188.73':139
'22#.#3.47.99':139
'22#.#3.120.122':139
'22#.#3.56.72':139
'22#.#3.139.56':445
'22#.#3.163.51':445
'22#.#3.241.159':445
'22#.#3.131.145':445
'22#.#3.154.19':445
'22#.#3.128.131':445
'22#.#3.50.222':445
'22#.#3.78.244':445
'22#.#3.8.220':445
'22#.#3.22.118':445
'22#.#3.25.63':445
'22#.#3.57.201':445
'22#.#3.88.117':445
'22#.33.36.1':445
'22#.#3.155.201':445
'22#.#3.238.167':445
'22#.#3.219.159':445
'22#.#3.245.179':445
'22#.#3.90.136':445
'22#.#3.179.135':139
'22#.#3.245.179':139
'22#.#3.90.136':139
'22#.#3.57.201':139
'22#.#3.155.201':139
'22#.#3.238.167':139
'22#.#3.241.159':139
'22#.#3.131.145':139
'22#.#3.219.159':139
'22#.#3.22.118':139
'22#.#3.25.63':139
'22#.#3.48.251':139
'22#.#3.42.208':139
'22#.#3.165.31':139
'22#.#3.145.72':139
'22#.#3.78.63':139
'22#.#3.88.117':139
'22#.33.36.1':139
'22#.#3.104.96':139
'22#.#3.28.215':139
'22#.#3.203.213':139
'22#.#3.169.34':139
'22#.#3.92.54':139
'22#.#3.204.211':139
'22#.#3.48.249':139
'22#.#3.98.41':139
'22#.#3.128.238':139
'22#.#3.211.133':139
'22#.#3.57.29':139
'22#.#3.80.38':139
'22#.#3.154.19':139
'22#.#3.78.244':139
'22#.#3.139.56':139
'22#.#3.163.51':139
'22#.#3.8.220':139
'22#.#3.228.199':139
'22#.#3.42.46':139
'22#.#3.128.131':139
'22#.#3.50.222':139
'22#.#3.228.199':445
'22#.#3.23.237':139
'22#.#3.160.10':139
'22#.#3.49.84':139
'22#.#3.236.186':139
'22#.#3.72.90':139
'22#.#3.43.151':445
'22#.#3.73.43':445
'22#.#3.77.98':445
'22#.#3.151.99':445
'22#.#3.73.43':139
'22#.#3.8.220':9988
'22#.#3.128.131':9988
'22#.#3.154.19':9988
'22#.#3.78.244':9988
'22#.#3.50.222':9988
'22#.#3.151.99':139
'22#.#3.43.151':139
'22#.#3.204.211':9988
'22#.#3.77.98':139
'22#.#3.47.104':139
'22#.#3.56.69':139
'22#.#3.76.121':139
'22#.#3.103.76':139
'22#.#3.175.45':139
'22#.#3.53.211':139
'22#.#3.123.106':139
'22#.#3.149.220':139
'22#.#3.51.23':139
'22#.#3.185.72':139
'22#.#3.23.237':445
'22#.#3.160.10':445
'22#.#3.49.84':445
'22#.#3.236.186':445
'22#.#3.72.90':445
'22#.#3.197.117':139
'22#.#3.213.125':139
'22#.33.25.3':139
'22#.#3.17.191':139
'22#.#3.163.51':9988
'22#.#3.211.51':445
'22#.#3.180.55':445
'22#.#3.128.238':445
'22#.#3.179.135':445
'22#.#3.98.157':445
'22#.#3.120.122':445
'22#.#3.56.72':445
'22#.#3.137.218':445
'22#.#3.141.254':445
'22#.#3.98.41':445
'22#.#3.92.54':445
'22#.#3.204.211':445
'22#.#3.42.46':445
'22#.#3.80.38':445
'22#.#3.203.213':445
'22#.#3.211.133':445
'22#.#3.57.29':445
'22#.#3.169.34':445
'22#.#3.48.249':445
'22#.#3.25.63':9988
'22#.#3.57.201':9988
'22#.#3.88.117':9988
'22#.#3.28.215':9988
'22#.#3.219.159':9988
'22#.#3.131.145':9988
'22#.#3.139.56':9988
'22#.#3.22.118':9988
'22#.#3.241.159':9988
'22#.#3.104.96':9988
'22#.#3.132.168':445
'22#.#3.37.66':445
'22#.#3.188.73':445
'22#.#3.47.99':445
'22#.#3.58.40':445
'22#.#3.42.208':9988
'22#.#3.78.63':9988
'22#.#3.145.72':9988
'22#.#3.165.31':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней