Trojan.Starman.6092

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#50.161.110':445
'19#.#50.107.161':445
'19#.#50.118.176':445
'19#.#50.12.218':445
'19#.#50.26.12':445
'19#.#50.230.65':445
'19#.#50.164.9':445
'19#.#50.18.6':139
'19#.#50.105.226':139
'19#.#50.124.61':445
'19#.#50.124.77':445
'19#.#50.34.0':139
'19#.#50.61.68':445
'19#.#50.94.193':445
'19#.#50.72.131':445
'19#.#50.119.39':445
'19#.#50.49.230':445
'19#.#50.82.112':445
'19#.#50.156.25':445
'19#.#50.5.211':445
'19#.#50.31.206':445
'19#.#50.78.219':445
'19#.#50.39.233':445
'19#.#50.179.42':445
'19#.#50.1.218':139
'19#.#50.221.190':139
'19#.#50.55.236':139
'19#.#50.174.103':139
'19#.#50.13.111':139
'19#.#50.137.69':139
'19#.#50.105.226':445
'19#.#50.133.191':445
'19#.#50.224.133':445
'19#.#50.253.55':139
'19#.#50.34.0':445
'19#.#50.18.6':445
'19#.#50.124.9':139
'19#.#50.84.208':139
'19#.#50.136.63':139
'19#.#50.133.191':139
'19#.#50.224.133':139
'19#.#50.7.108':139
'19#.#50.78.128':139
'19#.#50.8.164':139
'19#.#50.51.222':139
'19#.#50.128.136':139
'19#.#50.129.67':139
'19#.#50.67.111':139
'19#.#50.59.179':445
'19#.#50.19.22':139
'19#.#50.106.12':139
'19#.#50.236.105':139
'19#.#50.203.196':139
'19#.#50.205.203':139
'19#.#50.65.203':139
'19#.#50.49.230':139
'19#.#50.82.112':139
'19#.#50.61.68':139
'19#.#50.50.236':139
'19#.#50.59.179':139
'19#.#50.119.39':139
'19#.#50.179.185':445
'19#.#50.151.62':445
'19#.#50.73.201':445
'19#.#50.216.167':445
'19#.#50.226.34':445
'19#.#50.53.54':445
'19#.#50.73.232':445
'19#.#50.23.73':445
'19#.#50.196.23':445
'19#.#50.203.133':445
'19#.#50.29.47':445
'19#.#50.8.104':445
'19#.#50.124.77':139
'19#.#50.164.9':139
'19#.#50.203.196':445
'19#.#50.107.161':139
'19#.#50.118.176':139
'19#.#50.124.61':139
'19#.#50.106.12':445
'19#.#50.236.105':445
'19#.#50.50.236':445
'19#.#50.205.203':445
'19#.#50.65.203':445
'19#.#50.19.22':445
'19#.#50.39.233':139
'19#.#50.179.42':139
'19#.#50.156.25':139
'19#.#50.94.193':139
'19#.#50.72.131':139
'19#.#50.78.219':139
'19#.#50.26.12':139
'19#.#50.230.65':139
'19#.#50.161.110':139
'19#.#50.5.211':139
'19#.#50.31.206':139
'19#.#50.12.218':139
'19#.#50.13.153':445
'19#.#50.202.216':445
'19#.#50.213.149':445
'19#.#50.174.178':445
'19#.#50.110.121':445
'19#.#50.247.28':445
'19#.#50.142.56':445
'19#.#50.38.101':445
'19#.#50.251.87':445
'19#.#50.66.233':445
'19#.#50.102.139':445
'19#.#50.152.88':445
'19#.#50.33.219':445
'19#.#50.7.40':445
'19#.#50.161.100':445
'19#.#50.33.70':445
'19#.#50.222.145':445
'19#.#50.25.202':445
'19#.#50.97.183':445
'19#.#50.50.13':445
'19#.#50.178.187':445
'19#.#50.240.145':445
'19#.#50.48.117':445
'19#.#50.184.48':445
'19#.#50.102.151':139
'19#.#50.224.101':139
'19#.#50.164.140':139
'19#.#50.20.136':139
'19#.#50.147.20':139
'19#.#50.151.147':139
'19#.#50.107.150':139
'19#.#50.139.181':139
'19#.#50.232.185':139
'19#.#50.4.227':139
'19#.#50.182.96':139
'19#.#50.62.30':139
'19#.#50.183.241':139
'19#.#50.1.20':139
'19#.#50.110.71':139
'19#.#50.161.226':445
'19#.#50.59.8':445
'19#.#50.66.226':139
'19#.#50.96.69':139
'19#.#50.209.105':139
'19#.#50.39.218':139
'19#.#50.4.209':139
'19#.#50.109.107':139
'19#.#50.144.171':139
'19#.#50.31.138':445
'19#.#50.55.236':445
'19#.#50.253.55':445
'19#.#50.68.201':139
'19#.#50.137.69':445
'19#.#50.1.218':445
'19#.#50.221.190':445
'19#.#50.222.145':139
'19#.#50.25.202':139
'19#.#50.33.219':139
'19#.#50.138.37':139
'19#.#50.31.138':139
'19#.#50.33.70':139
'19#.#50.136.63':445
'19#.#50.128.136':445
'19#.#50.129.67':445
'19#.#50.7.108':445
'19#.#50.124.9':445
'19#.#50.84.208':445
'19#.#50.51.222':445
'19#.#50.174.103':445
'19#.#50.13.111':445
'19#.#50.67.111':445
'19#.#50.78.128':445
'19#.#50.8.164':445
'19#.#50.102.139':139
'19#.#50.152.88':139
'19#.#50.142.56':139
'19#.#50.202.216':139
'19#.#50.213.149':139
'19#.#50.66.233':139
'19#.#50.59.8':139
'19#.#50.68.201':445
'19#.#50.138.37':445
'19#.#50.38.101':139
'19#.#50.251.87':139
'19#.#50.161.226':139
'19#.#50.48.117':139
'19#.#50.184.48':139
'19#.#50.97.183':139
'19#.#50.7.40':139
'19#.#50.161.100':139
'19#.#50.240.145':139
'19#.#50.110.121':139
'19#.#50.247.28':139
'19#.#50.13.153':139
'19#.#50.50.13':139
'19#.#50.178.187':139
'19#.#50.174.178':139
'19#.#50.111.148':445
'19#.#50.10.210':445
'19#.#50.184.10':445
'19#.#50.68.49':445
'19#.#50.192.181':445
'19#.#50.210.230':445
'19#.#50.229.50':445
'19#.#50.135.211':445
'19#.#50.234.93':445
'19#.#50.33.6':445
'19#.#50.20.56':445
'19#.#50.51.26':445
'19#.#50.118.150':445
'19#.#50.160.99':445
'19#.#50.149.126':445
'19#.#50.234.240':139
'19#.#50.14.120':139
'19#.#50.148.18':445
'19#.#50.181.100':445
'19#.#50.90.150':445
'19#.#50.192.99':445
'19#.#50.144.210':445
'19#.#50.210.153':445
'19#.#50.210.73':445
'19#.#50.199.186':445
'19#.#50.225.210':445
'19#.#50.95.201':445
'19#.#50.62.13':445
'19#.#50.97.201':445
'19#.#50.193.239':445
'19#.#50.130.254':445
'19#.#50.228.43':445
'19#.#50.158.28':445
'19#.#50.107.66':445
'19#.#50.249.106':445
'19#.#50.254.248':445
'19#.#50.158.143':445
'19#.#50.27.27':445
'19#.#50.205.111':445
'19#.#50.15.234':445
'19#.#50.128.234':445
'19#.#50.149.32':445
'19#.#50.6.102':445
'19#.#50.21.134':445
'19#.#50.159.118':445
'19#.#50.187.121':445
'19#.#50.203.121':445
'19#.#50.57.132':445
'19#.#50.4.185':139
'19#.#50.184.10':139
'19#.#50.33.6':139
'19#.#50.20.56':139
'19#.#50.210.230':139
'19#.#50.111.148':139
'19#.#50.10.210':139
'19#.#50.234.93':139
'19#.#50.128.234':139
'19#.#50.15.234':139
'19#.#50.51.26':139
'19#.#50.229.50':139
'19#.#50.135.211':139
'19#.#50.210.73':139
'19#.#50.210.153':139
'19#.#50.149.126':139
'19#.#50.160.99':139
'19#.#50.144.210':139
'19#.#50.118.150':139
'19#.#50.192.99':139
'19#.#50.68.49':139
'19#.#50.192.181':139
'19#.#50.148.18':139
'19#.#50.181.100':139
'19#.#50.90.150':139
'19#.#50.95.201':139
'19#.#50.107.66':139
'19#.#50.249.106':139
'19#.#50.193.239':139
'19#.#50.199.186':139
'19#.#50.225.210':139
'19#.#50.228.43':139
'19#.#50.77.18':139
'19#.#50.220.48':139
'19#.#50.254.248':139
'19#.#50.130.254':139
'19#.#50.158.28':139
'19#.#50.205.111':139
'19#.#50.187.121':139
'19#.#50.203.121':139
'19#.#50.149.32':139
'19#.#50.158.143':139
'19#.#50.27.27':139
'19#.#50.159.118':139
'19#.#50.62.13':139
'19#.#50.97.201':139
'19#.#50.57.132':139
'19#.#50.6.102':139
'19#.#50.21.134':139
'19#.#50.52.76':445
'19#.#50.63.27':139
'19#.#50.7.63':139
'19#.#50.152.30':445
'19#.#50.55.2':445
'19#.#50.103.63':445
'19#.#50.27.14':139
'19#.#50.200.49':139
'19#.#50.91.187':139
'19#.#50.202.7':139
'19#.#50.250.201':139
'19#.#50.227.7':139
'19#.#50.100.240':445
'19#.#50.69.69':445
'19#.#50.234.218':445
'19#.#50.80.234':445
'19#.#50.67.246':445
'19#.#50.45.59':445
'19#.#50.208.161':445
'19#.#50.150.224':445
'19#.#50.77.173':445
'19#.#50.96.157':445
'19#.#50.153.184':445
'19#.#50.161.227':445
'19#.#50.7.63':445
'19#.#50.202.7':445
'19#.#50.250.201':445
'19#.#50.23.73':139
'19#.#50.196.23':139
'19#.#50.63.27':445
'19#.#50.91.187':445
'19#.#50.6.135':445
'19#.#50.34.187':445
'19#.#50.227.7':445
'19#.#50.27.14':445
'19#.#50.200.49':445
'19#.#50.226.34':139
'19#.#50.53.54':139
'19#.#50.179.185':139
'19#.#50.6.135':139
'19#.#50.34.187':139
'19#.#50.216.167':139
'19#.#50.29.47':139
'19#.#50.8.104':139
'19#.#50.73.232':139
'19#.#50.151.62':139
'19#.#50.73.201':139
'19#.#50.203.133':139
'19#.#50.93.143':445
'19#.#50.205.111':9988
'19#.#50.203.121':9988
'19#.#50.225.210':9988
'19#.#50.51.26':9988
'19#.#50.229.50':9988
'19#.#50.234.93':9988
'19#.#50.71.157':139
'19#.#50.249.33':139
'19#.#50.9.199':139
'19#.#50.77.18':9988
'19#.#50.163.30':139
'19#.#50.64.163':139
'19#.#50.234.240':445
'19#.#50.14.120':445
'19#.#50.149.126':9988
'19#.#50.220.48':445
'19#.#50.77.18':445
'19#.#50.4.185':445
'19#.#50.210.230':9988
'19#.#50.111.148':9988
'19#.#50.10.210':9988
'19#.#50.144.210':9988
'19#.#50.192.99':9988
'19#.#50.192.181':9988
'19#.#50.55.2':139
'19#.#50.103.63':139
'19#.#50.52.76':139
'19#.#50.150.224':139
'19#.#50.77.173':139
'19#.#50.152.30':139
'19#.#50.249.33':445
'19#.#50.9.199':445
'19#.#50.199.71':445
'19#.#50.163.30':445
'19#.#50.64.163':445
'19#.#50.71.157':445
'19#.#50.67.246':139
'19#.#50.45.59':139
'19#.#50.100.240':139
'19#.#50.199.71':139
'19#.#50.93.143':139
'19#.#50.80.234':139
'19#.#50.153.184':139
'19#.#50.161.227':139
'19#.#50.208.161':139
'19#.#50.69.69':139
'19#.#50.234.218':139
'19#.#50.96.157':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней