Trojan.Starman.6144

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#95.165.29':445
'21#.#95.60.5':445
'21#.#95.78.147':445
'21#.#95.163.231':445
'21#.#95.67.12':445
'21#.#95.168.247':445
'21#.#95.226.168':445
'21#.#95.246.210':445
'21#.#95.27.180':445
'21#.#95.52.116':445
'21#.#95.229.172':445
'21#.#95.241.229':445
'21#.#95.173.40':445
'21#.#95.175.55':445
'21#.#95.212.183':445
'21#.#95.40.142':445
'21#.#95.232.40':445
'21#.#95.110.4':445
'21#.#95.71.121':445
'21#.#95.82.223':445
'21#.#95.18.89':445
'21#.#95.77.57':445
'21#.#95.88.214':445
'21#.#95.199.219':445
'21#.#95.240.80':445
'21#.#95.250.61':445
'21#.#95.53.88':445
'21#.#95.33.139':445
'21#.#95.32.218':445
'21#.#95.181.49':445
'21#.#95.134.180':445
'21#.#95.63.139':445
'21#.#95.57.175':445
'21#.#95.20.226':445
'21#.#95.150.42':445
'21#.#95.84.41':445
'21#.#95.244.254':445
'21#.#95.254.33':445
'21#.#95.122.80':445
'21#.#95.238.37':445
'21#.#95.150.42':139
'21#.#95.57.175':139
'21#.#95.20.226':139
'21#.#95.168.247':139
'21#.#95.226.168':139
'21#.#95.238.37':139
'21#.#95.254.33':139
'21#.#95.122.80':139
'21#.#95.134.180':139
'21#.#95.63.139':139
'21#.#95.67.12':139
'21#.#95.78.147':139
'21#.#95.163.231':139
'21#.#95.40.142':139
'21#.#95.232.40':139
'21#.#95.52.116':139
'21#.#95.246.210':139
'21#.#95.27.180':139
'21#.#95.165.29':139
'21#.#95.60.5':139
'21#.#95.60.45':445
'21#.#95.0.174':445
'21#.#95.96.49':139
'21#.#95.250.61':139
'21#.#95.53.88':139
'21#.#95.185.99':445
'21#.#95.201.185':445
'21#.#95.99.15':445
'21#.#95.149.0':445
'21#.#95.120.177':445
'21#.#95.240.80':139
'21#.#95.88.214':139
'21#.#95.199.219':139
'21#.#95.84.41':139
'21#.#95.244.254':139
'21#.#95.181.49':139
'21#.#95.33.139':139
'21#.#95.32.218':139
'21#.#95.18.89':139
'21#.#95.77.57':139
'21#.#95.96.49':445
'21#.#95.145.187':139
'21#.#95.171.236':445
'21#.#95.187.213':139
'21#.#95.103.82':139
'21#.#95.213.102':139
'21#.#95.144.25':445
'21#.#95.85.58':445
'21#.#95.30.119':445
'21#.#95.230.171':445
'21#.#95.118.230':445
'21#.#95.250.56':139
'21#.#95.154.195':139
'21#.#95.114.149':139
'21#.#95.102.83':139
'21#.#95.64.236':139
'21#.#95.58.122':139
'21#.#95.51.170':139
'21#.#95.240.61':139
'21#.#95.93.32':139
'21#.#95.3.25':139
'21#.#95.111.187':445
'21#.#95.29.111':445
'21#.#95.29.187':445
'21#.#95.14.244':445
'21#.#95.109.147':445
'21#.#95.34.4':445
'21#.#95.102.33':445
'21#.#95.60.9':445
'21#.#95.149.37':445
'21#.#95.21.84':445
'21#.#95.76.17':445
'21#.#95.89.212':445
'21#.#95.148.156':445
'21#.#95.126.238':445
'21#.#95.112.153':445
'21#.#95.98.200':445
'21#.#95.22.54':445
'21#.#95.30.179':445
'21#.#95.101.69':445
'21#.#95.132.220':445
'21#.#95.112.153':139
'21#.#95.148.156':139
'21#.#95.126.238':139
'21#.#95.144.25':139
'21#.#95.85.58':139
'21#.#95.132.220':139
'21#.#95.30.179':139
'21#.#95.101.69':139
'21#.#95.76.17':139
'21#.#95.89.212':139
'21#.#95.247.122':445
'21#.#95.65.145':445
'21#.#95.237.65':139
'21#.#95.247.122':139
'21#.#95.65.145':139
'21#.#95.118.230':139
'21#.#95.30.119':139
'21#.#95.230.171':139
'21#.#95.237.65':445
'21#.#95.171.236':139
'21#.#95.39.196':139
'21#.#95.77.196':139
'21#.#95.119.171':139
'21#.#95.34.4':139
'21#.#95.102.33':139
'21#.#95.24.206':139
'21#.#95.95.81':139
'21#.#95.125.184':139
'21#.#95.62.47':139
'21#.#95.212.90':139
'21#.#95.14.244':139
'21#.#95.29.187':139
'21#.#95.109.147':139
'21#.#95.98.200':139
'21#.#95.22.54':139
'21#.#95.21.84':139
'21#.#95.60.9':139
'21#.#95.149.37':139
'21#.#95.111.187':139
'21#.#95.29.111':139
'21#.#95.110.4':139
'21#.#95.49.185':445
'21#.#95.228.229':445
'21#.#95.6.210':445
'21#.#95.58.235':139
'21#.#95.188.98':445
'21#.#95.115.14':445
'21#.#95.204.119':445
'21#.#95.162.248':445
'21#.#95.81.16':445
'21#.#95.248.231':445
'21#.#95.22.112':139
'21#.#95.38.239':139
'21#.#95.53.4':139
'21#.#95.71.230':139
'21#.#95.143.71':139
'21#.#95.112.30':139
'21#.#95.161.58':139
'21#.#95.229.231':139
'21#.#95.163.168':139
'21#.#95.37.152':139
'21#.#95.85.219':445
'21#.#95.116.79':445
'21#.#95.114.118':445
'21#.#95.230.119':445
'21#.#95.150.230':445
'21#.#95.83.162':445
'21#.#95.171.205':445
'21#.#95.239.63':445
'21#.#95.61.55':445
'21#.#95.64.65':445
'21#.#95.7.124':445
'21#.#95.240.7':445
'21#.#95.124.66':445
'21#.#95.142.126':445
'21#.#95.66.142':445
'21#.#95.24.184':445
'21#.#95.120.24':445
'21#.#95.14.219':445
'21#.#95.50.240':445
'21#.#95.191.215':445
'21#.#95.240.7':139
'21#.#95.50.240':139
'21#.#95.7.124':139
'21#.#95.66.142':139
'21#.#95.124.66':139
'21#.#95.120.24':139
'21#.#95.230.119':139
'21#.#95.24.184':139
'21#.#95.191.215':139
'21#.#95.14.219':139
'21#.#95.228.229':139
'21#.#95.81.16':139
'21#.#95.49.185':139
'21#.#95.188.98':139
'21#.#95.6.210':139
'21#.#95.204.119':139
'21#.#95.142.126':139
'21#.#95.115.14':139
'21#.#95.248.231':139
'21#.#95.162.248':139
'21#.#95.49.107':139
'21#.#95.6.244':139
'21#.#95.222.16':139
'21#.#95.248.112':139
'21#.#95.86.82':139
'21#.#95.68.148':139
'21#.#95.73.44':139
'21#.#95.65.188':139
'21#.#95.177.227':139
'21#.#95.35.231':139
'21#.#95.116.79':139
'21#.#95.61.55':139
'21#.#95.85.219':139
'21#.#95.150.230':139
'21#.#95.114.118':139
'21#.#95.171.205':139
'21#.#95.78.0':139
'21#.#95.83.162':139
'21#.#95.64.65':139
'21#.#95.239.63':139
'21#.#95.78.0':445
'21#.#95.83.215':139
'21#.#95.239.243':445
'21#.#95.135.97':139
'21#.#95.131.88':139
'21#.#95.27.179':139
'21#.#95.135.97':445
'21#.#95.83.215':445
'21#.#95.27.179':445
'21#.#95.206.162':445
'21#.#95.131.88':445
'21#.#95.17.70':139
'21#.#95.26.188':139
'21#.#95.24.246':139
'21#.#95.66.142':9988
'21#.#95.162.248':9988
'21#.#95.239.243':139
'21#.#95.206.162':139
'21#.#95.26.188':445
'21#.#95.24.246':445
'21#.#95.17.70':445
'21#.#95.175.55':139
'21#.#95.212.183':139
'21#.#95.201.185':139
'21#.#95.99.15':139
'21#.#95.185.99':139
'21#.#95.71.121':139
'21#.#95.82.223':139
'21#.#95.241.229':139
'21#.#95.173.40':139
'21#.#95.229.172':139
'21#.#95.188.12':445
'21#.#95.6.209':445
'21#.#95.222.153':139
'21#.#95.188.12':139
'21#.#95.6.209':139
'21#.#95.149.0':139
'21#.#95.120.177':139
'21#.#95.0.174':139
'21#.#95.222.153':445
'21#.#95.60.45':139
'21#.#95.22.112':445
'21#.#95.38.239':445
'21#.#95.53.4':445
'21#.#95.71.230':445
'21#.#95.143.71':445
'21#.#95.112.30':445
'21#.#95.161.58':445
'21#.#95.229.231':445
'21#.#95.163.168':445
'21#.#95.37.152':445
'21#.#95.49.107':445
'21#.#95.6.244':445
'21#.#95.222.16':445
'21#.#95.248.112':445
'21#.#95.86.82':445
'21#.#95.68.148':445
'21#.#95.73.44':445
'21#.#95.65.188':445
'21#.#95.177.227':445
'21#.#95.35.231':445
'21#.#95.191.215':9988
'21#.#95.230.119':9988
'21#.#95.64.65':9988
'21#.#95.61.55':9988
'21#.#95.240.7':9988
'21#.#95.124.66':9988
'21#.#95.120.24':9988
'21#.#95.86.82':9988
'21#.#95.50.240':9988
'21#.#95.78.0':9988
'21#.#95.49.185':9988
'21#.#95.248.231':9988
'21#.#95.6.210':9988
'21#.#95.58.235':445
'21#.#95.188.98':9988
'21#.#95.7.124':9988
'21#.#95.115.14':9988
'21#.#95.204.119':9988
'21#.#95.142.126':9988
'21#.#95.114.118':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней