Trojan.Starman.6685

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#0.197.132':139
'21#.#0.148.113':139
'21#.#0.140.206':139
'21#.#0.41.83':139
'21#.#0.56.193':139
'21#.#0.10.236':139
'21#.#0.30.155':139
'21#.#0.114.170':139
'21#.80.3.63':139
'21#.#0.225.57':139
'21#.#0.19.74':139
'21#.#0.199.91':139
'21#.#0.28.43':139
'21#.#0.191.43':139
'21#.80.4.44':139
'21#.#0.26.146':445
'21#.#0.151.253':445
'21#.#0.197.216':139
'21#.#0.94.50':139
'21#.#0.46.193':139
'21#.#0.13.247':139
'21#.#0.232.63':139
'21#.#0.39.115':139
'21#.#0.67.32':139
'21#.#0.167.119':139
'21#.80.28.0':139
'21#.#0.208.222':139
'21#.#0.183.48':139
'21#.#0.4.102':139
'21#.#0.162.15':139
'21#.80.4.44':445
'21#.#0.232.63':445
'21#.#0.39.115':445
'21#.#0.197.216':445
'21#.#0.28.43':445
'21#.#0.191.43':445
'21#.#0.178.97':139
'21#.#0.170.140':139
'21#.#0.84.42':139
'21#.#0.54.233':139
'21#.#0.33.138':139
'21#.#0.161.33':139
'21#.#0.14.158':139
'21#.#0.133.179':139
'21#.#0.182.78':139
'21#.#0.158.215':139
'21#.80.6.65':139
'21#.#0.157.133':139
'21#.#0.65.77':445
'21#.#0.135.198':445
'21#.#0.188.32':445
'21#.#0.124.174':445
'21#.#0.185.124':445
'21#.#0.112.94':445
'21#.#0.25.184':445
'21#.#0.53.160':445
'21#.#0.39.207':445
'21#.#0.225.151':445
'21#.#0.9.119':445
'21#.#0.183.188':445
'21#.#0.172.152':445
'21#.#0.175.172':445
'21#.#0.104.175':445
'21#.#0.167.83':445
'21#.#0.30.168':445
'21#.#0.152.30':445
'21#.#0.91.152':445
'21#.#0.7.220':445
'21#.#0.115.107':445
'21#.#0.122.122':445
'21#.#0.172.35':445
'21#.#0.206.164':445
'21#.#0.48.172':445
'21#.#0.240.131':445
'21#.#0.143.12':445
'21#.#0.9.204':139
'21#.#0.26.146':139
'21#.#0.151.253':139
'21#.#0.11.78':445
'21#.#0.231.9':445
'21#.#0.9.204':445
'21#.#0.231.142':445
'21#.#0.99.50':445
'21#.#0.15.113':445
'21#.#0.233.233':445
'21#.#0.48.172':139
'21#.#0.240.131':139
'21#.#0.80.78':445
'21#.#0.59.125':445
'21#.#0.116.177':445
'21#.#0.15.113':139
'21#.#0.11.78':139
'21#.#0.231.9':139
'21#.#0.143.12':139
'21#.#0.231.142':139
'21#.#0.99.50':139
'21#.#0.116.37':139
'21#.80.36.5':139
'21#.#0.55.240':139
'21#.#0.45.123':139
'21#.#0.61.72':139
'21#.#0.99.134':139
'21#.#0.200.250':139
'21#.#0.151.214':139
'21#.#0.37.152':139
'21#.#0.118.56':139
'21#.#0.167.118':139
'21#.#0.88.218':139
'21#.#0.62.14':445
'21#.#0.144.62':445
'21#.#0.15.212':445
'21#.#0.78.34':445
'21#.#0.22.211':445
'21#.#0.14.23':445
'21#.#0.216.168':139
'21#.#0.78.204':139
'21#.#0.117.206':139
'21#.#0.124.125':445
'21#.#0.251.42':445
'21#.#0.62.83':139
'21#.#0.204.24':139
'21#.#0.113.214':139
'21#.#0.189.227':139
'21#.#0.86.90':139
'21#.#0.134.55':139
'21#.#0.48.105':139
'21#.#0.22.82':139
'21#.#0.25.153':139
'21#.#0.214.235':139
'21#.#0.12.197':139
'21#.#0.62.38':139
'21#.80.44.1':139
'21#.80.8.79':139
'21#.#0.175.41':139
'21#.#0.96.34':139
'21#.#0.213.252':139
'21#.#0.172.237':139
'21#.#0.180.92':139
'21#.#0.73.112':139
'21#.#0.189.68':139
'21#.#0.37.178':139
'21#.80.70.3':139
'21#.#0.44.56':139
'21#.#0.92.36':139
'21#.80.3.63':445
'21#.#0.54.233':445
'21#.#0.33.138':445
'21#.#0.199.91':445
'21#.#0.30.155':445
'21#.#0.114.170':445
'21#.#0.84.42':445
'21#.#0.158.215':445
'21#.#0.157.133':445
'21#.#0.161.33':445
'21#.#0.178.97':445
'21#.#0.170.140':445
'21#.#0.13.247':445
'21#.#0.41.83':445
'21#.#0.56.193':445
'21#.#0.67.32':445
'21#.#0.94.50':445
'21#.#0.46.193':445
'21#.#0.140.206':445
'21#.#0.225.57':445
'21#.#0.19.74':445
'21#.#0.10.236':445
'21#.#0.197.132':445
'21#.#0.148.113':445
'21#.#0.14.23':139
'21#.#0.62.14':139
'21#.#0.144.62':139
'21#.#0.51.159':139
'21#.#0.78.34':139
'21#.#0.22.211':139
'21#.#0.145.141':445
'21#.#0.22.45':445
'21#.#0.51.159':445
'21#.#0.15.212':139
'21#.#0.124.125':139
'21#.#0.251.42':139
'21#.#0.133.179':445
'21#.#0.183.48':445
'21#.#0.4.102':445
'21#.80.6.65':445
'21#.#0.14.158':445
'21#.#0.182.78':445
'21#.#0.208.222':445
'21#.#0.145.141':139
'21#.#0.22.45':139
'21#.#0.162.15':445
'21#.#0.167.119':445
'21#.80.28.0':445
'21#.#0.169.218':445
'21#.#0.249.128':445
'21#.#0.167.213':445
'21#.#0.17.47':445
'21#.#0.116.58':445
'21#.#0.219.160':445
'21#.#0.198.109':445
'21#.#0.235.197':445
'21#.#0.212.24':445
'21#.#0.46.62':445
'21#.#0.173.28':445
'21#.#0.109.223':445
'21#.#0.64.40':445
'21#.#0.228.61':445
'21#.#0.137.205':445
'21#.#0.139.129':139
'21#.#0.27.177':139
'21#.#0.102.55':139
'21#.#0.22.234':445
'21#.#0.65.22':445
'21#.80.8.24':445
'21#.#0.46.228':445
'21#.#0.230.42':445
'21#.#0.234.137':445
'21#.#0.149.148':445
'21#.#0.110.102':445
'21#.#0.233.57':445
'21#.#0.152.184':445
'21#.#0.132.35':445
'21#.#0.16.110':445
'21#.#0.228.78':445
'21#.#0.173.171':445
'21#.#0.189.149':445
'21#.#0.153.233':445
'21#.#0.192.36':445
'21#.#0.144.102':445
'21#.#0.56.235':445
'21#.#0.188.204':445
'21#.#0.35.238':445
'21#.#0.188.69':445
'21#.#0.78.218':445
'21#.#0.165.118':445
'21#.#0.112.32':445
'21#.#0.232.136':445
'21#.80.6.51':445
'21#.#0.44.175':445
'21#.#0.149.70':445
'21#.#0.38.98':445
'21#.#0.46.62':139
'21#.#0.173.28':139
'21#.#0.109.223':139
'21#.#0.169.218':139
'21#.#0.249.128':139
'21#.#0.167.213':139
'21#.#0.188.69':139
'21#.#0.78.218':139
'21#.#0.165.118':139
'21#.#0.198.109':139
'21#.#0.235.197':139
'21#.#0.212.24':139
'21#.#0.230.42':139
'21#.#0.137.205':139
'21#.#0.234.137':139
'21#.#0.46.228':139
'21#.#0.228.61':139
'21#.#0.64.40':139
'21#.#0.17.47':139
'21#.#0.116.58':139
'21#.#0.219.160':139
'21#.#0.22.234':139
'21#.#0.65.22':139
'21#.80.8.24':139
'21#.#0.153.233':139
'21#.#0.192.36':139
'21#.#0.144.102':139
'21#.#0.149.148':139
'21#.#0.110.102':139
'21#.#0.233.57':139
'21#.#0.42.235':139
'21#.#0.15.43':139
'21#.#0.66.236':139
'21#.#0.228.78':139
'21#.#0.173.171':139
'21#.#0.189.149':139
'21#.#0.44.175':139
'21#.#0.149.70':139
'21#.#0.38.98':139
'21#.#0.56.235':139
'21#.#0.188.204':139
'21#.#0.35.238':139
'21#.#0.152.184':139
'21#.#0.132.35':139
'21#.#0.16.110':139
'21#.#0.112.32':139
'21#.#0.232.136':139
'21#.80.6.51':139
'21#.#0.172.35':139
'21#.#0.206.164':139
'21#.#0.91.152':139
'21#.#0.175.172':139
'21#.#0.104.175':139
'21#.#0.122.122':139
'21#.#0.185.124':139
'21#.#0.112.94':139
'21#.#0.65.77':139
'21#.#0.115.107':139
'21#.#0.7.220':139
'21#.#0.124.174':139
'21#.#0.188.233':139
'21#.#0.218.43':139
'21#.#0.187.236':139
'21#.#0.179.43':139
'21#.#0.87.100':139
'21#.#0.253.248':139
'21#.#0.30.168':139
'21#.#0.152.30':139
'21#.#0.172.152':139
'21#.#0.55.94':139
'21#.#0.111.157':139
'21#.#0.167.83':139
'21#.#0.18.143':445
'21#.#0.179.43':445
'21#.#0.87.100':445
'21#.#0.105.240':445
'21#.#0.145.176':445
'21#.#0.61.88':445
'21#.#0.187.236':445
'21#.#0.55.94':445
'21#.#0.111.157':445
'21#.#0.253.248':445
'21#.#0.188.233':445
'21#.#0.218.43':445
'21#.#0.188.32':139
'21#.#0.183.188':139
'21#.#0.25.184':139
'21#.#0.135.198':139
'21#.#0.9.119':139
'21#.#0.225.151':139
'21#.#0.59.125':139
'21#.#0.116.177':139
'21#.#0.233.233':139
'21#.#0.53.160':139
'21#.#0.39.207':139
'21#.#0.80.78':139
'21#.#0.188.69':9988
'21#.#0.165.118':9988
'21#.#0.56.235':9988
'21#.#0.167.213':9988
'21#.#0.109.223':9988
'21#.#0.198.109':9988
'21#.#0.132.35':9988
'21#.#0.16.110':9988
'21#.#0.149.148':9988
'21#.#0.188.204':9988
'21#.#0.112.32':9988
'21#.#0.232.136':9988
'21#.#0.139.129':445
'21#.#0.27.177':445
'21#.#0.102.55':445
'21#.#0.42.235':445
'21#.#0.15.43':445
'21#.#0.66.236':445
'21#.#0.219.160':9988
'21#.#0.169.218':9988
'21#.#0.249.128':9988
'21#.#0.137.205':9988
'21#.#0.116.58':9988
'21#.#0.234.137':9988
'21#.#0.95.87':445
'21#.#0.77.137':445
'21#.#0.88.229':445
'21#.#0.93.248':445
'21#.#0.66.114':445
'21#.#0.87.67':445
'21#.#0.145.176':139
'21#.#0.61.88':139
'21#.#0.18.143':139
'21#.#0.141.127':445
'21#.#0.34.128':445
'21#.#0.105.240':139
'21#.#0.93.248':139
'21#.#0.66.114':139
'21#.#0.87.67':139
'21#.#0.192.36':9988
'21#.#0.189.149':9988
'21#.#0.135.86':139
'21#.#0.141.127':139
'21#.#0.34.128':139
'21#.#0.135.86':445
'21#.#0.95.87':139
'21#.#0.77.137':139
'21#.#0.88.229':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней