Trojan.Starman.6695

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'83.#.34.241':445
'83.#.203.148':445
'83.#.156.34':445
'83.#.52.57':445
'83.#.170.121':445
'83.#.20.203':445
'83.#.30.5':445
'83.#.193.29':445
'83.#.219.193':445
'83.#.223.51':445
'83.#.187.245':445
'83.#.5.176':445
'83.#.5.169':445
'83.#.106.133':445
'83.#.227.105':445
'83.#.9.228':445
'83.#.31.12':445
'83.#.144.72':445
'83.#.103.98':445
'83.#.163.92':445
'83.#.25.8':445
'83.#.252.14':445
'83.#.191.9':445
'83.#.35.202':445
'83.#.177.172':445
'83.#.129.95':139
'83.#.87.116':139
'83.#.32.33':139
'83.#.12.124':445
'83.#.31.10':139
'83.#.119.27':139
'83.#.7.129':139
'83.#.89.237':139
'83.#.31.10':445
'83.#.1.78':139
'83.#.0.214':139
'83.#.240.252':139
'83.#.221.63':445
'83.#.29.82':445
'83.#.68.0':445
'83.#.26.59':445
'83.#.221.209':445
'83.#.143.122':445
'83.#.73.219':445
'83.#.8.94':445
'83.#.1.4':445
'83.#.63.166':445
'83.#.22.111':445
'83.#.205.60':445
'83.#.93.205':445
'83.#.35.202':139
'83.#.177.172':139
'83.#.163.92':139
'83.#.227.105':139
'83.#.9.228':139
'83.#.191.9':139
'83.#.52.57':139
'83.#.170.121':139
'83.#.20.203':139
'83.#.25.8':139
'83.#.252.14':139
'83.#.5.169':139
'83.#.106.133':139
'83.#.0.94':445
'83.#.88.0':445
'83.#.61.153':445
'83.#.45.47':445
'83.#.27.45':445
'83.#.176.26':445
'83.#.31.12':139
'83.#.144.72':139
'83.#.103.98':139
'83.#.4.179':445
'83.#.224.199':139
'83.#.215.55':139
'83.#.205.60':139
'83.#.93.205':139
'83.#.8.94':139
'83.#.68.0':139
'83.#.26.59':139
'83.#.22.111':139
'83.#.12.124':139
'83.#.224.199':445
'83.#.215.55':445
'83.#.1.4':139
'83.#.63.166':139
'83.#.221.63':139
'83.#.29.82':139
'83.#.223.51':139
'83.#.187.245':139
'83.#.5.176':139
'83.#.34.241':139
'83.#.203.148':139
'83.#.156.34':139
'83.#.221.209':139
'83.#.143.122':139
'83.#.73.219':139
'83.#.30.5':139
'83.#.193.29':139
'83.#.219.193':139
'83.#.119.27':445
'83.#.90.32':445
'83.#.31.152':445
'83.#.174.229':445
'83.#.199.64':445
'83.#.23.199':445
'83.#.167.93':445
'83.#.5.204':445
'83.#.57.123':445
'83.#.107.162':445
'83.#.22.175':445
'83.#.126.190':445
'83.#.103.106':445
'83.#.65.47':445
'83.#.3.42':445
'83.#.227.24':445
'83.#.183.227':445
'83.#.251.127':445
'83.#.143.251':445
'83.#.143.175':445
'83.#.48.163':445
'83.#.174.202':445
'83.#.46.133':445
'83.#.99.122':445
'83.#.53.114':445
'83.#.136.75':445
'83.#.178.215':139
'83.#.13.159':139
'83.#.122.53':139
'83.#.45.140':445
'83.#.189.160':445
'83.#.215.189':139
'83.#.198.241':139
'83.#.31.207':139
'83.#.169.156':139
'83.#.31.132':139
'83.#.81.11':139
'83.#.53.80':139
'83.#.122.147':445
'83.#.32.3':445
'83.#.62.32':445
'83.#.115.68':445
'83.#.91.99':445
'83.#.23.53':445
'83.#.255.50':445
'83.#.59.234':445
'83.#.71.214':445
'83.#.23.205':445
'83.#.205.190':445
'83.#.36.205':445
'83.#.154.36':445
'83.#.53.114':139
'83.#.136.75':139
'83.#.48.163':139
'83.#.227.24':139
'83.#.183.227':139
'83.#.99.122':139
'83.#.199.64':139
'83.#.23.199':139
'83.#.167.93':139
'83.#.174.202':139
'83.#.46.133':139
'83.#.65.47':139
'83.#.3.42':139
'83.#.1.78':445
'83.#.0.214':445
'83.#.240.252':445
'83.#.129.95':445
'83.#.87.116':445
'83.#.32.33':445
'83.#.251.127':139
'83.#.143.251':139
'83.#.143.175':139
'83.#.7.129':445
'83.#.89.237':445
'83.#.131.40':139
'83.#.36.205':139
'83.#.154.36':139
'83.#.59.234':139
'83.#.62.32':139
'83.#.115.68':139
'83.#.205.190':139
'83.#.45.140':139
'83.#.189.160':139
'83.#.131.40':445
'83.#.71.214':139
'83.#.23.205':139
'83.#.122.147':139
'83.#.32.3':139
'83.#.22.175':139
'83.#.126.190':139
'83.#.103.106':139
'83.#.90.32':139
'83.#.31.152':139
'83.#.174.229':139
'83.#.91.99':139
'83.#.23.53':139
'83.#.255.50':139
'83.#.5.204':139
'83.#.57.123':139
'83.#.107.162':139
'83.#.73.157':445
'83.#.30.207':445
'83.#.18.66':445
'83.#.249.73':445
'83.#.153.249':445
'83.#.5.134':445
'83.#.164.31':445
'83.#.182.163':445
'83.#.176.81':445
'83.#.30.195':445
'83.#.224.30':445
'83.#.175.138':445
'83.#.12.35':445
'83.#.145.38':445
'83.#.5.36':445
'83.#.41.5':445
'83.#.172.182':139
'83.#.148.22':445
'83.#.117.60':445
'83.#.128.186':445
'83.#.33.64':445
'83.#.124.126':445
'83.#.86.5':445
'83.#.85.155':445
'83.#.172.213':445
'83.#.79.147':445
'83.#.84.147':445
'83.#.190.214':445
'83.#.94.80':445
'83.#.92.94':445
'83.#.195.150':445
'83.#.95.229':445
'83.#.148.95':445
'83.#.130.148':445
'83.#.167.69':445
'83.#.104.207':445
'83.#.138.69':445
'83.#.198.139':445
'83.#.114.17':445
'83.#.24.149':445
'83.#.119.39':445
'83.#.198.40':445
'83.#.115.195':445
'83.#.31.116':445
'83.#.152.27':445
'83.#.9.193':445
'83.#.189.143':445
'83.#.122.176':445
'83.#.191.139':445
'83.#.246.191':445
'83.#.30.207':139
'83.#.18.66':139
'83.#.30.195':139
'83.#.153.249':139
'83.#.5.134':139
'83.#.73.157':139
'83.#.182.163':139
'83.#.176.81':139
'83.#.198.40':139
'83.#.224.30':139
'83.#.175.138':139
'83.#.164.31':139
'83.#.249.73':139
'83.#.86.5':139
'83.#.117.60':139
'83.#.5.36':139
'83.#.148.22':139
'83.#.145.38':139
'83.#.85.155':139
'83.#.33.64':139
'83.#.124.126':139
'83.#.12.35':139
'83.#.41.5':139
'83.#.172.213':139
'83.#.128.186':139
'83.#.84.147':139
'83.#.190.214':139
'83.#.167.69':139
'83.#.92.94':139
'83.#.195.150':139
'83.#.79.147':139
'83.#.148.95':139
'83.#.130.148':139
'83.#.45.15':139
'83.#.104.207':139
'83.#.138.69':139
'83.#.95.229':139
'83.#.94.80':139
'83.#.24.149':139
'83.#.119.39':139
'83.#.122.176':139
'83.#.115.195':139
'83.#.31.116':139
'83.#.114.17':139
'83.#.9.193':139
'83.#.189.143':139
'83.#.198.139':139
'83.#.191.139':139
'83.#.246.191':139
'83.#.152.27':139
'83.#.45.15':445
'83.#.45.216':445
'83.#.149.45':445
'83.#.104.149':445
'83.#.1.108':445
'83.#.62.63':445
'83.#.215.67':445
'83.#.115.88':445
'83.#.84.168':445
'83.#.70.235':445
'83.#.188.103':445
'83.#.242.96':445
'83.#.186.181':445
'83.#.133.70':445
'83.#.252.48':445
'83.#.214.192':445
'83.#.171.46':445
'83.#.92.12':445
'83.#.51.59':445
'83.#.20.91':445
'83.#.41.196':445
'83.#.220.41':445
'83.#.70.219':445
'83.#.78.109':445
'83.#.56.172':445
'83.#.110.120':445
'83.#.27.45':139
'83.#.176.26':139
'83.#.0.94':139
'83.#.131.119':139
'83.#.115.245':139
'83.#.45.47':139
'83.#.119.178':445
'83.#.131.119':445
'83.#.115.245':445
'83.#.88.0':139
'83.#.61.153':139
'83.#.4.179':139
'83.#.119.178':139
'83.#.223.233':445
'83.#.19.69':445
'83.#.67.122':445
'83.#.74.92':445
'83.#.10.126':445
'83.#.224.80':445
'83.#.19.66':445
'83.#.120.179':445
'83.#.178.120':445
'83.#.105.180':445
'83.#.26.250':445
'83.#.8.139':445
'83.#.56.172':139
'83.#.110.120':139
'83.#.41.196':139
'83.#.214.192':139
'83.#.171.46':139
'83.#.78.109':139
'83.#.1.108':139
'83.#.62.63':139
'83.#.215.67':139
'83.#.220.41':139
'83.#.70.219':139
'83.#.133.70':139
'83.#.252.48':139
'83.#.33.64':9988
'83.#.145.38':9988
'83.#.58.226':139
'83.#.172.182':445
'83.#.148.22':9988
'83.#.224.30':9988
'83.#.92.12':139
'83.#.51.59':139
'83.#.20.91':139
'83.#.103.5':139
'83.#.201.108':139
'83.#.37.233':139
'83.#.26.250':139
'83.#.8.139':139
'83.#.19.66':139
'83.#.19.69':139
'83.#.67.122':139
'83.#.105.180':139
'83.#.103.5':445
'83.#.201.108':445
'83.#.37.233':445
'83.#.120.179':139
'83.#.178.120':139
'83.#.58.226':445
'83.#.223.233':139
'83.#.188.103':139
'83.#.242.96':139
'83.#.186.181':139
'83.#.45.216':139
'83.#.149.45':139
'83.#.104.149':139
'83.#.74.92':139
'83.#.10.126':139
'83.#.224.80':139
'83.#.115.88':139
'83.#.84.168':139
'83.#.70.235':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней