Trojan.Starman.5181

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'14#.#23.121.245':139
'14#.#23.21.74':139
'14#.#23.119.101':445
'14#.#23.220.12':445
'14#.#23.100.246':445
'14#.#23.110.132':139
'14#.#23.45.185':139
'14#.#23.35.240':139
'14#.#23.80.10':139
'14#.#23.81.64':139
'14#.#23.241.81':139
'14#.#23.148.165':445
'14#.#23.226.120':445
'14#.#23.234.44':445
'14#.#23.183.157':445
'14#.#23.21.110':445
'14#.#23.25.152':445
'14#.#23.176.233':445
'14#.#23.220.136':445
'14#.#23.6.198':445
'14#.#23.131.123':445
'14#.#23.161.234':445
'14#.#23.154.217':445
'14#.#23.71.150':139
'14#.#23.48.25':139
'14#.#23.30.172':139
'14#.#23.15.106':139
'14#.#23.242.68':139
'14#.#23.34.74':139
'14#.#23.158.229':139
'14#.#23.211.5':139
'14#.#23.41.32':139
'14#.#23.51.116':139
'14#.#23.63.159':139
'14#.#23.253.63':139
'14#.#23.81.145':139
'14#.#23.48.102':139
'14#.#23.52.169':139
'14#.#23.248.25':139
'14#.#23.141.62':139
'14#.#23.26.146':139
'14#.#23.152.140':139
'14#.#23.82.191':139
'14#.#23.58.36':139
'14#.#23.118.57':139
'14#.#23.91.185':139
'14#.#23.227.67':139
'14#.#23.19.9':445
'14#.#23.252.34':445
'14#.#23.167.33':445
'14#.#23.25.130':445
'14#.#23.236.93':445
'14#.#23.99.209':445
'14#.#23.127.106':445
'14#.#23.56.54':445
'14#.#23.53.50':445
'14#.#23.108.45':445
'14#.#23.18.76':445
'14#.#23.19.109':445
'14#.#23.112.92':445
'14#.#23.144.134':445
'14#.#23.94.112':445
'14#.#23.24.205':445
'14#.#23.0.207':445
'14#.#23.116.234':445
'14#.#23.158.119':445
'14#.#23.60.131':445
'14#.#23.40.25':445
'14#.#23.131.90':445
'14#.#23.239.125':445
'14#.#23.30.123':445
'14#.#23.31.34':445
'14#.#23.131.123':139
'14#.#23.220.136':139
'14#.#23.154.217':139
'14#.#23.176.233':139
'14#.#23.161.234':139
'14#.#23.6.198':139
'14#.#23.119.101':139
'14#.#23.92.42':445
'14#.#23.100.246':139
'14#.#23.148.165':139
'14#.#23.220.12':139
'14#.#23.234.44':139
'14#.#23.140.192':445
'14#.#23.245.140':445
'14#.#23.60.239':445
'14#.#23.49.11':445
'14#.#23.21.108':445
'14#.#23.92.42':139
'14#.#23.183.157':139
'14#.#23.226.120':139
'14#.#23.25.152':139
'14#.#23.19.9':139
'14#.#23.21.110':139
'14#.#23.205.86':139
'14#.#23.114.1':445
'14#.#23.61.8':445
'14#.#23.120.140':445
'14#.#23.174.114':445
'14#.#23.129.156':445
'14#.#23.3.22':445
'14#.#23.246.186':139
'14#.#23.251.246':139
'14#.#23.129.64':445
'14#.#23.80.177':445
'14#.#23.78.81':445
'14#.#23.58.96':445
'14#.#23.129.64':139
'14#.#23.12.99':445
'14#.#23.78.81':139
'14#.#23.3.22':139
'14#.#23.80.177':139
'14#.#23.125.192':445
'14#.#23.26.103':445
'14#.#23.190.131':445
'14#.#23.114.26':445
'14#.#23.180.86':445
'14#.#23.25.138':445
'14#.#23.213.251':139
'14#.#23.80.21':139
'14#.#23.136.125':139
'14#.#23.196.242':139
'14#.#23.80.57':139
'14#.#23.39.252':139
'14#.#23.152.10':139
'14#.#23.52.189':139
'14#.#23.15.131':139
'14#.#23.120.25':139
'14#.#23.1.128':139
'14#.#23.58.159':139
'14#.#23.189.182':139
'14#.#23.185.24':139
'14#.#23.140.185':139
'14#.#23.181.140':139
'14#.#23.181.52':139
'14#.#23.219.244':139
'14#.#23.6.224':139
'14#.#23.43.64':139
'14#.#23.118.43':139
'14#.#23.64.153':139
'14#.#23.150.230':139
'14#.#23.24.72':139
'14#.#23.61.8':139
'14#.#23.152.140':445
'14#.#23.91.185':445
'14#.#23.52.169':445
'14#.#23.248.25':445
'14#.#23.48.102':445
'14#.#23.227.67':445
'14#.#23.81.145':445
'14#.#23.242.68':445
'14#.#23.58.36':445
'14#.#23.118.57':445
'14#.#23.82.191':445
'14#.#23.26.146':445
'14#.#23.110.132':445
'14#.#23.81.64':445
'14#.#23.21.74':445
'14#.#23.133.125':139
'14#.#23.121.245':445
'14#.#23.241.81':445
'14#.#23.71.150':445
'14#.#23.141.62':445
'14#.#23.35.240':445
'14#.#23.80.10':445
'14#.#23.45.185':445
'14#.#23.34.74':445
'14#.#23.114.26':139
'14#.#23.26.103':139
'14#.#23.25.138':139
'14#.#23.125.192':139
'14#.#23.180.86':139
'14#.#23.190.131':139
'14#.#23.120.140':139
'14#.#23.114.1':139
'14#.#23.129.156':139
'14#.#23.58.96':139
'14#.#23.174.114':139
'14#.#23.12.99':139
'14#.#23.158.229':445
'14#.#23.63.159':445
'14#.#23.30.172':445
'14#.#23.15.106':445
'14#.#23.48.25':445
'14#.#23.253.63':445
'14#.#23.205.86':445
'14#.#23.133.125':445
'14#.#23.41.32':445
'14#.#23.51.116':445
'14#.#23.211.5':445
'14#.#23.161.134':445
'14#.#23.115.198':445
'14#.#23.148.231':445
'14#.#23.139.122':445
'14#.#23.215.182':445
'14#.#23.67.180':445
'14#.#23.139.193':445
'14#.#23.109.41':445
'14#.#23.40.194':445
'14#.#23.86.233':445
'14#.#23.109.230':445
'14#.#23.4.110':445
'14#.#23.28.95':445
'14#.#23.97.9':445
'14#.#23.221.85':445
'14#.#23.145.99':139
'14#.#23.239.53':139
'14#.#23.136.185':139
'14#.#23.68.176':445
'14#.#23.177.13':445
'14#.#23.188.176':445
'14#.#23.13.123':445
'14#.#23.100.35':445
'14#.#23.154.213':445
'14#.#23.50.140':445
'14#.#23.223.166':445
'14#.#23.131.13':445
'14#.#23.19.168':445
'14#.#23.170.251':445
'14#.#23.76.123':445
'14#.#23.136.64':445
'14#.#23.29.143':445
'14#.#23.112.242':445
'14#.#23.197.102':445
'14#.#23.28.113':445
'14#.#23.217.35':445
'14#.#23.55.234':445
'14#.#23.101.50':445
'14#.#23.200.13':445
'14#.#23.185.83':445
'14#.#23.14.54':445
'14#.#23.188.241':445
'14#.#23.183.75':445
'14#.#23.238.228':445
'14#.#23.52.75':445
'14#.#23.74.100':445
'14#.#23.253.234':445
'14#.#23.229.225':445
'14#.#23.48.60':139
'14#.#23.109.230':139
'14#.#23.4.110':139
'14#.#23.139.193':139
'14#.#23.115.198':139
'14#.#23.148.231':139
'14#.#23.86.233':139
'14#.#23.14.54':139
'14#.#23.188.241':139
'14#.#23.50.140':139
'14#.#23.109.41':139
'14#.#23.40.194':139
'14#.#23.139.122':139
'14#.#23.100.35':139
'14#.#23.154.213':139
'14#.#23.68.176':139
'14#.#23.221.85':139
'14#.#23.97.9':139
'14#.#23.13.123':139
'14#.#23.215.182':139
'14#.#23.67.180':139
'14#.#23.28.95':139
'14#.#23.177.13':139
'14#.#23.188.176':139
'14#.#23.185.83':139
'14#.#23.28.113':139
'14#.#23.217.35':139
'14#.#23.136.64':139
'14#.#23.223.166':139
'14#.#23.131.13':139
'14#.#23.112.242':139
'14#.#23.137.113':139
'14#.#23.222.252':139
'14#.#23.29.143':139
'14#.#23.184.140':139
'14#.#23.197.102':139
'14#.#23.19.168':139
'14#.#23.253.234':139
'14#.#23.170.251':139
'14#.#23.183.75':139
'14#.#23.101.50':139
'14#.#23.200.13':139
'14#.#23.52.75':139
'14#.#23.74.100':139
'14#.#23.76.123':139
'14#.#23.238.228':139
'14#.#23.55.234':139
'14#.#23.229.225':139
'14#.#23.184.140':445
'14#.#23.116.234':139
'14#.#23.24.205':139
'14#.#23.0.207':139
'14#.#23.152.78':139
'14#.#23.161.134':139
'14#.#23.144.134':139
'14#.#23.30.123':139
'14#.#23.131.90':139
'14#.#23.239.125':139
'14#.#23.94.112':139
'14#.#23.158.119':139
'14#.#23.18.98':139
'14#.#23.72.13':445
'14#.#23.175.68':445
'14#.#23.226.174':445
'14#.#23.46.192':445
'14#.#23.175.53':445
'14#.#23.166.150':445
'14#.#23.69.204':139
'14#.#23.0.87':139
'14#.#23.168.90':445
'14#.#23.204.70':445
'14#.#23.10.156':445
'14#.#23.60.131':139
'14#.#23.21.108':139
'14#.#23.60.239':139
'14#.#23.49.11':139
'14#.#23.53.50':139
'14#.#23.31.34':139
'14#.#23.140.192':139
'14#.#23.18.98':445
'14#.#23.152.78':445
'14#.#23.0.87':445
'14#.#23.245.140':139
'14#.#23.69.204':445
'14#.#23.56.54':139
'14#.#23.99.209':139
'14#.#23.25.130':139
'14#.#23.236.93':139
'14#.#23.40.25':139
'14#.#23.112.92':139
'14#.#23.252.34':139
'14#.#23.19.109':139
'14#.#23.108.45':139
'14#.#23.18.76':139
'14#.#23.167.33':139
'14#.#23.127.106':139
'14#.#23.135.139':445
'14#.#23.4.110':9988
'14#.#23.86.233':9988
'14#.#23.109.230':9988
'14#.#23.148.231':9988
'14#.#23.139.193':9988
'14#.#23.14.54':9988
'14#.#23.238.228':9988
'14#.#23.28.113':9988
'14#.#23.229.225':9988
'14#.#23.183.75':9988
'14#.#23.253.234':9988
'14#.#23.139.122':9988
'14#.#23.239.53':445
'14#.#23.136.185':445
'14#.#23.48.60':445
'14#.#23.137.113':445
'14#.#23.222.252':445
'14#.#23.145.99':445
'14#.#23.177.13':9988
'14#.#23.188.176':9988
'14#.#23.154.213':9988
'14#.#23.100.35':9988
'14#.#23.13.123':9988
'14#.#23.251.205':139
'14#.#23.168.90':139
'14#.#23.251.205':445
'14#.#23.10.156':139
'14#.#23.166.150':139
'14#.#23.204.70':139
'14#.#23.110.146':445
'14#.#23.23.152':445
'14#.#23.228.23':445
'14#.#23.151.136':445
'14#.#23.64.69':445
'14#.#23.136.76':445
'14#.#23.175.68':139
'14#.#23.151.136':139
'14#.#23.23.152':139
'14#.#23.136.76':139
'14#.#23.110.146':139
'14#.#23.64.69':139
'14#.#23.228.23':139
'14#.#23.226.174':139
'14#.#23.72.13':139
'14#.#23.175.53':139
'14#.#23.135.139':139
'14#.#23.46.192':139

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней