Trojan.Starman.5053

Trojan.Starman.5053

Добавлен в вирусную базу Dr.Web: 2015-02-21

Описание добавлено: 2015-02-21

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe

Сетевая активность:

Подключается к:

'24.##3.164.9':445
'24.##3.99.20':445
'24.##3.117.161':445
'24.##3.142.48':445
'24.##3.210.216':445
'24.##3.187.19':445
'24.##3.181.123':445
'24.##3.217.92':445
'24.##3.245.142':445
'24.##3.26.149':445
'24.##3.178.17':445
'24.##3.218.60':445
'24.##3.93.225':445
'24.##3.251.189':445
'24.##3.153.185':445
'24.##3.187.57':445
'24.##3.246.25':445
'24.##3.31.176':445
'24.##3.203.189':445
'24.##3.122.75':445
'24.##3.10.182':445
'24.##3.10.134':445
'24.##3.125.69':445
'24.##3.12.170':445
'24.##3.42.16':445
'24.##3.187.223':445
'24.##3.10.137':445
'24.##3.82.179':445
'24.##3.89.60':445
'24.#23.7.78':445
'24.#23.7.73':445
'24.##3.103.124':445
'24.##3.179.10':445
'24.##3.254.108':445
'24.##3.31.176':139
'24.##3.203.189':139
'24.##3.122.75':139
'24.##3.10.182':139
'24.##3.10.134':139
'24.##3.235.171':139
'24.##3.12.170':139
'24.##3.42.16':139
'24.##3.187.223':139
'24.##3.10.137':139
'24.##3.179.10':139
'24.##3.187.19':139
'24.#23.7.78':139
'24.#23.7.73':139
'24.##3.103.124':139
'24.##3.82.179':139
'24.##3.254.108':139
'24.##3.154.189':139
'24.##3.24.15':139
'24.##3.156.182':139
'24.##3.1.120':139
'24.##3.158.101':139
'24.##3.7.140':139
'24.##3.66.24':139
'24.##3.78.223':139
'24.##3.180.75':139
'24.##3.19.222':139
'24.##3.227.102':139
'24.##3.125.69':139
'24.##3.143.235':139
'24.##3.136.190':139
'24.##3.252.136':139
'24.##3.81.12':139
'24.##3.190.133':139
'24.##3.121.43':139
'24.##3.166.59':139
'24.##3.174.225':139
'24.##3.158.174':139
'24.##3.51.11':139
'24.##3.10.214':139
'24.##3.66.162':139
'24.##3.11.102':139
'24.##3.225.173':139
'24.##3.254.178':139
'24.##3.228.254':139
'24.##3.240.73':139
'24.##3.179.109':139
'24.##3.141.205':139
'24.##3.226.202':139
'24.##3.195.228':139
'24.##3.60.196':139
'24.##3.245.143':139
'24.##3.73.245':139
'24.##3.60.144':139
'24.##3.222.85':139
'24.##3.158.178':139
'24.##3.28.242':139
'24.##3.186.73':139
'24.##3.51.186':139
'24.##3.225.33':139
'24.##3.34.250':139
'24.##3.195.72':139
'24.##3.220.4':139
'24.##3.229.154':139
'24.##3.138.248':139
'24.##3.134.115':139
'24.##3.83.195':139
'24.##3.87.180':139
'24.##3.1.120':445
'24.##3.24.15':445
'24.##3.156.182':445
'24.##3.154.189':445
'24.##3.158.101':445
'24.##3.7.140':445
'24.##3.66.24':445
'24.##3.78.223':445
'24.##3.180.75':445
'24.##3.227.102':445
'24.##3.19.222':445
'24.##3.235.171':445
'24.##3.143.235':445
'24.##3.136.190':445
'24.##3.252.136':445
'24.##3.81.12':445
'24.##3.190.133':445
'24.##3.25.119':139
'24.##3.124.168':139
'24.##3.65.60':139
'24.##3.139.216':139
'24.##3.127.86':139
'24.##3.244.126':139
'24.##3.240.124':139
'24.##3.167.91':139
'24.##3.60.36':139
'24.##3.48.210':139
'24.##3.96.48':139
'24.##3.116.7':139
'24.##3.210.116':139
'24.##3.116.20':139
'24.##3.36.116':139
'24.##3.66.125':139
'24.##3.254.149':139
'24.##3.166.247':139
'24.##3.181.166':139
'24.##3.107.217':139
'24.##3.247.107':139
'24.##3.196.162':139
'24.##3.78.178':139
'24.##3.34.181':139
'24.##3.15.103':139
'24.##3.51.43':139
'24.##3.33.11':139
'24.##3.16.80':139
'24.##3.112.99':139
'24.##3.235.112':139
'24.##3.255.48':139
'24.##3.65.214':139
'24.##3.143.89':139
'24.##3.49.143':139
'24.##3.62.74':445
'24.##3.122.20':445
'24.##3.108.176':445
'24.##3.125.108':445
'24.##3.149.214':445
'24.##3.22.177':445
'24.##3.153.216':445
'24.##3.231.72':445
'24.##3.9.151':445
'24.##3.5.204':445
'24.##3.17.16':445
'24.##3.139.163':445
'24.##3.24.163':445
'24.##3.68.76':445
'24.##3.190.236':445
'24.##3.203.81':445
'24.##3.230.203':445
'24.##3.62.74':139
'24.##3.122.20':139
'24.##3.108.176':139
'24.##3.125.108':139
'24.##3.149.214':139
'24.##3.22.177':139
'24.##3.153.216':139
'24.##3.231.72':139
'24.##3.9.151':139
'24.##3.5.204':139
'24.##3.17.16':139
'24.##3.139.163':139
'24.##3.24.163':139
'24.##3.68.76':139
'24.##3.190.236':139
'24.##3.203.81':139
'24.##3.230.203':139
'24.##3.59.147':139
'24.##3.44.209':139
'24.##3.16.242':139
'24.##3.251.145':139
'24.##3.4.186':139
'24.##3.16.132':139
'24.##3.193.22':139
'24.##3.18.179':139
'24.#23.44.9':139
'24.##3.217.248':139
'24.##3.138.218':139
'24.##3.187.164':139
'24.##3.196.240':139
'24.##3.147.160':139
'24.##3.46.74':139
'24.##3.205.184':139
'24.##3.140.145':139
'24.##3.181.166':9988
'24.##3.196.162':9988
'24.##3.112.99':9988
'24.##3.15.103':9988
'24.##3.255.48':9988
'24.##3.235.112':9988
'24.##3.247.107':9988
'24.##3.49.143':9988
'24.##3.4.186':9988
'24.##3.139.163':9988
'24.##3.138.218':9988
'24.##3.230.203':9988
'24.##3.122.20':9988
'24.##3.193.22':9988
'24.##3.44.209':9988
'24.##3.205.184':9988
'24.##3.59.147':9988
'24.##3.164.9':139
'24.##3.99.20':139
'24.##3.153.185':139
'24.##3.142.48':139
'24.##3.210.216':139
'24.##3.89.60':139
'24.##3.181.123':139
'24.##3.217.92':139
'24.##3.117.161':139
'24.##3.26.149':139
'24.##3.246.25':139
'24.##3.218.60':139
'24.##3.93.225':139
'24.##3.251.189':139
'24.##3.245.142':139
'24.##3.187.57':139
'24.##3.178.17':139
'24.##3.59.147':445
'24.##3.44.209':445
'24.##3.16.242':445
'24.##3.251.145':445
'24.##3.4.186':445
'24.##3.16.132':445
'24.##3.193.22':445
'24.##3.18.179':445
'24.#23.44.9':445
'24.##3.217.248':445
'24.##3.138.218':445
'24.##3.187.164':445
'24.##3.196.240':445
'24.##3.147.160':445
'24.##3.46.74':445
'24.##3.205.184':445
'24.##3.140.145':445
'24.##3.166.247':445
'24.##3.181.166':445
'24.##3.107.217':445
'24.##3.247.107':445
'24.##3.196.162':445
'24.##3.78.178':445
'24.##3.34.181':445
'24.##3.15.103':445
'24.##3.51.43':445
'24.##3.33.11':445
'24.##3.16.80':445
'24.##3.112.99':445
'24.##3.235.112':445
'24.##3.255.48':445
'24.##3.65.214':445
'24.##3.143.89':445
'24.##3.49.143':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней