Trojan.Starman.5460

Trojan.Starman.5460

Добавлен в вирусную базу Dr.Web: 2015-02-21

Описание добавлено: 2015-02-21

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe

Сетевая активность:

Подключается к:

'21#.#44.172.18':445
'21#.#44.56.167':445
'21#.#44.185.153':445
'21#.#44.122.161':445
'21#.#44.162.64':445
'21#.#44.62.58':445
'21#.#44.178.47':445
'21#.#44.209.35':445
'21#.#44.59.22':445
'21#.#44.247.87':445
'21#.#44.4.195':445
'21#.#44.55.43':445
'21#.#44.48.252':445
'21#.#44.161.144':445
'21#.#44.1.123':445
'21#.#44.30.174':445
'21#.#44.229.92':445
'21#.#44.194.225':445
'21#.#44.3.224':445
'21#.#44.44.164':445
'21#.#44.130.196':445
'21#.#44.32.96':445
'21#.#44.201.18':445
'21#.#44.109.149':445
'21#.#44.134.149':445
'21#.#44.4.50':445
'21#.#44.52.145':445
'21#.#44.122.3':445
'21#.#44.130.230':445
'21#.#44.161.22':445
'21#.#44.129.134':445
'21#.#44.203.201':445
'21#.#44.29.161':445
'21#.#44.3.224':139
'21#.#44.109.149':139
'21#.#44.130.196':139
'21#.#44.194.225':139
'21#.#44.201.18':139
'21#.#44.13.225':139
'21#.#44.134.149':139
'21#.#44.32.96':139
'21#.#44.52.145':139
'21#.#44.29.161':139
'21#.#44.4.50':139
'21#.#44.130.230':139
'21#.#44.129.134':139
'21#.#44.44.164':139
'21#.#44.203.201':139
'21#.#44.161.22':139
'21#.#44.247.177':139
'21#.#44.1.105':139
'21#.#44.127.41':139
'21#.#44.229.19':139
'21#.#44.232.140':139
'21#.#44.227.53':445
'21#.#44.243.19':445
'21#.#44.150.49':139
'21#.#44.39.74':445
'21#.#44.16.37':139
'21#.#44.18.55':139
'21#.#44.169.64':139
'21#.#44.174.104':139
'21#.#44.94.99':139
'21#.#44.162.55':139
'21#.#44.25.106':139
'21#.#44.50.136':139
'21#.#44.31.174':139
'21#.#44.122.21':139
'21#.#44.17.73':139
'21#.#44.211.238':139
'21#.#44.0.150':139
'21#.#44.56.223':139
'21#.#44.127.191':139
'21#.#44.137.203':139
'21#.#44.183.155':139
'21#.#44.152.225':139
'21#.#44.101.164':139
'21#.#44.71.102':139
'21#.#44.23.26':139
'21#.#44.77.4':139
'21#.#44.24.187':139
'21#.#44.193.83':139
'21#.#44.20.238':139
'21#.#44.179.124':139
'21#.#44.235.188':139
'21#.#44.62.151':139
'21#.#44.44.93':139
'21#.#44.29.54':139
'21#.#44.202.179':139
'21#.#44.86.36':139
'21#.#44.127.22':139
'21#.#44.122.252':139
'21#.#44.176.7':139
'21#.#44.109.96':139
'21#.#44.85.185':139
'21#.#44.231.208':139
'21#.#44.231.82':139
'21#.#44.247.75':139
'21#.#44.209.22':139
'21#.#44.229.19':445
'21#.#44.232.140':445
'21#.#44.50.136':445
'21#.#44.162.55':445
'21#.#44.150.49':445
'21#.#44.173.149':139
'21#.#44.1.105':445
'21#.#44.127.41':445
'21#.#44.247.177':445
'21#.#44.174.104':445
'21#.#44.13.225':445
'21#.#44.169.64':445
'21#.#44.25.106':445
'21#.#44.94.99':445
'21#.#44.16.37':445
'21#.#44.18.55':445
'21#.#44.78.173':139
'21#.#44.74.211':139
'21#.#44.167.243':139
'21#.#44.192.30':139
'21#.#44.161.84':139
'21#.#44.120.7':139
'21#.#44.164.128':139
'21#.#44.172.167':139
'21#.#44.47.139':139
'21#.#44.102.39':139
'21#.#44.252.106':139
'21#.#44.24.114':139
'21#.#44.175.46':139
'21#.#44.41.213':139
'21#.#44.2.248':139
'21#.#44.189.225':139
'21#.#44.71.175':139
'21#.#44.59.72':139
'21#.#44.129.182':139
'21#.#44.221.9':139
'21#.#44.189.189':139
'21#.#44.172.20':139
'21#.#44.137.89':139
'21#.#44.72.98':139
'21#.#44.17.105':139
'21#.#44.28.218':139
'21#.#44.206.28':139
'21#.#44.223.254':139
'21#.#44.218.42':139
'21#.#44.4.114':139
'21#.#44.210.86':139
'21#.#44.101.98':139
'21#.#44.30.171':139
'21#.#44.55.84':139
'21#.#44.109.48':445
'21#.#44.50.69':445
'21#.#44.216.145':445
'21#.#44.48.216':445
'21#.#44.55.130':445
'21#.#44.130.68':445
'21#.#44.138.112':445
'21#.#44.32.113':445
'21#.#44.108.78':445
'21#.#44.17.195':445
'21#.#44.157.107':139
'21#.#44.228.98':445
'21#.#44.117.59':445
'21#.#44.145.117':445
'21#.#44.70.86':445
'21#.#44.59.71':445
'21#.#44.50.69':139
'21#.#44.138.112':139
'21#.#44.48.216':139
'21#.#44.109.48':139
'21#.#44.130.68':139
'21#.#44.117.238':139
'21#.#44.32.113':139
'21#.#44.55.130':139
'21#.#44.108.78':139
'21#.#44.70.86':139
'21#.#44.17.195':139
'21#.#44.228.98':139
'21#.#44.145.117':139
'21#.#44.216.145':139
'21#.#44.59.71':139
'21#.#44.117.59':139
'21#.#44.65.59':139
'21#.#44.143.8':139
'21#.#44.39.204':139
'21#.#44.20.14':139
'21#.#44.8.20':139
'21#.#44.130.147':139
'21#.#44.207.11':139
'21#.#44.80.216':139
'21#.#44.147.43':139
'21#.#44.146.128':139
'21#.#44.218.58':139
'21#.#44.36.173':139
'21#.#44.215.36':139
'21#.#44.16.97':139
'21#.#44.14.58':139
'21#.#44.191.164':139
'21#.#44.2.79':139
'21#.#44.210.86':9988
'21#.#44.189.189':9988
'21#.#44.191.164':9988
'21#.#44.39.204':9988
'21#.#44.243.19':139
'21#.#44.4.195':139
'21#.#44.39.74':139
'21#.#44.227.53':139
'21#.#44.157.107':445
'21#.#44.216.145':9988
'21#.#44.137.89':445
'21#.#44.55.84':445
'21#.#44.32.113':9988
'21#.#44.65.59':9988
'21#.#44.48.216':9988
'21#.#44.59.71':9988
'21#.#44.55.43':139
'21#.#44.178.47':139
'21#.#44.209.35':139
'21#.#44.172.18':139
'21#.#44.56.167':139
'21#.#44.229.92':139
'21#.#44.122.3':139
'21#.#44.162.64':139
'21#.#44.62.58':139
'21#.#44.1.123':139
'21#.#44.30.174':139
'21#.#44.59.22':139
'21#.#44.247.87':139
'21#.#44.161.144':139
'21#.#44.122.161':139
'21#.#44.48.252':139
'21#.#44.185.153':139
'21#.#44.20.14':445
'21#.#44.8.20':445
'21#.#44.16.97':445
'21#.#44.14.58':445
'21#.#44.80.216':445
'21#.#44.147.43':445
'21#.#44.143.8':445
'21#.#44.39.204':445
'21#.#44.36.173':445
'21#.#44.215.36':445
'21#.#44.117.238':445
'21#.#44.65.59':445
'21#.#44.191.164':445
'21#.#44.2.79':445
'21#.#44.146.128':445
'21#.#44.218.58':445
'21#.#44.130.147':445
'21#.#44.189.189':445
'21#.#44.59.72':445
'21#.#44.210.86':445
'21#.#44.221.9':445
'21#.#44.17.105':445
'21#.#44.172.20':445
'21#.#44.129.182':445
'21#.#44.72.98':445
'21#.#44.218.42':445
'21#.#44.28.218':445
'21#.#44.207.11':445
'21#.#44.223.254':445
'21#.#44.30.171':445
'21#.#44.4.114':445
'21#.#44.206.28':445
'21#.#44.101.98':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней