Trojan.Starman.5316

Trojan.Starman.5316

Добавлен в вирусную базу Dr.Web: 2015-02-21

Описание добавлено: 2015-02-21

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'69.##.122.237':445
'69.##.123.253':445
'69.##.78.193':445
'69.##.107.180':445
'69.#1.11.69':445
'69.##.101.190':445
'69.##.189.185':445
'69.##.24.190':445
'69.#1.51.81':445
'69.#1.1.40':445
'69.##.153.40':445
'69.##.213.152':445
'69.#1.3.41':445
'69.##.74.123':445
'69.#1.162.7':445
'69.##.101.82':445
'69.#1.33.57':445
'69.##.100.126':445
'69.##.108.47':445
'69.##.170.134':445
'69.##.12.110':445
'69.##.115.38':445
'69.##.100.114':445
'69.#1.92.64':445
'69.#1.38.67':445
'69.#1.7.101':445
'69.##.153.67':445
'69.##.240.36':445
'69.##.205.160':445
'69.##.235.179':445
'69.##.133.235':445
'69.#1.5.101':445
'69.#1.7.155':445
'69.##.108.47':139
'69.#1.92.64':139
'69.##.12.110':139
'69.##.100.126':139
'69.##.100.114':139
'69.##.29.101':139
'69.#1.38.67':139
'69.##.115.38':139
'69.##.153.67':139
'69.#1.5.101':139
'69.##.205.160':139
'69.#1.7.101':139
'69.##.133.235':139
'69.##.170.134':139
'69.#1.7.155':139
'69.##.235.179':139
'69.##.167.29':139
'69.##.14.141':139
'69.#1.6.127':139
'69.##.154.230':139
'69.##.139.106':139
'69.#1.7.185':445
'69.#1.41.7':445
'69.#1.144.7':139
'69.#1.89.37':139
'69.##.126.76':139
'69.##.30.165':139
'69.#1.110.5':139
'69.##.60.140':139
'69.#1.207.8':139
'69.##.223.243':139
'69.##.203.62':139
'69.##.35.107':139
'69.##.29.101':445
'69.#1.52.21':139
'69.##.181.51':139
'69.##.179.130':139
'69.##.92.169':139
'69.##.139.105':139
'69.#1.73.1':139
'69.##.170.180':139
'69.#1.43.24':139
'69.##.81.245':139
'69.##.234.230':139
'69.#1.60.16':139
'69.##.24.224':139
'69.##.232.129':139
'69.##.130.232':139
'69.#1.14.27':139
'69.##.204.67':139
'69.##.204.40':139
'69.##.23.196':139
'69.##.249.164':139
'69.##.86.245':139
'69.##.193.49':139
'69.#1.55.98':139
'69.##.58.178':139
'69.#1.96.57':139
'69.##.241.26':139
'69.##.35.125':139
'69.##.208.143':139
'69.##.246.100':139
'69.##.180.123':139
'69.#1.78.62':139
'69.##.248.26':139
'69.##.238.133':139
'69.##.77.112':139
'69.##.139.106':445
'69.##.14.141':445
'69.##.223.243':445
'69.##.154.230':445
'69.#1.89.37':445
'69.##.185.88':139
'69.#1.6.127':445
'69.#1.144.7':445
'69.##.60.140':445
'69.##.126.76':445
'69.##.167.29':445
'69.#1.110.5':445
'69.##.35.107':445
'69.#1.207.8':445
'69.##.30.165':445
'69.##.203.62':445
'69.#1.59.60':139
'69.##.51.195':139
'69.##.89.246':139
'69.##.127.125':139
'69.##.233.227':139
'69.##.59.166':139
'69.#1.133.2':139
'69.##.24.125':139
'69.##.165.247':139
'69.##.133.167':139
'69.##.247.127':139
'69.##.252.149':139
'69.##.166.252':139
'69.##.42.214':139
'69.##.142.228':139
'69.##.122.42':139
'69.##.136.21':139
'69.##.159.77':139
'69.##.227.235':139
'69.##.74.170':139
'69.#1.97.92':139
'69.##.79.223':139
'69.##.75.203':139
'69.#1.68.55':139
'69.##.166.24':139
'69.##.228.17':139
'69.##.41.105':139
'69.##.10.201':139
'69.#1.18.10':139
'69.##.159.118':139
'69.#1.59.78':139
'69.##.234.253':139
'69.##.110.74':139
'69.##.175.69':139
'69.#1.74.11':445
'69.##.18.127':445
'69.##.208.244':445
'69.##.61.109':445
'69.#1.14.34':445
'69.##.217.51':445
'69.#1.23.25':445
'69.#1.4.152':445
'69.##.123.178':445
'69.##.175.43':445
'69.##.231.192':139
'69.##.155.230':445
'69.##.235.19':445
'69.#1.7.235':445
'69.##.129.175':445
'69.##.139.170':445
'69.##.18.127':139
'69.#1.23.25':139
'69.##.61.109':139
'69.#1.74.11':139
'69.##.217.51':139
'69.##.147.16':139
'69.#1.4.152':139
'69.#1.14.34':139
'69.##.129.175':139
'69.##.123.178':139
'69.##.175.43':139
'69.##.155.230':139
'69.#1.7.235':139
'69.##.208.244':139
'69.##.139.170':139
'69.##.235.19':139
'69.##.75.111':139
'69.#1.29.64':139
'69.##.213.127':139
'69.##.202.17':139
'69.#1.240.7':139
'69.##.122.205':139
'69.##.175.24':139
'69.##.56.213':139
'69.#1.111.4':139
'69.#1.56.8':139
'69.##.64.223':139
'69.##.181.127':139
'69.#1.32.43':139
'69.##.24.134':139
'69.#1.18.24':139
'69.#1.61.43':139
'69.##.27.102':139
'69.##.147.16':445
'69.#1.18.10':9988
'69.##.234.253':9988
'69.#1.56.8':9988
'69.##.213.127':9988
'69.#1.41.7':139
'69.##.153.40':139
'69.##.75.203':9988
'69.#1.7.185':139
'69.##.235.19':9988
'69.#1.7.235':9988
'69.##.175.69':445
'69.##.231.192':445
'69.#1.4.152':9988
'69.##.181.127':9988
'69.##.208.244':9988
'69.##.18.127':9988
'69.##.213.152':139
'69.##.189.185':139
'69.##.24.190':139
'69.##.122.237':139
'69.##.123.253':139
'69.#1.33.57':139
'69.##.240.36':139
'69.#1.11.69':139
'69.##.101.190':139
'69.#1.162.7':139
'69.##.101.82':139
'69.#1.51.81':139
'69.#1.1.40':139
'69.##.78.193':139
'69.##.107.180':139
'69.#1.3.41':139
'69.##.74.123':139
'69.#1.240.7':445
'69.#1.29.64':445
'69.#1.18.24':445
'69.##.202.17':445
'69.#1.111.4':445
'69.##.122.205':445
'69.##.213.127':445
'69.##.56.213':445
'69.#1.32.43':445
'69.#1.56.8':445
'69.##.75.111':445
'69.##.181.127':445
'69.##.27.102':445
'69.##.24.134':445
'69.##.64.223':445
'69.#1.61.43':445
'69.##.175.24':445
'69.##.159.77':445
'69.##.227.235':445
'69.##.74.170':445
'69.#1.97.92':445
'69.##.79.223':445
'69.##.75.203':445
'69.#1.68.55':445
'69.##.166.24':445
'69.##.228.17':445
'69.##.41.105':445
'69.##.10.201':445
'69.#1.18.10':445
'69.##.159.118':445
'69.#1.59.78':445
'69.##.234.253':445
'69.##.110.74':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней