Trojan.Starman.6498

Trojan.Starman.6498

Добавлен в вирусную базу Dr.Web: 2015-02-21

Описание добавлено: 2015-02-21

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'12.##.248.123':445
'12.##.130.251':445
'12.##.162.93':445
'12.##.158.39':445
'12.#8.42.0':445
'12.##.210.174':445
'12.##.31.249':445
'12.##.168.165':445
'12.#8.82.38':445
'12.##.113.101':445
'12.#8.1.76':445
'12.##.20.156':445
'12.##.141.175':445
'12.#8.68.82':445
'12.##.124.68':445
'12.##.119.234':445
'12.##.38.175':445
'12.##.245.14':445
'12.#8.52.77':445
'12.#8.79.52':445
'12.#8.53.17':445
'12.##.178.171':445
'12.##.247.61':445
'12.#8.5.176':445
'12.##.63.159':445
'12.##.20.184':445
'12.##.152.73':445
'12.##.37.245':445
'12.##.68.149':445
'12.#8.1.163':445
'12.#8.37.83':445
'12.##.129.88':445
'12.##.138.137':445
'12.#8.2.173':445
'12.##.201.82':445
'12.#8.53.17':139
'12.##.178.171':139
'12.##.138.137':139
'12.##.152.73':139
'12.##.63.159':139
'12.##.20.184':139
'12.#8.52.77':139
'12.#8.79.52':139
'12.##.129.88':139
'12.##.245.14':139
'12.##.37.245':139
'12.##.210.174':139
'12.#8.37.83':139
'12.#8.2.173':139
'12.##.201.82':139
'12.#8.1.163':139
'12.##.68.149':139
'12.##.247.61':139
'12.#8.72.72':445
'12.##.198.250':445
'12.##.210.143':139
'12.#8.14.72':139
'12.##.125.190':445
'12.##.244.101':445
'12.##.147.235':445
'12.##.35.179':445
'12.#8.15.58':139
'12.#8.36.66':139
'12.#8.5.94':139
'12.#8.5.176':139
'12.##.99.236':139
'12.##.109.187':139
'12.##.250.109':139
'12.##.74.104':139
'12.##.187.82':139
'12.#8.62.57':139
'12.#8.21.32':139
'12.##.17.154':139
'12.##.122.228':139
'12.##.49.165':139
'12.##.245.121':139
'12.##.160.153':139
'12.#8.14.97':139
'12.##.153.232':139
'12.##.99.107':139
'12.##.152.98':139
'12.#8.48.10':139
'12.##.18.233':139
'12.#8.26.63':139
'12.##.232.77':139
'12.##.136.197':139
'12.##.53.148':139
'12.##.47.112':139
'12.##.165.232':445
'12.##.57.166':445
'12.##.19.122':445
'12.##.178.175':445
'12.#8.37.4':445
'12.##.147.36':445
'12.##.186.41':445
'12.#8.4.87':445
'12.##.100.131':445
'12.##.51.107':139
'12.##.244.201':139
'12.##.191.169':139
'12.##.164.219':139
'12.##.190.241':139
'12.##.202.245':139
'12.##.111.237':139
'12.##.133.241':139
'12.##.19.122':139
'12.##.178.175':139
'12.#8.14.72':445
'12.##.100.131':139
'12.##.186.41':139
'12.#8.4.87':139
'12.##.165.232':139
'12.##.57.166':139
'12.##.210.143':445
'12.#8.5.94':445
'12.##.74.104':445
'12.##.99.236':445
'12.#8.36.66':445
'12.##.250.109':445
'12.#8.15.58':445
'12.##.187.82':445
'12.##.109.187':445
'12.#8.37.4':139
'12.#8.95.3':139
'12.##.81.251':139
'12.##.168.125':139
'12.#8.0.253':139
'12.#8.71.14':139
'12.##.167.169':139
'12.##.109.73':139
'12.#8.14.38':139
'12.##.164.64':139
'12.##.110.90':139
'12.##.87.209':139
'12.##.147.36':139
'12.#8.3.95':139
'12.##.146.72':139
'12.##.176.44':139
'12.##.41.249':139
'12.##.14.208':139
'12.##.31.151':139
'12.##.141.31':139
'12.#8.9.207':139
'12.##.122.10':139
'12.#8.8.74':139
'12.##.222.39':445
'12.##.252.239':139
'12.##.151.200':139
'12.##.202.117':139
'12.##.106.80':139
'12.##.192.113':139
'12.##.157.218':139
'12.##.126.141':139
'12.##.123.201':139
'12.##.121.123':139
'12.##.192.74':139
'12.##.201.227':139
'12.##.94.254':445
'12.##.209.53':445
'12.#8.13.62':445
'12.##.118.150':445
'12.##.157.173':445
'12.##.19.139':445
'12.#8.4.73':445
'12.##.192.248':445
'12.##.21.238':445
'12.#8.23.62':445
'12.##.219.24':445
'12.##.160.187':445
'12.##.179.214':445
'12.##.190.222':445
'12.##.163.190':445
'12.#8.5.137':445
'12.##.222.213':445
'12.#8.24.97':445
'12.##.118.150':139
'12.##.157.173':139
'12.#8.5.137':139
'12.#8.23.62':139
'12.##.192.248':139
'12.##.21.238':139
'12.##.209.53':139
'12.#8.13.62':139
'12.##.163.190':139
'12.##.94.254':139
'12.##.219.24':139
'12.##.179.214':139
'12.##.222.213':139
'12.##.160.187':139
'12.##.190.222':139
'12.##.222.39':139
'12.#8.24.97':139
'12.##.19.139':139
'12.##.166.105':139
'12.##.118.166':139
'12.##.99.171':139
'12.##.105.176':139
'12.##.183.108':139
'12.#8.224.3':139
'12.##.234.139':139
'12.#8.78.28':139
'12.#8.19.28':139
'12.##.220.53':139
'12.##.114.220':139
'12.#8.4.73':139
'12.#8.54.51':139
'12.##.133.82':139
'12.##.36.139':139
'12.##.113.99':139
'12.##.82.118':139
'12.#8.224.3':9988
'12.##.192.74':9988
'12.##.133.82':9988
'12.##.157.218':9988
'12.##.125.190':139
'12.##.35.179':139
'12.##.198.250':139
'12.#8.72.72':139
'12.##.222.39':9988
'12.#8.5.137':9988
'12.##.220.53':9988
'12.##.219.24':9988
'12.#8.24.97':9988
'12.##.166.105':9988
'12.##.190.222':9988
'12.##.94.254':9988
'12.#8.23.62':9988
'12.##.147.235':139
'12.##.158.39':139
'12.##.162.93':139
'12.##.124.68':139
'12.##.248.123':139
'12.##.168.165':139
'12.#8.42.0':139
'12.##.31.249':139
'12.##.130.251':139
'12.#8.68.82':139
'12.##.141.175':139
'12.##.113.101':139
'12.##.20.156':139
'12.##.244.101':139
'12.##.38.175':139
'12.#8.82.38':139
'12.#8.1.76':139
'12.##.119.234':139
'12.##.118.166':445
'12.##.234.139':445
'12.##.105.176':445
'12.##.166.105':445
'12.#8.224.3':445
'12.##.157.218':445
'12.#8.78.28':445
'12.##.183.108':445
'12.##.99.171':445
'12.##.114.220':445
'12.##.113.99':445
'12.#8.54.51':445
'12.##.220.53':445
'12.##.36.139':445
'12.#8.19.28':445
'12.##.82.118':445
'12.##.133.82':445
'12.##.126.141':445
'12.##.252.239':445
'12.##.151.200':445
'12.##.31.151':445
'12.##.141.31':445
'12.#8.78.28':9988
'12.##.82.118':9988
'12.#8.8.74':445
'12.##.209.53':9988
'12.##.122.10':445
'12.##.192.74':445
'12.##.201.227':445
'12.##.106.80':445
'12.##.192.113':445
'12.##.202.117':445
'12.#8.9.207':445
'12.##.123.201':445
'12.##.121.123':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней