Trojan.KillFiles.9118

Техническая информация

Изменения в файловой системе:

Создает следующие файлы:

%WINDIR%\explorer\KBDBLR.DLL
%WINDIR%\explorer\KBDBHC.DLL
%WINDIR%\explorer\KBDBGPH1.DLL
%WINDIR%\explorer\KBDBR.DLL
%WINDIR%\explorer\KBDCA.DLL
%WINDIR%\explorer\KBDBULG.DLL
%WINDIR%\explorer\KBDBU.DLL
%WINDIR%\explorer\KBDBGPH.DLL
%WINDIR%\explorer\KBDAZE.DLL
%WINDIR%\explorer\kbdax2.dll
%WINDIR%\explorer\KBDARMW.DLL
%WINDIR%\explorer\KBDAZEL.DLL
%WINDIR%\explorer\KBDBENE.DLL
%WINDIR%\explorer\KBDBE.DLL
%WINDIR%\explorer\KBDBASH.DLL
%WINDIR%\explorer\KBDEST.DLL
%WINDIR%\explorer\KBDES.DLL
%WINDIR%\explorer\KBDDV.DLL
%WINDIR%\explorer\KBDFA.DLL
%WINDIR%\explorer\KBDFI1.DLL
%WINDIR%\explorer\KBDFI.DLL
%WINDIR%\explorer\KBDFC.DLL
%WINDIR%\explorer\KBDDIV2.DLL
%WINDIR%\explorer\KBDCZ.DLL
%WINDIR%\explorer\KBDCR.DLL
%WINDIR%\explorer\KBDCAN.DLL
%WINDIR%\explorer\KBDCZ1.DLL
%WINDIR%\explorer\KBDDIV1.DLL
%WINDIR%\explorer\KBDDA.DLL
%WINDIR%\explorer\KBDCZ2.DLL
%WINDIR%\explorer\KBDARME.DLL
%WINDIR%\explorer\InfDefaultInstall.exe
%WINDIR%\explorer\ifsutilx.dll
%WINDIR%\explorer\icsunattend.exe
%WINDIR%\explorer\iologmsg.dll
%WINDIR%\explorer\irclass.dll
%WINDIR%\explorer\iprtprio.dll
%WINDIR%\explorer\IPBusEnumProxy.dll
%WINDIR%\explorer\icrav03.rat
%WINDIR%\explorer\host.exe
%WINDIR%\explorer\hnetmon.dll
%WINDIR%\explorer\help.exe
%WINDIR%\explorer\HOSTNAME.EXE
%WINDIR%\explorer\IconCodecService.dll
%WINDIR%\explorer\icmp.dll
%WINDIR%\explorer\icardres.dll
%WINDIR%\explorer\kbd106n.dll
%WINDIR%\explorer\kbd106.dll
%WINDIR%\explorer\kbd103.dll
%WINDIR%\explorer\KBDA1.DLL
%WINDIR%\explorer\KBDAL.DLL
%WINDIR%\explorer\KBDA3.DLL
%WINDIR%\explorer\KBDA2.DLL
%WINDIR%\explorer\kbd101c.dll
%WINDIR%\explorer\kanji_1.uce
%WINDIR%\explorer\iscsilog.dll
%WINDIR%\explorer\iscsied.dll
%WINDIR%\explorer\kanji_2.uce
%WINDIR%\explorer\kbd101b.dll
%WINDIR%\explorer\kbd101a.dll
%WINDIR%\explorer\kbd101.dll
%WINDIR%\explorer\KBDIULAT.DLL
%WINDIR%\explorer\KBDIT142.DLL
%WINDIR%\explorer\KBDIT.DLL
%WINDIR%\explorer\KBDJPN.DLL
%WINDIR%\explorer\KBDKOR.DLL
%WINDIR%\explorer\KBDKHMR.DLL
%WINDIR%\explorer\KBDKAZ.DLL
%WINDIR%\explorer\KBDIR.DLL
%WINDIR%\explorer\KBDINORI.DLL
%WINDIR%\explorer\KBDINMAR.DLL
%WINDIR%\explorer\KBDINMAL.DLL
%WINDIR%\explorer\KBDINPUN.DLL
%WINDIR%\explorer\KBDINUK2.DLL
%WINDIR%\explorer\KBDINTEL.DLL
%WINDIR%\explorer\KBDINTAM.DLL
%WINDIR%\explorer\KBDMACST.DLL
%WINDIR%\explorer\KBDMAC.DLL
%WINDIR%\explorer\KBDLV1.DLL
%WINDIR%\explorer\KBDMAORI.DLL
%WINDIR%\explorer\KBDMON.DLL
%WINDIR%\explorer\KBDMLT48.DLL
%WINDIR%\explorer\KBDMLT47.DLL
%WINDIR%\explorer\KBDLV.DLL
%WINDIR%\explorer\KBDLAO.DLL
%WINDIR%\explorer\KBDLA.DLL
%WINDIR%\explorer\KBDKYR.DLL
%WINDIR%\explorer\kbdlk41a.dll
%WINDIR%\explorer\KBDLT2.DLL
%WINDIR%\explorer\KBDLT1.DLL
%WINDIR%\explorer\KBDLT.DLL
%WINDIR%\explorer\KBDINKAN.DLL
%WINDIR%\explorer\KBDHAU.DLL
%WINDIR%\explorer\KBDGRLND.DLL
%WINDIR%\explorer\KBDGR1.DLL
%WINDIR%\explorer\KBDHE.DLL
%WINDIR%\explorer\KBDHEB.DLL
%WINDIR%\explorer\KBDHE319.DLL
%WINDIR%\explorer\KBDHE220.DLL
%WINDIR%\explorer\KBDGR.DLL
%WINDIR%\explorer\KBDGAE.DLL
%WINDIR%\explorer\KBDFR.DLL
%WINDIR%\explorer\KBDFO.DLL
%WINDIR%\explorer\KBDGEO.DLL
%WINDIR%\explorer\KBDGKL.DLL
%WINDIR%\explorer\kbdgeoqw.dll
%WINDIR%\explorer\kbdgeoer.dll
%WINDIR%\explorer\KBDINBE2.DLL
%WINDIR%\explorer\KBDINBE1.DLL
%WINDIR%\explorer\KBDINASA.DLL
%WINDIR%\explorer\KBDINBEN.DLL
%WINDIR%\explorer\KBDINHIN.DLL
%WINDIR%\explorer\KBDINGUJ.DLL
%WINDIR%\explorer\KBDINDEV.DLL
%WINDIR%\explorer\KBDIC.DLL
%WINDIR%\explorer\KBDHEPT.DLL
%WINDIR%\explorer\KBDHELA3.DLL
%WINDIR%\explorer\KBDHELA2.DLL
%WINDIR%\explorer\KBDHU.DLL
%WINDIR%\explorer\KBDIBO.DLL
%WINDIR%\explorer\kbdibm02.dll
%WINDIR%\explorer\KBDHU1.DLL
%WINDIR%\explorer\api-ms-win-service-winsvc-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-service-management-l2-1-0.dll
%WINDIR%\explorer\api-ms-win-service-management-l1-1-0.dll
%WINDIR%\explorer\apilogen.dll
%WINDIR%\explorer\asferror.dll
%WINDIR%\explorer\appidcertstorecheck.exe
%WINDIR%\explorer\apisetschema.dll
%WINDIR%\explorer\api-ms-win-service-core-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-util-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-ums-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-threadpool-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-xstate-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-security-sddl-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-security-lsalookup-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-security-base-l1-1-0.dll
%WINDIR%\explorer\bootstr.dll
%WINDIR%\explorer\blbres.dll
%WINDIR%\explorer\bitsprx6.dll
%WINDIR%\explorer\brcoinst.dll
%WINDIR%\explorer\BWUnpairElevated.dll
%WINDIR%\explorer\browseui.dll
%WINDIR%\explorer\bridgeres.dll
%WINDIR%\explorer\bitsprx4.dll
%WINDIR%\explorer\atipblag.dat
%WINDIR%\explorer\atiglpxx.dll
%WINDIR%\explorer\atig6pxx.dll
%WINDIR%\explorer\attrib.exe
%WINDIR%\explorer\bitsprx3.dll
%WINDIR%\explorer\bitsprx2.dll
%WINDIR%\explorer\avrt.dll
%WINDIR%\explorer\api-ms-win-core-sysinfo-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-delayload-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-debug-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-datetime-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-errorhandling-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-handle-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-file-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-fibers-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-console-l1-1-0.dll
<DRIVERS>\etc\hosts.txt
%TEMP%\$inst\temp_0.tmp
%TEMP%\$inst\2.tmp
%WINDIR%\explorer\acledit.dll
%WINDIR%\explorer\amcompat.tlb
%WINDIR%\explorer\aecache.dll
%WINDIR%\explorer\acproxy.dll
%WINDIR%\explorer\api-ms-win-core-processthreads-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-processenvironment-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-namedpipe-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-profile-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-synch-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-string-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-rtlsupport-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-misc-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-io-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-interlocked-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-heap-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-libraryloader-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-memory-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-localregistry-l1-1-0.dll
%WINDIR%\explorer\api-ms-win-core-localization-l1-1-0.dll
%WINDIR%\explorer\efsui.exe
%WINDIR%\explorer\Eap3Host.exe
%WINDIR%\explorer\dxmasf.dll
%WINDIR%\explorer\eventcls.dll
%WINDIR%\explorer\explorer.lnk
%WINDIR%\explorer\explorer.exe
%WINDIR%\explorer\EventViewer_EventDetails.xsl
%WINDIR%\explorer\dvdplay.exe
%WINDIR%\explorer\doskey.exe
%WINDIR%\explorer\dnsext.dll
%WINDIR%\explorer\dmdskres2.dll
%WINDIR%\explorer\dpnaddr.dll
%WINDIR%\explorer\dpnlobby.dll
%WINDIR%\explorer\dpnhupnp.dll
%WINDIR%\explorer\dpnhpast.dll
%WINDIR%\explorer\GettingStarted.exe
%WINDIR%\explorer\FXSUNATD.exe
%WINDIR%\explorer\FXSEVENT.dll
%WINDIR%\explorer\getuname.dll
%WINDIR%\explorer\grpconv.exe
%WINDIR%\explorer\grb.rs
%WINDIR%\explorer\gpupdate.exe
%WINDIR%\explorer\framebuf.dll
%WINDIR%\explorer\find.exe
%WINDIR%\explorer\fdPHost.dll
%WINDIR%\explorer\fdBthProxy.dll
%WINDIR%\explorer\finger.exe
%WINDIR%\explorer\fltLib.dll
%WINDIR%\explorer\fixmapi.exe
%WINDIR%\explorer\Firewall.cpl
%WINDIR%\explorer\dllhst3g.exe
%WINDIR%\explorer\compact.exe
%WINDIR%\explorer\comcat.dll
%WINDIR%\explorer\cngaudit.dll
%WINDIR%\explorer\csrr.rs
%WINDIR%\explorer\C_IS2022.DLL
%WINDIR%\explorer\ctfmon.exe
%WINDIR%\explorer\csrss.exe
%WINDIR%\explorer\cmstplua.dll
%WINDIR%\explorer\chkntfs.exe
%WINDIR%\explorer\chcp.com
%WINDIR%\explorer\change.exe
%WINDIR%\explorer\CHxReadingStringIME.dll
%WINDIR%\explorer\cmdkey.exe
%WINDIR%\explorer\clb.dll
%WINDIR%\explorer\CIRCoInst.dll
%WINDIR%\explorer\diskcomp.com
%WINDIR%\explorer\dinotify.exe
%WINDIR%\explorer\dhcpcmonitor.dll
%WINDIR%\explorer\diskcopy.com
%WINDIR%\explorer\dllhost.exe
%WINDIR%\explorer\dispex.dll
%WINDIR%\explorer\diskperf.exe
%WINDIR%\explorer\DeviceUxRes.dll
%WINDIR%\explorer\dciman32.dll
%WINDIR%\explorer\d3d8thk.dll
%WINDIR%\explorer\C_ISCII.DLL
%WINDIR%\explorer\dcomcnfg.exe
%WINDIR%\explorer\desktop.ini
%WINDIR%\explorer\defragproxy.dll
%WINDIR%\explorer\DDACLSys.dll

Удаляет следующие файлы:

<DRIVERS>\etc\hosts

Подменяет файл HOSTS.

Другое:

Ищет следующие окна:

ClassName: 'Shell_TrayWnd' WindowName: ''

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней