Trojan.KillProc.55850

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] '"C:\DOCUME~1\%USERNAME%\LOCALS~1\Temp\ir_ext_temp_0\AutoPlay\Docs\Dos Facebook.bat"' = '"%TEMP%\ir_ext_temp_0\AutoPlay\Docs\Dos Faceb...

Изменения в файловой системе:

Создает следующие файлы:

%WINDIR%\JkX.bat
%HOMEPATH%\Desktop\3264.virus
%HOMEPATH%\Desktop\11271.virus
%HOMEPATH%\Desktop\19989.virus
%HOMEPATH%\Desktop\3585.virus
%HOMEPATH%\Desktop\2733.virus
%HOMEPATH%\Desktop\5183.virus
%HOMEPATH%\Desktop\32206.virus
%HOMEPATH%\Desktop\21123.virus
%HOMEPATH%\Desktop\15054.virus
%HOMEPATH%\Desktop\12917.virus
%HOMEPATH%\Desktop\4990.virus
%HOMEPATH%\Desktop\31391.virus
%HOMEPATH%\Desktop\27572.virus
%HOMEPATH%\Desktop\17956.virus
%HOMEPATH%\Desktop\20481.virus
%HOMEPATH%\Desktop\9960.virus
%HOMEPATH%\Desktop\20363.virus
%HOMEPATH%\Desktop\3267.virus
%HOMEPATH%\Desktop\26510.virus
%HOMEPATH%\Desktop\22691.virus
%HOMEPATH%\Desktop\12823.virus
%HOMEPATH%\Desktop\19669.virus
%HOMEPATH%\Desktop\15783.virus
%HOMEPATH%\Desktop\720.virus
%HOMEPATH%\Desktop\23954.virus
%HOMEPATH%\Desktop\4577.virus
%HOMEPATH%\Desktop\28124.virus
%HOMEPATH%\Desktop\24704.virus
%HOMEPATH%\Desktop\11793.virus
%HOMEPATH%\Desktop\27195.virus
%HOMEPATH%\Desktop\26740.virus
%HOMEPATH%\Desktop\11266.virus
%HOMEPATH%\Desktop\19510.virus
%HOMEPATH%\Desktop\1158.virus
%HOMEPATH%\Desktop\16983.virus
%HOMEPATH%\Desktop\30487.virus
%HOMEPATH%\Desktop\1527.virus
%HOMEPATH%\Desktop\14868.virus
%HOMEPATH%\Desktop\15272.virus
%HOMEPATH%\Desktop\1965.virus
%HOMEPATH%\Desktop\27444.virus
%HOMEPATH%\Desktop\20204.virus
%HOMEPATH%\Desktop\2617.virus
%HOMEPATH%\Desktop\25716.virus
%HOMEPATH%\Desktop\31076.virus
%HOMEPATH%\Desktop\3406.virus
%HOMEPATH%\Desktop\2081.virus
%HOMEPATH%\Desktop\31510.virus
%HOMEPATH%\Desktop\16208.virus
%HOMEPATH%\Desktop\13958.virus
%HOMEPATH%\Desktop\6886.virus
%HOMEPATH%\Desktop\2750.virus
%HOMEPATH%\Desktop\20221.virus
%HOMEPATH%\Desktop\2185.virus
%HOMEPATH%\Desktop\20759.virus
%HOMEPATH%\Desktop\11822.virus
%HOMEPATH%\Desktop\14642.virus
%HOMEPATH%\Desktop\15364.virus
%HOMEPATH%\Desktop\4555.virus
%HOMEPATH%\Desktop\3154.virus
%HOMEPATH%\Desktop\29300.virus
%HOMEPATH%\Desktop\17664.virus
%HOMEPATH%\Desktop\17032.virus
%HOMEPATH%\Desktop\6373.virus
%HOMEPATH%\Desktop\17396.virus
%HOMEPATH%\Desktop\19466.virus
%HOMEPATH%\Desktop\13918.virus
%HOMEPATH%\Desktop\23972.virus
%HOMEPATH%\Desktop\7347.virus
%HOMEPATH%\Desktop\17198.virus
%HOMEPATH%\Desktop\19582.virus
%HOMEPATH%\Desktop\21414.virus
%HOMEPATH%\Desktop\21177.virus
%HOMEPATH%\Desktop\29432.virus
%HOMEPATH%\Desktop\6882.virus
%HOMEPATH%\Desktop\4539.virus
%HOMEPATH%\Desktop\27685.virus
%HOMEPATH%\Desktop\18558.virus
%HOMEPATH%\Desktop\14022.virus
%HOMEPATH%\Desktop\9347.virus
%HOMEPATH%\Desktop\7296.virus
%HOMEPATH%\Desktop\27475.virus
%HOMEPATH%\Desktop\9735.virus
%HOMEPATH%\Desktop\18724.virus
%HOMEPATH%\Desktop\30924.virus
%HOMEPATH%\Desktop\26351.virus
%HOMEPATH%\Desktop\17794.virus
%HOMEPATH%\Desktop\6440.virus
%HOMEPATH%\Desktop\27491.virus
%HOMEPATH%\Desktop\6432.virus
%HOMEPATH%\Desktop\6616.virus
%HOMEPATH%\Desktop\6580.virus
%HOMEPATH%\Desktop\8408.virus
%HOMEPATH%\Desktop\20027.virus
%HOMEPATH%\Desktop\4375.virus
%HOMEPATH%\Desktop\24745.virus
%HOMEPATH%\Desktop\17710.virus
%HOMEPATH%\Desktop\12252.virus
%HOMEPATH%\Desktop\10512.virus
%HOMEPATH%\Desktop\19855.virus
%HOMEPATH%\Desktop\3899.virus
%HOMEPATH%\Desktop\21127.virus
%HOMEPATH%\Desktop\11648.virus
%HOMEPATH%\Desktop\30380.virus
%HOMEPATH%\Desktop\4225.virus
%HOMEPATH%\Desktop\30492.virus
%HOMEPATH%\Desktop\8681.virus
%HOMEPATH%\Desktop\20945.virus
%HOMEPATH%\Desktop\28082.virus
%HOMEPATH%\Desktop\7186.virus
%HOMEPATH%\Desktop\18358.virus
%HOMEPATH%\Desktop\16809.virus
%HOMEPATH%\Desktop\8084.virus
%HOMEPATH%\Desktop\16431.virus
%HOMEPATH%\Desktop\5218.virus
%HOMEPATH%\Desktop\29542.virus
%HOMEPATH%\Desktop\26085.virus
%HOMEPATH%\Desktop\3572.virus
%HOMEPATH%\Desktop\14918.virus
%HOMEPATH%\Desktop\12414.virus
%HOMEPATH%\Desktop\25201.virus
%HOMEPATH%\Desktop\28192.virus
%HOMEPATH%\Desktop\15189.virus
%HOMEPATH%\Desktop\29971.virus
%HOMEPATH%\Desktop\29709.virus
%HOMEPATH%\Desktop\25419.virus
%HOMEPATH%\Desktop\219.virus
%HOMEPATH%\Desktop\7975.virus
%HOMEPATH%\Desktop\1618.virus
%HOMEPATH%\Desktop\21919.virus
%HOMEPATH%\Desktop\3379.virus
%HOMEPATH%\Desktop\27301.virus
%HOMEPATH%\Desktop\22323.virus
%HOMEPATH%\Desktop\23712.virus
%HOMEPATH%\Desktop\32263.virus
%HOMEPATH%\Desktop\31772.virus
%HOMEPATH%\Desktop\2238.virus
%HOMEPATH%\Desktop\19392.virus
%HOMEPATH%\Desktop\24414.virus
%HOMEPATH%\Desktop\7706.virus
%HOMEPATH%\Desktop\13123.virus
%HOMEPATH%\Desktop\21787.virus
%HOMEPATH%\Desktop\364.virus
%HOMEPATH%\Desktop\29205.virus
%HOMEPATH%\Desktop\31577.virus
%HOMEPATH%\Desktop\28576.virus
%HOMEPATH%\Desktop\28816.virus
%HOMEPATH%\Desktop\30537.virus
%HOMEPATH%\Desktop\26899.virus
%HOMEPATH%\Desktop\12571.virus
%HOMEPATH%\Desktop\27987.virus
%HOMEPATH%\Desktop\25481.virus
%HOMEPATH%\Desktop\28462.virus
%HOMEPATH%\Desktop\2861.virus
%HOMEPATH%\Desktop\32526.virus
%HOMEPATH%\Desktop\22700.virus
%HOMEPATH%\Desktop\24582.virus
%HOMEPATH%\Desktop\4540.virus
%HOMEPATH%\Desktop\2524.virus
%HOMEPATH%\Desktop\29117.virus
%HOMEPATH%\Desktop\5956.virus
%HOMEPATH%\Desktop\31164.virus
%HOMEPATH%\Desktop\11823.virus
%HOMEPATH%\Desktop\24134.virus
%HOMEPATH%\Desktop\3886.virus
%HOMEPATH%\Desktop\16878.virus
%HOMEPATH%\Desktop\15604.virus
%HOMEPATH%\Desktop\4048.virus
%HOMEPATH%\Desktop\23237.virus
%HOMEPATH%\Desktop\28904.virus
%HOMEPATH%\Desktop\27092.virus
%HOMEPATH%\Desktop\5184.virus
%HOMEPATH%\Desktop\127.virus
%HOMEPATH%\Desktop\23109.virus
%HOMEPATH%\Desktop\22010.virus
%HOMEPATH%\Desktop\27924.virus
%HOMEPATH%\Desktop\12991.virus
%HOMEPATH%\Desktop\29164.virus
%HOMEPATH%\Desktop\17509.virus
%HOMEPATH%\Desktop\16401.virus
%HOMEPATH%\Desktop\25658.virus
%HOMEPATH%\Desktop\11597.virus
%HOMEPATH%\Desktop\5174.virus
%HOMEPATH%\Desktop\25300.virus
%HOMEPATH%\Desktop\26918.virus
%HOMEPATH%\Desktop\22795.virus
%HOMEPATH%\Desktop\22489.virus
%HOMEPATH%\Desktop\5293.virus
%HOMEPATH%\Desktop\10492.virus
%HOMEPATH%\Desktop\10188.virus
%HOMEPATH%\Desktop\31213.virus
%HOMEPATH%\Desktop\31524.virus
%HOMEPATH%\Desktop\6366.virus
%HOMEPATH%\Desktop\1888.virus
%HOMEPATH%\Desktop\17295.virus
%HOMEPATH%\Desktop\21101.virus
%HOMEPATH%\Desktop\24537.virus
%HOMEPATH%\Desktop\3471.virus
%HOMEPATH%\Desktop\31179.virus
%HOMEPATH%\Desktop\14293.virus
%HOMEPATH%\Desktop\1519.virus
%HOMEPATH%\Desktop\12810.virus
%HOMEPATH%\Desktop\28392.virus
%HOMEPATH%\Desktop\30613.virus
%HOMEPATH%\Desktop\23962.virus
%HOMEPATH%\Desktop\9312.virus
%HOMEPATH%\Desktop\3888.virus
%HOMEPATH%\Desktop\3050.virus
%HOMEPATH%\Desktop\3852.virus
%HOMEPATH%\Desktop\21766.virus
%HOMEPATH%\Desktop\27533.virus
%HOMEPATH%\Desktop\18753.virus
%HOMEPATH%\Desktop\1553.virus
%HOMEPATH%\Desktop\27546.virus
%HOMEPATH%\Desktop\4030.virus
%HOMEPATH%\Desktop\9150.virus
%HOMEPATH%\Desktop\12205.virus
%HOMEPATH%\Desktop\19041.virus
%HOMEPATH%\Desktop\11538.virus
%HOMEPATH%\Desktop\14092.virus
%HOMEPATH%\Desktop\8416.virus
%HOMEPATH%\Desktop\13072.virus
%HOMEPATH%\Desktop\23004.virus
%HOMEPATH%\Desktop\16242.virus
%HOMEPATH%\Desktop\5702.virus
%HOMEPATH%\Desktop\1985.virus
%HOMEPATH%\Desktop\15207.virus
%HOMEPATH%\Desktop\28496.virus
%HOMEPATH%\Desktop\15621.virus
%HOMEPATH%\Desktop\15165.virus
%HOMEPATH%\Desktop\7603.virus
%HOMEPATH%\Desktop\30413.virus
%HOMEPATH%\Desktop\21374.virus
%HOMEPATH%\Desktop\27523.virus
%HOMEPATH%\Desktop\12316.virus
%HOMEPATH%\Desktop\5616.virus
%HOMEPATH%\Desktop\6853.virus
%HOMEPATH%\Desktop\20008.virus
%HOMEPATH%\Desktop\7237.virus
%HOMEPATH%\Desktop\21620.virus
%HOMEPATH%\Desktop\29006.virus
%HOMEPATH%\Desktop\19544.virus
%HOMEPATH%\Desktop\8935.virus
%HOMEPATH%\Desktop\27304.virus
%HOMEPATH%\Desktop\10199.virus
%HOMEPATH%\Desktop\26547.virus
%HOMEPATH%\Desktop\16079.virus
%HOMEPATH%\Desktop\19030.virus
%HOMEPATH%\Desktop\8584.virus
%HOMEPATH%\Desktop\1844.virus
%HOMEPATH%\Desktop\27371.virus
%HOMEPATH%\Desktop\15113.virus
%HOMEPATH%\Desktop\21617.virus
%HOMEPATH%\Desktop\3217.virus
%HOMEPATH%\Desktop\31532.virus
%HOMEPATH%\Desktop\5246.virus
%HOMEPATH%\Desktop\7351.virus
%HOMEPATH%\Desktop\5847.virus
%HOMEPATH%\Desktop\16049.virus
%HOMEPATH%\Desktop\39.virus
%HOMEPATH%\Desktop\23306.virus
%HOMEPATH%\Desktop\3853.virus
%HOMEPATH%\Desktop\24832.virus
%HOMEPATH%\Desktop\30097.virus
%HOMEPATH%\Desktop\11542.virus
%HOMEPATH%\Desktop\19381.virus
%HOMEPATH%\Desktop\25228.virus
%HOMEPATH%\Desktop\13961.virus
%HOMEPATH%\Desktop\11224.virus
%HOMEPATH%\Desktop\12876.virus
%HOMEPATH%\Desktop\18674.virus
%HOMEPATH%\Desktop\6729.virus
%HOMEPATH%\Desktop\4234.virus
%HOMEPATH%\Desktop\20736.virus
%HOMEPATH%\Desktop\5397.virus
%HOMEPATH%\Desktop\32583.virus
%HOMEPATH%\Desktop\26215.virus
%HOMEPATH%\Desktop\16863.virus
%HOMEPATH%\Desktop\28171.virus
%HOMEPATH%\Desktop\31908.virus
%HOMEPATH%\Desktop\4565.virus
%HOMEPATH%\Desktop\15749.virus
%HOMEPATH%\Desktop\18719.virus
%HOMEPATH%\Desktop\28532.virus
%HOMEPATH%\Desktop\2423.virus
%HOMEPATH%\Desktop\1475.virus
%HOMEPATH%\Desktop\9035.virus
%HOMEPATH%\Desktop\2222.virus
%HOMEPATH%\Desktop\9574.virus
%HOMEPATH%\Desktop\5440.virus
%HOMEPATH%\Desktop\12978.virus
%HOMEPATH%\Desktop\30993.virus
%HOMEPATH%\Desktop\30516.virus
%HOMEPATH%\Desktop\21019.virus
%HOMEPATH%\Desktop\4581.virus
%HOMEPATH%\Desktop\13135.virus
%HOMEPATH%\Desktop\2640.virus
%HOMEPATH%\Desktop\9882.virus
%HOMEPATH%\Desktop\12542.virus
%HOMEPATH%\Desktop\12545.virus
%HOMEPATH%\Desktop\25649.virus
%HOMEPATH%\Desktop\23792.virus
%HOMEPATH%\Desktop\3285.virus
%HOMEPATH%\Desktop\26584.virus
%HOMEPATH%\Desktop\17662.virus
%HOMEPATH%\Desktop\22758.virus
%HOMEPATH%\Desktop\25644.virus
%HOMEPATH%\Desktop\18366.virus
%HOMEPATH%\Desktop\12488.virus
%HOMEPATH%\Desktop\10341.virus
%HOMEPATH%\Desktop\30783.virus
%HOMEPATH%\Desktop\20202.virus
%HOMEPATH%\Desktop\879.virus
%HOMEPATH%\Desktop\11572.virus
%HOMEPATH%\Desktop\1929.virus
%HOMEPATH%\Desktop\30346.virus
%HOMEPATH%\Desktop\2038.virus
%HOMEPATH%\Desktop\24611.virus
%HOMEPATH%\Desktop\30581.virus
%HOMEPATH%\Desktop\25981.virus
%HOMEPATH%\Desktop\28080.virus
%HOMEPATH%\Desktop\13586.virus
%HOMEPATH%\Desktop\19089.virus
%HOMEPATH%\Desktop\9160.virus
%HOMEPATH%\Desktop\27957.virus
%HOMEPATH%\Desktop\25155.virus
%HOMEPATH%\Desktop\23122.virus
%HOMEPATH%\Desktop\5906.virus
%HOMEPATH%\Desktop\14400.virus
%HOMEPATH%\Desktop\16485.virus
%HOMEPATH%\Desktop\8581.virus
%HOMEPATH%\Desktop\22557.virus
%HOMEPATH%\Desktop\13667.virus
%HOMEPATH%\Desktop\16036.virus
%HOMEPATH%\Desktop\9907.virus
%HOMEPATH%\Desktop\11613.virus
%HOMEPATH%\Desktop\29353.virus
%HOMEPATH%\Desktop\9118.virus
%HOMEPATH%\Desktop\12582.virus
%HOMEPATH%\Desktop\9381.virus
%HOMEPATH%\Desktop\10425.virus
%HOMEPATH%\Desktop\14234.virus
%WINDIR%\Dos Fb.bat
%HOMEPATH%\Desktop\24021.virus
%HOMEPATH%\Desktop\2502.virus
%HOMEPATH%\Desktop\24822.virus
%HOMEPATH%\Desktop\14959.virus
%HOMEPATH%\Desktop\13783.virus
%HOMEPATH%\Desktop\1008.virus
%HOMEPATH%\Desktop\3494.virus
%WINDIR%\Dos FB By Ahmed.exe
%HOMEPATH%\Desktop\21848.virus
%HOMEPATH%\Desktop\9712.virus
%HOMEPATH%\Desktop\1641.virus
%HOMEPATH%\Desktop\32605.virus
%HOMEPATH%\Desktop\11983.virus
%HOMEPATH%\Desktop\14077.virus
%HOMEPATH%\Desktop\6153.virus
%HOMEPATH%\Desktop\16940.virus
%HOMEPATH%\Desktop\30577.virus
%HOMEPATH%\Desktop\23051.virus
%HOMEPATH%\Desktop\23132.virus
%HOMEPATH%\Desktop\32205.virus
%HOMEPATH%\Desktop\13988.virus
%HOMEPATH%\Desktop\30602.virus
%HOMEPATH%\Desktop\6002.virus
%HOMEPATH%\Desktop\18511.virus
%HOMEPATH%\Desktop\19186.virus
%HOMEPATH%\Desktop\18944.virus
%HOMEPATH%\Desktop\19798.virus
%HOMEPATH%\Desktop\6814.virus
%HOMEPATH%\Desktop\3325.virus
%HOMEPATH%\Desktop\25858.virus
%HOMEPATH%\Desktop\24688.virus
%HOMEPATH%\Desktop\5395.virus
%HOMEPATH%\Desktop\7970.virus
%HOMEPATH%\Desktop\13647.virus
%HOMEPATH%\Desktop\19281.virus
%HOMEPATH%\Desktop\15305.virus
%HOMEPATH%\Desktop\25128.virus
%HOMEPATH%\Desktop\28034.virus
%HOMEPATH%\Desktop\3223.virus
%HOMEPATH%\Desktop\4993.virus
%HOMEPATH%\Desktop\16023.virus
%HOMEPATH%\Desktop\16040.virus
%HOMEPATH%\Desktop\2626.virus
%HOMEPATH%\Desktop\13724.virus
%HOMEPATH%\Desktop\6058.virus
%HOMEPATH%\Desktop\14288.virus
%HOMEPATH%\Desktop\28326.virus
%HOMEPATH%\Desktop\14289.virus
%HOMEPATH%\Desktop\31551.virus
%HOMEPATH%\Desktop\18868.virus
%HOMEPATH%\Desktop\25480.virus
%HOMEPATH%\Desktop\19957.virus
%HOMEPATH%\Desktop\28141.virus
%HOMEPATH%\Desktop\21909.virus
%HOMEPATH%\Desktop\31338.virus
%HOMEPATH%\Desktop\417.virus
%HOMEPATH%\Desktop\31879.virus
%HOMEPATH%\Desktop\31981.virus
%HOMEPATH%\Desktop\27109.virus
%HOMEPATH%\Desktop\30486.virus
%HOMEPATH%\Desktop\4362.virus
%HOMEPATH%\Desktop\5809.virus
%HOMEPATH%\Desktop\8845.virus
%HOMEPATH%\Desktop\7929.virus
%HOMEPATH%\Desktop\5192.virus
%HOMEPATH%\Desktop\18081.virus
%HOMEPATH%\Desktop\26954.virus
%HOMEPATH%\Desktop\20537.virus
%HOMEPATH%\Desktop\32591.virus
%HOMEPATH%\Desktop\5434.virus
%HOMEPATH%\Desktop\28727.virus
%HOMEPATH%\Desktop\19925.virus
%HOMEPATH%\Desktop\29048.virus
%HOMEPATH%\Desktop\28797.virus
%HOMEPATH%\Desktop\10599.virus
%HOMEPATH%\Desktop\6287.virus
%HOMEPATH%\Desktop\22233.virus
%HOMEPATH%\Desktop\22264.virus
%HOMEPATH%\Desktop\400.virus
%HOMEPATH%\Desktop\6873.virus
%HOMEPATH%\Desktop\12969.virus
%HOMEPATH%\Desktop\7041.virus
%HOMEPATH%\Desktop\4702.virus
%HOMEPATH%\Desktop\15820.virus
%HOMEPATH%\Desktop\30843.virus
%HOMEPATH%\Desktop\16455.virus
%HOMEPATH%\Desktop\18059.virus
%HOMEPATH%\Desktop\11832.virus
%WINDIR%\SlayerRAT.exe
%HOMEPATH%\Desktop\3624.virus
%HOMEPATH%\Desktop\12676.virus
%HOMEPATH%\Desktop\23415.virus
%HOMEPATH%\Desktop\17179.virus
%HOMEPATH%\Desktop\3827.virus
%HOMEPATH%\Desktop\9737.virus
%HOMEPATH%\Desktop\13981.virus
%HOMEPATH%\Desktop\12161.virus
%HOMEPATH%\Desktop\1925.virus
%HOMEPATH%\Desktop\2028.virus
%HOMEPATH%\Desktop\29937.virus
%HOMEPATH%\Desktop\27315.virus
%HOMEPATH%\Desktop\7236.virus
%HOMEPATH%\Desktop\671.virus
%HOMEPATH%\Desktop\5762.virus
%HOMEPATH%\Desktop\26183.virus
%HOMEPATH%\Desktop\4477.virus
%HOMEPATH%\Desktop\31012.virus
%HOMEPATH%\Desktop\12751.virus
%HOMEPATH%\Desktop\19572.virus
%HOMEPATH%\Desktop\22768.virus
%HOMEPATH%\Desktop\10435.virus
%HOMEPATH%\Desktop\5498.virus
%HOMEPATH%\Desktop\15029.virus
%HOMEPATH%\Desktop\12122.virus
%HOMEPATH%\Desktop\15363.virus
%HOMEPATH%\Desktop\23588.virus
%HOMEPATH%\Desktop\25991.virus
%HOMEPATH%\Desktop\28835.virus
%HOMEPATH%\Desktop\12429.virus
%HOMEPATH%\Desktop\8087.virus
%HOMEPATH%\Desktop\19939.virus
%HOMEPATH%\Desktop\18788.virus
%HOMEPATH%\Desktop\4911.virus
%HOMEPATH%\Desktop\29704.virus
%HOMEPATH%\Desktop\21125.virus
%HOMEPATH%\Desktop\30862.virus
%HOMEPATH%\Desktop\8354.virus
%HOMEPATH%\Desktop\7224.virus
%HOMEPATH%\Desktop\19550.virus
%HOMEPATH%\Desktop\9827.virus
%HOMEPATH%\Desktop\14211.virus
%HOMEPATH%\Desktop\22211.virus
%HOMEPATH%\Desktop\13138.virus
%HOMEPATH%\Desktop\26377.virus
%HOMEPATH%\Desktop\1309.virus
%HOMEPATH%\Desktop\11812.virus
%HOMEPATH%\Desktop\14509.virus
%HOMEPATH%\Desktop\3011.virus
%HOMEPATH%\Desktop\9218.virus
%HOMEPATH%\Desktop\8781.virus
%HOMEPATH%\Desktop\20478.virus
%HOMEPATH%\Desktop\14084.virus
%HOMEPATH%\Desktop\18027.virus
%HOMEPATH%\Desktop\19195.virus
%HOMEPATH%\Desktop\2591.virus
%HOMEPATH%\Desktop\14727.virus
%HOMEPATH%\Desktop\18678.virus
%HOMEPATH%\Desktop\9898.virus
%HOMEPATH%\Desktop\17158.virus
%HOMEPATH%\Desktop\16999.virus
%HOMEPATH%\Desktop\2572.virus
%HOMEPATH%\Desktop\13967.virus
%HOMEPATH%\Desktop\2946.virus
%HOMEPATH%\Desktop\17786.virus
%HOMEPATH%\Desktop\15812.virus
%HOMEPATH%\Desktop\9210.virus
%HOMEPATH%\Desktop\20696.virus
%HOMEPATH%\Desktop\1611.virus
%HOMEPATH%\Desktop\4594.virus
%HOMEPATH%\Desktop\23377.virus
%HOMEPATH%\Desktop\30090.virus
%HOMEPATH%\Desktop\1344.virus
%HOMEPATH%\Desktop\21005.virus
%HOMEPATH%\Desktop\14208.virus
%HOMEPATH%\Desktop\14662.virus
%HOMEPATH%\Desktop\20596.virus
%HOMEPATH%\Desktop\26643.virus
%HOMEPATH%\Desktop\30278.virus
%HOMEPATH%\Desktop\1011.virus
%HOMEPATH%\Desktop\19502.virus
%HOMEPATH%\Desktop\29666.virus
%HOMEPATH%\Desktop\22100.virus
%TEMP%\ir_ext_temp_0\lua5.1.dll
%HOMEPATH%\Desktop\30104.virus
%HOMEPATH%\Desktop\14999.virus
%HOMEPATH%\Desktop\15361.virus
%TEMP%\ir_ext_temp_0\lua51.dll
%HOMEPATH%\Desktop\24881.virus
%HOMEPATH%\Desktop\6891.virus
%HOMEPATH%\Desktop\28779.virus
%HOMEPATH%\Desktop\18119.virus
%HOMEPATH%\Desktop\21623.virus
%HOMEPATH%\Desktop\10281.virus
%HOMEPATH%\Desktop\27289.virus
%HOMEPATH%\Desktop\29580.virus
%HOMEPATH%\Desktop\11211.virus
%HOMEPATH%\Desktop\19420.virus
%TEMP%\ir_ext_temp_0\tunisia.ico
%HOMEPATH%\Desktop\17795.virus
%HOMEPATH%\Desktop\16848.virus
%HOMEPATH%\Desktop\6776.virus
%HOMEPATH%\Desktop\541.virus
%HOMEPATH%\Desktop\15593.virus
%HOMEPATH%\Desktop\16315.virus
%HOMEPATH%\Desktop\23242.virus
%HOMEPATH%\Desktop\15225.virus
%HOMEPATH%\Desktop\24689.virus
%HOMEPATH%\Desktop\3830.virus
%HOMEPATH%\Desktop\12902.virus
%HOMEPATH%\Desktop\18514.virus
%HOMEPATH%\Desktop\27810.virus
%HOMEPATH%\Desktop\3229.virus
%HOMEPATH%\Desktop\24114.virus
%HOMEPATH%\Desktop\24472.virus
%HOMEPATH%\Desktop\10909.virus
%HOMEPATH%\Desktop\19553.virus
%HOMEPATH%\Desktop\8167.virus
%HOMEPATH%\Desktop\1255.virus
%HOMEPATH%\Desktop\26253.virus
%HOMEPATH%\Desktop\10895.virus
%HOMEPATH%\Desktop\24105.virus
%HOMEPATH%\Desktop\25277.virus
%HOMEPATH%\Desktop\2447.virus
%HOMEPATH%\Desktop\16730.virus
%HOMEPATH%\Desktop\16229.virus
%HOMEPATH%\Desktop\26884.virus
%HOMEPATH%\Desktop\19759.virus
%HOMEPATH%\Desktop\18805.virus
%HOMEPATH%\Desktop\21847.virus
%HOMEPATH%\Desktop\23911.virus
%HOMEPATH%\Desktop\21628.virus
%HOMEPATH%\Desktop\4992.virus
%HOMEPATH%\Desktop\9370.virus
%HOMEPATH%\Desktop\15561.virus
%HOMEPATH%\Desktop\32548.virus
%HOMEPATH%\Desktop\16225.virus
%HOMEPATH%\Desktop\25939.virus
%HOMEPATH%\Desktop\24947.virus
%HOMEPATH%\Desktop\23594.virus
%HOMEPATH%\Desktop\3449.virus
%HOMEPATH%\Desktop\21155.virus
%HOMEPATH%\Desktop\2017.virus
%HOMEPATH%\Desktop\3716.virus
%HOMEPATH%\Desktop\24983.virus
%HOMEPATH%\Desktop\9461.virus
%HOMEPATH%\Desktop\30876.virus
%HOMEPATH%\Desktop\28721.virus
%HOMEPATH%\Desktop\25947.virus
%HOMEPATH%\Desktop\29865.virus
%TEMP%\ir_ext_temp_0\AutoPlay\Audio\Click1.ogg
%HOMEPATH%\Desktop\25219.virus
%HOMEPATH%\Desktop\26924.virus
%HOMEPATH%\Desktop\10705.virus
%HOMEPATH%\Desktop\22345.virus
%HOMEPATH%\Desktop\601.virus
%HOMEPATH%\Desktop\18180.virus
%HOMEPATH%\Desktop\8056.virus
%HOMEPATH%\Desktop\26123.virus
%HOMEPATH%\Desktop\5231.virus
%HOMEPATH%\Desktop\2078.virus
%TEMP%\ir_ext_temp_0\AutoPlay\Audio\High1.ogg
%HOMEPATH%\Desktop\7226.virus
%HOMEPATH%\Desktop\6272.virus
%HOMEPATH%\Desktop\15846.virus
%HOMEPATH%\Desktop\29791.virus
%HOMEPATH%\Desktop\28747.virus
%HOMEPATH%\Desktop\26676.virus
%HOMEPATH%\Desktop\5480.virus
%HOMEPATH%\Desktop\27360.virus
%HOMEPATH%\Desktop\31780.virus
%HOMEPATH%\Desktop\26743.virus
%HOMEPATH%\Desktop\9819.virus
%HOMEPATH%\Desktop\21577.virus
%HOMEPATH%\Desktop\30512.virus
%HOMEPATH%\Desktop\15714.virus
%HOMEPATH%\Desktop\6195.virus
%HOMEPATH%\Desktop\32074.virus
%HOMEPATH%\Desktop\22884.virus
%HOMEPATH%\Desktop\14249.virus
%TEMP%\ir_ext_temp_0\AutoPlay\autorun.cdd
%HOMEPATH%\Desktop\2872.virus
%HOMEPATH%\Desktop\27659.virus
%HOMEPATH%\Desktop\8325.virus
%HOMEPATH%\Desktop\29752.virus
%HOMEPATH%\Desktop\13968.virus
%TEMP%\ir_ext_temp_0\AutoPlay\Images\f.png
%HOMEPATH%\Desktop\20173.virus
%HOMEPATH%\Desktop\27128.virus
%HOMEPATH%\Desktop\25938.virus
%HOMEPATH%\Desktop\19867.virus
%HOMEPATH%\Desktop\5064.virus
%HOMEPATH%\Desktop\16448.virus
%HOMEPATH%\Desktop\19744.virus
%HOMEPATH%\Desktop\18310.virus
%TEMP%\ir_ext_temp_0\autorun.exe
%HOMEPATH%\Desktop\6185.virus
%HOMEPATH%\Desktop\5583.virus
%HOMEPATH%\Desktop\22626.virus
%HOMEPATH%\Desktop\14765.virus
%HOMEPATH%\Desktop\6413.virus
%HOMEPATH%\Desktop\10734.virus
%TEMP%\ir_ext_temp_0\AutoPlay\Docs\Dos Facebook.bat
%HOMEPATH%\Desktop\3391.virus
%HOMEPATH%\Desktop\3627.virus
%HOMEPATH%\Desktop\5269.virus
%HOMEPATH%\Desktop\31988.virus
%HOMEPATH%\Desktop\30185.virus
%HOMEPATH%\Desktop\28008.virus
%HOMEPATH%\Desktop\12631.virus
%HOMEPATH%\Desktop\28085.virus
%HOMEPATH%\Desktop\5667.virus
%TEMP%\ir_ext_temp_0\AutoPlay\Docs\fhe.bat
%HOMEPATH%\Desktop\163.virus
%HOMEPATH%\Desktop\5598.virus
%HOMEPATH%\Desktop\17202.virus
%HOMEPATH%\Desktop\7867.virus
%HOMEPATH%\Desktop\20181.virus
%HOMEPATH%\Desktop\13470.virus
%HOMEPATH%\Desktop\2349.virus
%TEMP%\ir_ext_temp_0\AutoPlay\Icons\tunisia.ico
%HOMEPATH%\Desktop\20216.virus
%HOMEPATH%\Desktop\17016.virus
%HOMEPATH%\Desktop\21329.virus
%HOMEPATH%\Desktop\31716.virus
%HOMEPATH%\Desktop\19436.virus

Другое:

Ищет следующие окна:

ClassName: '' WindowName: 'Windows Task Manager'

Создает и запускает на исполнение:

'%WINDIR%\SlayerRAT.exe'
'%WINDIR%\Dos FB By Ahmed.exe'
'%TEMP%\ir_ext_temp_0\autorun.exe' "SFXSOURCE:%WINDIR%\Dos FB By Ahmed.exe"

Запускает на исполнение:

'<SYSTEM32>\cmd.exe' /c ""%WINDIR%\JkX.bat" "
'<SYSTEM32>\cmd.exe' /c ""%WINDIR%\Dos Fb.bat" "
'<SYSTEM32>\cmd.exe'
'%WINDIR%\explorer.exe'
'<SYSTEM32>\calc.exe'
'<SYSTEM32>\taskmgr.exe'
'<SYSTEM32>\cmd.exe' /c ""%TEMP%\ir_ext_temp_0\AutoPlay\Docs\Dos Facebook.bat" "
'<SYSTEM32>\cmd.exe' /c "%TEMP%\ir_ext_temp_0\AutoPlay\Docs\Dos Facebook.bat"

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней