Trojan.KillFiles.8909

Техническая информация

Вредоносные функции:

Запускает на исполнение:

<SYSTEM32>\msiexec.exe /qn /l "{1248C09A-BD6B-47F5-BF3F-CD2B700D9FCB}.log" /x{1248C09A-BD6B-47F5-BF3F-CD2B700D9FCB} symsetup=1
<SYSTEM32>\msiexec.exe /qn /l "{12E2B9E9-05B1-407d-B0FD-B5F350535125}.log" /x{12E2B9E9-05B1-407d-B0FD-B5F350535125} symsetup=1
<SYSTEM32>\msiexec.exe /qn /l "{E85FA9A1-C241-4698-893B-DD99509B8DB0}.log" /x{E85FA9A1-C241-4698-893B-DD99509B8DB0} symsetup=1
<SYSTEM32>\msiexec.exe /qn /l "{5677563D-0CB1-485F-9E18-C5025306BB3F}.log" /x{5677563D-0CB1-485F-9E18-C5025306BB3F} symsetup=1
<SYSTEM32>\msiexec.exe /qn /l "{77772678-817F-4401-9301-ED1D01A8DA56}.log" /x{77772678-817F-4401-9301-ED1D01A8DA56} symsetup=1
<SYSTEM32>\msiexec.exe /qn /l "{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227}.log" /x{350C97B0-3D7C-4EE8-BAA9-00BCB3D54227} symsetup=1
<SYSTEM32>\msiexec.exe /qn /l "{449F3A9E-9903-4a0d-A209-08030D45A935}.log" /x{449F3A9E-9903-4a0d-A209-08030D45A935} symsetup=1
<SYSTEM32>\msiexec.exe /qn /l "{34EEB1F5-E939-40A1-A6BA-957282A4B2C8}.log" /x{34EEB1F5-E939-40A1-A6BA-957282A4B2C8} symsetup=1
<SYSTEM32>\msiexec.exe /qn /l "{228F6876-A313-40A3-91C0-C3CBE6997D09}.log" /x{228F6876-A313-40A3-91C0-C3CBE6997D09} symsetup=1
<SYSTEM32>\msiexec.exe /qn /l "{2908F0CB-C1D4-447F-97A2-CFC135C9F8D4}.log" /x{2908F0CB-C1D4-447F-97A2-CFC135C9F8D4} symsetup=1
<SYSTEM32>\sc.exe STOP "spbbcsvc"
<SYSTEM32>\sc.exe CONFIG "spbbcsvc" START= DISABLED
<SYSTEM32>\sc.exe DELETE navapsvc
<SYSTEM32>\sc.exe STOP "navapsvc"
<SYSTEM32>\sc.exe CONFIG "navapsvc" START= DISABLED
<SYSTEM32>\msiexec.exe /qn /l "{C6F5B6CF-609C-428E-876F-CA83176C021B}.log" /x{C6F5B6CF-609C-428E-876F-CA83176C021B} symsetup=1
<SYSTEM32>\msiexec.exe /qn /l "{3B29A786-5803-4E9E-9B58-3014A5B4E519}.log" /x{3B29A786-5803-4E9E-9B58-3014A5B4E519} symsetup=1
<SYSTEM32>\msiexec.exe /V
<SYSTEM32>\sc.exe DELETE spbbcsvc
<SYSTEM32>\msiexec.exe /qn /l "{830D8CBD-C668-49e2-A969-C2C2106332E0}.log" /x{830D8CBD-C668-49e2-A969-C2C2106332E0} symsetup=1