Trojan.KillProc.27279

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Завершает или пытается завершить

следующие системные процессы:

<SYSTEM32>\drwtsn32.exe

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe

Сетевая активность:

Подключается к:

'59.##3.96.108':445
'59.#33.9.46':445
'59.##3.124.49':445
'59.##3.27.89':445
'59.##3.98.72':445
'59.##3.226.183':445
'59.##3.116.181':139
'59.##3.56.134':139
'59.#33.2.24':139
'59.##3.3.128':445
'59.##3.76.237':139
'59.##3.128.238':445
'59.##3.170.57':445
'59.##3.16.240':445
'59.##3.66.213':445
'59.##3.18.158':445
'59.##3.107.158':445
'59.##3.185.18':445
'59.##3.26.38':445
'59.##3.17.22':445
'59.##3.47.25':445
'59.##3.201.62':445
'59.##3.91.41':445
'59.##3.84.164':139
'59.##3.124.49':139
'59.##3.17.22':139
'59.##3.192.17':445
'59.##3.185.18':139
'59.##3.128.238':139
'59.##3.98.72':139
'59.##3.96.108':139
'59.##3.96.90':445
'59.##3.191.3':445
'59.##3.36.106':445
'59.##3.27.89':139
'59.##3.26.38':139
'59.##3.91.41':139
'59.##3.64.135':139
'59.##3.107.158':139
'59.##3.18.158':139
'59.##3.47.154':139
'59.##3.170.57':139
'59.##3.16.240':139
'59.##3.47.25':139
'59.##3.201.94':445
'59.##3.66.213':139
'59.##3.201.62':139
'59.##3.51.249':139
'59.##3.216.168':139
'59.##3.52.217':139
'59.##3.127.200':445
'59.##3.197.254':139
'59.##3.30.120':139
'59.##3.58.123':139
'59.#33.7.92':139
'59.##3.188.157':139
'59.##3.42.227':139
'59.##3.110.222':139
'59.##3.199.228':445
'59.##3.9.101':445
'59.##3.17.93':445
'59.##3.122.81':445
'59.##3.205.116':445
'59.##3.154.68':445
'59.##3.252.13':445
'59.##3.233.122':445
'59.##3.203.199':445
'59.##3.113.242':445
'59.##3.123.13':445
'59.##3.240.49':445
'59.##3.4.126':139
'59.##3.199.228':139
'59.##3.127.200':139
'59.##3.203.199':139
'59.##3.17.93':139
'59.##3.113.242':139
'59.##3.76.237':445
'59.##3.47.154':445
'59.##3.84.164':445
'59.##3.56.134':445
'59.##3.116.181':445
'59.#33.2.24':445
'59.##3.123.13':139
'59.##3.53.123':139
'59.##3.122.81':139
'59.##3.251.50':139
'59.##3.84.213':139
'59.##3.111.212':139
'59.##3.154.68':139
'59.##3.240.49':139
'59.##3.233.122':139
'59.##3.252.13':139
'59.##3.205.116':139
'59.##3.9.101':139
'59.##3.167.22':445
'59.##3.96.246':445
'59.##3.164.30':445
'59.##3.181.167':445
'59.#33.3.59':445
'59.##3.183.26':445
'59.##3.176.107':445
'59.##3.65.81':445
'59.##3.241.12':445
'59.##3.249.39':445
'59.##3.135.186':445
'59.##3.104.228':445
'59.##3.212.202':445
'59.##3.51.228':445
'59.##3.154.80':445
'59.##3.35.112':139
'59.##3.67.230':445
'59.##3.245.174':445
'59.##3.107.88':445
'59.##3.135.221':445
'59.##3.221.10':445
'59.##3.108.101':445
'59.##3.97.250':445
'59.##3.77.206':445
'59.##3.129.145':445
'59.##3.212.202':139
'59.##3.96.246':139
'59.#33.3.59':139
'59.##3.181.167':139
'59.##3.108.101':139
'59.##3.164.30':139
'59.##3.104.228':139
'59.##3.249.39':139
'59.##3.135.186':139
'59.##3.176.107':139
'59.##3.149.152':139
'59.##3.221.10':139
'59.##3.245.174':139
'59.##3.77.206':139
'59.##3.67.230':139
'59.##3.62.109':445
'59.##3.218.22':445
'59.##3.51.228':139
'59.##3.135.221':139
'59.##3.107.88':139
'59.##3.183.26':139
'59.##3.154.80':139
'59.##3.97.250':139
'59.##3.136.246':445
'59.##3.150.5':445
'59.##3.78.139':445
'59.##3.140.166':445
'59.##3.68.86':445
'59.##3.249.69':445
'59.##3.35.112':445
'59.##3.36.106':139
'59.##3.145.157':445
'59.##3.3.243':445
'59.##3.200.253':445
'59.##3.181.131':445
'59.##3.3.128':139
'59.##3.115.161':445
'59.##3.226.183':139
'59.##3.137.218':445
'59.#33.9.46':139
'59.##3.193.7':445
'59.##3.11.247':445
'59.##3.116.218':445
'59.##3.46.35':445
'59.##3.251.94':445
'59.##3.236.218':445
'59.##3.191.3':139
'59.##3.68.86':139
'59.##3.150.5':139
'59.##3.140.166':139
'59.##3.181.131':139
'59.##3.229.141':139
'59.##3.136.246':139
'59.##3.145.157':139
'59.##3.3.243':139
'59.##3.200.253':139
'59.##3.249.69':139
'59.##3.78.139':139
'59.##3.116.218':139
'59.##3.167.22':139
'59.##3.193.7':139
'59.##3.96.90':139
'59.##3.35.80':139
'59.##3.137.218':139
'59.##3.115.161':139
'59.##3.11.247':139
'59.##3.236.218':139
'59.##3.46.35':139
'59.##3.251.94':139
'59.##3.216.28':139
'59.##3.147.241':139
'59.##3.95.198':139
'59.##3.18.80':139
'59.##3.231.118':139
'59.##3.211.221':139
'59.##3.43.99':139
'59.##3.166.5':139
'59.##3.254.238':445
'59.##3.90.64':139
'59.##3.30.242':139
'59.##3.58.43':139
'59.##3.140.175':139
'59.##3.86.49':139
'59.##3.121.76':139
'59.##3.221.180':139
'59.##3.174.228':445
'59.##3.234.173':139
'59.##3.106.107':139
'59.##3.243.131':139
'59.##3.97.186':139
'59.##3.47.169':139
'59.##3.63.61':139
'59.##3.143.148':139
'59.##3.159.164':445
'59.##3.228.105':445
'59.##3.104.79':445
'59.##3.31.215':445
'59.##3.192.198':445
'59.##3.179.176':445
'59.##3.119.129':445
'59.##3.34.85':445
'59.##3.64.37':445
'59.##3.191.169':445
'59.##3.72.130':445
'59.##3.129.72':445
'59.##3.84.116':445
'59.##3.138.117':445
'59.##3.225.68':445
'59.##3.214.157':445
'59.##3.20.37':139
'59.##3.160.162':445
'59.##3.43.86':445
'59.##3.228.224':139
'59.##3.29.115':445
'59.##3.174.228':139
'59.##3.170.219':445
'59.##3.148.198':445
'59.##3.209.99':139
'59.##3.112.82':139
'59.##3.17.78':139
'59.##3.199.188':139
'59.##3.105.130':139
'59.##3.166.46':139
'59.##3.221.180':445
'59.##3.86.49':445
'59.##3.44.108':139
'59.##3.18.199':139
'59.##3.176.104':139
'59.##3.243.54':139
'59.##3.38.219':445
'59.##3.172.236':139
'59.##3.237.178':139
'59.##3.220.110':139
'59.##3.110.32':139
'59.##3.38.219':139
'59.##3.13.208':139
'59.#33.3.10':139
'59.##3.193.74':139
'59.##3.11.119':139
'59.##3.93.66':139
'59.##3.108.225':139
'59.##3.166.5':445
'59.##3.95.198':445
'59.##3.43.99':445
'59.##3.231.118':445
'59.##3.18.80':445
'59.##3.58.43':445
'59.##3.20.37':445
'59.##3.228.224':445
'59.##3.147.241':445
'59.##3.30.242':445
'59.##3.90.64':445
'59.##3.211.221':445
'59.##3.121.76':445
'59.##3.106.107':445
'59.##3.110.75':139
'59.##3.225.110':139
'59.##3.86.165':139
'59.##3.143.148':445
'59.##3.243.131':445
'59.##3.140.175':445
'59.##3.97.186':445
'59.##3.63.61':445
'59.##3.47.169':445
'59.##3.159.199':445
'59.##3.31.149':139
'59.##3.106.179':139
'59.##3.14.116':139
'59.##3.109.118':139
'59.##3.26.97':139
'59.##3.201.22':139
'59.##3.27.163':139
'59.##3.11.135':139
'59.##3.251.159':139
'59.#33.7.31':139
'59.##3.152.251':139
'59.##3.78.213':139
'59.##3.84.209':445
'59.##3.199.110':445
'59.##3.136.39':445
'59.##3.188.185':445
'59.##3.150.39':445
'59.##3.92.121':445
'59.##3.198.16':139
'59.##3.16.80':139
'59.##3.185.198':445
'59.##3.172.206':445
'59.##3.215.190':445
'59.##3.188.185':139
'59.##3.110.222':445
'59.##3.215.190':139
'59.##3.30.120':445
'59.##3.188.157':445
'59.##3.51.249':445
'59.##3.4.126':445
'59.##3.251.50':445
'59.##3.53.123':445
'59.##3.111.212':445
'59.##3.84.213':445
'59.##3.84.209':139
'59.##3.58.123':445
'59.##3.150.39':139
'59.##3.172.206':139
'59.##3.92.121':139
'59.##3.185.198':139
'59.##3.199.110':139
'59.##3.136.39':139
'59.##3.197.254':445
'59.##3.42.227':445
'59.##3.52.217':445
'59.#33.7.92':445
'59.##3.216.168':445
'59.##3.129.72':139
'59.##3.72.130':139
'59.##3.151.160':139
'59.##3.148.198':139
'59.##3.138.117':139
'59.##3.192.198':139
'59.##3.159.199':139
'59.##3.31.215':139
'59.##3.59.181':139
'59.##3.119.129':139
'59.##3.179.176':139
'59.##3.43.86':139
'59.##3.59.181':445
'59.##3.90.254':445
'59.##3.48.160':445
'59.##3.79.91':445
'59.##3.154.1':445
'59.##3.225.68':139
'59.##3.160.162':139
'59.##3.170.219':139
'59.##3.214.157':139
'59.##3.159.164':139
'59.##3.254.238':139
'59.##3.104.79':139
'59.##3.27.163':445
'59.##3.14.116':445
'59.##3.109.118':445
'59.##3.106.179':445
'59.##3.152.251':445
'59.##3.251.159':445
'59.#33.7.31':445
'59.##3.11.135':445
'59.##3.31.149':445
'59.##3.201.22':445
'59.##3.26.97':445
'59.##3.16.80':445
'59.##3.90.254':139
'59.##3.34.85':139
'59.##3.79.91':139
'59.##3.228.105':139
'59.##3.29.115':139
'59.##3.64.37':139
'59.##3.154.1':139
'59.##3.198.16':445
'59.##3.191.169':139
'59.##3.84.116':139
'59.##3.48.160':139
'59.##3.113.78':139
'59.##3.189.168':139
'59.##3.12.99':139
'59.##3.251.127':139
'59.##3.39.45':139
'59.##3.112.152':139
'59.##3.20.196':139
'59.##3.227.149':139
'59.##3.88.76':139
'59.##3.131.35':139
'59.##3.31.156':139
'59.##3.24.128':139
'59.##3.211.80':139
'59.##3.84.159':139
'59.#33.2.29':139
'59.##3.90.225':139
'59.#33.87.1':139
'59.##3.191.25':139
'59.##3.123.250':139
'59.##3.111.116':139
'59.##3.233.96':139
'59.##3.156.249':139
'59.##3.57.177':139
'59.##3.186.23':139
'59.##3.93.135':9988
'59.##3.25.231':445
'59.##3.133.51':9988
'59.##3.57.226':9988
'59.##3.156.127':9988
'59.##3.230.230':445
'59.##3.164.145':445
'59.##3.230.167':445
'59.##3.130.106':445
'59.##3.77.130':445
'59.##3.177.32':445
'59.##3.25.231':9988
'59.##3.207.217':139
'59.##3.178.185':139
'59.##3.93.80':139
'59.##3.220.178':139
'59.##3.79.252':139
'59.##3.195.79':139
'59.##3.191.224':139
'59.##3.210.244':139
'59.##3.74.70':139
'59.##3.0.195':139
'59.##3.2.154':139
'59.##3.113.78':445
'59.##3.189.168':445
'59.##3.112.152':445
'59.##3.39.45':445
'59.##3.12.99':445
'59.##3.131.35':445
'59.##3.227.149':445
'59.##3.186.23':445
'59.##3.20.196':445
'59.##3.88.76':445
'59.##3.31.156':445
'59.##3.251.127':445
'59.##3.233.96':445
'59.##3.57.177':445
'59.##3.156.249':445
'59.##3.84.159':445
'59.##3.191.25':445
'59.##3.123.250':445
'59.##3.134.238':139
'59.##3.24.128':445
'59.##3.253.244':139
'59.##3.111.116':445
'59.##3.252.134':139
'59.##3.220.178':445
'59.##3.85.200':139
'59.##3.108.238':139
'59.##3.127.120':139
'59.##3.21.53':139
'59.##3.18.227':139
'59.##3.96.179':139
'59.##3.47.159':139
'59.##3.228.236':139
'59.##3.154.93':139
'59.##3.211.118':139
'59.#33.42.2':139
'59.##3.133.110':139
'59.##3.79.252':445
'59.##3.0.195':445
'59.##3.207.217':445
'59.##3.93.80':445
'59.##3.178.185':445
'59.##3.2.154':445
'59.##3.210.244':445
'59.##3.237.126':139
'59.##3.191.224':445
'59.##3.195.79':445
'59.##3.74.70':445
'59.##3.46.122':445
'59.##3.21.131':139
'59.##3.144.163':139
'59.##3.167.4':139
'59.##3.180.222':139
'59.##3.223.21':139
'59.##3.223.152':139
'59.#33.8.51':139
'59.##3.93.135':139
'59.##3.44.25':139
'59.##3.245.51':139
'59.##3.66.36':139
'59.##3.198.180':139
'59.##3.46.122':139
'59.##3.122.164':139
'59.##3.230.167':139
'59.##3.130.106':139
'59.##3.164.145':139
'59.##3.252.81':139
'59.##3.134.0':139
'59.##3.0.199':139
'59.##3.40.54':139
'59.##3.73.228':139
'59.##3.57.226':139
'59.##3.103.141':139
'59.##3.125.1':139
'59.##3.171.221':139
'59.##3.126.254':139
'59.##3.187.117':139
'59.##3.38.127':139
'59.##3.47.197':139
'59.##3.238.121':139
'59.##3.235.238':139
'59.##3.63.185':139
'59.##3.146.145':139
'59.##3.169.227':139
'59.##3.32.36':139
'59.##3.72.89':139
'59.##3.236.123':139
'59.##3.245.211':139
'59.##3.143.240':139
'59.##3.225.145':139
'59.##3.40.189':139
'59.##3.133.51':139
'59.##3.140.67':139
'59.##3.195.35':139
'59.##3.156.127':139
'59.##3.189.37':139
'59.##3.223.152':445
'59.##3.66.36':445
'59.##3.44.25':445
'59.##3.144.163':445
'59.##3.245.51':445
'59.##3.93.135':445
'59.##3.103.141':445
'59.##3.143.240':445
'59.##3.245.211':445
'59.##3.225.145':445
'59.#33.8.51':445
'59.##3.21.131':445
'59.##3.73.228':445
'59.##3.40.54':445
'59.##3.57.226':445
'59.##3.122.164':445
'59.##3.252.81':445
'59.##3.134.0':445
'59.##3.223.21':445
'59.##3.167.4':445
'59.##3.198.180':445
'59.##3.0.199':445
'59.##3.180.222':445
'59.##3.40.189':445
'59.##3.146.145':445
'59.##3.238.121':445
'59.##3.169.227':445
'59.##3.125.1':445
'59.##3.47.197':445
'59.##3.38.127':445
'59.##3.77.130':139
'59.##3.177.32':139
'59.##3.230.230':139
'59.##3.187.117':445
'59.##3.25.231':139
'59.##3.171.221':445
'59.##3.72.89':445
'59.##3.156.127':445
'59.##3.133.51':445
'59.##3.195.35':445
'59.##3.236.123':445
'59.##3.189.37':445
'59.##3.63.185':445
'59.##3.235.238':445
'59.##3.126.254':445
'59.##3.32.36':445
'59.##3.140.67':445
'59.##3.185.191':139
'59.##3.188.90':139
'59.##3.192.15':139
'59.##3.15.44':139
'59.#33.97.2':139
'59.##3.21.226':139
'59.##3.191.115':139
'59.##3.89.225':445
'59.##3.187.217':445
'59.##3.192.154':445
'59.##3.211.240':139
'59.##3.99.150':139
'59.##3.36.170':139
'59.##3.121.146':139
'59.##3.122.23':139
'59.##3.109.190':139
'59.##3.159.229':445
'59.##3.248.120':139
'59.##3.186.168':139
'59.##3.135.82':139
'59.##3.68.65':139
'59.##3.245.117':139
'59.##3.220.8':139
'59.#33.78.6':445
'59.##3.192.154':139
'59.##3.89.225':139
'59.##3.95.213':445
'59.##3.99.222':445
'59.##3.213.99':445
'59.##3.75.187':139
'59.##3.30.149':139
'59.##3.114.245':139
'59.#33.78.6':139
'59.##3.187.217':139
'59.##3.217.26':139
'59.##3.236.168':445
'59.##3.217.26':445
'59.##3.216.249':445
'59.##3.75.187':445
'59.##3.20.184':445
'59.##3.30.149':445
'59.##3.114.245':445
'59.##3.209.206':445
'59.##3.75.66':445
'59.##3.169.5':445
'59.##3.206.236':445
'59.##3.77.105':445
'59.##3.28.171':445
'59.##3.90.221':445
'59.##3.223.58':445
'59.##3.28.50':445
'59.##3.200.115':445
'59.##3.36.170':445
'59.##3.220.8':445
'59.##3.248.120':445
'59.##3.245.117':445
'59.##3.122.23':445
'59.##3.68.65':445
'59.##3.242.171':445
'59.##3.129.145':139
'59.##3.62.109':139
'59.##3.186.241':445
'59.##3.65.81':139
'59.##3.241.12':139
'59.##3.218.194':445
'59.##3.137.79':445
'59.##3.218.22':139
'59.##3.222.103':445
'59.##3.255.142':445
'59.##3.143.137':445
'59.##3.186.168':445
'59.##3.250.204':139
'59.##3.200.115':139
'59.##3.218.194':139
'59.##3.137.79':139
'59.##3.222.103':139
'59.##3.242.171':139
'59.##3.186.241':139
'59.##3.28.171':139
'59.##3.223.58':139
'59.##3.90.221':139
'59.##3.28.50':139
'59.##3.143.137':139
'59.##3.15.44':445
'59.##3.192.15':445
'59.##3.185.191':445
'59.##3.135.82':445
'59.##3.99.150':445
'59.#33.97.2':445
'59.##3.211.240':445
'59.##3.255.142':139
'59.##3.191.115':445
'59.##3.188.90':445
'59.##3.21.226':445
'59.##3.216.249':139
'59.##3.38.249':139
'59.##3.72.224':139
'59.##3.109.61':139
'59.##3.74.149':139
'59.##3.13.181':139
'59.##3.190.13':139
'59.##3.149.9':139
'59.##3.11.112':139
'59.##3.141.61':139
'59.##3.98.213':139
'59.##3.130.164':139
'59.##3.74.149':445
'59.##3.1.174':139
'59.##3.190.10':139
'59.##3.190.249':139
'59.##3.24.58':139
'59.##3.151.63':139
'59.##3.42.211':139
'59.##3.10.124':139
'59.##3.179.133':139
'59.##3.21.204':139
'59.##3.31.21':139
'59.##3.21.71':139
'59.##3.71.113':139
'59.##3.211.118':445
'59.##3.237.126':445
'59.##3.154.93':445
'59.##3.96.179':445
'59.##3.85.200':445
'59.#33.42.2':445
'59.##3.228.236':445
'59.##3.90.225':445
'59.##3.47.159':445
'59.#33.87.1':445
'59.#33.2.29':445
'59.##3.127.120':445
'59.##3.253.244':445
'59.##3.134.238':445
'59.##3.252.134':445
'59.##3.113.11':139
'59.##3.189.139':139
'59.##3.82.183':139
'59.##3.21.53':445
'59.##3.211.80':445
'59.##3.18.227':445
'59.##3.38.173':139
'59.##3.133.110':445
'59.##3.95.213':139
'59.##3.24.58':445
'59.##3.136.88':445
'59.#33.0.60':445
'59.##3.214.190':445
'59.##3.91.100':445
'59.##3.1.174':445
'59.##3.31.21':445
'59.##3.42.211':445
'59.##3.151.63':445
'59.##3.190.249':445
'59.##3.213.99':139
'59.##3.209.206':139
'59.##3.75.66':139
'59.##3.63.28':139
'59.##3.63.28':445
'59.##3.20.184':139
'59.##3.206.236':139
'59.##3.77.105':139
'59.##3.99.222':139
'59.##3.169.5':139
'59.##3.236.168':139
'59.##3.169.242':445
'59.##3.190.10':445
'59.##3.113.11':445
'59.##3.189.139':445
'59.##3.71.113':445
'59.##3.149.9':445
'59.##3.11.112':445
'59.##3.82.183':445
'59.##3.136.88':139
'59.##3.91.100':139
'59.#33.0.60':139
'59.##3.38.173':445
'59.##3.214.190':139
'59.##3.141.61':445
'59.##3.179.133':445
'59.##3.13.181':445
'59.##3.10.124':445
'59.##3.21.71':445
'59.##3.21.204':445
'59.##3.109.61':445
'59.##3.98.213':445
'59.##3.130.164':445
'59.##3.190.13':445
'59.##3.38.249':445
'59.##3.72.224':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней