Техническая информация
Вредоносные функции:
Завершает или пытается завершить
следующие системные процессы:
- <SYSTEM32>\svchost.exe
Изменения в файловой системе:
Создает следующие файлы:
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
Сетевая активность:
Подключается к:
- '21#.#6.246.217':9988
- '21#.#6.141.198':9988
- '21#.76.4.91':9988
- '21#.#6.102.150':9988
- '21#.76.60.4':9988
- '21#.#6.97.250':445
- '21#.#6.153.230':445
- '21#.#6.157.114':445
- '21#.#6.251.20':445
- '21#.#6.8.101':9988
- '21#.#6.116.254':9988
- '21#.#6.254.235':9988
- '21#.#6.197.231':9988
- '21#.#6.27.217':9988
- '21#.#6.97.66':9988
- '21#.#6.170.200':9988
- '21#.#6.200.202':9988
- '21#.#6.117.88':9988
- '21#.#6.66.24':9988
- '21#.#6.204.142':445
- '21#.#6.35.50':445
- '21#.#6.121.235':445
- '21#.#6.37.19':445
- '21#.#6.178.9':445
- '21#.#6.12.212':445
- '21#.#6.162.203':445
- '21#.#6.40.110':445
- '21#.#6.76.252':445
- '21#.#6.252.143':445
- '21#.#6.73.67':445
- '21#.#6.216.75':445
- '21#.#6.220.14':445
- '21#.#6.44.156':445
- '21#.#6.59.31':445
- '21#.#6.76.199':445
- '21#.#6.140.133':445
- '21#.#6.133.216':445
- '21#.#6.132.140':445
- '21#.#6.157.170':445
- '21#.#6.140.27':139
- '21#.#6.11.154':139
- '21#.#6.205.60':139
- '21#.#6.86.137':9988
- '21#.#6.5.220':139
- '21#.#6.26.11':139
- '21#.#6.108.168':139
- '21#.76.1.84':139
- '21#.#6.27.120':139
- '21#.#6.153.152':9988
- '21#.#6.162.203':9988
- '21#.#6.106.96':139
- '21#.#6.76.252':9988
- '21#.#6.252.143':9988
- '21#.#6.40.110':9988
- '21#.#6.10.243':139
- '21#.#6.58.22':139
- '21#.#6.9.232':9988
- '21#.#6.100.252':139
- '21#.#6.103.63':9988
- '21#.#6.66.21':139
- '21#.#6.148.212':139
- '21#.#6.126.38':139
- '21#.#6.160.160':139
- '21#.#6.174.92':139
- '21#.#6.89.21':139
- '21#.#6.88.105':9988
- '21#.#6.12.235':139
- '21#.#6.154.198':139
- '21#.#6.122.43':139
- '21#.#6.141.36':139
- '21#.#6.36.243':139
- '21#.#6.46.141':139
- '21#.#6.22.235':9988
- '21#.#6.14.239':139
- '21#.#6.134.30':139
- '21#.#6.2.170':139
- '21#.#6.171.53':139
- '21#.#6.115.82':139
- '21#.#6.40.110':139
- '21#.#6.153.152':139
- '21#.#6.162.203':139
- '21#.#6.9.232':139
- '21#.#6.86.137':139
- '21#.#6.121.47':139
- '21#.#6.27.217':139
- '21#.#6.86.163':139
- '21#.#6.162.173':139
- '21#.#6.252.143':139
- '21#.#6.73.67':139
- '21#.#6.37.19':139
- '21#.#6.140.133':139
- '21#.#6.133.216':139
- '21#.#6.178.9':139
- '21#.#6.12.212':139
- '21#.#6.76.252':139
- '21#.#6.35.50':139
- '21#.#6.121.235':139
- '21#.#6.216.219':139
- '21#.#6.141.198':139
- '21#.#6.197.231':139
- '21#.76.4.91':139
- '21#.#6.102.150':139
- '21#.76.60.4':139
- '21#.#6.129.155':139
- '21#.#6.88.105':139
- '21#.#6.246.217':139
- '21#.#6.105.13':139
- '21#.#6.8.101':139
- '21#.#6.116.254':139
- '21#.#6.254.235':139
- '21#.#6.22.235':139
- '21#.#6.103.63':139
- '21#.#6.97.66':139
- '21#.#6.170.200':139
- '21#.#6.200.202':139
- '21#.#6.117.88':139
- '21#.#6.66.24':139
- '21#.#6.97.66':445
- '21#.#6.117.88':445
- '21#.#6.116.254':445
- '21#.#6.254.235':445
- '21#.#6.66.24':445
- '21#.#6.8.101':445
- '21#.76.4.91':445
- '21#.#6.170.200':445
- '21#.#6.200.202':445
- '21#.#6.103.63':445
- '21#.#6.86.137':445
- '21#.#6.86.163':445
- '21#.#6.9.232':445
- '21#.#6.153.152':445
- '21#.#6.162.173':445
- '21#.#6.216.219':445
- '21#.#6.22.235':445
- '21#.#6.121.47':445
- '21#.#6.27.217':445
- '21#.#6.102.150':445
- '21#.#6.44.156':139
- '21#.#6.59.31':139
- '21#.#6.153.230':139
- '21#.#6.204.142':139
- '21#.#6.216.75':139
- '21#.#6.157.170':139
- '21#.#6.132.140':139
- '21#.#6.220.14':139
- '21#.#6.76.199':139
- '21#.#6.97.250':139
- '21#.#6.129.155':445
- '21#.#6.105.13':445
- '21#.#6.197.231':445
- '21#.#6.141.198':445
- '21#.#6.246.217':445
- '21#.#6.157.114':139
- '21#.#6.251.20':139
- '21#.#6.88.105':445
- '21#.76.60.4':445
