Техническая информация
Вредоносные функции:
Завершает или пытается завершить
следующие системные процессы:
- <SYSTEM32>\svchost.exe
Изменения в файловой системе:
Создает следующие файлы:
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
Сетевая активность:
Подключается к:
- '12#.#48.11.75':9988
- '12#.#48.172.229':445
- '12#.#48.236.241':9988
- '12#.#48.246.24':9988
- '12#.#48.209.155':445
- '12#.#48.194.189':445
- '12#.#48.147.191':445
- '12#.#48.59.196':445
- '12#.#48.104.178':445
- '12#.#48.7.223':9988
- '12#.#48.112.34':9988
- '12#.#48.194.189':9988
- '12#.#48.12.10':9988
- '12#.#48.196.158':9988
- '12#.#48.241.214':9988
- '12#.#48.238.44':9988
- '12#.#48.110.26':9988
- '12#.#48.81.29':9988
- '12#.#48.213.221':9988
- '12#.#48.243.217':445
- '12#.#48.238.44':445
- '12#.#48.213.221':445
- '12#.#48.221.245':445
- '12#.#48.80.189':445
- '12#.#48.177.29':445
- '12#.#48.30.25':445
- '12#.#48.188.162':445
- '12#.#48.162.176':445
- '12#.#48.24.9':445
- '12#.#48.152.52':445
- '12#.#48.59.4':445
- '12#.#48.61.112':445
- '12#.#48.0.253':445
- '12#.#48.241.214':445
- '12#.#48.193.108':445
- '12#.#48.107.40':445
- '12#.#48.40.8':445
- '12#.#48.81.29':445
- '12#.#48.152.52':9988
- '12#.#48.147.191':9988
- '12#.#48.172.229':9988
- '12#.#48.209.155':9988
- '12#.#48.0.253':9988
- '12#.#48.221.245':9988
- '12#.#48.40.8':9988
- '12#.#48.59.4':9988
- '12#.#48.193.108':9988
- '12#.#48.104.178':9988
- '12#.#48.51.143':9988
- '12#.#48.221.173':9988
- '12#.#48.80.189':9988
- '12#.#48.188.162':9988
- '12#.#48.141.153':9988
- '12#.#48.59.196':9988
- '12#.#48.61.112':9988
- '12#.#48.31.221':9988
- '12#.#48.44.110':9988
- '12#.#48.108.111':9988
- '12#.#48.178.76':9988
- '12#.#48.130.201':9988
- '12#.#48.188.14':9988
- '12#.#48.20.87':9988
- '12#.#48.25.203':9988
- '12#.#48.109.20':9988
- '12#.#48.60.155':9988
- '12#.#48.76.108':9988
- '12#.#48.105.74':9988
- '12#.#48.243.217':9988
- '12#.#48.24.9':9988
- '12#.#48.162.176':9988
- '12#.#48.107.40':9988
- '12#.#48.30.25':9988
- '12#.#48.25.98':9988
- '12#.#48.110.201':9988
- '12#.#48.251.235':9988
- '12#.#48.177.29':9988
- '12#.#48.25.98':445
- '12#.#48.25.98':139
- '12#.#48.251.235':139
- '12#.#48.177.29':139
- '12#.#48.30.25':139
- '12#.#48.105.74':139
- '12#.#48.130.201':139
- '12#.#48.51.143':139
- '12#.#48.11.75':139
- '12#.#48.110.201':139
- '12#.#48.162.176':139
- '12#.#48.24.9':139
- '12#.#48.213.221':139
- '12#.#48.193.108':139
- '12#.#48.107.40':139
- '12#.#48.221.245':139
- '12#.#48.80.189':139
- '12#.#48.188.162':139
- '12#.#48.243.217':139
- '12#.#48.238.44':139
- '12#.#48.196.158':139
- '12#.#48.246.24':139
- '12#.#48.236.241':139
- '12#.#48.31.221':139
- '12#.#48.25.203':139
- '12#.#48.60.155':139
- '12#.#48.188.14':139
- '12#.#48.44.110':139
- '12#.#48.110.26':139
- '12#.#48.141.153':139
- '12#.#48.221.173':139
- '12#.#48.109.20':139
- '12#.#48.20.87':139
- '12#.#48.7.223':139
- '12#.#48.178.76':139
- '12#.#48.112.34':139
- '12#.#48.12.10':139
- '12#.#48.76.108':139
- '12#.#48.108.111':139
- '12#.#48.108.111':445
- '12#.#48.112.34':445
- '12#.#48.178.76':445
- '12#.#48.76.108':445
- '12#.#48.12.10':445
- '12#.#48.31.221':445
- '12#.#48.188.14':445
- '12#.#48.141.153':445
- '12#.#48.236.241':445
- '12#.#48.109.20':445
- '12#.#48.11.75':445
- '12#.#48.110.201':445
- '12#.#48.251.235':445
- '12#.#48.105.74':445
- '12#.#48.130.201':445
- '12#.#48.7.223':445
- '12#.#48.221.173':445
- '12#.#48.51.143':445
- '12#.#48.20.87':445
- '12#.#48.61.112':139
- '12#.#48.0.253':139
- '12#.#48.194.189':139
- '12#.#48.147.191':139
- '12#.#48.152.52':139
- '12#.#48.40.8':139
- '12#.#48.81.29':139
- '12#.#48.59.4':139
- '12#.#48.241.214':139
- '12#.#48.104.178':139
- '12#.#48.25.203':445
- '12#.#48.110.26':445
- '12#.#48.196.158':445
- '12#.#48.44.110':445
- '12#.#48.246.24':445
- '12#.#48.209.155':139
- '12#.#48.59.196':139
- '12#.#48.60.155':445
- '12#.#48.172.229':139
