Trojan.KillProc.33819

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Завершает или пытается завершить

следующие системные процессы:

<SYSTEM32>\svchost.exe

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'82.##6.124.201':139
'82.##6.88.36':139
'82.##6.203.85':139
'82.##6.108.129':139
'82.##6.183.253':139
'82.##6.194.134':139
'82.##6.102.182':139
'82.##6.134.120':139
'82.##6.37.46':139
'82.##6.82.182':139
'82.##6.196.30':139
'82.##6.137.202':139
'82.##6.217.43':139
'82.##6.51.226':139
'82.##6.32.176':139
'82.##6.71.98':139
'82.##6.221.58':139
'82.##6.242.220':139
'82.##6.59.86':139
'82.##6.145.127':139
'82.##6.22.61':139
'82.##6.221.58':445
'82.##6.242.220':445
'82.##6.59.86':445
'82.##6.145.127':445
'82.##6.22.61':445
'82.##6.203.85':445
'82.##6.124.201':445
'82.##6.183.253':445
'82.##6.196.30':445
'82.##6.108.129':445
'82.##6.217.43':445
'82.##6.208.154':139
'82.##6.2.233':139
'82.##6.210.148':139
'82.##6.246.149':139
'82.##6.102.241':139
'82.##6.51.226':445
'82.##6.137.202':445
'82.##6.71.98':445
'82.##6.67.197':445
'82.##6.32.176':445
'82.##6.67.197':139
'82.##6.34.227':139
'82.##6.7.144':139
'82.##6.23.177':139
'82.##6.21.229':139
'82.##6.66.220':139
'82.##6.223.169':445
'82.##6.7.102':445
'82.##6.11.219':445
'82.##6.17.73':139
'82.##6.128.191':139
'82.##6.59.202':139
'82.##6.23.210':139
'82.##6.171.90':139
'82.##6.209.228':139
'82.##6.110.80':139
'82.##6.228.233':139
'82.##6.136.134':139
'82.#26.7.14':139
'82.##6.39.194':139
'82.##6.6.135':139
'82.##6.193.180':139
'82.##6.21.229':445
'82.##6.66.220':445
'82.##6.59.202':445
'82.##6.136.134':445
'82.#26.7.14':445
'82.##6.17.73':445
'82.##6.128.191':445
'82.##6.7.144':445
'82.##6.23.177':445
'82.##6.34.227':445
'82.##6.39.194':445
'82.##6.110.80':445
'82.##6.228.233':445
'82.##6.229.242':445
'82.##6.175.123':445
'82.##6.44.20':445
'82.##6.6.135':445
'82.##6.193.180':445
'82.##6.171.90':445
'82.##6.209.228':445
'82.##6.23.210':445
'82.##6.88.36':445
'82.##6.113.241':445
'82.##6.94.32':139
'82.##6.57.208':445
'82.##6.73.132':445
'82.##6.208.97':445
'82.##6.87.226':139
'82.##6.46.134':139
'82.##6.42.132':139
'82.##6.186.220':139
'82.##6.132.84':139
'82.##6.103.207':445
'82.##6.220.227':445
'82.##6.64.43':445
'82.##6.169.25':445
'82.##6.139.178':445
'82.##6.202.109':445
'82.##6.152.199':445
'82.##6.86.197':445
'82.##6.13.239':445
'82.##6.76.108':445
'82.##6.93.149':445
'82.##6.13.216':139
'82.#26.6.74':139
'82.##6.15.126':139
'82.##6.109.159':139
'82.##6.26.55':139
'82.##6.207.38':139
'82.##6.221.77':139
'82.##6.210.64':139
'82.##6.40.212':139
'82.##6.18.102':139
'82.##6.146.228':139
'82.#26.7.26':139
'82.##6.189.43':139
'82.##6.230.117':139
'82.##6.7.249':139
'82.#26.79.8':139
'82.##6.159.226':139
'82.##6.97.49':139
'82.##6.101.50':139
'82.##6.70.89':139
'82.##6.45.62':139
'82.##6.49.71':445
'82.##6.24.42':139
'82.##6.111.211':139
'82.##6.248.15':139
'82.##6.141.75':139
'82.##6.29.86':139
'82.##6.139.178':139
'82.##6.202.109':139
'82.##6.49.71':139
'82.##6.143.155':139
'82.##6.9.225':139
'82.##6.116.68':139
'82.##6.194.134':445
'82.##6.102.182':445
'82.##6.134.120':445
'82.##6.37.46':445
'82.##6.82.182':445
'82.##6.208.154':445
'82.##6.2.233':445
'82.##6.210.148':445
'82.##6.246.149':445
'82.##6.102.241':445
'82.##6.141.75':445
'82.##6.29.86':445
'82.##6.116.68':445
'82.##6.57.208':139
'82.##6.113.241':139
'82.##6.143.155':445
'82.##6.9.225':445
'82.##6.111.211':445
'82.##6.248.15':445
'82.##6.24.42':445
'82.##6.208.97':139
'82.##6.76.108':139
'82.##6.93.149':139
'82.##6.64.43':139
'82.##6.169.25':139
'82.##6.220.227':139
'82.##6.103.207':139
'82.##6.73.132':139
'82.##6.86.197':139
'82.##6.13.239':139
'82.##6.152.199':139
'82.##6.84.81':445
'82.##6.14.238':445
'82.##6.13.32':445
'82.##6.239.20':445
'82.##6.251.110':445
'82.##6.229.194':445
'82.##6.165.230':445
'82.##6.124.105':445
'82.##6.247.85':445
'82.##6.127.34':445
'82.##6.186.239':445
'82.##6.18.158':139
'82.##6.49.105':139
'82.##6.141.28':139
'82.##6.191.142':139
'82.##6.112.159':139
'82.##6.72.224':445
'82.##6.205.10':445
'82.##6.94.13':139
'82.##6.30.121':139
'82.##6.100.118':139
'82.##6.35.141':445
'82.##6.91.253':445
'82.##6.248.75':445
'82.##6.18.142':445
'82.##6.192.5':445
'82.##6.126.120':445
'82.##6.220.38':445
'82.#26.0.96':445
'82.##6.236.64':445
'82.##6.84.250':445
'82.##6.34.83':445
'82.##6.99.15':445
'82.##6.8.198':445
'82.##6.49.33':445
'82.##6.185.3':445
'82.##6.201.3':445
'82.##6.62.121':445
'82.##6.85.235':445
'82.##6.100.140':445
'82.##6.6.148':445
'82.##6.255.209':445
'82.##6.38.212':139
'82.##6.201.3':139
'82.##6.49.33':139
'82.##6.185.3':139
'82.##6.229.194':139
'82.##6.165.230':139
'82.##6.255.209':139
'82.##6.100.140':139
'82.##6.6.148':139
'82.##6.99.15':139
'82.##6.8.198':139
'82.##6.124.105':139
'82.##6.239.20':139
'82.##6.251.110':139
'82.##6.186.239':139
'82.##6.205.10':139
'82.##6.72.224':139
'82.##6.247.85':139
'82.##6.127.34':139
'82.##6.14.238':139
'82.##6.13.32':139
'82.##6.84.81':139
'82.##6.232.134':139
'82.#26.3.77':139
'82.##6.187.84':139
'82.##6.126.120':139
'82.##6.220.38':139
'82.##6.239.191':139
'82.##6.225.18':139
'82.##6.30.172':139
'82.##6.51.178':139
'82.##6.62.201':139
'82.#26.0.96':139
'82.##6.18.142':139
'82.##6.192.5':139
'82.##6.34.83':139
'82.##6.62.121':139
'82.##6.85.235':139
'82.##6.236.64':139
'82.##6.84.250':139
'82.##6.91.253':139
'82.##6.248.75':139
'82.##6.35.141':139
'82.##6.187.84':445
'82.##6.189.31':445
'82.##6.203.140':445
'82.##6.98.217':445
'82.#26.3.94':445
'82.##6.134.7':445
'82.##6.21.118':445
'82.##6.131.21':445
'82.##6.112.253':445
'82.##6.68.74':445
'82.##6.11.112':445
'82.##6.119.211':139
'82.##6.102.220':139
'82.##6.119.143':139
'82.##6.148.93':139
'82.##6.164.199':139
'82.##6.48.209':139
'82.##6.109.38':139
'82.##6.126.169':139
'82.##6.60.233':139
'82.##6.239.131':139
'82.##6.244.238':139
'82.##6.119.211':445
'82.##6.11.219':139
'82.##6.126.169':445
'82.##6.60.233':445
'82.##6.109.38':445
'82.##6.44.20':139
'82.##6.229.242':139
'82.##6.175.123':139
'82.##6.223.169':139
'82.##6.7.102':139
'82.##6.244.238':445
'82.##6.133.53':445
'82.##6.164.199':445
'82.##6.16.191':445
'82.##6.17.131':445
'82.##6.25.24':445
'82.##6.119.143':445
'82.##6.239.131':445
'82.##6.102.220':445
'82.##6.48.209':445
'82.##6.148.93':445
'82.##6.133.53':139
'82.##6.100.118':445
'82.##6.94.13':445
'82.##6.30.121':445
'82.##6.18.158':445
'82.##6.49.105':445
'82.##6.14.238':9988
'82.##6.84.81':9988
'82.##6.72.224':9988
'82.##6.186.239':9988
'82.##6.205.10':9988
'82.##6.141.28':445
'82.##6.62.201':445
'82.##6.30.172':445
'82.##6.51.178':445
'82.##6.232.134':445
'82.#26.3.77':445
'82.##6.191.142':445
'82.##6.112.159':445
'82.##6.38.212':445
'82.##6.239.191':445
'82.##6.225.18':445
'82.##6.11.112':139
'82.##6.112.253':139
'82.##6.68.74':139
'82.##6.189.31':139
'82.##6.203.140':139
'82.##6.25.24':139
'82.##6.16.191':139
'82.##6.17.131':139
'82.##6.21.118':139
'82.##6.131.21':139
'82.##6.98.217':139
'82.##6.99.15':9988
'82.##6.8.198':9988
'82.##6.201.3':9988
'82.##6.229.194':9988
'82.##6.165.230':9988
'82.#26.3.94':139
'82.##6.134.7':139
'82.##6.38.212':9988
'82.##6.6.148':9988
'82.##6.255.209':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней