Техническая информация
Вредоносные функции:
Завершает или пытается завершить
следующие системные процессы:
- <SYSTEM32>\svchost.exe
Изменения в файловой системе:
Создает следующие файлы:
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
Сетевая активность:
Подключается к:
- '13#.#15.186.150':445
- '13#.#15.75.107':445
- '13#.#15.58.167':445
- '13#.#15.167.219':445
- '13#.#15.11.245':445
- '13#.#15.226.0':445
- '13#.#15.14.191':445
- '13#.#15.180.213':445
- '13#.#15.58.244':445
- '13#.#15.221.161':9988
- '13#.#15.19.5':9988
- '13#.#15.205.56':9988
- '13#.#15.141.171':9988
- '13#.#15.88.24':445
- '13#.#15.162.83':445
- '13#.#15.81.44':445
- '13#.#15.113.41':445
- '13#.#15.1.75':445
- '13#.#15.186.249':445
- '13#.#15.148.120':445
- '13#.#15.51.138':445
- '13#.#15.103.18':445
- '13#.#15.234.211':445
- '13#.#15.224.122':445
- '13#.#15.183.16':445
- '13#.#15.184.234':445
- '13#.#15.162.51':445
- '13#.#15.90.24':445
- '13#.#15.23.214':445
- '13#.#15.75.31':445
- '13#.#15.42.68':445
- '13#.#15.148.211':445
- '13#.#15.58.182':445
- '13#.#15.213.178':445
- '13#.#15.99.63':445
- '13#.#15.61.6':9988
- '13#.#15.1.75':9988
- '13#.#15.75.31':9988
- '13#.#15.11.245':9988
- '13#.#15.226.0':9988
- '13#.#15.23.214':9988
- '13#.#15.148.211':9988
- '13#.#15.90.24':9988
- '13#.#15.99.63':9988
- '13#.#15.180.213':9988
- '13#.#15.162.83':9988
- '13#.#15.88.24':9988
- '13#.#15.81.44':9988
- '13#.#15.113.41':9988
- '13#.#15.75.107':9988
- '13#.#15.167.219':9988
- '13#.#15.58.167':9988
- '13#.#15.58.244':9988
- '13#.#15.213.178':9988
- '13#.#15.14.191':9988
- '13#.#15.42.68':9988
- '13#.#15.48.145':9988
- '13#.#15.1.106':9988
- '13#.#15.43.55':9988
- '13#.#15.205.60':9988
- '13#.#15.162.51':9988
- '13#.#15.234.211':9988
- '13#.#15.255.141':9988
- '13#.#15.103.18':9988
- '13#.#15.183.16':9988
- '13#.#15.58.182':9988
- '13#.#15.148.120':9988
- '13#.115.2.8':9988
- '13#.#15.202.206':9988
- '13#.#15.184.234':9988
- '13#.#15.44.84':9988
- '13#.#15.183.16':139
- '13#.#15.184.234':139
- '13#.#15.186.249':139
- '13#.#15.148.120':139
- '13#.115.2.8':139
- '13#.#15.202.206':139
- '13#.#15.234.211':139
- '13#.#15.224.122':139
- '13#.#15.103.18':139
- '13#.#15.213.178':139
- '13#.#15.99.63':139
- '13#.#15.90.24':139
- '13#.#15.23.214':139
- '13#.#15.162.51':139
- '13#.#15.51.138':139
- '13#.#15.148.211':139
- '13#.#15.58.182':139
- '13#.#15.41.22':139
- '13#.#15.48.145':139
- '13#.#15.221.161':139
- '13#.#15.172.79':139
- '13#.#15.35.111':139
- '13#.#15.1.106':139
- '13#.#15.19.5':139
- '13#.#15.161.63':139
- '13#.#15.78.20':139
- '13#.#15.141.171':139
- '13#.#15.205.60':139
- '13#.#15.61.6':139
- '13#.#15.44.84':139
- '13#.#15.43.55':139
- '13#.#15.81.151':139
- '13#.#15.255.141':139
- '13#.#15.205.56':139
- '13#.#15.116.228':139
- '13#.#15.42.68':139
- '13#.#15.141.171':445
- '13#.#15.172.79':445
- '13#.#15.81.151':445
- '13#.#15.255.141':445
- '13#.#15.221.161':445
- '13#.#15.161.63':445
- '13#.#15.35.111':445
- '13#.#15.48.145':445
- '13#.#15.116.228':445
- '13#.#15.41.22':445
- '13#.#15.44.84':445
- '13#.115.2.8':445
- '13#.#15.202.206':445
- '13#.#15.61.6':445
- '13#.#15.205.56':445
- '13#.#15.43.55':445
- '13#.#15.205.60':445
- '13#.#15.1.106':445
- '13#.#15.14.191':139
- '13#.#15.180.213':139
- '13#.#15.186.150':139
- '13#.#15.75.107':139
- '13#.#15.1.75':139
- '13#.#15.75.31':139
- '13#.#15.11.245':139
- '13#.#15.226.0':139
- '13#.#15.167.219':139
- '13#.#15.81.44':139
- '13#.#15.113.41':139
- '13#.#15.78.20':445
- '13#.#15.19.5':445
- '13#.#15.58.244':139
- '13#.#15.58.167':139
- '13#.#15.88.24':139
- '13#.#15.162.83':139
