Trojan.KillProc.33821

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Завершает или пытается завершить

следующие системные процессы:

<SYSTEM32>\svchost.exe

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'58.##.117.51':445
'58.##.23.134':445
'58.##.87.204':445
'58.#3.3.27':445
'58.##.79.225':445
'58.##.50.192':445
'58.##.174.199':139
'58.##.82.175':139
'58.##.215.40':139
'58.##.186.127':139
'58.##.30.232':139
'58.##.96.182':139
'58.##.87.204':139
'58.##.164.209':445
'58.##.84.244':445
'58.##.14.205':445
'58.##.84.191':445
'58.#3.84.99':445
'58.##.146.123':445
'58.##.50.192':139
'58.##.117.51':139
'58.##.23.134':139
'58.#3.68.8':445
'58.#3.3.27':139
'58.##.79.225':139
'58.##.235.92':139
'58.##.112.90':139
'58.##.108.125':139
'58.##.196.229':139
'58.##.138.105':139
'58.#3.5.160':139
'58.#3.39.26':139
'58.##.56.103':139
'58.#3.42.68':139
'58.##.80.170':139
'58.##.224.205':139
'58.##.252.252':139
'58.##.84.153':139
'58.#3.24.37':139
'58.##.12.215':139
'58.##.36.223':139
'58.##.112.36':139
'58.#3.27.81':139
'58.##.107.129':139
'58.#3.74.12':139
'58.#3.45.52':139
'58.##.172.188':139
'58.##.41.102':139
'58.#3.119.8':139
'58.##.79.120':139
'58.##.143.237':139
'58.##.13.119':445
'58.##.103.103':445
'58.##.131.108':445
'58.##.142.242':445
'58.##.101.88':445
'58.##.210.106':445
'58.#3.53.0':445
'58.#3.75.32':445
'58.#3.64.55':445
'58.##.150.130':445
'58.##.61.157':445
'58.##.115.219':445
'58.#3.68.8':139
'58.##.188.174':139
'58.##.61.150':139
'58.##.134.148':139
'58.#3.217.6':139
'58.#3.20.10':139
'58.##.210.176':139
'58.##.164.209':139
'58.##.84.244':139
'58.##.14.205':139
'58.##.84.191':139
'58.#3.84.99':139
'58.##.146.123':139
'58.##.164.64':445
'58.##.66.221':445
'58.##.21.194':445
'58.#3.66.35':445
'58.##.100.211':445
'58.##.33.182':445
'58.##.89.156':445
'58.##.188.174':445
'58.##.61.150':445
'58.##.134.148':445
'58.#3.217.6':445
'58.#3.20.10':445
'58.##.210.176':445
'58.##.71.156':445
'58.##.50.228':445
'58.##.246.237':445
'58.##.142.107':445
'58.##.74.134':445
'58.##.104.82':445
'58.#3.33.96':445
'58.##.154.218':445
'58.##.241.143':445
'58.##.155.241':445
'58.##.153.79':445
'58.##.205.53':445
'58.#3.25.34':445
'58.##.145.80':139
'58.##.45.101':445
'58.##.160.169':445
'58.##.234.104':139
'58.##.255.160':445
'58.##.46.248':445
'58.##.118.15':445
'58.#3.8.3':139
'58.##.162.58':139
'58.#3.9.25':139
'58.##.181.235':139
'58.##.156.226':139
'58.#3.11.51':139
'58.#3.68.44':445
'58.##.142.136':445
'58.##.147.142':445
'58.##.220.194':445
'58.##.86.202':445
'58.#3.85.87':445
'58.##.136.85':445
'58.##.118.15':139
'58.##.45.101':139
'58.##.160.169':139
'58.#3.68.44':139
'58.##.255.160':139
'58.##.46.248':139
'58.##.130.174':139
'58.##.98.159':139
'58.##.167.151':139
'58.##.202.237':139
'58.#3.45.42':139
'58.##.252.44':139
'58.##.45.211':139
'58.##.131.247':139
'58.##.142.131':139
'58.##.111.117':139
'58.##.149.215':139
'58.#3.4.4':139
'58.##.192.76':139
'58.##.81.113':139
'58.#3.33.25':139
'58.#3.31.94':139
'58.##.126.253':139
'58.#3.15.35':139
'58.##.191.15':139
'58.##.175.190':139
'58.##.216.103':139
'58.#3.1.177':139
'58.##.161.41':139
'58.##.124.191':139
'58.#3.44.29':139
'58.#3.59.37':139
'58.##.82.175':445
'58.##.215.40':445
'58.##.235.92':445
'58.##.30.232':445
'58.##.96.182':445
'58.##.174.199':445
'58.##.12.215':445
'58.##.36.223':445
'58.##.112.36':445
'58.#3.27.81':445
'58.##.107.129':445
'58.#3.74.12':445
'58.##.186.127':445
'58.##.72.237':139
'58.##.64.130':139
'58.##.17.177':139
'58.##.12.145':139
'58.#3.24.50':139
'58.#3.3.41':139
'58.##.142.136':139
'58.##.147.142':139
'58.##.220.194':139
'58.##.86.202':139
'58.#3.85.87':139
'58.##.136.85':139
'58.#3.119.8':445
'58.#3.42.68':445
'58.##.80.170':445
'58.##.145.80':445
'58.##.252.252':445
'58.##.84.153':445
'58.##.56.103':445
'58.##.72.237':445
'58.##.64.130':445
'58.##.17.177':445
'58.##.12.145':445
'58.#3.24.50':445
'58.#3.3.41':445
'58.##.224.205':445
'58.##.172.188':445
'58.##.41.102':445
'58.#3.24.37':445
'58.##.79.120':445
'58.##.143.237':445
'58.#3.45.52':445
'58.##.112.90':445
'58.##.108.125':445
'58.##.196.229':445
'58.##.138.105':445
'58.#3.5.160':445
'58.#3.39.26':445
'58.#3.66.35':139
'58.##.193.143':445
'58.##.21.233':445
'58.##.235.63':445
'58.##.79.235':445
'58.#3.92.19':445
'58.##.148.91':445
'58.##.60.149':445
'58.#3.116.5':445
'58.##.107.219':445
'58.#3.64.8':445
'58.##.137.146':445
'58.##.36.148':445
'58.##.72.232':445
'58.##.166.75':445
'58.##.135.109':445
'58.##.186.106':445
'58.#3.98.76':445
'58.#3.200.7':445
'58.##.204.20':445
'58.#3.85.13':445
'58.##.25.253':445
'58.#3.12.3':445
'58.##.106.199':445
'58.##.146.106':445
'58.##.20.106':445
'58.#3.3.4':445
'58.##.111.44':445
'58.##.37.152':445
'58.#3.56.77':445
'58.#3.37.68':445
'58.##.66.110':445
'58.#3.58.81':445
'58.##.77.195':445
'58.##.130.195':445
'58.#3.11.22':445
'58.##.100.177':445
'58.##.226.160':445
'58.##.134.47':445
'58.#3.68.25':445
'58.##.164.148':445
'58.##.74.194':445
'58.##.230.241':445
'58.#3.9.3':445
'58.##.175.81':445
'58.##.147.93':445
'58.##.183.56':445
'58.##.25.162':445
'58.##.214.63':445
'58.##.21.210':445
'58.#3.56.52':445
'58.##.105.183':445
'58.##.193.143':139
'58.##.21.233':139
'58.##.235.63':139
'58.##.79.235':139
'58.#3.92.19':139
'58.##.148.91':139
'58.##.60.149':139
'58.#3.116.5':139
'58.##.107.219':139
'58.#3.64.8':139
'58.##.137.146':139
'58.##.36.148':139
'58.##.72.232':139
'58.##.146.106':139
'58.#3.98.76':139
'58.##.166.75':139
'58.##.106.199':139
'58.##.204.20':139
'58.##.20.106':139
'58.#3.85.13':139
'58.##.25.253':139
'58.#3.12.3':139
'58.#3.200.7':139
'58.##.135.109':139
'58.##.186.106':139
'58.##.175.81':139
'58.##.111.44':139
'58.##.37.152':139
'58.#3.56.77':139
'58.#3.37.68':139
'58.#3.58.81':139
'58.##.66.110':139
'58.##.77.195':139
'58.##.130.195':139
'58.#3.11.22':139
'58.##.100.177':139
'58.##.226.160':139
'58.##.134.47':139
'58.#3.68.25':139
'58.##.164.148':139
'58.##.74.194':139
'58.##.230.241':139
'58.#3.3.4':139
'58.#3.9.3':139
'58.##.147.93':139
'58.##.183.56':139
'58.##.214.63':139
'58.##.25.162':139
'58.##.105.183':139
'58.##.21.210':139
'58.#3.56.52':139
'58.##.20.106':9988
'58.##.83.194':445
'58.##.45.157':445
'58.#3.93.86':445
'58.#3.85.1':139
'58.#3.90.85':445
'58.##.121.252':445
'58.##.210.106':139
'58.##.13.119':139
'58.##.103.103':139
'58.#3.85.1':445
'58.##.142.242':139
'58.##.101.88':139
'58.#3.93.86':139
'58.##.37.167':445
'58.##.80.106':445
'58.##.100.192':445
'58.##.248.75':445
'58.##.131.169':445
'58.##.45.248':445
'58.##.121.252':139
'58.##.83.194':139
'58.##.45.157':139
'58.#3.3.59':445
'58.##.100.221':445
'58.#3.90.85':139
'58.##.131.108':139
'58.##.154.218':139
'58.##.241.143':139
'58.##.155.241':139
'58.##.153.79':139
'58.##.205.53':139
'58.#3.25.34':139
'58.##.89.156':139
'58.##.66.221':139
'58.##.21.194':139
'58.##.71.156':139
'58.##.100.211':139
'58.##.33.182':139
'58.##.142.107':139
'58.#3.53.0':139
'58.#3.75.32':139
'58.#3.64.55':139
'58.##.150.130':139
'58.##.61.157':139
'58.##.115.219':139
'58.#3.33.96':139
'58.##.50.228':139
'58.##.246.237':139
'58.##.164.64':139
'58.##.74.134':139
'58.##.104.82':139
'58.#3.65.2':139
'58.#3.8.23':139
'58.##.112.221':139
'58.##.22.167':139
'58.#3.39.22':139
'58.##.136.171':139
'58.##.128.49':139
'58.#3.21.60':139
'58.##.27.190':139
'58.##.103.112':139
'58.##.37.158':139
'58.#3.35.55':139
'58.#3.11.22':9988
'58.##.230.241':9988
'58.##.183.56':9988
'58.##.25.162':9988
'58.##.148.91':9988
'58.##.21.233':9988
'58.##.175.81':9988
'58.##.100.177':9988
'58.#3.56.77':9988
'58.##.226.160':9988
'58.#3.68.25':9988
'58.#3.37.68':9988
'58.##.111.44':9988
'58.##.53.116':139
'58.##.103.112':445
'58.##.37.158':445
'58.#3.35.55':445
'58.#3.65.2':445
'58.#3.8.23':445
'58.##.112.221':445
'58.##.53.116':445
'58.##.53.220':445
'58.#3.75.75':445
'58.##.128.49':445
'58.#3.21.60':445
'58.##.27.190':445
'58.##.136.171':445
'58.##.131.169':139
'58.##.45.248':139
'58.##.37.167':139
'58.##.53.220':139
'58.#3.75.75':139
'58.##.248.75':139
'58.##.100.221':139
'58.##.22.167':445
'58.#3.39.22':445
'58.##.80.106':139
'58.##.100.192':139
'58.#3.3.59':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней