Trojan.KillProc.33820

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Завершает или пытается завершить

следующие системные процессы:

<SYSTEM32>\svchost.exe

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'68.##5.165.215':139
'68.##5.64.165':139
'68.##5.215.230':139
'68.##5.11.27':139
'68.##5.230.20':139
'68.##5.16.250':139
'68.##5.51.108':139
'68.##5.235.12':139
'68.##5.194.64':139
'68.##5.130.250':139
'68.##5.196.234':139
'68.##5.224.63':139
'68.##5.123.118':139
'68.##5.183.220':139
'68.##5.203.46':139
'68.##5.220.119':139
'68.##5.144.60':139
'68.##5.99.12':139
'68.##5.34.11':139
'68.##5.24.183':139
'68.##5.253.42':139
'68.##5.220.40':139
'68.##5.24.183':445
'68.##5.253.42':445
'68.##5.123.118':445
'68.##5.183.220':445
'68.##5.224.63':445
'68.##5.196.234':445
'68.##5.11.27':445
'68.##5.99.12':445
'68.##5.34.11':445
'68.##5.144.60':445
'68.##5.220.119':445
'68.##5.102.247':139
'68.##5.6.137':139
'68.##5.152.52':139
'68.##5.187.219':139
'68.##5.117.70':139
'68.##5.220.106':445
'68.##5.203.46':445
'68.##5.107.17':445
'68.##5.155.28':139
'68.##5.17.187':445
'68.##5.253.98':139
'68.##5.185.41':139
'68.##5.55.102':139
'68.##5.171.213':139
'68.##5.171.132':139
'68.##5.112.118':139
'68.##5.193.226':445
'68.##5.169.237':139
'68.##5.162.231':139
'68.##5.237.238':139
'68.##5.3.218':139
'68.##5.54.19':139
'68.##5.126.38':139
'68.##5.217.1':139
'68.##5.193.226':139
'68.##5.73.193':139
'68.##5.142.200':139
'68.##5.139.142':139
'68.##5.210.124':139
'68.##5.26.56':139
'68.##5.180.94':139
'68.##5.73.193':445
'68.##5.162.231':445
'68.##5.237.238':445
'68.##5.185.41':445
'68.##5.55.102':445
'68.##5.253.98':445
'68.##5.107.17':139
'68.##5.220.106':139
'68.##5.17.187':139
'68.##5.169.237':445
'68.##5.112.118':445
'68.##5.171.132':445
'68.##5.26.56':445
'68.##5.180.94':445
'68.##5.126.38':445
'68.##5.217.1':445
'68.##5.54.19':445
'68.##5.3.218':445
'68.##5.171.213':445
'68.##5.139.142':445
'68.##5.210.124':445
'68.##5.142.200':445
'68.##5.230.20':445
'68.##5.200.82':139
'68.##5.69.43':139
'68.##5.82.241':139
'68.##5.106.63':445
'68.##5.241.188':139
'68.##5.114.136':139
'68.##5.172.189':139
'68.##5.11.232':139
'68.##5.128.32':139
'68.##5.146.250':139
'68.##5.17.125':445
'68.##5.218.18':445
'68.##5.139.217':445
'68.##5.19.26':445
'68.##5.112.144':445
'68.##5.54.89':445
'68.##5.123.249':445
'68.##5.65.141':445
'68.##5.101.12':445
'68.##5.203.38':445
'68.##5.129.0':445
'68.##5.142.45':139
'68.##5.33.135':139
'68.##5.42.216':139
'68.##5.135.45':139
'68.##5.98.161':139
'68.##5.157.215':139
'68.##5.116.163':139
'68.##5.208.75':139
'68.##5.229.42':139
'68.##5.242.161':139
'68.##5.181.10':139
'68.##5.135.208':139
'68.##5.74.117':139
'68.##5.1.177':139
'68.##5.60.81':139
'68.##5.219.171':139
'68.##5.222.219':139
'68.##5.231.222':139
'68.##5.21.60':139
'68.##5.47.42':139
'68.##5.51.249':139
'68.##5.169.164':139
'68.##5.155.28':445
'68.##5.195.15':139
'68.##5.6.137':445
'68.##5.152.52':445
'68.##5.102.247':445
'68.##5.176.216':139
'68.##5.247.75':139
'68.##5.29.143':139
'68.##5.164.236':139
'68.##5.123.3':139
'68.##5.117.70':445
'68.##5.194.64':445
'68.##5.130.250':445
'68.##5.64.165':445
'68.##5.215.230':445
'68.##5.165.215':445
'68.##5.220.40':445
'68.##5.187.219':445
'68.##5.51.108':445
'68.##5.235.12':445
'68.##5.16.250':445
'68.##5.67.84':139
'68.##5.164.236':445
'68.##5.123.3':445
'68.##5.195.15':445
'68.##5.17.125':139
'68.##5.106.63':139
'68.##5.67.84':445
'68.##5.49.252':445
'68.##5.247.75':445
'68.##5.29.143':445
'68.##5.176.216':445
'68.##5.65.141':139
'68.##5.19.26':139
'68.##5.218.18':139
'68.##5.54.89':139
'68.##5.49.252':139
'68.##5.112.144':139
'68.##5.101.12':139
'68.##5.123.249':139
'68.##5.129.0':139
'68.##5.139.217':139
'68.##5.203.38':139
'68.##5.13.170':445
'68.##5.220.122':445
'68.##5.85.19':445
'68.##5.211.122':445
'68.##5.230.31':445
'68.##5.30.32':445
'68.##5.151.104':445
'68.##5.50.15':445
'68.##5.45.187':445
'68.##5.90.176':445
'68.##5.10.186':445
'68.##5.223.115':445
'68.##5.133.20':139
'68.##5.77.31':139
'68.##5.27.146':139
'68.##5.172.192':139
'68.##5.158.172':139
'68.##5.198.40':445
'68.##5.198.245':445
'68.##5.212.50':139
'68.##5.66.13':139
'68.##5.178.213':139
'68.#75.7.95':445
'68.##5.118.102':445
'68.##5.63.216':445
'68.##5.82.30':445
'68.##5.77.144':445
'68.##5.30.77':445
'68.##5.199.58':445
'68.##5.157.67':445
'68.##5.58.224':445
'68.##5.222.250':445
'68.##5.241.18':445
'68.##5.33.171':445
'68.##5.184.117':445
'68.##5.23.51':445
'68.##5.198.13':445
'68.##5.138.87':445
'68.##5.195.163':445
'68.##5.8.132':445
'68.##5.210.227':445
'68.##5.117.130':445
'68.#75.7.92':445
'68.##5.130.133':445
'68.##5.138.87':139
'68.##5.195.163':139
'68.#75.7.95':139
'68.##5.151.104':139
'68.##5.50.15':139
'68.#75.7.92':139
'68.##5.130.133':139
'68.##5.23.51':139
'68.##5.198.13':139
'68.##5.184.117':139
'68.##5.45.187':139
'68.##5.230.31':139
'68.##5.30.32':139
'68.##5.223.115':139
'68.##5.198.40':139
'68.##5.198.245':139
'68.##5.90.176':139
'68.##5.10.186':139
'68.##5.85.19':139
'68.##5.211.122':139
'68.##5.220.122':139
'68.##5.117.130':139
'68.##5.154.241':139
'68.##5.139.40':139
'68.##5.118.237':139
'68.##5.199.58':139
'68.##5.157.67':139
'68.##5.169.184':139
'68.##5.192.169':139
'68.##5.105.149':139
'68.##5.146.173':139
'68.#75.85.0':139
'68.##5.58.224':139
'68.##5.77.144':139
'68.##5.30.77':139
'68.##5.33.171':139
'68.##5.8.132':139
'68.##5.210.227':139
'68.##5.222.250':139
'68.##5.241.18':139
'68.##5.63.216':139
'68.##5.82.30':139
'68.##5.118.102':139
'68.##5.118.237':445
'68.##5.77.66':445
'68.##5.219.231':445
'68.##5.223.162':445
'68.##5.105.202':139
'68.##5.13.170':139
'68.##5.19.198':445
'68.##5.101.136':445
'68.##5.77.130':445
'68.##5.11.209':445
'68.##5.129.151':445
'68.##5.200.245':139
'68.##5.242.157':139
'68.##5.238.252':139
'68.##5.221.43':139
'68.##5.111.45':139
'68.##5.218.196':139
'68.##5.216.156':139
'68.##5.84.106':139
'68.#75.2.36':139
'68.##5.40.234':139
'68.##5.190.11':139
'68.##5.190.251':445
'68.##5.40.234':445
'68.##5.190.11':445
'68.##5.238.252':445
'68.##5.221.43':445
'68.##5.242.157':445
'68.##5.200.245':445
'68.##5.105.202':445
'68.##5.84.106':445
'68.#75.2.36':445
'68.##5.216.156':445
'68.##5.218.196':445
'68.##5.147.47':445
'68.##5.75.114':445
'68.##5.89.114':445
'68.##5.199.89':445
'68.##5.34.200':445
'68.##5.138.28':445
'68.##5.111.45':445
'68.##5.19.228':445
'68.##5.203.54':445
'68.##5.134.122':445
'68.##5.212.50':445
'68.##5.198.40':9988
'68.##5.178.213':445
'68.##5.77.31':445
'68.##5.66.13':445
'68.##5.85.19':9988
'68.##5.90.176':9988
'68.##5.230.31':9988
'68.##5.198.245':9988
'68.##5.223.115':9988
'68.##5.133.20':445
'68.#75.85.0':445
'68.##5.105.149':445
'68.##5.146.173':445
'68.##5.154.241':445
'68.##5.139.40':445
'68.##5.158.172':445
'68.##5.27.146':445
'68.##5.172.192':445
'68.##5.169.184':445
'68.##5.192.169':445
'68.##5.151.104':9988
'68.##5.89.114':139
'68.##5.147.47':139
'68.##5.34.200':139
'68.##5.190.251':139
'68.##5.199.89':139
'68.##5.19.228':139
'68.##5.138.28':139
'68.##5.134.122':139
'68.##5.75.114':139
'68.##5.203.54':139
'68.##5.101.136':139
'68.##5.223.162':139
'68.##5.77.66':139
'68.##5.82.30':9988
'68.##5.184.117':9988
'68.##5.33.171':9988
'68.##5.77.130':139
'68.##5.19.198':139
'68.##5.129.151':139
'68.##5.219.231':139
'68.##5.11.209':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней