Trojan.KillProc.33823

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Завершает или пытается завершить

следующие системные процессы:

<SYSTEM32>\svchost.exe

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'82.##.197.74':445
'82.##.248.144':445
'82.##.74.140':445
'82.##.85.108':445
'82.##.188.131':445
'82.##.151.154':445
'82.##.126.100':445
'82.##.166.56':445
'82.##.184.33':445
'82.##.56.100':445
'82.##.192.110':445
'82.##.133.76':445
'82.##.149.57':445
'82.#1.70.55':445
'82.##.123.11':445
'82.##.189.122':445
'82.##.100.215':445
'82.##.181.177':445
'82.#1.12.64':445
'82.##.180.238':445
'82.##.123.223':445
'82.##.135.97':445
'82.#1.2.238':445
'82.#1.10.35':445
'82.#1.53.27':445
'82.##.155.200':445
'82.##.164.205':445
'82.#1.36.3':445
'82.##.243.40':445
'82.#1.30.39':445
'82.##.157.129':445
'82.##.13.205':445
'82.##.132.91':445
'82.##.249.93':445
'82.##.250.54':445
'82.##.63.131':445
'82.##.41.172':445
'82.##.130.16':445
'82.#1.23.2':445
'82.##.226.14':445
'82.##.165.44':445
'82.##.157.129':139
'82.##.13.205':139
'82.##.132.91':139
'82.##.249.93':139
'82.##.250.54':139
'82.##.63.131':139
'82.##.41.172':139
'82.##.130.16':139
'82.#1.23.2':139
'82.##.226.14':139
'82.##.197.74':139
'82.##.248.144':139
'82.##.74.140':139
'82.##.85.108':139
'82.##.188.131':139
'82.##.151.154':139
'82.##.126.100':139
'82.##.166.56':139
'82.##.184.33':139
'82.##.56.100':139
'82.##.143.108':139
'82.##.146.143':139
'82.##.142.227':139
'82.#1.9.234':139
'82.##.87.212':139
'82.##.242.35':445
'82.##.234.58':445
'82.##.39.244':445
'82.#1.6.146':139
'82.#1.74.6':139
'82.##.123.223':139
'82.##.135.97':139
'82.#1.2.238':139
'82.#1.10.35':139
'82.#1.53.27':139
'82.##.155.200':139
'82.##.164.205':139
'82.#1.36.3':139
'82.##.243.40':139
'82.#1.30.39':139
'82.#1.9.234':445
'82.##.112.191':139
'82.##.32.112':139
'82.##.145.249':139
'82.##.104.213':139
'82.##.161.152':139
'82.##.202.223':445
'82.##.48.220':445
'82.##.223.187':445
'82.##.109.75':139
'82.#1.40.31':445
'82.##.120.62':139
'82.#1.5.50':139
'82.##.67.129':139
'82.#1.20.45':139
'82.##.128.238':139
'82.##.126.167':139
'82.##.58.186':139
'82.##.132.135':139
'82.##.246.194':139
'82.##.207.173':139
'82.##.90.223':445
'82.##.226.126':445
'82.##.180.207':445
'82.##.102.26':445
'82.##.188.101':445
'82.##.133.145':445
'82.##.243.215':445
'82.##.185.253':445
'82.##.21.115':445
'82.##.200.39':445
'82.#1.44.70':445
'82.##.173.77':445
'82.##.113.28':445
'82.##.215.108':445
'82.##.119.75':445
'82.##.126.43':445
'82.##.25.229':445
'82.#1.61.69':445
'82.##.123.208':445
'82.##.198.137':445
'82.##.36.117':139
'82.#1.44.70':139
'82.##.173.77':139
'82.##.113.28':139
'82.##.215.108':139
'82.##.119.75':139
'82.##.126.43':139
'82.##.25.229':139
'82.#1.61.69':139
'82.##.123.208':139
'82.##.198.137':139
'82.##.146.143':445
'82.#1.6.146':445
'82.##.143.108':445
'82.##.87.212':445
'82.##.142.227':445
'82.##.202.223':139
'82.##.48.220':139
'82.##.223.187':139
'82.#1.74.6':445
'82.#1.40.31':139
'82.##.209.68':139
'82.##.219.25':139
'82.#1.69.89':139
'82.#1.13.86':139
'82.##.103.155':139
'82.##.119.240':139
'82.##.86.157':139
'82.##.170.122':139
'82.##.120.162':139
'82.##.147.33':139
'82.##.90.223':139
'82.##.226.126':139
'82.##.180.207':139
'82.##.102.26':139
'82.##.188.101':139
'82.##.133.145':139
'82.##.243.215':139
'82.##.185.253':139
'82.##.21.115':139
'82.##.200.39':139
'82.##.100.215':139
'82.##.71.228':445
'82.#1.5.161':445
'82.##.46.228':445
'82.##.159.155':445
'82.##.82.136':445
'82.#1.38.89':445
'82.##.212.23':445
'82.##.128.149':445
'82.##.139.77':445
'82.##.40.119':445
'82.##.174.43':139
'82.##.50.170':139
'82.#1.44.84':139
'82.##.108.183':139
'82.#1.43.81':139
'82.##.48.212':139
'82.##.237.81':139
'82.##.125.114':139
'82.##.219.232':139
'82.##.209.10':139
'82.#1.86.83':445
'82.##.236.85':445
'82.#1.83.91':445
'82.#1.59.37':445
'82.##.221.189':445
'82.##.138.114':445
'82.##.180.99':445
'82.##.73.120':445
'82.#1.6.39':445
'82.##.80.165':445
'82.##.59.107':445
'82.##.232.170':445
'82.#1.86.44':445
'82.##.237.211':445
'82.#1.47.45':445
'82.#1.19.24':445
'82.##.81.224':445
'82.#1.21.1':445
'82.##.79.199':445
'82.##.152.103':445
'82.##.178.17':139
'82.##.59.107':139
'82.##.232.170':139
'82.#1.86.44':139
'82.##.237.211':139
'82.#1.47.45':139
'82.#1.19.24':139
'82.##.81.224':139
'82.#1.21.1':139
'82.##.79.199':139
'82.##.152.103':139
'82.##.71.228':139
'82.#1.5.161':139
'82.##.46.228':139
'82.##.159.155':139
'82.##.82.136':139
'82.#1.38.89':139
'82.##.212.23':139
'82.##.128.149':139
'82.##.139.77':139
'82.##.40.119':139
'82.#1.30.25':139
'82.##.15.158':139
'82.#1.29.98':139
'82.##.42.180':139
'82.##.190.42':139
'82.##.108.145':139
'82.##.137.108':139
'82.##.89.104':139
'82.#1.50.15':139
'82.#1.23.50':139
'82.#1.86.83':139
'82.##.236.85':139
'82.#1.83.91':139
'82.#1.59.37':139
'82.##.221.189':139
'82.##.138.114':139
'82.##.180.99':139
'82.##.73.120':139
'82.#1.6.39':139
'82.##.80.165':139
'82.##.42.180':445
'82.##.105.145':445
'82.##.102.70':445
'82.##.245.212':445
'82.#1.64.39':139
'82.#1.8.107':139
'82.##.162.69':445
'82.##.240.11':445
'82.##.13.249':445
'82.#1.80.75':445
'82.##.150.166':445
'82.##.162.69':139
'82.##.240.11':139
'82.##.13.249':139
'82.#1.80.75':139
'82.##.150.166':139
'82.##.184.141':139
'82.##.63.218':139
'82.##.22.167':139
'82.##.74.239':139
'82.#1.37.61':139
'82.##.149.57':139
'82.##.192.110':139
'82.##.123.11':139
'82.##.165.44':139
'82.#1.70.55':139
'82.##.181.177':139
'82.##.189.122':139
'82.##.180.238':139
'82.##.133.76':139
'82.#1.12.64':139
'82.##.184.141':445
'82.##.63.218':445
'82.##.22.167':445
'82.##.74.239':445
'82.#1.37.61':445
'82.##.242.35':139
'82.##.234.58':139
'82.##.39.244':139
'82.#1.64.39':445
'82.#1.8.107':445
'82.##.102.70':139
'82.##.174.43':445
'82.##.50.170':445
'82.#1.44.84':445
'82.##.108.183':445
'82.#1.43.81':445
'82.##.48.212':445
'82.##.237.81':445
'82.##.125.114':445
'82.##.219.232':445
'82.##.209.10':445
'82.##.15.158':445
'82.#1.50.15':445
'82.#1.30.25':445
'82.##.190.42':445
'82.#1.29.98':445
'82.##.137.108':445
'82.##.178.17':445
'82.##.108.145':445
'82.#1.23.50':445
'82.##.89.104':445
'82.##.59.107':9988
'82.#1.21.1':9988
'82.#1.86.44':9988
'82.##.237.211':9988
'82.#1.47.45':9988
'82.##.245.212':139
'82.##.105.145':139
'82.#1.23.50':9988
'82.##.138.114':9988
'82.#1.50.15':9988
'82.##.71.228':9988
'82.#1.5.161':9988
'82.##.159.155':9988
'82.##.46.228':9988
'82.##.82.136':9988
'82.#1.38.89':9988
'82.##.212.23':9988
'82.##.128.149':9988
'82.##.139.77':9988
'82.##.40.119':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней