Trojan.KillProc.33826

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Завершает или пытается завершить

следующие системные процессы:

<SYSTEM32>\svchost.exe

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'24.##.34.123':139
'24.#1.54.27':139
'24.##.247.31':139
'24.##.174.194':139
'24.##.31.174':139
'24.##.70.221':139
'24.##.72.173':139
'24.##.162.10':139
'24.##.128.47':139
'24.##.81.106':139
'24.##.194.201':139
'24.##.167.19':139
'24.##.112.167':139
'24.##.140.12':139
'24.##.244.124':139
'24.##.105.237':139
'24.#1.19.33':139
'24.##.202.46':139
'24.##.167.70':139
'24.##.185.75':139
'24.##.143.149':139
'24.##.244.124':445
'24.##.105.237':445
'24.#1.2.254':445
'24.##.224.208':445
'24.##.105.161':445
'24.##.185.75':445
'24.##.143.149':445
'24.##.112.167':445
'24.##.140.12':445
'24.##.167.19':445
'24.##.84.187':445
'24.#1.16.68':445
'24.##.140.115':445
'24.##.104.85':139
'24.##.187.163':139
'24.##.139.70':139
'24.##.160.244':445
'24.##.79.241':445
'24.##.146.143':445
'24.##.39.128':445
'24.#1.63.98':445
'24.#1.59.44':139
'24.##.31.245':445
'24.##.94.170':139
'24.##.251.141':139
'24.##.26.214':139
'24.#1.0.197':445
'24.##.176.108':445
'24.##.197.93':445
'24.##.161.39':445
'24.##.75.113':445
'24.#1.1.50':139
'24.#1.0.197':139
'24.##.176.108':139
'24.##.197.93':139
'24.##.161.39':139
'24.##.75.113':139
'24.#1.117.3':139
'24.#1.50.14':139
'24.##.185.28':139
'24.##.205.227':139
'24.##.249.171':139
'24.##.146.143':139
'24.##.160.244':139
'24.#1.63.98':139
'24.##.140.115':139
'24.##.39.128':139
'24.##.105.161':139
'24.#1.2.254':139
'24.##.224.208':139
'24.##.79.241':139
'24.##.84.187':139
'24.#1.16.68':139
'24.#1.117.3':445
'24.#1.50.14':445
'24.##.185.28':445
'24.##.205.227':445
'24.##.249.171':445
'24.##.94.170':445
'24.#1.59.44':445
'24.##.26.214':445
'24.#1.1.50':445
'24.##.251.141':445
'24.##.217.254':139
'24.##.28.158':139
'24.##.24.144':139
'24.##.44.226':139
'24.##.93.125':139
'24.##.106.198':139
'24.##.49.106':139
'24.##.98.242':139
'24.#1.125.9':139
'24.##.141.74':139
'24.##.135.105':139
'24.##.159.12':445
'24.##.32.156':445
'24.##.207.187':445
'24.##.50.173':445
'24.##.135.173':445
'24.##.234.199':139
'24.#1.43.21':139
'24.#1.228.9':139
'24.##.106.101':445
'24.#1.79.26':445
'24.##.135.55':139
'24.#1.63.36':139
'24.##.193.135':139
'24.##.166.128':139
'24.#1.5.40':139
'24.#1.81.68':139
'24.##.156.80':139
'24.#1.24.65':139
'24.##.193.162':139
'24.#1.15.8':139
'24.#1.8.157':139
'24.##.75.128':139
'24.#1.30.23':139
'24.#1.80.4':139
'24.#1.77.15':139
'24.##.134.99':139
'24.##.171.70':139
'24.#1.26.37':139
'24.#1.71.78':139
'24.##.71.142':139
'24.#1.8.184':139
'24.##.187.163':445
'24.##.139.70':445
'24.##.72.173':445
'24.##.162.10':445
'24.##.70.221':445
'24.##.149.165':139
'24.##.175.141':139
'24.##.228.201':139
'24.##.104.85':445
'24.##.93.144':139
'24.##.81.106':445
'24.##.194.201':445
'24.##.174.194':445
'24.##.202.46':445
'24.##.167.70':445
'24.#1.19.33':445
'24.#1.54.27':445
'24.##.128.47':445
'24.##.34.123':445
'24.##.31.174':445
'24.##.247.31':445
'24.##.149.165':445
'24.##.175.141':445
'24.##.228.201':445
'24.#1.79.26':139
'24.##.93.144':445
'24.#1.55.36':445
'24.##.105.26':445
'24.##.116.190':445
'24.##.243.105':445
'24.##.126.30':445
'24.##.106.101':139
'24.#1.55.36':139
'24.##.105.26':139
'24.##.116.190':139
'24.##.243.105':139
'24.##.126.30':139
'24.##.159.12':139
'24.##.32.156':139
'24.##.207.187':139
'24.##.50.173':139
'24.##.135.173':139
'24.##.31.245':139
'24.##.70.212':445
'24.##.81.188':445
'24.##.138.141':445
'24.##.154.181':445
'24.##.106.154':445
'24.##.56.221':445
'24.#1.29.89':445
'24.##.213.217':445
'24.##.128.176':445
'24.##.19.112':445
'24.##.242.94':445
'24.##.112.28':139
'24.##.79.223':139
'24.##.149.141':139
'24.##.17.197':139
'24.##.51.128':139
'24.#1.59.4':139
'24.#1.245.1':445
'24.#1.65.73':139
'24.##.82.180':139
'24.##.236.143':139
'24.##.173.252':445
'24.#1.75.72':445
'24.#1.98.83':445
'24.##.36.131':445
'24.##.29.101':445
'24.##.29.207':445
'24.##.91.118':445
'24.##.157.90':445
'24.#1.14.92':445
'24.##.184.79':445
'24.#1.70.11':445
'24.##.56.199':445
'24.##.223.61':445
'24.#1.71.38':445
'24.#1.5.116':445
'24.##.39.247':445
'24.#1.30.32':445
'24.#1.41.60':445
'24.##.185.76':445
'24.##.230.102':445
'24.##.138.90':445
'24.#1.71.38':139
'24.##.56.199':139
'24.##.39.247':139
'24.#1.29.89':139
'24.#1.5.116':139
'24.##.185.76':139
'24.#1.30.32':139
'24.##.138.90':139
'24.##.223.61':139
'24.##.230.102':139
'24.##.56.221':139
'24.##.106.154':139
'24.##.138.141':139
'24.##.154.181':139
'24.#1.245.1':139
'24.##.242.94':139
'24.##.19.112':139
'24.##.213.217':139
'24.##.128.176':139
'24.##.70.212':139
'24.##.81.188':139
'24.##.132.136':139
'24.##.209.132':139
'24.##.79.192':139
'24.##.91.118':139
'24.#1.90.92':139
'24.#1.35.53':139
'24.##.154.101':139
'24.##.187.245':139
'24.##.106.25':139
'24.##.106.31':139
'24.##.29.207':139
'24.##.29.101':139
'24.#1.98.83':139
'24.##.36.131':139
'24.#1.41.60':139
'24.#1.70.11':139
'24.##.184.79':139
'24.##.157.90':139
'24.#1.14.92':139
'24.##.173.252':139
'24.#1.75.72':139
'24.#1.46.20':139
'24.##.232.88':445
'24.##.124.49':139
'24.##.212.176':139
'24.##.19.243':139
'24.##.253.109':445
'24.##.19.219':445
'24.#1.91.68':445
'24.##.36.190':445
'24.#1.54.33':445
'24.##.106.116':139
'24.##.204.70':139
'24.##.75.204':139
'24.#1.25.39':139
'24.##.216.57':139
'24.##.229.47':139
'24.#1.17.30':139
'24.#1.4.17':139
'24.#1.60.44':139
'24.##.129.178':139
'24.#1.91.99':139
'24.#1.17.30':445
'24.#1.4.17':445
'24.#1.60.44':445
'24.##.129.178':445
'24.#1.91.99':445
'24.##.124.49':445
'24.#1.46.20':445
'24.##.19.243':445
'24.##.106.116':445
'24.##.212.176':445
'24.##.75.204':445
'24.#1.85.39':445
'24.##.162.83':445
'24.#1.39.90':445
'24.##.66.243':445
'24.##.241.88':445
'24.#1.25.39':445
'24.##.204.70':445
'24.##.229.47':445
'24.##.114.199':445
'24.##.216.57':445
'24.##.82.180':445
'24.##.236.143':445
'24.##.79.223':445
'24.##.149.141':445
'24.##.112.28':445
'24.##.138.141':9988
'24.##.70.212':9988
'24.##.154.181':9988
'24.#1.65.73':445
'24.#1.59.4':445
'24.##.51.128':445
'24.##.209.132':445
'24.##.106.25':445
'24.##.132.136':445
'24.#1.90.92':445
'24.##.79.192':445
'24.##.154.101':445
'24.##.17.197':445
'24.#1.35.53':445
'24.##.106.31':445
'24.##.187.245':445
'24.##.19.219':139
'24.##.66.243':139
'24.##.253.109':139
'24.#1.54.33':139
'24.#1.91.68':139
'24.##.162.83':139
'24.##.114.199':139
'24.#1.85.39':139
'24.##.241.88':139
'24.#1.39.90':139
'24.##.36.190':139
'24.##.185.76':9988
'24.#1.41.60':9988
'24.#1.29.89':9988
'24.##.19.112':9988
'24.##.56.221':9988
'24.##.51.128':9988
'24.##.232.88':139
'24.#1.35.53':9988
'24.#1.90.92':9988
'24.##.106.31':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней