Trojan.KillProc.33827

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Завершает или пытается завершить

следующие системные процессы:

<SYSTEM32>\svchost.exe

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe

Сетевая активность:

Подключается к:

'65.##.44.217':139
'65.##.82.245':139
'65.##.241.62':139
'65.##.190.23':139
'65.##.120.106':139
'65.##.138.160':139
'65.#6.49.70':139
'65.##.161.10':139
'65.##.116.229':139
'65.#6.9.210':139
'65.##.53.152':445
'65.##.115.119':445
'65.##.119.234':445
'65.##.219.49':445
'65.##.252.218':445
'65.#6.77.45':139
'65.#6.73.33':139
'65.##.30.213':139
'65.##.147.25':445
'65.##.161.127':445
'65.#6.54.40':139
'65.#6.8.251':139
'65.#6.38.8':139
'65.##.55.162':139
'65.##.227.180':139
'65.#6.4.74':139
'65.##.198.65':139
'65.##.133.10':139
'65.##.67.191':139
'65.##.249.37':139
'65.##.166.140':139
'65.#6.50.27':139
'65.##.139.200':139
'65.##.208.134':139
'65.#6.28.54':139
'65.##.214.182':139
'65.#6.3.29':139
'65.#6.71.72':139
'65.##.75.163':139
'65.##.104.78':139
'65.##.128.55':139
'65.##.185.141':445
'65.##.119.159':445
'65.##.105.59':445
'65.##.24.225':445
'65.##.228.145':445
'65.##.159.127':445
'65.#6.99.39':445
'65.##.56.208':445
'65.##.235.127':445
'65.#6.6.236':445
'65.##.28.228':445
'65.##.185.209':445
'65.#6.52.2':445
'65.##.118.61':445
'65.##.40.174':445
'65.##.43.185':445
'65.##.225.50':445
'65.#6.73.40':445
'65.#6.51.40':445
'65.##.140.227':445
'65.##.128.157':445
'65.##.12.146':445
'65.##.253.109':445
'65.##.129.247':445
'65.#6.30.0':445
'65.##.121.115':445
'65.##.99.206':445
'65.##.250.18':445
'65.#6.37.69':445
'65.#6.205.9':445
'65.#6.61.27':445
'65.##.108.146':445
'65.##.24.189':445
'65.##.227.11':445
'65.#6.51.44':445
'65.##.31.148':445
'65.##.254.230':445
'65.##.136.174':445
'65.#6.81.93':445
'65.##.227.95':445
'65.#6.98.60':445
'65.##.166.18':445
'65.##.11.102':139
'65.##.203.208':445
'65.##.31.174':445
'65.##.209.68':445
'65.##.218.46':445
'65.##.211.123':445
'65.##.89.243':445
'65.#6.21.24':445
'65.##.242.184':445
'65.##.43.127':445
'65.##.149.238':445
'65.##.249.37':445
'65.##.166.140':445
'65.#6.38.8':445
'65.##.55.162':445
'65.#6.8.251':445
'65.##.11.102':445
'65.#6.46.68':445
'65.##.133.10':445
'65.##.67.191':445
'65.##.198.65':445
'65.##.191.247':445
'65.#6.51.57':139
'65.##.111.63':139
'65.##.10.138':139
'65.##.221.216':139
'65.#6.79.17':139
'65.#6.85.75':139
'65.##.109.163':139
'65.##.103.52':139
'65.##.62.111':139
'65.##.131.131':139
'65.##.252.139':445
'65.##.48.253':139
'65.##.140.93':445
'65.##.32.192':445
'65.##.183.238':445
'65.##.207.181':139
'65.##.197.217':139
'65.#6.32.90':139
'65.##.144.48':139
'65.#6.59.89':139
'65.#6.4.74':445
'65.##.183.238':139
'65.##.140.93':139
'65.##.32.192':139
'65.#6.21.24':139
'65.##.191.247':139
'65.#6.73.33':445
'65.##.190.23':445
'65.#6.77.45':445
'65.##.252.139':139
'65.##.30.213':445
'65.##.209.68':139
'65.##.203.208':139
'65.##.211.123':139
'65.#6.46.68':139
'65.##.218.46':139
'65.##.242.184':139
'65.##.89.243':139
'65.##.149.238':139
'65.##.31.174':139
'65.##.43.127':139
'65.##.120.106':445
'65.##.139.200':445
'65.##.104.78':445
'65.#6.50.27':445
'65.##.214.182':445
'65.##.208.134':445
'65.#6.71.72':445
'65.##.227.180':445
'65.#6.3.29':445
'65.##.128.55':445
'65.##.75.163':445
'65.##.116.229':445
'65.#6.9.210':445
'65.##.82.245':445
'65.##.241.62':445
'65.##.44.217':445
'65.#6.54.40':445
'65.#6.28.54':445
'65.#6.49.70':445
'65.##.161.10':445
'65.##.138.160':445
'65.##.211.229':445
'65.#6.95.64':445
'65.##.13.201':445
'65.##.141.60':445
'65.##.161.42':445
'65.#6.64.91':445
'65.##.151.37':445
'65.#6.47.70':445
'65.#6.70.95':445
'65.##.15.130':445
'65.##.226.118':139
'65.##.132.226':139
'65.#6.0.56':139
'65.#6.79.89':139
'65.##.61.250':139
'65.#6.5.198':139
'65.##.27.169':445
'65.#6.55.78':139
'65.##.136.27':139
'65.##.14.115':139
'65.##.203.188':445
'65.##.112.64':445
'65.##.112.201':445
'65.#6.6.75':445
'65.#6.37.59':445
'65.##.68.198':445
'65.##.10.222':445
'65.#6.1.178':445
'65.##.159.114':445
'65.#6.59.83':445
'65.##.111.222':445
'65.##.173.140':445
'65.##.44.251':445
'65.##.122.32':445
'65.##.19.232':445
'65.##.106.218':445
'65.##.113.23':445
'65.##.238.173':445
'65.#6.45.73':445
'65.##.93.182':445
'65.##.213.203':445
'65.#6.5.100':139
'65.##.106.218':139
'65.##.122.32':139
'65.##.19.232':139
'65.##.151.37':139
'65.##.203.188':139
'65.##.213.203':139
'65.#6.45.73':139
'65.##.93.182':139
'65.##.173.140':139
'65.##.44.251':139
'65.##.27.169':139
'65.##.211.229':139
'65.##.161.42':139
'65.##.15.130':139
'65.##.141.60':139
'65.#6.47.70':139
'65.#6.64.91':139
'65.#6.70.95':139
'65.##.13.201':139
'65.#6.95.64':139
'65.##.113.23':139
'65.#6.14.31':139
'65.##.103.194':139
'65.##.190.13':139
'65.#6.1.178':139
'65.##.167.234':139
'65.##.232.240':139
'65.##.63.247':139
'65.##.244.113':139
'65.##.187.181':139
'65.##.106.138':139
'65.#6.6.75':139
'65.##.112.64':139
'65.##.68.198':139
'65.##.238.173':139
'65.#6.37.59':139
'65.##.159.114':139
'65.##.10.222':139
'65.##.111.222':139
'65.##.112.201':139
'65.#6.59.83':139
'65.##.167.234':445
'65.##.254.230':139
'65.##.227.11':139
'65.##.227.95':139
'65.##.12.146':139
'65.##.31.148':139
'65.##.24.189':139
'65.#6.98.60':139
'65.##.166.18':139
'65.#6.51.44':139
'65.##.136.174':139
'65.##.159.127':139
'65.##.228.145':139
'65.##.105.59':139
'65.##.119.159':139
'65.#6.73.40':139
'65.##.56.208':139
'65.#6.99.39':139
'65.##.235.127':139
'65.##.28.228':139
'65.#6.6.236':139
'65.##.99.206':139
'65.##.119.234':139
'65.##.115.119':139
'65.##.252.218':139
'65.##.185.141':139
'65.##.219.49':139
'65.##.30.119':445
'65.##.217.222':445
'65.##.161.127':139
'65.##.53.152':139
'65.##.147.25':139
'65.#6.205.9':139
'65.#6.61.27':139
'65.##.250.18':139
'65.#6.81.93':139
'65.##.121.115':139
'65.##.253.109':139
'65.#6.37.69':139
'65.#6.30.0':139
'65.##.129.247':139
'65.##.108.146':139
'65.##.24.225':139
'65.##.132.226':445
'65.##.136.27':445
'65.##.226.118':445
'65.##.61.250':445
'65.#6.0.56':445
'65.##.161.42':9988
'65.##.151.37':9988
'65.#6.5.198':445
'65.##.14.115':445
'65.#6.55.78':445
'65.##.187.181':445
'65.##.106.138':445
'65.##.103.194':445
'65.##.190.13':445
'65.#6.14.31':445
'65.#6.5.100':445
'65.#6.79.89':445
'65.##.63.247':445
'65.##.244.113':445
'65.##.232.240':445
'65.##.238.173':9988
'65.##.43.185':139
'65.##.118.61':139
'65.##.185.209':139
'65.##.217.222':139
'65.##.40.174':139
'65.#6.51.40':139
'65.##.225.50':139
'65.##.128.157':139
'65.#6.52.2':139
'65.##.140.227':139
'65.##.187.181':9988
'65.#6.5.100':9988
'65.#6.14.31':9988
'65.#6.1.178':9988
'65.##.190.13':9988
'65.#6.5.198':9988
'65.##.30.119':139
'65.##.14.115':9988
'65.##.226.118':9988
'65.##.132.226':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней