Техническая информация
Вредоносные функции:
Завершает или пытается завершить
следующие системные процессы:
- <SYSTEM32>\svchost.exe
Изменения в файловой системе:
Создает следующие файлы:
- %CommonProgramFiles%\System\ado\tsektjkj.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
- %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
Сетевая активность:
Подключается к:
- '20#.#97.182.33':445
- '20#.#97.202.221':445
- '20#.#97.11.149':445
- '20#.#97.68.118':445
- '20#.#97.221.59':445
- '20#.#97.188.43':445
- '20#.#97.145.166':445
- '20#.#97.59.149':445
- '20#.#97.149.188':445
- '20#.#97.246.241':9988
- '20#.#97.68.185':9988
- '20#.#97.242.234':9988
- '20#.#97.169.58':9988
- '20#.#97.77.45':9988
- '20#.#97.117.43':445
- '20#.#97.63.89':445
- '20#.#97.50.160':9988
- '20#.#97.170.177':445
- '20#.#97.186.214':445
- '20#.#97.184.37':445
- '20#.#97.59.175':445
- '20#.#97.55.236':445
- '20#.#97.89.251':445
- '20#.#97.131.83':445
- '20#.#97.83.17':445
- '20#.#97.236.129':445
- '20#.#97.129.131':445
- '20#.#97.92.21':445
- '20#.#97.196.9':445
- '20#.#97.50.153':445
- '20#.#97.126.104':445
- '20#.#97.180.60':445
- '20#.#97.109.72':445
- '20#.#97.155.218':445
- '20#.#97.92.187':445
- '20#.#97.105.232':445
- '20#.#97.55.236':9988
- '20#.#97.105.232':9988
- '20#.#97.188.43':9988
- '20#.#97.126.104':9988
- '20#.#97.92.187':9988
- '20#.#97.59.175':9988
- '20#.#97.131.83':9988
- '20#.#97.109.72':9988
- '20#.#97.155.218':9988
- '20#.#97.63.89':9988
- '20#.#97.11.149':9988
- '20#.#97.170.177':9988
- '20#.#97.117.43':9988
- '20#.#97.68.118':9988
- '20#.#97.221.59':9988
- '20#.#97.149.188':9988
- '20#.#97.182.33':9988
- '20#.#97.202.221':9988
- '20#.#97.186.214':9988
- '20#.#97.83.17':9988
- '20#.#97.92.21':9988
- '20#.#97.180.60':9988
- '20#.#97.20.134':9988
- '20#.#97.2.190':9988
- '20#.#97.193.117':9988
- '20#.197.7.9':9988
- '20#.#97.42.183':9988
- '20#.#97.228.220':9988
- '20#.#97.51.29':9988
- '20#.#97.236.129':9988
- '20#.#97.129.131':9988
- '20#.#97.241.34':9988
- '20#.#97.204.13':9988
- '20#.#97.50.153':9988
- '20#.#97.238.7':9988
- '20#.#97.152.26':9988
- '20#.#97.236.129':139
- '20#.#97.129.131':139
- '20#.#97.184.37':139
- '20#.#97.89.251':139
- '20#.#97.131.83':139
- '20#.#97.228.220':139
- '20#.197.7.9':139
- '20#.#97.83.17':139
- '20#.#97.20.134':139
- '20#.#97.92.187':139
- '20#.#97.105.232':139
- '20#.#97.196.9':139
- '20#.#97.180.60':139
- '20#.#97.109.72':139
- '20#.#97.55.236':139
- '20#.#97.186.214':139
- '20#.#97.155.218':139
- '20#.#97.59.175':139
- '20#.#97.246.241':139
- '20#.#97.115.161':139
- '20#.#97.152.26':139
- '20#.#97.169.58':139
- '20#.#97.68.185':139
- '20#.#97.254.126':139
- '20#.#97.204.13':139
- '20#.#97.50.160':139
- '20#.#97.77.45':139
- '20#.#97.154.0':139
- '20#.#97.0.73':139
- '20#.#97.51.29':139
- '20#.#97.42.183':139
- '20#.#97.241.34':139
- '20#.#97.193.117':139
- '20#.#97.242.234':139
- '20#.#97.2.190':139
- '20#.#97.238.7':139
- '20#.#97.242.234':445
- '20#.#97.152.26':445
- '20#.#97.238.7':445
- '20#.#97.193.117':445
- '20#.#97.169.58':445
- '20#.#97.68.185':445
- '20#.#97.50.160':445
- '20#.#97.246.241':445
- '20#.#97.115.161':445
- '20#.197.7.9':445
- '20#.#97.51.29':445
- '20#.#97.20.134':445
- '20#.#97.228.220':445
- '20#.#97.42.183':445
- '20#.#97.241.34':445
- '20#.#97.2.190':445
- '20#.#97.154.0':445
- '20#.#97.0.73':445
- '20#.#97.59.149':139
- '20#.#97.149.188':139
- '20#.#97.202.221':139
- '20#.#97.221.59':139
- '20#.#97.188.43':139
- '20#.#97.126.104':139
- '20#.#97.92.21':139
- '20#.#97.145.166':139
- '20#.#97.50.153':139
- '20#.#97.204.13':445
- '20#.#97.170.177':139
- '20#.#97.77.45':445
- '20#.#97.254.126':445
- '20#.#97.117.43':139
- '20#.#97.68.118':139
- '20#.#97.182.33':139
- '20#.#97.63.89':139
- '20#.#97.11.149':139
