Trojan.AVKill.14143

Technical Information

Modifies file system

Creates the following files

%WINDIR%\syswow64\windows update w.626166.exe
%WINDIR%\syswow64\windows update w.616957.exe
%WINDIR%\syswow64\windows update w.576732.exe
%WINDIR%\syswow64\windows update w.617964.exe
%WINDIR%\syswow64\windows update w.950740.exe
%WINDIR%\syswow64\windows update w.960592.exe
%WINDIR%\syswow64\windows update w.807461.exe
%WINDIR%\syswow64\windows update w.560190.exe
%WINDIR%\syswow64\windows update w.814412.exe
%WINDIR%\syswow64\windows update w.724181.exe
%WINDIR%\syswow64\windows update w.781138.exe
%WINDIR%\syswow64\windows update w.163838.exe
%WINDIR%\syswow64\windows update w.396461.exe
%WINDIR%\syswow64\windows update w.839102.exe
%WINDIR%\syswow64\windows update w.271879.exe
%WINDIR%\syswow64\windows update w.200274.exe
%WINDIR%\syswow64\windows update w.721400.exe
%WINDIR%\syswow64\windows update w.558557.exe
%WINDIR%\syswow64\windows update w.657181.exe
%WINDIR%\syswow64\windows update w.631169.exe
%WINDIR%\syswow64\windows update w.741539.exe
%WINDIR%\syswow64\windows update w.624654.exe
%WINDIR%\syswow64\syteminformation.txt
%WINDIR%\syswow64\windows update w.664497.exe
%WINDIR%\syswow64\windows update w.834290.exe
%WINDIR%\syswow64\windows update w.702827.exe
%WINDIR%\syswow64\windows update w.534042.exe
%WINDIR%\syswow64\windows update w.593900.exe
%WINDIR%\syswow64\windows update w.309306.exe
%WINDIR%\syswow64\windows update w.497796.exe
%WINDIR%\syswow64\windows update w.893332.exe
%WINDIR%\syswow64\windows update w.134718.exe
%WINDIR%\syswow64\windows update w.593083.exe
%WINDIR%\syswow64\windows update w.584238.exe
%WINDIR%\syswow64\windows update w.628442.exe
%WINDIR%\syswow64\windows update w.588217.exe
%WINDIR%\syswow64\windows update w.149556.exe
%WINDIR%\syswow64\windows update w.545091.exe
%WINDIR%\syswow64\windows update w.395002.exe
%WINDIR%\syswow64\windows update w.298898.exe
%WINDIR%\syswow64\windows update w.496735.exe

Sets the 'hidden' attribute to the following files

<Full path to file>
%WINDIR%\syswow64\windows update w.616957.exe
%WINDIR%\syswow64\windows update w.576732.exe
%WINDIR%\syswow64\windows update w.617964.exe
%WINDIR%\syswow64\windows update w.950740.exe
%WINDIR%\syswow64\windows update w.960592.exe
%WINDIR%\syswow64\windows update w.807461.exe
%WINDIR%\syswow64\windows update w.560190.exe
%WINDIR%\syswow64\windows update w.814412.exe
%WINDIR%\syswow64\windows update w.724181.exe
%WINDIR%\syswow64\windows update w.781138.exe
%WINDIR%\syswow64\windows update w.163838.exe
%WINDIR%\syswow64\windows update w.396461.exe
%WINDIR%\syswow64\windows update w.839102.exe
%WINDIR%\syswow64\windows update w.271879.exe
%WINDIR%\syswow64\windows update w.200274.exe
%WINDIR%\syswow64\windows update w.721400.exe
%WINDIR%\syswow64\windows update w.558557.exe
%WINDIR%\syswow64\windows update w.657181.exe
%WINDIR%\syswow64\windows update w.631169.exe
%WINDIR%\syswow64\windows update w.741539.exe
%WINDIR%\syswow64\windows update w.624654.exe
%WINDIR%\syswow64\windows update w.626166.exe
%WINDIR%\syswow64\windows update w.664497.exe
%WINDIR%\syswow64\windows update w.834290.exe
%WINDIR%\syswow64\windows update w.702827.exe
%WINDIR%\syswow64\windows update w.534042.exe
%WINDIR%\syswow64\windows update w.593900.exe
%WINDIR%\syswow64\windows update w.309306.exe
%WINDIR%\syswow64\windows update w.497796.exe
%WINDIR%\syswow64\windows update w.893332.exe
%WINDIR%\syswow64\windows update w.134718.exe
%WINDIR%\syswow64\windows update w.593083.exe
%WINDIR%\syswow64\windows update w.584238.exe
%WINDIR%\syswow64\windows update w.628442.exe
%WINDIR%\syswow64\windows update w.588217.exe
%WINDIR%\syswow64\windows update w.149556.exe
%WINDIR%\syswow64\windows update w.545091.exe
%WINDIR%\syswow64\windows update w.395002.exe
%WINDIR%\syswow64\windows update w.298898.exe
%WINDIR%\syswow64\windows update w.496735.exe

Miscellaneous

Creates and executes the following

'%WINDIR%\syswow64\windows update w.626166.exe'
'%WINDIR%\syswow64\windows update w.617964.exe'
'%WINDIR%\syswow64\windows update w.950740.exe'
'%WINDIR%\syswow64\windows update w.960592.exe'
'%WINDIR%\syswow64\windows update w.807461.exe'
'%WINDIR%\syswow64\windows update w.560190.exe'
'%WINDIR%\syswow64\windows update w.814412.exe'
'%WINDIR%\syswow64\windows update w.616957.exe'
'%WINDIR%\syswow64\windows update w.576732.exe'
'%WINDIR%\syswow64\windows update w.724181.exe'
'%WINDIR%\syswow64\windows update w.396461.exe'
'%WINDIR%\syswow64\windows update w.839102.exe'
'%WINDIR%\syswow64\windows update w.271879.exe'
'%WINDIR%\syswow64\windows update w.200274.exe'
'%WINDIR%\syswow64\windows update w.721400.exe'
'%WINDIR%\syswow64\windows update w.558557.exe'
'%WINDIR%\syswow64\windows update w.781138.exe'
'%WINDIR%\syswow64\windows update w.163838.exe'
'%WINDIR%\syswow64\windows update w.657181.exe'
'%WINDIR%\syswow64\windows update w.741539.exe'
'%WINDIR%\syswow64\windows update w.298898.exe'
'%WINDIR%\syswow64\windows update w.834290.exe'
'%WINDIR%\syswow64\windows update w.702827.exe'
'%WINDIR%\syswow64\windows update w.534042.exe'
'%WINDIR%\syswow64\windows update w.593900.exe'
'%WINDIR%\syswow64\windows update w.309306.exe'
'%WINDIR%\syswow64\windows update w.497796.exe'
'%WINDIR%\syswow64\windows update w.893332.exe'
'%WINDIR%\syswow64\windows update w.664497.exe'
'%WINDIR%\syswow64\windows update w.134718.exe'
'%WINDIR%\syswow64\windows update w.584238.exe'
'%WINDIR%\syswow64\windows update w.628442.exe'
'%WINDIR%\syswow64\windows update w.588217.exe'
'%WINDIR%\syswow64\windows update w.149556.exe'
'%WINDIR%\syswow64\windows update w.545091.exe'
'%WINDIR%\syswow64\windows update w.395002.exe'
'%WINDIR%\syswow64\windows update w.624654.exe'
'%WINDIR%\syswow64\windows update w.593083.exe'
'%WINDIR%\syswow64\windows update w.631169.exe'
'%WINDIR%\syswow64\windows update w.496735.exe'

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations

Free trial