Trojan.Siggen4.16399

Technical Information

Malicious functions:

Executes the following:

<SYSTEM32>\net1.exe stop NVSVC32
<SYSTEM32>\net.exe stop NWService
<SYSTEM32>\net.exe stop NVSVC32
<SYSTEM32>\net.exe stop NVC95
<SYSTEM32>\net1.exe stop NVC95
<SYSTEM32>\net1.exe stop NWService
<SYSTEM32>\net1.exe stop PADMIN
<SYSTEM32>\net.exe stop pavproxy
<SYSTEM32>\net.exe stop PADMIN
<SYSTEM32>\net.exe stop NWTOOL16
<SYSTEM32>\net1.exe stop NWTOOL16
<SYSTEM32>\net.exe stop NSCHED32
<SYSTEM32>\net1.exe stop NSCHED32
<SYSTEM32>\net1.exe stop NPSSVC
<SYSTEM32>\net1.exe stop NPROTECT
<SYSTEM32>\net.exe stop NPSSVC
<SYSTEM32>\net.exe stop ntrtscan
<SYSTEM32>\net.exe stop NTXconfig
<SYSTEM32>\net1.exe stop NTXconfig
<SYSTEM32>\net1.exe stop NTVDM
<SYSTEM32>\net1.exe stop ntrtscan
<SYSTEM32>\net.exe stop NTVDM
<SYSTEM32>\net1.exe stop pavproxy
<SYSTEM32>\net.exe stop POPROXY
<SYSTEM32>\net1.exe stop POPROXY
<SYSTEM32>\net1.exe stop POP3TRAP
<SYSTEM32>\net1.exe stop PERSFW
<SYSTEM32>\net.exe stop POP3TRAP
<SYSTEM32>\net.exe stop PORTMONITOR
<SYSTEM32>\net.exe stop PROGRAMAUDITOR
<SYSTEM32>\net1.exe stop PROGRAMAUDITOR
<SYSTEM32>\net1.exe stop PROCESSMONITOR
<SYSTEM32>\net1.exe stop PORTMONITOR
<SYSTEM32>\net.exe stop PROCESSMONITOR
<SYSTEM32>\net1.exe stop pccntmon
<SYSTEM32>\net.exe stop pccwin97
<SYSTEM32>\net.exe stop pccntmon
<SYSTEM32>\net.exe stop PCCIOMON
<SYSTEM32>\net1.exe stop PCCIOMON
<SYSTEM32>\net1.exe stop pccwin97
<SYSTEM32>\net1.exe stop pcscan
<SYSTEM32>\net.exe stop PERSFW
<SYSTEM32>\net.exe stop pcscan
<SYSTEM32>\net.exe stop PCCWIN98
<SYSTEM32>\net1.exe stop PCCWIN98
<SYSTEM32>\net.exe stop NPROTECT
<SYSTEM32>\net1.exe stop navapsvc
<SYSTEM32>\net.exe stop NAVAPW32
<SYSTEM32>\net.exe stop navapsvc
<SYSTEM32>\net.exe stop NAVAP
<SYSTEM32>\net1.exe stop NAVAP
<SYSTEM32>\net1.exe stop NAVAPW32
<SYSTEM32>\net1.exe stop NAVEX15
<SYSTEM32>\net.exe stop NAVLU32
<SYSTEM32>\net.exe stop NAVEX15
<SYSTEM32>\net.exe stop NAVENG
<SYSTEM32>\net1.exe stop NAVENG
<SYSTEM32>\net.exe stop minilog
<SYSTEM32>\net1.exe stop minilog
<SYSTEM32>\net1.exe stop MGHTML
<SYSTEM32>\net1.exe stop MGAVRTE
<SYSTEM32>\net.exe stop MGHTML
<SYSTEM32>\net.exe stop MONITOR
<SYSTEM32>\net.exe stop MWATCH
<SYSTEM32>\net1.exe stop MWATCH
<SYSTEM32>\net1.exe stop MOOLIVE
<SYSTEM32>\net1.exe stop MONITOR
<SYSTEM32>\net.exe stop MOOLIVE
<SYSTEM32>\net1.exe stop NAVLU32
<SYSTEM32>\net.exe stop NISSERV
<SYSTEM32>\net1.exe stop NISSERV
<SYSTEM32>\net1.exe stop NGServer
<SYSTEM32>\net1.exe stop ngdbserv
<SYSTEM32>\net.exe stop NGServer
<SYSTEM32>\net.exe stop NISUM
<SYSTEM32>\net.exe stop NORMIST
<SYSTEM32>\net1.exe stop NORMIST
<SYSTEM32>\net1.exe stop NMAIN
<SYSTEM32>\net1.exe stop NISUM
<SYSTEM32>\net.exe stop NMAIN
<SYSTEM32>\net1.exe stop NAVWNT
<SYSTEM32>\net.exe stop NDD32
<SYSTEM32>\net.exe stop NAVWNT
<SYSTEM32>\net.exe stop NAVW32
<SYSTEM32>\net1.exe stop NAVW32
<SYSTEM32>\net1.exe stop NDD32
<SYSTEM32>\net1.exe stop NETUTILS
<SYSTEM32>\net.exe stop ngdbserv
<SYSTEM32>\net.exe stop NETUTILS
<SYSTEM32>\net.exe stop NeoWatchLog
<SYSTEM32>\net1.exe stop NeoWatchLog
<SYSTEM32>\net.exe stop PROT95
<SYSTEM32>\net1.exe stop VPC32
<SYSTEM32>\net.exe stop VPTRAY
<SYSTEM32>\net.exe stop VPC32
<SYSTEM32>\net.exe stop VETTRAY
<SYSTEM32>\net1.exe stop VETTRAY
<SYSTEM32>\net1.exe stop VPTRAY
<SYSTEM32>\net1.exe stop VSECOMR
<SYSTEM32>\net.exe stop VSHWIN32
<SYSTEM32>\net.exe stop VSECOMR
<SYSTEM32>\net.exe stop VSCHED
<SYSTEM32>\net1.exe stop VSCHED
<SYSTEM32>\net.exe stop vbcmserv
<SYSTEM32>\net1.exe stop vbcmserv
<SYSTEM32>\net1.exe stop TFAK
<SYSTEM32>\net1.exe stop SYMTRAY
<SYSTEM32>\net.exe stop TFAK
<SYSTEM32>\net.exe stop VbCons
<SYSTEM32>\net.exe stop VET95
<SYSTEM32>\net1.exe stop VET95
<SYSTEM32>\net1.exe stop VET32
<SYSTEM32>\net1.exe stop VbCons
<SYSTEM32>\net.exe stop VET32
<SYSTEM32>\net1.exe stop VSHWIN32
<SYSTEM32>\net.exe stop WRADMIN
<SYSTEM32>\net1.exe stop WRADMIN
<SYSTEM32>\net1.exe stop WIMMUN32
<SYSTEM32>\net1.exe stop WGFE95
<SYSTEM32>\net.exe stop WIMMUN32
<SYSTEM32>\net.exe stop WRCTRL
<SYSTEM32>\net.exe stop ZONEALARM
<SYSTEM32>\net1.exe stop ZONEALARM
<SYSTEM32>\net1.exe stop ZAPROMINILOG
<SYSTEM32>\net1.exe stop WRCTRL
<SYSTEM32>\net.exe stop ZAPROMINILOG
<SYSTEM32>\net1.exe stop vsmon
<SYSTEM32>\net.exe stop VSSTAT
<SYSTEM32>\net.exe stop vsmon
<SYSTEM32>\net.exe stop VSMAIN
<SYSTEM32>\net1.exe stop VSMAIN
<SYSTEM32>\net1.exe stop VSSTAT
<SYSTEM32>\net1.exe stop WEBSCANX
<SYSTEM32>\net.exe stop WGFE95
<SYSTEM32>\net.exe stop WEBSCANX
<SYSTEM32>\net.exe stop WATCHDOG
<SYSTEM32>\net1.exe stop WATCHDOG
<SYSTEM32>\net.exe stop SYMTRAY
<SYSTEM32>\net1.exe stop sbserv
<SYSTEM32>\net.exe stop SCAN32
<SYSTEM32>\net.exe stop sbserv
<SYSTEM32>\net.exe stop RTVSCN95
<SYSTEM32>\net1.exe stop RTVSCN95
<SYSTEM32>\net1.exe stop SCAN32
<SYSTEM32>\net1.exe stop sharedaccess
<SYSTEM32>\net.exe stop SPHINX
<SYSTEM32>\net.exe stop sharedaccess
<SYSTEM32>\net.exe stop SCRSCAN
<SYSTEM32>\net1.exe stop SCRSCAN
<SYSTEM32>\net.exe stop RAV7
<SYSTEM32>\net1.exe stop RAV7
<SYSTEM32>\net1.exe stop PVIEW95
<SYSTEM32>\net1.exe stop PROT95
<SYSTEM32>\net.exe stop PVIEW95
<SYSTEM32>\net.exe stop RAV7WIN
<SYSTEM32>\net.exe stop RESCUE
<SYSTEM32>\net1.exe stop RESCUE
<SYSTEM32>\net1.exe stop REALMON
<SYSTEM32>\net1.exe stop RAV7WIN
<SYSTEM32>\net.exe stop REALMON
<SYSTEM32>\net1.exe stop SPHINX
<SYSTEM32>\net.exe stop SWEEPSRV.SYS
<SYSTEM32>\net1.exe stop SWEEPSRV.SYS
<SYSTEM32>\net1.exe stop SWEEPSRV
<SYSTEM32>\net1.exe stop SweepNet
<SYSTEM32>\net.exe stop SWEEPSRV
<SYSTEM32>\net.exe stop SweepUpdate
<SYSTEM32>\net.exe stop SymProxySvc
<SYSTEM32>\net1.exe stop SymProxySvc
<SYSTEM32>\net1.exe stop SWNETSUP
<SYSTEM32>\net1.exe stop SweepUpdate
<SYSTEM32>\net.exe stop SWNETSUP
<SYSTEM32>\net1.exe stop SS3EDIT
<SYSTEM32>\net.exe stop STOPW
<SYSTEM32>\net.exe stop SS3EDIT
<SYSTEM32>\net.exe stop SPYXX
<SYSTEM32>\net1.exe stop SPYXX
<SYSTEM32>\net1.exe stop STOPW
<SYSTEM32>\net1.exe stop SWEEP95
<SYSTEM32>\net.exe stop SweepNet
<SYSTEM32>\net.exe stop SWEEP95
<SYSTEM32>\net.exe stop SVW3
<SYSTEM32>\net1.exe stop SVW3
<SYSTEM32>\net.exe stop AVXMONITOR9X
<SYSTEM32>\net1.exe stop AVXMONITOR9X
<SYSTEM32>\net1.exe stop AVWINNT
<SYSTEM32>\net1.exe stop AVSYNMGR
<SYSTEM32>\net.exe stop AVWINNT
<SYSTEM32>\net.exe stop AVXMONITORNT
<SYSTEM32>\net.exe stop AVXW
<SYSTEM32>\net1.exe stop AVXW
<SYSTEM32>\net1.exe stop AVXQUAR
<SYSTEM32>\net1.exe stop AVXMONITORNT
<SYSTEM32>\net.exe stop AVXQUAR
<SYSTEM32>\net1.exe stop AVP32
<SYSTEM32>\net.exe stop AVPCC
<SYSTEM32>\net.exe stop AVP32
<SYSTEM32>\net.exe stop avkwctl9
<SYSTEM32>\net1.exe stop avkwctl9
<SYSTEM32>\net1.exe stop AVPCC
<SYSTEM32>\net1.exe stop Avsched32
<SYSTEM32>\net.exe stop AVSYNMGR
<SYSTEM32>\net.exe stop Avsched32
<SYSTEM32>\net.exe stop AVPM
<SYSTEM32>\net1.exe stop AVPM
<SYSTEM32>\net.exe stop BLACKD
<SYSTEM32>\net1.exe stop CONNECTIONMONITOR
<SYSTEM32>\net.exe stop defscangui
<SYSTEM32>\net.exe stop CONNECTIONMONITOR
<SYSTEM32>\net.exe stop CMGRDIAN
<SYSTEM32>\net1.exe stop CMGRDIAN
<SYSTEM32>\net1.exe stop defscangui
<SYSTEM32>\net1.exe stop DOORS
<SYSTEM32>\net.exe stop DVP95
<SYSTEM32>\net.exe stop DOORS
<SYSTEM32>\net.exe stop DEFWATCH
<SYSTEM32>\net1.exe stop DEFWATCH
<SYSTEM32>\net.exe stop CLAW95
<SYSTEM32>\net1.exe stop CLAW95
<SYSTEM32>\net1.exe stop BLACKICE
<SYSTEM32>\net1.exe stop BLACKD
<SYSTEM32>\net.exe stop BLACKICE
<SYSTEM32>\net.exe stop CLAW95CF
<SYSTEM32>\net.exe stop CLEANER3
<SYSTEM32>\net1.exe stop CLEANER3
<SYSTEM32>\net1.exe stop CLEANER
<SYSTEM32>\net1.exe stop CLAW95CF
<SYSTEM32>\net.exe stop CLEANER
<SYSTEM32>\net1.exe stop avkservice
<SYSTEM32>\net.exe stop ANTS
<SYSTEM32>\net1.exe stop ANTS
<SYSTEM32>\net1.exe stop ANTI-TROJAN
<SYSTEM32>\net1.exe stop AMON9X
<SYSTEM32>\net.exe stop ANTI-TROJAN
<SYSTEM32>\net.exe stop apvxdwin
<SYSTEM32>\net.exe stop ATUPDATER
<SYSTEM32>\net1.exe stop ATUPDATER
<SYSTEM32>\net1.exe stop ATCON
<SYSTEM32>\net1.exe stop apvxdwin
<SYSTEM32>\net.exe stop ATCON
<SYSTEM32>\net1.exe stop ACKWIN32
<SYSTEM32>\net.exe stop ADVXDWIN
<SYSTEM32>\net.exe stop ACKWIN32
<SYSTEM32>\net.exe stop cryptsvc
<SYSTEM32>\net1.exe stop cryptsvc
<SYSTEM32>\net1.exe stop ADVXDWIN
<SYSTEM32>\net1.exe stop ALOGSERV
<SYSTEM32>\net.exe stop AMON9X
<SYSTEM32>\net.exe stop ALOGSERV
<SYSTEM32>\net.exe stop ALERTSVC
<SYSTEM32>\net1.exe stop ALERTSVC
<SYSTEM32>\net.exe stop ATWATCH
<SYSTEM32>\net1.exe stop AVGSERV9
<SYSTEM32>\net.exe stop AVGW
<SYSTEM32>\net.exe stop AVGSERV9
<SYSTEM32>\net.exe stop AVGSERV
<SYSTEM32>\net1.exe stop AVGSERV
<SYSTEM32>\net1.exe stop AVGW
<SYSTEM32>\net1.exe stop AVKSERV
<SYSTEM32>\net.exe stop avkservice
<SYSTEM32>\net.exe stop AVKSERV
<SYSTEM32>\net.exe stop avkpop
<SYSTEM32>\net1.exe stop avkpop
<SYSTEM32>\net.exe stop AutoTrace
<SYSTEM32>\net1.exe stop AutoTrace
<SYSTEM32>\net1.exe stop AUTODOWN
<SYSTEM32>\net1.exe stop ATWATCH
<SYSTEM32>\net.exe stop AUTODOWN
<SYSTEM32>\net.exe stop AVCONSOL
<SYSTEM32>\net.exe stop AVGCTRL
<SYSTEM32>\net1.exe stop AVGCTRL
<SYSTEM32>\net1.exe stop AVGCC32
<SYSTEM32>\net1.exe stop AVCONSOL
<SYSTEM32>\net.exe stop AVGCC32
<SYSTEM32>\net1.exe stop DVP95
<SYSTEM32>\net.exe stop LDNETMON
<SYSTEM32>\net1.exe stop LDNETMON
<SYSTEM32>\net1.exe stop JEDI
<SYSTEM32>\net1.exe stop ISRV95
<SYSTEM32>\net.exe stop JEDI
<SYSTEM32>\net.exe stop LDPROMENU
<SYSTEM32>\net.exe stop LOCKDOWN
<SYSTEM32>\net1.exe stop LOCKDOWN
<SYSTEM32>\net1.exe stop LDSCAN
<SYSTEM32>\net1.exe stop LDPROMENU
<SYSTEM32>\net.exe stop LDSCAN
<SYSTEM32>\net1.exe stop ICSUPP95
<SYSTEM32>\net.exe stop ICSUPPNT
<SYSTEM32>\net.exe stop ICSUPP95
<SYSTEM32>\net.exe stop ICMON
<SYSTEM32>\net1.exe stop ICMON
<SYSTEM32>\net1.exe stop ICSUPPNT
<SYSTEM32>\net1.exe stop IOMON98
<SYSTEM32>\net.exe stop ISRV95
<SYSTEM32>\net.exe stop IOMON98
<SYSTEM32>\net.exe stop IFACE
<SYSTEM32>\net1.exe stop IFACE
<SYSTEM32>\net.exe stop LOCKDOWN2000
<SYSTEM32>\net1.exe stop MCUPDATE
<SYSTEM32>\net.exe stop MCVSRTE
<SYSTEM32>\net.exe stop MCUPDATE
<SYSTEM32>\net.exe stop MCTOOL
<SYSTEM32>\net1.exe stop MCTOOL
<SYSTEM32>\net1.exe stop MCVSRTE
<SYSTEM32>\net1.exe stop MGAVRTCL
<SYSTEM32>\net.exe stop MGAVRTE
<SYSTEM32>\net.exe stop MGAVRTCL
<SYSTEM32>\net.exe stop MCVSSHLD
<SYSTEM32>\net1.exe stop MCVSSHLD
<SYSTEM32>\net.exe stop LUCOMSERVER
<SYSTEM32>\net1.exe stop LUCOMSERVER
<SYSTEM32>\net1.exe stop LUALL
<SYSTEM32>\net1.exe stop LOCKDOWN2000
<SYSTEM32>\net.exe stop LUALL
<SYSTEM32>\net.exe stop MCAGENT
<SYSTEM32>\net.exe stop MCSHIELD
<SYSTEM32>\net1.exe stop MCSHIELD
<SYSTEM32>\net1.exe stop MCMNHDLR
<SYSTEM32>\net1.exe stop MCAGENT
<SYSTEM32>\net.exe stop MCMNHDLR
<SYSTEM32>\net1.exe stop ICLOADNT
<SYSTEM32>\net.exe stop fnrb32
<SYSTEM32>\net1.exe stop fnrb32
<SYSTEM32>\net1.exe stop fih32
<SYSTEM32>\net1.exe stop fch32
<SYSTEM32>\net.exe stop fih32
<SYSTEM32>\net.exe stop fsaa
<SYSTEM32>\net.exe stop fsgk32
<SYSTEM32>\net1.exe stop fsgk32
<SYSTEM32>\net1.exe stop fsav32
<SYSTEM32>\net1.exe stop fsaa
<SYSTEM32>\net.exe stop fsav32
<SYSTEM32>\net1.exe stop ETRUSTCIPE
<SYSTEM32>\net.exe stop EVPN
<SYSTEM32>\net.exe stop ETRUSTCIPE
<SYSTEM32>\net.exe stop EFPEADM
<SYSTEM32>\net1.exe stop EFPEADM
<SYSTEM32>\net1.exe stop EVPN
<SYSTEM32>\net1.exe stop fameh32
<SYSTEM32>\net.exe stop fch32
<SYSTEM32>\net.exe stop fameh32
<SYSTEM32>\net.exe stop EXPERT
<SYSTEM32>\net1.exe stop EXPERT
<SYSTEM32>\net.exe stop fsm32
<SYSTEM32>\net1.exe stop HELP
<SYSTEM32>\net.exe stop IAMAPP
<SYSTEM32>\net.exe stop HELP
<SYSTEM32>\net.exe stop GUARDDOG
<SYSTEM32>\net1.exe stop GUARDDOG
<SYSTEM32>\net1.exe stop IAMAPP
<SYSTEM32>\net1.exe stop ICLOAD95
<SYSTEM32>\net.exe stop ICLOADNT
<SYSTEM32>\net.exe stop ICLOAD95
<SYSTEM32>\net.exe stop IAMSERV
<SYSTEM32>\net1.exe stop IAMSERV
<SYSTEM32>\net.exe stop fsmb32
<SYSTEM32>\net1.exe stop fsmb32
<SYSTEM32>\net1.exe stop fsma32
<SYSTEM32>\net1.exe stop fsm32
<SYSTEM32>\net.exe stop fsma32
<SYSTEM32>\net.exe stop gbmenu
<SYSTEM32>\net.exe stop GUARD
<SYSTEM32>\net1.exe stop GUARD
<SYSTEM32>\net1.exe stop GENERICS
<SYSTEM32>\net1.exe stop gbmenu
<SYSTEM32>\net.exe stop GENERICS

Modifies file system :

Creates the following files:

%TEMP%\bt8266.bat

Sets the 'hidden' attribute to the following files:

%TEMP%\bt8266.bat

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations

Free trial