Техническая информация
Для обеспечения автозапуска и распространения:
Модифицирует следующие ключи реестра:
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'BLACKICE' = '%WINDIR%\mKalJsT.exe'
Вредоносные функции:
Внедряет код в
следующие системные процессы:
- %WINDIR%\Explorer.EXE
Завершает или пытается завершить
следующие пользовательские процессы:
- MCAGENT.EXE
- mpftray.exe
- GUARD.EXE
- gw.exe
- zapro.exe
- ZONEALARM.EXE
- NAVAPW32.EXE
- smc.exe
- fsav32.exe
- AVP.EXE
- AVP32.EXE
- AVGCC32.EXE
- AVGCTRL.EXE
- AVSYNMGR.EXE
- ccapp.exe
- AVPCC.EXE
- AVPM.EXE
Изменения в файловой системе:
Создает следующие файлы:
- C:\My Downloads\Star Wars Starfighter Full Downloader.exe
- C:\My Downloads\GTA3 Full Downloader.exe
- C:\My Downloads\Dark Age Of Camelot Shrouded Isles ISO - Full Downloader.exe
- C:\My Downloads\Macromedia Flash 5.0 Key Generator.exe
- C:\My Downloads\Red Ace Squadron Crack.exe
- C:\My Downloads\Star Wars Starfighter ISO - Full Downloader.exe
- C:\My Downloads\Hoyle Card Games 2003 ISO - Full Downloader.exe
- C:\My Downloads\Stronghold Crusader Patch.exe
- C:\My Downloads\Age Of Wonders 2 Patch.exe
- C:\My Downloads\ZoneAlarm Firewall Full Downloader.exe
- C:\My Downloads\Hitman 2 Silent Assassin Full Downloader.exe
- C:\My Downloads\Norton Utilities 2002 XP Crack.exe
- C:\My Downloads\MoviezChannelsInstaler Key Generator.exe
- C:\My Downloads\Sudden Strike 2 Full Downloader.exe
- C:\My Downloads\Prisoner Of War Crack.exe
- C:\My Downloads\MS Train Simulator Key Generator.exe
- C:\My Downloads\The Eye Of Kraken Patch.exe
- C:\My Downloads\Dweebs 2 Full Downloader.exe
- C:\My Downloads\Red Ace Squadron Key Generator.exe
- C:\My Downloads\F1 Grand Pix 4 Crack.exe
- C:\My Downloads\Age of Sail 2 Crack.exe
- C:\My Downloads\Microsoft Office XP (English) Crack.exe
- C:\My Downloads\Internet and Computer Speed Booster Full Downloader.exe
- C:\My Downloads\Nero Burning Rom 5.8.0.1 Patch.exe
- C:\My Downloads\Stronghold Crusader Key Generator.exe
- C:\My Downloads\Macromedia Dreamweaver MX Crack.exe
- C:\My Downloads\The Neverending Story Part I Crack.exe
- C:\My Downloads\Zidane-ScreenInstaler Crack.exe
- C:\My Downloads\Deadly Dozen ISO - Full Downloader.exe
- C:\My Downloads\DSL Modem Uncapper ISO - Full Downloader.exe
- C:\My Downloads\Internet and Computer Speed Booster Key Generator.exe
- C:\My Downloads\Cat Attacks Child Patch.exe
- C:\My Downloads\Industry Giant 2 Key Generator.exe
- C:\My Downloads\Winzip 8.0 Patch.exe
- %WINDIR%\mKalJsT.exe
- %WINDIR%\svchost.exe
- %WINDIR%\kernel.dll
- C:\My Downloads\Quake 3 Arena Full Downloader.exe
- C:\My Downloads\Duke Nukem Manhattan Project ISO - Full Downloader.exe
- C:\My Downloads\Clive Barker’s Undying Full Downloader.exe
- C:\My Downloads\Hoyle Card Games 2003 Key Generator.exe
- C:\My Downloads\Grand Theft Auto 3 Full Downloader.exe
- C:\My Downloads\The Neverending Story Part I Patch.exe
- C:\My Downloads\Unreal Tournament 3 Key Generator.exe
- C:\My Downloads\Dweebs 2 Crack.exe
- C:\My Downloads\F1 Grand Pix 4 Patch.exe
- C:\My Downloads\Free Virus Removal Tool From Symantec ISO - Full Downloader.exe
- C:\My Downloads\ZoneAlarm Firewall ISO - Full Downloader.exe
- C:\My Downloads\Half Life Blue Shift Patch.exe
- C:\My Downloads\Hard Truck 18 Wheels of Steel Patch.exe
- C:\My Downloads\Half-life WON Crack.exe
- C:\My Downloads\Borland Delphi 6 Patch.exe
- C:\My Downloads\The Eye Of Kraken Key Generator.exe
Присваивает атрибут 'скрытый' для следующих файлов:
- %WINDIR%\mKalJsT.exe
