Trojan.KillFiles.23815

Technical Information

Malicious functions:

Executes the following:

'<SYSTEM32>\wbem\wmiadap.exe' /R /T

Modifies file system :

Creates the following files:

<Current directory>\skin\uCalendar\小雨转中雨.png
<Current directory>\skin\uCalendar\小雨转中雨_小.png
<Current directory>\skin\uCalendar\小雨_小.png
<Current directory>\skin\uCalendar\小到中雪_小.png
<Current directory>\skin\uCalendar\小雨.png
<Current directory>\skin\uCalendar\小雪.png
<Current directory>\skin\uCalendar\平安夜.png
<Current directory>\skin\uCalendar\快递.ico
<Current directory>\skin\uCalendar\已添加2.png
<Current directory>\skin\uCalendar\小雪_小.png
<Current directory>\skin\uCalendar\已添加1.png
<Current directory>\skin\uCalendar\大雨_小.png
<Current directory>\skin\uCalendar\大雪.png
<Current directory>\skin\uCalendar\大雨.png
<Current directory>\skin\uCalendar\大暴雨_小.png
<Current directory>\skin\uCalendar\大透明.png
<Current directory>\skin\uCalendar\大雪_小.png
<Current directory>\skin\uCalendar\妇女节.png
<Current directory>\skin\uCalendar\小到中雪.png
<Current directory>\skin\uCalendar\天气_f2.png
<Current directory>\skin\uCalendar\天气_del.png
<Current directory>\skin\uCalendar\天气_f1.png
<Current directory>\skin\uCalendar\教师节.png
<Current directory>\skin\uCalendar\新增备忘.png
<Current directory>\skin\uCalendar\提醒_f2.png
<Current directory>\skin\uCalendar\提醒_del.png
<Current directory>\skin\uCalendar\提醒_f1.png
<Current directory>\skin\uCalendar\新闻ie.png
<Current directory>\skin\uCalendar\新闻_f2.png
<Current directory>\skin\uCalendar\日历.png
<Current directory>\skin\uCalendar\新闻_f1.png
<Current directory>\skin\uCalendar\新闻_b.png
<Current directory>\skin\uCalendar\新闻_del.png
<Current directory>\skin\uCalendar\快递_f1.png
<Current directory>\skin\uCalendar\快递_f2.png
<Current directory>\skin\uCalendar\快递_del.png
<Current directory>\skin\uCalendar\快递ie.png
<Current directory>\skin\uCalendar\快递_b.png
<Current directory>\skin\uCalendar\情人节.png
<Current directory>\skin\uCalendar\扬沙_小.png
<Current directory>\skin\uCalendar\提醒_b.png
<Current directory>\skin\uCalendar\扬沙.png
<Current directory>\skin\uCalendar\愚人节.png
<Current directory>\skin\uCalendar\感恩节.png
<Current directory>\skin\uCalendar\大暴雨.png
<Current directory>\skin\uCalendar\假选中.PNG
<Current directory>\skin\uCalendar\儿童节.png
<Current directory>\skin\uCalendar\假期_f2.png
<Current directory>\skin\uCalendar\假期_del.png
<Current directory>\skin\uCalendar\假期_f1.png
<Current directory>\skin\uCalendar\元宵节.png
<Current directory>\skin\uCalendar\关机_f1.png
<Current directory>\skin\uCalendar\关机_f2.png
<Current directory>\skin\uCalendar\关机_del.png
<Current directory>\skin\uCalendar\光棍节.png
<Current directory>\skin\uCalendar\关机_b.png
<Current directory>\skin\uCalendar\云控.xml
<Current directory>\skin\uCalendar\今天n.png
<Current directory>\skin\uCalendar\中雪_小.png
<Current directory>\skin\uCalendar\中级沙尘暴_小.png
<Current directory>\skin\uCalendar\中雪.png
<Current directory>\skin\uCalendar\今天u.png
<Current directory>\skin\uCalendar\假期u.png
<Current directory>\skin\uCalendar\假期_b.png
<Current directory>\skin\uCalendar\假期n.png
<Current directory>\skin\uCalendar\假.png
<Current directory>\skin\uCalendar\假期ie.png
<Current directory>\skin\uCalendar\备忘录jj.png
<Current directory>\skin\uCalendar\复件 scrollbar.png
<Current directory>\skin\uCalendar\备忘_f2.png
<Current directory>\skin\uCalendar\备忘_del.png
<Current directory>\skin\uCalendar\备忘_f1.png
<Current directory>\skin\uCalendar\多云转晴.png
<Current directory>\skin\uCalendar\夜晚晴朗.png
<Current directory>\skin\uCalendar\夜晚晴朗_小.png
<Current directory>\skin\uCalendar\夜晚多云_小.png
<Current directory>\skin\uCalendar\多云转晴_小.png
<Current directory>\skin\uCalendar\夜晚多云.png
<Current directory>\skin\uCalendar\劳动节.png
<Current directory>\skin\uCalendar\国庆节.png
<Current directory>\skin\uCalendar\冻雨_小.png
<Current directory>\skin\uCalendar\冒号.png
<Current directory>\skin\uCalendar\冻雨.png
<Current directory>\skin\uCalendar\圣诞节.png
<Current directory>\skin\uCalendar\壁纸_f2.png
<Current directory>\skin\uCalendar\备忘_b.png
<Current directory>\skin\uCalendar\壁纸_f1.png
<Current directory>\skin\uCalendar\壁纸_b.png
<Current directory>\skin\uCalendar\壁纸_del.png
<Current directory>\skin\uCalendar\日历_del.png
<Current directory>\skin\uCalendar\词典_f2.png
<Current directory>\skin\uCalendar\透明del.png
<Current directory>\skin\uCalendar\词典_f1.png
<Current directory>\skin\uCalendar\词典_b.png
<Current directory>\skin\uCalendar\词典_del.png
<Current directory>\skin\uCalendar\闹钟.png
<Current directory>\skin\uCalendar\雨夹雪.png
<Current directory>\skin\uCalendar\雨夹雪_小.png
<Current directory>\skin\uCalendar\除夕.png
<Current directory>\skin\uCalendar\阴.png
<Current directory>\skin\uCalendar\阴_小.png
<Current directory>\skin\uCalendar\菜单bk.png
<Current directory>\skin\uCalendar\计算机.ico
<Current directory>\skin\uCalendar\菜单.png
<Current directory>\skin\uCalendar\编辑.png
<Current directory>\skin\uCalendar\背景11.png
<Current directory>\skin\uCalendar\计算机_b.png
<Current directory>\skin\uCalendar\词典.ico
<Current directory>\skin\uCalendar\词典ie.png
<Current directory>\skin\uCalendar\计算机_f2.png
<Current directory>\skin\uCalendar\计算机_del.png
<Current directory>\skin\uCalendar\计算机_f1.png
<Current directory>\skin\uCalendar\默认选中.png
<Current directory>\DesktopCalendar.dll
<Current directory>\skin\uCalendar\默认jieri_pic.jpg
<Current directory>\skin\uCalendar\鬼节.png
<Current directory>\skin\uCalendar\默认.png
<Current directory>\huangli.xml
<Current directory>\tclock.ini
<Current directory>\uCalendar.exe
<Current directory>\Replace64.dll
<Current directory>\niaojiao.wav
<Current directory>\Replace.dll
<Current directory>\skin\uCalendar\雾_小.png
<Current directory>\skin\uCalendar\音乐.ico
<Current directory>\skin\uCalendar\雾.png
<Current directory>\skin\uCalendar\雷阵雨.png
<Current directory>\skin\uCalendar\雷阵雨_小.png
<Current directory>\skin\uCalendar\音乐ie.png
<Current directory>\skin\uCalendar\音乐_f2.png
<Current directory>\skin\uCalendar\高考.png
<Current directory>\skin\uCalendar\音乐_f1.png
<Current directory>\skin\uCalendar\音乐_b.png
<Current directory>\skin\uCalendar\音乐_del.png
<Current directory>\skin\uCalendar\端午节.png
<Current directory>\skin\uCalendar\暴雪_小.png
<Current directory>\skin\uCalendar\更多1.png
<Current directory>\skin\uCalendar\暴雪.png
<Current directory>\skin\uCalendar\暴雨.png
<Current directory>\skin\uCalendar\暴雨_小.png
<Current directory>\skin\uCalendar\母亲节.png
<Current directory>\skin\uCalendar\添加.png
<Current directory>\skin\uCalendar\添加功能.png
<Current directory>\skin\uCalendar\消费者.png
<Current directory>\skin\uCalendar\沙尘暴.png
<Current directory>\skin\uCalendar\沙尘暴_小.png
<Current directory>\skin\uCalendar\星座ie.png
<Current directory>\skin\uCalendar\星座_b.png
<Current directory>\skin\uCalendar\星座.ico
<Current directory>\skin\uCalendar\日历_f1.png
<Current directory>\skin\uCalendar\日历_f2.png
<Current directory>\skin\uCalendar\星座_del.png
<Current directory>\skin\uCalendar\晴.png
<Current directory>\skin\uCalendar\晴_小.png
<Current directory>\skin\uCalendar\春节.png
<Current directory>\skin\uCalendar\星座_f1.png
<Current directory>\skin\uCalendar\星座_f2.png
<Current directory>\skin\uCalendar\电影_b.png
<Current directory>\skin\uCalendar\电影_del.png
<Current directory>\skin\uCalendar\电影ie.png
<Current directory>\skin\uCalendar\班选中.PNG
<Current directory>\skin\uCalendar\电影.ico
<Current directory>\skin\uCalendar\电影_f1.png
<Current directory>\skin\uCalendar\票选中.png
<Current directory>\skin\uCalendar\票默认.png
<Current directory>\skin\uCalendar\确认按钮常态.png
<Current directory>\skin\uCalendar\电影_f2.png
<Current directory>\skin\uCalendar\确认按钮2态.png
<Current directory>\skin\uCalendar\游戏_del.png
<Current directory>\skin\uCalendar\游戏_f1.png
<Current directory>\skin\uCalendar\游戏_b.png
<Current directory>\skin\uCalendar\清明节.png
<Current directory>\skin\uCalendar\游戏ie.png
<Current directory>\skin\uCalendar\游戏_f2.png
<Current directory>\skin\uCalendar\特大沙尘暴.png
<Current directory>\skin\uCalendar\班.png
<Current directory>\skin\uCalendar\特大暴雨_小.png
<Current directory>\skin\uCalendar\父亲节.png
<Current directory>\skin\uCalendar\特大暴雨.png
<Current directory>\skin\uCalendar\iebox.xml
<Current directory>\skin\uCalendar\ieweb.xml
<Current directory>\skin\uCalendar\ie.xml
<Current directory>\skin\uCalendar\icon_setting.png
<Current directory>\skin\uCalendar\icon_skin.png
<Current directory>\skin\uCalendar\ie关闭.png
<Current directory>\skin\uCalendar\infoMenu.xml
<Current directory>\skin\uCalendar\input.png
<Current directory>\skin\uCalendar\ie缩小2.png
<Current directory>\skin\uCalendar\ie关闭2.png
<Current directory>\skin\uCalendar\ie缩小.png
<Current directory>\skin\uCalendar\g1.png
<Current directory>\skin\uCalendar\g2.png
<Current directory>\skin\uCalendar\ff.png
<Current directory>\skin\uCalendar\dian.png
<Current directory>\skin\uCalendar\Festival.xml
<Current directory>\skin\uCalendar\guanbi1.png
<Current directory>\skin\uCalendar\icon_clo.png
<Current directory>\skin\uCalendar\icon_close.png
<Current directory>\skin\uCalendar\huanfu.png
<Current directory>\skin\uCalendar\guanbi2.png
<Current directory>\skin\uCalendar\hl.xml
<Current directory>\skin\uCalendar\msgwnd.xml
<Current directory>\skin\uCalendar\payinsure_open_hover.png
<Current directory>\skin\uCalendar\mobileTip.xml
<Current directory>\skin\uCalendar\mainlayer.xml
<Current directory>\skin\uCalendar\menu_bk.png
<Current directory>\skin\uCalendar\pointwnd0.xml
<Current directory>\skin\uCalendar\poptip.png
<Current directory>\skin\uCalendar\Refresh_hover.png
<Current directory>\skin\uCalendar\popiebig.png
<Current directory>\skin\uCalendar\pointwnd1.xml
<Current directory>\skin\uCalendar\pointwnd2.xml
<Current directory>\skin\uCalendar\jintian2.png
<Current directory>\skin\uCalendar\jintian3.png
<Current directory>\skin\uCalendar\jintian1.png
<Current directory>\skin\uCalendar\InputBox.xml
<Current directory>\skin\uCalendar\ji.png
<Current directory>\skin\uCalendar\jintian4.png
<Current directory>\skin\uCalendar\log1.png
<Current directory>\skin\uCalendar\logo_16icon.png
<Current directory>\skin\uCalendar\ljty.png
<Current directory>\skin\uCalendar\layerClo.png
<Current directory>\skin\uCalendar\list_bk.png
<Current directory>\skin\uCalendar\delapp2.png
<Current directory>\skin\uCalendar\addapph.png
<Current directory>\skin\uCalendar\allbtn_down.png
<Current directory>\skin\uCalendar\addapp.png
<Current directory>\skin\uCalendar\360_pushed.png
<Current directory>\skin\uCalendar\723纪念.png
<Current directory>\skin\uCalendar\allbtn_nor.png
<Current directory>\skin\uCalendar\apptool.xml
<Current directory>\skin\uCalendar\bar_red.png
<Current directory>\skin\uCalendar\apptool.png
<Current directory>\skin\uCalendar\allbtn_over.png
<Current directory>\skin\uCalendar\appbg.png
<Current directory>\skin\uCalendar\1x1.png
<Current directory>\skin\uCalendar\2.ico
<Current directory>\skin\uCalendar\1221.png
<Current directory>\skin\uCalendar\11.png
<Current directory>\skin\uCalendar\111.png
<Current directory>\skin\uCalendar\3601.png
<Current directory>\skin\uCalendar\360_hover.png
<Current directory>\skin\uCalendar\360_normal.png
<Current directory>\skin\uCalendar\360thumb.png
<Current directory>\skin\uCalendar\360ProgressF.png
<Current directory>\skin\uCalendar\360ProgressF1.png
<Current directory>\skin\uCalendar\button_normal.png
<Current directory>\skin\uCalendar\button_p_hover.png
<Current directory>\skin\uCalendar\button_hover.png
<Current directory>\skin\uCalendar\button_B_pushed.png
<Current directory>\skin\uCalendar\button_down.png
<Current directory>\skin\uCalendar\button_p_normal.png
<Current directory>\skin\uCalendar\delapp.png
<Current directory>\skin\uCalendar\delapp1.png
<Current directory>\skin\uCalendar\del.png
<Current directory>\skin\uCalendar\button_p_pushed.png
<Current directory>\skin\uCalendar\ClockBackchain.png
<Current directory>\skin\uCalendar\beiwanglubj5.png
<Current directory>\skin\uCalendar\btn_close_down.png
<Current directory>\skin\uCalendar\beiwanglubj.png
<Current directory>\skin\uCalendar\beijing.png
<Current directory>\skin\uCalendar\beijing2.png
<Current directory>\skin\uCalendar\btn_close_highlight.png
<Current directory>\skin\uCalendar\button_B_hover.png
<Current directory>\skin\uCalendar\button_B_normal.png
<Current directory>\skin\uCalendar\btn_push.png
<Current directory>\skin\uCalendar\btn_close_normal.png
<Current directory>\skin\uCalendar\btn_hot.png
<Current directory>\skin\uCalendar\Refresh_normal.png
<Current directory>\skin\uCalendar\ttt.png
<Current directory>\skin\uCalendar\tubiao.png
<Current directory>\skin\uCalendar\tray_yes.png
<Current directory>\skin\uCalendar\tray_xp_no.png
<Current directory>\skin\uCalendar\tray_xp_yes.png
<Current directory>\skin\uCalendar\unsel.bmp
<Current directory>\skin\uCalendar\Weather_none.png
<Current directory>\skin\uCalendar\www.png
<Current directory>\skin\uCalendar\Vacation.png
<Current directory>\skin\uCalendar\unsel11.bmp
<Current directory>\skin\uCalendar\updateTip.xml
<Current directory>\skin\uCalendar\today_4.png
<Current directory>\skin\uCalendar\toolbar_hover.png
<Current directory>\skin\uCalendar\today_3.png
<Current directory>\skin\uCalendar\today_1.png
<Current directory>\skin\uCalendar\today_2.png
<Current directory>\skin\uCalendar\toolbar_hover2.png
<Current directory>\skin\uCalendar\Transparent.bmp
<Current directory>\skin\uCalendar\tray_no.png
<Current directory>\skin\uCalendar\toolbar_pushed2.png
<Current directory>\skin\uCalendar\toolbar_normal.png
<Current directory>\skin\uCalendar\toolbar_pushed.png
<Current directory>\skin\uCalendar\xweatherInfo.xml
<Current directory>\skin\uCalendar\yi.png
<Current directory>\skin\uCalendar\xwarnTip.xml
<Current directory>\skin\uCalendar\xTipLayer.xml
<Current directory>\skin\uCalendar\xuoxiao2.png
<Current directory>\skin\uCalendar\七夕节.png
<Current directory>\skin\uCalendar\中秋节.png
<Current directory>\skin\uCalendar\中级沙尘暴.png
<Current directory>\skin\uCalendar\下载进度条1.png
<Current directory>\skin\uCalendar\万圣节.png
<Current directory>\skin\uCalendar\下载进度条0.png
<Current directory>\skin\uCalendar\xiala_3.png
<Current directory>\skin\uCalendar\xjiaqi.xml
<Current directory>\skin\uCalendar\xiala_2.png
<Current directory>\skin\uCalendar\xColorWnd.xml
<Current directory>\skin\uCalendar\xiala_1.png
<Current directory>\skin\uCalendar\xminiTip.xml
<Current directory>\skin\uCalendar\xtest.xml
<Current directory>\skin\uCalendar\xTip.xml
<Current directory>\skin\uCalendar\xShutdown.xml
<Current directory>\skin\uCalendar\xNotepad.xml
<Current directory>\skin\uCalendar\xSetInfo.xml
<Current directory>\skin\uCalendar\tips_D01.png
<Current directory>\skin\uCalendar\skytit2.png
<Current directory>\skin\uCalendar\skytit3.png
<Current directory>\skin\uCalendar\skytit1.png
<Current directory>\skin\uCalendar\sky3.png
<Current directory>\skin\uCalendar\sky4.png
<Current directory>\skin\uCalendar\skytit4.png
<Current directory>\skin\uCalendar\SliderS.bmp
<Current directory>\skin\uCalendar\suoxiao2.png
<Current directory>\skin\uCalendar\SliderL.bmp
<Current directory>\skin\uCalendar\sky_aero.png
<Current directory>\skin\uCalendar\SliderH.bmp
<Current directory>\skin\uCalendar\search_bk.png
<Current directory>\skin\uCalendar\shutdown.xml
<Current directory>\skin\uCalendar\scrollbar.png
<Current directory>\skin\uCalendar\Refresh_pushed.png
<Current directory>\skin\uCalendar\scrollbar.bmp
<Current directory>\skin\uCalendar\sidebar_1.png
<Current directory>\skin\uCalendar\sky1.png
<Current directory>\skin\uCalendar\sky2.png
<Current directory>\skin\uCalendar\sidebar_4.png
<Current directory>\skin\uCalendar\sidebar_2.png
<Current directory>\skin\uCalendar\sidebar_3.png
<Current directory>\skin\uCalendar\Temper6.png
<Current directory>\skin\uCalendar\Temper7.png
<Current directory>\skin\uCalendar\Temper5.png
<Current directory>\skin\uCalendar\Temper3.png
<Current directory>\skin\uCalendar\Temper4.png
<Current directory>\skin\uCalendar\Temper8.png
<Current directory>\skin\uCalendar\time icon.png
<Current directory>\skin\uCalendar\tip.png
<Current directory>\skin\uCalendar\Thumbs.db
<Current directory>\skin\uCalendar\Temper9.png
<Current directory>\skin\uCalendar\Temper符号.png
<Current directory>\skin\uCalendar\S_22.png
<Current directory>\skin\uCalendar\s_3.png
<Current directory>\skin\uCalendar\S_2.png
<Current directory>\skin\uCalendar\S_1.png
<Current directory>\skin\uCalendar\S_11.png
<Current directory>\skin\uCalendar\t1.png
<Current directory>\skin\uCalendar\Temper1.png
<Current directory>\skin\uCalendar\Temper2.png
<Current directory>\skin\uCalendar\Temper0.png
<Current directory>\skin\uCalendar\t2.png
<Current directory>\skin\uCalendar\Temper-.png

Sets the 'hidden' attribute to the following files:

<Current directory>\skin\uCalendar\Thumbs.db

Deletes the following files:

<SYSTEM32>\PerfStringBackup.TMP
<SYSTEM32>\wbem\Performance\WmiApRpl.ini
<Current directory>\uCalendar.exe

Miscellaneous:

Searches for the following windows:

ClassName: 'Shell_TrayWnd' WindowName: ''
ClassName: 'EDIT' WindowName: ''

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Technical Information

Curing recommendations

Free trial