Trojan.DownLoader24.63854

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Lantern' = '"<Full path to file>" -startup'

Malicious functions:

Executes the following:

'<SYSTEM32>\rundll32.exe' url.dll,FileProtocolHandler http://lo###host:1050/?1
'%ProgramFiles%\Internet Explorer\IEXPLORE.EXE' -nohome
'%APPDATA%\byteexec\pac-cmd.exe' on http://lo###host:1050/proxy_on.pac?no################################################################
'%APPDATA%\byteexec\pac-cmd.exe' show

Modifies file system:

Creates the following files:

%APPDATA%\Lantern\settings.yaml
%TEMP%\systray_temp_icon850325163
%HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\proxy_on[1].pac
%APPDATA%\byteexec\pac-cmd.exe
%APPDATA%\byteexec\certimporter.exe
%APPDATA%\Lantern\logs\lantern.log
%APPDATA%\systray\systray386.dll

Network activity:

Connects to:

'54.##9.220.128':443
'54.#82.4.4':443
'54.##2.4.158':443
'54.#92.29.7':443
'54.##9.219.139':443
'54.##9.212.207':443
'54.##2.29.139':443
'52.##2.136.86':443
'52.##2.136.57':443
'54.##9.220.118':443
'localhost':1699
'localhost':1050
'54.##9.219.126':443
'54.##0.11.44':443
'54.##9.221.181':443
'54.##9.212.236':443
'54.##2.19.86':443
'54.##2.25.123':443
'54.##0.11.33':443
'54.##0.5.144':443
'54.##0.15.132':443
'54.#82.4.73':443
'20#.#51.219.153':443
'52.##2.136.233':443
'20#.#51.219.242':443
'54.##0.130.231':443
'54.##2.25.112':443
'20#.#51.219.102':443
'54.##0.11.213':443
'20#.#51.219.130':443
'20#.#51.219.14':443
'52.##.25.133':443
'54.##2.4.116':443
'54.##0.130.170':443
'54.##9.208.107':443
'54.##2.25.90':443
'20#.#51.219.222':443
'54.##9.221.224':443
'54.##0.131.35':443
'52.##2.149.213':443
'54.##0.5.172':443
'52.##.16.241':443
'54.##9.220.16':443
'54.##0.15.65':443
'54.##9.221.167':443
'52.##2.136.123':443
'21#.#37.61.100':443
'52.##2.136.105':443
'54.##9.220.106':443
'54.##0.15.114':443
'21#.#37.61.95':443
'54.##9.220.204':443
'54.##0.15.57':443
'52.##2.136.43':443
'54.##9.221.213':443
'54.##0.5.195':443
'54.##9.219.73':443
'54.##9.214.232':443
'54.##9.208.82':443
'54.##2.19.53':443
'21#.#37.61.42':443
'54.##9.219.12':443
'54.##9.219.165':443
'54.##9.208.81':443
'21#.#37.61.196':443
'52.##.16.235':443
'20#.#51.219.156':443
'52.##2.149.251':443
'54.##0.11.197':443
'52.##2.136.154':443
'54.##9.210.249':443
'54.#30.5.97':443
'21#.#37.61.236':443
'54.##0.11.169':443
'52.##2.149.121':443
'54.##9.221.69':443
'54.##0.131.20':443
'54.##9.220.68':443
'54.##2.29.166':443
'54.##0.11.45':443
'52.##2.149.173':443
'52.##.16.134':443
'54.##2.25.66':443
'54.##2.19.101':443
'20#.#51.219.155':443
'52.##.25.211':443
'21#.#37.61.136':443
'21#.#37.61.111':443
'54.##9.219.17':443
'54.#30.15.5':443
'54.##0.5.162':443
'52.##2.136.129':443
'54.##0.131.65':443
'54.##9.204.76':443
'54.##0.15.170':443
'54.##0.131.226':443
'52.#4.16.8':443
'21#.#37.61.208':443
'54.##2.19.159':443
'52.##2.149.156':443
'54.##9.221.96':443
'54.#82.4.54':443
'52.##.16.119':443
'52.##2.149.201':443
'54.##9.206.69':443
'54.##0.11.88':443
'21#.#37.61.118':443
'54.##2.29.212':443
'54.##2.19.109':443
'54.##0.11.236':443
'54.##9.219.32':443
'54.##9.214.233':443
'54.##2.19.247':443
'54.##9.220.215':443
'54.##9.221.192':443
'54.##9.221.92':443
'54.##0.15.45':443
'21#.#37.61.203':443
'54.##9.221.114':443
'52.#4.25.7':443
'54.##0.15.145':443
'52.##.16.122':443
'54.##0.11.239':443
'54.##0.131.70':443
'52.##2.149.74':443
'54.##9.214.209':443
'54.##0.11.254':443
'54.##2.19.121':443
'52.##2.136.94':443
'54.##2.19.51':443
'54.##2.29.46':443
'54.##0.130.142':443
'54.##0.130.99':443
'54.##9.221.188':443
'52.##2.136.201':443
'52.##2.136.185':443
'54.##0.131.249':443
'52.##2.149.189':443
'21#.#37.61.180':443
'54.##2.29.23':443
'52.#4.16.36':443
'20#.#51.219.140':443
'20#.#51.219.160':443
'54.##2.29.76':443
'54.##9.220.61':443
'52.#4.16.75':443
'54.##0.131.82':443
'54.##2.25.54':443
'54.##9.219.27':443
'21#.#37.61.65':443
'54.##9.219.212':443
'54.##0.130.178':443
'54.##9.220.116':443
'52.##.25.117':443
'20#.#51.219.29':443
'52.##2.149.81':443
'54.##0.131.8':443
'20#.#51.219.247':443
'54.##9.220.69':443
'52.##2.136.163':443
'52.##2.149.210':443
'54.##0.130.208':443
'54.##9.221.215':443
'52.#4.25.99':443
'54.##2.4.226':443
'52.##2.149.167':443
'54.##0.11.227':443
'54.##9.221.126':443
'21#.#37.61.240':443
'54.##9.220.75':443
'52.##.16.248':443
'21#.#37.61.78':443
'21#.#37.61.82':443
'54.##2.19.166':443
'54.#30.5.82':443
'52.##2.136.7':443
'52.#4.16.20':443
'52.##2.136.122':443
'52.##.25.230':443
'54.##9.220.245':443
'54.##0.130.110':443
'21#.#37.61.117':443
'20#.#51.219.189':443
'54.##0.11.83':443
'54.##9.219.33':443
'54.##9.221.164':443
'20#.#51.219.121':443
'52.##2.149.155':443
'54.##9.221.82':443
'54.##0.131.48':443
'20#.#51.219.26':443
'54.##9.219.2':443
'20#.#51.219.60':443
'52.##2.149.205':443
'54.#92.25.6':443
'54.##0.5.114':443
'54.##2.19.88':443
'54.##2.19.210':443
'54.##0.15.154':443
'54.##2.29.149':443
'54.##0.130.202':443
'54.##0.11.235':443
'52.#4.16.9':443
'54.##2.25.75':443
'20#.#51.219.84':443
'52.##2.136.69':443
'54.##0.130.145':443
'21#.#37.61.127':443
'52.##.25.107':443
'54.##2.19.57':443
'52.##.25.100':443
'52.##.16.199':443
'54.##0.131.29':443
'54.##0.131.162':443
'54.##9.221.239':443
'54.##9.219.75':443
'52.##.25.224':443
'54.##9.220.186':443
'54.##2.29.104':443
'54.##2.4.110':443
'52.#4.25.42':443
'54.##2.25.95':443
'54.##9.220.76':443
'54.##2.25.166':443
'52.##2.136.167':443
'54.##9.220.18':443
'52.##.25.167':443
'54.##0.15.176':443
'54.##2.29.15':443
'54.##2.19.131':443
'21#.#37.61.235':443
'54.##9.220.101':443
'54.##9.210.204':443
'54.##9.219.160':443
'54.##2.19.158':443
'54.##9.219.44':443
'52.##.25.103':443
'54.##2.4.249':443
'54.#30.5.62':443
'54.##9.206.76':443
'21#.#37.61.206':443
'20#.#51.219.199':443
'54.##9.220.205':443
'52.##2.149.161':443
'54.##2.25.232':443
'52.##.16.105':443
'21#.#37.61.53':443
'52.#4.16.6':443
'54.##9.219.26':443
'54.##2.29.124':443
'52.##2.149.117':443
'54.##0.11.161':443
'54.#30.5.24':443
'52.##2.136.23':443
'52.#4.25.31':443
'54.##0.15.35':443
'54.##9.219.169':443
'54.#30.5.75':443
'52.##2.149.183':443
'52.##2.136.116':443
'54.##0.11.22':443
'52.##2.136.175':443
'54.##9.219.249':443
'52.##2.136.19':443
'54.##9.214.200':443
'54.##0.15.146':443
'54.##0.15.134':443
'54.##0.5.145':443
'54.##9.219.81':443
'52.##2.149.219':443
'54.#30.5.49':443
'54.##9.221.24':443
'54.##9.221.243':443
'54.##9.219.35':443
'54.##9.221.231':443
'54.##0.5.234':443
'54.##2.25.231':443
'54.##2.4.159':443
'54.##9.220.164':443
'20#.#51.219.38':443
'54.##0.5.155':443
'52.##2.149.21':443
'52.##2.136.135':443
'52.##2.149.4':443
'54.##2.25.52':443
'54.##9.219.40':443
'54.##0.11.144':443
'54.##0.11.190':443
'54.##2.19.163':443
'52.##.16.247':443
'52.##2.149.77':443
'52.##2.136.55':443
'20#.#51.219.159':443
'54.##0.15.239':443
'54.##9.220.240':443
'52.#4.25.89':443
'54.##2.29.72':443
'54.##2.25.76':443
'21#.#37.61.231':443
'54.##2.19.149':443
'54.##2.4.206':443
'54.##2.19.89':443
'21#.#37.61.104':443
'54.##2.25.20':443
'54.##0.15.96':443
'21#.#37.61.189':443
'54.##0.15.68':443
'52.##2.136.202':443
'54.##9.210.228':443
'54.##9.221.183':443
'52.##.16.169':443
'54.##0.11.199':443
'54.##2.29.92':443
'54.##9.208.75':443
'52.##2.136.179':443
'52.##.25.247':443
'21#.#37.61.130':443
'54.##2.4.119':443
'54.##0.15.149':443
'54.##0.11.23':443
'54.##2.25.43':443
'54.##9.204.83':443
'20#.#51.219.177':443
'54.##9.220.226':443
'20#.#51.219.162':443
'54.##0.15.27':443
'52.##2.149.22':443
'54.##2.25.233':443
'21#.#37.61.76':443
'54.##2.4.101':443
'54.##2.19.58':443
'54.#30.5.80':443
'54.#30.5.93':443
'54.##9.219.37':443
'52.##.16.187':443
'54.##2.19.35':443
'54.##0.11.162':443
'52.##.16.144':443
'54.#30.5.50':443
'54.##9.221.251':443
'52.##2.149.122':443
'54.##0.11.100':443
'54.##9.208.88':443
'54.#82.4.11':443
'54.##0.15.74':443
'52.#4.25.61':443
'54.##0.15.41':443
'54.##2.29.210':443
'54.##9.220.140':443
'54.##2.25.199':443
'54.##9.219.161':443
'52.#4.25.30':443
'54.#82.4.8':443
'54.##0.11.221':443
'54.##2.19.27':443
'54.##9.220.83':443
'52.##2.136.214':443
'52.#4.25.32':443
'52.##2.136.137':443
'52.##.16.201':443
'54.##9.221.140':443
'54.##2.29.153':443
'54.##2.29.196':443
'54.##9.219.129':443
'54.##2.29.71':443
'54.##9.221.158':443
'54.##2.25.56':443
'54.##0.15.183':443
'54.#30.11.5':443
'52.#4.16.34':443
'54.##9.212.227':443
'54.##0.131.117':443
'54.##0.131.28':443
'54.##9.210.247':443
'52.##2.149.188':443
'20#.#51.219.251':443
'54.##2.29.162':443
'21#.#37.61.119':443
'52.##2.136.200':443
'54.##2.25.218':443
'54.##9.221.87':443
'54.##9.220.11':443
'52.##.25.190':443
'54.##2.25.238':443
'52.##2.149.212':443
'54.##0.11.192':443
'54.##0.15.203':443
'54.#30.5.44':443
'54.##9.221.103':443
'54.##9.221.221':443
'20#.#51.219.37':443
'20#.#51.219.147':443
'54.##2.4.171':443
'54.##0.131.133':443
'52.#4.16.80':443
'21#.#37.61.157':443
'52.#4.25.65':443
'52.#4.25.34':443
'52.#4.25.67':443
'52.##.16.223':443
'54.##9.220.77':443
'54.##2.4.173':443
'52.##2.136.207':443
'21#.#37.61.186':443
'54.##2.25.251':443
'54.##9.220.114':443
'52.#4.16.97':443
'54.##2.19.42':443
'54.##0.131.183':443
'21#.#37.61.173':443
'54.##2.25.225':443
'54.##9.221.240':443
'20#.#51.219.190':443
'54.##9.219.65':443
'52.#4.25.50':443
'52.##2.136.133':443
'54.##9.220.7':443
'54.##9.221.95':443
'54.##9.221.235':443
'54.##0.11.51':443
'54.##2.4.174':443
'52.##2.149.9':443
'54.##9.220.110':443
'52.##.25.234':443
'54.##0.11.79':443
'20#.#51.219.194':443
'52.##.16.186':443
'54.##0.5.203':443
'54.#30.15.6':443
'54.##2.19.122':443
'54.##9.221.46':443
'54.##9.204.81':443
'54.#82.4.79':443
'54.##0.11.163':443
'54.##0.15.130':443
'54.##2.25.185':443
'54.##0.11.130':443
'54.##0.15.123':443
'54.##9.220.153':443
'54.##0.15.127':443
'52.#4.16.46':443
'54.##0.131.247':443
'54.##9.221.214':443
'54.##2.29.145':443
'52.##.16.146':443
'20#.#51.219.179':443
'54.##9.220.96':443
'52.##.25.212':443
'54.##2.19.34':443
'54.##9.219.83':443
'21#.#37.61.215':443
'20#.#51.219.105':443
'54.##9.221.57':443
'54.##0.11.62':443
'54.##2.29.119':443
'54.##0.131.235':443
'52.#4.25.70':443
'54.##0.129.152':443
'54.##2.19.171':443
'52.##.25.237':443
'52.##.25.109':443
'52.##2.149.39':443
'54.##2.29.208':443
'54.##9.212.228':443
'54.##0.11.47':443
'54.#30.5.5':443
'54.##0.15.84':443
'21#.#37.61.87':443
'52.##2.136.88':443
'54.##0.131.115':443
'54.##0.131.138':443
'52.##.16.111':443
'54.##0.129.55':443
'54.##2.29.113':443
'21#.#37.61.31':443
'52.#4.16.21':443
'52.##2.136.218':443
'54.##9.208.109':443
'52.##.16.216':443
'21#.#37.61.19':443
'54.##2.25.229':443
'54.##2.19.105':443
'54.##2.25.27':443
'54.##2.4.196':443
'54.##2.19.77':443
'21#.#37.61.143':443
'54.##9.219.151':443
'54.##9.220.67':443
'52.##.25.154':443
'54.##9.219.92':443
'54.##9.221.172':443
'54.##9.220.51':443
'54.##2.19.126':443
'54.##9.204.100':443
'54.##0.131.172':443
'54.##2.19.90':443
'54.#82.4.28':443
'52.#4.25.35':443
'54.##0.15.246':443
'21#.#37.61.44':443
'54.##0.11.159':443
'52.##2.149.52':443
'52.##.16.244':443
'52.##.16.107':443
'54.##0.131.114':443
'54.##2.25.141':443
'54.##0.130.82':443
'21#.#37.61.254':443
'52.##2.136.189':443
'54.##0.5.188':443
'54.##9.221.34':443
'52.##2.149.119':443
'54.##0.131.110':443
'54.##0.130.25':443
'54.##0.15.94':443
'54.##2.25.110':443
'54.##2.19.194':443
'54.##2.4.157':443
'54.#82.4.20':443
'52.##.16.127':443
'54.##9.221.98':443
'52.#4.16.62':443
'54.##0.129.242':443
'52.##.25.199':443
'54.##9.220.3':443
'54.##0.15.187':443
'52.##.16.208':443
'54.##9.220.254':443
'52.#4.25.38':443
'20#.#51.219.196':443
'52.##.16.167':443
'54.##9.204.104':443
'21#.#37.61.187':443
'54.##9.221.25':443
'54.##9.220.80':443
'54.##2.25.194':443
'54.##0.130.36':443
'54.##2.25.148':443
'20#.#51.219.80':443
'54.##9.220.129':443
'54.##2.25.246':443
'54.##0.15.72':443
'54.##9.208.102':443
'54.##0.129.70':443
'54.##0.131.112':443
'54.##9.221.225':443
'52.##.25.130':443
'52.#4.6.216':443
'54.##0.130.73':443
'54.##0.131.135':443
'54.##0.15.26':443
'52.##.16.207':443
'54.##2.25.59':443
'54.##0.130.166':443
'21#.#37.61.10':443
'54.##9.219.251':443
'54.##9.221.56':443
'52.##.25.105':443
'52.##2.149.233':443
'54.##0.131.17':443
'54.##2.25.25':443
'52.#4.25.44':443
'54.##0.15.113':443
'54.##0.11.87':443
'52.##2.136.100':443
'54.##0.11.80':443
'54.##9.206.71':443
'54.##2.19.182':443
'54.##0.130.47':443
'54.##2.4.244':443
'54.##9.206.109':443
'20#.#51.219.151':443
'54.##2.4.195':443
'54.##0.131.191':443
'52.#4.25.72':443
'54.##2.29.148':443
'52.#4.0.166':443
'54.##9.219.69':443
'54.##0.131.78':443
'54.##0.15.228':443
'54.##0.5.154':443
'54.##0.129.12':443
'21#.#37.61.197':443
'20#.#51.219.143':443
'54.##2.4.176':443
'52.##.16.238':443
'54.##0.131.92':443
'54.#82.4.45':443
'54.##9.219.247':443
'52.##.25.131':443
'20#.#51.219.191':443
'54.##2.19.96':443
'54.##0.129.128':443
'54.##0.5.174':443
'54.##0.130.105':443
'54.##0.130.200':443
'54.##0.11.228':443
'54.##2.25.24':443
'52.#4.0.207':443
'54.##9.220.206':443
'52.##2.149.221':443
'localhost':1051
'54.##0.131.246':443
'21#.#37.61.115':443
'54.##2.4.128':443
'54.##0.11.126':443
'52.#4.0.15':443
'54.##9.219.142':443
'54.##9.221.86':443
'54.##2.29.222':443
'20#.#51.219.207':443
'54.##9.221.97':443
'54.##9.219.164':443
'20#.#51.219.193':443
'54.##0.130.15':443
'52.#4.0.36':443
's3.###zonaws.com':443
'54.##2.25.146':443
'52.##2.149.114':443
'52.##2.149.69':443
'54.##0.129.94':443
'54.##0.129.175':443
'20#.#51.219.35':443
'54.##0.130.198':443
'20#.#51.219.10':443
'54.##0.131.207':443
'52.#4.16.70':443
'52.#4.0.188':443
'54.##0.130.209':443
'54.##2.29.187':443
'54.##9.219.8':443
'54.##2.29.87':443
'52.##2.149.65':443
'54.##9.221.78':443
'54.##9.206.112':443
'54.##0.130.183':443
'52.##.25.254':443
'54.##0.11.75':443
'54.##0.129.244':443
'52.##2.136.49':443
'21#.#37.61.24':443
'52.#4.16.12':443
'54.##0.131.250':443
'20#.#51.219.231':443
'20#.#51.219.169':443
'54.##0.129.158':443
'54.##0.130.29':443
'54.##0.129.71':443
'52.##.16.145':443
'54.##2.4.124':443
'54.##0.15.17':443
'54.##2.19.98':443
'54.##0.129.189':443
'52.##2.149.139':443
'54.##9.220.198':443
'54.##2.19.93':443
'52.##2.136.33':443
'54.##9.221.218':443
'54.##9.220.173':443
'52.#4.16.41':443
'54.##9.220.243':443
'54.##9.204.106':443
'52.#4.0.184':443
'54.##9.219.162':443
'54.##2.29.230':443
'52.##2.136.235':443
'54.##9.221.199':443
'20#.#51.219.79':443
'54.##0.131.22':443
'54.##9.220.111':443
'54.##0.15.137':443
'54.##0.129.19':443
'54.##9.219.58':443
'52.##2.149.130':443
'54.##9.219.94':443
'52.##2.149.116':443
'54.##0.129.76':443
'54.##9.221.54':443
'54.##0.130.39':443
'54.##2.19.238':443
'20#.#51.219.158':443
'54.##0.129.85':443
'54.##2.4.218':443
'54.##9.220.59':443
'52.##.16.200':443
'54.##0.131.137':443
'54.##0.5.202':443
'21#.#37.61.80':443
'54.##9.221.39':443
'52.##2.136.227':443
'54.##0.130.193':443
'52.##.16.112':443
'52.##2.136.28':443
'54.##2.25.212':443
'54.##9.219.168':443
'52.##2.136.238':443
'54.##0.129.198':443
'54.##2.25.65':443
'54.##2.19.72':443
'54.##2.4.242':443
'54.##0.15.194':443
'54.##0.11.203':443
'20#.#51.219.107':443
'54.##2.25.28':443
'54.#30.5.17':443
'54.##9.219.241':443
'54.##0.5.229':443
'52.##2.152.199':443
'21#.#37.61.63':443
'54.##0.129.220':443
'54.##2.29.111':443
'54.##9.221.246':443
'54.##2.29.199':443
'54.##9.221.142':443
'52.##.25.150':443
'20#.#51.219.118':443
'54.##9.219.221':443
'52.##.16.236':443
'54.##2.19.231':443
'54.##0.130.72':443
'54.#92.19.6':443
'52.##.25.153':443
'21#.#37.61.47':443
'52.##2.149.12':443
'52.##2.136.190':443
'54.##2.25.98':443
'52.##2.136.234':443
'54.##0.11.194':443
'54.#30.5.98':443
'52.##2.149.254':443
'54.##9.221.16':443
'54.##2.25.80':443
'54.##2.25.192':443
'54.##2.25.81':443
'54.##2.4.191':443
'54.##0.131.164':443
'54.##9.220.8':443
'54.##0.131.169':443
'54.##2.19.237':443
'54.##9.221.72':443
'54.##9.214.199':443
'54.##0.5.183':443
'54.##9.219.78':443
'52.##2.149.123':443
'54.##9.220.185':443
'54.##0.5.178':443
'54.##2.25.197':443
'54.#82.4.70':443
'54.##0.11.89':443
'54.##2.29.170':443
'54.##0.5.150':443
'54.##9.220.100':443
'54.##0.15.133':443
'54.##9.219.150':443
'54.##9.220.48':443
'52.##2.136.148':443
'52.##.25.191':443
'52.##.16.114':443
'54.##2.29.25':443
'52.#4.25.21':443
'54.##0.15.38':443
'52.##2.149.19':443
'54.##2.29.106':443
'54.##9.221.49':443
'54.##0.15.231':443
'52.##.25.106':443
'54.##9.219.6':443
'52.##2.149.16':443
'54.##9.220.199':443
'52.##.16.115':443
'54.##2.4.187':443
'52.##2.136.31':443
'52.##.16.130':443
'54.##2.29.183':443
'21#.#37.61.101':443
'54.##2.19.226':443
'54.##2.25.155':443
'54.##0.5.151':443
'52.##2.149.175':443
'52.##2.136.50':443
'54.##9.219.226':443
'20#.#51.219.180':443
'54.##0.5.149':443
'54.##9.206.108':443
'52.##2.136.48':443
'52.##2.149.249':443
'54.##0.131.189':443
'54.##0.11.212':443
'54.##2.4.234':443
'54.#82.4.97':443
'54.##0.15.157':443
'54.##9.221.84':443
'54.#30.15.4':443
'54.##2.29.58':443
'54.##0.11.151':443
'54.##9.219.227':443
'54.##0.130.97':443
'52.##2.136.172':443
'54.##0.5.254':443
'54.##0.11.172':443
'54.##9.221.149':443
'54.##9.220.177':443
'45.##.203.58':443
'13#.#97.22.238':22603
'54.##9.219.147':443
'54.##9.214.208':443
'54.##0.11.27':443
'52.##2.136.61':443
'52.##.25.171':443
'52.##2.136.92':443
'54.##0.130.12':443
'54.##0.11.187':443
'54.##0.131.170':443
'54.##0.11.99':443
'54.##9.221.169':443
'54.##0.131.205':443
'54.##9.221.89':443
'54.#82.4.51':443
'54.##9.220.218':443
'54.##0.130.206':443
'52.##.25.168':443
'54.##0.15.90':443
'52.##.25.197':443
'54.##9.221.38':443
'54.##0.129.179':443
'52.##2.149.80':443
'21#.#37.61.249':443
'21#.#37.61.146':443
'54.#30.15.8':443
'54.##2.4.213':443
'54.##9.220.117':443
'54.##2.19.187':443
'54.##2.19.157':443
'54.##2.4.115':443
'54.##2.4.210':443
'54.##0.131.173':443
'54.##2.25.105':443
'54.#30.5.58':443
'20#.#51.219.131':443
'54.##9.219.237':443
'54.##2.25.253':443
'52.#4.25.36':443
'21#.#37.61.79':443
'54.##9.214.201':443
'52.#4.16.28':443
'54.##2.19.78':443
'54.##2.25.122':443
'52.##2.149.26':443
'52.##.25.108':443
'54.##0.11.56':443
'54.##0.129.148':443
'52.##2.149.193':443
'54.##2.4.208':443
'54.##9.221.11':443
'54.##0.130.254':443
'21#.#37.61.123':443
'54.##9.219.248':443
'54.##0.5.218':443
'54.##2.25.131':443
'52.##2.136.128':443
'54.##2.19.170':443
'54.##0.129.214':443
'52.#4.25.13':443
'54.##0.11.165':443
'54.#30.15.9':443
'54.##9.221.217':443
'52.##2.149.172':443
'21#.#37.61.40':443
'54.##2.4.199':443
'54.##9.206.77':443
'54.##9.221.5':443
'54.##9.219.99':443
'54.##0.131.199':443
'52.##2.149.124':443
'54.#92.25.9':443
'54.##9.219.112':443
'54.##9.204.70':443
'54.##0.11.141':443
'54.##0.15.136':443
'54.##0.131.111':443
'20#.#51.219.232':443
'54.##0.131.89':443
'54.##9.221.254':443
'54.##9.219.145':443
'54.##2.25.248':443
'54.##9.221.171':443
'54.##2.29.225':443
'54.##9.204.84':443
'54.##0.130.48':443
'54.##2.25.163':443
'54.##2.29.28':443
'54.##2.29.31':443
'54.##9.220.126':443
'54.##9.219.71':443
'20#.#51.219.241':443
'54.##0.11.11':443
'54.##0.130.153':443
'54.##0.131.109':443
'52.##2.149.47':443
'54.##0.11.61':443
'21#.#37.61.109':443
'54.#82.4.14':443
'52.##2.136.27':443
'54.##2.4.252':443
'54.##0.131.83':443
'54.##9.221.74':443
'20#.#51.219.92':443
'54.##9.220.189':443
'54.##9.219.72':443
'52.##2.149.79':443

TCP:

HTTP GET requests:

http://lo###host:1050/?1 via localhost
http://lo###host:1050/main.3d0920a6969a546dc09a294cb9643430.css via localhost
http://lo###host:1050/proxy_on.pac?no################################################################ via localhost
http://co####.getiantem.org/proxies.yaml.gz via localhost
http://ge#.##tiantem.org/lookup/ via localhost

UDP:

DNS ASK s3.###zonaws.com

Miscellaneous:

Modifies value of AutoConfigURL parameter to 'http://localhost:1050/proxy_on.pac?nocache=1496629983359375000&token=6a7189a32fd2e1e40db4371b9f7933e6'

Searches for the following windows:

ClassName: 'MS_AutodialMonitor' WindowName: ''
ClassName: 'MS_WebcheckMonitor' WindowName: ''
ClassName: 'IEFrame' WindowName: ''
ClassName: 'Shell_TrayWnd' WindowName: ''
ClassName: '' WindowName: ''

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations

Free trial