マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Trojan.DownLoader9.56228

Added to the Dr.Web virus database: 2013-07-29

Virus description added:

Technical Information

To ensure autorun and distribution:
Creates the following services:
  • [<HKLM>\SYSTEM\ControlSet001\Services\MSWindows] 'Start' = '00000002'
Malicious functions:
Creates and executes the following:
  • '<SYSTEM32>\urdvxc.exe' /uninstallservice patch:<Full path to virus>
  • '<SYSTEM32>\urdvxc.exe' /service
  • '<SYSTEM32>\urdvxc.exe' /installservice
  • '<SYSTEM32>\urdvxc.exe' /start
Executes the following:
  • '<SYSTEM32>\svchost.exe' -k netsvcs
  • '<SYSTEM32>\dumprep.exe' 1132 -dm 7 7 %TEMP%\WER29d1.dir00\svchost.exe.mdmp 16325836412032304
Modifies file system :
Creates the following files:
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
  • %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
  • %TEMP%\WER29d1.dir00\svchost.exe.mdmp
  • <SYSTEM32>\urdvxc.exe
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
Deletes itself.
Network activity:
Connects to:
  • '21#.#5.100.47':139
  • '21#.#5.223.66':139
  • '21#.#5.163.42':139
  • '21#.#5.38.91':139
  • '21#.#5.77.79':139
  • '21#.#5.111.122':139
  • '21#.#5.110.24':445
  • '21#.#5.6.126':445
  • '21#.#5.175.151':445
  • '21#.#5.191.253':139
  • '21#.#5.10.46':139
  • '21#.65.31.8':139
  • '21#.#5.163.42':445
  • '21#.#5.191.253':445
  • '21#.#5.10.46':445
  • '21#.#5.111.122':445
  • '21#.#5.100.47':445
  • '21#.#5.223.66':445
  • '21#.#5.74.173':139
  • '21#.#5.214.65':139
  • '21#.#5.129.50':139
  • '21#.65.31.8':445
  • '21#.#5.177.1':139
  • '21#.#5.69.173':139
  • '21#.#5.29.56':445
  • '21#.#5.212.168':445
  • '21#.#5.40.82':445
  • '21#.#5.81.219':445
  • '21#.#5.50.210':445
  • '21#.#5.85.83':445
  • '21#.#5.125.191':445
  • '21#.#5.104.165':445
  • '21#.#5.246.19':445
  • '21#.#5.196.3':445
  • '21#.#5.219.44':445
  • '21#.#5.39.217':445
  • '21#.#5.109.102':445
  • '21#.#5.237.244':445
  • '21#.#5.100.228':445
  • '21#.#5.129.171':445
  • '21#.#5.60.140':445
  • '21#.#5.140.38':445
  • '21#.#5.42.186':445
  • '21#.#5.231.13':445
  • '21#.#5.38.29':445
  • '21#.#5.46.244':445
  • '21#.#5.114.149':445
  • '21#.#5.1.117':445
  • '21#.#5.60.121':445
  • '21#.#5.77.79':445
  • '21#.#5.202.55':139
  • '21#.#5.45.94':139
  • '21#.#5.80.254':139
  • '21#.#5.48.34':139
  • '21#.#5.128.216':139
  • '21#.#5.14.219':139
  • '21#.#5.119.167':139
  • '21#.65.9.81':139
  • '21#.#5.209.180':139
  • '21#.#5.253.232':139
  • '21#.#5.10.127':139
  • '21#.#5.221.119':139
  • '21#.#5.113.182':445
  • '21#.#5.60.240':445
  • '21#.#5.49.148':445
  • '21#.#5.115.213':445
  • '21#.#5.213.8':445
  • '21#.#5.8.165':445
  • '21#.#5.65.147':139
  • '21#.#5.111.130':139
  • '21#.#5.140.223':139
  • '21#.#5.32.229':139
  • '21#.#5.228.254':445
  • '21#.#5.231.187':139
  • '21#.#5.180.233':139
  • '21#.#5.113.182':139
  • '21#.#5.60.240':139
  • '21#.#5.49.148':139
  • '21#.#5.213.8':139
  • '21#.#5.8.165':139
  • '21#.#5.29.15':445
  • '21#.#5.214.65':445
  • '21#.#5.129.50':445
  • '21#.#5.38.91':445
  • '21#.#5.177.1':445
  • '21#.#5.69.173':445
  • '21#.#5.74.173':445
  • '21#.#5.122.161':139
  • '21#.#5.23.32':139
  • '21#.#5.42.225':139
  • '21#.#5.176.182':139
  • '21#.#5.96.245':139
  • '21#.#5.243.54':139
  • '21#.#5.170.132':139
  • '21#.#5.167.249':139
  • '21#.#5.115.213':139
  • '21#.#5.46.64':139
  • '21#.#5.66.179':139
  • '21#.#5.102.137':139
  • '21#.#5.65.95':139
  • '21#.#5.198.234':139
  • '21#.#5.176.232':139
  • '21#.#5.226.96':139
  • '21#.#5.60.208':139
  • '21#.#5.77.236':139
  • '21#.#5.164.219':445
  • '21#.#5.118.171':445
  • '21#.#5.95.138':445
  • '21#.#5.228.3':445
  • '21#.#5.41.144':445
  • '21#.#5.72.158':445
  • '21#.65.48.8':139
  • '21#.#5.31.227':445
  • '21#.#5.226.96':445
  • '21#.#5.190.168':139
  • '21#.#5.149.103':139
  • '21#.#5.24.176':139
  • '21#.#5.198.234':445
  • '21#.#5.176.232':445
  • '21#.#5.31.227':139
  • '21#.#5.60.208':445
  • '21#.#5.77.236':445
  • '21#.#5.65.95':445
  • '21#.#5.25.111':445
  • '21#.#5.100.173':445
  • '21#.#5.173.83':445
  • '21#.#5.81.131':445
  • '21#.#5.141.76':445
  • '21#.#5.75.153':445
  • '21#.#5.196.75':445
  • '21#.#5.75.80':445
  • '21#.#5.63.25':445
  • '21#.#5.195.194':445
  • '21#.#5.164.182':445
  • '21#.#5.133.198':445
  • '21#.#5.198.132':445
  • '21#.#5.113.212':445
  • '21#.#5.181.52':445
  • '21#.#5.223.182':445
  • '21#.#5.139.54':445
  • '21#.#5.158.156':445
  • '21#.#5.113.240':445
  • '21#.#5.78.161':445
  • '21#.#5.217.71':445
  • '21#.#5.209.119':445
  • '21#.#5.183.40':445
  • '21#.#5.84.193':445
  • '21#.#5.166.184':445
  • '21#.65.55.8':139
  • '21#.#5.42.186':139
  • '21#.#5.155.2':139
  • '21#.#5.237.244':139
  • '21#.#5.29.56':139
  • '21#.#5.60.140':139
  • '21#.#5.140.38':139
  • '21#.#5.1.117':139
  • '21#.65.13.0':139
  • '21#.#5.60.121':139
  • '21#.#5.100.228':139
  • '21#.#5.129.171':139
  • '21#.#5.114.149':139
  • '21#.#5.248.177':445
  • '21#.#5.22.34':445
  • '21#.#5.11.45':445
  • '21#.#5.77.74':445
  • '21#.#5.213.133':445
  • '21#.#5.195.248':445
  • '21#.#5.110.24':139
  • '21#.#5.6.126':139
  • '21#.#5.175.151':139
  • '21#.65.55.8':445
  • '21#.#5.190.168':445
  • '21#.#5.24.176':445
  • '21#.#5.231.13':139
  • '21#.#5.196.3':139
  • '21#.#5.77.74':139
  • '21#.#5.213.133':139
  • '21#.#5.109.102':139
  • '21#.#5.104.165':139
  • '21#.#5.246.19':139
  • '21#.#5.11.45':139
  • '21#.#5.247.132':139
  • '21#.#5.76.27':139
  • '21#.#5.195.248':139
  • '21#.#5.248.177':139
  • '21#.#5.22.34':139
  • '21#.#5.240.127':139
  • '21#.#5.50.210':139
  • '21#.#5.85.83':139
  • '21#.#5.38.29':139
  • '21#.#5.46.244':139
  • '21#.#5.240.127':445
  • '21#.#5.81.219':139
  • '21#.#5.219.44':139
  • '21#.#5.39.217':139
  • '21#.#5.125.191':139
  • '21#.#5.212.168':139
  • '21#.#5.40.82':139
  • '21#.#5.133.148':139
  • '21#.#5.201.132':139
  • '21#.#5.13.60':139
  • '21#.#5.79.96':139
  • '21#.#5.40.105':139
  • '21#.#5.158.123':139
  • '21#.#5.54.222':139
  • '21#.#5.64.77':139
  • '21#.#5.238.211':139
  • '21#.#5.119.69':139
  • '21#.#5.210.113':139
  • '21#.#5.114.54':139
  • '21#.#5.191.127':139
  • '21#.#5.112.97':139
  • '21#.#5.161.26':139
  • '21#.#5.238.211':445
  • '21#.#5.62.137':139
  • '21#.#5.250.162':139
  • '21#.#5.113.97':139
  • '21#.#5.96.211':139
  • '21#.#5.211.79':139
  • '21#.65.2.0':139
  • '21#.#5.151.39':139
  • '21#.#5.204.90':139
  • '21#.65.4.73':445
  • '21#.#5.113.13':445
  • '21#.#5.99.90':445
  • '21#.#5.16.12':445
  • '21#.#5.170.151':445
  • '21#.#5.228.15':445
  • '21#.#5.16.124':445
  • '21#.#5.122.42':445
  • '21#.#5.29.74':445
  • '21#.#5.14.107':445
  • '21#.#5.88.105':445
  • '21#.#5.74.148':445
  • '21#.#5.116.104':445
  • '21#.#5.160.118':445
  • '21#.#5.94.146':445
  • '21#.#5.146.40':445
  • '21#.65.97.9':445
  • '21#.#5.69.126':445
  • '21#.#5.12.136':445
  • '21#.#5.236.77':445
  • '21#.#5.77.35':445
  • '21#.#5.59.112':445
  • '21#.#5.71.186':445
  • '21#.#5.75.201':445
  • '21#.#5.184.17':445
  • '21#.#5.64.77':445
  • '21#.#5.98.138':139
  • '21#.#5.18.163':139
  • '21#.#5.203.33':139
  • '21#.#5.38.143':139
  • '21#.#5.222.34':139
  • '21#.#5.117.28':139
  • '21#.#5.178.174':139
  • '21#.#5.142.162':139
  • '21#.#5.14.22':139
  • '21#.#5.114.211':139
  • '21#.#5.49.76':139
  • '21#.#5.244.49':139
  • '21#.#5.86.46':139
  • '21#.#5.21.45':139
  • '21#.#5.7.122':139
  • '21#.#5.134.59':139
  • '21#.#5.171.84':139
  • '21#.#5.40.173':139
  • '21#.#5.64.147':139
  • '21#.#5.85.145':139
  • '21#.#5.166.47':139
  • '21#.#5.125.154':139
  • '21#.#5.184.149':139
  • '21#.#5.149.105':139
  • '21#.#5.214.55':139
  • '21#.#5.40.105':445
  • '21#.#5.158.123':445
  • '21#.#5.133.148':445
  • '21#.#5.96.211':445
  • '21#.#5.211.79':445
  • '21#.#5.79.96':445
  • '21#.#5.210.113':445
  • '21#.#5.114.54':445
  • '21#.#5.54.222':445
  • '21#.#5.201.132':445
  • '21#.#5.13.60':445
  • '21#.#5.119.69':445
  • '21#.#5.62.137':445
  • '21#.#5.250.162':445
  • '21#.#5.191.127':445
  • '21#.#5.105.40':139
  • '21#.#5.167.187':139
  • '21#.#5.187.62':139
  • '21#.#5.151.39':445
  • '21#.#5.204.90':445
  • '21#.#5.113.97':445
  • '21#.#5.112.97':445
  • '21#.#5.161.26':445
  • '21#.65.2.0':445
  • '21#.#5.217.45':139
  • '21#.#5.212.53':139
  • '21#.#5.53.247':139
  • '21#.#5.254.94':139
  • '21#.#5.162.181':139
  • '21#.#5.45.107':139
  • '21#.#5.32.229':445
  • '21#.#5.65.147':445
  • '21#.#5.111.130':445
  • '21#.#5.247.50':139
  • '21#.#5.124.137':139
  • '21#.#5.221.32':139
  • '21#.#5.221.32':445
  • '21#.#5.236.209':139
  • '21#.#5.209.137':139
  • '21#.#5.247.50':445
  • '21#.#5.53.247':445
  • '21#.#5.124.137':445
  • '21#.#5.146.51':139
  • '21#.#5.88.76':139
  • '21#.#5.75.187':139
  • '21#.#5.69.198':139
  • '21#.#5.55.140':139
  • '21#.#5.139.201':139
  • '21#.#5.140.223':445
  • '21#.#5.243.54':445
  • '21#.#5.122.161':445
  • '21#.#5.23.32':445
  • '21#.#5.180.233':445
  • '21#.#5.176.182':445
  • '21#.#5.96.245':445
  • '21#.#5.102.137':445
  • '21#.#5.170.132':445
  • '21#.#5.167.249':445
  • '21#.#5.42.225':445
  • '21#.#5.46.64':445
  • '21#.#5.66.179':445
  • '21#.#5.202.55':445
  • '21#.#5.45.94':445
  • '21#.#5.80.254':445
  • '21#.#5.48.34':445
  • '21#.#5.128.216':445
  • '21#.#5.14.219':445
  • '21#.#5.119.167':445
  • '21#.65.9.81':445
  • '21#.#5.209.180':445
  • '21#.#5.253.232':445
  • '21#.#5.10.127':445
  • '21#.#5.221.119':445
  • '21#.#5.212.53':445
  • '21#.#5.75.201':139
  • '21#.#5.184.17':139
  • '21#.#5.65.88':139
  • '21#.#5.40.84':139
  • '21#.65.84.6':139
  • '21#.#5.71.186':139
  • '21#.#5.170.151':139
  • '21#.#5.228.15':139
  • '21#.#5.16.124':139
  • '21#.#5.236.77':139
  • '21#.#5.77.35':139
  • '21#.#5.59.112':139
  • '21#.#5.60.176':139
  • '21#.65.4.73':139
  • '21#.65.97.9':139
  • '21#.#5.38.96':445
  • '21#.#5.18.37':445
  • '21#.#5.0.118':445
  • '21#.#5.160.118':139
  • '21#.#5.94.146':139
  • '21#.#5.146.40':139
  • '21#.#5.69.126':139
  • '21#.#5.125.33':139
  • '21#.#5.12.136':139
  • '21#.#5.113.13':139
  • '21#.#5.55.140':445
  • '21#.#5.139.201':445
  • '21#.#5.146.51':445
  • '21#.#5.236.209':445
  • '21#.#5.209.137':445
  • '21#.#5.69.198':445
  • '21#.#5.162.181':445
  • '21#.#5.45.107':445
  • '21#.#5.217.45':445
  • '21#.#5.88.76':445
  • '21#.#5.75.187':445
  • '21#.#5.254.94':445
  • '21#.#5.249.194':139
  • '21#.#5.74.148':139
  • '21#.#5.116.104':139
  • '21#.#5.99.90':139
  • '21#.#5.16.12':139
  • '21#.#5.88.105':139
  • '21#.#5.38.96':139
  • '21#.#5.18.37':139
  • '21#.#5.0.118':139
  • '21#.#5.122.42':139
  • '21#.#5.29.74':139
  • '21#.#5.14.107':139
  • '21#.#5.220.195':445
  • '21#.#5.39.13':445
  • '21#.#5.12.231':445
  • '21#.#5.224.129':445
  • '21#.#5.161.133':139
  • '21#.#5.249.28':445
  • '21#.#5.29.39':445
  • '21#.#5.195.254':445
  • '21#.#5.195.254':139
  • '21#.#5.249.28':139
  • '21#.#5.143.46':445
  • '21#.#5.27.216':445
  • '21#.#5.76.32':445
  • '21#.#5.218.5':139
  • '21#.#5.196.36':139
  • '21#.#5.103.235':139
  • '21#.#5.10.108':139
  • '21#.#5.97.182':139
  • '21#.#5.181.217':139
  • '21#.#5.154.23':139
  • '21#.#5.32.45':139
  • '21#.#5.115.128':139
  • '21#.#5.15.199':139
  • '21#.#5.65.203':139
  • '21#.#5.238.98':139
  • '21#.#5.29.39':139
  • '21#.#5.102.207':9988
  • '21#.#5.193.169':9988
  • '21#.#5.171.52':9988
  • '21#.#5.47.212':9988
  • '21#.#5.14.33':9988
  • '21#.#5.189.35':9988
  • '21#.#5.32.29':445
  • '21#.#5.2.183':445
  • '21#.#5.113.192':445
  • '21#.#5.174.254':9988
  • '21#.#5.37.39':9988
  • '21#.#5.168.31':9988
  • '21#.#5.143.46':139
  • '21#.#5.27.216':139
  • '21#.#5.76.32':139
  • '21#.#5.39.13':139
  • '21#.#5.12.231':139
  • '21#.#5.224.129':139
  • '21#.#5.172.51':9988
  • '21#.#5.73.147':9988
  • '21#.#5.122.95':9988
  • '21#.#5.92.31':9988
  • '21#.#5.196.77':9988
  • '21#.#5.179.16':9988
  • '21#.#5.175.140':139
  • '21#.#5.238.98':445
  • '21#.#5.154.23':445
  • '21#.#5.32.45':445
  • '21#.#5.103.235':445
  • '21#.#5.15.199':445
  • '21#.#5.65.203':445
  • '21#.#5.131.205':139
  • '21#.#5.62.90':139
  • '21#.#5.131.253':139
  • '21#.#5.115.128':445
  • '21#.#5.161.133':445
  • '21#.#5.46.161':139
  • '21#.#5.135.86':445
  • '21#.#5.224.118':445
  • '21#.#5.24.217':445
  • '21#.#5.42.154':445
  • '21#.#5.165.154':445
  • '21#.#5.155.5':445
  • '21#.#5.181.217':445
  • '21#.#5.218.5':445
  • '21#.#5.196.36':445
  • '21#.#5.175.140':445
  • '21#.#5.10.108':445
  • '21#.#5.97.182':445
  • '21#.#5.49.74':139
  • '21#.#5.188.168':139
  • '21#.#5.130.37':139
  • '21#.65.8.73':139
  • '21#.#5.65.174':139
  • '21#.#5.11.185':139
  • '21#.#5.77.10':139
  • '21#.#5.135.86':139
  • '21#.#5.224.118':139
  • '21#.#5.24.217':139
  • '21#.#5.42.154':139
  • '21#.#5.165.154':139
  • '21#.#5.155.5':139
  • '21#.#5.12.54':139
  • '21#.#5.47.234':139
  • '21#.#5.78.117':139
  • '21#.#5.33.224':139
  • '21#.#5.36.124':139
  • '21#.#5.252.11':139
  • '21#.#5.110.173':139
  • '21#.#5.53.238':139
  • '21#.#5.27.148':139
  • '21#.#5.177.28':445
  • '21#.#5.86.66':139
  • '21#.#5.55.181':139
  • '21#.#5.181.183':139
  • '21#.#5.2.254':139
  • '21#.#5.124.221':139
  • '21#.#5.102.206':139
  • '21#.#5.83.115':139
  • '21#.#5.168.233':139
  • '21#.#5.199.196':139
  • '21#.#5.196.77':139
  • '21#.#5.77.159':139
  • '21#.#5.68.191':139
  • '21#.#5.164.184':139
  • '21#.#5.124.199':139
  • '21#.#5.248.220':139
  • '21#.#5.221.20':139
  • '21#.#5.125.2':139
  • '21#.#5.113.192':139
  • '21#.#5.192.21':139
  • '21#.#5.21.249':139
  • '21#.#5.63.71':139
  • '21#.#5.158.25':139
  • '21#.#5.64.146':139
  • '21#.#5.92.31':139
  • '21#.#5.17.95':139
  • '21#.#5.139.44':139
  • '21#.#5.119.76':139
  • '21#.#5.125.58':139
  • '21#.#5.58.88':139
  • '21#.#5.66.170':139
  • '21#.#5.193.169':139
  • '21#.#5.171.52':139
  • '21#.#5.174.254':139
  • '21#.#5.106.112':139
  • '21#.#5.37.39':139
  • '21#.#5.83.60':139
  • '21#.#5.168.31':139
  • '21#.#5.44.145':139
  • '21#.#5.24.61':139
  • '21#.#5.59.215':139
  • '21#.#5.89.105':139
  • '21#.#5.158.73':139
  • '21#.#5.184.103':139
  • '21#.#5.179.16':139
  • '21#.#5.172.51':139
  • '21#.#5.14.33':139
  • '21#.#5.189.35':139
  • '21#.#5.102.207':139
  • '21#.#5.73.147':139
  • '21#.#5.122.95':139
  • '21#.#5.47.212':139
  • '21#.#5.2.183':139
  • '21#.#5.2.254':445
  • '21#.#5.124.221':445
  • '21#.#5.68.191':445
  • '21#.#5.83.115':445
  • '21#.#5.168.233':445
  • '21#.#5.181.183':445
  • '21#.#5.196.77':445
  • '21#.#5.77.159':445
  • '21#.#5.119.76':445
  • '21#.#5.164.184':445
  • '21#.#5.124.199':445
  • '21#.#5.199.196':445
  • '21#.#5.248.220':445
  • '21#.#5.221.20':445
  • '21#.#5.125.2':445
  • '21#.#5.192.21':445
  • '21#.#5.92.31':445
  • '21#.#5.21.249':445
  • '21#.#5.158.25':445
  • '21#.#5.64.146':445
  • '21#.#5.102.206':445
  • '21#.#5.17.95':445
  • '21#.#5.139.44':445
  • '21#.#5.63.71':445
  • '21#.#5.184.103':445
  • '21#.#5.58.88':445
  • '21#.#5.66.170':445
  • '21#.#5.168.31':445
  • '21#.#5.171.52':445
  • '21#.#5.174.254':445
  • '21#.#5.125.58':445
  • '21#.#5.83.60':445
  • '21#.#5.37.39':445
  • '21#.#5.32.29':139
  • '21#.#5.44.145':445
  • '21#.#5.24.61':445
  • '21#.#5.106.112':445
  • '21#.#5.89.105':445
  • '21#.#5.73.147':445
  • '21#.#5.158.73':445
  • '21#.#5.179.16':445
  • '21#.#5.172.51':445
  • '21#.#5.59.215':445
  • '21#.#5.189.35':445
  • '21#.#5.102.207':445
  • '21#.#5.193.169':445
  • '21#.#5.122.95':445
  • '21#.#5.47.212':445
  • '21#.#5.14.33':445
  • '21#.#5.86.254':139
  • '21#.#5.193.197':139
  • '21#.#5.189.216':139
  • '21#.#5.120.117':445
  • '21#.#5.31.251':139
  • '21#.#5.190.52':139
  • '21#.#5.243.211':445
  • '21#.#5.57.232':445
  • '21#.#5.211.219':445
  • '21#.#5.107.125':139
  • '21#.#5.120.117':139
  • '21#.#5.164.122':445
  • '21#.#5.37.99':139
  • '21#.#5.219.114':139
  • '21#.#5.9.221':139
  • '21#.#5.174.240':139
  • '21#.#5.225.182':139
  • '21#.65.10.8':139
  • '21#.#5.190.52':445
  • '21#.#5.193.197':445
  • '21#.#5.107.125':445
  • '21#.#5.31.251':445
  • '21#.#5.189.216':445
  • '21#.#5.86.254':445
  • '21#.#5.186.21':445
  • '21#.#5.190.75':445
  • '21#.#5.138.114':445
  • '21#.65.5.62':445
  • '21#.#5.222.190':445
  • '21#.#5.167.20':445
  • '21#.#5.205.21':445
  • '21#.#5.210.242':445
  • '21#.#5.145.9':445
  • '21#.#5.79.155':445
  • '21#.#5.59.89':445
  • '21#.#5.153.248':445
  • '21#.#5.211.66':445
  • '21#.#5.59.24':445
  • '21#.#5.48.180':445
  • '21#.#5.251.160':445
  • '21#.#5.219.185':445
  • '21#.#5.48.59':445
  • '21#.#5.216.76':445
  • '21#.#5.84.32':445
  • '21#.#5.211.147':445
  • '21#.#5.104.23':445
  • '21#.#5.16.200':445
  • '21#.#5.102.68':445
  • '21#.#5.109.149':445
  • '21#.#5.79.75':139
  • '21#.#5.164.219':139
  • '21#.#5.118.171':139
  • '21#.#5.95.138':139
  • '21#.#5.228.3':139
  • '21#.#5.41.144':139
  • '21#.#5.72.158':139
  • '21#.#5.113.240':139
  • '21#.#5.113.212':139
  • '21#.#5.181.52':139
  • '21#.#5.25.111':139
  • '21#.#5.139.54':139
  • '21#.#5.158.156':139
  • '21#.#5.213.173':445
  • '21#.#5.92.97':445
  • '21#.#5.79.75':445
  • '21#.#5.194.173':445
  • '21#.#5.173.118':445
  • '21#.#5.171.176':445
  • '21#.#5.37.99':445
  • '21#.#5.219.114':445
  • '21#.#5.9.221':445
  • '21#.#5.174.240':445
  • '21#.#5.225.182':445
  • '21#.65.10.8':445
  • '21#.#5.223.182':139
  • '21#.#5.75.80':139
  • '21#.#5.63.25':139
  • '21#.#5.220.195':139
  • '21#.#5.164.182':139
  • '21#.#5.133.198':139
  • '21#.#5.198.132':139
  • '21#.#5.171.176':139
  • '21#.#5.213.173':139
  • '21#.#5.92.97':139
  • '21#.#5.195.194':139
  • '21#.#5.194.173':139
  • '21#.#5.173.118':139
  • '21#.#5.78.161':139
  • '21#.#5.217.71':139
  • '21#.#5.209.119':139
  • '21#.#5.183.40':139
  • '21#.#5.84.193':139
  • '21#.#5.166.184':139
  • '21#.#5.100.173':139
  • '21#.#5.173.83':139
  • '21#.#5.81.131':139
  • '21#.#5.141.76':139
  • '21#.#5.75.153':139
  • '21#.#5.196.75':139
  • '21#.#5.181.31':445
  • '21#.#5.150.101':445
  • '21#.#5.182.211':445
  • '21#.#5.145.216':445
  • '21#.#5.227.235':445
  • '21#.#5.184.98':445
  • '21#.#5.201.135':139
  • '21#.#5.161.235':139
  • '21#.#5.145.216':139
  • '21#.#5.143.125':139
  • '21#.#5.179.176':139
  • '21#.#5.41.179':139
  • '21#.#5.74.208':139
  • '21#.#5.64.87':139
  • '21#.#5.74.32':139
  • '21#.#5.180.138':139
  • '21#.#5.231.244':139
  • '21#.#5.190.7':139
  • '21#.#5.41.179':445
  • '21#.#5.201.135':445
  • '21#.#5.161.235':445
  • '21#.#5.52.221':139
  • '21#.#5.199.213':139
  • '21#.#5.52.130':139
  • '21#.#5.227.235':139
  • '21#.#5.110.173':445
  • '21#.#5.53.238':445
  • '21#.#5.27.148':445
  • '21#.#5.78.117':445
  • '21#.#5.86.66':445
  • '21#.#5.55.181':445
  • '21#.#5.188.168':445
  • '21#.#5.130.37':445
  • '21#.65.8.73':445
  • '21#.#5.65.174':445
  • '21#.#5.11.185':445
  • '21#.#5.77.10':445
  • '21#.#5.6.162':139
  • '21#.#5.182.211':139
  • '21#.#5.46.161':445
  • '21#.#5.184.98':139
  • '21#.#5.181.31':139
  • '21#.#5.150.101':139
  • '21#.#5.252.11':445
  • '21#.#5.12.54':445
  • '21#.#5.47.234':445
  • '21#.#5.62.90':445
  • '21#.#5.49.74':445
  • '21#.#5.33.224':445
  • '21#.#5.135.227':139
  • '21#.#5.164.122':139
  • '21#.#5.57.232':139
  • '21#.#5.243.211':139
  • '21#.#5.52.221':445
  • '21#.#5.199.213':445
  • '21#.#5.52.130':445
  • '21#.#5.48.59':139
  • '21#.#5.216.76':139
  • '21#.#5.59.24':139
  • '21#.#5.211.219':139
  • '21#.#5.219.185':139
  • '21#.#5.186.21':139
  • '21#.#5.11.55':445
  • '21#.#5.21.136':445
  • '21#.#5.135.227':445
  • '21#.#5.8.166':445
  • '21#.65.77.8':445
  • '21#.#5.60.238':445
  • '21#.#5.74.208':445
  • '21#.#5.64.87':445
  • '21#.#5.74.32':445
  • '21#.#5.180.138':445
  • '21#.#5.231.244':445
  • '21#.#5.190.7':445
  • '21#.#5.48.180':139
  • '21#.#5.211.66':139
  • '21#.#5.210.242':139
  • '21#.#5.145.9':139
  • '21#.#5.59.89':139
  • '21#.65.5.62':139
  • '21#.#5.153.248':139
  • '21#.#5.11.55':139
  • '21#.#5.60.238':139
  • '21#.#5.21.136':139
  • '21#.#5.79.155':139
  • '21#.#5.8.166':139
  • '21#.65.77.8':139
  • '21#.#5.109.149':139
  • '21#.#5.84.32':139
  • '21#.#5.211.147':139
  • '21#.#5.251.160':139
  • '21#.#5.16.200':139
  • '21#.#5.102.68':139
  • '21#.#5.190.75':139
  • '21#.#5.104.23':139
  • '21#.#5.138.114':139
  • '21#.#5.205.21':139
  • '21#.#5.167.20':139
  • '21#.#5.222.190':139

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android