マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Trojan.KillProc.31995

Added to the Dr.Web virus database: 2014-06-19

Virus description added:

Technical Information

To ensure autorun and distribution:
Creates or modifies the following files:
  • %WINDIR%\Tasks\SA.DAT
Malicious functions:
Executes the following:
  • '<SYSTEM32>\svchost.exe' -k netsvcs
  • '<SYSTEM32>\dumprep.exe' 1136 -dm 7 7 %TEMP%\WER521e.dir00\svchost.exe.mdmp 16325836412027328
Terminates or attempts to terminate
the following system processes:
  • <SYSTEM32>\svchost.exe
Modifies file system :
Creates the following files:
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
  • %CommonProgramFiles%\System\ado\tsektjkj.exe
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
  • %WINDIR%\Help\jjlenkbt.exe
  • %WINDIR%\pchealth\helpctr\System\CompatCtr\zlhqrlbx.exe
  • %WINDIR%\pchealth\helpctr\System\CompatCtr\hrtbebze.exe
  • %WINDIR%\Help\hwexrtne.exe
  • %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
  • %WINDIR%\Help\jbnshhqj.exe
  • %WINDIR%\Help\bzehxvnz.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
  • %TEMP%\WER521e.dir00\svchost.exe.mdmp
  • %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
Network activity:
Connects to:
  • '59.#0.71.49':139
  • '59.#0.87.2':139
  • '59.##.127.200':139
  • '59.##.43.245':139
  • '59.#0.85.81':139
  • '59.##.10.237':139
  • '59.##.160.10':139
  • '59.#0.9.207':445
  • '59.#0.48.44':139
  • '59.##.169.77':445
  • '59.##.75.244':445
  • '59.#0.52.87':445
  • '59.#0.17.42':445
  • '59.##.18.102':445
  • '59.##.131.218':139
  • '59.##.83.104':139
  • '59.#0.75.4':445
  • '59.##.200.140':445
  • '59.##.83.104':445
  • '59.##.127.200':445
  • '59.##.227.191':139
  • '59.##.131.218':445
  • '59.##.43.245':445
  • '59.#0.85.81':445
  • '59.#0.48.44':445
  • '59.#0.71.49':445
  • '59.#0.87.2':445
  • '59.##.117.52':139
  • '59.##.230.110':139
  • '59.##.26.170':139
  • '59.##.119.177':139
  • '59.##.131.147':139
  • '59.##.105.182':139
  • '59.##.60.166':139
  • '59.#0.1.192':139
  • '59.##.250.135':139
  • '59.##.172.197':445
  • '59.#0.75.4':139
  • '59.##.200.140':139
  • '59.##.75.244':139
  • '59.##.18.102':139
  • '59.##.114.65':139
  • '59.#0.41.47':445
  • '59.#0.47.14':445
  • '59.##.255.128':445
  • '59.#0.9.71':445
  • '59.##.208.160':139
  • '59.##.136.197':139
  • '59.#0.19.0':445
  • '59.##.103.97':139
  • '59.##.182.111':139
  • '59.#0.17.42':139
  • '59.##.169.77':139
  • '59.##.172.197':139
  • '59.#0.52.87':139
  • '59.#0.33.26':445
  • '59.##.139.178':445
  • '59.##.67.123':445
  • '59.##.189.67':445
  • '59.#0.188.9':445
  • '59.##.136.197':445
  • '59.##.182.111':445
  • '59.##.103.97':445
  • '59.##.208.160':445
  • '59.#0.81.59':445
  • '59.##.12.148':445
  • '59.#0.5.73':445
  • '59.#0.96.93':445
  • '59.##.113.209':445
  • '59.##.119.112':445
  • '59.#0.168.3':445
  • '59.#0.27.35':445
  • '59.##.174.238':445
  • '59.##.10.237':445
  • '59.#0.37.96':445
  • '59.#0.54.55':445
  • '59.##.152.61':139
  • '59.#0.29.23':445
  • '59.##.181.54':445
  • '59.##.85.191':445
  • '59.##.90.130':445
  • '59.##.215.102':445
  • '59.##.83.209':445
  • '59.##.233.16':139
  • '59.##.117.136':139
  • '59.##.151.208':139
  • '59.##.189.167':139
  • '59.##.111.209':139
  • '59.##.23.249':139
  • '59.#0.26.47':139
  • '59.##.83.169':139
  • '59.##.99.240':139
  • '59.##.151.208':445
  • '59.##.160.102':445
  • '59.##.33.103':445
  • '59.#0.77.33':445
  • '59.##.117.136':445
  • '59.##.99.240':445
  • '59.##.23.249':445
  • '59.##.233.16':445
  • '59.##.111.209':445
  • '59.#0.78.15':445
  • '59.##.177.110':445
  • '59.##.238.115':445
  • '59.##.180.43':445
  • '59.##.109.218':445
  • '59.##.249.81':445
  • '59.#0.153.1':445
  • '59.#0.70.50':445
  • '59.##.33.222':445
  • '59.##.160.102':139
  • '59.#0.93.29':139
  • '59.#0.37.96':139
  • '59.##.136.184':445
  • '59.#0.29.23':139
  • '59.#0.93.29':445
  • '59.##.83.209':139
  • '59.##.215.102':139
  • '59.#0.54.55':139
  • '59.##.181.54':139
  • '59.##.117.52':445
  • '59.##.230.110':445
  • '59.##.26.170':445
  • '59.##.119.177':445
  • '59.#0.1.192':445
  • '59.##.227.191':445
  • '59.##.136.184':139
  • '59.##.105.182':445
  • '59.##.60.166':445
  • '59.##.249.81':139
  • '59.##.150.129':139
  • '59.#0.70.50':139
  • '59.##.33.222':139
  • '59.#0.153.1':139
  • '59.##.33.103':139
  • '59.#0.77.33':139
  • '59.##.150.129':445
  • '59.#0.20.91':445
  • '59.##.238.115':139
  • '59.##.180.43':139
  • '59.##.85.191':139
  • '59.##.90.130':139
  • '59.#0.78.15':139
  • '59.##.177.110':139
  • '59.##.109.218':139
  • '59.##.113.31':139
  • '59.##.113.31':445
  • '59.##.59.164':445
  • '59.##.138.239':445
  • '59.#0.52.27':445
  • '59.##.217.115':445
  • '59.##.119.239':445
  • '59.##.105.229':445
  • '59.##.33.131':445
  • '59.##.35.160':445
  • '59.#0.15.52':445
  • '59.##.11.168':445
  • '59.##.121.207':445
  • '59.#0.94.54':445
  • '59.##.203.159':445
  • '59.#0.87.80':445
  • '59.##.155.147':445
  • '59.##.116.19':445
  • '59.#0.69.46':445
  • '59.##.164.39':445
  • '59.##.104.251':445
  • '59.##.108.118':445
  • '59.#0.59.30':445
  • '59.##.67.105':445
  • '59.##.165.184':445
  • '59.##.105.220':445
  • '59.##.228.169':445
  • '59.#0.0.76':445
  • '59.##.132.172':445
  • '59.#0.5.193':445
  • '59.##.132.102':445
  • '59.##.100.213':445
  • '59.##.113.132':445
  • '59.##.20.138':445
  • '59.#0.47.58':445
  • '59.##.250.237':445
  • '59.##.126.130':445
  • '59.##.90.170':445
  • '59.##.106.102':445
  • '59.##.250.237':139
  • '59.##.165.184':139
  • '59.##.106.102':139
  • '59.#0.46.54':139
  • '59.##.103.203':139
  • '59.##.104.251':139
  • '59.#0.94.54':139
  • '59.##.105.220':139
  • '59.##.228.169':139
  • '59.##.113.132':139
  • '59.##.46.120':139
  • '59.##.129.205':445
  • '59.##.119.239':139
  • '59.#0.5.193':139
  • '59.#0.0.185':139
  • '59.##.45.115':139
  • '59.##.126.130':139
  • '59.##.105.229':139
  • '59.##.66.206':445
  • '59.#0.9.222':445
  • '59.#0.88.12':139
  • '59.##.61.204':139
  • '59.##.168.140':445
  • '59.##.239.70':445
  • '59.##.46.120':445
  • '59.##.39.141':445
  • '59.##.170.143':445
  • '59.##.132.172':139
  • '59.##.115.105':139
  • '59.#0.70.5':139
  • '59.#0.0.76':139
  • '59.##.108.118':139
  • '59.##.112.138':139
  • '59.##.157.158':139
  • '59.#0.96.46':139
  • '59.##.203.159':139
  • '59.#0.70.5':445
  • '59.##.37.251':139
  • '59.##.211.245':445
  • '59.##.77.206':139
  • '59.##.26.244':139
  • '59.##.189.11':445
  • '59.##.190.181':139
  • '59.##.124.77':445
  • '59.##.255.128':139
  • '59.##.11.212':445
  • '59.##.23.198':445
  • '59.##.141.10':445
  • '59.##.243.107':445
  • '59.##.130.38':445
  • '59.##.228.140':445
  • '59.##.136.107':445
  • '59.##.162.136':445
  • '59.#0.6.63':445
  • '59.##.34.186':445
  • '59.#0.168.3':139
  • '59.##.67.123':139
  • '59.##.174.238':139
  • '59.##.119.112':139
  • '59.##.189.67':139
  • '59.#0.188.9':139
  • '59.#0.19.0':139
  • '59.#0.33.26':139
  • '59.##.139.178':139
  • '59.#0.41.47':139
  • '59.#0.5.73':139
  • '59.#0.9.71':139
  • '59.#0.47.14':139
  • '59.#0.96.93':139
  • '59.##.113.209':139
  • '59.#0.27.35':139
  • '59.#0.81.59':139
  • '59.##.12.148':139
  • '59.#0.88.0':445
  • '59.#0.88.0':139
  • '59.##.243.107':139
  • '59.##.193.21':139
  • '59.##.219.48':139
  • '59.#0.29.55':445
  • '59.##.81.122':139
  • '59.##.141.10':139
  • '59.##.130.38':139
  • '59.##.23.198':139
  • '59.#0.0.185':445
  • '59.#0.88.12':445
  • '59.##.157.158':445
  • '59.#0.96.46':445
  • '59.##.61.204':445
  • '59.##.212.97':139
  • '59.##.53.182':139
  • '59.##.115.105':445
  • '59.##.45.115':445
  • '59.##.211.245':139
  • '59.##.129.188':445
  • '59.##.11.212':139
  • '59.##.189.11':139
  • '59.##.143.145':445
  • '59.##.193.21':445
  • '59.##.219.48':445
  • '59.##.212.97':445
  • '59.##.53.182':445
  • '59.##.34.186':139
  • '59.##.136.107':139
  • '59.##.228.140':139
  • '59.#0.6.63':139
  • '59.##.162.136':139
  • '59.##.143.145':139
  • '59.##.127.74':139
  • '59.##.245.162':139
  • '59.##.119.198':139
  • '59.##.152.61':445
  • '59.##.162.35':445
  • '59.##.48.139':445
  • '59.##.51.161':445
  • '59.##.126.79':445
  • '59.##.112.18':445
  • '59.#0.8.108':445
  • '59.##.246.16':445
  • '59.##.140.126':445
  • '59.##.146.154':445
  • '59.##.219.234':139
  • '59.##.224.85':139
  • '59.##.58.181':139
  • '59.##.161.154':139
  • '59.##.86.182':139
  • '59.#0.91.45':445
  • '59.#0.9.66':445
  • '59.##.189.22':139
  • '59.##.83.108':139
  • '59.##.27.223':445
  • '59.##.21.139':445
  • '59.#0.70.12':445
  • '59.#0.5.35':445
  • '59.#0.8.21':445
  • '59.##.205.239':445
  • '59.##.194.25':445
  • '59.#0.77.19':445
  • '59.#0.6.156':445
  • '59.#0.25.72':445
  • '59.##.86.148':445
  • '59.##.71.118':445
  • '59.##.106.83':445
  • '59.#0.38.86':445
  • '59.##.90.138':445
  • '59.##.156.45':445
  • '59.##.123.208':445
  • '59.#0.20.80':445
  • '59.##.90.245':139
  • '59.##.71.118':139
  • '59.##.106.83':139
  • '59.#0.8.108':139
  • '59.##.246.16':139
  • '59.#0.25.72':139
  • '59.##.123.208':139
  • '59.#0.20.80':139
  • '59.##.86.148':139
  • '59.#0.38.86':139
  • '59.##.126.79':139
  • '59.##.162.35':139
  • '59.##.51.161':139
  • '59.##.235.119':445
  • '59.##.48.139':139
  • '59.##.140.126':139
  • '59.##.146.154':139
  • '59.#0.18.63':139
  • '59.##.112.18':139
  • '59.#0.25.97':445
  • '59.##.194.25':139
  • '59.##.205.239':139
  • '59.#0.25.97':139
  • '59.##.153.180':139
  • '59.##.192.224':139
  • '59.##.254.192':139
  • '59.##.23.121':139
  • '59.#0.29.77':139
  • '59.#0.70.12':139
  • '59.#0.5.35':139
  • '59.##.90.138':139
  • '59.##.156.45':139
  • '59.##.27.223':139
  • '59.#0.77.19':139
  • '59.#0.6.156':139
  • '59.##.21.139':139
  • '59.#0.8.21':139
  • '59.##.153.180':445
  • '59.##.111.73':139
  • '59.##.42.253':139
  • '59.#0.59.3':139
  • '59.#0.58.59':139
  • '59.##.141.73':139
  • '59.##.196.210':139
  • '59.##.201.187':139
  • '59.#0.2.191':139
  • '59.#0.31.0':139
  • '59.##.217.180':139
  • '59.##.19.106':139
  • '59.##.206.181':139
  • '59.##.201.16':139
  • '59.##.104.101':139
  • '59.##.247.202':445
  • '59.#0.2.248':139
  • '59.##.202.172':139
  • '59.##.247.202':139
  • '59.##.65.173':139
  • '59.##.66.180':139
  • '59.##.231.73':139
  • '59.##.130.134':139
  • '59.##.88.117':139
  • '59.##.243.170':139
  • '59.##.242.99':139
  • '59.##.192.115':139
  • '59.#0.32.17':139
  • '59.##.69.114':139
  • '59.##.98.155':139
  • '59.##.141.104':139
  • '59.##.28.159':139
  • '59.##.216.78':139
  • '59.##.17.248':139
  • '59.##.133.17':139
  • '59.##.253.181':139
  • '59.##.49.185':139
  • '59.##.191.248':139
  • '59.##.83.108':445
  • '59.##.112.130':139
  • '59.##.86.182':445
  • '59.##.189.22':445
  • '59.##.178.144':139
  • '59.##.168.214':139
  • '59.#0.58.21':139
  • '59.##.55.154':139
  • '59.#0.86.92':139
  • '59.##.192.224':445
  • '59.##.254.192':445
  • '59.##.23.121':445
  • '59.#0.29.77':445
  • '59.##.90.245':445
  • '59.##.219.234':445
  • '59.##.224.85':445
  • '59.##.58.181':445
  • '59.##.161.154':445
  • '59.##.79.183':445
  • '59.##.100.230':139
  • '59.#0.53.58':445
  • '59.##.106.52':445
  • '59.##.248.85':139
  • '59.#0.59.18':139
  • '59.##.175.14':139
  • '59.##.28.194':139
  • '59.##.13.224':139
  • '59.##.79.183':139
  • '59.##.112.130':445
  • '59.#0.53.58':139
  • '59.##.106.52':139
  • '59.##.178.144':445
  • '59.##.168.214':445
  • '59.#0.58.21':445
  • '59.##.55.154':445
  • '59.#0.86.92':445
  • '59.##.183.42':139
  • '59.##.28.214':139
  • '59.##.180.55':139
  • '59.##.114.146':139
  • '59.#0.98.62':139
  • '59.#0.17.23':139
  • '59.##.131.36':139
  • '59.#0.38.75':139
  • '59.##.226.10':139
  • '59.##.198.114':139
  • '59.##.149.146':139
  • '59.##.133.177':139
  • '59.##.228.27':139
  • '59.##.59.247':139
  • '59.##.47.154':139
  • '59.#0.56.46':139
  • '59.#0.155.4':139
  • '59.##.54.127':139
  • '59.##.182.23':445
  • '59.#0.2.36':139
  • '59.##.155.250':139
  • '59.##.23.194':139
  • '59.##.189.186':139
  • '59.#0.98.46':139
  • '59.##.46.153':139
  • '59.#0.176.1':139
  • '59.##.18.246':139
  • '59.##.192.36':139
  • '59.##.173.179':139
  • '59.##.131.36':445
  • '59.#0.90.80':139
  • '59.##.190.78':139
  • '59.##.197.231':139
  • '59.##.149.153':139
  • '59.##.190.78':445
  • '59.##.232.14':139
  • '59.##.238.215':139
  • '59.##.46.134':139
  • '59.##.95.174':139
  • '59.#0.4.15':139
  • '59.##.214.53':139
  • '59.##.247.102':139
  • '59.##.33.208':139
  • '59.##.129.75':139
  • '59.##.218.169':139
  • '59.##.131.242':139
  • '59.##.33.211':139
  • '59.##.211.178':445
  • '59.#0.49.94':139
  • '59.##.211.178':139
  • '59.##.195.33':139
  • '59.##.113.58':139
  • '59.##.102.15':139
  • '59.#0.29.44':139
  • '59.##.238.77':139
  • '59.##.33.208':445
  • '59.##.129.75':445
  • '59.##.218.169':445
  • '59.##.131.242':445
  • '59.##.15.116':445
  • '59.##.104.65':445
  • '59.##.141.208':139
  • '59.##.163.201':445
  • '59.#0.67.54':445
  • '59.##.235.162':139
  • '59.#0.72.5':139
  • '59.##.15.116':139
  • '59.##.163.201':139
  • '59.##.53.190':139
  • '59.##.195.33':445
  • '59.##.102.15':445
  • '59.#0.67.54':139
  • '59.##.104.65':139
  • '59.#0.75.51':139
  • '59.#0.59.65':139
  • '59.##.156.12':139
  • '59.##.196.54':139
  • '59.##.167.167':139
  • '59.##.75.252':139
  • '59.##.201.232':139
  • '59.##.186.70':445
  • '59.##.207.99':139
  • '59.##.207.99':445
  • '59.##.87.156':139
  • '59.##.87.156':445
  • '59.#0.81.56':139
  • '59.#0.4.105':139
  • '59.##.78.183':445
  • '59.#0.92.53':139
  • '59.##.160.170':139
  • '59.#0.76.10':139
  • '59.#0.54.26':139
  • '59.##.75.252':445
  • '59.#0.80.94':445
  • '59.#0.59.65':445
  • '59.##.156.12':445
  • '59.##.178.128':445
  • '59.#0.9.66':139
  • '59.##.235.119':139
  • '59.##.208.203':445
  • '59.#0.91.45':139
  • '59.##.178.128':139
  • '59.##.135.221':445
  • '59.#0.80.94':139
  • '59.#0.27.72':445
  • '59.##.208.203':139
  • '59.#0.92.53':445
  • '59.##.196.54':445
  • '59.#0.76.10':445
  • '59.#0.54.26':445
  • '59.##.202.206':139
  • '59.##.149.146':445
  • '59.##.59.247':445
  • '59.##.228.27':445
  • '59.##.198.114':445
  • '59.#0.155.4':445
  • '59.##.180.55':445
  • '59.##.28.214':445
  • '59.##.54.127':445
  • '59.#0.56.46':445
  • '59.#0.98.5':139
  • '59.##.23.160':139
  • '59.#0.88.75':139
  • '59.##.125.105':139
  • '59.##.126.194':139
  • '59.##.238.215':445
  • '59.##.133.177':445
  • '59.##.165.46':445
  • '59.##.141.208':445
  • '59.##.46.153':445
  • '59.#0.88.75':445
  • '59.##.18.246':445
  • '59.#0.98.46':445
  • '59.##.125.105':445
  • '59.##.126.194':445
  • '59.##.39.180':139
  • '59.#0.98.5':445
  • '59.##.23.160':445
  • '59.#0.90.80':445
  • '59.##.197.231':445
  • '59.#0.98.62':445
  • '59.##.226.10':445
  • '59.##.149.153':445
  • '59.#0.2.36':445
  • '59.##.189.186':445
  • '59.##.155.250':445
  • '59.##.23.194':445
  • '59.##.98.108':445
  • '59.##.30.137':445
  • '59.##.250.153':445
  • '59.##.115.93':445
  • '59.##.136.86':445
  • '59.##.102.212':445
  • '59.#0.4.244':445
  • '59.##.24.145':445
  • '59.##.67.146':445
  • '59.##.181.66':445
  • '59.##.21.131':139
  • '59.##.154.102':445
  • '59.#0.2.135':139
  • '59.#0.255.2':139
  • '59.#0.26.33':445
  • '59.##.45.121':445
  • '59.##.191.45':445
  • '59.##.127.25':445
  • '59.##.108.112':445
  • '59.##.148.69':445
  • '59.#0.65.86':445
  • '59.##.136.13':445
  • '59.#0.35.23':445
  • '59.##.53.150':445
  • '59.#0.26.6':445
  • '59.##.173.20':445
  • '59.##.201.172':445
  • '59.##.198.171':445
  • '59.#0.56.56':445
  • '59.#0.82.87':445
  • '59.#0.96.83':445
  • '59.#0.84.3':445
  • '59.##.28.119':445
  • '59.##.17.126':445
  • '59.##.52.171':445
  • '59.##.59.246':445
  • '59.##.135.69':445
  • '59.##.180.38':139
  • '59.##.17.126':139
  • '59.##.52.171':139
  • '59.##.59.246':139
  • '59.##.135.69':139
  • '59.##.136.13':139
  • '59.#0.65.86':139
  • '59.##.53.150':139
  • '59.#0.35.23':139
  • '59.##.148.69':139
  • '59.#0.4.244':139
  • '59.##.24.145':139
  • '59.##.67.146':139
  • '59.##.181.66':139
  • '59.#0.96.83':139
  • '59.#0.82.87':139
  • '59.##.28.119':139
  • '59.#0.84.3':139
  • '59.#0.56.56':139
  • '59.##.228.48':139
  • '59.##.209.67':139
  • '59.##.171.29':139
  • '59.##.48.207':139
  • '59.##.135.60':139
  • '59.##.248.172':139
  • '59.##.141.74':139
  • '59.##.123.175':139
  • '59.##.149.39':139
  • '59.#0.26.6':139
  • '59.##.173.20':139
  • '59.##.201.172':139
  • '59.##.198.171':139
  • '59.#0.8.239':139
  • '59.##.51.231':139
  • '59.#0.63.54':139
  • '59.#0.1.62':139
  • '59.##.106.60':139
  • '59.#0.8.239':445
  • '59.##.21.154':139
  • '59.#0.62.22':139
  • '59.##.252.252':139
  • '59.##.108.182':139
  • '59.##.112.62':139
  • '59.#0.94.73':139
  • '59.##.67.169':139
  • '59.##.226.240':139
  • '59.##.73.228':139
  • '59.##.125.82':139
  • '59.##.184.99':139
  • '59.##.79.228':139
  • '59.##.151.25':139
  • '59.#0.78.25':139
  • '59.##.220.222':139
  • '59.##.252.220':139
  • '59.##.124.96':139
  • '59.##.49.154':139
  • '59.#0.58.24':139
  • '59.##.73.119':139
  • '59.##.124.119':139
  • '59.##.24.125':139
  • '59.##.161.193':445
  • '59.##.113.178':445
  • '59.##.144.222':445
  • '59.##.85.127':445
  • '59.#0.3.162':445
  • '59.#0.53.51':139
  • '59.#0.44.7':139
  • '59.##.182.92':139
  • '59.##.74.238':139
  • '59.##.83.139':139
  • '59.#0.10.90':139
  • '59.##.118.177':139
  • '59.##.84.109':139
  • '59.##.53.247':139
  • '59.##.180.181':139
  • '59.##.248.172':445
  • '59.##.141.74':445
  • '59.##.123.175':445
  • '59.##.149.39':445
  • '59.##.180.38':445
  • '59.##.21.131':445
  • '59.##.161.193':139
  • '59.#0.2.135':445
  • '59.#0.255.2':445
  • '59.##.106.60':445
  • '59.#0.63.54':445
  • '59.#0.1.62':445
  • '59.##.51.231':445
  • '59.##.171.29':445
  • '59.##.209.67':445
  • '59.##.135.60':445
  • '59.##.48.207':445
  • '59.##.228.48':445
  • '59.#0.15.56':139
  • '59.##.178.43':139
  • '59.##.42.160':139
  • '59.#0.39.42':139
  • '59.#0.1.185':139
  • '59.##.46.130':139
  • '59.##.142.207':139
  • '59.##.218.101':139
  • '59.##.152.215':139
  • '59.##.113.178':139
  • '59.##.144.222':139
  • '59.##.85.127':139
  • '59.#0.3.162':139
  • '59.##.44.106':139
  • '59.##.149.87':139
  • '59.##.91.204':139
  • '59.##.176.115':139
  • '59.##.231.173':139
  • '59.##.32.209':139
  • '59.#0.89.57':139
  • '59.##.184.131':139
  • '59.#0.205.0':139
  • '59.##.115.231':139
  • '59.##.116.15':445
  • '59.##.73.172':445
  • '59.##.95.218':445
  • '59.#0.164.9':445
  • '59.##.96.150':139
  • '59.##.25.121':139
  • '59.##.75.194':139
  • '59.##.224.82':139
  • '59.##.167.95':139
  • '59.#0.63.14':139
  • '59.##.166.152':139
  • '59.##.125.33':139
  • '59.#0.31.86':139
  • '59.##.164.140':445
  • '59.##.31.244':445
  • '59.#0.109.8':445
  • '59.##.175.87':445
  • '59.##.141.160':445
  • '59.##.226.60':445
  • '59.#0.86.88':445
  • '59.##.125.187':445
  • '59.##.71.229':445
  • '59.##.33.248':445
  • '59.##.212.150':445
  • '59.##.218.83':445
  • '59.#0.9.141':445
  • '59.##.153.115':445
  • '59.##.89.118':445
  • '59.##.174.168':445
  • '59.##.218.163':445
  • '59.##.15.155':445
  • '59.##.219.137':139
  • '59.##.89.118':139
  • '59.##.15.155':139
  • '59.##.153.115':139
  • '59.##.71.229':139
  • '59.##.125.187':139
  • '59.#0.109.8':139
  • '59.##.141.160':139
  • '59.##.174.168':139
  • '59.##.226.60':139
  • '59.##.116.15':139
  • '59.#0.9.141':139
  • '59.##.95.218':139
  • '59.#0.164.9':139
  • '59.##.218.83':139
  • '59.##.212.150':139
  • '59.##.218.163':139
  • '59.##.73.172':139
  • '59.##.33.248':139
  • '59.##.129.211':139
  • '59.#0.81.15':139
  • '59.##.50.175':139
  • '59.##.142.184':139
  • '59.##.62.251':139
  • '59.##.220.227':139
  • '59.##.219.21':139
  • '59.##.15.227':139
  • '59.##.62.102':139
  • '59.##.164.140':139
  • '59.#0.86.88':139
  • '59.##.175.87':139
  • '59.##.31.244':139
  • '59.##.168.253':139
  • '59.#0.60.80':139
  • '59.##.25.166':139
  • '59.#0.84.67':139
  • '59.#0.12.95':139
  • '59.#0.84.67':445
  • '59.##.219.21':9988
  • '59.##.142.184':9988
  • '59.##.62.251':9988
  • '59.##.224.82':9988
  • '59.#0.31.86':9988
  • '59.#0.84.67':9988
  • '59.##.168.253':9988
  • '59.##.125.33':9988
  • '59.##.25.121':9988
  • '59.##.71.229':9988
  • '59.#0.12.95':9988
  • '59.##.174.168':9988
  • '59.##.141.160':9988
  • '59.##.164.140':9988
  • '59.##.89.118':9988
  • '59.##.175.87':9988
  • '59.##.125.187':9988
  • '59.#0.86.88':9988
  • '59.##.45.121':139
  • '59.##.191.45':139
  • '59.##.127.25':139
  • '59.##.108.112':139
  • '59.##.115.93':139
  • '59.##.250.153':139
  • '59.##.102.212':139
  • '59.##.136.86':139
  • '59.##.30.137':139
  • '59.##.96.150':9988
  • '59.##.32.209':9988
  • '59.##.25.166':9988
  • '59.##.50.175':9988
  • '59.##.75.194':9988
  • '59.##.154.102':139
  • '59.#0.26.33':139
  • '59.##.184.131':9988
  • '59.##.62.102':9988
  • '59.##.31.244':9988
  • '59.##.25.166':445
  • '59.##.15.227':445
  • '59.##.220.227':445
  • '59.##.219.21':445
  • '59.##.96.150':445
  • '59.##.75.194':445
  • '59.##.166.152':445
  • '59.##.224.82':445
  • '59.##.219.137':445
  • '59.#0.60.80':445
  • '59.##.142.184':445
  • '59.#0.12.95':445
  • '59.##.168.253':445
  • '59.##.129.211':445
  • '59.##.62.251':445
  • '59.##.62.102':445
  • '59.##.50.175':445
  • '59.#0.81.15':445
  • '59.#0.9.141':9988
  • '59.##.212.150':9988
  • '59.##.32.209':445
  • '59.#0.164.9':9988
  • '59.##.226.60':9988
  • '59.##.15.155':9988
  • '59.#0.109.8':9988
  • '59.##.218.163':9988
  • '59.##.153.115':9988
  • '59.##.184.131':445
  • '59.##.115.231':445
  • '59.##.167.95':445
  • '59.#0.89.57':445
  • '59.#0.63.14':445
  • '59.#0.31.86':445
  • '59.##.25.121':445
  • '59.#0.205.0':445
  • '59.##.125.33':445
  • '59.##.44.106':445
  • '59.##.49.214':139
  • '59.#0.4.124':139
  • '59.#0.60.84':139
  • '59.##.184.102':139
  • '59.##.138.67':139
  • '59.##.158.115':139
  • '59.#0.65.9':139
  • '59.##.116.136':139
  • '59.##.134.76':139
  • '59.##.100.92':139
  • '59.##.159.29':139
  • '59.##.92.170':139
  • '59.##.64.100':139
  • '59.#0.12.65':139
  • '59.##.105.134':139
  • '59.#0.125.3':139
  • '59.##.102.12':139
  • '59.##.41.211':139
  • '59.#0.0.48':445
  • '59.##.26.178':445
  • '59.##.42.217':445
  • '59.##.118.46':445
  • '59.##.233.107':445
  • '59.##.18.226':445
  • '59.##.100.92':445
  • '59.##.112.174':445
  • '59.##.244.70':445
  • '59.##.56.141':445
  • '59.#0.38.90':445
  • '59.##.219.27':445
  • '59.##.32.210':445
  • '59.##.18.221':445
  • '59.#0.12.89':445
  • '59.##.179.204':445
  • '59.##.233.55':445
  • '59.##.211.188':445
  • '59.##.170.243':139
  • '59.#0.36.35':445
  • '59.##.236.59':445
  • '59.##.100.68':445
  • '59.##.194.202':445
  • '59.##.121.158':445
  • '59.##.19.215':445
  • '59.##.247.192':445
  • '59.##.76.145':445
  • '59.##.25.133':445
  • '59.##.170.70':139
  • '59.##.247.192':139
  • '59.#0.55.90':139
  • '59.##.19.215':139
  • '59.##.202.243':445
  • '59.##.131.96':445
  • '59.#0.55.90':445
  • '59.#0.56.67':445
  • '59.##.135.76':445
  • '59.##.42.217':139
  • '59.#0.0.48':139
  • '59.##.233.55':139
  • '59.##.118.46':139
  • '59.##.26.178':139
  • '59.##.112.174':139
  • '59.##.244.70':139
  • '59.##.233.107':139
  • '59.##.18.226':139
  • '59.##.211.188':139
  • '59.#0.12.89':139
  • '59.##.170.70':445
  • '59.##.219.27':139
  • '59.##.18.221':139
  • '59.#0.38.90':139
  • '59.##.56.141':139
  • '59.##.179.204':139
  • '59.##.32.210':139
  • '59.#0.60.84':445
  • '59.#0.69.46':139
  • '59.##.217.115':139
  • '59.##.66.206':139
  • '59.##.164.39':139
  • '59.#0.57.37':139
  • '59.##.116.19':139
  • '59.#0.52.27':139
  • '59.##.168.140':139
  • '59.##.155.147':139
  • '59.##.155.14':445
  • '59.#0.87.80':139
  • '59.##.205.154':445
  • '59.##.24.203':445
  • '59.##.237.78':445
  • '59.#0.4.106':445
  • '59.##.100.141':445
  • '59.##.193.40':445
  • '59.##.137.194':445
  • '59.#0.47.58':139
  • '59.##.100.213':139
  • '59.#0.59.30':139
  • '59.##.67.105':139
  • '59.##.20.138':139
  • '59.##.35.160':139
  • '59.#0.11.60':445
  • '59.#0.15.52':139
  • '59.##.239.70':139
  • '59.##.132.102':139
  • '59.##.33.131':139
  • '59.##.160.249':139
  • '59.##.59.164':139
  • '59.##.90.170':139
  • '59.##.138.239':139
  • '59.##.170.143':139
  • '59.#0.0.235':139
  • '59.##.39.141':139
  • '59.##.121.207':139
  • '59.##.102.12':445
  • '59.##.191.76':139
  • '59.##.134.76':445
  • '59.##.138.67':445
  • '59.##.41.211':445
  • '59.##.158.115':445
  • '59.##.113.191':139
  • '59.##.159.29':445
  • '59.##.64.100':445
  • '59.##.49.214':445
  • '59.##.170.243':445
  • '59.##.105.134':445
  • '59.#0.4.124':445
  • '59.##.184.102':445
  • '59.#0.65.9':445
  • '59.#0.125.3':445
  • '59.#0.12.65':445
  • '59.##.116.136':445
  • '59.#0.39.87':445
  • '59.#0.4.106':139
  • '59.##.237.78':139
  • '59.##.193.40':139
  • '59.##.100.141':139
  • '59.##.11.168':139
  • '59.#0.80.6':445
  • '59.##.191.76':445
  • '59.#0.32.19':445
  • '59.#0.80.6':139
  • '59.##.155.14':139
  • '59.#0.32.19':139
  • '59.#0.52.66':139
  • '59.##.205.154':139
  • '59.##.137.194':139
  • '59.##.79.141':139
  • '59.##.24.203':139
  • '59.#0.33.56':445
  • '59.##.232.109':139
  • '59.#0.45.55':139
  • '59.##.189.132':139
  • '59.#0.70.76':139
  • '59.##.79.121':139
  • '59.##.11.242':139
  • '59.##.104.131':139
  • '59.##.21.209':139
  • '59.##.180.81':139
  • '59.#0.10.90':445
  • '59.##.53.247':445
  • '59.##.84.109':445
  • '59.##.118.177':445
  • '59.##.73.119':445
  • '59.##.124.119':445
  • '59.##.163.63':139
  • '59.##.24.125':445
  • '59.#0.58.24':445
  • '59.##.255.205':139
  • '59.##.59.118':139
  • '59.#0.70.62':139
  • '59.#0.28.54':139
  • '59.##.37.189':139
  • '59.##.106.196':139
  • '59.##.217.133':139
  • '59.##.112.88':139
  • '59.##.45.240':139
  • '59.##.225.222':139
  • '59.##.213.122':139
  • '59.##.45.216':139
  • '59.##.53.241':139
  • '59.##.166.228':139
  • '59.##.196.104':139
  • '59.##.39.158':139
  • '59.##.220.166':139
  • '59.#0.4.138':139
  • '59.##.83.139':445
  • '59.##.218.101':445
  • '59.##.178.43':445
  • '59.##.46.130':445
  • '59.#0.15.56':445
  • '59.#0.1.185':445
  • '59.##.125.82':445
  • '59.##.184.99':445
  • '59.##.180.181':445
  • '59.##.79.228':445
  • '59.##.149.87':445
  • '59.##.91.204':445
  • '59.##.176.115':445
  • '59.##.231.173':445
  • '59.##.42.160':445
  • '59.##.142.207':445
  • '59.##.152.215':445
  • '59.#0.39.42':445
  • '59.##.151.25':445
  • '59.##.226.240':445
  • '59.##.67.169':445
  • '59.##.108.182':445
  • '59.##.73.228':445
  • '59.##.182.92':445
  • '59.#0.94.73':445
  • '59.#0.44.7':445
  • '59.#0.53.51':445
  • '59.##.74.238':445
  • '59.##.220.222':445
  • '59.##.49.154':445
  • '59.#0.78.25':445
  • '59.##.124.96':445
  • '59.##.252.252':445
  • '59.#0.62.22':445
  • '59.##.112.62':445
  • '59.##.252.220':445
  • '59.##.21.154':445
  • '59.##.247.61':139
  • '59.#0.66.92':445
  • '59.##.203.151':445
  • '59.#0.196.4':445
  • '59.##.196.88':445
  • '59.##.151.70':445
  • '59.#0.64.93':445
  • '59.##.106.196':445
  • '59.##.168.33':445
  • '59.#0.168.6':445
  • '59.#0.4.138':445
  • '59.##.196.104':445
  • '59.##.166.228':445
  • '59.##.220.166':445
  • '59.#0.28.54':445
  • '59.##.112.88':445
  • '59.##.45.240':445
  • '59.##.255.205':445
  • '59.##.59.118':445
  • '59.#0.56.67':139
  • '59.#0.36.35':139
  • '59.##.76.145':139
  • '59.##.131.96':139
  • '59.##.194.202':139
  • '59.##.135.76':139
  • '59.##.100.68':139
  • '59.##.236.59':139
  • '59.##.25.133':139
  • '59.#0.5.77':445
  • '59.#0.106.7':445
  • '59.##.217.133':445
  • '59.##.221.226':445
  • '59.#0.9.84':445
  • '59.##.202.243':139
  • '59.##.121.158':139
  • '59.##.132.12':445
  • '59.##.212.177':445
  • '59.##.213.122':445
  • '59.##.168.33':139
  • '59.##.151.70':139
  • '59.#0.64.93':139
  • '59.##.70.168':139
  • '59.##.75.151':139
  • '59.##.203.151':139
  • '59.##.196.88':139
  • '59.##.133.66':445
  • '59.##.249.64':445
  • '59.##.132.12':139
  • '59.##.212.177':139
  • '59.#0.106.7':139
  • '59.#0.9.84':139
  • '59.#0.196.4':139
  • '59.#0.66.92':139
  • '59.##.221.226':139
  • '59.#0.49.39':139
  • '59.#0.5.77':139
  • '59.##.11.242':445
  • '59.##.79.121':445
  • '59.#0.45.55':445
  • '59.##.180.81':445
  • '59.##.104.131':445
  • '59.##.53.241':445
  • '59.##.225.222':445
  • '59.##.45.216':445
  • '59.##.232.109':445
  • '59.##.124.86':445
  • '59.#0.168.6':139
  • '59.##.140.143':445
  • '59.##.187.142':139
  • '59.##.247.61':445
  • '59.##.189.132':445
  • '59.#0.70.76':445
  • '59.##.75.151':445
  • '59.##.163.63':445
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android