マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Trojan.DownLoader11.17619

Added to the Dr.Web virus database: 2014-06-20

Virus description added:

Technical Information

To ensure autorun and distribution:
Creates or modifies the following files:
  • %WINDIR%\Tasks\SA.DAT
Malicious functions:
Executes the following:
  • '<SYSTEM32>\svchost.exe' -k netsvcs
  • '<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WER040a.dir00\svchost.exe.hdmp 16325836412032028
  • '<SYSTEM32>\dumprep.exe' 1140 -dm 7 7 %TEMP%\WER040a.dir00\svchost.exe.mdmp 16325836412027936
Modifies file system :
Creates the following files:
  • <SYSTEM32>\oobe\html\mouse\lbzcxver.exe
  • <SYSTEM32>\oobe\html\mouse\hcvxrtwz.exe
  • <SYSTEM32>\oobe\html\mouse\jlkshlvl.exe
  • <SYSTEM32>\oobe\html\mouse\nrlcnzsh.exe
  • <SYSTEM32>\oobe\html\mouse\bccxejnc.exe
  • <SYSTEM32>\oobe\html\mouse\jjlhknhh.exe
  • <SYSTEM32>\oobe\html\mouse\bzrbbsrn.exe
  • <SYSTEM32>\oobe\html\dslmain\qxztllwj.exe
  • <SYSTEM32>\oobe\html\dslmain\slhcezwb.exe
  • <SYSTEM32>\oobe\error\sswzlttc.exe
  • <SYSTEM32>\oobe\html\dslmain\nevttblh.exe
  • <SYSTEM32>\oobe\html\isptype\lnvlnzbq.exe
  • <SYSTEM32>\oobe\html\iconnect\jsnsljzh.exe
  • <SYSTEM32>\oobe\html\iconnect\shrtrsbs.exe
  • <SYSTEM32>\oobe\isperror\ztceskls.exe
  • <SYSTEM32>\oobe\isperror\rkeetqew.exe
  • <SYSTEM32>\oobe\icserror\vcejlxkt.exe
  • <SYSTEM32>\oobe\isperror\ktkbeknl.exe
  • <SYSTEM32>\oobe\isperror\knkbrnbn.exe
  • <SYSTEM32>\oobe\isperror\hkenntsl.exe
  • <SYSTEM32>\oobe\isperror\skqbvxsq.exe
  • <SYSTEM32>\oobe\html\mouse\rbnrnnxt.exe
  • <SYSTEM32>\oobe\html\mouse\cjxsjlbr.exe
  • <SYSTEM32>\oobe\html\mouse\klkhkrts.exe
  • <SYSTEM32>\oobe\html\mouse\khkvhhsb.exe
  • <SYSTEM32>\oobe\html\sconnect\jkhjlhbb.exe
  • <SYSTEM32>\oobe\html\sconnect\vznnebet.exe
  • <SYSTEM32>\oobe\html\mouse\qetvqlnw.exe
  • <SYSTEM32>\oobe\actsetup\blvccbsx.exe
  • <SYSTEM32>\oobe\actsetup\brvecwcs.exe
  • <SYSTEM32>\oobe\actsetup\zvswnlev.exe
  • <SYSTEM32>\oobe\actsetup\btesnnel.exe
  • <SYSTEM32>\oobe\actsetup\hlrrerkq.exe
  • <SYSTEM32>\oobe\actsetup\tchekrqt.exe
  • <SYSTEM32>\oobe\actsetup\rkjenssc.exe
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\vxwqhwzs.exe
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\vxwqhwzs.exe
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\vsekkehe.exe
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\vxwqhwzs.exe
  • <SYSTEM32>\oobe\actsetup\vrrkkhbn.exe
  • <SYSTEM32>\oobe\actsetup\nzzwhebn.exe
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Email\vxwqhwzs.exe
  • <SYSTEM32>\oobe\error\jkhehnjn.exe
  • <SYSTEM32>\oobe\error\erettxjr.exe
  • <SYSTEM32>\oobe\error\xenjnbqe.exe
  • <SYSTEM32>\oobe\error\kbwnhlkk.exe
  • <SYSTEM32>\oobe\error\neehnzxl.exe
  • <SYSTEM32>\oobe\error\ektltnch.exe
  • <SYSTEM32>\oobe\error\lktkttrb.exe
  • <SYSTEM32>\oobe\actsetup\btqkxenz.exe
  • <SYSTEM32>\oobe\actsetup\knkskthw.exe
  • <SYSTEM32>\oobe\actsetup\cwbbnetr.exe
  • <SYSTEM32>\oobe\actsetup\rrthsntk.exe
  • <SYSTEM32>\oobe\qjeejeej.exe
  • <SYSTEM32>\oobe\tttnwshl.exe
  • <SYSTEM32>\oobe\actsetup\lrlzztll.exe
  • <SYSTEM32>\oobe\setup\enbsjwre.exe
  • <SYSTEM32>\oobe\setup\vjbssbhj.exe
  • <SYSTEM32>\oobe\setup\seqtjbee.exe
  • <SYSTEM32>\oobe\setup\wnklretl.exe
  • <SYSTEM32>\oobe\setup\jejrhnvh.exe
  • <SYSTEM32>\oobe\setup\lhkhbjzl.exe
  • <SYSTEM32>\oobe\setup\nstnnnkk.exe
  • <SYSTEM32>\oobe\setup\jtxsbxwn.exe
  • <SYSTEM32>\oobe\setup\hwncrnhh.exe
  • <SYSTEM32>\oobe\setup\shbqjhcl.exe
  • <SYSTEM32>\oobe\setup\rserkten.exe
  • <SYSTEM32>\oobe\setup\zeblsxxw.exe
  • <SYSTEM32>\oobe\setup\tqkbrhnx.exe
  • <SYSTEM32>\oobe\setup\ntwbjnxv.exe
  • <SYSTEM32>\oobe\setup\hxckwnzl.exe
  • <SYSTEM32>\oobe\setup\nwqjkkhn.exe
  • <SYSTEM32>\oobe\setup\zhzsnhje.exe
  • <SYSTEM32>\oobe\setup\wtenslnj.exe
  • %WINDIR%\Web\wcxnjhhj.exe
  • <SYSTEM32>\oobe\cthsnblj.exe
  • <SYSTEM32>\oobe\setup\bvqncler.exe
  • <SYSTEM32>\oobe\setup\sejkhevn.exe
  • <SYSTEM32>\oobe\setup\elrbjlrn.exe
  • <SYSTEM32>\oobe\setup\wrbbnjss.exe
  • <SYSTEM32>\oobe\setup\eskcxkhr.exe
  • <SYSTEM32>\oobe\setup\lkjtrhks.exe
  • <SYSTEM32>\oobe\setup\bknkjheh.exe
  • <SYSTEM32>\oobe\setup\nkhlvlzt.exe
  • <SYSTEM32>\oobe\regerror\kjtzrlbb.exe
  • <SYSTEM32>\oobe\regerror\xcjnkske.exe
  • <SYSTEM32>\oobe\regerror\wlkbbnrq.exe
  • <SYSTEM32>\oobe\regerror\wtkkxrlr.exe
  • <SYSTEM32>\oobe\setup\rresnsct.exe
  • <SYSTEM32>\oobe\setup\hlqstwxz.exe
  • <SYSTEM32>\oobe\setup\knkhrczb.exe
  • <SYSTEM32>\oobe\krcxzncj.exe
  • <SYSTEM32>\oobe\isperror\tsjhshcj.exe
  • <SYSTEM32>\oobe\isperror\jjtrkbnj.exe
  • <SYSTEM32>\oobe\regerror\cetrjwtt.exe
  • <SYSTEM32>\oobe\regerror\etnwxxnv.exe
  • <SYSTEM32>\oobe\regerror\ehxzeshx.exe
  • <SYSTEM32>\oobe\regerror\rcwnttzv.exe
  • <SYSTEM32>\oobe\setup\kksksesr.exe
  • <SYSTEM32>\oobe\setup\zhhrrltb.exe
  • <SYSTEM32>\oobe\setup\vkckxhbn.exe
  • <SYSTEM32>\oobe\setup\hxxttskn.exe
  • <SYSTEM32>\oobe\setup\hnhkkene.exe
  • <SYSTEM32>\oobe\setup\tthzxntk.exe
  • <SYSTEM32>\oobe\setup\nleevxqj.exe
  • <SYSTEM32>\oobe\setup\nvbbshss.exe
  • <SYSTEM32>\oobe\setup\znnhhhtk.exe
  • <SYSTEM32>\oobe\setup\lnestrnt.exe
  • <SYSTEM32>\oobe\setup\crjrhltv.exe
  • <SYSTEM32>\oobe\setup\tnqsbljb.exe
  • <SYSTEM32>\oobe\setup\kjqkxtnz.exe
  • <SYSTEM32>\oobe\setup\esjhxblq.exe
  • %WINDIR%\Help\Tours\htmlTour\tjxhsker.exe
  • %WINDIR%\Help\Tours\htmlTour\hjhecvkh.exe
  • %WINDIR%\Help\Tours\htmlTour\kzerbzks.exe
  • %WINDIR%\Help\Tours\htmlTour\lrhwxcwk.exe
  • %WINDIR%\Help\Tours\htmlTour\skersqzb.exe
  • %WINDIR%\Help\Tours\htmlTour\klbvejnk.exe
  • %WINDIR%\Help\Tours\htmlTour\kxkzvszq.exe
  • %WINDIR%\Help\Tours\htmlTour\qejnhetj.exe
  • %WINDIR%\Help\tsbjbtvn.exe
  • %WINDIR%\Help\jjlenkbt.exe
  • %WINDIR%\Help\Tours\htmlTour\lhhjrkjk.exe
  • %WINDIR%\Help\Tours\htmlTour\nleqhveh.exe
  • %WINDIR%\Help\Tours\htmlTour\cxjclkkc.exe
  • %WINDIR%\Help\Tours\htmlTour\wwvjntek.exe
  • %WINDIR%\Help\Tours\htmlTour\rzjnrbeb.exe
  • %WINDIR%\Help\Tours\htmlTour\blkkzrtt.exe
  • %WINDIR%\Help\Tours\htmlTour\ztssweeh.exe
  • %WINDIR%\Help\Tours\htmlTour\lbsbbjlx.exe
  • %WINDIR%\Help\Tours\htmlTour\knwbcncs.exe
  • %WINDIR%\Help\Tours\htmlTour\kzkzkjkb.exe
  • %WINDIR%\Help\Tours\htmlTour\njnrhctz.exe
  • %WINDIR%\Help\Tours\htmlTour\rqkjqjqb.exe
  • %WINDIR%\Help\Tours\htmlTour\trsecbvb.exe
  • %WINDIR%\Help\Tours\htmlTour\lwnssrtv.exe
  • %WINDIR%\Help\Tours\htmlTour\ekwlsjzj.exe
  • %WINDIR%\Help\Tours\htmlTour\rbnesqvr.exe
  • %WINDIR%\Help\Tours\htmlTour\ewrlklcs.exe
  • %WINDIR%\Help\Tours\htmlTour\zbcwlstj.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
  • %TEMP%\WER040a.dir00\svchost.exe.mdmp
  • %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
  • %TEMP%\WER040a.dir00\svchost.exe.hdmp
  • %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
  • %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
  • %WINDIR%\Help\hwexrtne.exe
  • %WINDIR%\Help\bzehxvnz.exe
  • %WINDIR%\Help\jbnshhqj.exe
  • %TEMP%\WER040a.dir00\appcompat.txt
  • %CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
  • %TEMP%\WER040a.dir00\manifest.txt
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
  • %CommonProgramFiles%\System\ado\tsektjkj.exe
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\ezslqrbz.exe
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\shrnxshq.exe
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\ctjxljxh.exe
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\neqvzkeh.exe
  • %WINDIR%\pchealth\helpctr\System\sysinfo\rercrnhh.exe
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\rqxjhbsl.exe
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\wesnhzec.exe
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\bbsbrlee.exe
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\wbjbjelb.exe
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\ekjvhbcn.exe
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\kbzzlwlr.exe
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\ccthwjlr.exe
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\rbntkevt.exe
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\shnkjjbh.exe
  • %WINDIR%\pchealth\helpctr\System\UpdateCtr\snqesjrk.exe
  • %WINDIR%\pchealth\helpctr\System\UpdateCtr\lwklbvze.exe
  • %WINDIR%\pchealth\helpctr\System\UpdateCtr\qxshkkqn.exe
  • %WINDIR%\pchealth\helpctr\System\UpdateCtr\rrbvcsbb.exe
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\kkrtrbns.exe
  • %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\erwskeqr.exe
  • %WINDIR%\pchealth\helpctr\System\UpdateCtr\trkhkjxz.exe
  • %WINDIR%\pchealth\helpctr\System\sysinfo\jbrhbztz.exe
  • %WINDIR%\pchealth\helpctr\System\sysinfo\vkchbbxh.exe
  • %WINDIR%\pchealth\helpctr\System\sysinfo\rbcjjwqr.exe
  • %WINDIR%\pchealth\helpctr\System\sysinfo\cntbrbzr.exe
  • %WINDIR%\pchealth\helpctr\System\sysinfo\jrtqcssx.exe
  • %WINDIR%\pchealth\helpctr\System\sysinfo\rnbrkrlv.exe
  • %WINDIR%\pchealth\helpctr\System\sysinfo\bjlkjrls.exe
  • %WINDIR%\pchealth\helpctr\System\DFS\jlejjblt.exe
  • %WINDIR%\pchealth\helpctr\System\CompatCtr\hrtbebze.exe
  • %WINDIR%\pchealth\helpctr\System\CompatCtr\tnslrrhk.exe
  • %WINDIR%\pchealth\helpctr\System\DFS\jnxckxkh.exe
  • %WINDIR%\pchealth\helpctr\System\ErrMsg\vlvxqrek.exe
  • %WINDIR%\pchealth\helpctr\System\DVDUpgrd\shrrtjet.exe
  • %WINDIR%\pchealth\helpctr\System\DFS\nbzhnzrx.exe
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Cnt\tjnbzhbh.exe
  • %WINDIR%\Help\Tours\WindowsMediaPlayer\Audio\lllknblj.exe
  • %WINDIR%\Help\Tours\htmlTour\xslbknlk.exe
  • %WINDIR%\Microsoft.NET\Framework\v1.1.4322\1033\selkwllq.exe
  • %WINDIR%\pchealth\helpctr\System\CompatCtr\jbnxjtkn.exe
  • %WINDIR%\pchealth\helpctr\System\CompatCtr\zlhqrlbx.exe
  • %WINDIR%\Microsoft.NET\Framework\v1.1.4322\ASP.NETClientFiles\lhwxjnsb.exe
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\rzqstbqq.exe
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Common\rwcjrqhw.exe
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Common\hxrshqsj.exe
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\jjennetl.exe
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\ttzvrbzr.exe
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\knenvxlj.exe
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\zqwkjbbt.exe
  • %WINDIR%\pchealth\helpctr\System\NetDiag\hsjqschn.exe
  • %WINDIR%\pchealth\helpctr\System\NetDiag\xrvxszvs.exe
  • %WINDIR%\pchealth\helpctr\System\errors\jcjjlqnq.exe
  • %WINDIR%\pchealth\helpctr\System\panels\nntlskwn.exe
  • %WINDIR%\pchealth\helpctr\System\Remote Assistance\Common\seshhtth.exe
  • %WINDIR%\pchealth\helpctr\System\rc\qbrblthb.exe
  • %WINDIR%\pchealth\helpctr\System\panels\sncncweb.exe
Network activity:
Connects to:
  • '69.##0.254.126':139
  • '69.##0.159.67':139
  • '69.##0.26.157':139
  • '69.##0.116.167':139
  • '69.##0.24.44':139
  • '69.##0.107.144':139
  • '69.##0.223.155':139
  • '69.##0.121.112':139
  • '69.##0.255.102':139
  • '69.##0.73.62':139
  • '69.##0.147.198':139
  • '69.##0.196.159':139
  • '69.##0.159.225':139
  • '69.##0.254.137':139
  • '69.##0.210.9':139
  • '69.##0.93.228':139
  • '69.##0.150.132':139
  • '69.##0.227.65':139
  • '69.##0.67.208':139
  • '69.##0.116.1':139
  • '69.##0.110.174':139
  • '69.##0.222.49':139
  • '69.##0.11.181':139
  • '69.##0.53.253':139
  • '69.##0.185.37':139
  • '69.#20.37.8':139
  • '69.##0.146.27':139
  • '69.##0.26.248':445
  • '69.##0.248.121':445
  • '69.##0.121.208':445
  • '69.##0.35.40':445
  • '69.##0.252.121':445
  • '69.##0.158.215':445
  • '69.##0.58.194':445
  • '69.##0.35.234':445
  • '69.##0.147.151':445
  • '69.##0.152.61':445
  • '69.##0.23.11':445
  • '69.##0.24.228':445
  • '69.##0.174.247':445
  • '69.##0.147.232':445
  • '69.##0.78.102':139
  • '69.##0.64.202':139
  • '69.##0.217.207':139
  • '69.##0.206.106':139
  • '69.##0.107.61':139
  • '69.##0.61.216':139
  • '69.##0.158.200':139
  • '69.##0.132.138':445
  • '69.##0.59.90':445
  • '69.##0.174.20':445
  • '69.##0.158.234':139
  • '69.##0.178.92':445
  • '69.##0.200.103':445
  • '69.##0.254.137':445
  • '69.##0.107.144':445
  • '69.##0.24.44':445
  • '69.##0.11.181':445
  • '69.##0.53.253':445
  • '69.##0.116.167':445
  • '69.##0.254.126':445
  • '69.##0.147.198':445
  • '69.##0.196.159':445
  • '69.##0.159.225':445
  • '69.##0.159.67':445
  • '69.##0.26.157':445
  • '69.##0.223.155':445
  • '69.##0.222.49':445
  • '69.##0.227.65':445
  • '69.##0.67.208':445
  • '69.##0.116.1':445
  • '69.##0.134.102':445
  • '69.##0.167.37':445
  • '69.##0.1.120':445
  • '69.##0.210.9':445
  • '69.##0.185.37':445
  • '69.##0.146.27':445
  • '69.#20.37.8':445
  • '69.##0.93.228':445
  • '69.##0.150.132':445
  • '69.##0.110.174':445
  • '69.##0.51.226':139
  • '69.##0.243.96':139
  • '69.##0.136.151':139
  • '69.##0.96.108':139
  • '69.##0.118.22':139
  • '69.##0.229.253':139
  • '69.##0.11.175':139
  • '69.##0.134.102':139
  • '69.##0.167.37':139
  • '69.##0.1.120':139
  • '69.##0.28.28':139
  • '69.##0.14.141':139
  • '69.##0.245.89':139
  • '69.##0.184.120':139
  • '69.##0.73.62':445
  • '69.##0.107.61':445
  • '69.##0.61.216':445
  • '69.##0.121.112':445
  • '69.##0.255.102':445
  • '69.##0.206.106':445
  • '69.##0.78.102':445
  • '69.##0.158.234':445
  • '69.##0.10.26':139
  • '69.##0.69.235':139
  • '69.##0.217.207':445
  • '69.##0.64.202':445
  • '69.##0.158.200':445
  • '69.##0.177.24':139
  • '69.##0.186.181':139
  • '69.##0.249.101':139
  • '69.##0.84.158':139
  • '69.##0.159.164':139
  • '69.##0.165.56':139
  • '69.##0.101.121':139
  • '69.##0.66.135':139
  • '69.##0.135.96':139
  • '69.##0.94.66':139
  • '69.##0.16.208':139
  • '69.##0.207.145':139
  • '69.##0.213.253':139
  • '69.##0.201.134':139
  • '69.##0.96.58':139
  • '69.##0.43.120':139
  • '69.##0.41.74':139
  • '69.##0.149.158':139
  • '69.##0.1.143':139
  • '69.##0.190.107':139
  • '69.##0.16.246':139
  • '69.##0.105.52':139
  • '69.##0.233.186':139
  • '69.##0.75.251':139
  • '69.##0.241.182':139
  • '69.##0.148.42':139
  • '69.##0.178.248':139
  • '69.##0.14.103':445
  • '69.##0.80.78':445
  • '69.##0.88.32':445
  • '69.##0.71.194':445
  • '69.##0.147.134':445
  • '69.##0.112.176':445
  • '69.##0.115.54':445
  • '69.##0.204.113':445
  • '69.#20.24.0':445
  • '69.##0.223.7':445
  • '69.##0.53.246':445
  • '69.##0.245.125':445
  • '69.##0.50.178':445
  • '69.##0.197.124':445
  • '69.##0.152.169':445
  • '69.##0.249.82':445
  • '69.##0.21.126':445
  • '69.##0.131.50':139
  • '69.##0.50.81':139
  • '69.##0.80.224':445
  • '69.##0.237.231':445
  • '69.#20.50.6':445
  • '69.##0.140.69':445
  • '69.##0.28.77':445
  • '69.#20.73.5':445
  • '69.##0.3.201':445
  • '69.##0.245.101':445
  • '69.##0.84.158':445
  • '69.##0.159.164':445
  • '69.##0.165.56':445
  • '69.##0.233.186':445
  • '69.##0.75.251':445
  • '69.##0.201.134':445
  • '69.##0.177.24':445
  • '69.##0.16.208':445
  • '69.##0.207.145':445
  • '69.##0.213.253':445
  • '69.##0.186.181':445
  • '69.##0.249.101':445
  • '69.##0.101.121':445
  • '69.##0.105.52':445
  • '69.##0.149.158':445
  • '69.##0.1.143':445
  • '69.##0.190.107':445
  • '69.##0.89.81':445
  • '69.##0.170.142':445
  • '69.##0.143.29':445
  • '69.##0.96.58':445
  • '69.##0.241.182':445
  • '69.##0.148.42':445
  • '69.##0.178.248':445
  • '69.##0.43.120':445
  • '69.##0.41.74':445
  • '69.##0.16.246':445
  • '69.##0.58.194':139
  • '69.##0.23.11':139
  • '69.##0.24.228':139
  • '69.##0.26.248':139
  • '69.##0.248.121':139
  • '69.##0.121.208':139
  • '69.##0.174.247':139
  • '69.##0.89.81':139
  • '69.##0.170.142':139
  • '69.##0.143.29':139
  • '69.##0.35.234':139
  • '69.##0.147.151':139
  • '69.##0.152.61':139
  • '69.##0.158.215':139
  • '69.##0.131.50':445
  • '69.##0.50.81':445
  • '69.##0.178.92':139
  • '69.##0.66.135':445
  • '69.##0.135.96':445
  • '69.##0.94.66':445
  • '69.##0.200.103':139
  • '69.##0.147.232':139
  • '69.##0.35.40':139
  • '69.##0.252.121':139
  • '69.##0.132.138':139
  • '69.##0.59.90':139
  • '69.##0.174.20':139
  • '69.##0.245.89':445
  • '69.##0.146.175':139
  • '69.##0.37.80':139
  • '69.##0.94.51':139
  • '69.##0.189.11':139
  • '69.##0.17.57':139
  • '69.##0.125.26':139
  • '69.#20.90.5':139
  • '69.##0.2.123':139
  • '69.##0.30.214':139
  • '69.#20.79.1':139
  • '69.##0.81.75':139
  • '69.##0.231.197':139
  • '69.##0.5.158':139
  • '69.##0.63.195':139
  • '69.##0.70.143':139
  • '69.##0.143.0':139
  • '69.##0.64.201':139
  • '69.##0.135.240':139
  • '69.##0.50.98':139
  • '69.##0.159.52':139
  • '69.##0.188.68':139
  • '69.##0.127.87':139
  • '69.##0.80.182':139
  • '69.##0.72.60':139
  • '69.##0.153.21':139
  • '69.##0.238.251':139
  • '69.##0.19.17':139
  • '69.##0.205.12':139
  • '69.##0.56.103':139
  • '69.##0.220.115':139
  • '69.##0.211.223':139
  • '69.##0.255.199':139
  • '69.##0.61.126':139
  • '69.##0.114.243':139
  • '69.##0.5.109':445
  • '69.##0.23.164':445
  • '69.##0.12.48':445
  • '69.##0.135.177':445
  • '69.##0.79.139':445
  • '69.##0.28.106':445
  • '69.##0.73.198':139
  • '69.##0.99.234':139
  • '69.##0.234.79':139
  • '69.##0.115.238':139
  • '69.##0.60.163':139
  • '69.##0.163.133':139
  • '69.##0.118.204':139
  • '69.##0.231.109':139
  • '69.##0.223.13':139
  • '69.##0.140.0':139
  • '69.##0.205.147':139
  • '69.##0.198.135':139
  • '69.##0.215.240':139
  • '69.#20.4.3':139
  • '69.##0.189.11':445
  • '69.##0.17.57':445
  • '69.##0.125.26':445
  • '69.##0.80.182':445
  • '69.##0.63.195':445
  • '69.##0.72.60':445
  • '69.##0.146.175':445
  • '69.##0.81.75':445
  • '69.##0.231.197':445
  • '69.##0.5.158':445
  • '69.##0.37.80':445
  • '69.#20.90.5':445
  • '69.##0.94.51':445
  • '69.##0.127.87':445
  • '69.##0.135.240':445
  • '69.##0.50.98':445
  • '69.##0.159.52':445
  • '69.##0.72.150':445
  • '69.##0.86.190':445
  • '69.##0.104.233':445
  • '69.##0.70.143':445
  • '69.##0.153.21':445
  • '69.##0.238.251':445
  • '69.##0.19.17':445
  • '69.##0.143.0':445
  • '69.##0.64.201':445
  • '69.##0.188.68':445
  • '69.##0.211.223':445
  • '69.##0.255.199':445
  • '69.##0.56.103':445
  • '69.##0.140.0':445
  • '69.##0.205.147':445
  • '69.##0.73.198':445
  • '69.##0.61.126':445
  • '69.##0.72.150':139
  • '69.##0.86.190':139
  • '69.##0.104.233':139
  • '69.##0.220.115':445
  • '69.##0.205.12':445
  • '69.##0.114.243':445
  • '69.#20.4.3':445
  • '69.##0.60.163':445
  • '69.##0.163.133':445
  • '69.##0.118.204':445
  • '69.##0.2.123':445
  • '69.##0.30.214':445
  • '69.#20.79.1':445
  • '69.##0.99.234':445
  • '69.##0.198.135':445
  • '69.##0.215.240':445
  • '69.##0.223.13':445
  • '69.##0.234.79':445
  • '69.##0.115.238':445
  • '69.##0.231.109':445
  • '69.##0.185.23':139
  • '69.##0.24.132':139
  • '69.##0.3.198':139
  • '69.##0.152.155':139
  • '69.##0.183.154':139
  • '69.##0.6.227':139
  • '69.##0.119.34':139
  • '69.##0.152.126':139
  • '69.##0.245.118':139
  • '69.##0.21.26':139
  • '69.#20.35.7':139
  • '69.##0.35.131':139
  • '69.##0.245.57':139
  • '69.##0.85.152':139
  • '69.##0.255.235':139
  • '69.##0.231.95':139
  • '69.##0.98.121':139
  • '69.##0.42.35':139
  • '69.##0.61.123':139
  • '69.##0.28.137':139
  • '69.##0.48.109':139
  • '69.##0.36.94':139
  • '69.##0.56.188':139
  • '69.##0.248.85':139
  • '69.##0.50.186':139
  • '69.##0.94.38':139
  • '69.##0.66.100':139
  • '69.##0.184.120':445
  • '69.##0.118.22':445
  • '69.##0.96.108':445
  • '69.##0.33.190':139
  • '69.##0.10.26':445
  • '69.##0.69.235':445
  • '69.##0.229.253':445
  • '69.##0.11.175':445
  • '69.##0.28.28':445
  • '69.##0.14.141':445
  • '69.##0.51.226':445
  • '69.##0.243.96':445
  • '69.##0.136.151':445
  • '69.##0.222.16':139
  • '69.##0.203.58':139
  • '69.##0.81.91':139
  • '69.##0.3.127':139
  • '69.##0.180.223':139
  • '69.##0.224.46':139
  • '69.##0.32.143':139
  • '69.##0.52.35':139
  • '69.##0.3.225':139
  • '69.##0.113.236':139
  • '69.##0.194.63':139
  • '69.##0.42.121':139
  • '69.##0.105.144':139
  • '69.##0.94.19':139
  • '69.##0.152.155':445
  • '69.##0.183.154':445
  • '69.##0.6.227':445
  • '69.##0.56.188':445
  • '69.##0.248.85':445
  • '69.##0.85.152':445
  • '69.##0.185.23':445
  • '69.#20.35.7':445
  • '69.##0.35.131':445
  • '69.##0.245.57':445
  • '69.##0.24.132':445
  • '69.##0.3.198':445
  • '69.##0.119.34':445
  • '69.##0.36.94':445
  • '69.##0.42.35':445
  • '69.##0.61.123':445
  • '69.##0.28.137':445
  • '69.##0.240.60':445
  • '69.##0.224.5':445
  • '69.##0.168.100':445
  • '69.##0.255.235':445
  • '69.##0.50.186':445
  • '69.##0.94.38':445
  • '69.##0.66.100':445
  • '69.##0.231.95':445
  • '69.##0.98.121':445
  • '69.##0.48.109':445
  • '69.##0.33.190':445
  • '69.##0.135.177':139
  • '69.##0.79.139':139
  • '69.##0.113.236':445
  • '69.##0.194.63':445
  • '69.##0.222.16':445
  • '69.##0.28.106':139
  • '69.##0.240.60':139
  • '69.##0.224.5':139
  • '69.##0.168.100':139
  • '69.##0.5.109':139
  • '69.##0.23.164':139
  • '69.##0.12.48':139
  • '69.##0.3.225':445
  • '69.##0.180.223':445
  • '69.##0.224.46':445
  • '69.##0.32.143':445
  • '69.##0.152.126':445
  • '69.##0.245.118':445
  • '69.##0.21.26':445
  • '69.##0.203.58':445
  • '69.##0.42.121':445
  • '69.##0.105.144':445
  • '69.##0.94.19':445
  • '69.##0.81.91':445
  • '69.##0.3.127':445
  • '69.##0.52.35':445
  • '69.##0.65.25':445
  • '69.##0.77.107':9988
  • '69.##0.127.156':9988
  • '69.##0.58.157':9988
  • '69.##0.44.241':9988
  • '69.##0.45.98':9988
  • '69.##0.162.224':9988
  • '69.##0.183.144':9988
  • '69.##0.82.206':9988
  • '69.##0.105.123':9988
  • '69.##0.144.134':9988
  • '69.##0.73.56':9988
  • '69.##0.66.121':9988
  • '69.##0.241.63':9988
  • '69.##0.158.236':9988
  • '69.##0.47.159':139
  • '69.##0.55.163':139
  • '69.##0.44.20':139
  • '69.#20.4.90':139
  • '69.##0.195.178':139
  • '69.##0.212.41':139
  • '69.##0.113.221':139
  • '69.##0.126.43':9988
  • '69.##0.192.102':9988
  • '69.##0.243.252':9988
  • '69.##0.71.211':139
  • '69.##0.103.131':139
  • '69.##0.29.91':9988
  • '69.##0.197.180':9988
  • '69.##0.15.126':9988
  • '69.##0.228.77':9988
  • '69.##0.90.237':9988
  • '69.##0.124.5':9988
  • '69.##0.66.112':9988
  • '69.##0.52.171':9988
  • '69.##0.32.51':9988
  • '69.##0.112.81':9988
  • '69.##0.45.42':9988
  • '69.##0.44.84':9988
  • '69.#20.9.45':9988
  • '69.##0.61.36':9988
  • '69.##0.192.14':9988
  • '69.##0.168.14':9988
  • '69.##0.70.33':9988
  • '69.##0.185.50':9988
  • '69.##0.170.22':9988
  • '69.##0.197.52':9988
  • '69.##0.252.249':9988
  • '69.##0.111.80':9988
  • '69.##0.36.38':9988
  • '69.##0.33.116':9988
  • '69.##0.253.250':9988
  • '69.##0.12.161':9988
  • '69.##0.47.191':9988
  • '69.##0.31.247':9988
  • '69.##0.23.45':139
  • '69.##0.68.250':139
  • '69.##0.110.239':139
  • '69.##0.13.63':139
  • '69.##0.59.26':139
  • '69.##0.194.200':139
  • '69.##0.64.157':139
  • '69.##0.141.247':139
  • '69.##0.202.184':139
  • '69.##0.60.131':139
  • '69.##0.143.108':139
  • '69.##0.166.27':139
  • '69.##0.200.125':139
  • '69.##0.136.188':139
  • '69.#20.4.90':445
  • '69.##0.195.178':445
  • '69.##0.212.41':445
  • '69.##0.195.141':445
  • '69.##0.42.171':445
  • '69.##0.222.6':445
  • '69.##0.47.159':445
  • '69.##0.113.221':445
  • '69.##0.103.131':445
  • '69.##0.216.68':139
  • '69.##0.55.163':445
  • '69.##0.44.20':445
  • '69.##0.71.211':445
  • '69.##0.61.27':139
  • '69.##0.26.103':139
  • '69.##0.249.253':139
  • '69.##0.28.32':139
  • '69.##0.110.234':139
  • '69.##0.138.56':139
  • '69.##0.229.75':139
  • '69.##0.195.141':139
  • '69.##0.42.171':139
  • '69.##0.222.6':139
  • '69.##0.250.90':139
  • '69.#20.6.76':139
  • '69.##0.21.73':139
  • '69.#20.65.2':139
  • '69.##0.204.122':139
  • '69.##0.189.178':139
  • '69.##0.21.195':139
  • '69.##0.166.139':139
  • '69.##0.129.98':139
  • '69.##0.187.113':139
  • '69.##0.154.24':139
  • '69.##0.114.130':139
  • '69.##0.130.156':139
  • '69.##0.104.253':139
  • '69.##0.132.196':139
  • '69.##0.226.27':139
  • '69.##0.92.181':139
  • '69.##0.44.241':139
  • '69.##0.144.134':139
  • '69.##0.162.224':139
  • '69.##0.192.102':139
  • '69.##0.73.56':139
  • '69.##0.45.98':139
  • '69.##0.252.249':139
  • '69.##0.243.252':139
  • '69.##0.47.191':139
  • '69.##0.170.22':139
  • '69.##0.82.206':139
  • '69.##0.58.157':139
  • '69.##0.105.123':139
  • '69.##0.168.14':139
  • '69.##0.183.144':139
  • '69.##0.127.156':139
  • '69.##0.158.236':139
  • '69.##0.58.237':445
  • '69.##0.45.23':445
  • '69.#20.20.7':445
  • '69.##0.66.121':139
  • '69.##0.12.161':139
  • '69.##0.70.33':139
  • '69.##0.241.63':139
  • '69.##0.126.43':139
  • '69.##0.77.107':139
  • '69.##0.197.52':139
  • '69.##0.144.46':139
  • '69.##0.29.91':139
  • '69.##0.61.36':139
  • '69.##0.32.51':139
  • '69.#20.9.45':139
  • '69.##0.45.42':139
  • '69.##0.45.23':139
  • '69.##0.58.237':139
  • '69.##0.197.180':139
  • '69.#20.20.7':139
  • '69.##0.63.250':139
  • '69.##0.228.77':139
  • '69.##0.31.247':139
  • '69.##0.44.84':139
  • '69.##0.15.126':139
  • '69.##0.253.250':139
  • '69.##0.90.237':139
  • '69.##0.111.80':139
  • '69.##0.192.14':139
  • '69.##0.36.38':139
  • '69.##0.52.171':139
  • '69.##0.66.112':139
  • '69.##0.112.81':139
  • '69.##0.23.197':139
  • '69.##0.185.50':139
  • '69.##0.33.116':139
  • '69.##0.124.5':139
  • '69.##0.73.56':445
  • '69.##0.243.252':445
  • '69.##0.192.102':445
  • '69.##0.241.63':445
  • '69.##0.77.107':445
  • '69.##0.82.206':445
  • '69.##0.12.161':445
  • '69.##0.111.80':445
  • '69.##0.45.98':445
  • '69.##0.197.52':445
  • '69.##0.70.33':445
  • '69.##0.168.14':445
  • '69.##0.144.134':445
  • '69.##0.126.43':445
  • '69.##0.45.23':9988
  • '69.##0.23.197':9988
  • '69.#20.20.7':9988
  • '69.##0.63.250':9988
  • '69.##0.144.46':9988
  • '69.##0.58.237':9988
  • '69.##0.162.224':445
  • '69.##0.158.236':445
  • '69.##0.127.156':445
  • '69.##0.44.241':445
  • '69.##0.66.121':445
  • '69.##0.58.157':445
  • '69.##0.183.144':445
  • '69.#20.9.45':445
  • '69.##0.61.36':445
  • '69.##0.112.81':445
  • '69.##0.66.112':445
  • '69.##0.31.247':445
  • '69.##0.32.51':445
  • '69.##0.63.250':445
  • '69.##0.197.180':445
  • '69.##0.45.42':445
  • '69.##0.29.91':445
  • '69.##0.228.77':445
  • '69.##0.144.46':445
  • '69.##0.23.197':445
  • '69.##0.44.84':445
  • '69.##0.47.191':445
  • '69.##0.192.14':445
  • '69.##0.36.38':445
  • '69.##0.252.249':445
  • '69.##0.105.123':445
  • '69.##0.170.22':445
  • '69.##0.90.237':445
  • '69.##0.33.116':445
  • '69.##0.124.5':445
  • '69.##0.52.171':445
  • '69.##0.185.50':445
  • '69.##0.253.250':445
  • '69.##0.15.126':445
  • '69.##0.21.73':445
  • '69.##0.10.162':139
  • '69.##0.98.172':139
  • '69.##0.202.145':139
  • '69.##0.104.218':139
  • '69.##0.170.248':139
  • '69.##0.249.75':139
  • '69.##0.27.173':139
  • '69.##0.14.150':445
  • '69.##0.217.54':445
  • '69.##0.41.54':445
  • '69.##0.61.195':139
  • '69.##0.195.38':445
  • '69.##0.108.26':445
  • '69.##0.112.70':139
  • '69.##0.4.152':139
  • '69.##0.16.70':139
  • '69.#20.7.88':139
  • '69.##0.132.16':139
  • '69.##0.124.198':139
  • '69.##0.110.85':139
  • '69.##0.10.131':139
  • '69.##0.228.131':139
  • '69.##0.103.167':139
  • '69.##0.167.111':139
  • '69.##0.141.112':139
  • '69.##0.0.168':139
  • '69.##0.89.27':139
  • '69.##0.183.17':445
  • '69.##0.18.29':445
  • '69.##0.104.55':445
  • '69.#20.31.5':445
  • '69.##0.230.169':445
  • '69.##0.227.116':445
  • '69.##0.229.220':445
  • '69.##0.176.90':445
  • '69.##0.197.8':445
  • '69.##0.29.49':445
  • '69.##0.220.200':445
  • '69.##0.96.216':445
  • '69.##0.101.4':445
  • '69.##0.40.238':445
  • '69.##0.106.88':445
  • '69.##0.168.75':445
  • '69.##0.239.92':445
  • '69.#20.54.4':445
  • '69.##0.3.216':445
  • '69.##0.164.86':445
  • '69.##0.101.139':445
  • '69.#20.1.66':445
  • '69.##0.162.77':445
  • '69.##0.20.81':445
  • '69.##0.122.59':445
  • '69.##0.88.15':445
  • '69.##0.129.135':445
  • '69.##0.104.218':445
  • '69.##0.170.248':445
  • '69.##0.249.75':445
  • '69.##0.103.167':445
  • '69.##0.167.111':445
  • '69.##0.112.70':445
  • '69.##0.10.162':445
  • '69.##0.61.195':445
  • '69.##0.80.224':139
  • '69.##0.152.169':139
  • '69.##0.98.172':445
  • '69.##0.202.145':445
  • '69.##0.27.173':445
  • '69.##0.228.131':445
  • '69.##0.132.16':445
  • '69.##0.124.198':445
  • '69.##0.110.85':445
  • '69.##0.155.182':445
  • '69.##0.254.143':445
  • '69.##0.119.170':445
  • '69.##0.4.152':445
  • '69.##0.0.168':445
  • '69.##0.141.112':445
  • '69.##0.89.27':445
  • '69.##0.16.70':445
  • '69.#20.7.88':445
  • '69.##0.10.131':445
  • '69.##0.53.246':139
  • '69.##0.245.125':139
  • '69.##0.50.178':139
  • '69.##0.80.78':139
  • '69.##0.88.32':139
  • '69.##0.115.54':139
  • '69.##0.204.113':139
  • '69.##0.155.182':139
  • '69.##0.254.143':139
  • '69.##0.119.170':139
  • '69.#20.24.0':139
  • '69.##0.223.7':139
  • '69.##0.65.25':139
  • '69.##0.14.103':139
  • '69.#20.73.5':139
  • '69.##0.3.201':139
  • '69.##0.245.101':139
  • '69.##0.249.82':139
  • '69.##0.21.126':139
  • '69.##0.237.231':139
  • '69.#20.50.6':139
  • '69.##0.71.194':139
  • '69.##0.147.134':139
  • '69.##0.112.176':139
  • '69.##0.140.69':139
  • '69.##0.28.77':139
  • '69.##0.197.124':139
  • '69.##0.136.188':445
  • '69.##0.13.63':445
  • '69.##0.59.26':445
  • '69.##0.11.12':139
  • '69.##0.11.217':139
  • '69.##0.216.68':445
  • '69.##0.194.200':445
  • '69.##0.64.157':445
  • '69.##0.143.108':445
  • '69.##0.166.27':445
  • '69.##0.23.45':445
  • '69.##0.68.250':445
  • '69.##0.110.239':445
  • '69.##0.59.11':139
  • '69.##0.173.132':139
  • '69.##0.17.253':139
  • '69.##0.145.39':139
  • '69.##0.137.168':139
  • '69.##0.154.253':139
  • '69.##0.118.173':139
  • '69.##0.98.220':139
  • '69.##0.235.209':139
  • '69.##0.143.10':139
  • '69.##0.86.197':139
  • '69.#20.10.7':139
  • '69.##0.179.205':139
  • '69.##0.128.45':139
  • '69.#20.65.2':445
  • '69.##0.28.32':445
  • '69.##0.110.234':445
  • '69.##0.114.130':445
  • '69.##0.130.156':445
  • '69.##0.104.253':445
  • '69.##0.138.56':445
  • '69.##0.229.75':445
  • '69.##0.250.90':445
  • '69.#20.6.76':445
  • '69.##0.61.27':445
  • '69.##0.26.103':445
  • '69.##0.249.253':445
  • '69.##0.92.181':445
  • '69.##0.60.131':445
  • '69.##0.166.139':445
  • '69.##0.129.98':445
  • '69.##0.200.125':445
  • '69.##0.141.247':445
  • '69.##0.202.184':445
  • '69.##0.187.113':445
  • '69.##0.154.24':445
  • '69.##0.132.196':445
  • '69.##0.226.27':445
  • '69.##0.204.122':445
  • '69.##0.189.178':445
  • '69.##0.21.195':445
  • '69.##0.11.12':445
  • '69.##0.11.217':445
  • '69.##0.195.38':139
  • '69.##0.143.10':445
  • '69.##0.86.197':445
  • '69.##0.59.11':445
  • '69.##0.108.26':139
  • '69.#20.54.4':139
  • '69.##0.3.216':139
  • '69.##0.164.86':139
  • '69.##0.14.150':139
  • '69.##0.217.54':139
  • '69.##0.41.54':139
  • '69.##0.235.209':445
  • '69.##0.137.168':445
  • '69.##0.154.253':445
  • '69.##0.118.173':445
  • '69.##0.107.224':445
  • '69.##0.15.112':445
  • '69.##0.234.111':445
  • '69.##0.173.132':445
  • '69.#20.10.7':445
  • '69.##0.179.205':445
  • '69.##0.128.45':445
  • '69.##0.17.253':445
  • '69.##0.145.39':445
  • '69.##0.98.220':445
  • '69.##0.229.220':139
  • '69.##0.220.200':139
  • '69.##0.96.216':139
  • '69.##0.183.17':139
  • '69.##0.18.29':139
  • '69.##0.104.55':139
  • '69.##0.101.4':139
  • '69.##0.107.224':139
  • '69.##0.15.112':139
  • '69.##0.234.111':139
  • '69.##0.176.90':139
  • '69.##0.197.8':139
  • '69.##0.29.49':139
  • '69.##0.227.116':139
  • '69.##0.101.139':139
  • '69.##0.122.59':139
  • '69.##0.88.15':139
  • '69.##0.106.88':139
  • '69.##0.168.75':139
  • '69.##0.239.92':139
  • '69.##0.129.135':139
  • '69.##0.40.238':139
  • '69.#20.31.5':139
  • '69.##0.230.169':139
  • '69.#20.1.66':139
  • '69.##0.162.77':139
  • '69.##0.20.81':139
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android