マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Trojan.DownLoader11.17807

Added to the Dr.Web virus database: 2014-06-20

Virus description added:

Technical Information

To ensure autorun and distribution:
Creates or modifies the following files:
  • %WINDIR%\Tasks\SA.DAT
Malicious functions:
Executes the following:
  • '<SYSTEM32>\svchost.exe' -k netsvcs
  • '<SYSTEM32>\dumprep.exe' 1124 -dm 7 7 %TEMP%\WERdb5e.dir00\svchost.exe.mdmp 16325836412029188
Modifies file system :
Creates the following files:
  • %WINDIR%\Help\Tours\htmlTour\cxjclkkc.exe
  • %WINDIR%\Help\Tours\htmlTour\nleqhveh.exe
  • %WINDIR%\Help\Tours\htmlTour\lhhjrkjk.exe
  • %WINDIR%\Help\Tours\htmlTour\wwvjntek.exe
  • %WINDIR%\Help\Tours\htmlTour\kxkzvszq.exe
  • %WINDIR%\Help\Tours\htmlTour\klbvejnk.exe
  • %WINDIR%\Help\Tours\htmlTour\kzerbzks.exe
  • %WINDIR%\Help\Tours\htmlTour\hjhecvkh.exe
  • %WINDIR%\Help\jbnshhqj.exe
  • %WINDIR%\Help\bzehxvnz.exe
  • %TEMP%\WERdb5e.dir00\svchost.exe.mdmp
  • %PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
  • %WINDIR%\Help\tsbjbtvn.exe
  • %WINDIR%\Help\Tours\htmlTour\qejnhetj.exe
  • %WINDIR%\Help\hwexrtne.exe
  • %WINDIR%\Help\jjlenkbt.exe
Network activity:
Connects to:
  • '89.##0.96.75':445
  • '89.##0.237.102':445
  • '89.##0.36.67':445
  • '89.##0.10.98':445
  • '89.##0.97.149':445
  • '89.##0.219.50':445
  • '89.##0.233.41':445
  • '89.##0.184.229':445
  • '89.##0.70.114':445
  • '89.##0.78.244':445
  • '89.##0.227.166':445
  • '89.##0.225.9':445
  • '89.##0.110.91':445
  • '89.##0.11.201':445
  • '89.##0.40.239':445
  • '89.#40.3.96':445
  • '89.##0.68.20':445
  • '89.##0.246.196':445
  • '89.##0.13.41':445
  • '89.##0.33.146':445
  • '89.##0.40.30':445
  • '89.##0.2.194':445
  • '89.##0.242.39':445
  • '89.##0.52.220':139
  • '89.##0.104.236':139
  • '89.##0.52.220':445
  • '89.##0.74.106':139
  • '89.##0.26.221':139
  • '89.##0.36.168':139
  • '89.##0.49.22':139
  • '89.##0.40.239':139
  • '89.##0.68.20':139
  • '89.##0.245.29':139
  • '89.#40.3.96':139
  • '89.##0.88.46':139
  • '89.##0.65.32':445
  • '89.##0.207.95':445
  • '89.#40.8.65':445
  • '89.##0.101.126':445
  • '89.##0.99.121':445
  • '89.##0.208.205':445
  • '89.##0.190.160':139
  • '89.##0.52.100':139
  • '89.##0.80.189':139
  • '89.##0.19.251':445
  • '89.##0.161.132':139
  • '89.##0.15.24':445
  • '89.##0.101.60':445
  • '89.##0.61.134':445
  • '89.##0.229.55':139
  • '89.##0.225.111':139
  • '89.##0.60.48':445
  • '89.##0.181.96':445
  • '89.##0.251.98':445
  • '89.##0.110.232':445
  • '89.##0.165.13':445
  • '89.##0.233.175':445
  • '89.##0.109.210':139
  • '89.##0.252.37':139
  • '89.##0.246.8':139
  • '89.##0.102.91':139
  • '89.##0.74.87':139
  • '89.##0.207.119':139
  • '89.##0.37.40':139
  • '89.##0.114.83':139
  • '89.##0.8.239':139
  • '89.##0.47.82':139
  • '89.##0.85.163':139
  • '89.##0.57.177':139
  • '89.##0.107.162':139
  • '89.##0.161.132':445
  • '89.##0.139.186':139
  • '89.##0.181.96':139
  • '89.##0.226.204':139
  • '89.##0.80.189':445
  • '89.##0.104.236':445
  • '89.##0.36.168':445
  • '89.##0.74.106':445
  • '89.##0.52.100':445
  • '89.##0.88.46':445
  • '89.##0.251.98':139
  • '89.##0.61.134':139
  • '89.##0.10.156':139
  • '89.##0.236.228':139
  • '89.##0.139.186':445
  • '89.##0.107.162':445
  • '89.##0.15.24':139
  • '89.##0.233.175':139
  • '89.##0.110.232':139
  • '89.##0.165.13':139
  • '89.##0.101.60':139
  • '89.##0.60.48':139
  • '89.##0.134.182':445
  • '89.##0.230.91':445
  • '89.##0.125.33':445
  • '89.##0.233.105':445
  • '89.##0.232.186':445
  • '89.##0.82.199':445
  • '89.##0.216.198':445
  • '89.##0.195.183':445
  • '89.##0.215.216':445
  • '89.#40.3.22':445
  • '89.##0.229.7':445
  • '89.##0.116.51':445
  • '89.##0.144.115':445
  • '89.##0.68.46':445
  • '89.##0.143.108':445
  • '89.##0.145.101':445
  • '89.##0.209.100':445
  • '89.##0.70.76':445
  • '89.##0.219.37':445
  • '89.##0.10.199':445
  • '89.##0.207.219':445
  • '89.##0.87.98':445
  • '89.##0.207.227':445
  • '89.##0.152.117':445
  • '89.##0.144.131':445
  • '89.##0.99.243':445
  • '89.##0.245.101':445
  • '89.##0.20.100':445
  • '89.##0.85.41':445
  • '89.##0.134.93':139
  • '89.##0.211.69':139
  • '89.##0.6.238':139
  • '89.##0.64.198':139
  • '89.##0.138.180':139
  • '89.##0.156.44':445
  • '89.##0.105.139':445
  • '89.##0.158.238':445
  • '89.##0.90.213':445
  • '89.##0.44.194':445
  • '89.##0.123.51':445
  • '89.##0.238.141':445
  • '89.##0.207.149':445
  • '89.##0.45.201':445
  • '89.##0.255.105':445
  • '89.##0.101.236':445
  • '89.##0.205.45':445
  • '89.##0.219.50':139
  • '89.##0.78.244':139
  • '89.##0.237.102':139
  • '89.##0.36.67':139
  • '89.##0.96.75':139
  • '89.##0.227.166':139
  • '89.##0.101.126':139
  • '89.##0.99.121':139
  • '89.##0.184.229':139
  • '89.##0.70.114':139
  • '89.##0.233.41':139
  • '89.##0.97.149':139
  • '89.##0.246.196':139
  • '89.##0.2.194':139
  • '89.##0.11.201':139
  • '89.##0.86.229':139
  • '89.##0.110.91':139
  • '89.##0.242.39':139
  • '89.##0.225.9':139
  • '89.##0.10.98':139
  • '89.##0.33.146':139
  • '89.##0.40.30':139
  • '89.##0.13.41':139
  • '89.##0.188.31':139
  • '89.##0.24.156':139
  • '89.##0.8.243':139
  • '89.##0.94.250':445
  • '89.##0.122.9':139
  • '89.##0.94.250':139
  • '89.##0.134.93':445
  • '89.##0.211.69':445
  • '89.##0.6.238':445
  • '89.##0.64.198':445
  • '89.##0.138.180':445
  • '89.##0.24.156':445
  • '89.##0.19.207':445
  • '89.##0.207.95':139
  • '89.##0.95.99':139
  • '89.#40.8.65':139
  • '89.##0.65.32':139
  • '89.##0.208.205':139
  • '89.##0.8.243':445
  • '89.##0.188.31':445
  • '89.##0.122.9':445
  • '89.##0.19.251':139
  • '89.##0.243.98':139
  • '89.##0.178.105':139
  • '89.##0.105.116':139
  • '89.##0.149.103':139
  • '89.##0.192.54':139
  • '89.##0.92.99':139
  • '89.##0.71.123':139
  • '89.##0.40.113':139
  • '89.##0.179.12':139
  • '89.##0.248.39':139
  • '89.##0.122.186':139
  • '89.##0.186.247':139
  • '89.##0.90.37':139
  • '89.##0.28.195':445
  • '89.##0.152.1':445
  • '89.##0.121.213':445
  • '89.##0.36.90':445
  • '89.##0.84.123':445
  • '89.##0.76.84':445
  • '89.##0.193.93':139
  • '89.##0.135.189':139
  • '89.##0.52.210':445
  • '89.##0.31.12':445
  • '89.##0.112.87':445
  • '89.##0.152.1':139
  • '89.##0.76.84':139
  • '89.##0.28.195':139
  • '89.##0.84.123':139
  • '89.##0.121.213':139
  • '89.##0.31.12':139
  • '89.##0.200.48':445
  • '89.##0.101.250':445
  • '89.##0.210.174':445
  • '89.##0.112.87':139
  • '89.##0.52.210':139
  • '89.##0.36.90':139
  • '89.##0.25.211':139
  • '89.##0.197.111':139
  • '89.##0.49.26':139
  • '89.##0.167.117':139
  • '89.##0.67.178':139
  • '89.##0.156.55':139
  • '89.##0.185.218':139
  • '89.##0.93.144':139
  • '89.##0.112.115':139
  • '89.##0.34.175':139
  • '89.##0.40.112':139
  • '89.##0.109.172':139
  • '89.##0.59.239':139
  • '89.##0.97.61':139
  • '89.#40.8.20':139
  • '89.#40.7.67':139
  • '89.##0.101.33':139
  • '89.##0.118.1':139
  • '89.##0.116.15':139
  • '89.##0.16.237':139
  • '89.##0.10.104':445
  • '89.##0.10.104':139
  • '89.##0.68.21':139
  • '89.##0.212.66':445
  • '89.##0.66.112':139
  • '89.##0.105.217':139
  • '89.##0.185.207':139
  • '89.##0.207.231':445
  • '89.##0.112.68':139
  • '89.##0.104.95':139
  • '89.##0.95.48':139
  • '89.##0.28.105':139
  • '89.##0.226.252':139
  • '89.##0.95.134':139
  • '89.##0.49.26':445
  • '89.##0.197.111':445
  • '89.##0.67.178':445
  • '89.##0.179.12':445
  • '89.##0.167.117':445
  • '89.##0.156.55':445
  • '89.##0.185.218':445
  • '89.##0.93.144':445
  • '89.##0.112.115':445
  • '89.##0.34.175':445
  • '89.##0.40.112':445
  • '89.##0.40.113':445
  • '89.##0.192.54':445
  • '89.##0.92.99':445
  • '89.##0.90.37':445
  • '89.##0.193.93':445
  • '89.##0.135.189':445
  • '89.##0.149.103':445
  • '89.##0.122.186':445
  • '89.##0.248.39':445
  • '89.##0.186.247':445
  • '89.##0.105.116':445
  • '89.##0.71.123':445
  • '89.##0.114.83':445
  • '89.##0.8.239':445
  • '89.##0.47.82':445
  • '89.##0.246.8':445
  • '89.##0.85.163':445
  • '89.##0.109.210':445
  • '89.##0.166.142':139
  • '89.##0.78.140':139
  • '89.##0.61.132':139
  • '89.##0.229.55':445
  • '89.##0.225.111':445
  • '89.##0.102.91':445
  • '89.##0.76.241':445
  • '89.##0.143.231':445
  • '89.##0.110.170':445
  • '89.##0.113.77':445
  • '89.##0.46.244':445
  • '89.##0.14.70':445
  • '89.##0.74.87':445
  • '89.##0.207.119':445
  • '89.##0.35.58':445
  • '89.##0.33.36':445
  • '89.##0.116.35':445
  • '89.##0.110.170':139
  • '89.##0.76.241':139
  • '89.##0.46.244':139
  • '89.##0.20.12':139
  • '89.##0.113.77':139
  • '89.##0.143.231':139
  • '89.##0.116.35':139
  • '89.##0.35.58':139
  • '89.##0.33.36':139
  • '89.##0.9.187':139
  • '89.##0.14.70':139
  • '89.##0.25.239':139
  • '89.##0.179.253':139
  • '89.##0.132.65':139
  • '89.##0.37.170':139
  • '89.##0.49.247':139
  • '89.##0.0.158':139
  • '89.##0.25.175':139
  • '89.##0.205.207':139
  • '89.##0.159.158':139
  • '89.##0.203.161':139
  • '89.##0.99.87':139
  • '89.##0.224.70':139
  • '89.##0.200.48':139
  • '89.##0.101.250':139
  • '89.##0.210.174':139
  • '89.##0.118.109':445
  • '89.##0.110.104':445
  • '89.##0.250.148':139
  • '89.##0.138.198':139
  • '89.##0.107.225':139
  • '89.##0.145.89':139
  • '89.##0.148.184':139
  • '89.##0.108.7':139
  • '89.##0.57.161':445
  • '89.##0.145.89':445
  • '89.##0.138.198':445
  • '89.##0.108.7':445
  • '89.##0.250.148':445
  • '89.##0.148.184':445
  • '89.##0.107.225':445
  • '89.##0.246.80':445
  • '89.##0.52.67':445
  • '89.##0.192.124':445
  • '89.##0.149.132':445
  • '89.##0.171.151':445
  • '89.##0.25.175':445
  • '89.##0.99.87':445
  • '89.##0.132.65':445
  • '89.##0.0.158':445
  • '89.##0.37.170':445
  • '89.##0.224.70':445
  • '89.##0.25.239':445
  • '89.##0.20.12':445
  • '89.##0.159.158':445
  • '89.##0.203.161':445
  • '89.##0.205.207':445
  • '89.##0.49.247':445
  • '89.##0.246.80':139
  • '89.##0.52.67':139
  • '89.##0.192.124':139
  • '89.##0.149.132':139
  • '89.##0.171.151':139
  • '89.##0.57.161':139
  • '89.##0.166.142':445
  • '89.##0.78.140':445
  • '89.##0.61.132':445
  • '89.##0.118.109':139
  • '89.##0.110.104':139
  • '89.##0.145.101':139
  • '89.##0.35.165':445
  • '89.##0.88.172':445
  • '89.##0.28.225':445
  • '89.##0.69.162':139
  • '89.##0.81.248':139
  • '89.##0.13.148':445
  • '89.##0.88.172':139
  • '89.##0.13.148':139
  • '89.##0.35.165':139
  • '89.##0.147.165':445
  • '89.##0.28.225':139
  • '89.##0.156.31':139
  • '89.##0.29.151':139
  • '89.##0.251.145':139
  • '89.##0.47.35':139
  • '89.##0.141.81':139
  • '89.#40.5.30':139
  • '89.##0.210.51':139
  • '89.##0.86.225':139
  • '89.##0.224.155':139
  • '89.##0.39.87':139
  • '89.##0.100.234':139
  • '89.##0.24.39':139
  • '89.##0.97.86':445
  • '89.##0.140.4':445
  • '89.##0.214.103':445
  • '89.##0.16.185':9988
  • '89.##0.91.19':445
  • '89.##0.0.179':445
  • '89.##0.217.218':445
  • '89.##0.86.175':445
  • '89.##0.136.60':445
  • '89.##0.13.170':445
  • '89.##0.81.19':445
  • '89.##0.27.210':9988
  • '89.##0.12.137':9988
  • '89.##0.71.201':9988
  • '89.##0.207.215':9988
  • '89.##0.147.165':139
  • '89.##0.223.110':9988
  • '89.##0.188.210':9988
  • '89.##0.173.222':9988
  • '89.##0.225.129':9988
  • '89.##0.230.90':9988
  • '89.##0.215.125':9988
  • '89.##0.15.104':9988
  • '89.##0.216.191':139
  • '89.##0.19.18':139
  • '89.##0.144.216':139
  • '89.##0.69.162':445
  • '89.##0.81.248':445
  • '89.##0.59.40':139
  • '89.##0.115.235':139
  • '89.##0.42.54':139
  • '89.##0.138.194':139
  • '89.##0.138.221':139
  • '89.##0.213.61':139
  • '89.##0.156.31':445
  • '89.##0.29.151':445
  • '89.##0.251.145':445
  • '89.##0.47.35':445
  • '89.##0.141.81':445
  • '89.#40.5.30':445
  • '89.##0.210.51':445
  • '89.##0.86.225':445
  • '89.##0.224.155':445
  • '89.##0.39.87':445
  • '89.##0.100.234':445
  • '89.##0.24.39':445
  • '89.##0.6.183':139
  • '89.##0.62.151':139
  • '89.##0.10.106':139
  • '89.##0.118.222':139
  • '89.##0.186.73':139
  • '89.##0.206.241':139
  • '89.##0.27.89':139
  • '89.##0.197.134':139
  • '89.##0.250.173':139
  • '89.##0.213.206':139
  • '89.##0.20.144':139
  • '89.##0.93.124':139
  • '89.##0.72.101':139
  • '89.##0.65.210':139
  • '89.##0.106.125':139
  • '89.##0.54.22':139
  • '89.##0.71.81':139
  • '89.##0.28.227':139
  • '89.##0.214.89':139
  • '89.##0.90.93':139
  • '89.##0.98.214':139
  • '89.##0.75.129':139
  • '89.##0.207.60':139
  • '89.##0.116.176':139
  • '89.##0.64.162':139
  • '89.##0.165.58':139
  • '89.##0.50.207':139
  • '89.##0.159.207':139
  • '89.##0.154.123':139
  • '89.##0.142.178':139
  • '89.##0.118.163':139
  • '89.##0.59.176':139
  • '89.##0.187.75':139
  • '89.##0.27.210':139
  • '89.##0.12.137':139
  • '89.##0.136.60':139
  • '89.##0.217.218':139
  • '89.##0.86.175':139
  • '89.##0.91.19':139
  • '89.##0.140.4':139
  • '89.##0.121.240':139
  • '89.##0.207.215':139
  • '89.##0.110.130':139
  • '89.##0.26.193':139
  • '89.##0.70.148':139
  • '89.##0.29.28':139
  • '89.##0.194.252':139
  • '89.##0.243.46':139
  • '89.##0.230.90':139
  • '89.##0.227.59':139
  • '89.##0.251.71':139
  • '89.##0.173.222':139
  • '89.##0.223.110':139
  • '89.##0.225.129':139
  • '89.##0.15.104':139
  • '89.##0.19.40':139
  • '89.##0.71.201':139
  • '89.##0.133.129':139
  • '89.##0.122.48':139
  • '89.##0.219.38':139
  • '89.##0.215.125':139
  • '89.##0.136.130':139
  • '89.##0.161.93':139
  • '89.##0.146.0':139
  • '89.##0.182.24':139
  • '89.#40.0.3':139
  • '89.##0.16.185':139
  • '89.##0.188.210':139
  • '89.##0.93.159':139
  • '89.##0.59.176':445
  • '89.##0.136.130':445
  • '89.##0.187.75':445
  • '89.##0.27.210':445
  • '89.##0.154.123':445
  • '89.##0.142.178':445
  • '89.##0.219.38':445
  • '89.##0.215.125':445
  • '89.##0.122.48':445
  • '89.##0.118.163':445
  • '89.##0.161.93':445
  • '89.##0.64.162':445
  • '89.##0.26.193':445
  • '89.##0.29.28':445
  • '89.##0.207.215':445
  • '89.##0.121.240':445
  • '89.##0.70.148':445
  • '89.##0.12.137':445
  • '89.##0.159.207':445
  • '89.##0.116.176':445
  • '89.##0.165.58':445
  • '89.##0.110.130':445
  • '89.##0.50.207':445
  • '89.##0.71.201':445
  • '89.##0.223.110':445
  • '89.##0.15.104':445
  • '89.##0.243.46':445
  • '89.##0.173.222':445
  • '89.##0.225.129':445
  • '89.##0.97.86':139
  • '89.##0.214.103':139
  • '89.##0.0.179':139
  • '89.##0.81.19':139
  • '89.##0.13.170':139
  • '89.##0.194.252':445
  • '89.##0.182.24':445
  • '89.##0.16.185':445
  • '89.##0.146.0':445
  • '89.##0.188.210':445
  • '89.##0.93.159':445
  • '89.#40.0.3':445
  • '89.##0.230.90':445
  • '89.##0.19.40':445
  • '89.##0.227.59':445
  • '89.##0.251.71':445
  • '89.##0.133.129':445
  • '89.##0.98.160':445
  • '89.##0.160.94':445
  • '89.##0.29.32':445
  • '89.##0.38.94':445
  • '89.##0.139.212':445
  • '89.##0.14.169':445
  • '89.##0.31.45':445
  • '89.##0.70.193':445
  • '89.##0.31.31':445
  • '89.##0.36.23':445
  • '89.##0.11.128':445
  • '89.##0.37.28':445
  • '89.##0.102.38':139
  • '89.#40.67.9':445
  • '89.##0.38.25':139
  • '89.##0.254.35':139
  • '89.##0.196.212':139
  • '89.##0.9.125':445
  • '89.##0.57.53':445
  • '89.##0.53.37':445
  • '89.##0.199.225':445
  • '89.##0.124.135':445
  • '89.##0.134.217':445
  • '89.##0.57.167':445
  • '89.##0.46.174':445
  • '89.##0.164.14':445
  • '89.##0.77.16':445
  • '89.##0.198.153':445
  • '89.##0.68.103':445
  • '89.##0.84.122':445
  • '89.##0.84.35':445
  • '89.##0.205.202':445
  • '89.##0.149.26':445
  • '89.#40.88.8':445
  • '89.##0.161.188':445
  • '89.##0.25.134':445
  • '89.##0.175.12':445
  • '89.##0.178.253':445
  • '89.##0.157.30':445
  • '89.##0.58.76':445
  • '89.##0.53.177':445
  • '89.##0.123.18':445
  • '89.##0.4.162':445
  • '89.##0.254.8':445
  • '89.##0.177.243':445
  • '89.##0.27.133':445
  • '89.##0.230.91':139
  • '89.##0.82.199':139
  • '89.##0.134.182':139
  • '89.##0.232.186':139
  • '89.##0.125.33':139
  • '89.#40.3.22':139
  • '89.##0.195.183':139
  • '89.##0.44.194':139
  • '89.##0.216.198':139
  • '89.##0.229.7':139
  • '89.##0.215.216':139
  • '89.##0.233.105':139
  • '89.##0.68.46':139
  • '89.##0.70.76':139
  • '89.##0.144.115':139
  • '89.##0.209.100':139
  • '89.##0.143.108':139
  • '89.##0.87.98':139
  • '89.##0.10.199':139
  • '89.##0.116.51':139
  • '89.##0.219.37':139
  • '89.##0.207.227':139
  • '89.##0.207.219':139
  • '89.##0.144.131':139
  • '89.##0.85.41':139
  • '89.##0.152.117':139
  • '89.##0.20.100':139
  • '89.##0.99.243':139
  • '89.##0.180.237':445
  • '89.##0.102.38':445
  • '89.##0.180.237':139
  • '89.##0.38.25':445
  • '89.##0.254.35':445
  • '89.##0.196.212':445
  • '89.##0.245.101':139
  • '89.##0.158.238':139
  • '89.##0.238.141':139
  • '89.##0.105.139':139
  • '89.##0.123.51':139
  • '89.##0.90.213':139
  • '89.##0.101.236':139
  • '89.##0.45.201':139
  • '89.##0.156.44':139
  • '89.##0.207.149':139
  • '89.##0.205.45':139
  • '89.##0.255.105':139
  • '89.##0.216.191':445
  • '89.##0.19.18':445
  • '89.##0.144.216':445
  • '89.##0.33.205':139
  • '89.##0.148.195':139
  • '89.##0.59.40':445
  • '89.##0.115.235':445
  • '89.##0.42.54':445
  • '89.##0.138.194':445
  • '89.##0.138.221':445
  • '89.##0.213.61':445
  • '89.##0.68.34':139
  • '89.##0.76.171':139
  • '89.##0.37.178':445
  • '89.##0.29.39':139
  • '89.##0.98.119':139
  • '89.##0.206.33':139
  • '89.##0.32.81':445
  • '89.##0.37.178':139
  • '89.##0.32.81':139
  • '89.##0.148.195':445
  • '89.##0.68.34':445
  • '89.##0.33.205':445
  • '89.##0.6.183':445
  • '89.##0.62.151':445
  • '89.##0.10.106':445
  • '89.##0.118.222':445
  • '89.##0.186.73':445
  • '89.##0.206.241':445
  • '89.##0.27.89':445
  • '89.##0.197.134':445
  • '89.##0.250.173':445
  • '89.##0.213.206':445
  • '89.##0.20.144':445
  • '89.##0.93.124':445
  • '89.##0.72.101':445
  • '89.##0.65.210':445
  • '89.##0.106.125':445
  • '89.##0.54.22':445
  • '89.##0.71.81':445
  • '89.##0.28.227':445
  • '89.##0.214.89':445
  • '89.##0.90.93':445
  • '89.##0.98.214':445
  • '89.##0.75.129':445
  • '89.##0.207.60':445
  • '89.##0.98.160':139
  • '89.##0.160.94':139
  • '89.##0.29.32':139
  • '89.##0.38.94':139
  • '89.##0.139.212':139
  • '89.##0.14.169':139
  • '89.##0.31.45':139
  • '89.##0.70.193':139
  • '89.##0.31.31':139
  • '89.##0.36.23':139
  • '89.##0.11.128':139
  • '89.##0.37.28':139
  • '89.##0.76.171':445
  • '89.#40.67.9':139
  • '89.##0.29.39':445
  • '89.##0.98.119':445
  • '89.##0.206.33':445
  • '89.##0.9.125':139
  • '89.##0.57.53':139
  • '89.##0.53.37':139
  • '89.##0.199.225':139
  • '89.##0.124.135':139
  • '89.##0.134.217':139
  • '89.##0.57.167':139
  • '89.##0.46.174':139
  • '89.##0.164.14':139
  • '89.##0.77.16':139
  • '89.##0.198.153':139
  • '89.##0.68.103':139
  • '89.##0.84.122':139
  • '89.##0.84.35':139
  • '89.##0.205.202':139
  • '89.##0.149.26':139
  • '89.#40.88.8':139
  • '89.##0.161.188':139
  • '89.##0.25.134':139
  • '89.##0.175.12':139
  • '89.##0.178.253':139
  • '89.##0.157.30':139
  • '89.##0.58.76':139
  • '89.##0.53.177':139
  • '89.##0.123.18':139
  • '89.##0.4.162':139
  • '89.##0.254.8':139
  • '89.##0.177.243':139
  • '89.##0.27.133':139

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android