Поддержка
Круглосуточная поддержка

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.DownLoader6.7757

Добавлен в вирусную базу Dr.Web: 2012-05-13

Описание добавлено:

Техническая информация

Для обеспечения автозапуска и распространения:
Создает следующие сервисы:
  • [<HKLM>\SYSTEM\ControlSet001\Services\Tcpz-x86] 'Start' = '00000002'
  • [<HKLM>\SYSTEM\ControlSet001\Services\winmgmt] 'Start' = '00000002'
  • [<HKLM>\SYSTEM\ControlSet001\Services\WaooSvc] 'Start' = '00000002'
Вредоносные функции:
Создает и запускает на исполнение:
  • <SYSTEM32>\lib32waoo.exe
Запускает на исполнение:
  • <SYSTEM32>\dumprep.exe 1152 -dm 7 7 %TEMP%\WERe38f.dir00\svchost.exe.mdmp 16325836412028004
  • <SYSTEM32>\ping.exe -n 2 127.0.0.1
Внедряет код в
следующие системные процессы:
  • <SYSTEM32>\svchost.exe
Изменения в файловой системе:
Создает следующие файлы:
  • \Device\LanmanRedirector\9.255.240.29*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.28*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.30*\MAILSLOT\NET\NETLOGON
  • %TEMP%\WERe38f.dir00\svchost.exe.mdmp
  • \Device\LanmanRedirector\9.255.240.31*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.27*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.23*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.22*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.24*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.26*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.25*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.40*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.38*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.41*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.43*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.42*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.37*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.33*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.32*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.34*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.35*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.36*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.7*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.6*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.8*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.10*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.9*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.5*\MAILSLOT\NET\NETLOGON
  • C:\Tcpz-x86.sys
  • <SYSTEM32>\lib32waoo.exe
  • \Device\LanmanRedirector\9.255.240.2*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.3*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.4*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.18*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.17*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.19*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.21*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.20*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.16*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.12*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.11*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.13*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.15*\MAILSLOT\NET\NETLOGON
  • \Device\LanmanRedirector\9.255.240.14*\MAILSLOT\NET\NETLOGON
Удаляет следующие файлы:
  • C:\Tcpz-x86.sys
Самоудаляется.
Сетевая активность:
Подключается к:
  • '9.###.242.117':135
  • '9.###.242.118':135
  • '9.###.242.116':135
  • '9.###.242.119':135
  • '9.###.242.122':135
  • '9.###.242.121':135
  • '9.###.242.120':135
  • '9.###.242.115':135
  • '9.###.242.110':135
  • '9.###.242.109':135
  • '9.###.242.108':135
  • '9.###.242.111':135
  • '9.###.242.114':135
  • '9.###.242.113':135
  • '9.###.242.112':135
  • '9.###.242.134':135
  • '9.###.242.132':135
  • '9.###.242.130':135
  • '9.###.242.140':135
  • '9.###.242.138':135
  • '9.###.242.136':135
  • '9.###.242.131':135
  • '9.###.242.127':135
  • '9.###.242.124':135
  • '9.###.242.123':135
  • '9.##5.240.7':445
  • '9.###.242.125':135
  • '9.###.242.129':135
  • '9.###.242.126':135
  • '9.###.242.128':135
  • '9.##5.240.6':1433
  • '9.###.242.88':135
  • '9.###.242.87':135
  • '9.###.242.89':135
  • '9.###.242.92':135
  • '9.###.242.91':135
  • '9.###.242.90':135
  • '9.###.242.86':135
  • '9.###.242.81':135
  • '9.##5.240.6':445
  • '9.###.242.80':135
  • '9.###.242.82':135
  • '9.###.242.85':135
  • '9.###.242.84':135
  • '9.###.242.83':135
  • '9.###.242.103':135
  • '9.###.242.101':135
  • '9.###.242.102':135
  • '9.###.242.104':135
  • '9.###.242.107':135
  • '9.###.242.106':135
  • '9.###.242.105':135
  • '9.###.242.100':135
  • '9.###.242.97':135
  • '9.###.242.94':135
  • '9.###.242.93':135
  • '9.###.242.96':135
  • '9.###.242.95':135
  • '9.###.242.98':135
  • '9.###.242.99':135
  • '9.###.242.176':135
  • '9.###.242.175':135
  • '9.###.242.174':135
  • '9.###.242.177':135
  • '9.###.242.180':135
  • '9.###.242.179':135
  • '9.###.242.178':135
  • '9.###.242.173':135
  • '9.###.242.168':135
  • '9.###.242.167':135
  • '9.###.242.166':135
  • '9.###.242.169':135
  • '9.###.242.172':135
  • '9.###.242.171':135
  • '9.###.242.170':135
  • '9.###.242.190':135
  • '9.###.242.189':135
  • '9.###.242.188':135
  • '9.###.242.191':135
  • '9.###.242.194':135
  • '9.###.242.193':135
  • '9.###.242.192':135
  • '9.###.242.187':135
  • '9.###.242.183':135
  • '9.###.242.182':135
  • '9.###.242.181':135
  • '9.###.242.184':135
  • '9.###.242.186':135
  • '9.##5.240.9':445
  • '9.###.242.185':135
  • '9.###.242.147':135
  • '9.###.242.146':135
  • '9.###.242.145':135
  • '9.###.242.148':135
  • '9.###.242.150':135
  • '9.###.242.149':135
  • '9.##5.240.8':445
  • '9.###.242.142':135
  • '9.###.242.141':135
  • '9.###.242.135':135
  • '9.###.242.133':135
  • '9.###.242.137':135
  • '9.###.242.144':135
  • '9.###.242.143':135
  • '9.###.242.139':135
  • '9.###.242.161':135
  • '9.###.242.160':135
  • '9.###.242.159':135
  • '9.###.242.162':135
  • '9.###.242.165':135
  • '9.###.242.164':135
  • '9.###.242.163':135
  • '9.###.242.158':135
  • '9.###.242.153':135
  • '9.###.242.152':135
  • '9.###.242.151':135
  • '9.###.242.154':135
  • '9.###.242.157':135
  • '9.###.242.156':135
  • '9.###.242.155':135
  • '9.###.242.79':135
  • '9.##5.242.8':135
  • '9.##5.242.7':135
  • '9.##5.242.6':135
  • '9.##5.242.9':135
  • '9.###.242.12':135
  • '9.###.242.11':135
  • '9.###.242.10':135
  • '9.##5.242.5':135
  • '9.##5.242.0':135
  • '9.###.241.255':135
  • '9.###.241.254':135
  • '9.##5.242.1':135
  • '9.##5.242.4':135
  • '9.##5.242.3':135
  • '9.##5.242.2':135
  • '9.###.242.23':135
  • '9.###.242.22':135
  • '9.###.242.21':135
  • '9.###.242.24':135
  • '9.###.242.27':135
  • '9.###.242.26':135
  • '9.###.242.25':135
  • '9.###.242.20':135
  • '9.###.242.15':135
  • '9.###.242.14':135
  • '9.###.242.13':135
  • '9.###.242.16':135
  • '9.###.242.19':135
  • '9.###.242.18':135
  • '9.###.242.17':135
  • '9.###.241.234':135
  • '9.###.241.233':135
  • '9.###.241.232':135
  • '9.###.241.235':135
  • '9.###.241.238':135
  • '9.###.241.237':135
  • '9.###.241.236':135
  • '9.###.241.231':135
  • '9.###.241.226':135
  • '9.###.241.225':135
  • '9.###.241.224':135
  • '9.###.241.227':135
  • '9.###.241.230':135
  • '9.###.241.229':135
  • '9.###.241.228':135
  • '9.###.241.249':135
  • '9.###.241.248':135
  • '9.###.241.247':135
  • '9.###.241.250':135
  • '9.###.241.253':135
  • '9.###.241.252':135
  • '9.###.241.251':135
  • '9.###.241.246':135
  • '9.###.241.241':135
  • '9.###.241.240':135
  • '9.###.241.239':135
  • '9.###.241.242':135
  • '9.###.241.245':135
  • '9.###.241.244':135
  • '9.###.241.243':135
  • '9.###.242.62':135
  • '9.###.242.61':135
  • '9.##5.240.3':445
  • '9.##5.240.5':445
  • '9.###.242.65':135
  • '9.###.242.64':135
  • '9.###.242.63':135
  • '9.###.242.60':135
  • '9.##5.240.4':1433
  • '9.###.242.55':135
  • '9.###.242.54':135
  • '9.###.242.56':135
  • '9.###.242.59':135
  • '9.###.242.58':135
  • '9.###.242.57':135
  • '9.###.242.74':135
  • '9.###.242.73':135
  • '9.###.242.72':135
  • '9.###.242.75':135
  • '9.###.242.78':135
  • '9.###.242.77':135
  • '9.###.242.76':135
  • '9.###.242.71':135
  • '9.###.242.67':135
  • '9.###.242.66':135
  • '9.##5.240.3':1433
  • '9.##5.240.5':1433
  • '9.###.242.70':135
  • '9.###.242.69':135
  • '9.###.242.68':135
  • '9.###.242.38':135
  • '9.###.242.37':135
  • '9.###.242.36':135
  • '9.###.242.39':135
  • '9.###.242.42':135
  • '9.###.242.41':135
  • '9.###.242.40':135
  • '9.###.242.35':135
  • '9.###.242.30':135
  • '9.###.242.29':135
  • '9.###.242.28':135
  • '9.###.242.31':135
  • '9.###.242.34':135
  • '9.###.242.33':135
  • '9.###.242.32':135
  • '9.###.242.50':135
  • '9.###.242.49':135
  • '9.##5.240.4':445
  • '9.###.242.51':135
  • '9.###.242.53':135
  • '9.##5.240.2':1433
  • '9.###.242.52':135
  • '9.###.242.48':135
  • '9.###.242.44':135
  • '9.###.242.43':135
  • '9.##5.240.2':445
  • '9.###.242.45':135
  • '9.###.242.47':135
  • '9.###.242.46':135
  • '9.###.240.226':1433
  • '9.###.243.74':135
  • '9.###.243.73':135
  • '9.###.243.72':135
  • '9.###.243.75':135
  • '9.###.243.82':135
  • '9.###.243.77':135
  • '9.###.243.76':135
  • '9.###.243.71':135
  • '9.###.243.67':135
  • '9.###.243.59':1433
  • '9.###.243.66':135
  • '9.###.243.68':135
  • '9.###.240.16':1433
  • '9.###.243.70':135
  • '9.###.243.69':135
  • '9.###.243.84':135
  • '9.###.243.87':135
  • '9.###.243.78':135
  • '9.###.243.89':445
  • '9.###.243.93':135
  • '9.###.243.92':135
  • '9.###.243.85':135
  • '9.###.243.88':135
  • '9.###.243.90':135
  • '9.###.243.79':135
  • '9.###.243.80':135
  • '9.###.243.81':135
  • '9.###.243.86':135
  • '9.###.243.91':135
  • '9.###.243.83':135
  • '9.###.243.50':135
  • '9.###.243.49':135
  • '9.###.243.44':1433
  • '9.###.240.18':1433
  • '9.###.243.47':1433
  • '9.###.243.52':135
  • '9.###.243.51':135
  • '9.###.243.48':135
  • '9.###.240.18':445
  • '9.###.243.41':1433
  • '9.###.243.44':445
  • '9.###.243.45':135
  • '9.###.243.42':1433
  • '9.###.243.47':445
  • '9.###.243.46':135
  • '9.###.240.16':445
  • '9.###.243.59':445
  • '9.###.243.61':135
  • '9.###.243.62':135
  • '9.###.243.65':135
  • '9.###.243.64':135
  • '9.###.243.63':135
  • '9.###.243.60':135
  • '9.###.243.55':135
  • '9.###.243.54':135
  • '9.###.243.53':135
  • '9.###.243.56':135
  • '9.###.243.59':135
  • '9.###.243.58':135
  • '9.###.243.57':135
  • '9.###.243.124':135
  • '9.###.243.123':135
  • '9.###.243.122':135
  • '9.###.243.125':135
  • '9.###.243.128':135
  • '9.###.243.108':1433
  • '9.###.243.126':135
  • '9.###.243.121':135
  • '9.###.243.116':135
  • '9.###.243.115':135
  • '9.###.243.114':135
  • '9.###.243.117':135
  • '9.###.243.120':135
  • '9.###.243.119':135
  • '9.###.243.118':135
  • '9.###.243.137':445
  • '9.###.243.138':135
  • '9.###.243.136':135
  • '9.###.243.130':445
  • '9.###.240.20':445
  • '9.###.243.137':1433
  • '9.###.243.130':1433
  • '9.###.243.135':135
  • '9.###.243.130':135
  • '9.###.243.129':135
  • '9.###.243.127':135
  • '9.###.243.131':135
  • '9.###.243.134':135
  • '9.###.243.133':135
  • '9.###.243.132':135
  • '9.###.243.100':135
  • '9.###.243.89':1433
  • '9.###.243.99':135
  • '9.###.240.24':445
  • '9.###.240.26':1433
  • '9.###.243.102':135
  • '9.###.243.101':135
  • '9.###.243.76':1433
  • '9.###.240.26':445
  • '9.###.243.94':135
  • '9.###.243.76':445
  • '9.###.243.95':135
  • '9.###.243.98':135
  • '9.###.243.97':135
  • '9.###.243.96':135
  • '9.###.243.111':135
  • '9.###.243.110':135
  • '9.###.243.109':135
  • '9.###.243.112':135
  • '9.###.243.108':445
  • '9.###.240.27':1433
  • '9.###.243.113':135
  • '9.###.243.108':135
  • '9.###.243.104':135
  • '9.###.243.103':135
  • '9.###.240.27':445
  • '9.###.243.105':135
  • '9.###.240.24':1433
  • '9.###.243.107':135
  • '9.###.243.106':135
  • '9.###.243.43':135
  • '9.###.242.232':135
  • '9.###.242.231':135
  • '9.###.242.230':135
  • '9.###.242.233':135
  • '9.###.242.235':135
  • '9.###.240.14':445
  • '9.###.242.234':135
  • '9.###.242.229':135
  • '9.###.242.226':135
  • '9.###.242.222':135
  • '9.###.242.220':135
  • '9.###.242.224':135
  • '9.###.242.228':135
  • '9.###.242.227':135
  • '9.###.242.225':135
  • '9.###.242.245':135
  • '9.###.242.244':135
  • '9.###.242.243':135
  • '9.###.242.246':135
  • '9.###.242.249':135
  • '9.###.242.248':135
  • '9.###.242.247':135
  • '9.###.242.242':135
  • '9.###.242.238':135
  • '9.###.242.237':135
  • '9.###.242.236':135
  • '9.###.242.239':135
  • '9.###.242.241':135
  • '9.###.242.240':135
  • '9.##5.240.8':1433
  • '9.###.242.203':135
  • '9.###.242.204':135
  • '9.###.242.202':135
  • '9.###.242.205':135
  • '9.###.242.208':135
  • '9.###.242.207':135
  • '9.###.242.206':135
  • '9.###.242.201':135
  • '9.###.242.197':135
  • '9.###.242.196':135
  • '9.###.242.195':135
  • '9.###.242.198':135
  • '9.###.242.200':135
  • '9.###.242.199':135
  • '9.###.240.11':445
  • '9.###.242.217':135
  • '9.###.242.216':135
  • '9.##5.240.7':1433
  • '9.###.242.218':135
  • '9.###.242.223':135
  • '9.###.242.221':135
  • '9.###.242.219':135
  • '9.###.242.214':135
  • '9.###.242.210':135
  • '9.###.240.13':445
  • '9.###.242.209':135
  • '9.###.242.212':135
  • '9.###.242.215':135
  • '9.###.242.213':135
  • '9.###.242.211':135
  • '9.###.243.27':135
  • '9.###.243.26':135
  • '9.###.243.25':445
  • '9.###.243.28':135
  • '9.###.243.30':135
  • '9.###.243.29':135
  • '9.###.240.15':1433
  • '9.###.243.23':445
  • '9.###.240.14':1433
  • '9.###.243.20':135
  • '9.###.243.19':135
  • '9.###.243.21':135
  • '9.###.240.12':1433
  • '9.###.243.24':135
  • '9.###.243.22':135
  • '9.###.243.38':135
  • '9.###.243.37':135
  • '9.###.243.36':135
  • '9.###.243.39':135
  • '9.###.243.42':445
  • '9.###.243.41':445
  • '9.###.243.40':135
  • '9.###.243.23':1433
  • '9.###.240.10':1433
  • '9.###.243.32':135
  • '9.###.243.31':135
  • '9.###.243.25':1433
  • '9.###.243.35':135
  • '9.###.243.34':135
  • '9.###.243.33':135
  • '9.##5.243.3':135
  • '9.##5.243.2':135
  • '9.##5.243.1':135
  • '9.##5.240.9':1433
  • '9.##5.243.6':135
  • '9.##5.243.5':135
  • '9.##5.243.4':135
  • '9.##5.243.0':135
  • '9.###.242.251':135
  • '9.###.242.250':135
  • '9.###.240.12':445
  • '9.###.242.252':135
  • '9.###.242.255':135
  • '9.###.242.254':135
  • '9.###.242.253':135
  • '9.###.243.14':135
  • '9.###.243.15':135
  • '9.###.243.12':135
  • '9.###.243.16':135
  • '9.###.240.10':445
  • '9.###.243.18':135
  • '9.###.243.17':135
  • '9.###.243.13':135
  • '9.##5.243.9':135
  • '9.##5.243.8':135
  • '9.##5.243.7':135
  • '9.###.240.15':445
  • '9.###.243.11':135
  • '9.###.243.10':135
  • '9.###.240.11':1433
  • '9.###.241.223':135
  • '9.###.240.161':135
  • '9.###.240.160':135
  • '9.###.240.159':135
  • '9.###.240.162':135
  • '9.###.240.165':135
  • '9.###.240.164':135
  • '9.###.240.163':135
  • '9.###.240.158':135
  • '9.###.240.153':135
  • '9.###.240.152':135
  • '9.###.240.151':135
  • '9.###.240.154':135
  • '9.###.240.157':135
  • '9.###.240.156':135
  • '9.###.240.155':135
  • '9.###.240.176':135
  • '9.###.240.175':135
  • '9.###.240.174':135
  • '9.###.240.177':135
  • '9.###.240.180':135
  • '9.###.240.179':135
  • '9.###.240.178':135
  • '9.###.240.173':135
  • '9.###.240.168':135
  • '9.###.240.167':135
  • '9.###.240.166':135
  • '9.###.240.169':135
  • '9.###.240.172':135
  • '9.###.240.171':135
  • '9.###.240.170':135
  • '9.###.240.131':135
  • '9.###.240.130':135
  • '9.###.240.129':135
  • '9.###.240.132':135
  • '9.###.240.135':135
  • '9.###.240.134':135
  • '9.###.240.133':135
  • '9.###.240.128':135
  • '9.###.240.123':135
  • '9.###.240.122':135
  • '9.###.240.121':135
  • '9.###.240.124':135
  • '9.###.240.127':135
  • '9.###.240.126':135
  • '9.###.240.125':135
  • '9.###.240.146':135
  • '9.###.240.145':135
  • '9.###.240.144':135
  • '9.###.240.147':135
  • '9.###.240.150':135
  • '9.###.240.149':135
  • '9.###.240.148':135
  • '9.###.240.143':135
  • '9.###.240.138':135
  • '9.###.240.137':135
  • '9.###.240.136':135
  • '9.###.240.139':135
  • '9.###.240.142':135
  • '9.###.240.141':135
  • '9.###.240.140':135
  • '9.###.240.221':135
  • '9.###.240.220':135
  • '9.###.240.219':135
  • '9.###.240.224':135
  • '9.###.240.226':135
  • '9.###.240.223':135
  • '9.###.240.227':135
  • '9.###.240.218':135
  • '9.###.240.213':135
  • '9.###.240.212':135
  • '9.###.240.211':135
  • '9.###.240.214':135
  • '9.###.240.217':135
  • '9.###.240.216':135
  • '9.###.240.215':135
  • '9.###.240.236':135
  • '9.###.240.235':135
  • '9.###.240.234':135
  • '9.###.240.237':135
  • '9.###.240.224':445
  • '9.###.240.239':135
  • '9.###.240.238':135
  • '9.###.240.233':135
  • '9.###.240.228':135
  • '9.###.240.222':135
  • '9.###.240.225':135
  • '9.###.240.229':135
  • '9.###.240.232':135
  • '9.###.240.231':135
  • '9.###.240.230':135
  • '9.###.240.191':135
  • '9.###.240.190':135
  • '9.###.240.189':135
  • '9.###.240.192':135
  • '9.###.240.195':135
  • '9.###.240.194':135
  • '9.###.240.193':135
  • '9.###.240.188':135
  • '9.###.240.183':135
  • '9.###.240.182':135
  • '9.###.240.181':135
  • '9.###.240.184':135
  • '9.###.240.187':135
  • '9.###.240.186':135
  • '9.###.240.185':135
  • '9.###.240.206':135
  • '9.###.240.205':135
  • '9.###.240.204':135
  • '9.###.240.207':135
  • '9.###.240.210':135
  • '9.###.240.209':135
  • '9.###.240.208':135
  • '9.###.240.203':135
  • '9.###.240.198':135
  • '9.###.240.197':135
  • '9.###.240.196':135
  • '9.###.240.199':135
  • '9.###.240.202':135
  • '9.###.240.201':135
  • '9.###.240.200':135
  • '9.###.240.120':135
  • '9.###.240.40':135
  • '9.###.240.39':135
  • '9.###.240.38':135
  • '9.###.240.41':135
  • '9.###.240.44':135
  • '9.###.240.43':135
  • '9.###.240.42':135
  • '9.###.240.37':135
  • '9.###.240.32':135
  • '9.###.240.31':135
  • '9.###.240.30':135
  • '9.###.240.33':135
  • '9.###.240.36':135
  • '9.###.240.35':135
  • '9.###.240.34':135
  • '9.###.240.55':135
  • '9.###.240.54':135
  • '9.###.240.53':135
  • '9.###.240.56':135
  • '9.###.240.59':135
  • '9.###.240.58':135
  • '9.###.240.57':135
  • '9.###.240.52':135
  • '9.###.240.47':135
  • '9.###.240.46':135
  • '9.###.240.45':135
  • '9.###.240.48':135
  • '9.###.240.51':135
  • '9.###.240.50':135
  • '9.###.240.49':135
  • '9.###.240.10':135
  • '9.##5.240.9':135
  • '9.##5.240.8':135
  • '9.###.240.11':135
  • '9.###.240.14':135
  • '9.###.240.13':135
  • '9.###.240.12':135
  • '9.##5.240.7':135
  • '9.##5.240.2':135
  • 'kh###.in.into4.info':21
  • 'so##.into4.info':80
  • '9.##5.240.3':135
  • '9.##5.240.6':135
  • '9.##5.240.5':135
  • '9.##5.240.4':135
  • '9.###.240.25':135
  • '9.###.240.24':135
  • '9.###.240.23':135
  • '9.###.240.26':135
  • '9.###.240.29':135
  • '9.###.240.28':135
  • '9.###.240.27':135
  • '9.###.240.22':135
  • '9.###.240.17':135
  • '9.###.240.16':135
  • '9.###.240.15':135
  • '9.###.240.18':135
  • '9.###.240.21':135
  • '9.###.240.20':135
  • '9.###.240.19':135
  • '9.###.240.100':135
  • '9.###.240.99':135
  • '9.###.240.98':135
  • '9.###.240.101':135
  • '9.###.240.104':135
  • '9.###.240.103':135
  • '9.###.240.102':135
  • '9.###.240.97':135
  • '9.###.240.92':135
  • '9.###.240.91':135
  • '9.###.240.90':135
  • '9.###.240.93':135
  • '9.###.240.96':135
  • '9.###.240.95':135
  • '9.###.240.94':135
  • '9.###.240.115':135
  • '9.###.240.114':135
  • '9.###.240.113':135
  • '9.###.240.116':135
  • '9.###.240.119':135
  • '9.###.240.118':135
  • '9.###.240.117':135
  • '9.###.240.112':135
  • '9.###.240.107':135
  • '9.###.240.106':135
  • '9.###.240.105':135
  • '9.###.240.108':135
  • '9.###.240.111':135
  • '9.###.240.110':135
  • '9.###.240.109':135
  • '9.###.240.70':135
  • '9.###.240.69':135
  • '9.###.240.68':135
  • '9.###.240.71':135
  • '9.###.240.74':135
  • '9.###.240.73':135
  • '9.###.240.72':135
  • '9.###.240.67':135
  • '9.###.240.62':135
  • '9.###.240.61':135
  • '9.###.240.60':135
  • '9.###.240.63':135
  • '9.###.240.66':135
  • '9.###.240.65':135
  • '9.###.240.64':135
  • '9.###.240.85':135
  • '9.###.240.84':135
  • '9.###.240.83':135
  • '9.###.240.86':135
  • '9.###.240.89':135
  • '9.###.240.88':135
  • '9.###.240.87':135
  • '9.###.240.82':135
  • '9.###.240.77':135
  • '9.###.240.76':135
  • '9.###.240.75':135
  • '9.###.240.78':135
  • '9.###.240.81':135
  • '9.###.240.80':135
  • '9.###.240.79':135
  • '9.###.241.143':135
  • '9.###.241.142':135
  • '9.###.241.141':135
  • '9.###.241.144':135
  • '9.###.241.147':135
  • '9.###.241.146':135
  • '9.###.241.145':135
  • '9.###.241.140':135
  • '9.###.241.135':135
  • '9.###.241.134':135
  • '9.###.241.133':135
  • '9.###.241.136':135
  • '9.###.241.139':135
  • '9.###.241.138':135
  • '9.###.241.137':135
  • '9.###.241.158':135
  • '9.###.241.157':135
  • '9.###.241.156':135
  • '9.###.241.159':135
  • '9.###.241.162':135
  • '9.###.241.161':135
  • '9.###.241.160':135
  • '9.###.241.155':135
  • '9.###.241.150':135
  • '9.###.241.149':135
  • '9.###.241.148':135
  • '9.###.241.151':135
  • '9.###.241.154':135
  • '9.###.241.153':135
  • '9.###.241.152':135
  • '9.###.241.113':135
  • '9.###.241.112':135
  • '9.###.241.111':135
  • '9.###.241.114':135
  • '9.###.241.117':135
  • '9.###.241.116':135
  • '9.###.241.115':135
  • '9.###.241.110':135
  • '9.###.241.105':135
  • '9.###.241.104':135
  • '9.###.241.103':135
  • '9.###.241.106':135
  • '9.###.241.109':135
  • '9.###.241.108':135
  • '9.###.241.107':135
  • '9.###.241.128':135
  • '9.###.241.127':135
  • '9.###.241.126':135
  • '9.###.241.129':135
  • '9.###.241.132':135
  • '9.###.241.131':135
  • '9.###.241.130':135
  • '9.###.241.125':135
  • '9.###.241.120':135
  • '9.###.241.119':135
  • '9.###.241.118':135
  • '9.###.241.121':135
  • '9.###.241.124':135
  • '9.###.241.123':135
  • '9.###.241.122':135
  • '9.###.241.203':135
  • '9.###.241.202':135
  • '9.###.241.201':135
  • '9.###.241.204':135
  • '9.###.241.207':135
  • '9.###.241.206':135
  • '9.###.241.205':135
  • '9.###.241.200':135
  • '9.###.241.195':135
  • '9.###.241.194':135
  • '9.###.241.193':135
  • '9.###.241.196':135
  • '9.###.241.199':135
  • '9.###.241.198':135
  • '9.###.241.197':135
  • '9.###.241.218':135
  • '9.###.241.217':135
  • '9.###.241.216':135
  • '9.###.241.219':135
  • '9.###.241.222':135
  • '9.###.241.221':135
  • '9.###.241.220':135
  • '9.###.241.215':135
  • '9.###.241.210':135
  • '9.###.241.209':135
  • '9.###.241.208':135
  • '9.###.241.211':135
  • '9.###.241.214':135
  • '9.###.241.213':135
  • '9.###.241.212':135
  • '9.###.241.173':135
  • '9.###.241.172':135
  • '9.###.241.171':135
  • '9.###.241.174':135
  • '9.###.241.177':135
  • '9.###.241.176':135
  • '9.###.241.175':135
  • '9.###.241.170':135
  • '9.###.241.165':135
  • '9.###.241.164':135
  • '9.###.241.163':135
  • '9.###.241.166':135
  • '9.###.241.169':135
  • '9.###.241.168':135
  • '9.###.241.167':135
  • '9.###.241.188':135
  • '9.###.241.187':135
  • '9.###.241.186':135
  • '9.###.241.189':135
  • '9.###.241.192':135
  • '9.###.241.191':135
  • '9.###.241.190':135
  • '9.###.241.185':135
  • '9.###.241.180':135
  • '9.###.241.179':135
  • '9.###.241.178':135
  • '9.###.241.181':135
  • '9.###.241.184':135
  • '9.###.241.183':135
  • '9.###.241.182':135
  • '9.###.241.102':135
  • '9.###.241.22':135
  • '9.###.241.21':135
  • '9.###.241.20':135
  • '9.###.241.23':135
  • '9.###.241.26':135
  • '9.###.241.25':135
  • '9.###.241.24':135
  • '9.###.241.19':135
  • '9.###.241.14':135
  • '9.###.241.13':135
  • '9.###.241.12':135
  • '9.###.241.15':135
  • '9.###.241.18':135
  • '9.###.241.17':135
  • '9.###.241.16':135
  • '9.###.241.37':135
  • '9.###.241.36':135
  • '9.###.241.35':135
  • '9.###.241.38':135
  • '9.###.241.41':135
  • '9.###.241.40':135
  • '9.###.241.39':135
  • '9.###.241.34':135
  • '9.###.241.29':135
  • '9.###.241.28':135
  • '9.###.241.27':135
  • '9.###.241.30':135
  • '9.###.241.33':135
  • '9.###.241.32':135
  • '9.###.241.31':135
  • '9.###.240.248':135
  • '9.###.240.247':135
  • '9.###.240.246':135
  • '9.###.240.249':135
  • '9.###.240.252':135
  • '9.###.240.251':135
  • '9.###.240.250':135
  • '9.###.240.245':135
  • '9.###.240.224':1433
  • '9.###.240.240':135
  • '9.###.240.226':445
  • '9.###.240.241':135
  • '9.###.240.244':135
  • '9.###.240.243':135
  • '9.###.240.242':135
  • '9.##5.241.7':135
  • '9.##5.241.6':135
  • '9.##5.241.5':135
  • '9.##5.241.8':135
  • '9.###.241.11':135
  • '9.###.241.10':135
  • '9.##5.241.9':135
  • '9.##5.241.4':135
  • '9.###.240.255':135
  • '9.###.240.254':135
  • '9.###.240.253':135
  • '9.##5.241.0':135
  • '9.##5.241.3':135
  • '9.##5.241.2':135
  • '9.##5.241.1':135
  • '9.###.241.82':135
  • '9.###.241.81':135
  • '9.###.241.80':135
  • '9.###.241.83':135
  • '9.###.241.86':135
  • '9.###.241.85':135
  • '9.###.241.84':135
  • '9.###.241.79':135
  • '9.###.241.74':135
  • '9.###.241.73':135
  • '9.###.241.72':135
  • '9.###.241.75':135
  • '9.###.241.78':135
  • '9.###.241.77':135
  • '9.###.241.76':135
  • '9.###.241.97':135
  • '9.###.241.96':135
  • '9.###.241.95':135
  • '9.###.241.98':135
  • '9.###.241.101':135
  • '9.###.241.100':135
  • '9.###.241.99':135
  • '9.###.241.94':135
  • '9.###.241.89':135
  • '9.###.241.88':135
  • '9.###.241.87':135
  • '9.###.241.90':135
  • '9.###.241.93':135
  • '9.###.241.92':135
  • '9.###.241.91':135
  • '9.###.241.52':135
  • '9.###.241.51':135
  • '9.###.241.50':135
  • '9.###.241.53':135
  • '9.###.241.56':135
  • '9.###.241.55':135
  • '9.###.241.54':135
  • '9.###.241.49':135
  • '9.###.241.44':135
  • '9.###.241.43':135
  • '9.###.241.42':135
  • '9.###.241.45':135
  • '9.###.241.48':135
  • '9.###.241.47':135
  • '9.###.241.46':135
  • '9.###.241.67':135
  • '9.###.241.66':135
  • '9.###.241.65':135
  • '9.###.241.68':135
  • '9.###.241.71':135
  • '9.###.241.70':135
  • '9.###.241.69':135
  • '9.###.241.64':135
  • '9.###.241.59':135
  • '9.###.241.58':135
  • '9.###.241.57':135
  • '9.###.241.60':135
  • '9.###.241.63':135
  • '9.###.241.62':135
  • '9.###.241.61':135
TCP:
Запросы HTTP GET:
  • so##.into4.info/it.asp?in########
UDP:
  • DNS ASK 78.###.#55.9.in-addr.arpa
  • DNS ASK 79.###.#55.9.in-addr.arpa
  • DNS ASK 80.###.#55.9.in-addr.arpa
  • DNS ASK 76.###.#55.9.in-addr.arpa
  • DNS ASK 74.###.#55.9.in-addr.arpa
  • DNS ASK 75.###.#55.9.in-addr.arpa
  • DNS ASK 77.###.#55.9.in-addr.arpa
  • DNS ASK 85.###.#55.9.in-addr.arpa
  • DNS ASK 86.###.#55.9.in-addr.arpa
  • DNS ASK 87.###.#55.9.in-addr.arpa
  • DNS ASK 84.###.#55.9.in-addr.arpa
  • DNS ASK 81.###.#55.9.in-addr.arpa
  • DNS ASK 82.###.#55.9.in-addr.arpa
  • DNS ASK 83.###.#55.9.in-addr.arpa
  • DNS ASK 73.###.#55.9.in-addr.arpa
  • DNS ASK 63.###.#55.9.in-addr.arpa
  • DNS ASK 64.###.#55.9.in-addr.arpa
  • DNS ASK 65.###.#55.9.in-addr.arpa
  • DNS ASK 62.###.#55.9.in-addr.arpa
  • DNS ASK 59.###.#55.9.in-addr.arpa
  • DNS ASK 60.###.#55.9.in-addr.arpa
  • DNS ASK 61.###.#55.9.in-addr.arpa
  • DNS ASK 70.###.#55.9.in-addr.arpa
  • DNS ASK 71.###.#55.9.in-addr.arpa
  • DNS ASK 72.###.#55.9.in-addr.arpa
  • DNS ASK 69.###.#55.9.in-addr.arpa
  • DNS ASK 66.###.#55.9.in-addr.arpa
  • DNS ASK 67.###.#55.9.in-addr.arpa
  • DNS ASK 68.###.#55.9.in-addr.arpa
  • DNS ASK 88.###.#55.9.in-addr.arpa
  • DNS ASK 18#.###.255.9.in-addr.arpa
  • DNS ASK 19#.###.255.9.in-addr.arpa
  • DNS ASK 20#.###.255.9.in-addr.arpa
  • DNS ASK 17#.###.255.9.in-addr.arpa
  • DNS ASK 14#.###.255.9.in-addr.arpa
  • DNS ASK 15#.###.255.9.in-addr.arpa
  • DNS ASK 16#.###.255.9.in-addr.arpa
  • DNS ASK 25#.###.255.9.in-addr.arpa
  • DNS ASK 0.###.##5.9.in-addr.arpa
  • DNS ASK 1.###.##5.9.in-addr.arpa
  • DNS ASK 24#.###.255.9.in-addr.arpa
  • DNS ASK 21#.###.255.9.in-addr.arpa
  • DNS ASK 22#.###.255.9.in-addr.arpa
  • DNS ASK 23#.###.255.9.in-addr.arpa
  • DNS ASK 13#.###.255.9.in-addr.arpa
  • DNS ASK 93.###.#55.9.in-addr.arpa
  • DNS ASK 94.###.#55.9.in-addr.arpa
  • DNS ASK 95.###.#55.9.in-addr.arpa
  • DNS ASK 92.###.#55.9.in-addr.arpa
  • DNS ASK 89.###.#55.9.in-addr.arpa
  • DNS ASK 90.###.#55.9.in-addr.arpa
  • DNS ASK 91.###.#55.9.in-addr.arpa
  • DNS ASK 10#.###.255.9.in-addr.arpa
  • DNS ASK 11#.###.255.9.in-addr.arpa
  • DNS ASK 12#.###.255.9.in-addr.arpa
  • DNS ASK 99.###.#55.9.in-addr.arpa
  • DNS ASK 96.###.#55.9.in-addr.arpa
  • DNS ASK 97.###.#55.9.in-addr.arpa
  • DNS ASK 98.###.#55.9.in-addr.arpa
  • DNS ASK 58.###.#55.9.in-addr.arpa
  • DNS ASK 18.###.#55.9.in-addr.arpa
  • DNS ASK 19.###.#55.9.in-addr.arpa
  • DNS ASK 20.###.#55.9.in-addr.arpa
  • DNS ASK 17.###.#55.9.in-addr.arpa
  • DNS ASK 14.###.#55.9.in-addr.arpa
  • DNS ASK 15.###.#55.9.in-addr.arpa
  • DNS ASK 16.###.#55.9.in-addr.arpa
  • DNS ASK 25.###.#55.9.in-addr.arpa
  • DNS ASK 26.###.#55.9.in-addr.arpa
  • DNS ASK 27.###.#55.9.in-addr.arpa
  • DNS ASK 24.###.#55.9.in-addr.arpa
  • DNS ASK 21.###.#55.9.in-addr.arpa
  • DNS ASK 22.###.#55.9.in-addr.arpa
  • DNS ASK 23.###.#55.9.in-addr.arpa
  • DNS ASK 13.###.#55.9.in-addr.arpa
  • DNS ASK 4.###.##5.9.in-addr.arpa
  • DNS ASK 3.###.##5.9.in-addr.arpa
  • DNS ASK 5.###.##5.9.in-addr.arpa
  • DNS ASK 2.###.##5.9.in-addr.arpa
  • DNS ASK www.google.com
  • DNS ASK so##.into4.info
  • DNS ASK kh###.in.into4.info
  • DNS ASK 10.###.#55.9.in-addr.arpa
  • DNS ASK 11.###.#55.9.in-addr.arpa
  • DNS ASK 12.###.#55.9.in-addr.arpa
  • DNS ASK 9.###.##5.9.in-addr.arpa
  • DNS ASK 6.###.##5.9.in-addr.arpa
  • DNS ASK 7.###.##5.9.in-addr.arpa
  • DNS ASK 8.###.##5.9.in-addr.arpa
  • DNS ASK 28.###.#55.9.in-addr.arpa
  • DNS ASK 48.###.#55.9.in-addr.arpa
  • DNS ASK 49.###.#55.9.in-addr.arpa
  • DNS ASK 50.###.#55.9.in-addr.arpa
  • DNS ASK 47.###.#55.9.in-addr.arpa
  • DNS ASK 44.###.#55.9.in-addr.arpa
  • DNS ASK 45.###.#55.9.in-addr.arpa
  • DNS ASK 46.###.#55.9.in-addr.arpa
  • DNS ASK 55.###.#55.9.in-addr.arpa
  • DNS ASK 56.###.#55.9.in-addr.arpa
  • DNS ASK 57.###.#55.9.in-addr.arpa
  • DNS ASK 54.###.#55.9.in-addr.arpa
  • DNS ASK 51.###.#55.9.in-addr.arpa
  • DNS ASK 52.###.#55.9.in-addr.arpa
  • DNS ASK 53.###.#55.9.in-addr.arpa
  • DNS ASK 43.###.#55.9.in-addr.arpa
  • DNS ASK 33.###.#55.9.in-addr.arpa
  • DNS ASK 34.###.#55.9.in-addr.arpa
  • DNS ASK 35.###.#55.9.in-addr.arpa
  • DNS ASK 32.###.#55.9.in-addr.arpa
  • DNS ASK 29.###.#55.9.in-addr.arpa
  • DNS ASK 30.###.#55.9.in-addr.arpa
  • DNS ASK 31.###.#55.9.in-addr.arpa
  • DNS ASK 40.###.#55.9.in-addr.arpa
  • DNS ASK 41.###.#55.9.in-addr.arpa
  • DNS ASK 42.###.#55.9.in-addr.arpa
  • DNS ASK 39.###.#55.9.in-addr.arpa
  • DNS ASK 36.###.#55.9.in-addr.arpa
  • DNS ASK 37.###.#55.9.in-addr.arpa
  • DNS ASK 38.###.#55.9.in-addr.arpa

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке