Защити созданное

Другие наши ресурсы

  • free.drweb.ru — бесплатные утилиты, плагины, информеры
  • av-desk.com — интернет-сервис для поставщиков услуг Dr.Web AV-Desk
  • curenet.drweb.ru — сетевая лечащая утилита Dr.Web CureNet!
  • www.drweb.ru/web-iq — ВебIQметр
Закрыть

Библиотека
Моя библиотека

Чтобы добавить ресурс в библиотеку, войдите в аккаунт.

+ Добавить в библиотеку

Ресурсов: -

Последний: -

Моя библиотека

Поддержка
Круглосуточная поддержка | Правила обращения

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум | Бот самоподдержки Telegram

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32 | Skype Telegram

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.DownLoader33.52843

Добавлен в вирусную базу Dr.Web: 2020-06-11

Описание добавлено:

Техническая информация

Изменения в файловой системе
Создает следующие файлы
  • %WINDIR%\jlbeqk\eocfdb.exe
  • %WINDIR%\1d32000a\html\history\test.js
  • %WINDIR%\1d32000a\html\minibookmarks\images\ss.png
  • %WINDIR%\1d32000a\html\minibookmarks\images\sign_in_promo_dark.svg
  • %WINDIR%\1d32000a\html\minibookmarks\images\sign_in_promo.svg
  • %WINDIR%\1d32000a\html\minibookmarks\images\one.png
  • %WINDIR%\1d32000a\html\minibookmarks\images\clear.png
  • %WINDIR%\1d32000a\html\minibookmarks\images\st_folder.png
  • %WINDIR%\1d32000a\html\minibookmarks\images\add.png
  • %WINDIR%\1d32000a\html\minibookmarks\fonts\roboto-regular_0.ttf
  • %WINDIR%\1d32000a\html\minibookmarks\fonts\roboto-medium.ttf
  • %WINDIR%\1d32000a\html\minibookmarks\fonts\roboto-light.ttf
  • %WINDIR%\1d32000a\html\minibookmarks\fonts\roboto-bold_0.ttf
  • %WINDIR%\1d32000a\html\minibookmarks\fonts\roboto-black.ttf
  • %WINDIR%\1d32000a\html\minibookmarks\favicon.png
  • %WINDIR%\1d32000a\html\minibookmarks\fonts\roboto-thin.ttf
  • %WINDIR%\1d32000a\html\minibookmarks\bootstrap.min.css
  • %WINDIR%\1d32000a\html\minibookmarks\images\st_icon.png
  • %WINDIR%\1d32000a\html\minibookmarks\images\st_icon_open.png
  • %WINDIR%\1d32000a\html\settings\images\about.png
  • %WINDIR%\1d32000a\html\settings\favicon.png
  • %WINDIR%\1d32000a\html\settings\css.css
  • %WINDIR%\1d32000a\html\settings\bootstrap.min.css
  • %WINDIR%\1d32000a\html\settings\183.js
  • %WINDIR%\1d32000a\html\newtab\index.html
  • %WINDIR%\1d32000a\html\minibookmarks\test.css
  • %WINDIR%\1d32000a\html\minibookmarks\theme\default\style.css
  • %WINDIR%\1d32000a\html\minibookmarks\test.js
  • %WINDIR%\1d32000a\html\minibookmarks\simpletree.js
  • %WINDIR%\1d32000a\html\minibookmarks\simpletree.css
  • %WINDIR%\1d32000a\html\minibookmarks\jquery.min.js
  • %WINDIR%\1d32000a\html\minibookmarks\index.html
  • %WINDIR%\1d32000a\html\minibookmarks\images\st_node.png
  • %WINDIR%\1d32000a\html\minibookmarks\images\st_folder_open.png
  • %WINDIR%\1d32000a\html\minibookmarks\bookmarks.css
  • %WINDIR%\1d32000a\html\history\test.css
  • %WINDIR%\1d32000a\html\history\jquery.min.js
  • %WINDIR%\1d32000a\html\downloads\layui\layui.js
  • %WINDIR%\1d32000a\html\errorpage\images\erroricon.png
  • %WINDIR%\1d32000a\html\errorpage\fonts\roboto-regular_0.ttf
  • %WINDIR%\1d32000a\html\errorpage\css\neterror.css
  • %WINDIR%\1d32000a\html\downloads\test.js
  • %WINDIR%\1d32000a\html\downloads\test.css
  • %WINDIR%\1d32000a\html\errorpage\images\st_node.png
  • %WINDIR%\1d32000a\html\errorpage\index.html
  • %WINDIR%\1d32000a\html\errorpage\js\162.js
  • %WINDIR%\1d32000a\html\downloads\layui\lay\modules\upload.js
  • %WINDIR%\1d32000a\html\downloads\layui\lay\modules\tree.js
  • %WINDIR%\1d32000a\html\downloads\layui\lay\modules\table.js
  • %WINDIR%\1d32000a\html\downloads\layui\lay\modules\slider.js
  • %WINDIR%\1d32000a\html\downloads\layui\lay\modules\rate.js
  • %WINDIR%\1d32000a\html\downloads\layui\lay\modules\util.js
  • %WINDIR%\1d32000a\html\errorpage\js\error.js
  • %WINDIR%\1d32000a\html\history\images\sss.png
  • %WINDIR%\1d32000a\html\errorpage\js\neterror.js
  • %WINDIR%\1d32000a\html\history\index.html
  • %WINDIR%\1d32000a\html\history\images\del.png
  • %WINDIR%\1d32000a\html\history\images\ss.png
  • %WINDIR%\1d32000a\html\history\images\sign_in_promo_dark.svg
  • %WINDIR%\1d32000a\html\history\images\sign_in_promo.svg
  • %WINDIR%\1d32000a\html\history\images\index.png
  • %WINDIR%\1d32000a\html\history\images\fxh.png
  • %WINDIR%\1d32000a\html\history\images\del22.png
  • %WINDIR%\1d32000a\html\history\images\clear.png
  • %WINDIR%\1d32000a\html\errorpage\js\fd7e782a.js
  • %WINDIR%\1d32000a\html\history\images\about.png
  • %WINDIR%\1d32000a\html\history\history_favicon.png
  • %WINDIR%\1d32000a\html\history\history.css
  • %WINDIR%\1d32000a\html\history\bootstrap.min.css
  • %WINDIR%\1d32000a\html\history\183.js
  • %WINDIR%\1d32000a\html\downloads\layui\lay\modules\mobile.js
  • %WINDIR%\1d32000a\html\downloads\layui\layui.all.js
  • %WINDIR%\1d32000a\html\settings\images\auto-clear.png
  • %WINDIR%\1d32000a\html\settings\images\fx.png
  • %WINDIR%\1d32000a\html\settings\layui\lay\modules\laypage.js
  • %WINDIR%\1d32000a\html\settings\layui\lay\modules\layer.js
  • %WINDIR%\1d32000a\html\settings\layui\lay\modules\layedit.js
  • %WINDIR%\1d32000a\html\settings\layui\lay\modules\laydate.js
  • %WINDIR%\1d32000a\html\settings\layui\lay\modules\jquery.js
  • %WINDIR%\1d32000a\html\settings\layui\lay\modules\form.js
  • %WINDIR%\1d32000a\html\settings\layui\css\modules\layer\default\loading-2.gif
  • %WINDIR%\1d32000a\html\settings\layui\lay\modules\flow.js
  • %WINDIR%\1d32000a\html\settings\layui\lay\modules\colorpicker.js
  • %WINDIR%\1d32000a\html\settings\layui\lay\modules\code.js
  • %WINDIR%\1d32000a\html\settings\layui\lay\modules\carousel.js
  • %WINDIR%\1d32000a\html\settings\layui\font\iconfont.woff
  • %WINDIR%\1d32000a\html\settings\layui\font\iconfont.ttf
  • %WINDIR%\1d32000a\html\settings\layui\font\iconfont.svg
  • %WINDIR%\1d32000a\html\settings\layui\lay\modules\element.js
  • %WINDIR%\1d32000a\html\settings\layui\font\iconfont.eot
  • %WINDIR%\1d32000a\html\settings\layui\lay\modules\laytpl.js
  • %WINDIR%\1d32000a\html\settings\layui\layui.js
  • %WINDIR%\1d32000a\ico\4.ico
  • %WINDIR%\1d32000a\ico\3.ico
  • %WINDIR%\1d32000a\ico\2.ico
  • %WINDIR%\1d32000a\ico\1.ico
  • %WINDIR%\1d32000a\html\settings\theme\default\style.css
  • %WINDIR%\1d32000a\html\settings\test.js
  • %WINDIR%\1d32000a\html\settings\layui\lay\modules\rate.js
  • %WINDIR%\1d32000a\html\settings\layui\lay\modules\mobile.js
  • %WINDIR%\1d32000a\html\settings\layui\layui.all.js
  • %WINDIR%\1d32000a\html\settings\layui\lay\modules\util.js
  • %WINDIR%\1d32000a\html\settings\layui\lay\modules\upload.js
  • %WINDIR%\1d32000a\html\settings\layui\lay\modules\tree.js
  • %WINDIR%\1d32000a\html\settings\layui\lay\modules\table.js
  • %WINDIR%\1d32000a\html\settings\layui\lay\modules\slider.js
  • %WINDIR%\1d32000a\html\settings\test.css
  • %WINDIR%\1d32000a\html\settings\layui\css\modules\layer\default\loading-1.gif
  • %WINDIR%\1d32000a\html\settings\layui\css\modules\layer\default\layer.css
  • %WINDIR%\1d32000a\html\downloads\images\clear.png
  • %WINDIR%\1d32000a\html\settings\images\fx1.png
  • %WINDIR%\1d32000a\html\settings\images\qc.png
  • %WINDIR%\1d32000a\html\settings\images\left-nav.png
  • %WINDIR%\1d32000a\html\settings\images\index.png
  • %WINDIR%\1d32000a\html\settings\images\ico.png
  • %WINDIR%\1d32000a\html\settings\images\fxh.png
  • %WINDIR%\1d32000a\html\settings\images\ss.png
  • %WINDIR%\1d32000a\html\settings\images\sign_in_promo.svg
  • %WINDIR%\1d32000a\html\settings\images\sign_in_promo_dark.svg
  • %WINDIR%\1d32000a\html\settings\images\folder.png
  • %WINDIR%\1d32000a\html\settings\images\del.png
  • %WINDIR%\1d32000a\html\settings\images\close.png
  • %WINDIR%\1d32000a\html\settings\images\clear_jd.gif
  • %WINDIR%\1d32000a\html\settings\images\clear.png
  • %WINDIR%\1d32000a\html\settings\images\fs_logo.png
  • %WINDIR%\1d32000a\html\settings\images\time.png
  • %WINDIR%\1d32000a\html\settings\layui\css\modules\layer\default\icon.png
  • %WINDIR%\1d32000a\html\settings\images\backselect.png
  • %WINDIR%\1d32000a\html\settings\images\shou.png
  • %WINDIR%\1d32000a\html\settings\layui\css\modules\layer\default\icon-ext.png
  • %WINDIR%\1d32000a\html\settings\layui\css\modules\laydate\default\laydate.css
  • %WINDIR%\1d32000a\html\settings\layui\css\modules\code.css
  • %WINDIR%\1d32000a\html\settings\layui\css\layui.mobile.css
  • %WINDIR%\1d32000a\html\settings\layui\css\layui.css
  • %WINDIR%\1d32000a\html\settings\jquery.min.js
  • %WINDIR%\1d32000a\html\settings\jquery.idialog.js
  • %WINDIR%\1d32000a\html\settings\jquery-ui.js
  • %WINDIR%\1d32000a\html\settings\jquery-ui.css
  • %WINDIR%\1d32000a\html\settings\index.html
  • %WINDIR%\1d32000a\html\settings\index.css
  • %WINDIR%\1d32000a\html\settings\images\zhong-style.png
  • %WINDIR%\1d32000a\html\settings\images\yjt.png
  • %WINDIR%\1d32000a\html\settings\images\top-style.png
  • %WINDIR%\1d32000a\html\settings\images\bottom-style.png
  • %WINDIR%\1d32000a\html\downloads\layui\lay\modules\laytpl.js
  • %WINDIR%\1d32000a\html\downloads\layui\lay\modules\laypage.js
  • %WINDIR%\1d32000a\html\downloads\layui\lay\modules\layer.js
  • %WINDIR%\1d32000a\html\bookmarks\images\st_node.png
  • %WINDIR%\1d32000a\html\bookmarks\jquery.min.js
  • %WINDIR%\1d32000a\html\bookmarks\jquery.idialog.js
  • %WINDIR%\1d32000a\html\bookmarks\jquery-ui.js
  • %WINDIR%\1d32000a\html\bookmarks\jquery-ui.css
  • %WINDIR%\1d32000a\html\bookmarks\index.html
  • %WINDIR%\1d32000a\html\bookmarks\layui\css\modules\code.css
  • %WINDIR%\1d32000a\html\bookmarks\layui\css\layui.mobile.css
  • %WINDIR%\1d32000a\html\bookmarks\images\sss.png
  • %WINDIR%\1d32000a\html\bookmarks\images\st_icon.png
  • %WINDIR%\1d32000a\html\bookmarks\images\st_folder_open.png
  • %WINDIR%\1d32000a\html\bookmarks\images\st_folder_open.gif
  • %WINDIR%\1d32000a\html\bookmarks\images\st_folder.png
  • %WINDIR%\1d32000a\html\bookmarks\images\st_folder.gif
  • %WINDIR%\1d32000a\html\bookmarks\images\st_icon_open.png
  • %WINDIR%\1d32000a\html\bookmarks\images\st_node.gif
  • %WINDIR%\1d32000a\html\bookmarks\layui\css\modules\layer\default\icon-ext.png
  • %WINDIR%\1d32000a\html\bookmarks\images\ss.png
  • %WINDIR%\1d32000a\html\bookmarks\layui\lay\modules\element.js
  • %WINDIR%\1d32000a\html\bookmarks\layui\lay\modules\colorpicker.js
  • %WINDIR%\1d32000a\html\bookmarks\layui\lay\modules\code.js
  • %WINDIR%\1d32000a\html\bookmarks\layui\lay\modules\carousel.js
  • %WINDIR%\1d32000a\html\bookmarks\layui\font\iconfont.woff
  • %WINDIR%\1d32000a\html\bookmarks\layui\css\modules\laydate\default\laydate.css
  • %WINDIR%\1d32000a\html\bookmarks\layui\lay\modules\flow.js
  • %WINDIR%\1d32000a\html\bookmarks\layui\font\iconfont.ttf
  • %WINDIR%\1d32000a\html\bookmarks\layui\css\modules\layer\default\loading-2.gif
  • %WINDIR%\1d32000a\html\bookmarks\layui\css\modules\layer\default\loading-1.gif
  • %WINDIR%\1d32000a\html\bookmarks\layui\css\modules\layer\default\loading-0.gif
  • %WINDIR%\1d32000a\html\bookmarks\layui\css\modules\layer\default\layer.css
  • %WINDIR%\1d32000a\html\bookmarks\layui\css\modules\layer\default\icon.png
  • %WINDIR%\1d32000a\html\bookmarks\layui\font\iconfont.svg
  • %WINDIR%\1d32000a\html\bookmarks\layui\font\iconfont.eot
  • %WINDIR%\1d32000a\html\bookmarks\images\sign_in_promo_dark.svg
  • %WINDIR%\1d32000a\html\bookmarks\images\sign_in_promo.svg
  • %WINDIR%\1d32000a\filingcache\tt.adrtb.net.json
  • %WINDIR%\1d32000a\filingcache\news.baidu.com.json
  • %WINDIR%\1d32000a\filingcache\haokan.baidu.com.json
  • %WINDIR%\1d32000a\filingcache\client.lele999.com.json
  • %WINDIR%\1d32000a\download\id.dat
  • %WINDIR%\1d32000a\filingcache\www.9xiu.com.json
  • %WINDIR%\1d32000a\devtools_resources.pak
  • %WINDIR%\1d32000a\cef_extensions.pak
  • %WINDIR%\1d32000a\cef_200_percent.pak
  • %WINDIR%\1d32000a\cef_100_percent.pak
  • %WINDIR%\1d32000a\cef.pak
  • %WINDIR%\1d32000a\first.txt
  • %WINDIR%\1d32000a\xed.dat
  • %WINDIR%\1d32000a\config.json
  • %WINDIR%\1d32000a\filingcache\www.baidu.com.json
  • %WINDIR%\1d32000a\filingcache\www.daofengdj.com.json
  • %WINDIR%\1d32000a\filingcache\tg.taojike.com.cn.json
  • %WINDIR%\1d32000a\filingcache\www.hao123.com.json
  • %WINDIR%\1d32000a\html\bookmarks\images\folder_close.png
  • %WINDIR%\1d32000a\html\bookmarks\fonts\roboto-light.ttf
  • %WINDIR%\1d32000a\html\bookmarks\images\folder.png
  • %WINDIR%\1d32000a\html\bookmarks\images\del.png
  • %WINDIR%\1d32000a\html\bookmarks\images\clear.png
  • %WINDIR%\1d32000a\html\bookmarks\fonts\roboto-thin.ttf
  • %WINDIR%\1d32000a\html\bookmarks\fonts\roboto-regular_0.ttf
  • %WINDIR%\1d32000a\html\bookmarks\fonts\roboto-medium.ttf
  • %WINDIR%\1d32000a\html\bookmarks\fonts\roboto-bold_0.ttf
  • %WINDIR%\1d32000a\html\bookmarks\images\folder_open.png
  • %WINDIR%\1d32000a\html\bookmarks\fonts\roboto-black.ttf
  • %WINDIR%\1d32000a\html\bookmarks\favicon.png
  • %WINDIR%\1d32000a\html\bookmarks\bootstrap.min.css
  • %WINDIR%\1d32000a\html\bookmarks\bookmarks.css
  • %WINDIR%\1d32000a\filingcache\www.hao774.com.json
  • %WINDIR%\1d32000a\html\bookmarks\layui\lay\modules\form.js
  • %WINDIR%\1d32000a\html\bookmarks\layui\lay\modules\jquery.js
  • %WINDIR%\1d32000a\html\bookmarks\layui\css\layui.css
  • %WINDIR%\1d32000a\html\bookmarks\layui\lay\modules\laydate.js
  • %WINDIR%\1d32000a\html\downloads\layui\css\modules\laydate\default\laydate.css
  • %WINDIR%\1d32000a\html\downloads\images\sss.png
  • %WINDIR%\1d32000a\html\downloads\layui\css\modules\code.css
  • %WINDIR%\1d32000a\html\downloads\layui\css\layui.mobile.css
  • %WINDIR%\1d32000a\html\downloads\layui\css\layui.css
  • %WINDIR%\1d32000a\html\downloads\jquery.min.js
  • %WINDIR%\1d32000a\html\downloads\index.html
  • %WINDIR%\1d32000a\html\downloads\layui\css\modules\layer\default\layer.css
  • %WINDIR%\1d32000a\html\downloads\layui\css\modules\layer\default\icon-ext.png
  • %WINDIR%\1d32000a\html\downloads\layui\css\modules\layer\default\icon.png
  • %WINDIR%\1d32000a\html\downloads\images\sign_in_promo.svg
  • %WINDIR%\1d32000a\html\downloads\images\index.png
  • %WINDIR%\1d32000a\html\downloads\images\icon_clear.svg
  • %WINDIR%\1d32000a\html\downloads\images\fxh.png
  • %WINDIR%\1d32000a\html\downloads\images\del22.png
  • %WINDIR%\1d32000a\html\downloads\images\sign_in_promo_dark.svg
  • %WINDIR%\1d32000a\html\downloads\layui\css\modules\layer\default\loading-0.gif
  • %WINDIR%\1d32000a\html\downloads\layui\lay\modules\layedit.js
  • %WINDIR%\1d32000a\html\downloads\images\del.png
  • %WINDIR%\1d32000a\html\bookmarks\layui\lay\modules\layedit.js
  • %WINDIR%\1d32000a\html\downloads\layui\lay\modules\laydate.js
  • %WINDIR%\1d32000a\html\downloads\layui\lay\modules\jquery.js
  • %WINDIR%\1d32000a\html\downloads\layui\lay\modules\form.js
  • %WINDIR%\1d32000a\html\downloads\layui\lay\modules\flow.js
  • %WINDIR%\1d32000a\html\downloads\layui\lay\modules\element.js
  • %WINDIR%\1d32000a\html\downloads\layui\lay\modules\colorpicker.js
  • %WINDIR%\1d32000a\html\downloads\layui\lay\modules\code.js
  • %WINDIR%\1d32000a\html\downloads\layui\lay\modules\carousel.js
  • %WINDIR%\1d32000a\html\downloads\layui\font\iconfont.woff
  • %WINDIR%\1d32000a\html\downloads\layui\font\iconfont.ttf
  • %WINDIR%\1d32000a\html\downloads\layui\font\iconfont.svg
  • %WINDIR%\1d32000a\html\downloads\layui\font\iconfont.eot
  • %WINDIR%\1d32000a\html\downloads\layui\css\modules\layer\default\loading-2.gif
  • %WINDIR%\1d32000a\html\downloads\layui\css\modules\layer\default\loading-1.gif
  • %WINDIR%\1d32000a\html\downloads\images\ss.png
  • %WINDIR%\1d32000a\html\settings\layui\css\modules\layer\default\loading-0.gif
  • %WINDIR%\1d32000a\ico\5.ico
  • %WINDIR%\1d32000a\html\downloads\fonts\roboto-thin.ttf
  • %WINDIR%\1d32000a\html\bookmarks\simpletree.css
  • %WINDIR%\1d32000a\html\bookmarks\layui\layui.js
  • %WINDIR%\1d32000a\html\bookmarks\layui\layui.all.js
  • %WINDIR%\1d32000a\html\bookmarks\layui\lay\modules\util.js
  • %WINDIR%\1d32000a\html\bookmarks\layui\lay\modules\upload.js
  • %WINDIR%\1d32000a\html\bookmarks\test.css
  • %WINDIR%\1d32000a\html\bookmarks\layui\lay\modules\tree.js
  • %WINDIR%\1d32000a\html\bookmarks\layui\lay\modules\slider.js
  • %WINDIR%\1d32000a\html\bookmarks\layui\lay\modules\rate.js
  • %WINDIR%\1d32000a\html\bookmarks\layui\lay\modules\mobile.js
  • %WINDIR%\1d32000a\html\bookmarks\layui\lay\modules\laytpl.js
  • %WINDIR%\1d32000a\html\bookmarks\layui\lay\modules\laypage.js
  • %WINDIR%\1d32000a\html\bookmarks\layui\lay\modules\layer.js
  • %WINDIR%\1d32000a\html\bookmarks\layui\lay\modules\table.js
  • %WINDIR%\1d32000a\html\bookmarks\test.js
  • %WINDIR%\1d32000a\html\bookmarks\simpletree.js
  • %WINDIR%\1d32000a\html\bookmarks\theme\default\style.css
  • %WINDIR%\1d32000a\html\downloads\fonts\roboto-regular_0.ttf
  • %WINDIR%\1d32000a\html\crash\js\neterror.js
  • %WINDIR%\1d32000a\html\downloads\fonts\roboto-medium.ttf
  • %WINDIR%\1d32000a\html\downloads\fonts\roboto-light.ttf
  • %WINDIR%\1d32000a\html\downloads\fonts\roboto-bold_0.ttf
  • %WINDIR%\1d32000a\html\downloads\fonts\roboto-black.ttf
  • %WINDIR%\1d32000a\html\downloads\download.css
  • %WINDIR%\1d32000a\html\downloads\bootstrap.min.css
  • %WINDIR%\1d32000a\html\crash\js\fd7e782a.js
  • %WINDIR%\1d32000a\html\crash\css\neterror.css
  • %WINDIR%\1d32000a\html\crash\js\error.js
  • %WINDIR%\1d32000a\html\crash\js\162.js
  • %WINDIR%\1d32000a\html\crash\index.html
  • %WINDIR%\1d32000a\html\crash\images\st_node.png
  • %WINDIR%\1d32000a\html\crash\images\erroricon.png
  • %WINDIR%\1d32000a\html\crash\fonts\roboto-regular_0.ttf
  • %WINDIR%\1d32000a\html\downloads\images\default.png
  • %WINDIR%\1d32000a\ico\6.ico
Удаляет следующие файлы
  • %WINDIR%\1d32000a\xed.dat
Самоудаляется.
Сетевая активность
TCP
Запросы HTTP GET
  • http://fs.##0down.cn/GetCfg?V=#####################################################
  • http://bd.###ospital.com/FSBrowser20200608.7z?ve###############################################
UDP
  • DNS ASK fs.##0down.cn
  • DNS ASK bd.###ospital.com
  • DNS ASK rt.##0down.cn
  • '<LOCALNET>.50.250':9581
  • '<LOCALNET>.50.251':9581
  • '<LOCALNET>.50.252':9581
  • '<LOCALNET>.50.253':9581
  • '<LOCALNET>.50.254':9581
  • '<LOCALNET>.50.246':9581
  • '<LOCALNET>.50.1':9582
  • '<LOCALNET>.50.3':9582
  • '<LOCALNET>.50.4':9582
  • '<LOCALNET>.50.5':9582
  • '<LOCALNET>.50.6':9582
  • '<LOCALNET>.50.7':9582
  • '<LOCALNET>.50.8':9582
  • '<LOCALNET>.50.9':9582
  • '<LOCALNET>.50.10':9582
  • '<LOCALNET>.50.2':9582
  • '<LOCALNET>.50.11':9582
  • '<LOCALNET>.50.223':9581
  • '<LOCALNET>.50.249':9581
  • '<LOCALNET>.50.248':9581
  • '<LOCALNET>.50.245':9581
  • '<LOCALNET>.50.12':9582
  • '<LOCALNET>.50.227':9581
  • '<LOCALNET>.50.228':9581
  • '<LOCALNET>.50.229':9581
  • '<LOCALNET>.50.230':9581
  • '<LOCALNET>.50.231':9581
  • '<LOCALNET>.50.232':9581
  • '<LOCALNET>.50.224':9581
  • '<LOCALNET>.50.233':9581
  • '<LOCALNET>.50.235':9581
  • '<LOCALNET>.50.236':9581
  • '<LOCALNET>.50.237':9581
  • '<LOCALNET>.50.238':9581
  • '<LOCALNET>.50.239':9581
  • '<LOCALNET>.50.240':9581
  • '<LOCALNET>.50.241':9581
  • '<LOCALNET>.50.242':9581
  • '<LOCALNET>.50.234':9581
  • '<LOCALNET>.50.243':9581
  • '<LOCALNET>.50.244':9581
  • '<LOCALNET>.50.247':9581
  • '<LOCALNET>.50.14':9582
  • '<LOCALNET>.50.16':9582
  • '<LOCALNET>.50.17':9582
  • '<LOCALNET>.50.40':9582
  • '<LOCALNET>.50.41':9582
  • '<LOCALNET>.50.42':9582
  • '<LOCALNET>.50.43':9582
  • '<LOCALNET>.50.44':9582
  • '<LOCALNET>.50.45':9582
  • '<LOCALNET>.50.37':9582
  • '<LOCALNET>.50.46':9582
  • '<LOCALNET>.50.39':9582
  • '<LOCALNET>.50.48':9582
  • '<LOCALNET>.50.50':9582
  • '<LOCALNET>.50.51':9582
  • '<LOCALNET>.50.52':9582
  • '<LOCALNET>.50.53':9582
  • '<LOCALNET>.50.54':9582
  • '<LOCALNET>.50.55':9582
  • '<LOCALNET>.50.47':9582
  • '<LOCALNET>.50.35':9582
  • '<LOCALNET>.50.49':9582
  • '<LOCALNET>.50.38':9582
  • '<LOCALNET>.50.36':9582
  • '<LOCALNET>.50.34':9582
  • '<LOCALNET>.50.18':9582
  • '<LOCALNET>.50.19':9582
  • '<LOCALNET>.50.20':9582
  • '<LOCALNET>.50.21':9582
  • '<LOCALNET>.50.22':9582
  • '<LOCALNET>.50.23':9582
  • '<LOCALNET>.50.24':9582
  • '<LOCALNET>.50.25':9582
  • '<LOCALNET>.50.26':9582
  • '<LOCALNET>.50.27':9582
  • '<LOCALNET>.50.28':9582
  • '<LOCALNET>.50.29':9582
  • '<LOCALNET>.50.30':9582
  • '<LOCALNET>.50.31':9582
  • '<LOCALNET>.50.32':9582
  • '<LOCALNET>.50.33':9582
  • '<LOCALNET>.50.13':9582
  • '<LOCALNET>.50.15':9582
  • '<LOCALNET>.50.198':9581
  • '<LOCALNET>.50.226':9581
  • '<LOCALNET>.50.225':9581
  • '<LOCALNET>.50.221':9581
  • '<LOCALNET>.50.57':9582
  • '<LOCALNET>.50.150':9581
  • '<LOCALNET>.50.151':9581
  • '<LOCALNET>.50.152':9581
  • '<LOCALNET>.50.153':9581
  • '<LOCALNET>.50.154':9581
  • '<LOCALNET>.50.146':9581
  • '<LOCALNET>.50.155':9581
  • '<LOCALNET>.50.157':9581
  • '<LOCALNET>.50.149':9581
  • '<LOCALNET>.50.158':9581
  • '<LOCALNET>.50.160':9581
  • '<LOCALNET>.50.161':9581
  • '<LOCALNET>.50.162':9581
  • '<LOCALNET>.50.163':9581
  • '<LOCALNET>.50.164':9581
  • '<LOCALNET>.50.156':9581
  • '<LOCALNET>.50.145':9581
  • '<LOCALNET>.50.166':9581
  • '<LOCALNET>.50.159':9581
  • '<LOCALNET>.50.148':9581
  • '<LOCALNET>.50.144':9581
  • '<LOCALNET>.50.143':9581
  • '<LOCALNET>.50.127':9581
  • '<LOCALNET>.50.128':9581
  • '<LOCALNET>.50.129':9581
  • '<LOCALNET>.50.130':9581
  • '<LOCALNET>.50.131':9581
  • '<LOCALNET>.50.132':9581
  • '<LOCALNET>.50.133':9581
  • '<LOCALNET>.50.125':9581
  • '<LOCALNET>.50.134':9581
  • '<LOCALNET>.50.136':9581
  • '<LOCALNET>.50.137':9581
  • '<LOCALNET>.50.138':9581
  • '<LOCALNET>.50.139':9581
  • '<LOCALNET>.50.140':9581
  • '<LOCALNET>.50.141':9581
  • '<LOCALNET>.50.142':9581
  • '<LOCALNET>.50.165':9581
  • '<LOCALNET>.50.135':9581
  • '<LOCALNET>.50.124':9581
  • '<LOCALNET>.50.147':9581
  • '<LOCALNET>.50.167':9581
  • '<LOCALNET>.50.201':9581
  • '<LOCALNET>.50.170':9581
  • '<LOCALNET>.50.204':9581
  • '<LOCALNET>.50.205':9581
  • '<LOCALNET>.50.206':9581
  • '<LOCALNET>.50.207':9581
  • '<LOCALNET>.50.208':9581
  • '<LOCALNET>.50.209':9581
  • '<LOCALNET>.50.210':9581
  • '<LOCALNET>.50.211':9581
  • '<LOCALNET>.50.212':9581
  • '<LOCALNET>.50.213':9581
  • '<LOCALNET>.50.214':9581
  • '<LOCALNET>.50.215':9581
  • '<LOCALNET>.50.216':9581
  • '<LOCALNET>.50.217':9581
  • '<LOCALNET>.50.218':9581
  • '<LOCALNET>.50.219':9581
  • '<LOCALNET>.50.200':9581
  • '<LOCALNET>.50.168':9581
  • '<LOCALNET>.50.220':9581
  • '<LOCALNET>.50.203':9581
  • '<LOCALNET>.50.222':9581
  • '<LOCALNET>.50.202':9581
  • '<LOCALNET>.50.199':9581
  • '<LOCALNET>.50.171':9581
  • '<LOCALNET>.50.172':9581
  • '<LOCALNET>.50.173':9581
  • '<LOCALNET>.50.174':9581
  • '<LOCALNET>.50.175':9581
  • '<LOCALNET>.50.176':9581
  • '<LOCALNET>.50.177':9581
  • '<LOCALNET>.50.169':9581
  • '<LOCALNET>.50.178':9581
  • '<LOCALNET>.50.180':9581
  • '<LOCALNET>.50.190':9581
  • '<LOCALNET>.50.191':9581
  • '<LOCALNET>.50.192':9581
  • '<LOCALNET>.50.193':9581
  • '<LOCALNET>.50.194':9581
  • '<LOCALNET>.50.195':9581
  • '<LOCALNET>.50.196':9581
  • '<LOCALNET>.50.179':9581
  • '<LOCALNET>.50.197':9581
  • '<LOCALNET>.50.56':9582
  • '<LOCALNET>.50.58':9582
  • '<LOCALNET>.50.59':9582
  • '<LOCALNET>.50.61':9582
  • '<LOCALNET>.50.192':9582
  • '<LOCALNET>.50.193':9582
  • '<LOCALNET>.50.194':9582
  • '<LOCALNET>.50.195':9582
  • '<LOCALNET>.50.196':9582
  • '<LOCALNET>.50.197':9582
  • '<LOCALNET>.50.189':9582
  • '<LOCALNET>.50.198':9582
  • '<LOCALNET>.50.191':9582
  • '<LOCALNET>.50.200':9582
  • '<LOCALNET>.50.202':9582
  • '<LOCALNET>.50.203':9582
  • '<LOCALNET>.50.204':9582
  • '<LOCALNET>.50.205':9582
  • '<LOCALNET>.50.206':9582
  • '<LOCALNET>.50.207':9582
  • '<LOCALNET>.50.199':9582
  • '<LOCALNET>.50.208':9582
  • '<LOCALNET>.50.201':9582
  • '<LOCALNET>.50.190':9582
  • '<LOCALNET>.50.180':9582
  • '<LOCALNET>.50.179':9582
  • '<LOCALNET>.50.161':9582
  • '<LOCALNET>.50.162':9582
  • '<LOCALNET>.50.163':9582
  • '<LOCALNET>.50.164':9582
  • '<LOCALNET>.50.165':9582
  • '<LOCALNET>.50.166':9582
  • '<LOCALNET>.50.167':9582
  • '<LOCALNET>.50.159':9582
  • '<LOCALNET>.50.168':9582
  • '<LOCALNET>.50.170':9582
  • '<LOCALNET>.50.171':9582
  • '<LOCALNET>.50.172':9582
  • '<LOCALNET>.50.173':9582
  • '<LOCALNET>.50.174':9582
  • '<LOCALNET>.50.175':9582
  • '<LOCALNET>.50.176':9582
  • '<LOCALNET>.50.177':9582
  • '<LOCALNET>.50.169':9582
  • '<LOCALNET>.50.178':9582
  • '<LOCALNET>.50.209':9582
  • '<LOCALNET>.50.160':9582
  • '<LOCALNET>.50.210':9582
  • '<LOCALNET>.50.212':9582
  • '<LOCALNET>.50.236':9582
  • '<LOCALNET>.50.237':9582
  • '<LOCALNET>.50.238':9582
  • '<LOCALNET>.50.239':9582
  • '<LOCALNET>.50.240':9582
  • '<LOCALNET>.50.241':9582
  • '<LOCALNET>.50.242':9582
  • '<LOCALNET>.50.243':9582
  • '<LOCALNET>.50.235':9582
  • '<LOCALNET>.50.244':9582
  • '<LOCALNET>.50.246':9582
  • '<LOCALNET>.50.247':9582
  • '<LOCALNET>.50.248':9582
  • '<LOCALNET>.50.249':9582
  • '<LOCALNET>.50.250':9582
  • '<LOCALNET>.50.251':9582
  • '<LOCALNET>.50.252':9582
  • '<LOCALNET>.50.253':9582
  • '<LOCALNET>.50.245':9582
  • '<LOCALNET>.50.234':9582
  • '<LOCALNET>.50.233':9582
  • '<LOCALNET>.50.123':9581
  • '<LOCALNET>.50.213':9582
  • '<LOCALNET>.50.214':9582
  • '<LOCALNET>.50.215':9582
  • '<LOCALNET>.50.216':9582
  • '<LOCALNET>.50.217':9582
  • '<LOCALNET>.50.218':9582
  • '<LOCALNET>.50.219':9582
  • '<LOCALNET>.50.220':9582
  • '<LOCALNET>.50.221':9582
  • '<LOCALNET>.50.222':9582
  • '<LOCALNET>.50.223':9582
  • '<LOCALNET>.50.224':9582
  • '<LOCALNET>.50.225':9582
  • '<LOCALNET>.50.226':9582
  • '<LOCALNET>.50.227':9582
  • '<LOCALNET>.50.228':9582
  • '<LOCALNET>.50.229':9582
  • '<LOCALNET>.50.230':9582
  • '<LOCALNET>.50.231':9582
  • '<LOCALNET>.50.211':9582
  • '<LOCALNET>.50.232':9582
  • '<LOCALNET>.50.157':9582
  • '<LOCALNET>.50.255':9580
  • '<LOCALNET>.50.85':9582
  • '<LOCALNET>.50.86':9582
  • '<LOCALNET>.50.87':9582
  • '<LOCALNET>.50.96':9582
  • '<LOCALNET>.50.97':9582
  • '<LOCALNET>.50.98':9582
  • '<LOCALNET>.50.82':9582
  • '<LOCALNET>.50.99':9582
  • '<LOCALNET>.50.84':9582
  • '<LOCALNET>.50.101':9582
  • '<LOCALNET>.50.103':9582
  • '<LOCALNET>.50.104':9582
  • '<LOCALNET>.50.105':9582
  • '<LOCALNET>.50.106':9582
  • '<LOCALNET>.50.107':9582
  • '<LOCALNET>.50.108':9582
  • '<LOCALNET>.50.100':9582
  • '<LOCALNET>.50.109':9582
  • '<LOCALNET>.50.102':9582
  • '<LOCALNET>.50.83':9582
  • '<LOCALNET>.50.81':9582
  • '<LOCALNET>.50.80':9582
  • '<LOCALNET>.50.62':9582
  • '<LOCALNET>.50.63':9582
  • '<LOCALNET>.50.64':9582
  • '<LOCALNET>.50.65':9582
  • '<LOCALNET>.50.66':9582
  • '<LOCALNET>.50.67':9582
  • '<LOCALNET>.50.68':9582
  • '<LOCALNET>.50.60':9582
  • '<LOCALNET>.50.69':9582
  • '<LOCALNET>.50.71':9582
  • '<LOCALNET>.50.72':9582
  • '<LOCALNET>.50.73':9582
  • '<LOCALNET>.50.74':9582
  • '<LOCALNET>.50.75':9582
  • '<LOCALNET>.50.76':9582
  • '<LOCALNET>.50.77':9582
  • '<LOCALNET>.50.78':9582
  • '<LOCALNET>.50.70':9582
  • '<LOCALNET>.50.79':9582
  • '<LOCALNET>.50.110':9582
  • '<LOCALNET>.50.111':9582
  • '<LOCALNET>.50.112':9582
  • '<LOCALNET>.50.113':9582
  • '<LOCALNET>.50.137':9582
  • '<LOCALNET>.50.138':9582
  • '<LOCALNET>.50.139':9582
  • '<LOCALNET>.50.140':9582
  • '<LOCALNET>.50.141':9582
  • '<LOCALNET>.50.142':9582
  • '<LOCALNET>.50.143':9582
  • '<LOCALNET>.50.144':9582
  • '<LOCALNET>.50.145':9582
  • '<LOCALNET>.50.146':9582
  • '<LOCALNET>.50.147':9582
  • '<LOCALNET>.50.148':9582
  • '<LOCALNET>.50.149':9582
  • '<LOCALNET>.50.150':9582
  • '<LOCALNET>.50.151':9582
  • '<LOCALNET>.50.152':9582
  • '<LOCALNET>.50.153':9582
  • '<LOCALNET>.50.154':9582
  • '<LOCALNET>.50.156':9582
  • '<LOCALNET>.50.136':9582
  • '<LOCALNET>.50.126':9581
  • '<LOCALNET>.50.135':9582
  • '<LOCALNET>.50.155':9582
  • '<LOCALNET>.50.114':9582
  • '<LOCALNET>.50.115':9582
  • '<LOCALNET>.50.116':9582
  • '<LOCALNET>.50.117':9582
  • '<LOCALNET>.50.118':9582
  • '<LOCALNET>.50.119':9582
  • '<LOCALNET>.50.120':9582
  • '<LOCALNET>.50.121':9582
  • '<LOCALNET>.50.122':9582
  • '<LOCALNET>.50.123':9582
  • '<LOCALNET>.50.124':9582
  • '<LOCALNET>.50.125':9582
  • '<LOCALNET>.50.126':9582
  • '<LOCALNET>.50.127':9582
  • '<LOCALNET>.50.128':9582
  • '<LOCALNET>.50.129':9582
  • '<LOCALNET>.50.130':9582
  • '<LOCALNET>.50.131':9582
  • '<LOCALNET>.50.132':9582
  • '<LOCALNET>.50.134':9582
  • '<LOCALNET>.50.254':9580
  • '<LOCALNET>.50.122':9581
  • '<LOCALNET>.50.158':9582
  • '<LOCALNET>.50.115':9580
  • '<LOCALNET>.50.116':9580
  • '<LOCALNET>.50.117':9580
  • '<LOCALNET>.50.118':9580
  • '<LOCALNET>.50.119':9580
  • '<LOCALNET>.50.120':9580
  • '<LOCALNET>.50.112':9580
  • '<LOCALNET>.50.121':9580
  • '<LOCALNET>.50.114':9580
  • '<LOCALNET>.50.123':9580
  • '<LOCALNET>.50.125':9580
  • '<LOCALNET>.50.126':9580
  • '<LOCALNET>.50.127':9580
  • '<LOCALNET>.50.128':9580
  • '<LOCALNET>.50.129':9580
  • '<LOCALNET>.50.130':9580
  • '<LOCALNET>.50.122':9580
  • '<LOCALNET>.50.131':9580
  • '<LOCALNET>.50.124':9580
  • '<LOCALNET>.50.113':9580
  • '<LOCALNET>.50.111':9580
  • '<LOCALNET>.50.110':9580
  • '<LOCALNET>.50.85':9580
  • '<LOCALNET>.50.86':9580
  • '<LOCALNET>.50.87':9580
  • '<LOCALNET>.50.95':9580
  • '<LOCALNET>.50.96':9580
  • '<LOCALNET>.50.97':9580
  • '<LOCALNET>.50.98':9580
  • '<LOCALNET>.50.83':9580
  • '<LOCALNET>.50.99':9580
  • '<LOCALNET>.50.101':9580
  • '<LOCALNET>.50.102':9580
  • '<LOCALNET>.50.103':9580
  • '<LOCALNET>.50.104':9580
  • '<LOCALNET>.50.105':9580
  • '<LOCALNET>.50.106':9580
  • '<LOCALNET>.50.107':9580
  • '<LOCALNET>.50.108':9580
  • '<LOCALNET>.50.100':9580
  • '<LOCALNET>.50.109':9580
  • '<LOCALNET>.50.82':9580
  • '<LOCALNET>.50.84':9580
  • '<LOCALNET>.50.132':9580
  • '<LOCALNET>.50.136':9580
  • '<LOCALNET>.50.159':9580
  • '<LOCALNET>.50.160':9580
  • '<LOCALNET>.50.161':9580
  • '<LOCALNET>.50.162':9580
  • '<LOCALNET>.50.163':9580
  • '<LOCALNET>.50.164':9580
  • '<LOCALNET>.50.165':9580
  • '<LOCALNET>.50.157':9580
  • '<LOCALNET>.50.158':9580
  • '<LOCALNET>.50.166':9580
  • '<LOCALNET>.50.169':9580
  • '<LOCALNET>.50.170':9580
  • '<LOCALNET>.50.171':9580
  • '<LOCALNET>.50.172':9580
  • '<LOCALNET>.50.173':9580
  • '<LOCALNET>.50.174':9580
  • '<LOCALNET>.50.175':9580
  • '<LOCALNET>.50.167':9580
  • '<LOCALNET>.50.168':9580
  • '<LOCALNET>.50.156':9580
  • '<LOCALNET>.50.154':9580
  • '<LOCALNET>.50.80':9580
  • '<LOCALNET>.50.137':9580
  • '<LOCALNET>.50.138':9580
  • '<LOCALNET>.50.139':9580
  • '<LOCALNET>.50.140':9580
  • '<LOCALNET>.50.141':9580
  • '<LOCALNET>.50.142':9580
  • '<LOCALNET>.50.143':9580
  • '<LOCALNET>.50.144':9580
  • '<LOCALNET>.50.145':9580
  • '<LOCALNET>.50.146':9580
  • '<LOCALNET>.50.147':9580
  • '<LOCALNET>.50.148':9580
  • '<LOCALNET>.50.149':9580
  • '<LOCALNET>.50.150':9580
  • '<LOCALNET>.50.151':9580
  • '<LOCALNET>.50.152':9580
  • '<LOCALNET>.50.153':9580
  • '<LOCALNET>.50.133':9580
  • '<LOCALNET>.50.135':9580
  • '<LOCALNET>.50.134':9580
  • '<LOCALNET>.50.57':9580
  • '<LOCALNET>.50.81':9580
  • '<LOCALNET>.50.79':9580
  • '<LOCALNET>.50.17':9580
  • '<LOCALNET>.50.18':9580
  • '<LOCALNET>.50.19':9580
  • '<LOCALNET>.50.20':9580
  • '<LOCALNET>.50.21':9580
  • '<LOCALNET>.50.22':9580
  • '<LOCALNET>.50.14':9580
  • '<LOCALNET>.50.23':9580
  • '<LOCALNET>.50.16':9580
  • '<LOCALNET>.50.25':9580
  • '<LOCALNET>.50.27':9580
  • '<LOCALNET>.50.28':9580
  • '<LOCALNET>.50.29':9580
  • '<LOCALNET>.50.30':9580
  • '<LOCALNET>.50.31':9580
  • '<LOCALNET>.50.32':9580
  • '<LOCALNET>.50.24':9580
  • '<LOCALNET>.50.13':9580
  • '<LOCALNET>.50.26':9580
  • '<LOCALNET>.50.34':9580
  • '<LOCALNET>.50.12':9580
  • '<LOCALNET>.50.255':9581
  • '<LOCALNET>.50.255':9583
  • '<LOCALNET>.50.255':9584
  • '<LOCALNET>.50.255':9585
  • '<LOCALNET>.50.255':9586
  • '<LOCALNET>.50.255':9587
  • '<LOCALNET>.50.255':9588
  • '<LOCALNET>.50.255':9589
  • '<LOCALNET>.50.1':9580
  • '<LOCALNET>.50.2':9580
  • '<LOCALNET>.50.3':9580
  • '<LOCALNET>.50.4':9580
  • '<LOCALNET>.50.5':9580
  • '<LOCALNET>.50.6':9580
  • '<LOCALNET>.50.7':9580
  • '<LOCALNET>.50.8':9580
  • '<LOCALNET>.50.9':9580
  • '<LOCALNET>.50.10':9580
  • '<LOCALNET>.50.33':9580
  • '<LOCALNET>.50.255':9582
  • '<LOCALNET>.50.11':9580
  • '<LOCALNET>.50.35':9580
  • '<LOCALNET>.50.36':9580
  • '<LOCALNET>.50.60':9580
  • '<LOCALNET>.50.62':9580
  • '<LOCALNET>.50.63':9580
  • '<LOCALNET>.50.64':9580
  • '<LOCALNET>.50.65':9580
  • '<LOCALNET>.50.66':9580
  • '<LOCALNET>.50.67':9580
  • '<LOCALNET>.50.68':9580
  • '<LOCALNET>.50.69':9580
  • '<LOCALNET>.50.70':9580
  • '<LOCALNET>.50.71':9580
  • '<LOCALNET>.50.72':9580
  • '<LOCALNET>.50.73':9580
  • '<LOCALNET>.50.74':9580
  • '<LOCALNET>.50.75':9580
  • '<LOCALNET>.50.76':9580
  • '<LOCALNET>.50.77':9580
  • '<LOCALNET>.50.78':9580
  • '<LOCALNET>.50.59':9580
  • '<LOCALNET>.50.15':9580
  • '<LOCALNET>.50.61':9580
  • '<LOCALNET>.50.155':9580
  • '<LOCALNET>.50.176':9580
  • '<LOCALNET>.50.56':9580
  • '<LOCALNET>.50.38':9580
  • '<LOCALNET>.50.39':9580
  • '<LOCALNET>.50.40':9580
  • '<LOCALNET>.50.41':9580
  • '<LOCALNET>.50.42':9580
  • '<LOCALNET>.50.43':9580
  • '<LOCALNET>.50.44':9580
  • '<LOCALNET>.50.45':9580
  • '<LOCALNET>.50.37':9580
  • '<LOCALNET>.50.46':9580
  • '<LOCALNET>.50.48':9580
  • '<LOCALNET>.50.49':9580
  • '<LOCALNET>.50.50':9580
  • '<LOCALNET>.50.51':9580
  • '<LOCALNET>.50.52':9580
  • '<LOCALNET>.50.53':9580
  • '<LOCALNET>.50.54':9580
  • '<LOCALNET>.50.55':9580
  • '<LOCALNET>.50.47':9580
  • '<LOCALNET>.50.58':9580
  • '<LOCALNET>.50.254':9582
  • '<LOCALNET>.50.177':9580
  • '<LOCALNET>.50.179':9580
  • '<LOCALNET>.50.51':9581
  • '<LOCALNET>.50.52':9581
  • '<LOCALNET>.50.53':9581
  • '<LOCALNET>.50.54':9581
  • '<LOCALNET>.50.55':9581
  • '<LOCALNET>.50.56':9581
  • '<LOCALNET>.50.48':9581
  • '<LOCALNET>.50.57':9581
  • '<LOCALNET>.50.50':9581
  • '<LOCALNET>.50.59':9581
  • '<LOCALNET>.50.61':9581
  • '<LOCALNET>.50.62':9581
  • '<LOCALNET>.50.63':9581
  • '<LOCALNET>.50.64':9581
  • '<LOCALNET>.50.65':9581
  • '<LOCALNET>.50.66':9581
  • '<LOCALNET>.50.58':9581
  • '<LOCALNET>.50.67':9581
  • '<LOCALNET>.50.60':9581
  • '<LOCALNET>.50.49':9581
  • '<LOCALNET>.50.47':9581
  • '<LOCALNET>.50.46':9581
  • '<LOCALNET>.50.28':9581
  • '<LOCALNET>.50.29':9581
  • '<LOCALNET>.50.30':9581
  • '<LOCALNET>.50.31':9581
  • '<LOCALNET>.50.32':9581
  • '<LOCALNET>.50.33':9581
  • '<LOCALNET>.50.34':9581
  • '<LOCALNET>.50.26':9581
  • '<LOCALNET>.50.35':9581
  • '<LOCALNET>.50.37':9581
  • '<LOCALNET>.50.38':9581
  • '<LOCALNET>.50.39':9581
  • '<LOCALNET>.50.40':9581
  • '<LOCALNET>.50.41':9581
  • '<LOCALNET>.50.42':9581
  • '<LOCALNET>.50.43':9581
  • '<LOCALNET>.50.44':9581
  • '<LOCALNET>.50.36':9581
  • '<LOCALNET>.50.45':9581
  • '<LOCALNET>.50.25':9581
  • '<LOCALNET>.50.68':9581
  • '<LOCALNET>.50.70':9581
  • '<LOCALNET>.50.72':9581
  • '<LOCALNET>.50.103':9581
  • '<LOCALNET>.50.104':9581
  • '<LOCALNET>.50.105':9581
  • '<LOCALNET>.50.106':9581
  • '<LOCALNET>.50.107':9581
  • '<LOCALNET>.50.108':9581
  • '<LOCALNET>.50.109':9581
  • '<LOCALNET>.50.101':9581
  • '<LOCALNET>.50.110':9581
  • '<LOCALNET>.50.112':9581
  • '<LOCALNET>.50.113':9581
  • '<LOCALNET>.50.114':9581
  • '<LOCALNET>.50.115':9581
  • '<LOCALNET>.50.116':9581
  • '<LOCALNET>.50.117':9581
  • '<LOCALNET>.50.118':9581
  • '<LOCALNET>.50.119':9581
  • '<LOCALNET>.50.111':9581
  • '<LOCALNET>.50.99':9581
  • '<LOCALNET>.50.102':9581
  • '<LOCALNET>.50.27':9581
  • '<LOCALNET>.50.100':9581
  • '<LOCALNET>.50.120':9581
  • '<LOCALNET>.50.73':9581
  • '<LOCALNET>.50.74':9581
  • '<LOCALNET>.50.75':9581
  • '<LOCALNET>.50.76':9581
  • '<LOCALNET>.50.77':9581
  • '<LOCALNET>.50.78':9581
  • '<LOCALNET>.50.79':9581
  • '<LOCALNET>.50.80':9581
  • '<LOCALNET>.50.81':9581
  • '<LOCALNET>.50.82':9581
  • '<LOCALNET>.50.83':9581
  • '<LOCALNET>.50.84':9581
  • '<LOCALNET>.50.85':9581
  • '<LOCALNET>.50.86':9581
  • '<LOCALNET>.50.87':9581
  • '<LOCALNET>.50.96':9581
  • '<LOCALNET>.50.97':9581
  • '<LOCALNET>.50.69':9581
  • '<LOCALNET>.50.71':9581
  • '<LOCALNET>.50.98':9581
  • '<LOCALNET>.50.133':9582
  • '<LOCALNET>.50.24':9581
  • '<LOCALNET>.50.22':9581
  • '<LOCALNET>.50.214':9580
  • '<LOCALNET>.50.215':9580
  • '<LOCALNET>.50.216':9580
  • '<LOCALNET>.50.217':9580
  • '<LOCALNET>.50.218':9580
  • '<LOCALNET>.50.219':9580
  • '<LOCALNET>.50.211':9580
  • '<LOCALNET>.50.220':9580
  • '<LOCALNET>.50.213':9580
  • '<LOCALNET>.50.222':9580
  • '<LOCALNET>.50.224':9580
  • '<LOCALNET>.50.225':9580
  • '<LOCALNET>.50.226':9580
  • '<LOCALNET>.50.227':9580
  • '<LOCALNET>.50.228':9580
  • '<LOCALNET>.50.229':9580
  • '<LOCALNET>.50.221':9580
  • '<LOCALNET>.50.210':9580
  • '<LOCALNET>.50.223':9580
  • '<LOCALNET>.50.209':9580
  • '<LOCALNET>.50.208':9580
  • '<LOCALNET>.50.189':9580
  • '<LOCALNET>.50.191':9580
  • '<LOCALNET>.50.192':9580
  • '<LOCALNET>.50.193':9580
  • '<LOCALNET>.50.194':9580
  • '<LOCALNET>.50.195':9580
  • '<LOCALNET>.50.196':9580
  • '<LOCALNET>.50.197':9580
  • '<LOCALNET>.50.198':9580
  • '<LOCALNET>.50.190':9580
  • '<LOCALNET>.50.199':9580
  • '<LOCALNET>.50.201':9580
  • '<LOCALNET>.50.202':9580
  • '<LOCALNET>.50.203':9580
  • '<LOCALNET>.50.204':9580
  • '<LOCALNET>.50.205':9580
  • '<LOCALNET>.50.206':9580
  • '<LOCALNET>.50.207':9580
  • '<LOCALNET>.50.230':9580
  • '<LOCALNET>.50.200':9580
  • '<LOCALNET>.50.231':9580
  • '<LOCALNET>.50.212':9580
  • '<LOCALNET>.50.232':9580
  • '<LOCALNET>.50.3':9581
  • '<LOCALNET>.50.5':9581
  • '<LOCALNET>.50.6':9581
  • '<LOCALNET>.50.7':9581
  • '<LOCALNET>.50.8':9581
  • '<LOCALNET>.50.9':9581
  • '<LOCALNET>.50.10':9581
  • '<LOCALNET>.50.11':9581
  • '<LOCALNET>.50.12':9581
  • '<LOCALNET>.50.13':9581
  • '<LOCALNET>.50.14':9581
  • '<LOCALNET>.50.15':9581
  • '<LOCALNET>.50.16':9581
  • '<LOCALNET>.50.17':9581
  • '<LOCALNET>.50.18':9581
  • '<LOCALNET>.50.19':9581
  • '<LOCALNET>.50.20':9581
  • '<LOCALNET>.50.21':9581
  • '<LOCALNET>.50.2':9581
  • '<LOCALNET>.50.233':9580
  • '<LOCALNET>.50.4':9581
  • '<LOCALNET>.50.23':9581
  • '<LOCALNET>.50.178':9580
  • '<LOCALNET>.50.253':9580
  • '<LOCALNET>.50.235':9580
  • '<LOCALNET>.50.236':9580
  • '<LOCALNET>.50.237':9580
  • '<LOCALNET>.50.238':9580
  • '<LOCALNET>.50.239':9580
  • '<LOCALNET>.50.240':9580
  • '<LOCALNET>.50.241':9580
  • '<LOCALNET>.50.242':9580
  • '<LOCALNET>.50.234':9580
  • '<LOCALNET>.50.243':9580
  • '<LOCALNET>.50.245':9580
  • '<LOCALNET>.50.246':9580
  • '<LOCALNET>.50.247':9580
  • '<LOCALNET>.50.248':9580
  • '<LOCALNET>.50.249':9580
  • '<LOCALNET>.50.250':9580
  • '<LOCALNET>.50.251':9580
  • '<LOCALNET>.50.252':9580
  • '<LOCALNET>.50.244':9580
  • '<LOCALNET>.50.1':9581
  • '<LOCALNET>.50.121':9581
Другое
Создает и запускает на исполнение
  • '%WINDIR%\jlbeqk\eocfdb.exe'
  • '%WINDIR%\jlbeqk\eocfdb.exe' ' (со скрытым окном)
  • '%WINDIR%\syswow64\cmd.exe' cmd /c ping 127.0.0.1 &&cmd /c del "<Полный путь к файлу>" >> NUL' (со скрытым окном)
Запускает на исполнение
  • '%WINDIR%\syswow64\cmd.exe' cmd /c ping 127.0.0.1 &&cmd /c del "<Полный путь к файлу>" >> NUL
  • '%WINDIR%\syswow64\ping.exe' 127.0.0.1
  • '<SYSTEM32>\rundll32.exe' <SYSTEM32>\FirewallControlPanel.dll,ShowNotificationDialog /configure /ETOnly 0 /OnProfiles 6 /OtherAllowed 0 /OtherBlocked 0 /OtherEdgeAllowed 0 /NewBlocked 4 "%WINDIR%\jlbeqk\eocfdb.exe"
  • '%WINDIR%\syswow64\cmd.exe' /c del "<Полный путь к файлу>"

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Демо бесплатно

На 1 месяц (без регистрации) или 3 месяца (с регистрацией и скидкой на продление)

Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

Демо бесплатно

На 1 месяц (без регистрации) или 3 месяца (с регистрацией и скидкой на продление)

Скачать Dr.Web

По серийному номеру

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Демо бесплатно

На 1 месяц (без регистрации) или 3 месяца (с регистрацией и скидкой на продление)

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке

Российский разработчик антивирусов Dr.Web

Опыт разработки с 1992 года

Dr.Web пользуются в 200+ странах мира

Dr.Web в Реестре Отечественного ПО

Более 71% дохода компании — продажи бизнес-клиентам

Круглосуточная поддержка на русском языке

© «Доктор Веб»
2003 — 2020

«Доктор Веб» — российский производитель антивирусных средств защиты информации под маркой Dr.Web. Продукты Dr.Web разрабатываются с 1992 года.

125040, Россия, Москва, 3-я улица Ямского поля, вл.2, корп.12А