Trojan.DownLoader33.58113

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\metadata\f0accf77cdcbff39f6191887f6d2d357
%WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\content\f0accf77cdcbff39f6191887f6d2d357

Сетевая активность

Подключается к

'da##.71xe.com':445

TCP

Запросы HTTP GET

http://www.uc##g.com/statics/2018pc/css/style.css
http://www.uc##g.com/uploads/icon/jsduba.png
http://www.uc##g.com/uploads/icon/HaoZip.png
http://www.uc##g.com/uploads/icon/kuaizip.png
http://www.uc##g.com/uploads/icon/7-zip.png
http://www.uc##g.com/uploads/2019/0119/20190119094744233.png
http://www.uc##g.com/uploads/icon/yingyinxianfeng.png
http://www.uc##g.com/uploads/icon/bdplayer.png
http://www.uc##g.com/uploads/icon/qqmusic.png
http://www.uc##g.com/uploads/icon/kugou.png
http://www.uc##g.com/uploads/icon/wangyiyunyinyue.png
http://www.uc##g.com/uploads/icon/kuwo.png
http://www.uc##g.com/uploads/icon/360.png
http://www.uc##g.com/uploads/icon/360sd.jpg
http://www.uc##g.com/uploads/icon/QQLive.png
http://www.uc##g.com/uploads/icon/ludashi.png
http://www.uc##g.com/uploads/icon/GlaryUtilities.png
http://www.uc##g.com/uploads/icon/PartitionMagic.png
http://www.uc##g.com/uploads/icon/DiskGenius.png
http://www.uc##g.com/uploads/icon/meituxx.png
http://www.uc##g.com/uploads/icon/photoshop.png
http://www.uc##g.com/uploads/icon/2345ktw.png
http://www.uc##g.com/uploads/icon/guangyingkantu.jpg
http://www.uc##g.com/uploads/icon/qudongjingling.jpg
http://www.uc##g.com/uploads/icon/qudongrs.png
http://www.uc##g.com/uploads/icon/360qdds.png
http://www.uc##g.com/uploads/icon/iqyi.png
http://www.uc##g.com/uploads/icon/letv.png
http://www.uc##g.com/uploads/icon/Firefox.png
http://www.uc##g.com/uploads/icon/GoogleChrome.png
http://www.uc##g.com/uploads/icon/360sjzs.png
http://www.uc##g.com/uploads/icon/yxswz.png
http://www.uc##g.com/uploads/2019/0804/1908045d465d7f8c1fc.jpg
http://www.uc##g.com/uploads/icon/eyuyan.png
http://www.uc##g.com/uploads/icon/qqguanjia.png
http://www.uc##g.com/uploads/icon/360zip.png
http://www.uc##g.com/uploads/2019/1209/1912095dede19d3d6b3.jpg
http://www.uc##g.com/uploads/icon/bianfengyx.png
http://www.uc##g.com/uploads/icon/baofengjihuo.png
http://www.uc##g.com/uploads/icon/idm.png
http://www.uc##g.com/uploads/icon/xunlei9.png
http://www.uc##g.com/uploads/icon/uTorrent.png
http://www.uc##g.com/uploads/2019/0202/20190202114504136.png
http://www.uc##g.com/uploads/icon/qq.png
http://www.uc##g.com/uploads/icon/tim.png
http://www.uc##g.com/uploads/2018/1018/20181018050057486.jpg
http://www.uc##g.com/uploads/icon/weixin.png
http://www.uc##g.com/uploads/icon/baidusrf.jpg
http://www.uc##g.com/uploads/icon/sogousrf.jpg
http://www.uc##g.com/uploads/icon/qqsrf.jpg
http://www.uc##g.com/uploads/icon/iflysrf.jpg
http://www.uc##g.com/uploads/icon/qqwubi.png
http://www.uc##g.com/uploads/icon/sogouwubi.png
http://www.uc##g.com/uploads/icon/wnwubisrf.png
http://www.uc##g.com/uploads/icon/jpwb.png
http://www.uc##g.com/uploads/icon/360aqllq.png
http://www.uc##g.com/uploads/icon/DriverReviver.png
http://www.uc##g.com/uploads/2019/0326/20190326101817965.png
http://www.uc##g.com/uploads/icon/sogougsllq.png
http://www.uc##g.com/uploads/2020/0623/2006235ef2228dd0c66.png
http://www.uc##g.com/uploads/icon/yingyongbao.png
http://www.uc##g.com/uploads/icon/lkwgwukongfz.png
http://www.uc##g.com/uploads/icon/ucbugzmxy3.png
http://www.uc##g.com/uploads/icon/xiaoyaofz.png
http://www.uc##g.com/uploads/icon/jipinfz.png
http://www.uc##g.com/uploads/icon/wushenfz.png
http://www.uc##g.com/uploads/icon/weizhi.png
http://www.uc##g.com/uploads/icon/fuzhu.png
http://www.uc##g.com/uploads/icon/ucbugzmxy4.png
http://www.uc##g.com/uploads/icon/zmxy4cxfz.png
http://www.uc##g.com/uploads/icon/xiaowangxgq.png
http://www.uc##g.com/uploads/icon/ssjjaishangfz.png
http://www.uc##g.com/uploads/icon/ssjjwdfz.png
http://www.uc##g.com/uploads/icon/cangyxzs.png
http://www.uc##g.com/uploads/icon/canxiayxzs.png
http://www.uc##g.com/uploads/2019/0316/20190316023010422.png
http://www.uc##g.com/uploads/2019/0125/20190125102958869.png
http://www.uc##g.com/uploads/icon/yeshenmnq.png
http://www.uc##g.com/uploads/2018/1230/20181230054506220.jpg
http://www.uc##g.com/uploads/icon/mumumnq.png
http://www.uc##g.com/uploads/icon/xingxingmnq.png
http://www.uc##g.com/uploads/icon/LIRW.png
http://www.uc##g.com/uploads/icon/trainer.png
http://www.uc##g.com/img/beianicon.png
http://www.uc##g.com/caches/poster_js/17.js
http://www.uc##g.com/uploads/2020/0618/2006185eeb582e4fc76.png
http://www.uc##g.com/uploads/2019/0804/1908045d467a4fa0607.png
http://www.uc##g.com/uploads/2019/0508/1905085cd2f02f133ff.png
http://www.uc##g.com/uploads/icon/lkwg.png
http://www.uc##g.com/uploads/2018/1210/20181210031723994.png
http://www.uc##g.com/uploads/2020/0324/2003245e7970f209044.png
http://www.uc##g.com/uploads/2020/0102/2001025e0d9d359beb1.jpg
http://www.uc##g.com/uploads/icon/i4tools.jpg
http://www.uc##g.com/uploads/icon/zhifubao.png
http://www.uc##g.com/uploads/icon/baiduqianbao.png
http://www.uc##g.com/uploads/icon/jingdongjinrong.jpg
http://www.uc##g.com/uploads/icon/yizhifuapp.png
http://www.uc##g.com/uploads/2019/0104/20190104124246224.png
http://www.uc##g.com/uploads/2020/0609/2006095edef121830fc.jpg
http://www.uc##g.com/uploads/2019/0308/20190308112122718.png
http://www.uc##g.com/uploads/2019/0410/1904105cae0e60f3417.png
http://www.uc##g.com/uploads/2019/0602/1906025cf3479da255e.png
http://www.uc##g.com/uploads/2019/1220/1912205dfc4bf522af8.png
http://www.uc##g.com/uploads/2020/0329/2003295e80c101160ad.png
http://www.uc##g.com/uploads/2019/0511/1905115cd68762b594d.png
http://www.uc##g.com/uploads/2019/0717/1907175d2e8068e7a81.jpg
http://www.uc##g.com/uploads/2020/0106/2001065e12d42294bfd.jpg
http://www.uc##g.com/uploads/2019/0715/1907155d2c216bc1ee3.png
http://www.uc##g.com/uploads/icon/ARESVIRUS.png
http://www.uc##g.com/uploads/2019/1104/1911045dbf75f279937.jpg
http://www.uc##g.com/uploads/2019/0507/1905075cd19700f16a8.jpg
http://www.uc##g.com/uploads/2019/0112/20190112073218300.jpg
http://www.uc##g.com/uploads/2019/0201/20190201082255728.jpg
http://www.uc##g.com/uploads/2019/0328/20190328053004107.jpg
http://www.uc##g.com/uploads/2019/0301/20190301011945857.jpg
http://www.uc##g.com/uploads/2019/0516/1905165cdd110d42491.jpg
http://www.uc##g.com/uploads/2019/0619/1906195d0a553514a27.jpg
http://www.uc##g.com/uploads/2019/0801/1908015d4304089c3fd.jpg
http://www.uc##g.com/uploads/2019/1112/1911125dca62a6451cd.jpg
http://www.uc##g.com/uploads/2020/0525/2005255ecb8761058fe.jpg
http://www.uc##g.com/uploads/icon/huaweisjzs.png
http://www.uc##g.com/uploads/2018/1209/20181209091258534.png
http://www.uc##g.com/uploads/icon/MicroKMS.png
http://www.uc##g.com/uploads/icon/KMSTools.png
http://www.uc##g.com/uploads/2019/0831/1908315d69e5ff67829.png
http://www.uc##g.com/uploads/2020/0518/2005185ec1d6c8a4816.png
http://www.uc##g.com/uploads/2019/0619/1906195d098197156d7.png
http://www.uc##g.com/uploads/2020/0627/2006275ef70401159e1.png
http://www.uc##g.com/uploads/2019/0219/20190219104103252.png
http://www.uc##g.com/uploads/2020/0417/2004175e99ab5b6512f.png
http://www.uc##g.com/uploads/icon/ReNamerlite.png
http://www.uc##g.com/uploads/2019/0109/20190109013654747.png
http://www.uc##g.com/uploads/icon/Evernote.png
http://www.uc##g.com/uploads/2020/0529/2005295ed063ca87870.png
http://www.uc##g.com/uploads/2018/1122/20181122105257133.png
http://www.uc##g.com/uploads/2020/0219/2002195e4ca5747ea66.png
http://www.uc##g.com/uploads/2018/1020/20181020100720238.jpg
http://www.uc##g.com/uploads/2020/0627/2006275ef6e498a9706.jpg
http://www.uc##g.com/uploads/2018/1222/20181222113316706.png
http://www.uc##g.com/uploads/2019/0103/20190103092843556.png
http://www.uc##g.com/uploads/2020/0627/2006275ef6b8d3cf686.png
http://www.uc##g.com/uploads/2020/0627/2006275ef74719909b9.jpg
http://www.uc##g.com/uploads/2020/0627/2006275ef746af4b84f.jpg
http://www.uc##g.com/uploads/2020/0627/2006275ef7463aaaaf2.jpg
http://www.uc##g.com/uploads/2020/0627/2006275ef74596f24b2.jpg
http://www.uc##g.com/uploads/2020/0627/2006275ef712f47ff23.jpg
http://www.uc##g.com/uploads/2020/0627/2006275ef7121d56279.jpg
http://www.uc##g.com/uploads/2020/0414/2004145e95a8f0c6111.jpg
http://www.uc##g.com/uploads/2020/0209/2002095e4000da2a9ea.jpg
http://www.uc##g.com/uploads/icon/sjxunlei.png
http://www.uc##g.com/uploads/icon/weishi.png
http://www.uc##g.com/uploads/2019/0605/1906055cf713bae25fc.png
http://www.uc##g.com/uploads/icon/52pojie.png
http://www.uc##g.com/uploads/2020/0513/2005135ebb8be1092ee.jpg
http://www.uc##g.com/uploads/2019/0125/20190125104426153.png
http://www.uc##g.com/statics/2018pc/js/jquery.min.js
http://www.uc##g.com/statics/2018pc/js/plugin.js
http://www.uc##g.com/statics/2018pc/js/common.js
http://cd#.#2wq.com/scrtips/ucbug_8.29.js
http://www.uc##g.com/statics/2018pc/images/logo.png
http://www.uc##g.com/uploads/icon/ce.png
http://www.uc##g.com/uploads/2018/1130/20181130073527214.png
http://www.uc##g.com/uploads/2018/1228/20181228083419501.png
http://www.uc##g.com/uploads/2020/0415/2004155e96fe50615b9.png
http://www.uc##g.com/uploads/2020/0321/2003215e7583e42be6b.png
http://www.uc##g.com/uploads/2019/0916/1909165d7ee32bd82c1.jpg
http://www.uc##g.com/uploads/2020/0121/2001215e269ea8f2b8e.png
http://www.uc##g.com/statics/2018pc/js/html5.min.js
http://www.uc##g.com/uploads/icon/office2016.png
http://www.uc##g.com/uploads/2019/0302/20190302124354900.png
http://www.uc##g.com/uploads/icon/wps.png
http://www.uc##g.com/statics/2018pc/images/spr.png
http://www.uc##g.com/uploads/2020/0605/2006055ed9c073d15d4.png
http://www.uc##g.com/uploads/2020/0417/2004175e99656c52c0a.png
http://www.uc##g.com/uploads/2019/1224/1912245e0177ec19884.png
http://www.uc##g.com/uploads/2019/1212/1912125df23eecd9147.png
http://www.uc##g.com/uploads/2019/0915/1909155d7d846331262.png
http://www.uc##g.com/uploads/icon/SBgameHacker.png
http://www.uc##g.com/uploads/2019/0920/1909205d847704dbfc3.png
http://www.uc##g.com/uploads/icon/360shoujizs.png
http://www.uc##g.com/uploads/icon/xfplay.png
http://www.uc##g.com/caches/poster_js/1.js
http://www.uc##g.com/uploads/icon/zuoyebang.png
http://www.uc##g.com/uploads/icon/lkwgdgfz.png
http://www.uc##g.com/uploads/2020/0131/2001315e342f14be26d.jpg
http://www.uc##g.com/uploads/icon/zmxy5ucbug.png
http://www.uc##g.com/uploads/2020/0614/2006145ee5f9a69ca4e.png
http://www.uc##g.com/uploads/2020/0608/2006085ede1a184590b.png
http://www.uc##g.com/uploads/2020/0608/2006085ede190459a97.png
http://www.uc##g.com/uploads/icon/ditiepaokusy.png
http://www.uc##g.com/uploads/2020/0502/2005025ead1cde4afa1.png
http://www.uc##g.com/uploads/2020/0607/2006075edc4822c542c.png
http://www.uc##g.com/uploads/2020/0607/2006075edc424742262.png
http://www.uc##g.com/uploads/2019/1212/1912125df1a86d98e71.png
http://www.uc##g.com/uploads/2018/1220/20181220061901537.jpg
http://www.uc##g.com/uploads/icon/mingrizhsy.png
http://www.uc##g.com/uploads/2019/1015/1910155da5a391d852f.jpg
http://www.uc##g.com/uploads/icon/zmxyol.png
http://www.uc##g.com/uploads/icon/taobaobasy.png
http://www.uc##g.com/uploads/icon/id5.png
http://www.uc##g.com/uploads/icon/wzry.png
http://www.uc##g.com/uploads/icon/huoyingrzsy.png
http://www.uc##g.com/uploads/icon/smtw2sy.png
http://www.uc##g.com/uploads/2019/0814/1908145d541b67bd57f.jpg
http://www.uc##g.com/uploads/2019/0813/1908135d52cf1b3d2a8.png
http://www.uc##g.com/uploads/2019/0813/1908135d52bafd15a72.jpg
http://www.uc##g.com/uploads/2019/0127/20190127073013901.png
http://www.uc##g.com/uploads/2019/1128/1911285ddf45f9c962f.png
http://www.uc##g.com/uploads/2018/1231/20181231032657859.png
http://www.uc##g.com/uploads/2019/1113/1911135dcc1e9c674c4.png
http://www.uc##g.com/uploads/icon/AdobeAcrobat.png
http://www.uc##g.com/uploads/2019/0413/1904135cb137b6582dd.jpg
http://www.uc##g.com/uploads/2020/0627/2006275ef6be410b9de.jpg
http://www.uc##g.com/uploads/2020/0615/2006155ee7271f341ec.png
http://www.uc##g.com/uploads/2020/0627/2006275ef6bd41ed30e.jpg
http://www.uc##g.com/uploads/2020/0607/2006075edc48e18628b.png
http://www.uc##g.com/uploads/2020/0627/2006275ef7229baf771.png
http://www.uc##g.com/uploads/2019/0201/20190201120327391.png
http://www.uc##g.com/uploads/2020/0520/2005205ec4ec94937eb.png
http://www.uc##g.com/uploads/2020/0626/2006265ef5b86376ced.jpg
http://www.uc##g.com/uploads/2020/0626/2006265ef5b7e151ef8.jpg
http://www.uc##g.com/uploads/2020/0626/2006265ef5b76b87989.jpg
http://www.uc##g.com/uploads/2020/0626/2006265ef5b6c5192c5.jpg
http://www.uc##g.com/uploads/2020/0329/2003295e80bf1b06037.png
http://www.uc##g.com/uploads/2018/1222/20181222104823131.png
http://www.uc##g.com/uploads/2020/0202/2002025e3622ab79758.png
http://www.uc##g.com/uploads/2018/1214/20181214015321944.png
http://www.uc##g.com/uploads/2019/0601/1906015cf1e253f2089.png
http://www.uc##g.com/uploads/2018/1225/20181225031737481.png
http://www.uc##g.com/uploads/icon/dydsp.png
http://www.uc##g.com/uploads/2020/0527/2005275ecdc22c7d72b.png
http://www.uc##g.com/uploads/2019/0202/20190202122826867.png
http://www.uc##g.com/uploads/2019/0612/1906125d00591590eb0.png
http://www.uc##g.com/uploads/2019/0219/20190219122604631.png
http://www.uc##g.com/uploads/2019/0314/20190314090722192.png
http://www.uc##g.com/uploads/icon/OoklaSpeedtest.png
http://www.uc##g.com/uploads/2020/0620/2006205eede21e2c634.png
http://www.uc##g.com/uploads/icon/youku.png
http://www.uc##g.com/uploads/2020/0209/2002095e40068c5e83b.png
http://www.uc##g.com/uploads/icon/eswjglq.png
http://www.uc##g.com/uploads/2019/0915/1909155d7d893dc0f19.png
http://www.uc##g.com/uploads/2019/0614/1906145d037679daaeb.png
http://www.uc##g.com/uploads/2019/0720/1907205d3337d671b6d.png
http://www.uc##g.com/uploads/2019/0706/1907065d2044e25371e.png
http://www.uc##g.com/uploads/2020/0623/2006235ef220d49855f.png
http://www.uc##g.com/statics/2018pc/images/litterStar.png

'hm.##idu.com':443

UDP

DNS ASK uc##g.com
DNS ASK hm.##idu.com
DNS ASK cd#.#2wq.com
DNS ASK da##.71xe.com

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней