Trojan.DownLoader48.27985

Техническая информация

Сетевая активность

Подключается к

'ro##log.com':80
'x1.#.lencr.org':80
'up##ad7.ir':80
'apis.google.com':443
'up.##inak.ir':80
'pa##gig.com':80
'we##ozar.ir':80
'mo####x.rozup.ir':80
'up###dtak.com':80
'ee###rge.com':80
'te###ars.com':443
'al#######ogh-ir.persiangig.com':80
'te###ars.com':80
'8p#c.ir':80
'gi##ars.com':80
'1a##ar.ir':80
'ro##p.ir':443
'ne####.bootstrapcdn.com':80
'up.##inak.ir':443
'microsoft.com':80

TCP

Запросы HTTP GET

http://ro##log.com/images/closetb.gif
http://gi##ars.com/upload/14f4_%D9%87%D8%AF%D8%B1--%D9%84%D8%A7%D9%88-%D9%85%D9%88%D8%B2%DB%8C%DA%A9.png
http://1a##ar.ir/abzar/tools/alexa/alexa.png
http://1a##ar.ir/abzar/tools/alexa/2.jpg
http://ww##.#igpars.com/?ba#################################################################
http://up.##inak.ir/cod/java/plus1/g_plus.css
http://up.##inak.ir/cod/java/plus1/plusone.js
http://1a##ar.ir/abzar/tools/alexa/1.jpg
http://gi##ars.com/upload/6v24_ads.gif
http://up.##inak.ir/cod/java/plus1/close.png
http://en####.webgozar.ir/counter/xstat.aspx?t=##################################################################################################################################################...
http://gi##ars.com/upload/8lcv_46545768485190884897.gif
http://gi##ars.com/upload/0u39_summer-semester-registration-statement-300x259.jpg
http://up.##inak.ir/cod/java/plus1/gplus.gif
http://gi##ars.com/upload/2dnm_i_love_music_by_tosopc1997-d4farco.jpg
http://gi##ars.com/upload/glqx_yasishop.ir.gif
http://up.##inak.ir/cod/java/plus1/google_plus.gif
http://www.we###zar.com/counter/pic/stat1.gif
http://www.we##ozar.ir/c.aspx?Co####################
http://up###dtak.com/images/e8514_.gif
http://www.1a##ar.ir/abzar/tools/alexa/alexa-v2.php?ur##################################################
http://ad#.#ozblog.com/temp/site.css?37##
http://ne####.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css
http://ad#.#ozblog.com/temp/fonts/font_2516292_xczpj31d8bf.eot
http://gi##ars.com/upload/mjzk_%DA%86%D8%AA-%D8%B1%D9%88%D9%85.gif
http://1a##ar.ir/abzar/tools/loading/1/s%20(24).gif
http://gi##ars.com/upload/zim7_%D8%A8%DB%8C%D8%AA%D8%A7-%DA%86%D8%AA.gif
http://1a##ar.ir/abzar/tools/alexa/?bg#############################################################
http://ad#.#ozblog.com/image.php?si#######
http://ro##log.com/temp/music3/MTForumBlock_row_over.png
http://ax####.persiangig.com/image/Aks.Roz/008/lonely-broken-angle-by-Ax2Pix.tk%2812%29.jpg
http://ax####.persiangig.com/image/Love/new_folder20/lonely-girl-by-Ax2Pix.tk%284%29.jpg
http://1a##ar.ir/statx.htm
http://al#######ogh-ir.persiangig.com/ghaleb/alborzpatogh/mobile.png
http://al#######ogh-ir.persiangig.com/logo/3111113334444.gif
http://www.ee###rge.com/Administrator%5Cfiles%5CUploadFile%5C%D8%B4%D8%A7%D8%B1%DA%98%20%D8%B1%D8%A7%DB%8C%DA%AF%D8%A7%D9%86.gif
http://mo####x.rozup.ir/moisrex/style/qTip.js
http://www.te###ars.com/wp-content/uploads/2012/12/136131620623871_0ddd.jpg
http://x1.#.lencr.org/
http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt