Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Trojan.Starman.4737

Added to the Dr.Web virus database: 2014-04-29

Virus description added:

Technical Information

Malicious functions:
Executes the following:
  • '<SYSTEM32>\svchost.exe' -k netsvcs
  • '<SYSTEM32>\dumprep.exe' 1136 -dm 7 7 %TEMP%\WERbb70.dir00\svchost.exe.mdmp 16325836412032052
Terminates or attempts to terminate
the following system processes:
  • <SYSTEM32>\svchost.exe
Modifies file system :
Creates the following files:
  • %CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
  • %WINDIR%\Help\hwexrtne.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
  • %TEMP%\WERbb70.dir00\svchost.exe.mdmp
  • %CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
  • %CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
Network activity:
Connects to:
  • '66.##0.126.87':139
  • '66.##0.87.68':139
  • '66.##0.108.72':139
  • '66.##0.16.17':139
  • '66.##0.125.215':139
  • '66.##0.246.112':139
  • '66.##0.82.152':139
  • '66.##0.20.72':445
  • '66.##0.123.96':445
  • '66.##0.75.90':445
  • '66.##0.15.95':139
  • '66.##0.231.28':139
  • '66.##0.177.125':445
  • '66.##0.17.103':139
  • '66.##0.112.15':139
  • '66.##0.24.226':139
  • '66.##0.150.82':139
  • '66.##0.82.202':139
  • '66.##0.202.50':139
  • '66.##0.61.39':139
  • '66.##0.96.123':139
  • '66.##0.123.108':139
  • '66.##0.108.105':139
  • '66.##0.146.96':139
  • '66.##0.157.4':139
  • '66.##0.193.84':139
  • '66.##0.190.129':445
  • '66.##0.190.129':139
  • '66.##0.175.21':139
  • '66.##0.53.117':139
  • '66.##0.20.72':139
  • '66.##0.123.96':139
  • '66.##0.75.90':139
  • '66.##0.8.244':139
  • '66.##0.180.169':139
  • '66.##0.110.25':139
  • '66.##0.124.164':139
  • '66.##0.142.15':139
  • '66.##0.36.53':139
  • '66.##0.80.180':139
  • '66.##0.142.15':445
  • '66.##0.36.53':445
  • '66.##0.80.180':445
  • '66.##0.175.21':445
  • '66.##0.53.117':445
  • '66.##0.8.244':445
  • '66.##0.180.169':445
  • '66.##0.56.211':445
  • '66.##0.50.124':445
  • '66.##0.177.125':139
  • '66.##0.110.25':445
  • '66.##0.124.164':445
  • '66.##0.106.56':445
  • '66.##0.16.150':139
  • '66.##0.214.180':445
  • '66.##0.179.253':445
  • '66.##0.180.99':445
  • '66.##0.129.33':445
  • '66.##0.201.98':445
  • '66.##0.23.59':445
  • '66.##0.16.150':445
  • '66.##0.17.103':445
  • '66.##0.112.15':445
  • '66.##0.24.226':445
  • '66.##0.150.82':445
  • '66.##0.82.202':445
  • '66.##0.202.50':445
  • '66.##0.85.185':139
  • '66.##0.155.21':139
  • '66.##0.7.225':139
  • '66.##0.44.70':139
  • '66.##0.209.158':139
  • '66.##0.109.183':139
  • '66.##0.13.243':139
  • '66.##0.107.25':445
  • '66.##0.11.229':445
  • '66.##0.229.31':445
  • '66.##0.86.10':139
  • '66.##0.77.98':445
  • '66.##0.98.122':445
  • '66.##0.61.39':445
  • '66.##0.98.122':139
  • '66.##0.107.25':139
  • '66.##0.11.229':139
  • '66.##0.15.95':445
  • '66.##0.231.28':445
  • '66.##0.77.98':139
  • '66.##0.229.31':139
  • '66.##0.214.180':139
  • '66.##0.179.253':139
  • '66.##0.180.99':139
  • '66.##0.129.33':139
  • '66.##0.201.98':139
  • '66.##0.23.59':139
  • '66.##0.96.123':445
  • '66.##0.123.108':445
  • '66.##0.108.105':445
  • '66.##0.146.96':445
  • '66.##0.157.4':445
  • '66.##0.193.84':445
  • '66.##0.16.17':445
  • '66.##0.87.68':445
  • '66.##0.108.72':445
  • '66.##0.82.152':445
  • '66.##0.125.215':445
  • '66.##0.246.112':445
  • '66.##0.126.87':445
  • '66.##0.106.56':139
  • '66.##0.183.240':139
  • '66.##0.221.50':139
  • '66.##0.30.179':139
  • '66.##0.18.243':139
  • '66.##0.69.206':139
  • '66.##0.195.225':139
  • '66.#40.4.14':139
  • '66.##0.195.12':139
  • '66.##0.215.54':139
  • '66.##0.106.156':139
  • '66.##0.85.90':139
  • '66.##0.255.221':139
  • '66.##0.85.74':139
  • '66.##0.211.22':139
  • '66.##0.69.223':139
  • '66.##0.116.186':139
  • '66.##0.75.111':139
  • '66.##0.51.173':139
  • '66.##0.17.211':139
  • '66.##0.253.174':139
  • '66.##0.214.198':139
  • '66.##0.137.131':139
  • '66.##0.227.113':139
  • '66.##0.135.15':139
  • '66.##0.24.157':139
  • '66.##0.48.105':139
  • '66.##0.237.211':445
  • '66.##0.161.124':139
  • '66.##0.217.9':139
  • '66.##0.10.83':445
  • '66.##0.160.40':139
  • '66.##0.102.18':139
  • '66.##0.73.201':139
  • '66.##0.145.156':445
  • '66.##0.134.122':445
  • '66.##0.227.114':445
  • '66.##0.28.141':445
  • '66.##0.79.142':445
  • '66.##0.194.55':445
  • '66.##0.55.106':445
  • '66.##0.160.40':445
  • '66.##0.102.18':445
  • '66.##0.161.124':445
  • '66.##0.218.153':445
  • '66.##0.224.233':445
  • '66.##0.156.145':445
  • '66.##0.217.9':445
  • '66.##0.8.130':139
  • '66.##0.224.233':139
  • '66.##0.156.145':139
  • '66.##0.237.211':139
  • '66.##0.63.96':139
  • '66.##0.218.153':139
  • '66.##0.116.75':139
  • '66.##0.51.173':445
  • '66.##0.17.211':445
  • '66.##0.211.22':445
  • '66.##0.132.105':445
  • '66.##0.116.75':445
  • '66.##0.75.111':445
  • '66.##0.69.223':445
  • '66.##0.48.105':445
  • '66.##0.214.198':445
  • '66.##0.227.113':445
  • '66.##0.116.186':445
  • '66.##0.253.174':445
  • '66.##0.135.15':445
  • '66.##0.41.253':445
  • '66.##0.57.238':445
  • '66.##0.22.138':445
  • '66.##0.56.211':139
  • '66.##0.50.124':139
  • '66.##0.44.174':445
  • '66.##0.45.95':445
  • '66.##0.198.150':445
  • '66.##0.211.89':445
  • '66.##0.128.131':445
  • '66.#40.5.10':445
  • '66.##0.98.43':445
  • '66.##0.192.198':445
  • '66.##0.18.243':445
  • '66.##0.57.238':139
  • '66.##0.22.138':139
  • '66.##0.45.95':139
  • '66.##0.44.174':139
  • '66.##0.41.253':139
  • '66.##0.130.210':139
  • '66.#40.5.10':139
  • '66.##0.211.89':139
  • '66.##0.128.131':139
  • '66.##0.132.105':139
  • '66.##0.98.43':139
  • '66.##0.192.198':139
  • '66.##0.198.150':139
  • '66.##0.221.50':445
  • '66.##0.30.179':445
  • '66.##0.255.221':445
  • '66.##0.69.206':445
  • '66.##0.195.225':445
  • '66.##0.183.240':445
  • '66.##0.85.74':445
  • '66.##0.54.118':139
  • '66.##0.33.32':139
  • '66.##0.19.231':139
  • '66.##0.195.12':445
  • '66.##0.215.54':445
  • '66.##0.106.156':445
  • '66.#40.23.4':139
  • '66.##0.196.228':139
  • '66.##0.149.198':139
  • '66.##0.219.88':139
  • '66.##0.96.143':139
  • '66.##0.22.232':139
  • '66.##0.108.76':139
  • '66.##0.88.241':139
  • '66.##0.20.13':445
  • '66.##0.12.244':445
  • '66.##0.167.231':445
  • '66.##0.30.25':139
  • '66.##0.81.88':445
  • '66.##0.194.208':445
  • '66.##0.238.61':139
  • '66.##0.107.246':139
  • '66.##0.163.236':139
  • '66.##0.208.50':139
  • '66.##0.207.167':139
  • '66.##0.231.191':139
  • '66.##0.202.237':139
  • '66.##0.130.253':139
  • '66.##0.106.96':139
  • '66.##0.60.185':139
  • '66.##0.231.50':139
  • '66.##0.30.128':139
  • '66.##0.245.196':139
  • '66.##0.255.30':445
  • '66.##0.89.163':445
  • '66.##0.31.119':445
  • '66.##0.41.42':445
  • '66.##0.103.110':445
  • '66.##0.127.51':445
  • '66.##0.176.109':445
  • '66.##0.190.60':445
  • '66.##0.20.13':139
  • '66.##0.12.244':139
  • '66.##0.167.231':139
  • '66.##0.142.10':445
  • '66.##0.81.88':139
  • '66.##0.194.208':139
  • '66.##0.77.84':445
  • '66.##0.237.209':445
  • '66.##0.139.2':445
  • '66.##0.22.168':445
  • '66.##0.95.158':445
  • '66.##0.162.15':445
  • '66.##0.183.89':445
  • '66.##0.153.227':445
  • '66.##0.189.162':445
  • '66.##0.4.141':445
  • '66.##0.124.245':445
  • '66.##0.238.239':445
  • '66.##0.134.156':445
  • '66.##0.250.75':139
  • '66.##0.10.243':139
  • '66.##0.119.196':139
  • '66.##0.124.83':139
  • '66.##0.102.250':139
  • '66.##0.44.179':139
  • '66.##0.178.69':139
  • '66.##0.69.184':139
  • '66.##0.152.104':139
  • '66.##0.143.244':139
  • '66.##0.20.19':139
  • '66.##0.120.126':139
  • '66.##0.221.126':139
  • '66.##0.20.85':139
  • '66.##0.120.93':139
  • '66.##0.78.181':139
  • '66.##0.121.216':139
  • '66.##0.148.55':445
  • '66.##0.54.175':139
  • '66.##0.70.66':139
  • '66.##0.76.94':139
  • '66.##0.73.101':139
  • '66.##0.52.222':139
  • '66.##0.124.129':139
  • '66.##0.71.31':139
  • '66.##0.89.199':139
  • '66.##0.155.220':139
  • '66.##0.205.196':139
  • '66.##0.96.143':445
  • '66.##0.22.232':445
  • '66.##0.108.76':445
  • '66.##0.130.253':445
  • '66.##0.106.96':445
  • '66.##0.60.185':445
  • '66.##0.196.228':445
  • '66.##0.30.25':445
  • '66.##0.180.229':139
  • '66.##0.146.201':139
  • '66.##0.149.198':445
  • '66.##0.219.88':445
  • '66.##0.88.241':445
  • '66.##0.208.50':445
  • '66.##0.207.167':445
  • '66.##0.231.191':445
  • '66.##0.9.195':139
  • '66.##0.180.229':445
  • '66.##0.250.75':445
  • '66.##0.238.61':445
  • '66.##0.231.50':445
  • '66.##0.30.128':445
  • '66.##0.245.196':445
  • '66.##0.107.246':445
  • '66.##0.163.236':445
  • '66.##0.202.237':445
  • '66.##0.255.30':139
  • '66.##0.47.196':139
  • '66.##0.208.175':139
  • '66.##0.90.20':139
  • '66.##0.128.102':139
  • '66.##0.141.210':139
  • '66.##0.42.161':139
  • '66.##0.12.232':139
  • '66.##0.174.26':139
  • '66.##0.157.70':139
  • '66.##0.244.190':139
  • '66.##0.15.120':139
  • '66.##0.108.99':139
  • '66.##0.32.203':139
  • '66.##0.44.160':139
  • '66.##0.215.166':139
  • '66.##0.105.153':139
  • '66.##0.166.197':139
  • '66.##0.115.168':139
  • '66.##0.173.4':139
  • '66.##0.25.36':139
  • '66.##0.116.79':139
  • '66.##0.7.123':139
  • '66.##0.151.218':139
  • '66.##0.40.168':139
  • '66.##0.148.10':139
  • '66.##0.101.33':139
  • '66.##0.254.111':139
  • '66.##0.13.243':445
  • '66.##0.86.10':445
  • '66.##0.241.90':139
  • '66.##0.85.185':445
  • '66.##0.155.21':445
  • '66.##0.7.225':445
  • '66.##0.90.152':139
  • '66.##0.240.127':139
  • '66.##0.45.102':139
  • '66.##0.134.107':139
  • '66.##0.89.135':139
  • '66.##0.214.216':139
  • '66.#40.14.3':139
  • '66.##0.121.247':139
  • '66.##0.23.52':139
  • '66.##0.241.90':445
  • '66.##0.111.214':139
  • '66.##0.66.76':139
  • '66.##0.135.211':139
  • '66.##0.89.135':445
  • '66.##0.45.102':445
  • '66.##0.134.107':445
  • '66.#40.23.4':445
  • '66.##0.214.216':445
  • '66.#40.14.3':445
  • '66.##0.240.127':445
  • '66.##0.177.141':139
  • '66.##0.89.163':139
  • '66.##0.31.119':139
  • '66.##0.41.42':139
  • '66.##0.103.110':139
  • '66.##0.127.51':139
  • '66.##0.176.109':139
  • '66.##0.190.60':139
  • '66.##0.44.160':445
  • '66.##0.215.166':445
  • '66.##0.105.153':445
  • '66.##0.142.10':139
  • '66.##0.166.44':445
  • '66.##0.177.141':445
  • '66.##0.77.84':139
  • '66.##0.237.209':139
  • '66.##0.139.2':139
  • '66.##0.22.168':139
  • '66.##0.95.158':139
  • '66.##0.162.15':139
  • '66.##0.183.89':139
  • '66.##0.153.227':139
  • '66.##0.189.162':139
  • '66.##0.4.141':139
  • '66.##0.124.245':139
  • '66.##0.238.239':139
  • '66.##0.134.156':139
  • '66.##0.148.10':445
  • '66.##0.66.76':445
  • '66.##0.135.211':445
  • '66.##0.121.247':445
  • '66.##0.157.70':445
  • '66.##0.244.190':445
  • '66.##0.254.111':445
  • '66.##0.23.52':445
  • '66.##0.65.17':139
  • '66.##0.151.96':139
  • '66.##0.226.37':139
  • '66.##0.182.104':139
  • '66.##0.166.44':139
  • '66.##0.249.123':139
  • '66.##0.151.218':445
  • '66.##0.128.102':445
  • '66.##0.141.210':445
  • '66.##0.101.33':445
  • '66.##0.116.79':445
  • '66.##0.7.123':445
  • '66.##0.42.161':445
  • '66.##0.108.99':445
  • '66.##0.32.203':445
  • '66.##0.174.26':445
  • '66.##0.208.175':445
  • '66.##0.12.232':445
  • '66.##0.15.120':445
  • '66.##0.230.55':139
  • '66.##0.101.200':139
  • '66.##0.200.39':139
  • '66.##0.187.101':139
  • '66.##0.104.208':139
  • '66.##0.162.229':139
  • '66.##0.68.101':139
  • '66.##0.107.79':9988
  • '66.##0.191.222':9988
  • '66.##0.232.107':9988
  • '66.##0.80.10':9988
  • '66.##0.226.214':9988
  • '66.##0.70.141':9988
  • '66.##0.149.209':139
  • '66.##0.182.135':139
  • '66.##0.135.54':139
  • '66.##0.71.233':139
  • '66.##0.48.133':139
  • '66.##0.227.250':139
  • '66.##0.54.164':139
  • '66.##0.154.148':139
  • '66.##0.183.37':139
  • '66.##0.45.116':139
  • '66.##0.203.111':139
  • '66.##0.108.205':139
  • '66.##0.205.161':139
  • '66.##0.185.0':9988
  • '66.##0.59.141':9988
  • '66.##0.74.196':9988
  • '66.##0.94.56':9988
  • '66.##0.108.146':9988
  • '66.##0.79.235':9988
  • '66.##0.226.179':9988
  • '66.##0.64.211':9988
  • '66.##0.116.72':9988
  • '66.##0.77.47':9988
  • '66.##0.169.0':9988
  • '66.##0.12.33':9988
  • '66.##0.177.239':9988
  • '66.##0.12.67':9988
  • '66.##0.73.110':9988
  • '66.##0.53.171':9988
  • '66.##0.23.138':9988
  • '66.##0.17.140':9988
  • '66.##0.198.195':9988
  • '66.##0.108.74':9988
  • '66.##0.61.80':9988
  • '66.##0.152.223':9988
  • '66.##0.217.210':9988
  • '66.##0.39.32':9988
  • '66.##0.179.99':9988
  • '66.##0.171.216':9988
  • '66.##0.139.37':9988
  • '66.##0.24.142':139
  • '66.##0.187.101':445
  • '66.##0.104.208':445
  • '66.##0.162.229':445
  • '66.##0.154.148':445
  • '66.##0.183.37':445
  • '66.##0.45.116':445
  • '66.##0.230.55':445
  • '66.##0.63.95':139
  • '66.##0.95.153':139
  • '66.##0.116.253':139
  • '66.##0.101.200':445
  • '66.##0.200.39':445
  • '66.##0.68.101':445
  • '66.##0.71.233':445
  • '66.##0.48.133':445
  • '66.##0.227.250':445
  • '66.##0.216.121':445
  • '66.##0.63.127':445
  • '66.##0.24.142':445
  • '66.##0.149.209':445
  • '66.##0.203.111':445
  • '66.##0.108.205':445
  • '66.##0.205.161':445
  • '66.##0.182.135':445
  • '66.##0.135.54':445
  • '66.##0.54.164':445
  • '66.##0.56.183':139
  • '66.##0.2.251':139
  • '66.#40.7.13':139
  • '66.##0.56.237':139
  • '66.##0.232.33':139
  • '66.##0.47.225':139
  • '66.##0.225.64':139
  • '66.##0.101.90':139
  • '66.##0.62.171':139
  • '66.##0.216.121':139
  • '66.##0.63.127':139
  • '66.##0.222.96':139
  • '66.##0.74.66':139
  • '66.##0.66.62':139
  • '66.##0.252.135':139
  • '66.##0.241.78':139
  • '66.##0.48.183':139
  • '66.##0.230.161':139
  • '66.##0.161.185':139
  • '66.##0.142.208':139
  • '66.##0.139.234':139
  • '66.##0.17.218':139
  • '66.#40.1.9':139
  • '66.##0.96.99':139
  • '66.##0.170.39':139
  • '66.##0.45.109':139
  • '66.##0.250.37':139
  • '66.##0.78.97':9988
  • '66.##0.80.10':139
  • '66.##0.23.138':139
  • '66.##0.198.195':139
  • '66.##0.64.211':139
  • '66.##0.191.222':139
  • '66.##0.243.88':139
  • '66.##0.179.99':139
  • '66.##0.53.171':139
  • '66.##0.59.141':139
  • '66.##0.8.219':139
  • '66.##0.12.33':139
  • '66.##0.133.184':139
  • '66.##0.73.110':139
  • '66.##0.17.140':139
  • '66.##0.232.107':139
  • '66.##0.108.74':139
  • '66.##0.78.97':445
  • '66.##0.12.67':445
  • '66.##0.5.233':139
  • '66.##0.74.196':139
  • '66.##0.192.22':139
  • '66.##0.70.141':139
  • '66.##0.107.79':139
  • '66.##0.226.214':139
  • '66.##0.185.0':139
  • '66.##0.94.56':139
  • '66.##0.61.80':139
  • '66.##0.37.50':139
  • '66.##0.143.13':139
  • '66.##0.26.224':139
  • '66.##0.179.52':139
  • '66.##0.39.32':139
  • '66.##0.108.146':139
  • '66.##0.79.235':139
  • '66.##0.67.77':139
  • '66.##0.78.97':139
  • '66.##0.12.67':139
  • '66.##0.170.214':139
  • '66.##0.226.179':139
  • '66.##0.169.0':139
  • '66.##0.176.247':139
  • '66.##0.194.253':139
  • '66.##0.77.47':139
  • '66.##0.63.162':139
  • '66.##0.177.239':139
  • '66.##0.171.216':139
  • '66.##0.139.37':139
  • '66.##0.216.146':139
  • '66.##0.89.138':139
  • '66.##0.116.72':139
  • '66.##0.150.64':139
  • '66.##0.152.223':139
  • '66.##0.217.210':139
  • '66.##0.67.77':445
  • '66.##0.80.10':445
  • '66.##0.191.222':445
  • '66.##0.243.88':445
  • '66.##0.192.22':445
  • '66.##0.70.141':445
  • '66.##0.64.211':445
  • '66.##0.107.79':445
  • '66.##0.73.110':445
  • '66.##0.59.141':445
  • '66.##0.179.99':445
  • '66.##0.23.138':445
  • '66.##0.198.195':445
  • '66.##0.12.33':445
  • '66.##0.89.138':9988
  • '66.##0.37.50':9988
  • '66.##0.17.140':445
  • '66.##0.179.52':9988
  • '66.##0.67.77':9988
  • '66.##0.194.253':9988
  • '66.##0.232.107':445
  • '66.##0.5.233':445
  • '66.##0.226.214':445
  • '66.##0.185.0':445
  • '66.##0.74.196':445
  • '66.##0.94.56':445
  • '66.##0.108.74':445
  • '66.##0.133.184':445
  • '66.##0.179.52':445
  • '66.##0.39.32':445
  • '66.##0.108.146':445
  • '66.##0.216.146':445
  • '66.##0.89.138':445
  • '66.##0.116.72':445
  • '66.##0.37.50':445
  • '66.##0.226.179':445
  • '66.##0.170.214':445
  • '66.##0.169.0':445
  • '66.##0.26.224':445
  • '66.##0.143.13':445
  • '66.##0.79.235':445
  • '66.##0.177.239':445
  • '66.##0.63.162':445
  • '66.##0.171.216':445
  • '66.##0.53.171':445
  • '66.##0.8.219':445
  • '66.##0.61.80':445
  • '66.##0.176.247':445
  • '66.##0.150.64':445
  • '66.##0.152.223':445
  • '66.##0.217.210':445
  • '66.##0.77.47':445
  • '66.##0.194.253':445
  • '66.##0.139.37':445
  • '66.##0.62.171':445
  • '66.##0.156.159':139
  • '66.##0.32.102':139
  • '66.##0.113.201':139
  • '66.##0.231.154':139
  • '66.##0.93.119':139
  • '66.##0.213.86':139
  • '66.##0.36.180':139
  • '66.##0.28.18':139
  • '66.##0.221.244':139
  • '66.##0.23.80':139
  • '66.##0.187.143':139
  • '66.##0.10.149':139
  • '66.##0.11.203':139
  • '66.#40.78.5':139
  • '66.##0.46.237':139
  • '66.##0.226.130':139
  • '66.##0.2.165':139
  • '66.##0.30.151':139
  • '66.##0.178.128':139
  • '66.##0.31.110':139
  • '66.##0.251.141':139
  • '66.##0.254.103':139
  • '66.##0.104.61':139
  • '66.##0.236.68':139
  • '66.##0.68.18':139
  • '66.#40.52.8':139
  • '66.##0.74.93':139
  • '66.##0.22.135':445
  • '66.##0.0.164':445
  • '66.##0.29.98':445
  • '66.##0.164.61':445
  • '66.##0.138.222':445
  • '66.##0.40.199':445
  • '66.##0.61.203':445
  • '66.##0.91.14':445
  • '66.##0.121.169':445
  • '66.##0.165.9':445
  • '66.##0.200.27':445
  • '66.##0.218.201':445
  • '66.##0.247.90':445
  • '66.##0.6.116':139
  • '66.##0.116.17':445
  • '66.##0.116.17':139
  • '66.##0.145.165':139
  • '66.##0.120.53':139
  • '66.##0.172.5':139
  • '66.##0.117.217':445
  • '66.##0.196.119':445
  • '66.##0.119.104':445
  • '66.##0.115.164':445
  • '66.##0.116.30':445
  • '66.##0.38.199':445
  • '66.##0.23.164':445
  • '66.##0.76.145':139
  • '66.##0.251.141':445
  • '66.##0.231.154':445
  • '66.##0.93.119':445
  • '66.##0.236.68':445
  • '66.##0.68.18':445
  • '66.#40.52.8':445
  • '66.##0.213.86':445
  • '66.##0.36.180':445
  • '66.##0.187.143':445
  • '66.##0.11.203':445
  • '66.##0.156.159':445
  • '66.##0.32.102':445
  • '66.##0.113.201':445
  • '66.##0.120.123':445
  • '66.##0.35.42':445
  • '66.##0.148.238':445
  • '66.##0.7.101':445
  • '66.##0.25.250':445
  • '66.##0.96.182':445
  • '66.##0.76.145':445
  • '66.##0.46.237':445
  • '66.##0.226.130':445
  • '66.##0.31.110':445
  • '66.##0.2.165':445
  • '66.##0.30.151':445
  • '66.#40.78.5':445
  • '66.##0.28.18':445
  • '66.##0.28.141':139
  • '66.##0.7.101':139
  • '66.##0.25.250':139
  • '66.##0.134.122':139
  • '66.##0.227.114':139
  • '66.##0.143.141':139
  • '66.##0.96.182':139
  • '66.##0.148.238':139
  • '66.##0.185.76':445
  • '66.##0.185.76':139
  • '66.##0.120.123':139
  • '66.##0.14.127':139
  • '66.##0.35.42':139
  • '66.##0.145.165':445
  • '66.##0.120.53':445
  • '66.##0.172.5':445
  • '66.##0.221.244':445
  • '66.##0.23.80':445
  • '66.##0.74.93':445
  • '66.##0.6.116':445
  • '66.##0.79.142':139
  • '66.##0.194.55':139
  • '66.##0.55.106':139
  • '66.##0.10.83':139
  • '66.##0.8.127':139
  • '66.##0.145.156':139
  • '66.##0.39.247':445
  • '66.##0.199.212':139
  • '66.##0.66.46':139
  • '66.##0.166.139':139
  • '66.##0.103.87':139
  • '66.##0.217.223':139
  • '66.##0.223.199':139
  • '66.##0.39.78':139
  • '66.##0.31.146':139
  • '66.##0.45.229':445
  • '66.##0.128.63':139
  • '66.##0.27.128':139
  • '66.##0.22.175':139
  • '66.##0.158.245':139
  • '66.##0.9.135':139
  • '66.##0.134.145':139
  • '66.##0.198.231':139
  • '66.##0.136.163':139
  • '66.##0.69.209':139
  • '66.##0.208.9':139
  • '66.##0.162.143':139
  • '66.##0.18.99':139
  • '66.##0.62.249':139
  • '66.##0.44.180':139
  • '66.##0.17.189':139
  • '66.##0.104.188':139
  • '66.##0.186.188':139
  • '66.##0.63.95':445
  • '66.##0.232.33':445
  • '66.##0.47.225':445
  • '66.##0.225.64':445
  • '66.##0.17.218':445
  • '66.#40.1.9':445
  • '66.##0.96.99':445
  • '66.##0.2.251':445
  • '66.##0.222.96':445
  • '66.##0.74.66':445
  • '66.##0.66.62':445
  • '66.#40.7.13':445
  • '66.##0.56.237':445
  • '66.##0.101.90':445
  • '66.##0.230.161':445
  • '66.##0.161.185':445
  • '66.##0.142.208':445
  • '66.##0.95.153':445
  • '66.##0.116.253':445
  • '66.##0.56.183':445
  • '66.##0.252.135':445
  • '66.##0.170.39':445
  • '66.##0.45.109':445
  • '66.##0.250.37':445
  • '66.##0.241.78':445
  • '66.##0.48.183':445
  • '66.##0.139.234':445
  • '66.##0.220.27':139
  • '66.##0.44.180':445
  • '66.##0.103.87':445
  • '66.##0.217.223':445
  • '66.##0.186.188':445
  • '66.##0.18.99':445
  • '66.##0.62.249':445
  • '66.##0.223.199':445
  • '66.##0.39.78':445
  • '66.##0.27.128':445
  • '66.##0.22.175':445
  • '66.##0.199.212':445
  • '66.##0.66.46':445
  • '66.##0.166.139':445
  • '66.##0.220.27':445
  • '66.##0.136.163':445
  • '66.##0.69.209':445
  • '66.##0.76.218':445
  • '66.##0.35.62':445
  • '66.##0.94.41':445
  • '66.##0.208.9':445
  • '66.##0.162.143':445
  • '66.##0.17.189':445
  • '66.##0.104.188':445
  • '66.##0.9.135':445
  • '66.##0.134.145':445
  • '66.##0.198.231':445
  • '66.##0.158.245':445
  • '66.##0.200.27':139
  • '66.##0.218.201':139
  • '66.##0.247.90':139
  • '66.##0.0.164':139
  • '66.##0.29.98':139
  • '66.##0.61.203':139
  • '66.##0.91.14':139
  • '66.##0.76.218':139
  • '66.##0.35.62':139
  • '66.##0.94.41':139
  • '66.##0.121.169':139
  • '66.##0.165.9':139
  • '66.##0.39.247':139
  • '66.##0.116.30':139
  • '66.##0.38.199':139
  • '66.##0.23.164':139
  • '66.##0.31.146':445
  • '66.##0.128.63':445
  • '66.##0.117.217':139
  • '66.##0.196.119':139
  • '66.##0.138.222':139
  • '66.##0.40.199':139
  • '66.##0.22.135':139
  • '66.##0.119.104':139
  • '66.##0.115.164':139
  • '66.##0.164.61':139

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android