Bibliothèque
Ma bibliothèque

+ Ajouter à la bibliothèque

Contacter-nous !
Support 24/24 | Rules regarding submitting

Nous téléphoner

0 825 300 230

Forum

Vos requêtes

  • Toutes : -
  • Non clôturées : -
  • Dernière : le -

Nous téléphoner

0 825 300 230

Profil

Trojan.Carberp.2228

Added to the Dr.Web virus database: 2020-08-22

Virus description added:

Technical Information

To ensure autorun and distribution
Sets the following service settings
  • [<HKLM>\System\CurrentControlSet\Services\lhrgvact] 'ImagePath' = '<DRIVERS>\dJKl0Ug.sys'
Creates the following services
  • 'lhrgvact' <DRIVERS>\dJKl0Ug.sys
Malicious functions
Injects code into
the following system processes:
  • <SYSTEM32>\winlogon.exe
Reads files which store third party applications passwords
  • %HOMEPATH%\desktop\sdszfo.docx
  • %HOMEPATH%\desktop\fi51.doc
  • %HOMEPATH%\desktop\ovp25012015.doc
Modifies file system
Creates the following files
  • %WINDIR%\jkjfenjj\ldnbaccg.exe
  • %WINDIR%\j97r6al2\j97r6al2.bat
  • %WINDIR%\j97r6al2\j97r6al2.dll
  • %WINDIR%\dbicis.exe
  • %WINDIR%\jkjfenjj\vozhs\plngo.exe
  • %TEMP%\dalmbxw.txt
  • %WINDIR%\tzwsvs.dll
  • %WINDIR%\jkjfenjj\xpkdu\rrczj.exe
  • <DRIVERS>\djkl0ug.sys
  • %TEMP%\wbjdybt.txt
  • %WINDIR%\jkjfenjj\vozhs\plngo.txt
  • %WINDIR%\jkjfenjj\hzmgj\ovohw.exe
  • %TEMP%\uwzxurn.txt
  • %WINDIR%\inf\mcbuilder.exe
  • %WINDIR%\jkjfenjj\hzmgj\ovohw.txt
  • %WINDIR%\jkjfenjj\yhcsp\tqytd.exe
  • %TEMP%\oipwjcd.txt
  • %WINDIR%\jkjfenjj\xpkdu\rrczj.txt
  • %WINDIR%\jkjfenjj\yhcsp\tqytd.txt
  • %WINDIR%\jkjfenjj\flist.bin
  • %WINDIR%\jkjfenjj\nblbec.dll
  • %WINDIR%\jkjfenjj\nqzbjk.dll
  • %WINDIR%\jkjfenjj\xpkdu\cert
  • %WINDIR%\qitnno.dll
Deletes the following files
  • %WINDIR%\jkjfenjj\flist.bin
  • <DRIVERS>\djkl0ug.sys
  • %WINDIR%\j97r6al2\j97r6al2.dll
  • %WINDIR%\jkjfenjj\yhcsp\tqytd.exe
  • %WINDIR%\jkjfenjj\xpkdu\cert
  • %WINDIR%\jkjfenjj\vozhs\plngo.exe
Modifies the HOSTS file.
Deletes itself.
Network activity
Connects to
  • 'sb#####45.zdfghrr.xyz':80
  • 'localhost':7923
  • 'nm#####.hjkl45678.xyz':80
  • 'nq#####z.slt.cdntip.com':80
  • 'mp####.hjkl45678.xyz':80
TCP
HTTP GET requests
  • http://lm.##0down.cn/GetCfg?V=######################################################
  • http://do##.onefast.cc/cfg/cmc/qzpass.txt
  • http://do##.onefast.cc/cfg/cmc/slfdm.txt
  • http://11#.#29.33.201/report/report_data?da######################################################################################################################################################...
  • http://12#.#.0.1:7923/api/pac
  • http://i.####spital.com/qbcwo5
  • http://do##.onefast.cc/pgm/mds/05631e93ccdb00ee/f79e9e12124babd52a923e85354d41ce3a4cf3b5a251035d64.zip
  • http://11#.#29.33.201/report.php?ty##############################################################################################################################################################...
  • http://s.####spital.com/Biiq19
  • http://do##.onefast.cc/cfg/pub/ps.json
  • http://12#.#1.239.87/report.php?da###############################################################################################################################################################...
  • http://li##.58guyu.com/server/client/server.txt?58####################
  • http://do##.onefast.cc/cfg/user/c995ec7fd4f57c0d/ba0d3a0c64381620.json
  • http://sp#.#aidu.com/8aQDcjqpAAV3otqbppnN2DJv/api.php?qu##############################################################
  • http://ap##.#ame.qq.com/comm-htdocs/ip/get_ip.php
  • http://do##.onefast.cc/cfg/cmc/userpq.zip
  • http://xf.###ospital.com/pap/yjs20200107.txt?ve############################################################################################################
  • http://do##.onefast.cc/pgm/mpr/c995ec7fd4f57c0d/ba0d3a0c64381620.zip
  • http://xf.###ospital.com/pap/FP20200729.txt?ve############################################################################################################
  • http://xf.###ospital.com/pap/10080701.txt?ve############################################################################################################
  • http://xf.###ospital.com/pap/SNEW200725.txt?ve############################################################################################################
  • http://do##.onefast.cc/cfg/pub/ms.json
  • http://do##.onefast.cc/cfg/cmc/b2.txt
HTTP POST requests
  • http://47.##.143.174/AddReport
  • http://47.##0.92.121/d.dat
  • http://10#.#4.242.6/?c=###################
  • http://da##.58pap.com/addFp
  • http://i.####spital.com/Ji35qi
  • http://47.##2.210.175/d.dat
  • 'localhost':49200
  • UDP
    • DNS ASK lm.##0down.cn
    • DNS ASK nm#####.hjkl45678.xyz
    • DNS ASK sb#####45.zdfghrr.xyz
    • DNS ASK cl####.vbnm34567.xyz
    • DNS ASK li##.58guyu.com
    • DNS ASK s.####spital.com
    • DNS ASK sp#.#aidu.com
    • DNS ASK i.####spital.com
    • DNS ASK da##.58pap.com
    • DNS ASK ap##.#ame.qq.com
    • DNS ASK gs#####6.zhrhsfh.xyz
    • DNS ASK nq#####z.slt.cdntip.com
    • DNS ASK do##.####ast.cc.cdn.dnsv1.com
    • DNS ASK do##.onefast.cc
    • DNS ASK xf.###ospital.com
    • DNS ASK mp####.hjkl45678.xyz
    • DNS ASK sd#####56.zdtdddttg.xyz
    • '<LOCALNET>.20.107':6583
    • '<LOCALNET>.20.7':6580
    • '<LOCALNET>.20.114':6583
    • '<LOCALNET>.20.113':6583
    • '<LOCALNET>.20.112':6583
    • '<LOCALNET>.20.111':6583
    • '<LOCALNET>.20.110':6583
    • '<LOCALNET>.20.106':6583
    • '<LOCALNET>.20.115':6583
    • '<LOCALNET>.20.108':6583
    • '<LOCALNET>.20.105':6583
    • '<LOCALNET>.20.104':6583
    • '<LOCALNET>.20.103':6583
    • '<LOCALNET>.20.82':6583
    • '<LOCALNET>.20.109':6583
    • '<LOCALNET>.20.116':6583
    • '<LOCALNET>.20.126':6583
    • '<LOCALNET>.20.119':6583
    • '<LOCALNET>.20.117':6583
    • '<LOCALNET>.20.133':6583
    • '<LOCALNET>.20.132':6583
    • '<LOCALNET>.20.131':6583
    • '<LOCALNET>.20.130':6583
    • '<LOCALNET>.20.129':6583
    • '<LOCALNET>.20.128':6583
    • '<LOCALNET>.20.127':6583
    • '<LOCALNET>.20.102':6583
    • '<LOCALNET>.20.125':6583
    • '<LOCALNET>.20.124':6583
    • '<LOCALNET>.20.123':6583
    • '<LOCALNET>.20.122':6583
    • '<LOCALNET>.20.121':6583
    • '<LOCALNET>.20.120':6583
    • '<LOCALNET>.20.118':6583
    • '<LOCALNET>.20.101':6583
    • '<LOCALNET>.20.93':6583
    • '<LOCALNET>.20.99':6583
    • '<LOCALNET>.20.78':6583
    • '<LOCALNET>.20.66':6583
    • '<LOCALNET>.20.77':6583
    • '<LOCALNET>.20.76':6583
    • '<LOCALNET>.20.75':6583
    • '<LOCALNET>.20.74':6583
    • '<LOCALNET>.20.68':6583
    • '<LOCALNET>.20.67':6583
    • '<LOCALNET>.20.65':6583
    • '<LOCALNET>.20.58':6583
    • '<LOCALNET>.20.64':6583
    • '<LOCALNET>.20.63':6583
    • '<LOCALNET>.20.62':6583
    • '<LOCALNET>.20.61':6583
    • '<LOCALNET>.20.60':6583
    • '<LOCALNET>.20.134':6583
    • '<LOCALNET>.20.100':6583
    • '<LOCALNET>.20.79':6583
    • '<LOCALNET>.20.84':6583
    • '<LOCALNET>.20.98':6583
    • '<LOCALNET>.20.97':6583
    • '<LOCALNET>.20.81':6583
    • '<LOCALNET>.20.96':6583
    • '<LOCALNET>.20.95':6583
    • '<LOCALNET>.20.94':6583
    • '<LOCALNET>.20.80':6583
    • '<LOCALNET>.20.92':6583
    • '<LOCALNET>.20.91':6583
    • '<LOCALNET>.20.90':6583
    • '<LOCALNET>.20.89':6583
    • '<LOCALNET>.20.88':6583
    • '<LOCALNET>.20.87':6583
    • '<LOCALNET>.20.86':6583
    • '<LOCALNET>.20.85':6583
    • '<LOCALNET>.20.83':6583
    • '<LOCALNET>.20.135':6583
    • '<LOCALNET>.20.148':6583
    • '<LOCALNET>.20.141':6583
    • '<LOCALNET>.20.183':6583
    • '<LOCALNET>.20.139':6583
    • '<LOCALNET>.20.197':6583
    • '<LOCALNET>.20.196':6583
    • '<LOCALNET>.20.195':6583
    • '<LOCALNET>.20.194':6583
    • '<LOCALNET>.20.193':6583
    • '<LOCALNET>.20.192':6583
    • '<LOCALNET>.20.191':6583
    • '<LOCALNET>.20.190':6583
    • '<LOCALNET>.20.189':6583
    • '<LOCALNET>.20.188':6583
    • '<LOCALNET>.20.187':6583
    • '<LOCALNET>.20.186':6583
    • '<LOCALNET>.20.185':6583
    • '<LOCALNET>.20.200':6583
    • '<LOCALNET>.20.184':6583
    • '<LOCALNET>.20.198':6583
    • '<LOCALNET>.20.203':6583
    • '<LOCALNET>.20.182':6583
    • '<LOCALNET>.20.201':6583
    • '<LOCALNET>.20.216':6583
    • '<LOCALNET>.20.215':6583
    • '<LOCALNET>.20.214':6583
    • '<LOCALNET>.20.213':6583
    • '<LOCALNET>.20.212':6583
    • '<LOCALNET>.20.211':6583
    • '<LOCALNET>.20.210':6583
    • '<LOCALNET>.20.209':6583
    • '<LOCALNET>.20.208':6583
    • '<LOCALNET>.20.207':6583
    • '<LOCALNET>.20.206':6583
    • '<LOCALNET>.20.205':6583
    • '<LOCALNET>.20.204':6583
    • '<LOCALNET>.20.199':6583
    • '<LOCALNET>.20.138':6583
    • '<LOCALNET>.20.202':6583
    • '<LOCALNET>.20.157':6583
    • '<LOCALNET>.20.140':6583
    • '<LOCALNET>.20.179':6583
    • '<LOCALNET>.20.154':6583
    • '<LOCALNET>.20.153':6583
    • '<LOCALNET>.20.152':6583
    • '<LOCALNET>.20.151':6583
    • '<LOCALNET>.20.150':6583
    • '<LOCALNET>.20.149':6583
    • '<LOCALNET>.20.59':6583
    • '<LOCALNET>.20.147':6583
    • '<LOCALNET>.20.146':6583
    • '<LOCALNET>.20.145':6583
    • '<LOCALNET>.20.144':6583
    • '<LOCALNET>.20.143':6583
    • '<LOCALNET>.20.142':6583
    • '<LOCALNET>.20.181':6583
    • '<LOCALNET>.20.57':6583
    • '<LOCALNET>.20.155':6583
    • '<LOCALNET>.20.160':6583
    • '<LOCALNET>.20.180':6583
    • '<LOCALNET>.20.158':6583
    • '<LOCALNET>.20.178':6583
    • '<LOCALNET>.20.177':6583
    • '<LOCALNET>.20.176':6583
    • '<LOCALNET>.20.175':6583
    • '<LOCALNET>.20.174':6583
    • '<LOCALNET>.20.173':6583
    • '<LOCALNET>.20.172':6583
    • '<LOCALNET>.20.171':6583
    • '<LOCALNET>.20.170':6583
    • '<LOCALNET>.20.169':6583
    • '<LOCALNET>.20.168':6583
    • '<LOCALNET>.20.167':6583
    • '<LOCALNET>.20.166':6583
    • '<LOCALNET>.20.156':6583
    • '<LOCALNET>.20.159':6583
    • '<LOCALNET>.20.50':6583
    • '<LOCALNET>.20.253':6582
    • '<LOCALNET>.20.196':6582
    • '<LOCALNET>.20.54':6583
    • '<LOCALNET>.20.203':6582
    • '<LOCALNET>.20.202':6582
    • '<LOCALNET>.20.201':6582
    • '<LOCALNET>.20.200':6582
    • '<LOCALNET>.20.171':6582
    • '<LOCALNET>.20.199':6582
    • '<LOCALNET>.20.206':6582
    • '<LOCALNET>.20.197':6582
    • '<LOCALNET>.20.195':6582
    • '<LOCALNET>.20.194':6582
    • '<LOCALNET>.20.193':6582
    • '<LOCALNET>.20.192':6582
    • '<LOCALNET>.20.198':6582
    • '<LOCALNET>.20.207':6582
    • '<LOCALNET>.20.209':6582
    • '<LOCALNET>.20.210':6582
    • '<LOCALNET>.20.208':6582
    • '<LOCALNET>.20.224':6582
    • '<LOCALNET>.20.223':6582
    • '<LOCALNET>.20.222':6582
    • '<LOCALNET>.20.221':6582
    • '<LOCALNET>.20.220':6582
    • '<LOCALNET>.20.219':6582
    • '<LOCALNET>.20.218':6582
    • '<LOCALNET>.20.217':6582
    • '<LOCALNET>.20.216':6582
    • '<LOCALNET>.20.215':6582
    • '<LOCALNET>.20.214':6582
    • '<LOCALNET>.20.213':6582
    • '<LOCALNET>.20.212':6582
    • '<LOCALNET>.20.211':6582
    • '<LOCALNET>.20.191':6582
    • '<LOCALNET>.20.190':6582
    • '<LOCALNET>.20.189':6582
    • '<LOCALNET>.20.188':6582
    • '<LOCALNET>.20.167':6582
    • '<LOCALNET>.20.160':6582
    • '<LOCALNET>.20.166':6582
    • '<LOCALNET>.20.165':6582
    • '<LOCALNET>.20.164':6582
    • '<LOCALNET>.20.163':6582
    • '<LOCALNET>.20.162':6582
    • '<LOCALNET>.20.161':6582
    • '<LOCALNET>.20.159':6582
    • '<LOCALNET>.20.152':6582
    • '<LOCALNET>.20.158':6582
    • '<LOCALNET>.20.157':6582
    • '<LOCALNET>.20.156':6582
    • '<LOCALNET>.20.155':6582
    • '<LOCALNET>.20.154':6582
    • '<LOCALNET>.20.225':6582
    • '<LOCALNET>.20.169':6582
    • '<LOCALNET>.20.168':6582
    • '<LOCALNET>.20.173':6582
    • '<LOCALNET>.20.187':6582
    • '<LOCALNET>.20.186':6582
    • '<LOCALNET>.20.170':6582
    • '<LOCALNET>.20.185':6582
    • '<LOCALNET>.20.184':6582
    • '<LOCALNET>.20.183':6582
    • '<LOCALNET>.20.182':6582
    • '<LOCALNET>.20.181':6582
    • '<LOCALNET>.20.180':6582
    • '<LOCALNET>.20.179':6582
    • '<LOCALNET>.20.178':6582
    • '<LOCALNET>.20.177':6582
    • '<LOCALNET>.20.176':6582
    • '<LOCALNET>.20.175':6582
    • '<LOCALNET>.20.174':6582
    • '<LOCALNET>.20.172':6582
    • '<LOCALNET>.20.226':6582
    • '<LOCALNET>.20.227':6582
    • '<LOCALNET>.20.235':6582
    • '<LOCALNET>.20.18':6583
    • '<LOCALNET>.20.228':6582
    • '<LOCALNET>.20.32':6583
    • '<LOCALNET>.20.31':6583
    • '<LOCALNET>.20.30':6583
    • '<LOCALNET>.20.29':6583
    • '<LOCALNET>.20.28':6583
    • '<LOCALNET>.20.27':6583
    • '<LOCALNET>.20.26':6583
    • '<LOCALNET>.20.25':6583
    • '<LOCALNET>.20.24':6583
    • '<LOCALNET>.20.23':6583
    • '<LOCALNET>.20.22':6583
    • '<LOCALNET>.20.21':6583
    • '<LOCALNET>.20.20':6583
    • '<LOCALNET>.20.35':6583
    • '<LOCALNET>.20.19':6583
    • '<LOCALNET>.20.33':6583
    • '<LOCALNET>.20.38':6583
    • '<LOCALNET>.20.17':6583
    • '<LOCALNET>.20.36':6583
    • '<LOCALNET>.20.53':6583
    • '<LOCALNET>.20.52':6583
    • '<LOCALNET>.20.51':6583
    • '<LOCALNET>.20.251':6582
    • '<LOCALNET>.20.49':6583
    • '<LOCALNET>.20.48':6583
    • '<LOCALNET>.20.47':6583
    • '<LOCALNET>.20.46':6583
    • '<LOCALNET>.20.43':6583
    • '<LOCALNET>.20.42':6583
    • '<LOCALNET>.20.41':6583
    • '<LOCALNET>.20.40':6583
    • '<LOCALNET>.20.39':6583
    • '<LOCALNET>.20.34':6583
    • '<LOCALNET>.20.217':6583
    • '<LOCALNET>.20.37':6583
    • '<LOCALNET>.20.56':6583
    • '<LOCALNET>.20.234':6582
    • '<LOCALNET>.20.14':6583
    • '<LOCALNET>.20.248':6582
    • '<LOCALNET>.20.247':6582
    • '<LOCALNET>.20.246':6582
    • '<LOCALNET>.20.245':6582
    • '<LOCALNET>.20.244':6582
    • '<LOCALNET>.20.243':6582
    • '<LOCALNET>.20.242':6582
    • '<LOCALNET>.20.241':6582
    • '<LOCALNET>.20.240':6582
    • '<LOCALNET>.20.239':6582
    • '<LOCALNET>.20.238':6582
    • '<LOCALNET>.20.237':6582
    • '<LOCALNET>.20.236':6582
    • '<LOCALNET>.20.16':6583
    • '<LOCALNET>.20.55':6583
    • '<LOCALNET>.20.249':6582
    • '<LOCALNET>.20.254':6582
    • '<LOCALNET>.20.15':6583
    • '<LOCALNET>.20.252':6582
    • '<LOCALNET>.20.13':6583
    • '<LOCALNET>.20.12':6583
    • '<LOCALNET>.20.11':6583
    • '<LOCALNET>.20.10':6583
    • '<LOCALNET>.20.9':6583
    • '<LOCALNET>.20.8':6583
    • '<LOCALNET>.20.7':6583
    • '<LOCALNET>.20.6':6583
    • '<LOCALNET>.20.5':6583
    • '<LOCALNET>.20.4':6583
    • '<LOCALNET>.20.3':6583
    • '<LOCALNET>.20.2':6583
    • '<LOCALNET>.20.1':6583
    • '<LOCALNET>.20.250':6582
    • '<LOCALNET>.20.151':6582
    • '<LOCALNET>.20.238':6583
    • '<LOCALNET>.20.221':6583
    • '<LOCALNET>.20.220':6583
    • '<LOCALNET>.20.163':51923
    • '<LOCALNET>.20.162':56050
    • '<LOCALNET>.20.161':60049
    • '<LOCALNET>.20.160':64176
    • '<LOCALNET>.20.159':16074
    • '<LOCALNET>.20.156':53029
    • '<LOCALNET>.20.158':12011
    • '<LOCALNET>.20.157':57092
    • '<LOCALNET>.20.155':65350
    • '<LOCALNET>.20.154':61287
    • '<LOCALNET>.20.153':40832
    • '<LOCALNET>.20.152':36769
    • '<LOCALNET>.20.151':49090
    • '<LOCALNET>.20.164':47668
    • '<LOCALNET>.20.148':17743
    • '<LOCALNET>.20.165':43541
    • '<LOCALNET>.20.167':35415
    • '<LOCALNET>.20.182':63997
    • '<LOCALNET>.20.181':51614
    • '<LOCALNET>.20.180':55743
    • '<LOCALNET>.20.179':22696
    • '<LOCALNET>.20.178':18569
    • '<LOCALNET>.20.177':47462
    • '<LOCALNET>.20.176':43335
    • '<LOCALNET>.20.175':39204
    • '<LOCALNET>.20.174':35077
    • '<LOCALNET>.20.173':63970
    • '<LOCALNET>.20.172':59843
    • '<LOCALNET>.20.171':55712
    • '<LOCALNET>.20.170':51585
    • '<LOCALNET>.20.169':27545
    • '<LOCALNET>.20.168':31672
    • '<LOCALNET>.20.150':45027
    • '<LOCALNET>.20.149':13680
    • '<LOCALNET>.20.147':60469
    • '<LOCALNET>.20.129':42845
    • '<LOCALNET>.20.127':18067
    • '<LOCALNET>.20.126':22194
    • '<LOCALNET>.20.125':26321
    • '<LOCALNET>.20.124':30448
    • '<LOCALNET>.20.123':11660
    • '<LOCALNET>.20.122':15787
    • '<LOCALNET>.20.121':19914
    • '<LOCALNET>.20.120':13940
    • '<LOCALNET>.20.119':61966
    • '<LOCALNET>.20.118':57903
    • '<LOCALNET>.20.117':15157
    • '<LOCALNET>.20.116':11094
    • '<LOCALNET>.20.115':13186
    • '<LOCALNET>.20.114':19224
    • '<LOCALNET>.20.113':21316
    • '<LOCALNET>.20.146':64532
    • '<LOCALNET>.20.166':39542
    • '<LOCALNET>.20.183':59868
    • '<LOCALNET>.20.131':15577
    • '<LOCALNET>.20.128':46972
    • '<LOCALNET>.20.145':52343
    • '<LOCALNET>.20.144':56406
    • '<LOCALNET>.20.143':44209
    • '<LOCALNET>.20.142':48272
    • '<LOCALNET>.20.141':36083
    • '<LOCALNET>.20.140':40146
    • '<LOCALNET>.20.139':37996
    • '<LOCALNET>.20.138':33869
    • '<LOCALNET>.20.137':30114
    • '<LOCALNET>.20.136':25987
    • '<LOCALNET>.20.135':21984
    • '<LOCALNET>.20.134':17857
    • '<LOCALNET>.20.133':13606
    • '<LOCALNET>.20.132':19580
    • '<LOCALNET>.20.130':11450
    • '<LOCALNET>.20.6':6580
    • '<LOCALNET>.20.184':39227
    • '<LOCALNET>.20.186':47481
    • '<LOCALNET>.20.239':52540
    • '<LOCALNET>.20.238':56605
    • '<LOCALNET>.20.237':11506
    • '<LOCALNET>.20.236':15571
    • '<LOCALNET>.20.235':13349
    • '<LOCALNET>.20.234':17414
    • '<LOCALNET>.20.233':27766
    • '<LOCALNET>.20.232':31831
    • '<LOCALNET>.20.231':19508
    • '<LOCALNET>.20.230':23573
    • '<LOCALNET>.20.229':65037
    • '<LOCALNET>.20.228':60972
    • '<LOCALNET>.20.227':18232
    • '<LOCALNET>.20.226':14167
    • '<LOCALNET>.20.225':16257
    • '<LOCALNET>.20.240':50562
    • '<LOCALNET>.20.242':58816
    • '<LOCALNET>.20.111':29446
    • '<LOCALNET>.20.243':62945
    • '<LOCALNET>.20.255':6580
    • '<LOCALNET>.20.255':6581
    • '23#.#23.112.211':63398
    • '<LOCALNET>.20.255':6582
    • '<LOCALNET>.20.254':46647
    • '<LOCALNET>.20.253':50896
    • '<LOCALNET>.20.252':55025
    • '<LOCALNET>.20.251':59026
    • '<LOCALNET>.20.250':63155
    • '<LOCALNET>.20.249':21675
    • '<LOCALNET>.20.248':17546
    • '<LOCALNET>.20.247':46437
    • '<LOCALNET>.20.246':42308
    • '<LOCALNET>.20.245':38183
    • '<LOCALNET>.20.244':34054
    • '<LOCALNET>.20.224':12192
    • '<LOCALNET>.20.112':17253
    • '<LOCALNET>.20.223':24391
    • '<LOCALNET>.20.203':14629
    • '<LOCALNET>.20.201':16604
    • '<LOCALNET>.20.200':12475
    • '<LOCALNET>.20.199':31655
    • '<LOCALNET>.20.198':27526
    • '<LOCALNET>.20.197':39529
    • '<LOCALNET>.20.196':35400
    • '<LOCALNET>.20.195':47659
    • '<LOCALNET>.20.194':43530
    • '<LOCALNET>.20.193':56045
    • '<LOCALNET>.20.192':51916
    • '<LOCALNET>.20.191':64175
    • '<LOCALNET>.20.190':60046
    • '<LOCALNET>.20.189':18582
    • '<LOCALNET>.20.188':22711
    • '<LOCALNET>.20.187':43352
    • '<LOCALNET>.20.202':10500
    • '<LOCALNET>.20.185':35098
    • '<LOCALNET>.20.221':32517
    • '<LOCALNET>.20.205':23011
    • '<LOCALNET>.20.220':28452
    • '<LOCALNET>.20.219':43870
    • '<LOCALNET>.20.218':47999
    • '<LOCALNET>.20.217':19088
    • '<LOCALNET>.20.216':23217
    • '<LOCALNET>.20.215':27346
    • '<LOCALNET>.20.214':31475
    • '<LOCALNET>.20.213':12681
    • '<LOCALNET>.20.212':16810
    • '<LOCALNET>.20.211':10838
    • '<LOCALNET>.20.210':14967
    • '<LOCALNET>.20.209':39023
    • '<LOCALNET>.20.208':34894
    • '<LOCALNET>.20.207':31137
    • '<LOCALNET>.20.206':27008
    • '<LOCALNET>.20.222':20326
    • '<LOCALNET>.20.218':6583
    • '<LOCALNET>.20.204':18882
    • '<LOCALNET>.20.110':25383
    • '<LOCALNET>.20.13':15034
    • '<LOCALNET>.20.11':17005
    • '<LOCALNET>.20.10':12878
    • '<LOCALNET>.20.9':42622
    • '<LOCALNET>.20.8':46687
    • '<LOCALNET>.20.7':18352
    • '<LOCALNET>.20.240':6583
    • '<LOCALNET>.20.6':22417
    • '<LOCALNET>.20.5':26610
    • '<LOCALNET>.20.3':11945
    • '<LOCALNET>.20.2':16010
    • '<LOCALNET>.20.1':10102
    • '<LOCALNET>.20.255':6583
    • '<LOCALNET>.20.255':6584
    • '<LOCALNET>.20.12':10907
    • '<LOCALNET>.20.14':19037
    • '<LOCALNET>.20.30':27835
    • '<LOCALNET>.20.255':6586
    • '<LOCALNET>.20.15':23164
    • '<LOCALNET>.20.29':52899
    • '<LOCALNET>.20.28':56962
    • '<LOCALNET>.20.27':12141
    • '<LOCALNET>.20.26':16204
    • '<LOCALNET>.20.25':13988
    • '<LOCALNET>.20.24':18051
    • '<LOCALNET>.20.23':28649
    • '<LOCALNET>.20.22':32712
    • '<LOCALNET>.20.21':20395
    • '<LOCALNET>.20.20':24458
    • '<LOCALNET>.20.19':39920
    • '<LOCALNET>.20.18':35793
    • '<LOCALNET>.20.17':31294
    • '<LOCALNET>.20.16':27167
    • '<LOCALNET>.20.255':6585
    • '<LOCALNET>.20.4':30675
    • '<LOCALNET>.20.255':6587
    • '<LOCALNET>.20.255':6588
    • '<LOCALNET>.20.31':31898
    • '<LOCALNET>.20.230':6583
    • '<LOCALNET>.20.236':6583
    • '<LOCALNET>.20.235':6583
    • '<LOCALNET>.20.234':6583
    • '<LOCALNET>.20.233':6583
    • '<LOCALNET>.20.232':6583
    • '<LOCALNET>.20.231':6583
    • '<LOCALNET>.20.227':6583
    • '<LOCALNET>.20.153':6582
    • '<LOCALNET>.20.226':6583
    • '<LOCALNET>.20.225':6583
    • '<LOCALNET>.20.224':6583
    • '<LOCALNET>.20.223':6583
    • '<LOCALNET>.20.222':6583
    • '<LOCALNET>.20.239':6583
    • '<LOCALNET>.20.33':23768
    • '<LOCALNET>.20.241':6583
    • '<LOCALNET>.20.243':6583
    • '<LOCALNET>.20.255':6589
    • '<LOCALNET>.20.237':6583
    • '<LOCALNET>.20.1':6580
    • '<LOCALNET>.20.2':6580
    • '<LOCALNET>.20.3':6580
    • '<LOCALNET>.20.4':6580
    • '<LOCALNET>.20.252':6583
    • '<LOCALNET>.20.251':6583
    • '<LOCALNET>.20.250':6583
    • '<LOCALNET>.20.249':6583
    • '<LOCALNET>.20.248':6583
    • '<LOCALNET>.20.247':6583
    • '<LOCALNET>.20.246':6583
    • '<LOCALNET>.20.245':6583
    • '<LOCALNET>.20.244':6583
    • '<LOCALNET>.20.242':6583
    • '<LOCALNET>.20.34':11327
    • '<LOCALNET>.20.35':15390
    • '<LOCALNET>.20.36':13298
    • '<LOCALNET>.20.89':18653
    • '<LOCALNET>.20.88':12617
    • '<LOCALNET>.20.87':49318
    • '<LOCALNET>.20.86':53383
    • '<LOCALNET>.20.85':57572
    • '<LOCALNET>.20.84':61637
    • '<LOCALNET>.20.83':32802
    • '<LOCALNET>.20.82':36867
    • '<LOCALNET>.20.81':41056
    • '<LOCALNET>.20.80':45121
    • '<LOCALNET>.20.79':12630
    • '<LOCALNET>.20.78':18668
    • '<LOCALNET>.20.77':53400
    • '<LOCALNET>.20.76':49337
    • '<LOCALNET>.20.75':61658
    • '<LOCALNET>.20.109':49471
    • '<LOCALNET>.20.74':57595
    • '<LOCALNET>.20.73':36892
    • '<LOCALNET>.20.93':45843
    • '<LOCALNET>.20.90':33648
    • '<LOCALNET>.20.107':18534
    • '<LOCALNET>.20.106':12496
    • '<LOCALNET>.20.105':10280
    • '<LOCALNET>.20.104':14343
    • '<LOCALNET>.20.103':24693
    • '<LOCALNET>.20.102':28756
    • '<LOCALNET>.20.101':16439
    • '<LOCALNET>.20.100':20502
    • '<LOCALNET>.20.99':14798
    • '<LOCALNET>.20.98':10733
    • '<LOCALNET>.20.97':62359
    • '<LOCALNET>.20.96':58294
    • '<LOCALNET>.20.95':54229
    • '<LOCALNET>.20.94':50164
    • '<LOCALNET>.20.92':41778
    • '<LOCALNET>.20.219':6583
    • '<LOCALNET>.20.91':37713
    • '<LOCALNET>.20.108':53534
    • '<LOCALNET>.20.51':54844
    • '<LOCALNET>.20.50':50717
    • '<LOCALNET>.20.49':25605
    • '<LOCALNET>.20.48':29732
    • '<LOCALNET>.20.47':34251
    • '<LOCALNET>.20.46':38378
    • '<LOCALNET>.20.45':42377
    • '<LOCALNET>.20.44':46504
    • '<LOCALNET>.20.43':50511
    • '<LOCALNET>.20.42':54638
    • '<LOCALNET>.20.41':58637
    • '<LOCALNET>.20.40':62764
    • '<LOCALNET>.20.39':64914
    • '<LOCALNET>.20.38':60851
    • '<LOCALNET>.20.37':17361
    • '<LOCALNET>.20.70':41087
    • '<LOCALNET>.20.72':32829
    • '<LOCALNET>.20.71':45150
    • '<LOCALNET>.20.55':38584
    • '<LOCALNET>.20.52':58975
    • '<LOCALNET>.20.69':10716
    • '<LOCALNET>.20.68':14779
    • '<LOCALNET>.20.67':58281
    • '<LOCALNET>.20.66':62344
    • '<LOCALNET>.20.65':50155
    • '<LOCALNET>.20.64':54218
    • '<LOCALNET>.20.63':41773
    • '<LOCALNET>.20.62':45836
    • '<LOCALNET>.20.175':6581
    • '<LOCALNET>.20.60':37710
    • '<LOCALNET>.20.59':22324
    • '<LOCALNET>.20.58':18197
    • '<LOCALNET>.20.57':46842
    • '<LOCALNET>.20.56':42715
    • '<LOCALNET>.20.54':34457
    • '<LOCALNET>.20.53':63102
    • '<LOCALNET>.20.142':6582
    • '<LOCALNET>.20.150':6582
    • '<LOCALNET>.20.222':6580
    • '<LOCALNET>.20.221':6580
    • '<LOCALNET>.20.220':6580
    • '<LOCALNET>.20.219':6580
    • '<LOCALNET>.20.218':6580
    • '<LOCALNET>.20.217':6580
    • '<LOCALNET>.20.224':6580
    • '<LOCALNET>.20.223':6580
    • '<LOCALNET>.20.214':6580
    • '<LOCALNET>.20.213':6580
    • '<LOCALNET>.20.212':6580
    • '<LOCALNET>.20.211':6580
    • '<LOCALNET>.20.210':6580
    • '<LOCALNET>.20.209':6580
    • '<LOCALNET>.20.216':6580
    • '<LOCALNET>.20.188':6580
    • '<LOCALNET>.20.225':6580
    • '<LOCALNET>.20.241':6580
    • '<LOCALNET>.20.240':6580
    • '<LOCALNET>.20.239':6580
    • '<LOCALNET>.20.238':6580
    • '<LOCALNET>.20.237':6580
    • '<LOCALNET>.20.236':6580
    • '<LOCALNET>.20.235':6580
    • '<LOCALNET>.20.234':6580
    • '<LOCALNET>.20.233':6580
    • '<LOCALNET>.20.232':6580
    • '<LOCALNET>.20.231':6580
    • '<LOCALNET>.20.230':6580
    • '<LOCALNET>.20.229':6580
    • '<LOCALNET>.20.228':6580
    • '<LOCALNET>.20.227':6580
    • '<LOCALNET>.20.208':6580
    • '<LOCALNET>.20.215':6580
    • '<LOCALNET>.20.207':6580
    • '<LOCALNET>.20.206':6580
    • '<LOCALNET>.20.205':6580
    • '<LOCALNET>.20.173':6580
    • '<LOCALNET>.20.179':6580
    • '<LOCALNET>.20.178':6580
    • '<LOCALNET>.20.177':6580
    • '<LOCALNET>.20.176':6580
    • '<LOCALNET>.20.175':6580
    • '<LOCALNET>.20.174':6580
    • '<LOCALNET>.20.172':6580
    • '<LOCALNET>.20.186':6580
    • '<LOCALNET>.20.171':6580
    • '<LOCALNET>.20.170':6580
    • '<LOCALNET>.20.169':6580
    • '<LOCALNET>.20.168':6580
    • '<LOCALNET>.20.167':6580
    • '<LOCALNET>.20.166':6580
    • '<LOCALNET>.20.242':6580
    • '<LOCALNET>.20.226':6580
    • '<LOCALNET>.20.187':6580
    • '<LOCALNET>.20.190':6580
    • '<LOCALNET>.20.185':6580
    • '<LOCALNET>.20.204':6580
    • '<LOCALNET>.20.203':6580
    • '<LOCALNET>.20.202':6580
    • '<LOCALNET>.20.201':6580
    • '<LOCALNET>.20.200':6580
    • '<LOCALNET>.20.199':6580
    • '<LOCALNET>.20.198':6580
    • '<LOCALNET>.20.197':6580
    • '<LOCALNET>.20.196':6580
    • '<LOCALNET>.20.195':6580
    • '<LOCALNET>.20.194':6580
    • '<LOCALNET>.20.193':6580
    • '<LOCALNET>.20.192':6580
    • '<LOCALNET>.20.191':6580
    • '<LOCALNET>.20.189':6580
    • '<LOCALNET>.20.243':6580
    • '<LOCALNET>.20.244':6580
    • '<LOCALNET>.20.245':6580
    • '<LOCALNET>.20.51':6581
    • '<LOCALNET>.20.50':6581
    • '<LOCALNET>.20.49':6581
    • '<LOCALNET>.20.48':6581
    • '<LOCALNET>.20.47':6581
    • '<LOCALNET>.20.46':6581
    • '<LOCALNET>.20.45':6581
    • '<LOCALNET>.20.44':6581
    • '<LOCALNET>.20.43':6581
    • '<LOCALNET>.20.42':6581
    • '<LOCALNET>.20.41':6581
    • '<LOCALNET>.20.40':6581
    • '<LOCALNET>.20.39':6581
    • '<LOCALNET>.20.38':6581
    • '<LOCALNET>.20.37':6581
    • '<LOCALNET>.20.52':6581
    • '<LOCALNET>.20.54':6581
    • '<LOCALNET>.20.165':6580
    • '<LOCALNET>.20.55':6581
    • '<LOCALNET>.20.70':6581
    • '<LOCALNET>.20.69':6581
    • '<LOCALNET>.20.68':6581
    • '<LOCALNET>.20.67':6581
    • '<LOCALNET>.20.66':6581
    • '<LOCALNET>.20.65':6581
    • '<LOCALNET>.20.64':6581
    • '<LOCALNET>.20.63':6581
    • '<LOCALNET>.20.62':6581
    • '<LOCALNET>.20.61':6581
    • '<LOCALNET>.20.60':6581
    • '<LOCALNET>.20.59':6581
    • '<LOCALNET>.20.58':6581
    • '<LOCALNET>.20.57':6581
    • '<LOCALNET>.20.56':6581
    • '<LOCALNET>.20.36':6581
    • '<LOCALNET>.20.11':6581
    • '<LOCALNET>.20.35':6581
    • '<LOCALNET>.20.10':6581
    • '<LOCALNET>.20.8':6581
    • '<LOCALNET>.20.7':6581
    • '<LOCALNET>.20.6':6581
    • '<LOCALNET>.20.5':6581
    • '<LOCALNET>.20.4':6581
    • '<LOCALNET>.20.3':6581
    • '<LOCALNET>.20.2':6581
    • '<LOCALNET>.20.1':6581
    • '<LOCALNET>.20.254':6580
    • '<LOCALNET>.20.253':6580
    • '<LOCALNET>.20.252':6580
    • '<LOCALNET>.20.251':6580
    • '<LOCALNET>.20.250':6580
    • '<LOCALNET>.20.249':6580
    • '<LOCALNET>.20.246':6580
    • '<LOCALNET>.20.9':6581
    • '<LOCALNET>.20.71':6581
    • '<LOCALNET>.20.33':6581
    • '<LOCALNET>.20.12':6581
    • '<LOCALNET>.20.32':6581
    • '<LOCALNET>.20.31':6581
    • '<LOCALNET>.20.30':6581
    • '<LOCALNET>.20.29':6581
    • '<LOCALNET>.20.28':6581
    • '<LOCALNET>.20.27':6581
    • '<LOCALNET>.20.26':6581
    • '<LOCALNET>.20.25':6581
    • '<LOCALNET>.20.24':6581
    • '<LOCALNET>.20.105':6580
    • '<LOCALNET>.20.17':6581
    • '<LOCALNET>.20.16':6581
    • '<LOCALNET>.20.15':6581
    • '<LOCALNET>.20.14':6581
    • '<LOCALNET>.20.13':6581
    • '<LOCALNET>.20.34':6581
    • '<LOCALNET>.20.53':6581
    • '<LOCALNET>.20.18':6581
    • '<LOCALNET>.20.142':6580
    • '<LOCALNET>.20.59':6580
    • '<LOCALNET>.20.58':6580
    • '<LOCALNET>.20.57':6580
    • '<LOCALNET>.20.56':6580
    • '<LOCALNET>.20.55':6580
    • '<LOCALNET>.20.54':6580
    • '<LOCALNET>.20.61':6580
    • '<LOCALNET>.20.60':6580
    • '<LOCALNET>.20.51':6580
    • '<LOCALNET>.20.50':6580
    • '<LOCALNET>.20.49':6580
    • '<LOCALNET>.20.48':6580
    • '<LOCALNET>.20.47':6580
    • '<LOCALNET>.20.46':6580
    • '<LOCALNET>.20.53':6580
    • '<LOCALNET>.20.43':6580
    • '<LOCALNET>.20.62':6580
    • '<LOCALNET>.20.78':6580
    • '<LOCALNET>.20.77':6580
    • '<LOCALNET>.20.76':6580
    • '<LOCALNET>.20.75':6580
    • '<LOCALNET>.20.74':6580
    • '<LOCALNET>.20.73':6580
    • '<LOCALNET>.20.72':6580
    • '<LOCALNET>.20.71':6580
    • '<LOCALNET>.20.70':6580
    • '<LOCALNET>.20.25':6580
    • '<LOCALNET>.20.68':6580
    • '<LOCALNET>.20.67':6580
    • '<LOCALNET>.20.66':6580
    • '<LOCALNET>.20.65':6580
    • '<LOCALNET>.20.64':6580
    • '<LOCALNET>.20.45':6580
    • '<LOCALNET>.20.52':6580
    • '<LOCALNET>.20.44':6580
    • '<LOCALNET>.20.69':6580
    • '<LOCALNET>.20.42':6580
    • '<LOCALNET>.20.15':6580
    • '<LOCALNET>.20.23':6580
    • '<LOCALNET>.20.21':6580
    • '<LOCALNET>.20.20':6580
    • '<LOCALNET>.20.19':6580
    • '<LOCALNET>.20.17':6580
    • '<LOCALNET>.20.16':6580
    • '<LOCALNET>.20.18':6580
    • '<LOCALNET>.20.14':6580
    • '<LOCALNET>.20.13':6580
    • '<LOCALNET>.20.12':6580
    • '<LOCALNET>.20.11':6580
    • '<LOCALNET>.20.10':6580
    • '<LOCALNET>.20.9':6580
    • '<LOCALNET>.20.8':6580
    • '<LOCALNET>.20.79':6580
    • '<LOCALNET>.20.63':6580
    • '<LOCALNET>.20.35':6580
    • '<LOCALNET>.20.27':6580
    • '<LOCALNET>.20.24':6580
    • '<LOCALNET>.20.41':6580
    • '<LOCALNET>.20.40':6580
    • '<LOCALNET>.20.39':6580
    • '<LOCALNET>.20.38':6580
    • '<LOCALNET>.20.37':6580
    • '<LOCALNET>.20.36':6580
    • '<LOCALNET>.20.22':6580
    • '<LOCALNET>.20.34':6580
    • '<LOCALNET>.20.33':6580
    • '<LOCALNET>.20.32':6580
    • '<LOCALNET>.20.31':6580
    • '<LOCALNET>.20.30':6580
    • '<LOCALNET>.20.29':6580
    • '<LOCALNET>.20.28':6580
    • '<LOCALNET>.20.26':6580
    • '<LOCALNET>.20.80':6580
    • '<LOCALNET>.20.134':6580
    • '<LOCALNET>.20.82':6580
    • '<LOCALNET>.20.140':6580
    • '<LOCALNET>.20.139':6580
    • '<LOCALNET>.20.138':6580
    • '<LOCALNET>.20.137':6580
    • '<LOCALNET>.20.136':6580
    • '<LOCALNET>.20.135':6580
    • '<LOCALNET>.20.162':6580
    • '<LOCALNET>.20.133':6580
    • '<LOCALNET>.20.132':6580
    • '<LOCALNET>.20.131':6580
    • '<LOCALNET>.20.130':6580
    • '<LOCALNET>.20.129':6580
    • '<LOCALNET>.20.128':6580
    • '<LOCALNET>.20.127':6580
    • '<LOCALNET>.20.126':6580
    • '<LOCALNET>.20.141':6580
    • '<LOCALNET>.20.143':6580
    • '<LOCALNET>.20.163':6580
    • '<LOCALNET>.20.144':6580
    • '<LOCALNET>.20.161':6580
    • '<LOCALNET>.20.160':6580
    • '<LOCALNET>.20.159':6580
    • '<LOCALNET>.20.158':6580
    • '<LOCALNET>.20.157':6580
    • '<LOCALNET>.20.154':6580
    • '<LOCALNET>.20.153':6580
    • '<LOCALNET>.20.152':6580
    • '<LOCALNET>.20.151':6580
    • '<LOCALNET>.20.150':6580
    • '<LOCALNET>.20.149':6580
    • '<LOCALNET>.20.148':6580
    • '<LOCALNET>.20.147':6580
    • '<LOCALNET>.20.146':6580
    • '<LOCALNET>.20.145':6580
    • '<LOCALNET>.20.125':6580
    • '<LOCALNET>.20.164':6580
    • '<LOCALNET>.20.124':6580
    • '<LOCALNET>.20.104':6580
    • '<LOCALNET>.20.102':6580
    • '<LOCALNET>.20.101':6580
    • '<LOCALNET>.20.100':6580
    • '<LOCALNET>.20.99':6580
    • '<LOCALNET>.20.98':6580
    • '<LOCALNET>.20.97':6580
    • '<LOCALNET>.20.96':6580
    • '<LOCALNET>.20.95':6580
    • '<LOCALNET>.20.94':6580
    • '<LOCALNET>.20.93':6580
    • '<LOCALNET>.20.87':6580
    • '<LOCALNET>.20.86':6580
    • '<LOCALNET>.20.85':6580
    • '<LOCALNET>.20.84':6580
    • '<LOCALNET>.20.83':6580
    • '<LOCALNET>.20.103':6580
    • '<LOCALNET>.20.81':6580
    • '<LOCALNET>.20.122':6580
    • '<LOCALNET>.20.106':6580
    • '<LOCALNET>.20.121':6580
    • '<LOCALNET>.20.120':6580
    • '<LOCALNET>.20.119':6580
    • '<LOCALNET>.20.118':6580
    • '<LOCALNET>.20.117':6580
    • '<LOCALNET>.20.116':6580
    • '<LOCALNET>.20.115':6580
    • '<LOCALNET>.20.114':6580
    • '<LOCALNET>.20.113':6580
    • '<LOCALNET>.20.112':6580
    • '<LOCALNET>.20.111':6580
    • '<LOCALNET>.20.110':6580
    • '<LOCALNET>.20.109':6580
    • '<LOCALNET>.20.108':6580
    • '<LOCALNET>.20.107':6580
    • '<LOCALNET>.20.123':6580
    • '<LOCALNET>.20.149':6582
    • '<LOCALNET>.20.35':6582
    • '<LOCALNET>.20.74':6581
    • '<LOCALNET>.20.42':6582
    • '<LOCALNET>.20.40':6582
    • '<LOCALNET>.20.39':6582
    • '<LOCALNET>.20.38':6582
    • '<LOCALNET>.20.37':6582
    • '<LOCALNET>.20.36':6582
    • '<LOCALNET>.20.4':6582
    • '<LOCALNET>.20.148':6582
    • '<LOCALNET>.20.34':6582
    • '<LOCALNET>.20.32':6582
    • '<LOCALNET>.20.31':6582
    • '<LOCALNET>.20.30':6582
    • '<LOCALNET>.20.29':6582
    • '<LOCALNET>.20.28':6582
    • '<LOCALNET>.20.41':6582
    • '<LOCALNET>.20.43':6582
    • '<LOCALNET>.20.64':6582
    • '<LOCALNET>.20.26':6582
    • '<LOCALNET>.20.44':6582
    • '<LOCALNET>.20.63':6582
    • '<LOCALNET>.20.62':6582
    • '<LOCALNET>.20.61':6582
    • '<LOCALNET>.20.60':6582
    • '<LOCALNET>.20.59':6582
    • '<LOCALNET>.20.58':6582
    • '<LOCALNET>.20.57':6582
    • '<LOCALNET>.20.56':6582
    • '<LOCALNET>.20.55':6582
    • '<LOCALNET>.20.54':6582
    • '<LOCALNET>.20.53':6582
    • '<LOCALNET>.20.52':6582
    • '<LOCALNET>.20.51':6582
    • '<LOCALNET>.20.50':6582
    • '<LOCALNET>.20.27':6582
    • '<LOCALNET>.20.33':6582
    • '<LOCALNET>.20.25':6582
    • '<LOCALNET>.20.24':6582
    • '<LOCALNET>.20.65':6582
    • '<LOCALNET>.20.248':6581
    • '<LOCALNET>.20.254':6581
    • '<LOCALNET>.20.253':6581
    • '<LOCALNET>.20.252':6581
    • '<LOCALNET>.20.251':6581
    • '<LOCALNET>.20.250':6581
    • '<LOCALNET>.20.249':6581
    • '<LOCALNET>.20.247':6581
    • '<LOCALNET>.20.2':6582
    • '<LOCALNET>.20.246':6581
    • '<LOCALNET>.20.245':6581
    • '<LOCALNET>.20.244':6581
    • '<LOCALNET>.20.243':6581
    • '<LOCALNET>.20.242':6581
    • '<LOCALNET>.20.3':6582
    • '<LOCALNET>.20.66':6582
    • '<LOCALNET>.20.5':6582
    • '<LOCALNET>.20.7':6582
    • '<LOCALNET>.20.23':6582
    • '<LOCALNET>.20.1':6582
    • '<LOCALNET>.20.22':6582
    • '<LOCALNET>.20.21':6582
    • '<LOCALNET>.20.18':6582
    • '<LOCALNET>.20.17':6582
    • '<LOCALNET>.20.16':6582
    • '<LOCALNET>.20.15':6582
    • '<LOCALNET>.20.14':6582
    • '<LOCALNET>.20.13':6582
    • '<LOCALNET>.20.12':6582
    • '<LOCALNET>.20.11':6582
    • '<LOCALNET>.20.10':6582
    • '<LOCALNET>.20.9':6582
    • '<LOCALNET>.20.8':6582
    • '<LOCALNET>.20.6':6582
    • '<LOCALNET>.20.67':6582
    • '<LOCALNET>.20.68':6582
    • '<LOCALNET>.20.69':6582
    • '<LOCALNET>.20.124':6582
    • '<LOCALNET>.20.123':6582
    • '<LOCALNET>.20.122':6582
    • '<LOCALNET>.20.121':6582
    • '<LOCALNET>.20.120':6582
    • '<LOCALNET>.20.119':6582
    • '<LOCALNET>.20.118':6582
    • '<LOCALNET>.20.117':6582
    • '<LOCALNET>.20.116':6582
    • '<LOCALNET>.20.115':6582
    • '<LOCALNET>.20.114':6582
    • '<LOCALNET>.20.111':6582
    • '<LOCALNET>.20.110':6582
    • '<LOCALNET>.20.109':6582
    • '<LOCALNET>.20.108':6582
    • '<LOCALNET>.20.240':6581
    • '<LOCALNET>.20.107':6582
    • '<LOCALNET>.20.106':6582
    • '<LOCALNET>.20.128':6582
    • '<LOCALNET>.20.125':6582
    • '<LOCALNET>.20.147':6582
    • '<LOCALNET>.20.146':6582
    • '<LOCALNET>.20.145':6582
    • '<LOCALNET>.20.144':6582
    • '<LOCALNET>.20.143':6582
    • '<LOCALNET>.20.241':54691
    • '<LOCALNET>.20.5':6580
    • '<LOCALNET>.20.135':6582
    • '<LOCALNET>.20.134':6582
    • '<LOCALNET>.20.133':6582
    • '<LOCALNET>.20.132':6582
    • '<LOCALNET>.20.131':6582
    • '<LOCALNET>.20.130':6582
    • '<LOCALNET>.20.129':6582
    • '<LOCALNET>.20.127':6582
    • '<LOCALNET>.20.241':6581
    • '<LOCALNET>.20.126':6582
    • '<LOCALNET>.20.73':6581
    • '<LOCALNET>.20.84':6582
    • '<LOCALNET>.20.83':6582
    • '<LOCALNET>.20.82':6582
    • '<LOCALNET>.20.81':6582
    • '<LOCALNET>.20.80':6582
    • '<LOCALNET>.20.79':6582
    • '<LOCALNET>.20.78':6582
    • '<LOCALNET>.20.77':6582
    • '<LOCALNET>.20.76':6582
    • '<LOCALNET>.20.75':6582
    • '<LOCALNET>.20.74':6582
    • '<LOCALNET>.20.73':6582
    • '<LOCALNET>.20.72':6582
    • '<LOCALNET>.20.71':6582
    • '<LOCALNET>.20.70':6582
    • '<LOCALNET>.20.103':6582
    • '<LOCALNET>.20.105':6582
    • '<LOCALNET>.20.104':6582
    • '<LOCALNET>.20.88':6582
    • '<LOCALNET>.20.85':6582
    • '<LOCALNET>.20.102':6582
    • '<LOCALNET>.20.101':6582
    • '<LOCALNET>.20.100':6582
    • '<LOCALNET>.20.99':6582
    • '<LOCALNET>.20.98':6582
    • '<LOCALNET>.20.97':6582
    • '<LOCALNET>.20.96':6582
    • '<LOCALNET>.20.95':6582
    • '<LOCALNET>.20.94':6582
    • '<LOCALNET>.20.93':6582
    • '<LOCALNET>.20.92':6582
    • '<LOCALNET>.20.91':6582
    • '<LOCALNET>.20.90':6582
    • '<LOCALNET>.20.89':6582
    • '<LOCALNET>.20.87':6582
    • '<LOCALNET>.20.86':6582
    • '<LOCALNET>.20.239':6581
    • '<LOCALNET>.20.72':6581
    • '<LOCALNET>.20.136':6581
    • '<LOCALNET>.20.134':6581
    • '<LOCALNET>.20.133':6581
    • '<LOCALNET>.20.132':6581
    • '<LOCALNET>.20.131':6581
    • '<LOCALNET>.20.130':6581
    • '<LOCALNET>.20.129':6581
    • '<LOCALNET>.20.135':6581
    • '<LOCALNET>.20.128':6581
    • '<LOCALNET>.20.126':6581
    • '<LOCALNET>.20.125':6581
    • '<LOCALNET>.20.124':6581
    • '<LOCALNET>.20.123':6581
    • '<LOCALNET>.20.122':6581
    • '<LOCALNET>.20.121':6581
    • '<LOCALNET>.20.94':6581
    • '<LOCALNET>.20.127':6581
    • '<LOCALNET>.20.137':6581
    • '<LOCALNET>.20.120':6581
    • '<LOCALNET>.20.138':6581
    • '<LOCALNET>.20.152':6581
    • '<LOCALNET>.20.151':6581
    • '<LOCALNET>.20.150':6581
    • '<LOCALNET>.20.149':6581
    • '<LOCALNET>.20.148':6581
    • '<LOCALNET>.20.147':6581
    • '<LOCALNET>.20.146':6581
    • '<LOCALNET>.20.145':6581
    • '<LOCALNET>.20.144':6581
    • '<LOCALNET>.20.143':6581
    • '<LOCALNET>.20.142':6581
    • '<LOCALNET>.20.141':6581
    • '<LOCALNET>.20.140':6581
    • '<LOCALNET>.20.139':6581
    • '<LOCALNET>.20.153':6581
    • '<LOCALNET>.20.155':6581
    • '<LOCALNET>.20.119':6581
    • '<LOCALNET>.20.111':6581
    • '<LOCALNET>.20.82':6581
    • '<LOCALNET>.20.90':6581
    • '<LOCALNET>.20.89':6581
    • '<LOCALNET>.20.86':6581
    • '<LOCALNET>.20.85':6581
    • '<LOCALNET>.20.84':6581
    • '<LOCALNET>.20.83':6581
    • '<LOCALNET>.20.81':6581
    • '<LOCALNET>.20.92':6581
    • '<LOCALNET>.20.80':6581
    • '<LOCALNET>.20.79':6581
    • '<LOCALNET>.20.78':6581
    • '<LOCALNET>.20.77':6581
    • '<LOCALNET>.20.76':6581
    • '<LOCALNET>.20.75':6581
    • '<LOCALNET>.20.154':6581
    • '<LOCALNET>.20.118':6581
    • '<LOCALNET>.20.93':6581
    • '<LOCALNET>.20.96':6581
    • '<LOCALNET>.20.91':6581
    • '<LOCALNET>.20.110':6581
    • '<LOCALNET>.20.109':6581
    • '<LOCALNET>.20.108':6581
    • '<LOCALNET>.20.107':6581
    • '<LOCALNET>.20.106':6581
    • '<LOCALNET>.20.105':6581
    • '<LOCALNET>.20.104':6581
    • '<LOCALNET>.20.103':6581
    • '<LOCALNET>.20.102':6581
    • '<LOCALNET>.20.101':6581
    • '<LOCALNET>.20.100':6581
    • '<LOCALNET>.20.99':6581
    • '<LOCALNET>.20.98':6581
    • '<LOCALNET>.20.97':6581
    • '<LOCALNET>.20.95':6581
    • '<LOCALNET>.20.61':33647
    • '<LOCALNET>.20.156':6581
    • '<LOCALNET>.20.158':6581
    • '<LOCALNET>.20.218':6581
    • '<LOCALNET>.20.217':6581
    • '<LOCALNET>.20.216':6581
    • '<LOCALNET>.20.215':6581
    • '<LOCALNET>.20.214':6581
    • '<LOCALNET>.20.213':6581
    • '<LOCALNET>.20.212':6581
    • '<LOCALNET>.20.211':6581
    • '<LOCALNET>.20.210':6581
    • '<LOCALNET>.20.204':6581
    • '<LOCALNET>.20.203':6581
    • '<LOCALNET>.20.202':6581
    • '<LOCALNET>.20.201':6581
    • '<LOCALNET>.20.200':6581
    • '<LOCALNET>.20.199':6581
    • '<LOCALNET>.20.238':6581
    • '<LOCALNET>.20.198':6581
    • '<LOCALNET>.20.197':6581
    • '<LOCALNET>.20.222':6581
    • '<LOCALNET>.20.219':6581
    • '<LOCALNET>.20.236':6581
    • '<LOCALNET>.20.235':6581
    • '<LOCALNET>.20.234':6581
    • '<LOCALNET>.20.233':6581
    • '<LOCALNET>.20.232':6581
    • '<LOCALNET>.20.231':6581
    • '<LOCALNET>.20.230':6581
    • '<LOCALNET>.20.229':6581
    • '<LOCALNET>.20.228':6581
    • '<LOCALNET>.20.227':6581
    • '<LOCALNET>.20.226':6581
    • '<LOCALNET>.20.225':6581
    • '<LOCALNET>.20.224':6581
    • '<LOCALNET>.20.223':6581
    • '<LOCALNET>.20.221':6581
    • '<LOCALNET>.20.157':6581
    • '<LOCALNET>.20.220':6581
    • '<LOCALNET>.20.237':6581
    • '<LOCALNET>.20.173':6581
    • '<LOCALNET>.20.172':6581
    • '<LOCALNET>.20.171':6581
    • '<LOCALNET>.20.170':6581
    • '<LOCALNET>.20.169':6581
    • '<LOCALNET>.20.168':6581
    • '<LOCALNET>.20.167':6581
    • '<LOCALNET>.20.166':6581
    • '<LOCALNET>.20.165':6581
    • '<LOCALNET>.20.164':6581
    • '<LOCALNET>.20.163':6581
    • '<LOCALNET>.20.162':6581
    • '<LOCALNET>.20.161':6581
    • '<LOCALNET>.20.160':6581
    • '<LOCALNET>.20.159':6581
    • '<LOCALNET>.20.194':6581
    • '<LOCALNET>.20.196':6581
    • '<LOCALNET>.20.195':6581
    • '<LOCALNET>.20.177':6581
    • '<LOCALNET>.20.174':6581
    • '<LOCALNET>.20.193':6581
    • '<LOCALNET>.20.192':6581
    • '<LOCALNET>.20.191':6581
    • '<LOCALNET>.20.190':6581
    • '<LOCALNET>.20.189':6581
    • '<LOCALNET>.20.188':6581
    • '<LOCALNET>.20.187':6581
    • '<LOCALNET>.20.186':6581
    • '<LOCALNET>.20.185':6581
    • '<LOCALNET>.20.184':6581
    • '<LOCALNET>.20.183':6581
    • '<LOCALNET>.20.182':6581
    • '<LOCALNET>.20.179':6581
    • '<LOCALNET>.20.178':6581
    • '<LOCALNET>.20.176':6581
    • '<LOCALNET>.20.136':6582
    Miscellaneous
    Adds a root certificate
    Modifies value of AutoConfigURL parameter to 'http://127.0.0.1:7923/api/pac'
    Searches for the following windows
    • ClassName: 'ProgMan' WindowName: ''
    • ClassName: 'SHELLDLL_DefView' WindowName: ''
    • ClassName: 'SysListView32' WindowName: ''
    Creates and executes the following
    • '%WINDIR%\jkjfenjj\ldnbaccg.exe'
    • '%WINDIR%\jkjfenjj\yhcsp\tqytd.exe' uid:101132 param:0
    • '%WINDIR%\inf\mcbuilder.exe'
    • '%WINDIR%\jkjfenjj\hzmgj\ovohw.exe' uid:101132 param:0
    • '%WINDIR%\jkjfenjj\xpkdu\rrczj.exe' uid:101132 param:0
    • '%WINDIR%\jkjfenjj\vozhs\plngo.exe' uid:101132 param:58js0229
    • '%WINDIR%\dbicis.exe' uid:101132 param:58js0229
    • '%WINDIR%\jkjfenjj\ldnbaccg.exe' ' (with hidden window)
    • '%WINDIR%\syswow64\cmd.exe' cmd /c ping 127.0.0.1 &&cmd /c del "<Full path to file>" >> NUL' (with hidden window)
    • '<SYSTEM32>\ipconfig.exe' /flushdns' (with hidden window)
    • '%WINDIR%\dbicis.exe' uid:101132 param:58js0229' (with hidden window)
    • '%WINDIR%\syswow64\cmd.exe' /c timeout /t 1 & del /Q /F "%WINDIR%\jkjfenjj\yhcsp\tqytd.exe"' (with hidden window)
    • '%WINDIR%\syswow64\cmd.exe' cmd /c ping 127.0.0.1 &&cmd /c del "%WINDIR%\jkjfenjj\vozhs\plngo.exe" >> NUL' (with hidden window)
    Executes the following
    • '%WINDIR%\syswow64\cmd.exe' cmd /c ping 127.0.0.1 &&cmd /c del "<Full path to file>" >> NUL
    • '%WINDIR%\syswow64\ping.exe' 127.0.0.1
    • '%WINDIR%\syswow64\cmd.exe' /c del "<Full path to file>"
    • '<SYSTEM32>\rundll32.exe' <SYSTEM32>\FirewallControlPanel.dll,ShowNotificationDialog /configure /ETOnly 0 /OnProfiles 6 /OtherAllowed 0 /OtherBlocked 0 /OtherEdgeAllowed 0 /NewBlocked 4 "%WINDIR%\jkjfenjj\ldnbaccg.exe"
    • '<SYSTEM32>\ipconfig.exe' /flushdns
    • '<SYSTEM32>\rundll32.exe' <SYSTEM32>\FirewallControlPanel.dll,ShowNotificationDialog /configure /ETOnly 0 /OnProfiles 6 /OtherAllowed 0 /OtherBlocked 0 /OtherEdgeAllowed 0 /NewBlocked 4 "%WINDIR%\inf\mcbuilder.exe"
    • '%WINDIR%\syswow64\cmd.exe' /c timeout /t 1 & del /Q /F "%WINDIR%\jkjfenjj\yhcsp\tqytd.exe"
    • '%WINDIR%\syswow64\timeout.exe' /t 1
    • '%WINDIR%\syswow64\cmd.exe' cmd /c ping 127.0.0.1 &&cmd /c del "%WINDIR%\jkjfenjj\vozhs\plngo.exe" >> NUL
    • '<SYSTEM32>\rundll32.exe' <SYSTEM32>\FirewallControlPanel.dll,ShowNotificationDialog /configure /ETOnly 0 /OnProfiles 6 /OtherAllowed 0 /OtherBlocked 0 /OtherEdgeAllowed 0 /NewBlocked 4 "%WINDIR%\jkjfenjj\xpkdu\rrczj.ex...
    • '%WINDIR%\syswow64\cmd.exe' /c del "%WINDIR%\jkjfenjj\vozhs\plngo.exe"

    Recommandations pour le traitement

    1. Si le système d'exploitation peut être démarré (en mode normal ou en mode sans échec), téléchargez Dr.Web Security Space et lancez un scan complet de votre ordinateur et de tous les supports amovibles que vous utilisez. En savoir plus sur Dr.Web Security Space.
    2. Si le démarrage du système d'exploitation est impossible, veuillez modifier les paramètres du BIOS de votre ordinateur pour démarrer votre ordinateur via CD/DVD ou clé USB. Téléchargez l'image du disque de secours de restauration du système Dr.Web® LiveDisk ou l'utilitaire pour enregistrer Dr.Web® LiveDisk sur une clé USB, puis préparez la clé USB appropriée. Démarrez l'ordinateur à l'aide de cette clé et lancez le scan complet et le traitement des menaces détectées.

    Veuillez lancer le scan complet du système à l'aide de Dr.Web Antivirus pour Mac OS.

    Veuillez lancer le scan complet de toutes les partitions du disque à l'aide de Dr.Web Antivirus pour Linux.

    1. Si votre appareil mobile fonctionne correctement, veuillez télécharger et installer sur votre appareil mobile Dr.Web pour Android. Lancez un scan complet et suivez les recommandations sur la neutralisation des menaces détectées.
    2. Si l'appareil mobile est bloqué par le Trojan de la famille Android.Locker (un message sur la violation grave de la loi ou la demande d'une rançon est affiché sur l'écran de l'appareil mobile), procédez comme suit:
      • démarrez votre Smartphone ou votre tablette en mode sans échec (si vous ne savez pas comment faire, consultez la documentation de l'appareil mobile ou contactez le fabricant) ;
      • puis téléchargez et installez sur votre appareil mobile Dr.Web pour Android et lancez un scan complet puis suivez les recommandations sur la neutralisation des menaces détectées ;
      • Débranchez votre appareil et rebranchez-le.

    En savoir plus sur Dr.Web pour Android