Bibliothèque
Ma bibliothèque

+ Ajouter à la bibliothèque

Contacter-nous !
Support 24/24 | Rules regarding submitting

Nous téléphoner

0 825 300 230

Forum

Vos requêtes

  • Toutes : -
  • Non clôturées : -
  • Dernière : le -

Nous téléphoner

0 825 300 230

Profil

Trojan.Fakealert.44679

Added to the Dr.Web virus database: 2013-11-14

Virus description added:

Technical Information

Malicious functions:
Creates and executes the following:
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_ab00a6edcd942e62 -pw 8CDFCA86BBCF965C2200664829B30076641a7b1049177dc0a292131951a99f8c0441392418351394b344b330d7b23315 -D 1080 -v -z -Z 106d7e9abbb45c6b06275f773697fac1de810d3833559829a62e2ced7ac40d43 88.208.221.29
  • '%TEMP%\psiphon3-plonk.exe' /pid=2980
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_95a4a0f9d0a66005 -pw 012A1E702BAC6DF3A8745FB9D78D9197201a155aad5fbd951fe89859e303964726a52dee36cf258f09d767207bca3377 -D 1080 -v -z -Z e5a6aeb323210e318d36c181a02cdf4759b299356b0fc21f0315b3ae941eca32 109.228.19.160
  • '%TEMP%\psiphon3-plonk.exe' /pid=3480
  • '%TEMP%\psiphon3-plonk.exe' /pid=3096
  • '%TEMP%\psiphon3-plonk.exe' /pid=1600
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 922 -l psiphon_ssh_6aa3a220950ea506 -pw AE9F589969B489CAE66FF8509CF0D2ACed41337529ad8a79d9031742cf429bbe5e9d561dda67a8864bb925a5514254b5 -D 1080 -v -z -Z 09b02054994c66fe4649440d8ad2ab2efca0648c863e27754a8b548c127a6152 213.171.207.94
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_c7466b8ed0324498 -pw 5F3B9059B4922A753E40191BDF9D85409f03443e30cdffc3eba1dcec304c4d5c058a7b21e80cfcba9b1ad2be3e2f9566 -D 1080 -v -z -Z aeb4fce445d1aac89ecd376a6ca3d64d6137deb8a5e4b79384e54e37c61f3efe 213.171.199.170
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 123 -l psiphon_ssh_b6b66e0b810bfa79 -pw 010B3DB8FED6245AC24326F8E1EEAD32496f75fd5aa6be7dc5942cd8d83bc33ca16e662e2f97fcb40c4f74527ff8780f -D 1080 -v -z -Z 406815c4d4c28bc4240a93a5ad9e3a07f169ae359f35ba5ef38370088c36cd4b 109.228.19.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_bbca7f28d65f0c42 -pw 4AA10BF9D04D1AEBD70201CD303C5FB2e54f2e857f67134e22235fa47faf3849575e37b62820c247bc65ba8a34914c31 -D 1080 -v -z -Z b4487abc87e74a536b6d99a70ad7c8b2e1a7473f95e79be6a224d867c5a6197b 109.228.16.60
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_069dc48f62be08b0 -pw 2072AA63A55A9189AA1EFBC8DA805C3Ebefce5c78aa6016f1f3d587d2cb29340d885ca4e0bd9b53b13e2b51051339565 -D 1080 -v -z -Z b3a321c7210c9bc22a5a33a7579770534e24ef3236cdc17d86b49dcc41908df7 109.228.16.35
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_ade84e3d844e5077 -pw 380320B3495AA96B1E40BDB39EEB243C8627a47fc0d76e05a2eb1589c0938bfa643d5a036bc3592014d7c6c3f62d1ca3 -D 1080 -v -z -Z 0de24746124593ddb00b457a77d55afdf4281a116c7458e43aa51d2b49edca85 213.171.206.26
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_6a3fa0f1f1d38317 -pw EBE0D70776BF9B3E4B7AAC4C5B368C808dba9f488a9e4cae0115aca80de4cc35b4cfef33f2186d71a64d2d6839b49bca -D 1080 -v -z -Z 9f99e75488d0dd4cc45ee98292e21ca74e239b2e7c2d46b285d8ce4feb9d8682 109.228.19.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_8d9be6ef12ead4bc -pw BAA4C1D5E31BDC494C45C99402673BD6b76565f0588fa9ab3dc4f86e5732220834ed830418aa5a1e3a749bac1507f02d -D 1080 -v -z -Z d658242c973a2aa7ac931f1a07c68d170146b81308e68f7d5be6a3188378f248 109.228.16.83
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_441183f9b80a017b -pw A18974A7EC2424517442AA88DE83F0014be6a9aa0bb0b59a86455dfab21c470237a2ab1c5fc07ca2a24ad487f990fccc -D 1080 -v -z -Z ef0371d75ed04ce8304c4f5f2a1699867efdf96585fea800eb5f000d0c486adb 213.171.207.119
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 984 -l psiphon_ssh_386b186c93821d58 -pw 44A952E230AD59D42DF6A96DA429079Cf1cdafe751eaba45372fa15cfe0b58007c16855dc6103a0cd217b3297f6dc957 -D 1080 -v -z -Z d3b045accb5af6114005ae38210dfdbbe92bed7be7be6838270043e7212caec5 109.228.19.129
  • '%TEMP%\psiphon3-plonk.exe' /pid=3188
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 513 -l psiphon_ssh_4737411b506a593b -pw D9A618237A35D7729AE98763240F592D2e52023b3e10781ef75e1c5dbd9f6ad732a0f589af3c68e697a0f879d5275216 -D 1080 -v -z -Z 7e4b7a1f7dde6d1ea5d9ea87c1986848eeacfc4c89808674baf6aa0e79e82d40 109.228.19.134
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_d532e381ce8afcc4 -pw 4E33B827DAB4A07A43F0F559331188E6607bc73963cf72777ccfa65674b24c072d7a6ced1b8d7454064e59722e5d4cff -D 1080 -v -z -Z 2a936b11a11dd61fcdb1a69e29e236b5644b68b81daaa6ecc60bd428a4041f3c 88.208.221.86
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 748 -l psiphon_ssh_82ded20d2f4fc808 -pw AF77A2ED2E9514E4C4D600673CAC750F54789f8f04216f1d46c08dffd7b311fa94f7a83cf6123fb8dae865b31ace6d9d -D 1080 -v -z -Z 6dcc6ea0bad98023fa1871872005e0a737b40f63d6ece50ef29b0ff6ec6b2649 213.171.197.198
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_441183f9b80a017b -pw 9CAEB8DB33A3F29CD3B9CC9C545F68A64be6a9aa0bb0b59a86455dfab21c470237a2ab1c5fc07ca2a24ad487f990fccc -D 1080 -v -z -Z ef0371d75ed04ce8304c4f5f2a1699867efdf96585fea800eb5f000d0c486adb 213.171.207.119
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_6a3fa0f1f1d38317 -pw 1EC36313BF315B41878554C461C81FBA8dba9f488a9e4cae0115aca80de4cc35b4cfef33f2186d71a64d2d6839b49bca -D 1080 -v -z -Z 9f99e75488d0dd4cc45ee98292e21ca74e239b2e7c2d46b285d8ce4feb9d8682 109.228.19.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_8d9be6ef12ead4bc -pw B9F7F5C2D20FE54A57CBB0639039B2D6b76565f0588fa9ab3dc4f86e5732220834ed830418aa5a1e3a749bac1507f02d -D 1080 -v -z -Z d658242c973a2aa7ac931f1a07c68d170146b81308e68f7d5be6a3188378f248 109.228.16.83
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 993 -l psiphon_ssh_200a9cb66d8942ff -pw AB489DBC049D9ADA10B7AAAF74419767b531b5fef510c2f39871146d97dcbb07ffe32f9d54bee0113f30785ff2283143 -D 1080 -v -z -Z 9ea0ea014a74149a620cf5e57ce7800f92275d5089f244d6c7110980259ae567 109.228.19.124
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_ed2c53d2065a1433 -pw A65279BB045CA330A404F4E0B7F2B988560abff533336abcc67286408fab7919450d48786d39461cdfad8f2d0c19d3c8 -D 1080 -v -z -Z 2fe5d289c09d607d8ce86cb5fa3b354414c087551e840a0ef1682813a7f788e3 109.228.17.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 748 -l psiphon_ssh_82ded20d2f4fc808 -pw 1815BD315CDE6FCD469AFB9C2FEB884454789f8f04216f1d46c08dffd7b311fa94f7a83cf6123fb8dae865b31ace6d9d -D 1080 -v -z -Z 6dcc6ea0bad98023fa1871872005e0a737b40f63d6ece50ef29b0ff6ec6b2649 213.171.197.198
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 513 -l psiphon_ssh_4737411b506a593b -pw 32A787222C28269385B06B34854D07112e52023b3e10781ef75e1c5dbd9f6ad732a0f589af3c68e697a0f879d5275216 -D 1080 -v -z -Z 7e4b7a1f7dde6d1ea5d9ea87c1986848eeacfc4c89808674baf6aa0e79e82d40 109.228.19.134
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_d532e381ce8afcc4 -pw 98D117E49F52811253A892710C58B42F607bc73963cf72777ccfa65674b24c072d7a6ced1b8d7454064e59722e5d4cff -D 1080 -v -z -Z 2a936b11a11dd61fcdb1a69e29e236b5644b68b81daaa6ecc60bd428a4041f3c 88.208.221.86
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_069dc48f62be08b0 -pw A4D1AFC6D726571C5710BD60A0DFF573befce5c78aa6016f1f3d587d2cb29340d885ca4e0bd9b53b13e2b51051339565 -D 1080 -v -z -Z b3a321c7210c9bc22a5a33a7579770534e24ef3236cdc17d86b49dcc41908df7 109.228.16.35
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_ade84e3d844e5077 -pw 669DE43D3E9B6AB8E51EDF4277BAC4828627a47fc0d76e05a2eb1589c0938bfa643d5a036bc3592014d7c6c3f62d1ca3 -D 1080 -v -z -Z 0de24746124593ddb00b457a77d55afdf4281a116c7458e43aa51d2b49edca85 213.171.206.26
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_c95ad082dd38da35 -pw 5AF2A082C8490544085357EA6001BAE0b3ac8ce910058c47fe71d91c7e7b5a6dcce3834c6ddf367e6ba8182104ce3dcd -D 1080 -v -z -Z addf635286281612cabd741b5132122e5c49f58419fc03f8feb1bb0a5f5414e5 88.208.220.118
  • '%TEMP%\psiphon3-plonk.exe' /pid=4032
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_b589bf21758d4b8b -pw EF78A435E639D23982C4E8D29C6BF7B0a5d77d5fdc2a2e510d91406484c8f2a4d64da0607d1a0344771b13e03909b131 -D 1080 -v -z -Z 7fbf6b741a3990ecca5d0ed7d682c53759c49dfa32a53069ddf94dbecf51f2d2 213.171.207.70
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_02505cd3155e800d -pw 0EDF207BC21B34F1025F435D04A7972E2e3c5fe0209a9a6cdc3dc2e142ac74e1dce02743ceb10200858178f2656dc443 -D 1080 -v -z -Z e3a111d6cda546263b2dcfa0026b4ec8daf676faa801c51d52e3ca9d26216ae2 109.228.17.68
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 261 -l psiphon_ssh_a92e312c6c8c96a3 -pw 2DE9B88F43F8A2E6937F166D8D56C2588a37f8e1862b3584d427d4a2b4d421ae10884bb698d9f172fc7c5b95d1dca359 -D 1080 -v -z -Z fb3bfc16c023b03fee6b09ddbf7a0972acce0b80f98d9333e59001f146f0d777 88.208.222.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_239411f4e723064b -pw 8723F4DC2B0063BD75281737C59CDB9Fb4f5cc4ec201f4137671b21163f338ad8648c9fa36d13652a45f2606bece4463 -D 1080 -v -z -Z 3ae3e881e0606e19f7bd0c3ca6765f1cfd511c331ceb61e6fb37abb283272c16 213.171.196.51
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 591 -l psiphon_ssh_3c531dae36899e80 -pw 93328369DF2E651211ED182B0CF19DBCf6e8340eb0e14bc2f3c9ff5d5caa05b304b596895b81b121397529d16ac74be6 -D 1080 -v -z -Z ff3ecc26ef067d57fe64c84c55a65a2bde70dbf4b25999fe90a1bc9a3823f48c 212.71.255.128
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_4dcd26c03a0606c4 -pw 19B40405772562A4A126B2DA40EF3D80b733f9931e09732eae3a5fa867062ac087e62796244484780289c9750852abc6 -D 1080 -v -z -Z b7aa2658cdd06d009908e970deef5e8e7f0f758833436b2273e13fc77c7d251b 213.171.197.146
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 864 -l psiphon_ssh_2fc891b4be4e696a -pw 096C36A1F30321E9CB5B873F8729AAA39e8735f391405aa93bda1d07c48e28e8df9fe66ec895b9958c7358ab569534c0 -D 1080 -v -z -Z 37b82bf1e4e9642312537dfae3536475ac9292c6e6a67a91637a0e950a059f98 173.230.138.177
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_1fdfd36df723edc5 -pw E057D4C0A6AECF9B6CEB6F5B04F56CD0ec3d0d741e44546b184164941a514fe50389808696fba4da428c76dc7bdea0df -D 1080 -v -z -Z 089fd025e795744aa44309e64ebd917ef698973eeb7e7a44d6ef0ec4e2aeb1d7 109.228.16.30
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_ed2c53d2065a1433 -pw E75935B15CD972A73B97E714232A6476560abff533336abcc67286408fab7919450d48786d39461cdfad8f2d0c19d3c8 -D 1080 -v -z -Z 2fe5d289c09d607d8ce86cb5fa3b354414c087551e840a0ef1682813a7f788e3 109.228.17.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_069dc48f62be08b0 -pw B372A61D8148699DD231EC4EF52D08C9befce5c78aa6016f1f3d587d2cb29340d885ca4e0bd9b53b13e2b51051339565 -D 1080 -v -z -Z b3a321c7210c9bc22a5a33a7579770534e24ef3236cdc17d86b49dcc41908df7 109.228.16.35
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_ade84e3d844e5077 -pw A5F281AEDDA7F7D2B18170F728FAC4438627a47fc0d76e05a2eb1589c0938bfa643d5a036bc3592014d7c6c3f62d1ca3 -D 1080 -v -z -Z 0de24746124593ddb00b457a77d55afdf4281a116c7458e43aa51d2b49edca85 213.171.206.26
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_6a3fa0f1f1d38317 -pw 4DD09CF77ADFA27CD63952115ED274E58dba9f488a9e4cae0115aca80de4cc35b4cfef33f2186d71a64d2d6839b49bca -D 1080 -v -z -Z 9f99e75488d0dd4cc45ee98292e21ca74e239b2e7c2d46b285d8ce4feb9d8682 109.228.19.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_8d9be6ef12ead4bc -pw 3F29BA7A42D75195C9F3B0204A1D63F5b76565f0588fa9ab3dc4f86e5732220834ed830418aa5a1e3a749bac1507f02d -D 1080 -v -z -Z d658242c973a2aa7ac931f1a07c68d170146b81308e68f7d5be6a3188378f248 109.228.16.83
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_441183f9b80a017b -pw 4C3F17CF9371503B80E13968A33884924be6a9aa0bb0b59a86455dfab21c470237a2ab1c5fc07ca2a24ad487f990fccc -D 1080 -v -z -Z ef0371d75ed04ce8304c4f5f2a1699867efdf96585fea800eb5f000d0c486adb 213.171.207.119
  • '%TEMP%\psiphon3-plonk.exe' /pid=3280
  • '%TEMP%\psiphon3-plonk.exe' /pid=460
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 984 -l psiphon_ssh_386b186c93821d58 -pw 6680970372AA13255A1F2340FE8C2FEDf1cdafe751eaba45372fa15cfe0b58007c16855dc6103a0cd217b3297f6dc957 -D 1080 -v -z -Z d3b045accb5af6114005ae38210dfdbbe92bed7be7be6838270043e7212caec5 109.228.19.129
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_d532e381ce8afcc4 -pw 1DD8EF7EE097E6DF6338C9289D334C31607bc73963cf72777ccfa65674b24c072d7a6ced1b8d7454064e59722e5d4cff -D 1080 -v -z -Z 2a936b11a11dd61fcdb1a69e29e236b5644b68b81daaa6ecc60bd428a4041f3c 88.208.221.86
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 748 -l psiphon_ssh_82ded20d2f4fc808 -pw 456F6815A68EEA46215467704295DE1554789f8f04216f1d46c08dffd7b311fa94f7a83cf6123fb8dae865b31ace6d9d -D 1080 -v -z -Z 6dcc6ea0bad98023fa1871872005e0a737b40f63d6ece50ef29b0ff6ec6b2649 213.171.197.198
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_bbca7f28d65f0c42 -pw 0E24680CC031418DC21C54C8A9298C96e54f2e857f67134e22235fa47faf3849575e37b62820c247bc65ba8a34914c31 -D 1080 -v -z -Z b4487abc87e74a536b6d99a70ad7c8b2e1a7473f95e79be6a224d867c5a6197b 109.228.16.60
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 261 -l psiphon_ssh_a92e312c6c8c96a3 -pw 116DA019830042F0B47CB1636194A5FE8a37f8e1862b3584d427d4a2b4d421ae10884bb698d9f172fc7c5b95d1dca359 -D 1080 -v -z -Z fb3bfc16c023b03fee6b09ddbf7a0972acce0b80f98d9333e59001f146f0d777 88.208.222.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 864 -l psiphon_ssh_2fc891b4be4e696a -pw F6A8030BB5DC61BF12D929B18A2A28319e8735f391405aa93bda1d07c48e28e8df9fe66ec895b9958c7358ab569534c0 -D 1080 -v -z -Z 37b82bf1e4e9642312537dfae3536475ac9292c6e6a67a91637a0e950a059f98 173.230.138.177
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 513 -l psiphon_ssh_4737411b506a593b -pw 10C3F359EEEB68EAED2BFCA41CE8797C2e52023b3e10781ef75e1c5dbd9f6ad732a0f589af3c68e697a0f879d5275216 -D 1080 -v -z -Z 7e4b7a1f7dde6d1ea5d9ea87c1986848eeacfc4c89808674baf6aa0e79e82d40 109.228.19.134
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_b589bf21758d4b8b -pw 8D1E10E3FDA43BC9855C1431B8DD97DAa5d77d5fdc2a2e510d91406484c8f2a4d64da0607d1a0344771b13e03909b131 -D 1080 -v -z -Z 7fbf6b741a3990ecca5d0ed7d682c53759c49dfa32a53069ddf94dbecf51f2d2 213.171.207.70
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 123 -l psiphon_ssh_b6b66e0b810bfa79 -pw 08370276E432B294BE85B80C03CEDC41496f75fd5aa6be7dc5942cd8d83bc33ca16e662e2f97fcb40c4f74527ff8780f -D 1080 -v -z -Z 406815c4d4c28bc4240a93a5ad9e3a07f169ae359f35ba5ef38370088c36cd4b 109.228.19.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_ed2c53d2065a1433 -pw 4B4D1191D410900CD7E6A2FF6E966AD9560abff533336abcc67286408fab7919450d48786d39461cdfad8f2d0c19d3c8 -D 1080 -v -z -Z 2fe5d289c09d607d8ce86cb5fa3b354414c087551e840a0ef1682813a7f788e3 109.228.17.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_4dcd26c03a0606c4 -pw D5089B33A0C45B69B004F0685C77FF93b733f9931e09732eae3a5fa867062ac087e62796244484780289c9750852abc6 -D 1080 -v -z -Z b7aa2658cdd06d009908e970deef5e8e7f0f758833436b2273e13fc77c7d251b 213.171.197.146
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_95a4a0f9d0a66005 -pw 688ED0CDE75976D6571D60DB3913E72A201a155aad5fbd951fe89859e303964726a52dee36cf258f09d767207bca3377 -D 1080 -v -z -Z e5a6aeb323210e318d36c181a02cdf4759b299356b0fc21f0315b3ae941eca32 109.228.19.160
  • '%TEMP%\psiphon3-plonk.exe' /pid=3072
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_c95ad082dd38da35 -pw 0B1A05D1A4FC7BF63E05D29590213B19b3ac8ce910058c47fe71d91c7e7b5a6dcce3834c6ddf367e6ba8182104ce3dcd -D 1080 -v -z -Z addf635286281612cabd741b5132122e5c49f58419fc03f8feb1bb0a5f5414e5 88.208.220.118
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 864 -l psiphon_ssh_2fc891b4be4e696a -pw 405603395A58AFBD2486468E83C7F0489e8735f391405aa93bda1d07c48e28e8df9fe66ec895b9958c7358ab569534c0 -D 1080 -v -z -Z 37b82bf1e4e9642312537dfae3536475ac9292c6e6a67a91637a0e950a059f98 173.230.138.177
  • '%TEMP%\psiphon3-plonk.exe' /pid=3844
  • '%TEMP%\psiphon3-plonk.exe' /pid=3968
  • '%TEMP%\psiphon3-plonk.exe' /pid=3628
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 591 -l psiphon_ssh_3c531dae36899e80 -pw B12F663BD790266023BFD795CB313C7Ef6e8340eb0e14bc2f3c9ff5d5caa05b304b596895b81b121397529d16ac74be6 -D 1080 -v -z -Z ff3ecc26ef067d57fe64c84c55a65a2bde70dbf4b25999fe90a1bc9a3823f48c 212.71.255.128
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 993 -l psiphon_ssh_200a9cb66d8942ff -pw 7C68086FB92AF22651B8FAC3A3ED990Ab531b5fef510c2f39871146d97dcbb07ffe32f9d54bee0113f30785ff2283143 -D 1080 -v -z -Z 9ea0ea014a74149a620cf5e57ce7800f92275d5089f244d6c7110980259ae567 109.228.19.124
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_239411f4e723064b -pw B50C68984020EE7DF2A630C64FC07089b4f5cc4ec201f4137671b21163f338ad8648c9fa36d13652a45f2606bece4463 -D 1080 -v -z -Z 3ae3e881e0606e19f7bd0c3ca6765f1cfd511c331ceb61e6fb37abb283272c16 213.171.196.51
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_1fdfd36df723edc5 -pw 88FAC76483848C51EADD928A94D10DBDec3d0d741e44546b184164941a514fe50389808696fba4da428c76dc7bdea0df -D 1080 -v -z -Z 089fd025e795744aa44309e64ebd917ef698973eeb7e7a44d6ef0ec4e2aeb1d7 109.228.16.30
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_4dcd26c03a0606c4 -pw 734C6CFCCE377A94E902BD5F32605810b733f9931e09732eae3a5fa867062ac087e62796244484780289c9750852abc6 -D 1080 -v -z -Z b7aa2658cdd06d009908e970deef5e8e7f0f758833436b2273e13fc77c7d251b 213.171.197.146
  • '%TEMP%\psiphon3-plonk.exe' /pid=2692
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_bbca7f28d65f0c42 -pw 5D45EA6C8D498F969B5F48432E74324Fe54f2e857f67134e22235fa47faf3849575e37b62820c247bc65ba8a34914c31 -D 1080 -v -z -Z b4487abc87e74a536b6d99a70ad7c8b2e1a7473f95e79be6a224d867c5a6197b 109.228.16.60
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 123 -l psiphon_ssh_b6b66e0b810bfa79 -pw 30787B431D480612B0D2C301F77E3C70496f75fd5aa6be7dc5942cd8d83bc33ca16e662e2f97fcb40c4f74527ff8780f -D 1080 -v -z -Z 406815c4d4c28bc4240a93a5ad9e3a07f169ae359f35ba5ef38370088c36cd4b 109.228.19.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_95a4a0f9d0a66005 -pw 573F6DE3B8FE7D3437400B20618229BF201a155aad5fbd951fe89859e303964726a52dee36cf258f09d767207bca3377 -D 1080 -v -z -Z e5a6aeb323210e318d36c181a02cdf4759b299356b0fc21f0315b3ae941eca32 109.228.19.160
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_ab00a6edcd942e62 -pw E1E0691F2B8812179781CCFA3A6990B5641a7b1049177dc0a292131951a99f8c0441392418351394b344b330d7b23315 -D 1080 -v -z -Z 106d7e9abbb45c6b06275f773697fac1de810d3833559829a62e2ced7ac40d43 88.208.221.29
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 261 -l psiphon_ssh_a92e312c6c8c96a3 -pw 7FEDCFD059DA16DAAB8A24B4F783EB838a37f8e1862b3584d427d4a2b4d421ae10884bb698d9f172fc7c5b95d1dca359 -D 1080 -v -z -Z fb3bfc16c023b03fee6b09ddbf7a0972acce0b80f98d9333e59001f146f0d777 88.208.222.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_b589bf21758d4b8b -pw 7FC9E30970FEAA448FAAC61A7E0B63A6a5d77d5fdc2a2e510d91406484c8f2a4d64da0607d1a0344771b13e03909b131 -D 1080 -v -z -Z 7fbf6b741a3990ecca5d0ed7d682c53759c49dfa32a53069ddf94dbecf51f2d2 213.171.207.70
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_02505cd3155e800d -pw 8B8FBCAF83EE86C78F6A8FE57E0A74C72e3c5fe0209a9a6cdc3dc2e142ac74e1dce02743ceb10200858178f2656dc443 -D 1080 -v -z -Z e3a111d6cda546263b2dcfa0026b4ec8daf676faa801c51d52e3ca9d26216ae2 109.228.17.68
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_c7466b8ed0324498 -pw 5BA95D7ABF805EC68FCDF2CCF90C19759f03443e30cdffc3eba1dcec304c4d5c058a7b21e80cfcba9b1ad2be3e2f9566 -D 1080 -v -z -Z aeb4fce445d1aac89ecd376a6ca3d64d6137deb8a5e4b79384e54e37c61f3efe 213.171.199.170
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 922 -l psiphon_ssh_6aa3a220950ea506 -pw A18BD0FFAB0DCF0197AA0844E73765F2ed41337529ad8a79d9031742cf429bbe5e9d561dda67a8864bb925a5514254b5 -D 1080 -v -z -Z 09b02054994c66fe4649440d8ad2ab2efca0648c863e27754a8b548c127a6152 213.171.207.94
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 984 -l psiphon_ssh_386b186c93821d58 -pw 34E966B506C322D54262306F63622D95f1cdafe751eaba45372fa15cfe0b58007c16855dc6103a0cd217b3297f6dc957 -D 1080 -v -z -Z d3b045accb5af6114005ae38210dfdbbe92bed7be7be6838270043e7212caec5 109.228.19.129
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 984 -l psiphon_ssh_386b186c93821d58 -pw BF9E70F7B5B680BF05A04060BD0F0FA0f1cdafe751eaba45372fa15cfe0b58007c16855dc6103a0cd217b3297f6dc957 -D 1080 -v -z -Z d3b045accb5af6114005ae38210dfdbbe92bed7be7be6838270043e7212caec5 109.228.19.129
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 591 -l psiphon_ssh_3c531dae36899e80 -pw AABEE0166C0B0F6F941D6CAA975CC403f6e8340eb0e14bc2f3c9ff5d5caa05b304b596895b81b121397529d16ac74be6 -D 1080 -v -z -Z ff3ecc26ef067d57fe64c84c55a65a2bde70dbf4b25999fe90a1bc9a3823f48c 212.71.255.128
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 513 -l psiphon_ssh_4737411b506a593b -pw D267C61E6774DF81F610AA4BA981081F2e52023b3e10781ef75e1c5dbd9f6ad732a0f589af3c68e697a0f879d5275216 -D 1080 -v -z -Z 7e4b7a1f7dde6d1ea5d9ea87c1986848eeacfc4c89808674baf6aa0e79e82d40 109.228.19.134
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_d532e381ce8afcc4 -pw 929B64BF2D957C751961D1F5A1A91C91607bc73963cf72777ccfa65674b24c072d7a6ced1b8d7454064e59722e5d4cff -D 1080 -v -z -Z 2a936b11a11dd61fcdb1a69e29e236b5644b68b81daaa6ecc60bd428a4041f3c 88.208.221.86
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 748 -l psiphon_ssh_82ded20d2f4fc808 -pw 9A7B2ED2620BD6D712AAA10E5C1D71A954789f8f04216f1d46c08dffd7b311fa94f7a83cf6123fb8dae865b31ace6d9d -D 1080 -v -z -Z 6dcc6ea0bad98023fa1871872005e0a737b40f63d6ece50ef29b0ff6ec6b2649 213.171.197.198
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_02505cd3155e800d -pw 227585A07541A360BF68D413AD6B0C482e3c5fe0209a9a6cdc3dc2e142ac74e1dce02743ceb10200858178f2656dc443 -D 1080 -v -z -Z e3a111d6cda546263b2dcfa0026b4ec8daf676faa801c51d52e3ca9d26216ae2 109.228.17.68
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_b589bf21758d4b8b -pw 8564F6DED6515626F936DD2B33FB47A7a5d77d5fdc2a2e510d91406484c8f2a4d64da0607d1a0344771b13e03909b131 -D 1080 -v -z -Z 7fbf6b741a3990ecca5d0ed7d682c53759c49dfa32a53069ddf94dbecf51f2d2 213.171.207.70
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_4dcd26c03a0606c4 -pw B2B9FCFBF303137A30E589D0F08D363Ab733f9931e09732eae3a5fa867062ac087e62796244484780289c9750852abc6 -D 1080 -v -z -Z b7aa2658cdd06d009908e970deef5e8e7f0f758833436b2273e13fc77c7d251b 213.171.197.146
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 261 -l psiphon_ssh_a92e312c6c8c96a3 -pw 7221CE4089B72DAF7F606A750DA077FE8a37f8e1862b3584d427d4a2b4d421ae10884bb698d9f172fc7c5b95d1dca359 -D 1080 -v -z -Z fb3bfc16c023b03fee6b09ddbf7a0972acce0b80f98d9333e59001f146f0d777 88.208.222.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_ed2c53d2065a1433 -pw 98E95C123BA7CB932EE261C25F46E6F6560abff533336abcc67286408fab7919450d48786d39461cdfad8f2d0c19d3c8 -D 1080 -v -z -Z 2fe5d289c09d607d8ce86cb5fa3b354414c087551e840a0ef1682813a7f788e3 109.228.17.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 993 -l psiphon_ssh_200a9cb66d8942ff -pw 535253935AD2DD99625A3BEDB7DB4B08b531b5fef510c2f39871146d97dcbb07ffe32f9d54bee0113f30785ff2283143 -D 1080 -v -z -Z 9ea0ea014a74149a620cf5e57ce7800f92275d5089f244d6c7110980259ae567 109.228.19.124
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_ed2c53d2065a1433 -pw 69B6857A19AEC5CD3CD12300F0E54BA2560abff533336abcc67286408fab7919450d48786d39461cdfad8f2d0c19d3c8 -D 1080 -v -z -Z 2fe5d289c09d607d8ce86cb5fa3b354414c087551e840a0ef1682813a7f788e3 109.228.17.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 591 -l psiphon_ssh_3c531dae36899e80 -pw 4019718F16D6B641C8929331FF547FDDf6e8340eb0e14bc2f3c9ff5d5caa05b304b596895b81b121397529d16ac74be6 -D 1080 -v -z -Z ff3ecc26ef067d57fe64c84c55a65a2bde70dbf4b25999fe90a1bc9a3823f48c 212.71.255.128
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_4dcd26c03a0606c4 -pw 61C0B2C2F9CD0B2E4101C2C3D8AB8BB3b733f9931e09732eae3a5fa867062ac087e62796244484780289c9750852abc6 -D 1080 -v -z -Z b7aa2658cdd06d009908e970deef5e8e7f0f758833436b2273e13fc77c7d251b 213.171.197.146
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_239411f4e723064b -pw 4DD2BE7735DA2342F2CF111D90C64091b4f5cc4ec201f4137671b21163f338ad8648c9fa36d13652a45f2606bece4463 -D 1080 -v -z -Z 3ae3e881e0606e19f7bd0c3ca6765f1cfd511c331ceb61e6fb37abb283272c16 213.171.196.51
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_069dc48f62be08b0 -pw 2B62825DA8886C7519194527858077E4befce5c78aa6016f1f3d587d2cb29340d885ca4e0bd9b53b13e2b51051339565 -D 1080 -v -z -Z b3a321c7210c9bc22a5a33a7579770534e24ef3236cdc17d86b49dcc41908df7 109.228.16.35
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_ade84e3d844e5077 -pw 81396213F8EDF129285E4EC3C89F2D768627a47fc0d76e05a2eb1589c0938bfa643d5a036bc3592014d7c6c3f62d1ca3 -D 1080 -v -z -Z 0de24746124593ddb00b457a77d55afdf4281a116c7458e43aa51d2b49edca85 213.171.206.26
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_6a3fa0f1f1d38317 -pw 5338E71C78420CF4DB57549ACAA0EF278dba9f488a9e4cae0115aca80de4cc35b4cfef33f2186d71a64d2d6839b49bca -D 1080 -v -z -Z 9f99e75488d0dd4cc45ee98292e21ca74e239b2e7c2d46b285d8ce4feb9d8682 109.228.19.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_8d9be6ef12ead4bc -pw B7F5222C301558C756994C2FC275AD0Ab76565f0588fa9ab3dc4f86e5732220834ed830418aa5a1e3a749bac1507f02d -D 1080 -v -z -Z d658242c973a2aa7ac931f1a07c68d170146b81308e68f7d5be6a3188378f248 109.228.16.83
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_441183f9b80a017b -pw 0CF52022AAA8A68482EF4EE416C7EB864be6a9aa0bb0b59a86455dfab21c470237a2ab1c5fc07ca2a24ad487f990fccc -D 1080 -v -z -Z ef0371d75ed04ce8304c4f5f2a1699867efdf96585fea800eb5f000d0c486adb 213.171.207.119
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_069dc48f62be08b0 -pw 49E94F380C6C3CD2B113315109971EEBbefce5c78aa6016f1f3d587d2cb29340d885ca4e0bd9b53b13e2b51051339565 -D 1080 -v -z -Z b3a321c7210c9bc22a5a33a7579770534e24ef3236cdc17d86b49dcc41908df7 109.228.16.35
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_ade84e3d844e5077 -pw 984FB4B1314E01C2C47656120C554D028627a47fc0d76e05a2eb1589c0938bfa643d5a036bc3592014d7c6c3f62d1ca3 -D 1080 -v -z -Z 0de24746124593ddb00b457a77d55afdf4281a116c7458e43aa51d2b49edca85 213.171.206.26
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_6a3fa0f1f1d38317 -pw 4AD07E3A96429E6BCA26175263EF16918dba9f488a9e4cae0115aca80de4cc35b4cfef33f2186d71a64d2d6839b49bca -D 1080 -v -z -Z 9f99e75488d0dd4cc45ee98292e21ca74e239b2e7c2d46b285d8ce4feb9d8682 109.228.19.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_8d9be6ef12ead4bc -pw C8D7585E6AA4B9B7D7AF2AADAB3CD1F2b76565f0588fa9ab3dc4f86e5732220834ed830418aa5a1e3a749bac1507f02d -D 1080 -v -z -Z d658242c973a2aa7ac931f1a07c68d170146b81308e68f7d5be6a3188378f248 109.228.16.83
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_441183f9b80a017b -pw 0D108F56EABAAA591D6A442F9A90837B4be6a9aa0bb0b59a86455dfab21c470237a2ab1c5fc07ca2a24ad487f990fccc -D 1080 -v -z -Z ef0371d75ed04ce8304c4f5f2a1699867efdf96585fea800eb5f000d0c486adb 213.171.207.119
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 513 -l psiphon_ssh_4737411b506a593b -pw 93F0D7B1E3F4FC1E4F933BAA9B23E3D82e52023b3e10781ef75e1c5dbd9f6ad732a0f589af3c68e697a0f879d5275216 -D 1080 -v -z -Z 7e4b7a1f7dde6d1ea5d9ea87c1986848eeacfc4c89808674baf6aa0e79e82d40 109.228.19.134
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 984 -l psiphon_ssh_386b186c93821d58 -pw E76ED811073E8B0FCCC566E2E69BF18Af1cdafe751eaba45372fa15cfe0b58007c16855dc6103a0cd217b3297f6dc957 -D 1080 -v -z -Z d3b045accb5af6114005ae38210dfdbbe92bed7be7be6838270043e7212caec5 109.228.19.129
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 748 -l psiphon_ssh_82ded20d2f4fc808 -pw AEAF523BC7725FC72C430CD5419CEBCB54789f8f04216f1d46c08dffd7b311fa94f7a83cf6123fb8dae865b31ace6d9d -D 1080 -v -z -Z 6dcc6ea0bad98023fa1871872005e0a737b40f63d6ece50ef29b0ff6ec6b2649 213.171.197.198
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_c95ad082dd38da35 -pw 7E23C9D1FA7C718EF5C0DBF3CB763F7Cb3ac8ce910058c47fe71d91c7e7b5a6dcce3834c6ddf367e6ba8182104ce3dcd -D 1080 -v -z -Z addf635286281612cabd741b5132122e5c49f58419fc03f8feb1bb0a5f5414e5 88.208.220.118
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_d532e381ce8afcc4 -pw 9308FF2DA4185B74D7FFDB7B59F8A0D0607bc73963cf72777ccfa65674b24c072d7a6ced1b8d7454064e59722e5d4cff -D 1080 -v -z -Z 2a936b11a11dd61fcdb1a69e29e236b5644b68b81daaa6ecc60bd428a4041f3c 88.208.221.86
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 922 -l psiphon_ssh_6aa3a220950ea506 -pw ED5563D5E91EA210069B50260D9C7ECCed41337529ad8a79d9031742cf429bbe5e9d561dda67a8864bb925a5514254b5 -D 1080 -v -z -Z 09b02054994c66fe4649440d8ad2ab2efca0648c863e27754a8b548c127a6152 213.171.207.94
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_1fdfd36df723edc5 -pw 140BA6958CB14C75B55D50FF3F20B98Bec3d0d741e44546b184164941a514fe50389808696fba4da428c76dc7bdea0df -D 1080 -v -z -Z 089fd025e795744aa44309e64ebd917ef698973eeb7e7a44d6ef0ec4e2aeb1d7 109.228.16.30
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 864 -l psiphon_ssh_2fc891b4be4e696a -pw 9C2F9DE8D1BCF022764E4A47195E25E09e8735f391405aa93bda1d07c48e28e8df9fe66ec895b9958c7358ab569534c0 -D 1080 -v -z -Z 37b82bf1e4e9642312537dfae3536475ac9292c6e6a67a91637a0e950a059f98 173.230.138.177
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 123 -l psiphon_ssh_b6b66e0b810bfa79 -pw 5747FD262DFBAAAE2551018F1594A766496f75fd5aa6be7dc5942cd8d83bc33ca16e662e2f97fcb40c4f74527ff8780f -D 1080 -v -z -Z 406815c4d4c28bc4240a93a5ad9e3a07f169ae359f35ba5ef38370088c36cd4b 109.228.19.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_239411f4e723064b -pw E6B9F2E3E1F027FBE0D75223FF728D51b4f5cc4ec201f4137671b21163f338ad8648c9fa36d13652a45f2606bece4463 -D 1080 -v -z -Z 3ae3e881e0606e19f7bd0c3ca6765f1cfd511c331ceb61e6fb37abb283272c16 213.171.196.51
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_bbca7f28d65f0c42 -pw 572519131C0805EF7958D98E402B30B4e54f2e857f67134e22235fa47faf3849575e37b62820c247bc65ba8a34914c31 -D 1080 -v -z -Z b4487abc87e74a536b6d99a70ad7c8b2e1a7473f95e79be6a224d867c5a6197b 109.228.16.60
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_c7466b8ed0324498 -pw F003C61C88B2DFA55C98ECF8C6FF4AC99f03443e30cdffc3eba1dcec304c4d5c058a7b21e80cfcba9b1ad2be3e2f9566 -D 1080 -v -z -Z aeb4fce445d1aac89ecd376a6ca3d64d6137deb8a5e4b79384e54e37c61f3efe 213.171.199.170
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_95a4a0f9d0a66005 -pw 17D7C6297A5C92F2F025D0282A5CE448201a155aad5fbd951fe89859e303964726a52dee36cf258f09d767207bca3377 -D 1080 -v -z -Z e5a6aeb323210e318d36c181a02cdf4759b299356b0fc21f0315b3ae941eca32 109.228.19.160
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_ab00a6edcd942e62 -pw 56CB797DF58EE68C006FBC4E5606D668641a7b1049177dc0a292131951a99f8c0441392418351394b344b330d7b23315 -D 1080 -v -z -Z 106d7e9abbb45c6b06275f773697fac1de810d3833559829a62e2ced7ac40d43 88.208.221.29
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 993 -l psiphon_ssh_200a9cb66d8942ff -pw EEB9626895888B3A19C419F5401A6A76b531b5fef510c2f39871146d97dcbb07ffe32f9d54bee0113f30785ff2283143 -D 1080 -v -z -Z 9ea0ea014a74149a620cf5e57ce7800f92275d5089f244d6c7110980259ae567 109.228.19.124
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_1fdfd36df723edc5 -pw 0BDDD01C6B0B1A011F29C789B4C7A396ec3d0d741e44546b184164941a514fe50389808696fba4da428c76dc7bdea0df -D 1080 -v -z -Z 089fd025e795744aa44309e64ebd917ef698973eeb7e7a44d6ef0ec4e2aeb1d7 109.228.16.30
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 864 -l psiphon_ssh_2fc891b4be4e696a -pw B43E6C4BEFD60D6315F82FAA811CC6829e8735f391405aa93bda1d07c48e28e8df9fe66ec895b9958c7358ab569534c0 -D 1080 -v -z -Z 37b82bf1e4e9642312537dfae3536475ac9292c6e6a67a91637a0e950a059f98 173.230.138.177
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_1fdfd36df723edc5 -pw 766439BE4726E1C8AAB42A7A96431D2Cec3d0d741e44546b184164941a514fe50389808696fba4da428c76dc7bdea0df -D 1080 -v -z -Z 089fd025e795744aa44309e64ebd917ef698973eeb7e7a44d6ef0ec4e2aeb1d7 109.228.16.30
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_c95ad082dd38da35 -pw 2D66B480EA80F65A83277A8E6097429Bb3ac8ce910058c47fe71d91c7e7b5a6dcce3834c6ddf367e6ba8182104ce3dcd -D 1080 -v -z -Z addf635286281612cabd741b5132122e5c49f58419fc03f8feb1bb0a5f5414e5 88.208.220.118
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 261 -l psiphon_ssh_a92e312c6c8c96a3 -pw 5612582597238156C509C2DAB8EF8B148a37f8e1862b3584d427d4a2b4d421ae10884bb698d9f172fc7c5b95d1dca359 -D 1080 -v -z -Z fb3bfc16c023b03fee6b09ddbf7a0972acce0b80f98d9333e59001f146f0d777 88.208.222.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_b589bf21758d4b8b -pw 59FA542F40FE20BD5A36CB680B825C0Ca5d77d5fdc2a2e510d91406484c8f2a4d64da0607d1a0344771b13e03909b131 -D 1080 -v -z -Z 7fbf6b741a3990ecca5d0ed7d682c53759c49dfa32a53069ddf94dbecf51f2d2 213.171.207.70
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 993 -l psiphon_ssh_200a9cb66d8942ff -pw 6953B52225FFE1A5100465D9BDE875F9b531b5fef510c2f39871146d97dcbb07ffe32f9d54bee0113f30785ff2283143 -D 1080 -v -z -Z 9ea0ea014a74149a620cf5e57ce7800f92275d5089f244d6c7110980259ae567 109.228.19.124
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_ed2c53d2065a1433 -pw 35B25855DAE8DACE5C8D60DC13A926A7560abff533336abcc67286408fab7919450d48786d39461cdfad8f2d0c19d3c8 -D 1080 -v -z -Z 2fe5d289c09d607d8ce86cb5fa3b354414c087551e840a0ef1682813a7f788e3 109.228.17.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 591 -l psiphon_ssh_3c531dae36899e80 -pw C7E906E2C2E372622E477E7FAB621D23f6e8340eb0e14bc2f3c9ff5d5caa05b304b596895b81b121397529d16ac74be6 -D 1080 -v -z -Z ff3ecc26ef067d57fe64c84c55a65a2bde70dbf4b25999fe90a1bc9a3823f48c 212.71.255.128
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_4dcd26c03a0606c4 -pw EAE54B48FB3A37751F2EB1012FC082BDb733f9931e09732eae3a5fa867062ac087e62796244484780289c9750852abc6 -D 1080 -v -z -Z b7aa2658cdd06d009908e970deef5e8e7f0f758833436b2273e13fc77c7d251b 213.171.197.146
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_239411f4e723064b -pw 5E1C90C31B5AA3D1367F9BE9B56DA0FAb4f5cc4ec201f4137671b21163f338ad8648c9fa36d13652a45f2606bece4463 -D 1080 -v -z -Z 3ae3e881e0606e19f7bd0c3ca6765f1cfd511c331ceb61e6fb37abb283272c16 213.171.196.51
  • '%TEMP%\psiphon3-plonk.exe' /pid=3520
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_ab00a6edcd942e62 -pw 0CF21F9D65F2ADEFD9B942BAE54F623D641a7b1049177dc0a292131951a99f8c0441392418351394b344b330d7b23315 -D 1080 -v -z -Z 106d7e9abbb45c6b06275f773697fac1de810d3833559829a62e2ced7ac40d43 88.208.221.29
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_95a4a0f9d0a66005 -pw 69BBC40CB861EAE7D549514489341090201a155aad5fbd951fe89859e303964726a52dee36cf258f09d767207bca3377 -D 1080 -v -z -Z e5a6aeb323210e318d36c181a02cdf4759b299356b0fc21f0315b3ae941eca32 109.228.19.160
  • '%TEMP%\psiphon3-plonk.exe' /pid=3784
  • '%TEMP%\psiphon3-plonk.exe' /pid=3804
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 922 -l psiphon_ssh_6aa3a220950ea506 -pw 431581C3FA22617F5D5EF399266A4317ed41337529ad8a79d9031742cf429bbe5e9d561dda67a8864bb925a5514254b5 -D 1080 -v -z -Z 09b02054994c66fe4649440d8ad2ab2efca0648c863e27754a8b548c127a6152 213.171.207.94
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_02505cd3155e800d -pw EE87665AF0E14880DFB92F2236495C652e3c5fe0209a9a6cdc3dc2e142ac74e1dce02743ceb10200858178f2656dc443 -D 1080 -v -z -Z e3a111d6cda546263b2dcfa0026b4ec8daf676faa801c51d52e3ca9d26216ae2 109.228.17.68
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_c7466b8ed0324498 -pw 82C5F9623A8E08E0B29BBCB8158573CC9f03443e30cdffc3eba1dcec304c4d5c058a7b21e80cfcba9b1ad2be3e2f9566 -D 1080 -v -z -Z aeb4fce445d1aac89ecd376a6ca3d64d6137deb8a5e4b79384e54e37c61f3efe 213.171.199.170
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 123 -l psiphon_ssh_b6b66e0b810bfa79 -pw 72560F9A981AD2209F731E8BBD19721E496f75fd5aa6be7dc5942cd8d83bc33ca16e662e2f97fcb40c4f74527ff8780f -D 1080 -v -z -Z 406815c4d4c28bc4240a93a5ad9e3a07f169ae359f35ba5ef38370088c36cd4b 109.228.19.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_bbca7f28d65f0c42 -pw A0BFD182B5E66F683190ECF4BD871AC9e54f2e857f67134e22235fa47faf3849575e37b62820c247bc65ba8a34914c31 -D 1080 -v -z -Z b4487abc87e74a536b6d99a70ad7c8b2e1a7473f95e79be6a224d867c5a6197b 109.228.16.60
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 587 -l psiphon_ssh_c7466b8ed0324498 -pw B06DA882165B3E9A7A2787D0FCF881E89f03443e30cdffc3eba1dcec304c4d5c058a7b21e80cfcba9b1ad2be3e2f9566 -D 1080 -v -z -Z aeb4fce445d1aac89ecd376a6ca3d64d6137deb8a5e4b79384e54e37c61f3efe 213.171.199.170
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 922 -l psiphon_ssh_6aa3a220950ea506 -pw C967862F8ACDDBC0D01A5BFFDE3DFE62ed41337529ad8a79d9031742cf429bbe5e9d561dda67a8864bb925a5514254b5 -D 1080 -v -z -Z 09b02054994c66fe4649440d8ad2ab2efca0648c863e27754a8b548c127a6152 213.171.207.94
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_bbca7f28d65f0c42 -pw AE5A03B95ED6CA6767B7CBBE7D1873BDe54f2e857f67134e22235fa47faf3849575e37b62820c247bc65ba8a34914c31 -D 1080 -v -z -Z b4487abc87e74a536b6d99a70ad7c8b2e1a7473f95e79be6a224d867c5a6197b 109.228.16.60
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_ab00a6edcd942e62 -pw 533EAF8A1EB13B52D93E162E2D557DFD641a7b1049177dc0a292131951a99f8c0441392418351394b344b330d7b23315 -D 1080 -v -z -Z 106d7e9abbb45c6b06275f773697fac1de810d3833559829a62e2ced7ac40d43 88.208.221.29
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 123 -l psiphon_ssh_b6b66e0b810bfa79 -pw A1B61EAB9BBB7A87B74710CE145CCB1C496f75fd5aa6be7dc5942cd8d83bc33ca16e662e2f97fcb40c4f74527ff8780f -D 1080 -v -z -Z 406815c4d4c28bc4240a93a5ad9e3a07f169ae359f35ba5ef38370088c36cd4b 109.228.19.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_c95ad082dd38da35 -pw FD22798BA7D574AE322E1088D54919E8b3ac8ce910058c47fe71d91c7e7b5a6dcce3834c6ddf367e6ba8182104ce3dcd -D 1080 -v -z -Z addf635286281612cabd741b5132122e5c49f58419fc03f8feb1bb0a5f5414e5 88.208.220.118
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 864 -l psiphon_ssh_2fc891b4be4e696a -pw 3F7BA8E061942CDBBAC2745EB03437DE9e8735f391405aa93bda1d07c48e28e8df9fe66ec895b9958c7358ab569534c0 -D 1080 -v -z -Z 37b82bf1e4e9642312537dfae3536475ac9292c6e6a67a91637a0e950a059f98 173.230.138.177
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_b589bf21758d4b8b -pw F5675A1501C42FCA21C14B978E24055Ba5d77d5fdc2a2e510d91406484c8f2a4d64da0607d1a0344771b13e03909b131 -D 1080 -v -z -Z 7fbf6b741a3990ecca5d0ed7d682c53759c49dfa32a53069ddf94dbecf51f2d2 213.171.207.70
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_02505cd3155e800d -pw 4F9FCEBDDBCF013E6A82301905F969DA2e3c5fe0209a9a6cdc3dc2e142ac74e1dce02743ceb10200858178f2656dc443 -D 1080 -v -z -Z e3a111d6cda546263b2dcfa0026b4ec8daf676faa801c51d52e3ca9d26216ae2 109.228.17.68
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 261 -l psiphon_ssh_a92e312c6c8c96a3 -pw 39756701C4AFC205938BC569B42E5E468a37f8e1862b3584d427d4a2b4d421ae10884bb698d9f172fc7c5b95d1dca359 -D 1080 -v -z -Z fb3bfc16c023b03fee6b09ddbf7a0972acce0b80f98d9333e59001f146f0d777 88.208.222.174
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_069dc48f62be08b0 -pw 1A7AD5E4F083BC67D0B4206B5D2FA3BBbefce5c78aa6016f1f3d587d2cb29340d885ca4e0bd9b53b13e2b51051339565 -D 1080 -v -z -Z b3a321c7210c9bc22a5a33a7579770534e24ef3236cdc17d86b49dcc41908df7 109.228.16.35
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_ade84e3d844e5077 -pw 3CD8BE6102FC02ABD1C9681DE6445AC28627a47fc0d76e05a2eb1589c0938bfa643d5a036bc3592014d7c6c3f62d1ca3 -D 1080 -v -z -Z 0de24746124593ddb00b457a77d55afdf4281a116c7458e43aa51d2b49edca85 213.171.206.26
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_6a3fa0f1f1d38317 -pw 15DBD53790BC04CDECF23A6344E76D4E8dba9f488a9e4cae0115aca80de4cc35b4cfef33f2186d71a64d2d6839b49bca -D 1080 -v -z -Z 9f99e75488d0dd4cc45ee98292e21ca74e239b2e7c2d46b285d8ce4feb9d8682 109.228.19.66
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_8d9be6ef12ead4bc -pw F508A053E6FFA3CC32DFA82FE066D3A0b76565f0588fa9ab3dc4f86e5732220834ed830418aa5a1e3a749bac1507f02d -D 1080 -v -z -Z d658242c973a2aa7ac931f1a07c68d170146b81308e68f7d5be6a3188378f248 109.228.16.83
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_441183f9b80a017b -pw 23ECEF18ECF8597C653D4150709B6CD14be6a9aa0bb0b59a86455dfab21c470237a2ab1c5fc07ca2a24ad487f990fccc -D 1080 -v -z -Z ef0371d75ed04ce8304c4f5f2a1699867efdf96585fea800eb5f000d0c486adb 213.171.207.119
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 984 -l psiphon_ssh_386b186c93821d58 -pw AB6427A3D6F9055E8D6A22D59AAE279Ef1cdafe751eaba45372fa15cfe0b58007c16855dc6103a0cd217b3297f6dc957 -D 1080 -v -z -Z d3b045accb5af6114005ae38210dfdbbe92bed7be7be6838270043e7212caec5 109.228.19.129
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 995 -l psiphon_ssh_95a4a0f9d0a66005 -pw 521F6C31646B6D7D8D76365E0200E242201a155aad5fbd951fe89859e303964726a52dee36cf258f09d767207bca3377 -D 1080 -v -z -Z e5a6aeb323210e318d36c181a02cdf4759b299356b0fc21f0315b3ae941eca32 109.228.19.160
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 513 -l psiphon_ssh_4737411b506a593b -pw 2B19E963591D44BC8A84987A0FE163632e52023b3e10781ef75e1c5dbd9f6ad732a0f589af3c68e697a0f879d5275216 -D 1080 -v -z -Z 7e4b7a1f7dde6d1ea5d9ea87c1986848eeacfc4c89808674baf6aa0e79e82d40 109.228.19.134
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 465 -l psiphon_ssh_d532e381ce8afcc4 -pw C5B06D9422CBF8040511A7E6C58C63A4607bc73963cf72777ccfa65674b24c072d7a6ced1b8d7454064e59722e5d4cff -D 1080 -v -z -Z 2a936b11a11dd61fcdb1a69e29e236b5644b68b81daaa6ecc60bd428a4041f3c 88.208.221.86
  • '%TEMP%\psiphon3-plonk.exe' -ssh -C -N -batch -P 748 -l psiphon_ssh_82ded20d2f4fc808 -pw 520F6609D99D0496DD47D4CC4BD2C81654789f8f04216f1d46c08dffd7b311fa94f7a83cf6123fb8dae865b31ace6d9d -D 1080 -v -z -Z 6dcc6ea0bad98023fa1871872005e0a737b40f63d6ece50ef29b0ff6ec6b2649 213.171.197.198
Modifies file system :
Creates the following files:
  • %HOMEPATH%\PUTTY.RND
  • %WINDIR%\PUTTY.RND
  • %APPDATA%\PUTTY.RND
  • %TEMP%\psiphon3-plonk.exe
  • <LS_APPDATA>\PUTTY.RND
Network activity:
Connects to:
  • '21#.#71.207.94':922
  • '17#.#30.138.177':864
  • '21#.#71.196.51':465
  • '10#.#28.16.30':465
  • '10#.#28.19.124':993
  • 's3.###zonaws.com':443
  • '88.##8.221.29':995
  • '10#.#28.17.66':587
  • '88.##8.222.174':261
  • '21#.#1.255.128':591
  • '21#.#71.197.146':465
  • '10#.#28.19.174':123
  • '21#.#71.207.70':465
  • '10#.#28.17.68':995
  • 'localhost':1049
  • '88.##8.221.86':465
  • '88.##8.220.118':995
  • '21#.#71.206.26':465
  • '21#.#71.197.198':748
  • 'localhost':1080
  • '10#.#28.19.129':984
  • '10#.#28.19.134':513
  • '21#.#71.199.170':587
  • '10#.#28.16.60':995
  • '10#.#28.19.160':995
  • '10#.#28.16.83':465
  • '10#.#28.16.35':995
  • '10#.#28.19.66':995
  • '21#.#71.207.119':465
UDP:
  • DNS ASK s3.###zonaws.com
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'

Recommandations pour le traitement

  1. Si le système d'exploitation peut être démarré (en mode normal ou en mode sans échec), téléchargez Dr.Web Security Space et lancez un scan complet de votre ordinateur et de tous les supports amovibles que vous utilisez. En savoir plus sur Dr.Web Security Space.
  2. Si le démarrage du système d'exploitation est impossible, veuillez modifier les paramètres du BIOS de votre ordinateur pour démarrer votre ordinateur via CD/DVD ou clé USB. Téléchargez l'image du disque de secours de restauration du système Dr.Web® LiveDisk ou l'utilitaire pour enregistrer Dr.Web® LiveDisk sur une clé USB, puis préparez la clé USB appropriée. Démarrez l'ordinateur à l'aide de cette clé et lancez le scan complet et le traitement des menaces détectées.

Veuillez lancer le scan complet du système à l'aide de Dr.Web Antivirus pour Mac OS.

Veuillez lancer le scan complet de toutes les partitions du disque à l'aide de Dr.Web Antivirus pour Linux.

  1. Si votre appareil mobile fonctionne correctement, veuillez télécharger et installer sur votre appareil mobile Dr.Web pour Android. Lancez un scan complet et suivez les recommandations sur la neutralisation des menaces détectées.
  2. Si l'appareil mobile est bloqué par le Trojan de la famille Android.Locker (un message sur la violation grave de la loi ou la demande d'une rançon est affiché sur l'écran de l'appareil mobile), procédez comme suit:
    • démarrez votre Smartphone ou votre tablette en mode sans échec (si vous ne savez pas comment faire, consultez la documentation de l'appareil mobile ou contactez le fabricant) ;
    • puis téléchargez et installez sur votre appareil mobile Dr.Web pour Android et lancez un scan complet puis suivez les recommandations sur la neutralisation des menaces détectées ;
    • Débranchez votre appareil et rebranchez-le.

En savoir plus sur Dr.Web pour Android