Trojan.DownLoader34.1208

Technical Information

Modifies file system

Creates the following files

%WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\metadata\f0accf77cdcbff39f6191887f6d2d357
%WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\content\f0accf77cdcbff39f6191887f6d2d357

Network activity

Connects to

'da##.71xe.com':445

TCP

HTTP GET requests

http://www.uc##g.com/statics/2018pc/css/style.css
http://www.uc##g.com/uploads/icon/letv.png
http://www.uc##g.com/uploads/icon/ludashi.png
http://www.uc##g.com/uploads/icon/GlaryUtilities.png
http://www.uc##g.com/uploads/icon/PartitionMagic.png
http://www.uc##g.com/uploads/icon/DiskGenius.png
http://www.uc##g.com/uploads/icon/meituxx.png
http://www.uc##g.com/uploads/icon/photoshop.png
http://www.uc##g.com/uploads/icon/2345ktw.png
http://www.uc##g.com/uploads/icon/guangyingkantu.jpg
http://www.uc##g.com/uploads/icon/qudongjingling.jpg
http://www.uc##g.com/uploads/icon/qudongrs.png
http://www.uc##g.com/uploads/icon/youku.png
http://www.uc##g.com/uploads/icon/iqyi.png
http://www.uc##g.com/uploads/icon/360qdds.png
http://www.uc##g.com/uploads/icon/yingyongbao.png
http://www.uc##g.com/uploads/icon/huaweisjzs.png
http://www.uc##g.com/uploads/icon/i4tools.jpg
http://www.uc##g.com/uploads/icon/zhifubao.png
http://www.uc##g.com/uploads/icon/baiduqianbao.png
http://www.uc##g.com/uploads/icon/jingdongjinrong.jpg
http://www.uc##g.com/uploads/icon/yizhifuapp.png
http://www.uc##g.com/uploads/2020/0209/2002095e40068c5e83b.png
http://www.uc##g.com/uploads/2019/0716/1907165d2d7734d33c3.png
http://www.uc##g.com/uploads/2019/0308/20190308112122718.png
http://www.uc##g.com/uploads/2019/0410/1904105cae0e60f3417.png
http://www.uc##g.com/uploads/icon/DriverReviver.png
http://www.uc##g.com/uploads/icon/360sjzs.png
http://www.uc##g.com/uploads/icon/QQLive.png
http://www.uc##g.com/uploads/icon/kuwo.png
http://www.uc##g.com/uploads/icon/wangyiyunyinyue.png
http://www.uc##g.com/uploads/icon/uTorrent.png
http://www.uc##g.com/uploads/icon/qq.png
http://www.uc##g.com/uploads/icon/tim.png
http://www.uc##g.com/uploads/2018/1018/20181018050057486.jpg
http://www.uc##g.com/uploads/icon/weixin.png
http://www.uc##g.com/uploads/icon/baidusrf.jpg
http://www.uc##g.com/uploads/icon/sogousrf.jpg
http://www.uc##g.com/uploads/icon/qqsrf.jpg
http://www.uc##g.com/uploads/icon/iflysrf.jpg
http://www.uc##g.com/uploads/icon/qqwubi.png
http://www.uc##g.com/uploads/icon/sogouwubi.png
http://www.uc##g.com/uploads/icon/wnwubisrf.png
http://www.uc##g.com/uploads/icon/xunlei9.png
http://www.uc##g.com/uploads/icon/jpwb.png
http://www.uc##g.com/uploads/icon/GoogleChrome.png
http://www.uc##g.com/uploads/icon/sogougsllq.png
http://www.uc##g.com/uploads/icon/Firefox.png
http://www.uc##g.com/uploads/icon/360sd.jpg
http://www.uc##g.com/uploads/icon/jsduba.png
http://www.uc##g.com/uploads/icon/kuaizip.png
http://www.uc##g.com/uploads/icon/7-zip.png
http://www.uc##g.com/uploads/2019/0119/20190119094744233.png
http://www.uc##g.com/uploads/icon/yingyinxianfeng.png
http://www.uc##g.com/uploads/icon/bdplayer.png
http://www.uc##g.com/uploads/icon/qqmusic.png
http://www.uc##g.com/uploads/icon/kugou.png
http://www.uc##g.com/uploads/icon/360aqllq.png
http://www.uc##g.com/uploads/2019/1220/1912205dfc4bf522af8.png
http://www.uc##g.com/uploads/2020/0329/2003295e80c101160ad.png
http://www.uc##g.com/uploads/2020/0106/2001065e12d42294bfd.jpg
http://www.uc##g.com/uploads/icon/bcfdgssy.png
http://www.uc##g.com/uploads/icon/ssjjwdfz.png
http://www.uc##g.com/uploads/icon/canxiayxzs.png
http://www.uc##g.com/uploads/2019/0316/20190316023010422.png
http://www.uc##g.com/uploads/2019/0125/20190125102958869.png
http://www.uc##g.com/uploads/icon/mumumnq.png
http://www.uc##g.com/uploads/2019/0720/1907205d32b00db77a0.png
http://www.uc##g.com/uploads/icon/youxia.png
http://www.uc##g.com/uploads/icon/LIRW.png
http://www.uc##g.com/uploads/icon/trainer.png
http://www.uc##g.com/img/beianicon.png
http://www.uc##g.com/caches/poster_js/17.js
http://www.uc##g.com/uploads/2020/0717/2007175f1108ae24c61.png
http://www.uc##g.com/uploads/2020/0717/2007175f1104ba238f0.png
http://www.uc##g.com/uploads/2020/0717/2007175f11006d98dc3.png
http://www.uc##g.com/uploads/2020/0717/2007175f11003d2de7e.jpg
http://www.uc##g.com/uploads/2019/0314/20190314090722192.png
http://www.uc##g.com/uploads/2019/0202/20190202114504136.png
http://www.uc##g.com/uploads/2019/0813/1908135d52cf1b3d2a8.png
http://www.uc##g.com/uploads/2018/1210/20181210031723994.png
http://www.uc##g.com/uploads/icon/360.png
http://www.uc##g.com/uploads/icon/HaoZip.png
http://www.uc##g.com/uploads/2019/1108/1911085dc57df4cee40.jpg
http://www.uc##g.com/uploads/2018/1230/20181230054506220.jpg
http://www.uc##g.com/uploads/2019/1030/1910305db9a28c9ed57.png
http://www.uc##g.com/uploads/icon/taobaobasy.png
http://www.uc##g.com/uploads/icon/xingxingmnq.png
http://www.uc##g.com/uploads/2019/0801/1908015d4304089c3fd.jpg
http://www.uc##g.com/uploads/icon/ssjjaishangfz.png
http://www.uc##g.com/uploads/icon/xiaowangxgq.png
http://www.uc##g.com/uploads/icon/wushenfz.png
http://www.uc##g.com/uploads/icon/ucbugzmxy4.png
http://www.uc##g.com/uploads/2019/0717/1907175d2e8068e7a81.jpg
http://www.uc##g.com/uploads/2019/0715/1907155d2c216bc1ee3.png
http://www.uc##g.com/uploads/2019/1104/1911045dbf75f279937.jpg
http://www.uc##g.com/uploads/icon/ARESVIRUS.png
http://www.uc##g.com/uploads/2019/0112/20190112073218300.jpg
http://www.uc##g.com/uploads/2019/0201/20190201082255728.jpg
http://www.uc##g.com/uploads/2019/0328/20190328053004107.jpg
http://www.uc##g.com/uploads/2019/0301/20190301011945857.jpg
http://www.uc##g.com/uploads/2019/0516/1905165cdd110d42491.jpg
http://www.uc##g.com/uploads/2019/0619/1906195d0a553514a27.jpg
http://www.uc##g.com/uploads/2019/1112/1911125dca62a6451cd.jpg
http://www.uc##g.com/uploads/2020/0102/2001025e0d9d359beb1.jpg
http://www.uc##g.com/uploads/2019/1204/1912045de7051737377.jpg
http://www.uc##g.com/uploads/2020/0716/2007165f101495ccb46.jpg
http://www.uc##g.com/uploads/2020/0716/2007165f1013e89a246.jpg
http://www.uc##g.com/uploads/2020/0716/2007165f101383d4985.jpg
http://www.uc##g.com/uploads/2020/0716/2007165f1012ef6a931.jpg
http://www.uc##g.com/uploads/2020/0716/2007165f10128479aa5.jpg
http://www.uc##g.com/uploads/icon/lkwgdgfz.png
http://www.uc##g.com/uploads/icon/lkwg.png
http://www.uc##g.com/uploads/icon/lkwgwukongfz.png
http://www.uc##g.com/uploads/icon/weizhi.png
http://www.uc##g.com/uploads/icon/ucbugzmxy3.png
http://www.uc##g.com/uploads/icon/xiaoyaofz.png
http://www.uc##g.com/uploads/icon/jipinfz.png
http://www.uc##g.com/uploads/icon/fuzhu.png
http://www.uc##g.com/uploads/icon/zmxy4cxfz.png
http://www.uc##g.com/statics/2018pc/images/litterStar.png
http://www.uc##g.com/uploads/icon/idm.png
http://www.uc##g.com/uploads/icon/baofengjihuo.png
http://www.uc##g.com/uploads/2019/1209/1912095dede19d3d6b3.jpg
http://www.uc##g.com/uploads/2020/0717/2007175f110cf30e001.png
http://www.uc##g.com/uploads/2020/0717/2007175f110c6377b35.png
http://www.uc##g.com/uploads/2020/0717/2007175f1109235655f.png
http://www.uc##g.com/uploads/2020/0717/2007175f1107d883b3a.png
http://www.uc##g.com/uploads/2020/0717/2007175f1107390ebd2.png
http://www.uc##g.com/uploads/2020/0717/2007175f1106bc971c8.png
http://www.uc##g.com/uploads/2020/0717/2007175f1106540cb00.png
http://www.uc##g.com/uploads/2020/0717/2007175f1105efa28c0.png
http://www.uc##g.com/uploads/2020/0717/2007175f11055e338c0.png
http://www.uc##g.com/uploads/2020/0717/2007175f11042384907.png
http://www.uc##g.com/uploads/2020/0717/2007175f11033b0230f.png
http://www.uc##g.com/uploads/icon/sjxunlei.png
http://www.uc##g.com/uploads/2020/0717/2007175f110f9a7a4ca.png
http://www.uc##g.com/uploads/2020/0717/2007175f1101a4ed2c6.png
http://www.uc##g.com/uploads/2020/0717/2007175f10ff6582303.png
http://www.uc##g.com/uploads/2020/0426/2004265ea5179514929.png
http://www.uc##g.com/uploads/2020/0717/2007175f10fec8bf730.jpg
http://www.uc##g.com/uploads/2020/0717/2007175f10fe037b975.jpg
http://www.uc##g.com/uploads/2020/0717/2007175f10fc8e9ae06.jpg
http://www.uc##g.com/uploads/icon/zmxy5ucbug.png
http://www.uc##g.com/uploads/2020/0717/2007175f10fa6781eee.jpg
http://www.uc##g.com/uploads/2019/1108/1911085dc4db76dd479.jpg
http://www.uc##g.com/uploads/2019/0201/20190201120327391.png
http://www.uc##g.com/uploads/2019/0128/20190128110117300.png
http://www.uc##g.com/uploads/icon/MrAntiFun.png
http://www.uc##g.com/uploads/2020/0717/2007175f110107e9b02.png
http://www.uc##g.com/uploads/2020/0717/2007175f10ffe260a5e.png
http://www.uc##g.com/uploads/icon/zuoyebang.png
http://www.uc##g.com/uploads/icon/weishi.png
http://www.uc##g.com/uploads/2019/0125/20190125104426153.png
http://www.uc##g.com/statics/2018pc/js/jquery.min.js
http://www.uc##g.com/statics/2018pc/js/plugin.js
http://www.uc##g.com/statics/2018pc/js/common.js
http://cd#.#2wq.com/scrtips/ucbug_8.29.js
http://www.uc##g.com/statics/2018pc/images/logo.png
http://www.uc##g.com/uploads/icon/ce.png
http://www.uc##g.com/uploads/2018/1130/20181130073527214.png
http://www.uc##g.com/uploads/2018/1228/20181228083419501.png
http://www.uc##g.com/uploads/2020/0415/2004155e96fe50615b9.png
http://www.uc##g.com/uploads/2020/0321/2003215e7583e42be6b.png
http://www.uc##g.com/uploads/2019/0916/1909165d7ee32bd82c1.jpg
http://www.uc##g.com/uploads/icon/office2016.png
http://www.uc##g.com/statics/2018pc/js/html5.min.js
http://www.uc##g.com/uploads/icon/wps.png
http://www.uc##g.com/statics/2018pc/images/spr.png
http://www.uc##g.com/uploads/2020/0121/2001215e269ea8f2b8e.png
http://www.uc##g.com/caches/poster_js/1.js
http://www.uc##g.com/uploads/2020/0701/2007015efc0b596f4e7.jpg
http://www.uc##g.com/uploads/2020/0605/2006055ed9c073d15d4.png
http://www.uc##g.com/uploads/2020/0417/2004175e99656c52c0a.png
http://www.uc##g.com/uploads/2019/1224/1912245e0177ec19884.png
http://www.uc##g.com/uploads/2019/1212/1912125df23eecd9147.png
http://www.uc##g.com/uploads/icon/SBgameHacker.png
http://www.uc##g.com/uploads/2019/0920/1909205d847704dbfc3.png
http://www.uc##g.com/uploads/icon/360shoujizs.png
http://www.uc##g.com/uploads/icon/xfplay.png
http://www.uc##g.com/uploads/2019/0302/20190302124354900.png
http://www.uc##g.com/uploads/2020/0422/2004225e9ff6155212b.png
http://www.uc##g.com/uploads/icon/peizhaochen.png
http://www.uc##g.com/uploads/icon/OoklaSpeedtest.png
http://www.uc##g.com/uploads/2018/1220/20181220033211278.png
http://www.uc##g.com/uploads/2020/0607/2006075edc4822c542c.png
http://www.uc##g.com/uploads/2019/0508/1905085cd2f02f133ff.png
http://www.uc##g.com/uploads/2019/1015/1910155da5a391d852f.jpg
http://www.uc##g.com/uploads/icon/mingrizhsy.png
http://www.uc##g.com/uploads/icon/zmxyol.png
http://www.uc##g.com/uploads/icon/id5.png
http://www.uc##g.com/uploads/icon/wzry.png
http://www.uc##g.com/uploads/icon/huoyingrzsy.png
http://www.uc##g.com/uploads/icon/smtw2sy.png
http://www.uc##g.com/uploads/2019/1024/1910245db14c58cec5b.jpg
http://www.uc##g.com/uploads/2019/0814/1908145d541b67bd57f.jpg
http://www.uc##g.com/uploads/2019/0127/20190127073013901.png
http://www.uc##g.com/uploads/2019/1128/1911285ddf45f9c962f.png
http://www.uc##g.com/uploads/2018/1231/20181231032657859.png
http://www.uc##g.com/uploads/2019/1113/1911135dcc1e9c674c4.png
http://www.uc##g.com/uploads/icon/AdobeAcrobat.png
http://www.uc##g.com/uploads/2019/0413/1904135cb137b6582dd.jpg
http://www.uc##g.com/uploads/2019/0624/1906245d0fa32d570d4.jpg
http://www.uc##g.com/uploads/icon/KMSTools.png
http://www.uc##g.com/uploads/icon/MicroKMS.png
http://www.uc##g.com/uploads/2018/1209/20181209091258534.png
http://www.uc##g.com/uploads/2020/0324/2003245e7970f209044.png
http://www.uc##g.com/uploads/icon/yxswz.png
http://www.uc##g.com/uploads/2019/0804/1908045d465d7f8c1fc.jpg
http://www.uc##g.com/uploads/icon/52pojie.png
http://www.uc##g.com/uploads/icon/eyuyan.png
http://www.uc##g.com/uploads/icon/qqguanjia.png
http://www.uc##g.com/uploads/2020/0502/2005025ead1cde4afa1.png
http://www.uc##g.com/uploads/2020/0608/2006085ede190459a97.png
http://www.uc##g.com/uploads/icon/ditiepaokusy.png
http://www.uc##g.com/uploads/2020/0608/2006085ede1a184590b.png
http://www.uc##g.com/uploads/2019/0601/1906015cf1e2168857e.png
http://www.uc##g.com/uploads/2019/0104/20190104124246224.png
http://www.uc##g.com/uploads/2018/1212/20181212032440695.png
http://www.uc##g.com/uploads/2018/1211/20181211100554749.png
http://www.uc##g.com/uploads/2019/0519/1905195ce0c66b1daea.png
http://www.uc##g.com/uploads/2019/0316/20190316032943593.png
http://www.uc##g.com/uploads/icon/CamScanner.png
http://www.uc##g.com/uploads/2020/0705/2007055f0132b02e2d3.png
http://www.uc##g.com/uploads/icon/cnwnl.png
http://www.uc##g.com/uploads/2019/0706/1907065d20444a3af73.png
http://www.uc##g.com/uploads/2019/0528/1905285ced50ef67f45.png
http://www.uc##g.com/uploads/icon/eswjglq.png
http://www.uc##g.com/uploads/icon/Bmap.png
http://www.uc##g.com/uploads/2019/0720/1907205d3337d671b6d.png
http://www.uc##g.com/uploads/2020/0714/2007145f0da06f68fcd.png
http://www.uc##g.com/uploads/2020/0714/2007145f0d9f7ed6426.png
http://www.uc##g.com/uploads/2020/0714/2007145f0d9ea91726f.png
http://www.uc##g.com/uploads/2020/0714/2007145f0d9d8fc9be1.png
http://www.uc##g.com/uploads/2020/0701/2007015efc640a40fce.png
http://www.uc##g.com/uploads/2020/0701/2007015efc62186af64.png
http://www.uc##g.com/uploads/2019/0706/1907065d2044e25371e.png
http://www.uc##g.com/uploads/2020/0623/2006235ef2228dd0c66.png
http://www.uc##g.com/uploads/2020/0623/2006235ef220d49855f.png
http://www.uc##g.com/uploads/2020/0618/2006185eeb582e4fc76.png
http://www.uc##g.com/uploads/2020/0607/2006075edc48e18628b.png
http://www.uc##g.com/uploads/2020/0615/2006155ee7271f341ec.png
http://www.uc##g.com/uploads/2020/0614/2006145ee5f9a69ca4e.png
http://www.uc##g.com/uploads/icon/360zip.png
http://www.uc##g.com/statics/2018pc/images/gotop.png

'hm.##idu.com':443

UDP

DNS ASK uc##g.com
DNS ASK hm.##idu.com
DNS ASK cd#.#2wq.com
DNS ASK da##.71xe.com

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней