Поддержка
Круглосуточная поддержка

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.Inject1.36024

Добавлен в вирусную базу Dr.Web: 2014-01-30

Описание добавлено:

Техническая информация

Вредоносные функции:
Создает и запускает на исполнение:
  • '%HOMEPATH%\F88U\explorer.exe'
Запускает на исполнение:
  • '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe'
Внедряет код в
следующие системные процессы:
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
Изменения в файловой системе:
Создает следующие файлы:
  • %HOMEPATH%\F88U\W49867V79294.QYI
  • %HOMEPATH%\F88U\R5657U63077.PAT
  • %HOMEPATH%\F88U\83473.OMG
  • %HOMEPATH%\F88U\22354.HHT
  • %HOMEPATH%\F88U\39714.HYS
  • %HOMEPATH%\F88U\33101.GCB
  • %HOMEPATH%\F88U\T2076C49752.IYL
  • %HOMEPATH%\F88U\63571.SXD
  • %HOMEPATH%\F88U\33544.EXN
  • %HOMEPATH%\F88U\I28961I42590.WCS
  • %HOMEPATH%\F88U\29503.DDU
  • %HOMEPATH%\F88U\7739.VVQ
  • %HOMEPATH%\F88U\50053.FXF
  • %HOMEPATH%\F88U\X74280A45929.MIG
  • %HOMEPATH%\F88U\77963.NZA
  • %HOMEPATH%\F88U\M22886L36547.JYC
  • %HOMEPATH%\F88U\F11972H69524.CMY
  • %HOMEPATH%\F88U\F1673C34471.MSH
  • %HOMEPATH%\F88U\31870.ZID
  • %HOMEPATH%\F88U\N66109H34124.IZQ
  • %HOMEPATH%\F88U\Y87364O48804.OPE
  • %HOMEPATH%\F88U\N12602X67953.QJP
  • %HOMEPATH%\F88U\A17505L82531.BDA
  • %HOMEPATH%\F88U\L24949V51330.CWF
  • %HOMEPATH%\F88U\N2553T52424.ZPD
  • %HOMEPATH%\F88U\W4550L90175.VEB
  • %HOMEPATH%\F88U\61790.JGZ
  • %HOMEPATH%\F88U\19355.FWA
  • %HOMEPATH%\F88U\23228.FBD
  • %HOMEPATH%\F88U\X12749E96413.EAP
  • %HOMEPATH%\F88U\74539.ZRG
  • %HOMEPATH%\F88U\60592.CAC
  • %HOMEPATH%\F88U\48235.GCG
  • %HOMEPATH%\F88U\D79434W67379.JRT
  • %HOMEPATH%\F88U\E71662R75767.FZR
  • %HOMEPATH%\F88U\P17364E49799.TNU
  • %HOMEPATH%\F88U\5636.PAY
  • %HOMEPATH%\F88U\J8629P31905.XHB
  • %HOMEPATH%\F88U\O74969E25598.MSO
  • %HOMEPATH%\F88U\G96704G60359.URT
  • %HOMEPATH%\F88U\C35176E32890.KVR
  • %HOMEPATH%\F88U\87869.VGZ
  • %HOMEPATH%\F88U\50956.MZD
  • %HOMEPATH%\F88U\37956.MZF
  • %HOMEPATH%\F88U\M21018P38131.ULA
  • %HOMEPATH%\F88U\F86746U82876.BBL
  • %HOMEPATH%\F88U\N46263R14502.NSV
  • %HOMEPATH%\F88U\Y91846I46536.WCN
  • %HOMEPATH%\F88U\H51551E87537.RCN
  • %HOMEPATH%\F88U\58854.MXS
  • %HOMEPATH%\F88U\37905.PNP
  • %HOMEPATH%\F88U\H47744G11608.ZAD
  • %HOMEPATH%\F88U\44055.CRP
  • %HOMEPATH%\F88U\46252.VOD
  • %HOMEPATH%\F88U\44638.VLK
  • %HOMEPATH%\F88U\K15767N27192.EIX
  • %HOMEPATH%\F88U\A66965Q92777.JPH
  • %HOMEPATH%\F88U\39403.QDN
  • %HOMEPATH%\F88U\48472.MGG
  • %HOMEPATH%\F88U\25223.GJQ
  • %HOMEPATH%\F88U\90464.UVG
  • %HOMEPATH%\F88U\75457.VVB
  • %HOMEPATH%\F88U\R27560V25085.TSB
  • %HOMEPATH%\F88U\90968.VJS
  • %HOMEPATH%\F88U\65111.HYH
  • %HOMEPATH%\F88U\S10240N93697.BLN
  • %HOMEPATH%\F88U\37740.PQQ
  • %HOMEPATH%\F88U\15558.VKI
  • %HOMEPATH%\F88U\R37330T21371.ILJ
  • %HOMEPATH%\F88U\N63227B49634.NXK
  • %HOMEPATH%\F88U\G54658J86293.HRK
  • %HOMEPATH%\F88U\99509.DMF
  • %HOMEPATH%\F88U\17212.TNT
  • %HOMEPATH%\F88U\31650.VQR
  • %HOMEPATH%\F88U\Q82279M33695.PIV
  • %HOMEPATH%\F88U\J17339C24804.UFJ
  • %HOMEPATH%\F88U\34789.ITI
  • %HOMEPATH%\F88U\Y12284B88556.PIX
  • %HOMEPATH%\F88U\C44884J21396.GFS
  • %HOMEPATH%\F88U\Q58083B56487.MSV
  • %HOMEPATH%\F88U\B99519Q38792.TZP
  • %HOMEPATH%\F88U\38288.UNM
  • %HOMEPATH%\F88U\G54704Y21750.IFQ
  • %HOMEPATH%\F88U\W63443D11061.EQQ
  • %HOMEPATH%\F88U\U12847H45925.KTP
  • %HOMEPATH%\F88U\46198.WJN
  • %HOMEPATH%\F88U\35278.KXY
  • %HOMEPATH%\F88U\22379.QFY
  • %HOMEPATH%\F88U\S92515H10615.YDJ
  • %HOMEPATH%\F88U\L88454R97281.IFY
  • %HOMEPATH%\F88U\93503.AEY
  • %HOMEPATH%\F88U\R41942Q32975.XHU
  • %HOMEPATH%\F88U\72573.BSA
  • %HOMEPATH%\F88U\9969.ANW
  • %HOMEPATH%\F88U\31389.RGU
  • %HOMEPATH%\F88U\D42596W6881.BES
  • %HOMEPATH%\F88U\81435.HGC
  • %HOMEPATH%\F88U\C54893K88083.MHC
  • %HOMEPATH%\F88U\X95661R90182.ZAX
  • %HOMEPATH%\F88U\I85399K50101.VMI
  • %HOMEPATH%\F88U\3405.WUL
  • %HOMEPATH%\F88U\K93428E52129.KTH
  • %HOMEPATH%\F88U\A28915O86106.OAH
  • %HOMEPATH%\F88U\88156.ZHQ
  • %HOMEPATH%\F88U\W27728Z51532.QRX
  • %HOMEPATH%\F88U\36548.CBW
  • %HOMEPATH%\F88U\V20162H1978.SDJ
  • %HOMEPATH%\F88U\18494.AAO
  • %HOMEPATH%\F88U\6231.RVK
  • %HOMEPATH%\F88U\49947.OFX
  • %HOMEPATH%\F88U\93994.GTC
  • %HOMEPATH%\F88U\84993.UYO
  • %HOMEPATH%\F88U\92863.HMI
  • %HOMEPATH%\F88U\41405.RZN
  • %HOMEPATH%\F88U\D88455L28793.SZO
  • %HOMEPATH%\F88U\A67305Q53695.FIG
  • %HOMEPATH%\F88U\D97325H83209.UAF
  • %HOMEPATH%\F88U\A87756O97469.HZY
  • %HOMEPATH%\F88U\D15967N61471.OIZ
  • %HOMEPATH%\F88U\B5871P75675.DIG
  • %HOMEPATH%\F88U\I8505Z29694.VOX
  • %HOMEPATH%\F88U\67024.XVQ
  • %HOMEPATH%\F88U\Y74758E69818.YXK
  • %HOMEPATH%\F88U\K24763F7927.GNE
  • %HOMEPATH%\F88U\O80828J28479.CNK
  • %HOMEPATH%\F88U\22746.WDP
  • %HOMEPATH%\F88U\17273.CCE
  • %HOMEPATH%\F88U\65647.ZUP
  • %HOMEPATH%\F88U\N40184H54129.SGC
  • %HOMEPATH%\F88U\23690.CTH
  • %HOMEPATH%\F88U\G6116E58996.VMN
  • %HOMEPATH%\F88U\Z33769G28899.KHD
  • %HOMEPATH%\F88U\11299.UVU
  • %HOMEPATH%\F88U\3586.LFO
  • %HOMEPATH%\F88U\58197.RVG
  • %HOMEPATH%\F88U\E88613R87042.EWL
  • %HOMEPATH%\F88U\F48567S31726.YVO
  • %HOMEPATH%\F88U\C57908Q23871.XUE
  • %HOMEPATH%\F88U\84698.FES
  • %HOMEPATH%\F88U\R89183P16307.TNZ
  • %HOMEPATH%\F88U\M59245D50716.XYO
  • %HOMEPATH%\F88U\Q76245B60501.KDB
  • %HOMEPATH%\F88U\U62094M4157.NAO
  • %HOMEPATH%\F88U\O44848X25752.DDF
  • %HOMEPATH%\F88U\41949.HBY
  • %HOMEPATH%\F88U\54627.IWK
  • %HOMEPATH%\F88U\59196.BCF
  • %HOMEPATH%\F88U\E14529E20592.FSV
  • %HOMEPATH%\F88U\67427.TKF
  • %HOMEPATH%\F88U\25620.QTZ
  • %HOMEPATH%\F88U\E2038R14713.KJD
  • %HOMEPATH%\F88U\14851.YIM
  • %HOMEPATH%\F88U\14629.YMS
  • %HOMEPATH%\F88U\58954.ZCH
  • %HOMEPATH%\F88U\72867.LGO
  • %HOMEPATH%\F88U\K37689S36215.JYE
  • %HOMEPATH%\F88U\34435.UDG
  • %HOMEPATH%\F88U\34751.UZB
  • %HOMEPATH%\F88U\Y66462N81031.IXG
  • %HOMEPATH%\F88U\35924.PBF
  • %HOMEPATH%\F88U\C33029P95419.VFC
  • %HOMEPATH%\F88U\73608.QYV
  • %HOMEPATH%\F88U\92830.MVR
  • %HOMEPATH%\F88U\72723.PJI
  • %HOMEPATH%\F88U\70562.EMX
  • %HOMEPATH%\F88U\F24255V38640.UTL
  • %HOMEPATH%\F88U\Y12465K61506.HWG
  • %HOMEPATH%\F88U\71437.QHG
  • %HOMEPATH%\F88U\N2623I23091.FHJ
  • %HOMEPATH%\F88U\O3732G34232.IVY
  • %HOMEPATH%\F88U\R30273G12621.OGB
  • %HOMEPATH%\F88U\C70678K50220.UHQ
  • %HOMEPATH%\F88U\24561.PQT
  • %HOMEPATH%\F88U\5851.KZI
  • %HOMEPATH%\F88U\62816.HWB
  • %HOMEPATH%\F88U\X46682U89671.AZF
  • %HOMEPATH%\F88U\JT.MOV
  • %HOMEPATH%\F88U\8245.XYP
  • %HOMEPATH%\D23L13.QQ9
  • %TEMP%\aut1.tmp
  • %HOMEPATH%\F88U\W33368A93184.LML
  • %HOMEPATH%\F88U\B70605V60788.REA
  • %HOMEPATH%\F88U\F31793G13251.OLR
  • %HOMEPATH%\F88U\25262.BRH
  • %HOMEPATH%\F88U\J50958K84727.CHM
  • %HOMEPATH%\F88U\I44221L40604.IKX
  • %HOMEPATH%\F88U\T9077A56440.JUH
  • %HOMEPATH%\F88U\X41544A88124.YUF
  • %HOMEPATH%\F88U\6963.EXA
  • %HOMEPATH%\F88U\K26069R4259.UZY
  • %HOMEPATH%\F88U\F78574W96517.DWR
  • %HOMEPATH%\F88U\D36978L89620.NRO
  • %HOMEPATH%\F88U\A52775Q8795.CMB
  • %HOMEPATH%\F88U\78617.ZNN
  • %HOMEPATH%\F88U\94693.LKF
  • %HOMEPATH%\F88U\43220.VXJ
  • %HOMEPATH%\F88U\31814.YNO
  • %HOMEPATH%\F88U\C39562T56964.NZL
  • %HOMEPATH%\F88U\55939.QJE
  • %HOMEPATH%\F88U\V22283T48290.VLZ
  • %HOMEPATH%\F88U\D11536V87660.GRN
  • %HOMEPATH%\F88U\5889.MWS
  • %HOMEPATH%\F88U\N39414Y2351.OTC
  • %HOMEPATH%\F88U\27164.FLX
  • %HOMEPATH%\F88U\41316.BFX
  • %HOMEPATH%\F88U\Z58579J96620.NVU
  • %HOMEPATH%\F88U\P84080A57303.UZJ
  • %HOMEPATH%\F88U\F82674G3288.ZSP
  • %HOMEPATH%\F88U\29462.IDI
  • %HOMEPATH%\F88U\D10762V4513.PIP
  • %HOMEPATH%\F88U\I96293Q80009.OSA
  • %HOMEPATH%\F88U\29836.PHM
  • %HOMEPATH%\F88U\V14665Y25730.ABE
  • %HOMEPATH%\F88U\Q15857T46981.AND
  • %HOMEPATH%\F88U\49903.KQO
  • %HOMEPATH%\F88U\E84900U62326.NML
  • %HOMEPATH%\F88U\X4227V23392.VRN
  • %HOMEPATH%\F88U\B6479M5202.QGF
  • %HOMEPATH%\F88U\P2465G9457.VFA
  • %HOMEPATH%\F88U\41594.CRA
  • %HOMEPATH%\F88U\V82475I76118.FUS
  • %HOMEPATH%\F88U\K51627R56012.DXE
  • %HOMEPATH%\F88U\R30849X7928.PBH
  • %HOMEPATH%\F88U\21616.VBC
  • %HOMEPATH%\F88U\L99212S2536.RLN
  • %HOMEPATH%\F88U\T23179T67416.EHL
  • %HOMEPATH%\F88U\F45931T76053.PKD
  • %HOMEPATH%\F88U\2436.RYF
  • %HOMEPATH%\F88U\V41638V90007.KMY
  • %HOMEPATH%\F88U\A99647S63184.OYQ
  • %HOMEPATH%\F88U\46034.YEV
  • %HOMEPATH%\F88U\I46374V77935.CYM
  • %HOMEPATH%\F88U\S92248B86632.WMT
  • %HOMEPATH%\F88U\Z16770G16401.KSC
  • %HOMEPATH%\F88U\78250.GKL
  • %HOMEPATH%\F88U\97327.GIJ
  • %HOMEPATH%\F88U\P1447I29767.QEJ
  • %HOMEPATH%\F88U\D68834V51560.AQB
  • %HOMEPATH%\F88U\17456.OWW
  • %HOMEPATH%\F88U\20811.GHX
  • %HOMEPATH%\F88U\J99107S4428.NKT
  • %HOMEPATH%\F88U\48775.NUF
  • %HOMEPATH%\F88U\Y71843J39917.BIJ
  • %HOMEPATH%\F88U\75467.HDO
  • %HOMEPATH%\F88U\24343.DVS
  • %HOMEPATH%\F88U\A80916M88115.COT
  • %HOMEPATH%\F88U\B68735D59878.AAI
  • %HOMEPATH%\F88U\F55244Y83132.OQV
  • %HOMEPATH%\F88U\P69864W76682.MTM
  • %HOMEPATH%\F88U\K71926J96942.MKE
  • %HOMEPATH%\F88U\I53389H28701.VZD
  • %HOMEPATH%\F88U\O18695N64829.ZUU
  • %HOMEPATH%\F88U\C67169Z94799.FTX
  • %HOMEPATH%\F88U\U51321J44395.YBG
  • %HOMEPATH%\F88U\81555.FAM
  • %HOMEPATH%\F88U\9572.DKQ
  • %HOMEPATH%\F88U\I76161J27784.GGK
  • %HOMEPATH%\F88U\T15518I84500.CFZ
  • %HOMEPATH%\F88U\A78987S92894.POQ
  • %HOMEPATH%\F88U\12033.PQW
  • %HOMEPATH%\F88U\54009.FPM
  • %HOMEPATH%\F88U\6544.VQN
  • %HOMEPATH%\F88U\A87209Y63520.DBG
  • %HOMEPATH%\F88U\28409.ESY
  • %HOMEPATH%\F88U\W97957T11829.VBB
  • %HOMEPATH%\F88U\V70132I31956.LUM
  • %HOMEPATH%\F88U\36309.IWP
  • %HOMEPATH%\F88U\37148.BNS
  • %HOMEPATH%\F88U\30606.NKU
  • %HOMEPATH%\F88U\D38460O11736.KBW
  • %HOMEPATH%\F88U\P44401Z92978.EAV
  • %HOMEPATH%\F88U\12241.TYV
  • %HOMEPATH%\F88U\F67126W92534.VIZ
  • %HOMEPATH%\F88U\L64181K21736.GKZ
  • %HOMEPATH%\F88U\61610.APP
  • %HOMEPATH%\F88U\25972.SKK
  • %HOMEPATH%\F88U\39902.VNQ
  • %HOMEPATH%\F88U\J6822I74347.ETO
  • %HOMEPATH%\F88U\38254.ATQ
  • %HOMEPATH%\F88U\61785.PCS
  • %HOMEPATH%\F88U\U39672C31946.HUV
  • %HOMEPATH%\F88U\Q82288P61052.GGN
  • %HOMEPATH%\F88U\L83444F24865.GGX
  • %HOMEPATH%\F88U\88086.RLR
  • %HOMEPATH%\F88U\Z16394G84945.MXO
  • %HOMEPATH%\F88U\54063.FTP
  • %HOMEPATH%\F88U\17853.RTB
  • %HOMEPATH%\F88U\X1690V68533.RCE
  • %HOMEPATH%\F88U\24343.VMC
  • %HOMEPATH%\F88U\V87673K92622.BRR
  • %HOMEPATH%\F88U\M84922X72780.KIP
  • %HOMEPATH%\F88U\G1785K88739.MUL
  • %HOMEPATH%\F88U\M79171I92287.OJT
  • %HOMEPATH%\F88U\Z96063S95401.ELP
  • %HOMEPATH%\F88U\15684.BXG
  • %HOMEPATH%\F88U\B90112K79370.IHK
  • %HOMEPATH%\F88U\51067.ZSM
  • %HOMEPATH%\F88U\W75301C7546.QFI
  • %HOMEPATH%\F88U\96578.KOP
  • %HOMEPATH%\F88U\S9747S46533.HDQ
  • %HOMEPATH%\F88U\52233.EYA
  • %HOMEPATH%\F88U\80948.WZE
  • %HOMEPATH%\F88U\98390.TOR
  • %HOMEPATH%\F88U\D44395N73868.GBM
  • %HOMEPATH%\F88U\O99104S62197.CYV
  • %HOMEPATH%\F88U\99458.QYA
  • %HOMEPATH%\F88U\U16038S37060.LPY
  • %HOMEPATH%\F88U\D53666Q54965.CME
  • %HOMEPATH%\F88U\13077.MVY
  • %HOMEPATH%\F88U\M36913C27212.LLU
  • %HOMEPATH%\F88U\G9768F97857.QCC
  • %HOMEPATH%\F88U\53033.EDZ
  • %HOMEPATH%\F88U\C46899J15672.HVA
  • %HOMEPATH%\F88U\48712.YME
  • %HOMEPATH%\F88U\I45264X26926.DBI
  • %HOMEPATH%\F88U\R70613P42663.STN
  • %HOMEPATH%\F88U\42017.RFD
  • %HOMEPATH%\F88U\60279.XGX
  • %HOMEPATH%\F88U\V8698U18841.KHC
  • %HOMEPATH%\F88U\54116.DZY
  • %HOMEPATH%\F88U\S51937I97427.ZKU
  • %HOMEPATH%\F88U\R74348I15365.NLN
  • %HOMEPATH%\F88U\M69197K99858.EAG
  • %HOMEPATH%\F88U\40555.UPZ
  • %HOMEPATH%\F88U\59210.PYX
  • %HOMEPATH%\F88U\38678.MYN
  • %HOMEPATH%\F88U\44240.ALD
  • %HOMEPATH%\F88U\12500.KAM
  • %HOMEPATH%\F88U\10771.AHY
  • %HOMEPATH%\F88U\90037.YHM
  • %HOMEPATH%\F88U\60508.NVF
  • %HOMEPATH%\F88U\J55643Q67339.JXY
  • %HOMEPATH%\F88U\W92558V22416.JCZ
  • %HOMEPATH%\F88U\L1596W49071.BSS
  • %HOMEPATH%\F88U\P55117C34333.IDO
  • %HOMEPATH%\F88U\E9470P83285.SWM
  • %HOMEPATH%\F88U\Q5649K99496.DQZ
  • %HOMEPATH%\F88U\X28614Q59716.UDQ
  • %HOMEPATH%\F88U\3126.CUO
  • %HOMEPATH%\F88U\17437.RGM
  • %HOMEPATH%\F88U\R84708X35608.HFW
  • %HOMEPATH%\F88U\Q35132Y47399.JVW
  • %HOMEPATH%\F88U\58715.WHZ
  • %HOMEPATH%\F88U\58246.QVJ
  • %HOMEPATH%\F88U\49607.RLB
  • %HOMEPATH%\F88U\J18939S92053.GGJ
  • %HOMEPATH%\F88U\65571.VLB
  • %HOMEPATH%\F88U\38321.BJI
  • %HOMEPATH%\F88U\74439.UAL
  • %HOMEPATH%\F88U\48844.LBZ
  • %HOMEPATH%\F88U\15869.GQH
  • %HOMEPATH%\F88U\C6674E93703.TYZ
  • %HOMEPATH%\F88U\I13062V55555.CEU
  • %HOMEPATH%\F88U\24125.XXA
  • %HOMEPATH%\F88U\31455.HJX
  • %HOMEPATH%\F88U\D8768R10011.YBO
  • %HOMEPATH%\F88U\C13192E29644.ARD
  • %HOMEPATH%\F88U\explorer.exe
  • %HOMEPATH%\F88U\C44282P40601.OHJ
  • %HOMEPATH%\F88U\J22765N60434.POS
  • %HOMEPATH%\F88U\54878.VYN
  • %HOMEPATH%\F88U\53871.CCF
  • %HOMEPATH%\F88U\58573.ISF
  • %HOMEPATH%\F88U\74859.LUG
  • %HOMEPATH%\F88U\S13249W62476.NFT
  • %HOMEPATH%\F88U\28121.BIS
  • %HOMEPATH%\F88U\D92861J48637.IUP
  • %HOMEPATH%\F88U\E24407X21347.UTC
  • %HOMEPATH%\F88U\9168.JQD
  • %HOMEPATH%\F88U\Q44687O88893.VUY
  • %HOMEPATH%\F88U\I57545O6705.BHN
  • %HOMEPATH%\F88U\F79342F85321.PFM
  • %HOMEPATH%\F88U\83918.KMB
  • %HOMEPATH%\F88U\N6771G76451.HLO
  • %HOMEPATH%\F88U\70605.NIV
  • %HOMEPATH%\F88U\Q78674G20881.PPZ
  • %HOMEPATH%\F88U\24444.JXD
  • %HOMEPATH%\F88U\10419.OCD
  • %HOMEPATH%\F88U\U43147Z31604.UJL
  • %HOMEPATH%\F88U\3778.DNV
  • %HOMEPATH%\F88U\40747.FOF
  • %HOMEPATH%\F88U\Z54513B57724.RFT
  • %HOMEPATH%\F88U\R81087T5163.QZU
  • %HOMEPATH%\F88U\90657.EQC
  • %HOMEPATH%\F88U\K80711H81094.ACM
  • %HOMEPATH%\F88U\53063.WWP
  • %HOMEPATH%\F88U\19755.BDG
  • %HOMEPATH%\F88U\48691.UQM
  • %HOMEPATH%\F88U\3312.YKR
  • %HOMEPATH%\F88U\27241.DWK
  • %HOMEPATH%\F88U\O64672P29468.EQA
  • %HOMEPATH%\F88U\48360.RHJ
  • %HOMEPATH%\F88U\I83948C75580.NMU
  • %HOMEPATH%\F88U\69468.JDO
  • %HOMEPATH%\F88U\73128.QYH
  • %HOMEPATH%\F88U\16749.UHY
  • %HOMEPATH%\F88U\91560.XAB
  • %HOMEPATH%\F88U\Z84679M64106.OUT
  • %HOMEPATH%\F88U\D97749D19554.JIT
  • %HOMEPATH%\F88U\H86979K67042.ODQ
  • %HOMEPATH%\F88U\29512.LNY
  • %HOMEPATH%\F88U\S94121N30421.YLX
  • %HOMEPATH%\F88U\L71297S1923.OVD
  • %HOMEPATH%\F88U\U90475B56326.ETY
  • %HOMEPATH%\F88U\44204.PYG
  • %HOMEPATH%\F88U\38965.QXV
  • %HOMEPATH%\F88U\93165.TZI
  • %HOMEPATH%\F88U\71630.MFQ
  • %HOMEPATH%\F88U\Y82760R60086.CGT
  • %HOMEPATH%\F88U\94405.FJX
  • %HOMEPATH%\F88U\H31816Q61780.MMA
  • %HOMEPATH%\F88U\23033.YRA
  • %HOMEPATH%\F88U\60362.EHU
  • %HOMEPATH%\F88U\77814.WMP
  • %HOMEPATH%\F88U\64414.TPA
  • %HOMEPATH%\F88U\30816.OVH
  • %HOMEPATH%\F88U\44402.TST
  • %HOMEPATH%\F88U\96329.JKN
  • %HOMEPATH%\F88U\61824.FPO
  • %HOMEPATH%\F88U\48048.LKI
  • %HOMEPATH%\F88U\Y51236D4231.TRB
  • %HOMEPATH%\F88U\C57427E13374.SYO
  • %HOMEPATH%\F88U\33553.BFH
  • %HOMEPATH%\F88U\59376.TDB
  • %HOMEPATH%\F88U\48332.QXG
  • %HOMEPATH%\F88U\83245.IIY
  • %HOMEPATH%\F88U\57982.HNN
  • %HOMEPATH%\F88U\82150.KEC
  • %HOMEPATH%\F88U\L20011J77138.WJH
  • %HOMEPATH%\F88U\63460.IFW
  • %HOMEPATH%\F88U\19226.SVD
  • %HOMEPATH%\F88U\9240.IOE
  • %HOMEPATH%\F88U\W42071Y25355.VUL
  • %HOMEPATH%\F88U\Y97651L84736.RNP
  • %HOMEPATH%\F88U\H23633Y82419.HIV
  • %HOMEPATH%\F88U\U51780A85078.VDY
  • %HOMEPATH%\F88U\6880.CUK
  • %HOMEPATH%\F88U\R86223O53283.NHO
  • %HOMEPATH%\F88U\47086.IXJ
  • %HOMEPATH%\F88U\X93618S87614.KBV
  • %HOMEPATH%\F88U\72436.QNN
  • %HOMEPATH%\F88U\Y90205Y68348.ZTF
  • %HOMEPATH%\F88U\15198.JHR
  • %HOMEPATH%\F88U\Q99495B46124.GSN
  • %HOMEPATH%\F88U\X81742I3295.UEW
  • %HOMEPATH%\F88U\12900.VXG
  • %HOMEPATH%\F88U\4739.JQJ
  • %HOMEPATH%\F88U\H2417H45130.ZQF
  • %HOMEPATH%\F88U\V25893O46619.ZAQ
  • %HOMEPATH%\F88U\J23918F87359.PYD
  • %HOMEPATH%\F88U\56294.ITV
  • %HOMEPATH%\F88U\42213.SMN
  • %HOMEPATH%\F88U\37489.JAM
  • %HOMEPATH%\F88U\38920.HPP
  • %HOMEPATH%\F88U\32037.OBS
  • %HOMEPATH%\F88U\H93274C74722.ZSH
  • %HOMEPATH%\F88U\W23871C60128.OXE
  • %HOMEPATH%\F88U\37276.OXI
  • %HOMEPATH%\F88U\46440.KVX
  • %HOMEPATH%\F88U\59044.QUJ
  • %HOMEPATH%\F88U\37625.OLW
  • %HOMEPATH%\F88U\71046.UDZ
  • %HOMEPATH%\F88U\Q68792U10888.RZT
  • %HOMEPATH%\F88U\I34490F52242.BLH
  • %HOMEPATH%\F88U\21224.WFY
  • %HOMEPATH%\F88U\O64010A54821.DXE
  • %HOMEPATH%\F88U\67510.PDB
  • %HOMEPATH%\F88U\37114.MUE
  • %HOMEPATH%\F88U\58592.IZY
  • %HOMEPATH%\F88U\S74940C21922.UAK
  • %HOMEPATH%\F88U\D8736Q59636.FDB
  • %HOMEPATH%\F88U\M17841U75748.HWE
  • %HOMEPATH%\F88U\7104.PJT
  • %HOMEPATH%\F88U\35759.DLJ
  • %HOMEPATH%\F88U\Q8650N64944.PQW
  • %HOMEPATH%\F88U\46168.UTA
  • %HOMEPATH%\F88U\8432.OBI
  • %HOMEPATH%\F88U\Y62475X80076.DNU
  • %HOMEPATH%\F88U\F35324X46534.AOB
  • %HOMEPATH%\F88U\51927.PRZ
  • %HOMEPATH%\F88U\28706.NXS
  • %HOMEPATH%\F88U\47369.XRH
  • %HOMEPATH%\F88U\44906.WTL
  • %HOMEPATH%\F88U\50361.WSP
  • %HOMEPATH%\F88U\K38526L77969.DZK
  • %HOMEPATH%\F88U\X18444J30278.GBJ
  • %HOMEPATH%\F88U\Q1241W41234.GUH
  • %HOMEPATH%\F88U\3562.NWZ
  • %HOMEPATH%\F88U\1817.GSX
  • %HOMEPATH%\F88U\18867.PCD
  • %HOMEPATH%\F88U\V97904P54098.MRO
  • %HOMEPATH%\F88U\L18739E70523.UQG
  • %HOMEPATH%\F88U\K55037I16559.OYM
  • %HOMEPATH%\F88U\6904.KHR
  • %HOMEPATH%\F88U\A17423H17253.IUG
  • %HOMEPATH%\F88U\99199.JMR
  • %HOMEPATH%\F88U\U96456Y56822.HTE
  • %HOMEPATH%\F88U\55147.ESP
  • %HOMEPATH%\F88U\U89302F99095.SZN
  • %HOMEPATH%\F88U\W14751P58934.KXZ
  • %HOMEPATH%\F88U\X26669Z67745.ZZQ
  • %HOMEPATH%\F88U\Z35537B47127.QVY
  • %HOMEPATH%\F88U\K77087R81116.YQR
  • %HOMEPATH%\F88U\55707.DPR
  • %HOMEPATH%\F88U\Q90923Y81041.CDW
  • %HOMEPATH%\F88U\U32244E15127.CTZ
  • %HOMEPATH%\F88U\I12248A43835.DQD
  • %HOMEPATH%\F88U\35980.BLM
  • %HOMEPATH%\F88U\F15447S80495.NPL
  • %HOMEPATH%\F88U\14330.XIE
  • %HOMEPATH%\F88U\S54932I91368.DYB
  • %HOMEPATH%\F88U\94088.ENJ
  • %HOMEPATH%\F88U\16572.OWI
  • %HOMEPATH%\F88U\H27719N77858.WKJ
  • %HOMEPATH%\F88U\Z2318I6134.WDB
  • %HOMEPATH%\F88U\X44278R51820.JAF
  • %HOMEPATH%\F88U\X6557U82451.PRB
  • %HOMEPATH%\F88U\23277.ADT
  • %HOMEPATH%\F88U\M33483Q9937.VJL
  • %HOMEPATH%\F88U\35237.SUL
  • %HOMEPATH%\F88U\82271.WVP
  • %HOMEPATH%\F88U\A91195I67203.ZTM
  • %HOMEPATH%\F88U\91001.XSA
  • %HOMEPATH%\F88U\C39555Y62197.HCV
  • %HOMEPATH%\F88U\K78788Z47862.IMX
  • %HOMEPATH%\F88U\67616.EZJ
  • %HOMEPATH%\F88U\66397.WDM
  • %HOMEPATH%\F88U\H62907X19530.GFD
  • %HOMEPATH%\F88U\G25027F49361.KIL
  • %HOMEPATH%\F88U\34450.GMU
  • %HOMEPATH%\F88U\U84045N90325.ATK
  • %HOMEPATH%\F88U\65100.PDW
  • %HOMEPATH%\F88U\91906.MPT
  • %HOMEPATH%\F88U\E60425T66705.HMF
  • %HOMEPATH%\F88U\I24384X26506.HJE
  • %HOMEPATH%\F88U\21315.NLN
Присваивает атрибут 'скрытый' для следующих файлов:
  • %HOMEPATH%\D23L13.QQ9
Удаляет следующие файлы:
  • %HOMEPATH%\D23L13.QQ9
  • %TEMP%\aut1.tmp
Другое:
Ищет следующие окна:
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'
  • ClassName: 'EDIT' WindowName: '(null)'

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке