Поддержка
Круглосуточная поддержка

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.DownLoader26.59705

Добавлен в вирусную базу Dr.Web: 2018-07-25

Описание добавлено:

Техническая информация

Вредоносные функции:
Запускает на исполнение:
  • '<SYSTEM32>\taskkill.exe' /f /im DRWUI.exe
Изменения в файловой системе:
Создает следующие файлы:
  • %TEMP%\RarSFX0\drw.cmd
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-9AFUF.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-24TFO.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-AICCC.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-7IMQS.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-ACIVI.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-E2PRU.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-J2L1L.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-PBF49.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-BAE0A.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-1OT71.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-C9Q6Q.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-NF7T2.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-7U40F.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-PEGU3.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-VJBAE.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-B22UL.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-SDJ60.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-5U30A.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-MNQVQ.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-HDQP2.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-4GD7E.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-FSJ0J.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-JF7KN.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-CND8F.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-HE9NF.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-PR1VR.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-J3KRR.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-DKR36.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-MD9G5.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-I45Q8.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-TN0R0.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-57EMN.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-SH6K9.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-K7F18.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-VP8O4.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-DPAJG.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-G03UG.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-K5PMU.tmp
  • %ALLUSERSPROFILE%\Start Menu\Programs\EaseUS Data Recovery Wizard 8.0\EaseUS Data Recovery Wizard 8.0.lnk
  • %ALLUSERSPROFILE%\Start Menu\Programs\EaseUS Data Recovery Wizard 8.0\Uninstall EaseUS Data Recovery Wizard 8.0.lnk
  • %ALLUSERSPROFILE%\Start Menu\Programs\EaseUS Data Recovery Wizard 8.0\Visit EaseUS on the Web.url
  • %ALLUSERSPROFILE%\Desktop\EaseUS Data Recovery Wizard 8.0.lnk
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\unins000.msg
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\unins000.dat
  • %TEMP%\is-SRTV5.tmp\install_xx_.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\uexper.ini
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\__O_
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\easeusue.log
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Config.dat
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DefaultLog.txt
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DrwUI.log
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-15UFF.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-3AVC7.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-VOU1Q.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-TGA78.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-48264.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-6AS8A.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-D502H.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-1R2HT.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-5V3RV.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-G4R0J.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-LJ9IT.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-NO0MN.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-VE3J1.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-366ES.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-F531B.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-IF11U.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-VQAQ2.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-FG5SU.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-N28UK.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-N0IJO.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-3V33O.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-MPIRF.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-JRRSO.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-DIVM8.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-94REH.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-J1QLC.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-4TOIP.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-H3VE2.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-9NVVN.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-AM269.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-U4IEB.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-9L5QS.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-0SPER.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-570SV.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-V18MN.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-V34NR.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-JE1UM.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-NCE0F.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-0I0PQ.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-RITTK.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DRWLog.log
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-3LH75.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-VJKJ4.tmp
  • %TEMP%\RarSFX0\drw.exe
  • %TEMP%\is-SRTV5.tmp\drw.tmp
  • %TEMP%\is-6HK1P.tmp\_isetup\_RegDLL.tmp
  • %TEMP%\is-6HK1P.tmp\_isetup\_shfoldr.dll
  • %TEMP%\is-6HK1P.tmp\uexper.dll
  • %TEMP%\is-6HK1P.tmp\libcurl.dll
  • %TEMP%\RarSFX0\3.exe
  • %TEMP%\is-6HK1P.tmp\BrowseWarning.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-6SSV7.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-0NMNN.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-PEB9H.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-9HSMT.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-3RGV1.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-EGG1R.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-40TD5.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-8BHCI.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-CDEOG.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-GTNGN.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-10PMK.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-QE8O5.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-376VM.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-UAF9I.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-B7MG8.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-DNMRU.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-EFE9M.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-K7NEL.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-JHH8N.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-TTMH9.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-5GDR9.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-U2R9K.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-FB2UK.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-R679R.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-6HRD7.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-CS0SN.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-U8TUG.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-32960.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-M6T2K.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-ELLJ9.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-EVNL0.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-ODE57.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-MHAFF.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-H2R13.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-EN4GC.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-1BDH3.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-8N2PU.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-1TU0B.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-L123J.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-H0B44.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-K36O3.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-BB1I3.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-HG33C.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-8LS62.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-O5OGM.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-19EOG.tmp
  • %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\drw[1].ini
Удаляет следующие файлы:
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\uexper.dll
  • %TEMP%\is-SRTV5.tmp\install_xx_.tmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\__O_
  • %TEMP%\is-6HK1P.tmp\BrowseWarning.bmp
  • %TEMP%\is-6HK1P.tmp\libcurl.dll
  • %TEMP%\is-6HK1P.tmp\uexper.dll
  • %TEMP%\is-6HK1P.tmp\_isetup\_RegDLL.tmp
  • %TEMP%\is-6HK1P.tmp\_isetup\_shfoldr.dll
  • %TEMP%\is-SRTV5.tmp\drw.tmp
Перемещает следующие файлы:
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-40TD5.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\unins000.exe
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-7IMQS.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\FileSelCtrl.xml
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-AICCC.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\CheckState.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-24TFO.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\button-preview.png
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-9AFUF.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\bestfit.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-J2L1L.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\Arrange.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-E2PRU.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\actualsize.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-B22UL.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\view_row.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-K7F18.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\view_preview.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-SDJ60.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\view_list.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-TN0R0.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\unknow32.png
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-I45Q8.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\unknow16.png
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-MD9G5.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\slider_press.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-DKR36.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\slider_normal.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-J3KRR.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\slider_hover.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-PR1VR.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\preview.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-HE9NF.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\LostFile.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-CND8F.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\icon_type_32.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-JF7KN.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\icon_type.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-FSJ0J.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\icon_time_32.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-4GD7E.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\icon_time.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-HDQP2.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\FileSelCtrl.xml
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-MNQVQ.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\CheckState.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-VOU1Q.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\button-preview.png
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-SH6K9.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\bestfit.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-3AVC7.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\Arrange.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\is-MPIRF.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Fra\actualsize.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-JRRSO.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\view_row.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-ACIVI.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\icon_time.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-PBF49.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\icon_time_32.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-PEGU3.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\icon_type.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-VJBAE.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\icon_type_32.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-15UFF.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\view_list.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-CDEOG.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\unknow32.png
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-N0IJO.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\unknow16.png
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-TGA78.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\slider_press.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-N28UK.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\slider_normal.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-FG5SU.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\slider_hover.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-VQAQ2.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\preview.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-IF11U.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\LostFile.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-F531B.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\icon_type_32.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-366ES.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\icon_type.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-VE3J1.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\icon_time_32.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-NO0MN.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\icon_time.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-LJ9IT.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\FileSelCtrl.xml
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-5V3RV.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\button-preview.png
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-G4R0J.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\CheckState.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-1R2HT.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\bestfit.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-D502H.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\Arrange.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-6AS8A.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\actualsize.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-48264.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\view_row.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-3V33O.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\view_preview.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-DPAJG.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\view_list.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-5U30A.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\unknow32.png
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-57EMN.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\unknow16.png
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-7U40F.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\slider_press.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-NF7T2.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\slider_normal.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-C9Q6Q.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\slider_hover.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-1OT71.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\preview.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\is-BAE0A.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Ger\LostFile.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-G03UG.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\view_preview.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-DIVM8.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\view_preview.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-6HRD7.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\view_list.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-R679R.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\slider_press.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-GTNGN.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\licenseJapanese.rtf
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-3LH75.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\licenseFrench.rtf
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-JE1UM.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\licenseDeutsch.rtf
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-V34NR.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\license.rtf
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-V18MN.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\libcurl.dll
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-570SV.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Japanese.dat
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-0SPER.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\INETWH32.dll
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-9L5QS.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\idfield
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-U4IEB.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\GDIPLUS.DLL
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-AM269.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\gc.dll
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-9NVVN.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\French.dat
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-H3VE2.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\FileFilter.xml
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-4TOIP.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\EULicenseDLL.dll
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-J1QLC.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\EuActiveOnline.dll
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-94REH.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\English.dat
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-RITTK.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DRWUI.exe.manifest
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-ELLJ9.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DRWUI.exe
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-NCE0F.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DRWReport.ini
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-8BHCI.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DRWReport.exe.manifest
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-0I0PQ.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DRWReport.exe
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-VJKJ4.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DRW.exe.manifest
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-EGG1R.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DRW.exe
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-3RGV1.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Deutsch.dat
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-9HSMT.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\dbghelp.dll
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-PEB9H.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Config.dat
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-0NMNN.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\AutoUpdate.dll
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-6SSV7.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\uexper.dll
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-CS0SN.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\mfc90.dll
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-32960.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\mfc90u.dll
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-10PMK.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\mfcm90.dll
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-EVNL0.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\mfcm90u.dll
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-U2R9K.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\slider_hover.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-5GDR9.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\preview.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-TTMH9.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\LostFile.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-JHH8N.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\icon_type_32.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-K7NEL.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\icon_type.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-EFE9M.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\icon_time_32.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-DNMRU.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\icon_time.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-B7MG8.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\FileSelCtrl.xml
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-UAF9I.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\CheckState.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-376VM.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\button-preview.png
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-QE8O5.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\bestfit.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-U8TUG.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\Arrange.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-M6T2K.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\actualsize.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-VP8O4.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\FileType.xml
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-19EOG.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Languange.ini
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-O5OGM.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\ureport.exe
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-8LS62.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\uexper.ini
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-BB1I3.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\sm.exe
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-K36O3.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\ROBOEX32.DLL
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-H0B44.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource.xml
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-L123J.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\RdfCheck.exe
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-1TU0B.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\PubLog.dll
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-8N2PU.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\OfficeViewer.exe
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-1BDH3.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\msvcr90.dll
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-EN4GC.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\msvcp90.dll
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-H2R13.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\msvcm90.dll
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-MHAFF.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Microsoft.VC90.MFC.manifest
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-ODE57.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Microsoft.VC90.CRT.manifest
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\is-FB2UK.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Eng\slider_normal.bmp
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\is-K5PMU.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Jpn\view_row.bmp
Подменяет следующие файлы:
  • %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\uexper.dll
Сетевая активность:
Подключается к:
  • 'localhost':1035
  • 'tr###.easeus.com':80
  • 'ea##us.com':80
  • 'localhost':1040
TCP:
Запросы HTTP GET:
  • http://www.ea##us.com/thankyou/install-data-recovery-wizard-trial.htm via ea##us.com
  • http://www.ea##us.com/update/drw_eng/drw.ini via ea##us.com
Запросы HTTP POST:
  • http://tr###.easeus.com/product/index.php/?a=#############################
UDP:
  • DNS ASK tr###.easeus.com
  • DNS ASK www.ea##us.com
Другое:
Ищет следующие окна:
  • ClassName: 'EDIT' WindowName: ''
  • ClassName: '' WindowName: ''
  • ClassName: 'IEFrame' WindowName: ''
  • ClassName: 'MS_AutodialMonitor' WindowName: ''
  • ClassName: 'MS_WebcheckMonitor' WindowName: ''
Создает и запускает на исполнение:
  • '%TEMP%\RarSFX0\drw.exe' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
  • '%TEMP%\is-SRTV5.tmp\drw.tmp' /SL5="$20108,5720940,481792,%TEMP%\RarSFX0\drw.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
  • '%ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DRW.exe'
  • '%ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DRWUI.exe'
Запускает на исполнение:
  • '<SYSTEM32>\cmd.exe' /c ""%TEMP%\RarSFX0\drw.CMD" "
  • '%ProgramFiles%\Internet Explorer\IEXPLORE.EXE' -nohome

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке