Поддержка
Круглосуточная поддержка

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.Encoder.25826

Добавлен в вирусную базу Dr.Web: 2018-08-14

Описание добавлено:

Техническая информация

Для обеспечения автозапуска и распространения:
Создает или изменяет следующие файлы:
  • <Полный путь к файлу>
Заражает следующие исполняемые файлы:
  • C:\Far2\Far.exe
  • %ProgramFiles%\FireFox\firefox.exe
  • %ProgramFiles%\FireFox\freebl3.dll
  • %ProgramFiles%\FireFox\IA2Marshal.dll
  • %ProgramFiles%\FireFox\js.exe
  • %ProgramFiles%\FireFox\mangle.exe
  • %ProgramFiles%\FireFox\mozalloc.dll
  • %ProgramFiles%\FireFox\mozjs.dll
  • %ProgramFiles%\FireFox\mozsqlite3.dll
  • %ProgramFiles%\FireFox\nsinstall.exe
  • %ProgramFiles%\FireFox\nspr4.dll
  • %ProgramFiles%\FireFox\nss3.dll
  • %ProgramFiles%\FireFox\nssckbi.dll
  • %ProgramFiles%\FireFox\nssdbm3.dll
  • %ProgramFiles%\FireFox\nssutil3.dll
  • %ProgramFiles%\FireFox\plc4.dll
  • %ProgramFiles%\FireFox\plds4.dll
  • %ProgramFiles%\FireFox\plugin-container.exe
  • %ProgramFiles%\FireFox\crashreporter.exe
  • %ProgramFiles%\FireFox\shlibsign.exe
  • %ProgramFiles%\FireFox\AccessibleMarshal.dll
  • %CommonProgramFiles%\System\Ole DB\sqloledb.dll
  • %CommonProgramFiles%\System\Ole DB\msdaenum.dll
  • %CommonProgramFiles%\System\Ole DB\msdaer.dll
  • %CommonProgramFiles%\System\Ole DB\MSDAIPP.DLL
  • %CommonProgramFiles%\System\Ole DB\msdaora.dll
  • %CommonProgramFiles%\System\Ole DB\msdaorar.dll
  • %CommonProgramFiles%\System\Ole DB\msdaosp.dll
  • %CommonProgramFiles%\System\Ole DB\MSDAPML.DLL
  • %CommonProgramFiles%\System\Ole DB\msdaps.dll
  • %CommonProgramFiles%\System\Ole DB\msdasc.dll
  • %CommonProgramFiles%\System\Ole DB\msdasql.dll
  • %CommonProgramFiles%\System\Ole DB\msdasqlr.dll
  • %CommonProgramFiles%\System\Ole DB\msdatl3.dll
  • %CommonProgramFiles%\System\Ole DB\msdatt.dll
  • %CommonProgramFiles%\System\Ole DB\msdaurl.dll
  • %CommonProgramFiles%\System\Ole DB\msxactps.dll
  • %CommonProgramFiles%\System\Ole DB\oledb32.dll
  • %CommonProgramFiles%\System\Ole DB\oledb32r.dll
  • %CommonProgramFiles%\System\Ole DB\sqlxmlx.dll
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwrmind.exe
  • %ProgramFiles%\MSN\MSNCoreFiles\Install\msnsusii.exe
  • %ProgramFiles%\FireFox\ssl3.dll
  • %ProgramFiles%\Internet Explorer\Connection Wizard\inetwiz.exe
  • %ProgramFiles%\Internet Explorer\Connection Wizard\isignup.exe
  • %ProgramFiles%\Internet Explorer\Connection Wizard\trialoc.dll
  • %ProgramFiles%\Internet Explorer\MUI\0409\mscorier.dll
  • %ProgramFiles%\Messenger\custsat.dll
  • %ProgramFiles%\Messenger\msgsc.dll
  • %ProgramFiles%\Messenger\msgslang.dll
  • %ProgramFiles%\Messenger\msmsgs.exe
  • %ProgramFiles%\Movie Maker\moviemk.exe
  • %ProgramFiles%\Movie Maker\WMM2AE.dll
  • %ProgramFiles%\Movie Maker\WMM2ERES.dll
  • %ProgramFiles%\Movie Maker\WMM2EXT.dll
  • %ProgramFiles%\Movie Maker\WMM2FILT.dll
  • %ProgramFiles%\Movie Maker\WMM2FXA.dll
  • %ProgramFiles%\Movie Maker\WMM2FXB.dll
  • %ProgramFiles%\Movie Maker\WMM2RES.dll
  • %ProgramFiles%\Movie Maker\WMM2RES2.dll
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwutil.dll
  • %CommonProgramFiles%\System\Ole DB\msdadc.dll
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwtutor.exe
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwres.dll
  • %ProgramFiles%\FireFox\updater.exe
  • %ProgramFiles%\FireFox\xpcom.dll
  • %ProgramFiles%\FireFox\xpcshell.exe
  • %ProgramFiles%\FireFox\xpidl.exe
  • %ProgramFiles%\FireFox\xpt_dump.exe
  • %ProgramFiles%\FireFox\xpt_link.exe
  • %ProgramFiles%\FireFox\xul.dll
  • %ProgramFiles%\FireFox\components\browsercomps.dll
  • %ProgramFiles%\FireFox\uninstall\helper.exe
  • %ProgramFiles%\Internet Explorer\HMMAPI.DLL
  • %ProgramFiles%\Internet Explorer\iedw.exe
  • %ProgramFiles%\Internet Explorer\IEXPLORE.EXE
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwconn.dll
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwconn1.exe
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwconn2.exe
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwdl.dll
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwhelp.dll
  • %ProgramFiles%\FireFox\smime3.dll
  • %ProgramFiles%\FireFox\softokn3.dll
  • %CommonProgramFiles%\System\msadc\msdfmap.dll
  • %CommonProgramFiles%\Microsoft Shared\MSInfo\msinfo32.exe
  • C:\Far2\Plugins\MacroView\MacroView.dll
  • C:\Far2\Plugins\Network\Network.dll
  • C:\Far2\Plugins\ProcList\Proclist.dll
  • C:\Far2\Plugins\TmpPanel\TmpPanel.dll
  • C:\Far2\Plugins\WinSCP\WinSCP.dll
  • %CommonProgramFiles%\Microsoft Shared\DAO\dao360.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE
  • %CommonProgramFiles%\Microsoft Shared\DW\DWDCW20.DLL
  • %CommonProgramFiles%\Microsoft Shared\DW\DWTRIG20.EXE
  • %CommonProgramFiles%\Microsoft Shared\DW\1025\DWINTL20.DLL
  • %CommonProgramFiles%\Microsoft Shared\DW\1028\DWINTL20.DLL
  • %CommonProgramFiles%\Microsoft Shared\DW\1031\DWINTL20.DLL
  • %CommonProgramFiles%\Microsoft Shared\DW\1033\DWINTL20.DLL
  • %CommonProgramFiles%\Microsoft Shared\DW\1036\DWINTL20.DLL
  • %CommonProgramFiles%\Microsoft Shared\DW\1040\DWINTL20.DLL
  • %CommonProgramFiles%\Microsoft Shared\DW\1041\DWINTL20.DLL
  • %CommonProgramFiles%\Microsoft Shared\DW\1042\DWINTL20.DLL
  • C:\Far2\Plugins\HlfViewer\HlfViewer.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\2052\DWINTL20.DLL
  • C:\Far2\Plugins\FTP\FarFtp.dll
  • C:\Far2\Plugins\FarCmds\FARCmds.dll
  • C:\Far2\FExcept\demangle32.dll
  • C:\Far2\FExcept\ExcDump.dll
  • C:\Far2\FExcept\FExcept.dll
  • C:\Far2\Plugins\7-Zip\7-ZipFar.dll
  • C:\Far2\Plugins\7-Zip\7-ZipFar64.dll
  • C:\Far2\Plugins\7-Zip\7z.dll
  • C:\Far2\Plugins\Align\Align.dll
  • C:\Far2\Plugins\arclite\7z.dll
  • C:\Far2\Plugins\arclite\arclite.dll
  • C:\Far2\Plugins\AutoWrap\AutoWrap.dll
  • C:\Far2\Plugins\Brackets\Brackets.dll
  • C:\Far2\Plugins\Colorer\bin\colorer.dll
  • C:\Far2\Plugins\Compare\Compare.dll
  • C:\Far2\Plugins\DrawLine\DrawLine.dll
  • C:\Far2\Plugins\EditCase\EditCase.dll
  • C:\Far2\Plugins\EMenu\EMenu.dll
  • C:\Far2\Plugins\ExtSearch\esearch.dll
  • C:\Far2\Plugins\FileCase\FileCase.dll
  • %CommonProgramFiles%\System\wab32.dll
  • %CommonProgramFiles%\System\msadc\msdarem.dll
  • %CommonProgramFiles%\Microsoft Shared\Speech\sapi.dll
  • %CommonProgramFiles%\System\ado\msado15.dll
  • %CommonProgramFiles%\System\ado\msadomd.dll
  • %CommonProgramFiles%\System\ado\msador15.dll
  • %CommonProgramFiles%\System\ado\msadox.dll
  • %CommonProgramFiles%\System\ado\msadrh15.dll
  • %CommonProgramFiles%\System\ado\msjro.dll
  • %CommonProgramFiles%\System\msadc\msadce.dll
  • %CommonProgramFiles%\System\msadc\msadcer.dll
  • %CommonProgramFiles%\System\msadc\msadcf.dll
  • %CommonProgramFiles%\System\msadc\msadcfr.dll
  • %CommonProgramFiles%\System\msadc\msadco.dll
  • %CommonProgramFiles%\System\msadc\msadcor.dll
  • %CommonProgramFiles%\System\msadc\msadcs.dll
  • %CommonProgramFiles%\System\msadc\msadds.dll
  • %CommonProgramFiles%\System\msadc\msaddsr.dll
  • %CommonProgramFiles%\System\msadc\msdaprsr.dll
  • %CommonProgramFiles%\System\msadc\msdaprst.dll
  • %CommonProgramFiles%\System\ado\msader15.dll
  • %CommonProgramFiles%\System\msadc\msdaremr.dll
  • %CommonProgramFiles%\System\wab32res.dll
  • %CommonProgramFiles%\System\directdb.dll
  • %CommonProgramFiles%\Microsoft Shared\Speech\sapisvr.exe
  • %CommonProgramFiles%\Microsoft Shared\Speech\1033\spcplui.dll
  • %CommonProgramFiles%\Microsoft Shared\TextConv\msconv97.dll
  • %CommonProgramFiles%\Microsoft Shared\Triedit\TRIEDIT.DLL
  • %CommonProgramFiles%\Microsoft Shared\VC\msdia100.dll
  • %CommonProgramFiles%\Microsoft Shared\VC\msdia80.dll
  • %CommonProgramFiles%\Microsoft Shared\VC\msdia90.dll
  • %CommonProgramFiles%\Microsoft Shared\VGX\vgx.dll
  • %CommonProgramFiles%\Microsoft Shared\Web Folders\MSONSEXT.DLL
  • %CommonProgramFiles%\Microsoft Shared\Web Folders\MSOWS409.DLL
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin\fp4autl.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin\FP4AWEC.DLL
  • %CommonProgramFiles%\MSSoap\Binaries\mssoap1.dll
  • %CommonProgramFiles%\MSSoap\Binaries\wisc10.dll
  • %CommonProgramFiles%\MSSoap\Binaries\Resources\1033\mssoapr.dll
  • %CommonProgramFiles%\SpeechEngines\Microsoft\spcommon.dll
  • %CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\spttseng.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\3082\DWINTL20.DLL
  • %ProgramFiles%\MSN\MSNCoreFiles\Install\MSN9Components\Digcore.exe
Изменения в файловой системе:
Создает следующие файлы:
  • %APPDATA%\docv.doc
  • <SYSTEM32>\dllcache\msdaremr.dll.new
  • <SYSTEM32>\dllcache\msdarem.dll.new
  • <SYSTEM32>\dllcache\msdaprst.dll.new
  • <SYSTEM32>\dllcache\msdaprsr.dll.new
  • <SYSTEM32>\dllcache\msaddsr.dll.new
  • <SYSTEM32>\dllcache\msadds.dll.new
  • <SYSTEM32>\dllcache\msadcs.dll.new
  • <SYSTEM32>\dllcache\msadcor.dll.new
  • <SYSTEM32>\dllcache\msadco.dll.new
  • <SYSTEM32>\dllcache\msadcfr.dll.new
  • <SYSTEM32>\dllcache\msadcf.dll.new
  • <SYSTEM32>\dllcache\msadcer.dll.new
  • <SYSTEM32>\dllcache\msadce.dll.new
  • <SYSTEM32>\dllcache\msjro.dll.new
  • <SYSTEM32>\dllcache\msadrh15.dll.new
  • <SYSTEM32>\dllcache\msadox.dll.new
  • <SYSTEM32>\dllcache\msador15.dll.new
  • <SYSTEM32>\dllcache\msadomd.dll.new
  • <SYSTEM32>\dllcache\msado15.dll.new
  • <SYSTEM32>\dllcache\msader15.dll.new
  • <SYSTEM32>\dllcache\wab32res.dll.new
  • <SYSTEM32>\dllcache\wab32.dll.new
  • <SYSTEM32>\dllcache\directdb.dll.new
  • <SYSTEM32>\dllcache\spttseng.dll.new
  • %CommonProgramFiles%\System\Ole DB\sqlxmlx.dll.new
  • %CommonProgramFiles%\System\Ole DB\oledb32r.dll.new
  • <SYSTEM32>\dllcache\spcommon.dll.new
  • <SYSTEM32>\dllcache\msdfmap.dll.new
  • <SYSTEM32>\dllcache\msdadc.dll.new
  • <SYSTEM32>\dllcache\msdaenum.dll.new
  • <SYSTEM32>\dllcache\msdaer.dll.new
  • %ProgramFiles%\Internet Explorer\Connection Wizard\isignup.exe.new
  • %ProgramFiles%\Internet Explorer\Connection Wizard\inetwiz.exe.new
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwutil.dll.new
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwtutor.exe.new
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwrmind.exe.new
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwres.dll.new
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwhelp.dll.new
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwdl.dll.new
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwconn2.exe.new
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwconn1.exe.new
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwconn.dll.new
  • %ProgramFiles%\Internet Explorer\iexplore.exe.new
  • %ProgramFiles%\Internet Explorer\iedw.exe.new
  • <SYSTEM32>\dllcache\sqlxmlx.dll.new
  • %ProgramFiles%\Internet Explorer\hmmapi.dll.new
  • <SYSTEM32>\dllcache\oledb32r.dll.new
  • <SYSTEM32>\dllcache\oledb32.dll.new
  • <SYSTEM32>\dllcache\msxactps.dll.new
  • <SYSTEM32>\dllcache\msdaurl.dll.new
  • <SYSTEM32>\dllcache\msdatt.dll.new
  • <SYSTEM32>\dllcache\msdatl3.dll.new
  • <SYSTEM32>\dllcache\msdasqlr.dll.new
  • <SYSTEM32>\dllcache\msdasql.dll.new
  • <SYSTEM32>\dllcache\msdasc.dll.new
  • <SYSTEM32>\dllcache\msdaps.dll.new
  • <SYSTEM32>\dllcache\msdaosp.dll.new
  • <SYSTEM32>\dllcache\msdaorar.dll.new
  • <SYSTEM32>\dllcache\msdaora.dll.new
  • %ProgramFiles%\Internet Explorer\Connection Wizard\trialoc.dll.new
  • %CommonProgramFiles%\System\Ole DB\oledb32.dll.new
  • %CommonProgramFiles%\System\Ole DB\msxactps.dll.new
  • %CommonProgramFiles%\System\Ole DB\msdaurl.dll.new
  • %CommonProgramFiles%\System\ado\msadrh15.dll.new
  • %CommonProgramFiles%\System\ado\msadox.dll.new
  • %CommonProgramFiles%\System\ado\msador15.dll.new
  • %CommonProgramFiles%\System\ado\msadomd.dll.new
  • %CommonProgramFiles%\System\ado\msado15.dll.new
  • %CommonProgramFiles%\System\ado\msader15.dll.new
  • %CommonProgramFiles%\System\wab32res.dll.new
  • %CommonProgramFiles%\System\wab32.dll.new
  • <SYSTEM32>\dllcache\spcplui.dll.new
  • %CommonProgramFiles%\System\directdb.dll.new
  • <SYSTEM32>\dllcache\sapisvr.exe.new
  • %CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\spttseng.dll.new
  • <SYSTEM32>\dllcache\sapi.dll.new
  • <SYSTEM32>\dllcache\msinfo32.exe.new
  • %CommonProgramFiles%\SpeechEngines\Microsoft\spcommon.dll.new
  • <SYSTEM32>\dllcache\dao360.dll.new
  • %CommonProgramFiles%\MSSoap\Binaries\Resources\1033\mssoapr.dll.new
  • %CommonProgramFiles%\MSSoap\Binaries\wisc10.dll.new
  • %CommonProgramFiles%\MSSoap\Binaries\mssoap1.dll.new
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin\fp4autl.dll.new
  • %CommonProgramFiles%\Microsoft Shared\VGX\vgx.dll.new
  • %CommonProgramFiles%\Microsoft Shared\Triedit\triedit.dll.new
  • %CommonProgramFiles%\Microsoft Shared\Speech\1033\spcplui.dll.new
  • %CommonProgramFiles%\Microsoft Shared\Speech\sapisvr.exe.new
  • %CommonProgramFiles%\Microsoft Shared\Speech\sapi.dll.new
  • %CommonProgramFiles%\Microsoft Shared\MSInfo\msinfo32.exe.new
  • %CommonProgramFiles%\Microsoft Shared\DAO\dao360.dll.new
  • %CommonProgramFiles%\System\ado\msjro.dll.new
  • %CommonProgramFiles%\System\msadc\msadce.dll.new
  • %CommonProgramFiles%\System\msadc\msadcer.dll.new
  • %CommonProgramFiles%\System\msadc\msadcf.dll.new
  • <SYSTEM32>\dllcache\mssoapr.dll.new
  • %CommonProgramFiles%\System\Ole DB\msdatl3.dll.new
  • <SYSTEM32>\dllcache\wisc10.dll.new
  • %CommonProgramFiles%\System\Ole DB\msdasqlr.dll.new
  • <SYSTEM32>\dllcache\mssoap1.dll.new
  • %CommonProgramFiles%\System\Ole DB\msdasql.dll.new
  • %CommonProgramFiles%\System\Ole DB\msdasc.dll.new
  • %CommonProgramFiles%\System\Ole DB\msdaps.dll.new
  • <SYSTEM32>\dllcache\fp4autl.dll.new
  • %CommonProgramFiles%\System\Ole DB\msdaosp.dll.new
  • %CommonProgramFiles%\System\Ole DB\msdaorar.dll.new
  • <SYSTEM32>\dllcache\vgx.dll.new
  • %CommonProgramFiles%\System\Ole DB\msdaora.dll.new
  • %CommonProgramFiles%\System\Ole DB\msdaenum.dll.new
  • %CommonProgramFiles%\System\Ole DB\msdaer.dll.new
  • %CommonProgramFiles%\System\Ole DB\msdadc.dll.new
  • %CommonProgramFiles%\System\msadc\msdfmap.dll.new
  • %CommonProgramFiles%\System\msadc\msdaremr.dll.new
  • %CommonProgramFiles%\System\msadc\msdarem.dll.new
  • %CommonProgramFiles%\System\msadc\msdaprst.dll.new
  • %CommonProgramFiles%\System\msadc\msdaprsr.dll.new
  • %CommonProgramFiles%\System\msadc\msaddsr.dll.new
  • %CommonProgramFiles%\System\msadc\msadds.dll.new
  • <SYSTEM32>\dllcache\triedit.dll.new
  • %CommonProgramFiles%\System\msadc\msadcs.dll.new
  • %CommonProgramFiles%\System\msadc\msadcor.dll.new
  • %CommonProgramFiles%\System\msadc\msadco.dll.new
  • %CommonProgramFiles%\System\msadc\msadcfr.dll.new
  • %CommonProgramFiles%\System\Ole DB\msdatt.dll.new
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\fifo.log
Перемещает следующие файлы:
  • %APPDATA%\docv.doc в %APPDATA%\docv.doc.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\plugins\pluginProblem.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\plugins\pluginProblem.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\update\updates.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\update\updates.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\xpinstall\xpinstallItem.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\xpinstall\xpinstallItem.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\xbl-marquee\xbl-marquee.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\xbl-marquee\xbl-marquee.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\globalBindings.xml в %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\globalBindings.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\tabbox.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\tabbox.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\globalBindings.xml в %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\globalBindings.xml.fucked
  • %ProgramFiles%\FireFox\searchplugins\amazondotcom.xml в %ProgramFiles%\FireFox\searchplugins\amazondotcom.xml.fucked
  • %ProgramFiles%\FireFox\searchplugins\bing.xml в %ProgramFiles%\FireFox\searchplugins\bing.xml.fucked
  • %ProgramFiles%\FireFox\searchplugins\eBay.xml в %ProgramFiles%\FireFox\searchplugins\eBay.xml.fucked
  • %ProgramFiles%\FireFox\searchplugins\google.xml в %ProgramFiles%\FireFox\searchplugins\google.xml.fucked
  • %ProgramFiles%\FireFox\searchplugins\wikipedia.xml в %ProgramFiles%\FireFox\searchplugins\wikipedia.xml.fucked
  • %ProgramFiles%\FireFox\searchplugins\yahoo.xml в %ProgramFiles%\FireFox\searchplugins\yahoo.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\blocklist.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\blocklist.xml.fucked
  • %ProgramFiles%\FireFox\components\browsercomps.dll в %ProgramFiles%\FireFox\components\browsercomps.dll.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\handling\handler.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\handling\handler.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\extensions.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\extensions.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\downloads\download.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\downloads\download.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\xml\XMLPrettyPrint.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\xml\XMLPrettyPrint.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\scale.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\scale.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\scrollbar.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\scrollbar.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\scrollbox.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\scrollbox.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\spinbuttons.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\spinbuttons.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\splitter.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\splitter.xml.fucked
  • %ProgramFiles%\FireFox\uninstall\helper.exe в %ProgramFiles%\FireFox\uninstall\helper.exe.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\stringbundle.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\stringbundle.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\radio.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\radio.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\text.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\text.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\toolbar.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\toolbar.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\toolbarbutton.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\toolbarbutton.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\tree.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\tree.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\videocontrols.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\videocontrols.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\wizard.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\wizard.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\resizer.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\resizer.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\svg\svgBindings.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\svg\svgBindings.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\textbox.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\textbox.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\richlistbox.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\richlistbox.xml.fucked
  • %ProgramFiles%\Internet Explorer\HMMAPI.DLL в %ProgramFiles%\Internet Explorer\HMMAPI.DLL.fucked
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwconn1.exe в %ProgramFiles%\Internet Explorer\Connection Wizard\icwconn1.exe.fucked
  • %ProgramFiles%\Movie Maker\WMM2ERES.dll в %ProgramFiles%\Movie Maker\WMM2ERES.dll.fucked
  • %ProgramFiles%\Movie Maker\WMM2EXT.dll в %ProgramFiles%\Movie Maker\WMM2EXT.dll.fucked
  • %ProgramFiles%\Movie Maker\WMM2FILT.dll в %ProgramFiles%\Movie Maker\WMM2FILT.dll.fucked
  • %ProgramFiles%\Movie Maker\WMM2FXA.dll в %ProgramFiles%\Movie Maker\WMM2FXA.dll.fucked
  • %ProgramFiles%\Movie Maker\WMM2FXB.dll в %ProgramFiles%\Movie Maker\WMM2FXB.dll.fucked
  • %ProgramFiles%\Movie Maker\WMM2RES.dll в %ProgramFiles%\Movie Maker\WMM2RES.dll.fucked
  • %ProgramFiles%\Microsoft.NET\RedistList\AssemblyList_4_client.xml в %ProgramFiles%\Microsoft.NET\RedistList\AssemblyList_4_client.xml.fucked
  • %ProgramFiles%\Movie Maker\WMM2RES2.dll в %ProgramFiles%\Movie Maker\WMM2RES2.dll.fucked
  • %ProgramFiles%\Movie Maker\Shared\Filters.xml в %ProgramFiles%\Movie Maker\Shared\Filters.xml.fucked
  • %ProgramFiles%\Movie Maker\Shared\Profiles\Blank.txt в %ProgramFiles%\Movie Maker\Shared\Profiles\Blank.txt.fucked
  • %ProgramFiles%\MSN\MSNCoreFiles\Install\cinfo.xml в %ProgramFiles%\MSN\MSNCoreFiles\Install\cinfo.xml.fucked
  • %ProgramFiles%\MSN\MSNCoreFiles\Install\msnsusii.exe в %ProgramFiles%\MSN\MSNCoreFiles\Install\msnsusii.exe.fucked
  • %ProgramFiles%\MSN\MSNCoreFiles\Install\xfp.xml в %ProgramFiles%\MSN\MSNCoreFiles\Install\xfp.xml.fucked
  • %ProgramFiles%\MSN\MSNCoreFiles\Install\MSN9Components\Digcore.exe в %ProgramFiles%\MSN\MSNCoreFiles\Install\MSN9Components\Digcore.exe.fucked
  • %ProgramFiles%\Movie Maker\moviemk.exe в %ProgramFiles%\Movie Maker\moviemk.exe.fucked
  • %ProgramFiles%\Movie Maker\WMM2AE.dll в %ProgramFiles%\Movie Maker\WMM2AE.dll.fucked
  • %ProgramFiles%\Microsoft.NET\RedistList\AssemblyList_4_extended.xml в %ProgramFiles%\Microsoft.NET\RedistList\AssemblyList_4_extended.xml.fucked
  • %ProgramFiles%\Messenger\msmsgs.exe в %ProgramFiles%\Messenger\msmsgs.exe.fucked
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\feeds.xml в %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\feeds.xml.fucked
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwconn2.exe в %ProgramFiles%\Internet Explorer\Connection Wizard\icwconn2.exe.fucked
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwdl.dll в %ProgramFiles%\Internet Explorer\Connection Wizard\icwdl.dll.fucked
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwhelp.dll в %ProgramFiles%\Internet Explorer\Connection Wizard\icwhelp.dll.fucked
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwres.dll в %ProgramFiles%\Internet Explorer\Connection Wizard\icwres.dll.fucked
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwrmind.exe в %ProgramFiles%\Internet Explorer\Connection Wizard\icwrmind.exe.fucked
  • %ProgramFiles%\Internet Explorer\iedw.exe в %ProgramFiles%\Internet Explorer\iedw.exe.fucked
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwconn.dll в %ProgramFiles%\Internet Explorer\Connection Wizard\icwconn.dll.fucked
  • %ProgramFiles%\Internet Explorer\IEXPLORE.EXE в %ProgramFiles%\Internet Explorer\IEXPLORE.EXE.fucked
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwtutor.exe в %ProgramFiles%\Internet Explorer\Connection Wizard\icwtutor.exe.fucked
  • %ProgramFiles%\Internet Explorer\Connection Wizard\trialoc.dll в %ProgramFiles%\Internet Explorer\Connection Wizard\trialoc.dll.fucked
  • %ProgramFiles%\Internet Explorer\MUI\0409\mscorier.dll в %ProgramFiles%\Internet Explorer\MUI\0409\mscorier.dll.fucked
  • %ProgramFiles%\Messenger\custsat.dll в %ProgramFiles%\Messenger\custsat.dll.fucked
  • %ProgramFiles%\Messenger\msgsc.dll в %ProgramFiles%\Messenger\msgsc.dll.fucked
  • %ProgramFiles%\Messenger\msgslang.dll в %ProgramFiles%\Messenger\msgslang.dll.fucked
  • %ProgramFiles%\Internet Explorer\Connection Wizard\icwutil.dll в %ProgramFiles%\Internet Explorer\Connection Wizard\icwutil.dll.fucked
  • %ProgramFiles%\Internet Explorer\Connection Wizard\inetwiz.exe в %ProgramFiles%\Internet Explorer\Connection Wizard\inetwiz.exe.fucked
  • %ProgramFiles%\Internet Explorer\Connection Wizard\isignup.exe в %ProgramFiles%\Internet Explorer\Connection Wizard\isignup.exe.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\progressmeter.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\progressmeter.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\preferences.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\preferences.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\popup.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\popup.xml.fucked
  • %ProgramFiles%\FireFox\nssdbm3.dll в %ProgramFiles%\FireFox\nssdbm3.dll.fucked
  • %ProgramFiles%\FireFox\nssutil3.dll в %ProgramFiles%\FireFox\nssutil3.dll.fucked
  • %ProgramFiles%\FireFox\platform.ini в %ProgramFiles%\FireFox\platform.ini.fucked
  • %ProgramFiles%\FireFox\plc4.dll в %ProgramFiles%\FireFox\plc4.dll.fucked
  • %ProgramFiles%\FireFox\plds4.dll в %ProgramFiles%\FireFox\plds4.dll.fucked
  • %ProgramFiles%\FireFox\plugin-container.exe в %ProgramFiles%\FireFox\plugin-container.exe.fucked
  • %ProgramFiles%\FireFox\xpcshell.exe в %ProgramFiles%\FireFox\xpcshell.exe.fucked
  • %ProgramFiles%\FireFox\README.txt в %ProgramFiles%\FireFox\README.txt.fucked
  • %ProgramFiles%\FireFox\smime3.dll в %ProgramFiles%\FireFox\smime3.dll.fucked
  • %ProgramFiles%\FireFox\softokn3.dll в %ProgramFiles%\FireFox\softokn3.dll.fucked
  • %ProgramFiles%\FireFox\ssl3.dll в %ProgramFiles%\FireFox\ssl3.dll.fucked
  • %ProgramFiles%\FireFox\updater.exe в %ProgramFiles%\FireFox\updater.exe.fucked
  • %ProgramFiles%\FireFox\updater.ini в %ProgramFiles%\FireFox\updater.ini.fucked
  • %ProgramFiles%\FireFox\nspr4.dll в %ProgramFiles%\FireFox\nspr4.dll.fucked
  • %ProgramFiles%\FireFox\nsinstall.exe в %ProgramFiles%\FireFox\nsinstall.exe.fucked
  • %ProgramFiles%\FireFox\nssckbi.dll в %ProgramFiles%\FireFox\nssckbi.dll.fucked
  • %ProgramFiles%\FireFox\mozsqlite3.dll в %ProgramFiles%\FireFox\mozsqlite3.dll.fucked
  • %ProgramFiles%\FireFox\mozjs.dll в %ProgramFiles%\FireFox\mozjs.dll.fucked
  • %APPDATA%\Microsoft\Internet Explorer\brndlog.txt в %APPDATA%\Microsoft\Internet Explorer\brndlog.txt.fucked
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\compatibility.ini в %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\compatibility.ini.fucked
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.ini в %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.ini.fucked
  • %ProgramFiles%\FireFox\AccessibleMarshal.dll в %ProgramFiles%\FireFox\AccessibleMarshal.dll.fucked
  • %ProgramFiles%\FireFox\application.ini в %ProgramFiles%\FireFox\application.ini.fucked
  • %ProgramFiles%\FireFox\blocklist.xml в %ProgramFiles%\FireFox\blocklist.xml.fucked
  • %ProgramFiles%\FireFox\xpcom.dll в %ProgramFiles%\FireFox\xpcom.dll.fucked
  • %ProgramFiles%\FireFox\crashreporter-override.ini в %ProgramFiles%\FireFox\crashreporter-override.ini.fucked
  • %ProgramFiles%\FireFox\shlibsign.exe в %ProgramFiles%\FireFox\shlibsign.exe.fucked
  • %ProgramFiles%\FireFox\crashreporter.ini в %ProgramFiles%\FireFox\crashreporter.ini.fucked
  • %ProgramFiles%\FireFox\freebl3.dll в %ProgramFiles%\FireFox\freebl3.dll.fucked
  • %ProgramFiles%\FireFox\IA2Marshal.dll в %ProgramFiles%\FireFox\IA2Marshal.dll.fucked
  • %ProgramFiles%\FireFox\js.exe в %ProgramFiles%\FireFox\js.exe.fucked
  • %ProgramFiles%\FireFox\mangle.exe в %ProgramFiles%\FireFox\mangle.exe.fucked
  • %ProgramFiles%\FireFox\mozalloc.dll в %ProgramFiles%\FireFox\mozalloc.dll.fucked
  • %ProgramFiles%\FireFox\crashreporter.exe в %ProgramFiles%\FireFox\crashreporter.exe.fucked
  • %APPDATA%\Mozilla\Firefox\profiles.ini в %APPDATA%\Mozilla\Firefox\profiles.ini.fucked
  • %ProgramFiles%\FireFox\firefox.exe в %ProgramFiles%\FireFox\firefox.exe.fucked
  • %ProgramFiles%\FireFox\nss3.dll в %ProgramFiles%\FireFox\nss3.dll.fucked
  • %ProgramFiles%\FireFox\xpidl.exe в %ProgramFiles%\FireFox\xpidl.exe.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\button.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\button.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\colorpicker.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\colorpicker.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\datetimepicker.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\datetimepicker.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\dialog.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\dialog.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\editor.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\editor.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\expander.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\expander.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\browser.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\browser.xml.fucked
  • %ProgramFiles%\FireFox\xpt_dump.exe в %ProgramFiles%\FireFox\xpt_dump.exe.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\checkbox.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\checkbox.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\filefield.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\filefield.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\listbox.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\listbox.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\menu.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\menu.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\menulist.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\menulist.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\notification.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\notification.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\numberbox.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\numberbox.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\findbar.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\findbar.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\general.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\general.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\groupbox.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\groupbox.xml.fucked
  • %ProgramFiles%\Movie Maker\Shared\Empty.txt в %ProgramFiles%\Movie Maker\Shared\Empty.txt.fucked
  • %ProgramFiles%\MSN\MSNCoreFiles\Install\MSN9Components\digopt.msi в %ProgramFiles%\MSN\MSNCoreFiles\Install\MSN9Components\digopt.msi.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\printPreviewBindings.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\printPreviewBindings.xml.fucked
  • %ProgramFiles%\FireFox\xul.dll в %ProgramFiles%\FireFox\xul.dll.fucked
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs-bindings.xml в %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs-bindings.xml.fucked
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\browser-tabPreviews.xml в %ProgramFiles%\FireFox\chrome\browser\content\browser\browser-tabPreviews.xml.fucked
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncNotification.xml в %ProgramFiles%\FireFox\chrome\browser\content\browser\syncNotification.xml.fucked
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\tabbrowser.xml в %ProgramFiles%\FireFox\chrome\browser\content\browser\tabbrowser.xml.fucked
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\urlbarBindings.xml в %ProgramFiles%\FireFox\chrome\browser\content\browser\urlbarBindings.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\tabprompts.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\tabprompts.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\autocomplete.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\autocomplete.xml.fucked
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.xml в %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.xml.fucked
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\menu.xml в %ProgramFiles%\FireFox\chrome\browser\content\browser\places\menu.xml.fucked
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\tree.xml в %ProgramFiles%\FireFox\chrome\browser\content\browser\places\tree.xml.fucked
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\handlers.xml в %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\handlers.xml.fucked
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\search\search.xml в %ProgramFiles%\FireFox\chrome\browser\content\browser\search\search.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\consoleBindings.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\consoleBindings.xml.fucked
  • %ProgramFiles%\FireFox\chrome\toolkit\content\global\platformHTMLBindings.xml в %ProgramFiles%\FireFox\chrome\toolkit\content\global\platformHTMLBindings.xml.fucked
  • %ProgramFiles%\FireFox\xpt_link.exe в %ProgramFiles%\FireFox\xpt_link.exe.fucked
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.xml в %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.xml.fucked
  • %ProgramFiles%\MSN\MSNCoreFiles\Install\MSN9Components\digreqEx.msi в %ProgramFiles%\MSN\MSNCoreFiles\Install\MSN9Components\digreqEx.msi.fucked
Подменяет следующие файлы:
  • <SYSTEM32>\dllcache\dao360.dll.new
  • <SYSTEM32>\dllcache\msadds.dll.new
  • <SYSTEM32>\dllcache\msaddsr.dll.new
  • <SYSTEM32>\dllcache\msdaprsr.dll.new
  • <SYSTEM32>\dllcache\msdaprst.dll.new
  • <SYSTEM32>\dllcache\msdarem.dll.new
  • <SYSTEM32>\dllcache\msdaremr.dll.new
  • <SYSTEM32>\dllcache\msdfmap.dll.new
  • <SYSTEM32>\dllcache\msdadc.dll.new
  • <SYSTEM32>\dllcache\msdaenum.dll.new
  • <SYSTEM32>\dllcache\msdaer.dll.new
  • <SYSTEM32>\dllcache\directdb.dll.new
  • <SYSTEM32>\dllcache\msdaora.dll.new
  • <SYSTEM32>\dllcache\msdaosp.dll.new
  • <SYSTEM32>\dllcache\msdaps.dll.new
  • <SYSTEM32>\dllcache\msdasc.dll.new
  • <SYSTEM32>\dllcache\msdasql.dll.new
  • <SYSTEM32>\dllcache\msdasqlr.dll.new
  • <SYSTEM32>\dllcache\msdatl3.dll.new
  • <SYSTEM32>\dllcache\msdatt.dll.new
  • <SYSTEM32>\dllcache\msdaurl.dll.new
  • <SYSTEM32>\dllcache\msxactps.dll.new
  • <SYSTEM32>\dllcache\oledb32.dll.new
  • <SYSTEM32>\dllcache\msadcor.dll.new
  • <SYSTEM32>\dllcache\msadcs.dll.new
  • <SYSTEM32>\dllcache\msadco.dll.new
  • <SYSTEM32>\dllcache\msadcfr.dll.new
  • <SYSTEM32>\dllcache\msadcf.dll.new
  • <SYSTEM32>\dllcache\sapi.dll.new
  • <SYSTEM32>\dllcache\sapisvr.exe.new
  • <SYSTEM32>\dllcache\spcplui.dll.new
  • <SYSTEM32>\dllcache\triedit.dll.new
  • <SYSTEM32>\dllcache\vgx.dll.new
  • <SYSTEM32>\dllcache\fp4autl.dll.new
  • <SYSTEM32>\dllcache\mssoap1.dll.new
  • <SYSTEM32>\dllcache\wisc10.dll.new
  • <SYSTEM32>\dllcache\mssoapr.dll.new
  • <SYSTEM32>\dllcache\spcommon.dll.new
  • <SYSTEM32>\dllcache\oledb32r.dll.new
  • <SYSTEM32>\dllcache\msdaorar.dll.new
  • <SYSTEM32>\dllcache\spttseng.dll.new
  • <SYSTEM32>\dllcache\wab32res.dll.new
  • <SYSTEM32>\dllcache\msader15.dll.new
  • <SYSTEM32>\dllcache\msado15.dll.new
  • <SYSTEM32>\dllcache\msadomd.dll.new
  • <SYSTEM32>\dllcache\msador15.dll.new
  • <SYSTEM32>\dllcache\msadox.dll.new
  • <SYSTEM32>\dllcache\msadrh15.dll.new
  • <SYSTEM32>\dllcache\msjro.dll.new
  • <SYSTEM32>\dllcache\msadce.dll.new
  • <SYSTEM32>\dllcache\msadcer.dll.new
  • <SYSTEM32>\dllcache\msinfo32.exe.new
  • <SYSTEM32>\dllcache\wab32.dll.new
  • <SYSTEM32>\dllcache\sqlxmlx.dll.new
Изменяет множество файлов пользовательских данных (Trojan.Encoder).
Изменяет расширения файлов пользовательских данных (Trojan.Encoder).
Другое:
Ищет следующие окна:
  • ClassName: 'WordPadClass' WindowName: ''
Создает и запускает на исполнение:
  • '%HOMEPATH%\Start Menu\Programs\Startup\syyue.exe'
Запускает на исполнение:
  • '%ProgramFiles%\Windows NT\Accessories\wordpad.exe' "%APPDATA%\docv.doc"

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке