Поддержка
Круглосуточная поддержка

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.DownLoader19.9812

Добавлен в вирусную базу Dr.Web: 2016-01-26

Описание добавлено:

Техническая информация

Вредоносные функции:
Создает и запускает на исполнение:
  • '%TEMP%\iepv.exe' /stext %TEMP%\ie.txt
  • '%TEMP%\passwordfox.exe' /stext %TEMP%\firefox.txt
Запускает на исполнение:
  • '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\ilasm.exe' "%APPDATA%\MSBuild.il"
  • '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe'
Внедряет код в
следующие системные процессы:
  • %WINDIR%\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
Ищет ветки реестра, отвечающие за хранение паролей сторонними программами:
  • [<HKLM>\SOFTWARE\CyberLink\PowerProducer\3.0\UserReg]
  • [<HKLM>\SOFTWARE\Valve\Day of Defeat\Settings]
  • [<HKLM>\SOFTWARE\Cyberlink\PowerDVD]
  • [<HKLM>\SOFTWARE\Cyberlink\PowerBar]
  • [<HKLM>\SOFTWARE\Electronic Arts\Electronic Arts\The Battle for Middle-earth II]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Games\The Sims 2 Nightlife]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Games\The Sims 2 Open For Business]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Games\The Sims 2]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Games\The Sims 2 University]
  • [<HKLM>\SOFTWARE\Westwood\Red Alert]
  • [<HKLM>\SOFTWARE\Westwood\Tiberian Sun]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA GAMES\Command and Conquer Generals Zero Hour]
  • [<HKLM>\SOFTWARE\Westwood\Red Alert 2]
  • [<HKLM>\SOFTWARE\Electronic Arts\Command and Conquer 3]
  • [<HKLM>\SOFTWARE\Valve\Counter-Strike\Settings]
  • [<HKLM>\SOFTWARE\Electronic Arts\Electronic Arts\Crysis]
  • [<HKLM>\SOFTWARE\Electronic Arts\Electronic Arts\Command and Conquer 3]
  • [<HKLM>\SOFTWARE\THQ\Company of Heroes]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Sports\FIFA 2002]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Sports\FIFA 2003]
  • [<HKLM>\SOFTWARE\F-Secure\BackWeb\iLauncher]
  • [<HKLM>\SOFTWARE\CRYTEK\FARCRY\UBI.COM]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Sports\FIFA 2004]
  • [<HKLM>\SOFTWARE\Electronic Arts\Electronic Arts\FIFA 08]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Distribution\Freedom Force]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Sports\FIFA 2005]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Sports\FIFA 07]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Games\The Sims 2 Glamour Life Stuff]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Games\The Sims 2 Celebration Stuff]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Games\The Sims 2 Pets]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Games\The Sims 2 Seasons]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Games\The Sims 2 H M Fashion Stuff]
  • [<HKLM>\SOFTWARE\Sierra\Empire Earth II]
  • [<HKLM>\SOFTWARE\Sierra\CDKey]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Games\The Sims 2 Family Fun Stuff]
  • [<HKLM>\SOFTWARE\DVD Audio Extractor\Settings]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA GAMES\Generals]
  • [<HKLM>\SOFTWARE\SEGA\Medieval II Total War]
  • [<HKLM>\SOFTWARE\Adobe\Golive\5.0\Registration]
  • [<HKLM>\SOFTWARE\THQ\Dawn of War]
  • [<HKLM>\SOFTWARE\THQ\Dawn of War - Dark Crusade]
  • [<HKLM>\SOFTWARE\ahead\Installation\BAK\Nero 7\Info]
  • [<HKLM>\SOFTWARE\Adobe\Photoshop\7.0\Registration]
  • [<HKLM>\SOFTWARE\Elcom\Advanced PDF Password Recovery\Registration]
  • [<HKLM>\SOFTWARE\ACD Systems\PicaView]
  • [<HKLM>\SOFTWARE\Eugen Systems\ActOfWar]
  • [<HKLM>\SOFTWARE\Ubisoft\Splinter Cell Pandora Tomorrow]
  • [<HKLM>\SOFTWARE\Ubisoft\Splinter Cell Chaos Theory\Keys]
  • [<HKCU>\Software\TuneUp\Utilities\8.0]
  • [<HKCU>\Software\Nullsoft\Winamp]
  • [<HKLM>\SOFTWARE\Activision\Call of Duty]
  • [<HKLM>\SOFTWARE\Activision\Call of Duty 4]
  • [<HKLM>\SOFTWARE\Activision\Call of Duty WAW]
  • [<HKLM>\SOFTWARE\Activision\Call of Duty United Offensive]
  • [<HKLM>\SOFTWARE\Activision\Call of Duty 2]
  • [<HKLM>\Software\Electronic Arts\EA GAMES\Black and White]
  • [<HKLM>\Software\Electronic Arts\Black and White 2]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA GAMES\Battlefield 2142]
  • [<HKLM>\Software\Electronic Arts\EA GAMES\Battlefield Vietnam]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Games\Boulder Dash Rocks]
  • [<HKLM>\SOFTWARE\Techland\Chrome]
  • [<HKLM>\SOFTWARE\Codec Tweak Tool]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Games\Burnout Paradise]
  • [<HKLM>\SOFTWARE\TechSmith\Camtasia Studio\4.0]
  • [<HKLM>\SOFTWARE\Sunflowers\Anno 1701]
  • [<HKLM>\SOFTWARE\ashampoo\Ashampoo WinOptimizer Platinum 3]
  • [<HKLM>\SOFTWARE\Elcom\Advanced PDF Password Recovery\Registration Pro]
  • [<HKLM>\SOFTWARE\Elcom\Advanced ZIP Password Recovery\Registration]
  • [<HKLM>\SOFTWARE\@stake\LC5\Registration]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA GAMES\Battlefield 1942 The Road to Rome]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Games\Battlefield 2]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA GAMES\Battlefield 1942]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA GAMES\Battlefield 1942 Secret Weapons of WWII]
  • [<HKLM>\SOFTWARE\THQ\Frontlines: Fuel of War Beta]
  • [<HKLM>\Software\Passware\Encryption Analyzer\1\Registration,License]
  • [<HKLM>\Software\Passware\Windows Key\7\Registration]
  • [<HKLM>\Software\O&O\O&O Defrag\8.0\Pro\licenses]
  • [<HKLM>\Software\PowerQuest\PartitionMagic\8.0\UserInfo]
  • [<HKLM>\Software\EnTech\PowerStrip]
  • [<HKLM>\Software\Electronic Arts\EA GAMES\Shogun Total War - Warlord Edition]
  • [<HKLM>\Software\Atari\Sid Meier's Pirates!]
  • [<HKLM>\Software\KONAMI\PES2008]
  • [<HKLM>\Software\Red Storm Entertainment\RAVENSHIELD]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA GAMES\Need For Speed Underground 2]
  • [<HKLM>\SOFTWARE\Ahead\Nero - Burning Rom\Info]
  • [<HKLM>\SOFTWARE\Electronic Arts\Electronic Arts\Need for Speed ProStreet]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA GAMES\Need For Speed Underground]
  • [<HKLM>\Software\Nero\Installation\Families\Nero 7\Info]
  • [<HKLM>\Software\NuMega\SmartCheck]
  • [<HKLM>\Software\OnlineTVPlayer\RegInfo]
  • [<HKLM>\SOFTWARE\Nero\Installation\Families\Nero 8\Info]
  • [<HKLM>\Software\Westwood\Nox]
  • [<HKLM>\Software\Electronic Arts\EA Games\The Battle for Middle-earth]
  • [<HKLM>\Software\Electronic Arts\EA Games\The Orange Box]
  • [<HKLM>\Software\TechSmith\SnagIt\8]
  • [<HKLM>\Software\TexasCalc\License]
  • [<HKLM>\Software\Pegasys Inc.\TMPGEnc DVD Author\1.0]
  • [<HKLM>\Software\TuneUp\Utilities\8.0]
  • [<HKLM>\Software\Nullsoft\Winamp]
  • [<HKLM>\Software\TuneUp\Utilities\6.0]
  • [<HKLM>\Software\TuneUp\Utilities\7.0]
  • [<HKLM>\Software\Network Associates, Inc.\Sniffer Pro\4.5\USER]
  • [<HKLM>\Software\Silver Style Entertainment\Soldiers Of Anarchy]
  • [<HKLM>\Software\Ubisoft\SILENT HUNTER III\Keys]
  • [<HKLM>\Software\Electronic Arts\Maxis\ Sim City 4 Deluxe]
  • [<HKLM>\Software\GSC Game World\STALKER-SHOC]
  • [<HKLM>\Software\Steganos\SIAVPN]
  • [<HKLM>\Software\THQ\Gas Powered Games\Supreme Commander]
  • [<HKLM>\Software\LucasArts\Star Wars Battlefront II\1.0]
  • [<HKLM>\Software\LucasArts\Star Wars Battlefront II\1.1]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA GAMES\Need for Speed Most Wanted]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA GAMES\James Bond 007 Nightfire]
  • [<HKLM>\SOFTWARE\3d0\Status Legends of Might and Magic]
  • [<HKLM>\SOFTWARE\JoWooD\InstalledGames\IG2]
  • [<HKLM>\SOFTWARE\AVConverter\iPod Converter]
  • [<HKLM>\SOFTWARE\Macromedia\Flash\7\Registration]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Sports\Madden NFL 07]
  • [<HKLM>\SOFTWARE\JSG\Matrix Saver V2]
  • [<HKLM>\SOFTWARE\Macromedia\Fireworks\7\Registration]
  • [<HKLM>\SOFTWARE\Macromedia\Dreamweaver\7\Registration]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA GAMES\Global Operations]
  • [<HKLM>\SOFTWARE\Valve\Gunman]
  • [<HKLM>\SOFTWARE\THQ\Frontlines: Fuel of War]
  • [<HKLM>\SOFTWARE\Headlight\GetRight]
  • [<HKLM>\SOFTWARE\Valve\Half-Life\Setting]
  • [<HKLM>\SOFTWARE\IGI 2 Retail\CDKey]
  • [<HKLM>\SOFTWARE\Ahead\InCD]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Games\Hellgate: London]
  • [<HKLM>\SOFTWARE\Illusion Softworks\Hidden & Dangerous 2]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Sports\NHL 2005]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Sports\NBA LIVE 2003]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Sports\NHL 2003]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Sports\NHL 2004]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Sports\NBA LIVE 2004]
  • [<HKLM>\SOFTWARE\Electronic Arts\Electronic Arts\Need for Speed Carbon]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA GAMES\Need For Speed Hot Pursuit 2]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Sports\NBA LIVE 07]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Sports\NBA Live 08]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA GAMES\Medal of Honor Allied Assault Breakthrough]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA GAMES\Medal of Honor Allied Assault Spearhead]
  • [<HKLM>\SOFTWARE\Electronic Arts\Medal of Honor Airborne]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA GAMES\Medal of Honor Allied Assault]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Games\Medal of Honor: Heroes 2]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Sports\Nascar Racing 2003]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Sports\NHL 2002]
  • [<HKLM>\SOFTWARE\mIRC]
  • [<HKLM>\SOFTWARE\Electronic Arts\EA Sports\Nascar Racing 2002]
  • [<HKCU>\SOFTWARE\Cyberlink\PowerDVD]
  • [<HKCU>\SOFTWARE\Cyberlink\PowerBar]
  • [<HKCU>\SOFTWARE\Valve\Counter-Strike\Settings]
  • [<HKCU>\SOFTWARE\Electronic Arts\Electronic Arts\Crysis]
  • [<HKCU>\SOFTWARE\CyberLink\PowerProducer\3.0\UserReg]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Games\The Sims 2]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Games\The Sims 2 University]
  • [<HKCU>\SOFTWARE\Valve\Day of Defeat\Settings]
  • [<HKCU>\SOFTWARE\Electronic Arts\Electronic Arts\The Battle for Middle-earth II]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA GAMES\Command and Conquer Generals Zero Hour]
  • [<HKCU>\SOFTWARE\Westwood\Red Alert 2]
  • [<HKCU>\SOFTWARE\Codec Tweak Tool]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA GAMES\Generals]
  • [<HKCU>\SOFTWARE\Westwood\Red Alert]
  • [<HKCU>\SOFTWARE\Electronic Arts\Electronic Arts\Command and Conquer 3]
  • [<HKCU>\SOFTWARE\THQ\Company of Heroes]
  • [<HKCU>\SOFTWARE\Westwood\Tiberian Sun]
  • [<HKCU>\SOFTWARE\Electronic Arts\Command and Conquer 3]
  • [<HKCU>\SOFTWARE\F-Secure\BackWeb\iLauncher]
  • [<HKCU>\SOFTWARE\CRYTEK\FARCRY\UBI.COM]
  • [<HKCU>\SOFTWARE\Sierra\Empire Earth II]
  • [<HKCU>\SOFTWARE\Sierra\CDKey]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Sports\FIFA 2002]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Sports\FIFA 2005]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Sports\FIFA 07]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Sports\FIFA 2003]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Sports\FIFA 2004]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Games\The Sims 2 Pets]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Games\The Sims 2 Seasons]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Games\The Sims 2 Nightlife]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Games\The Sims 2 Open For Business]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Games\The Sims 2 Glamour Life Stuff]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Games\The Sims 2 Family Fun Stuff]
  • [<HKCU>\SOFTWARE\DVD Audio Extractor\Settings]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Games\The Sims 2 Celebration Stuff]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Games\The Sims 2 H M Fashion Stuff]
  • [<HKCU>\SOFTWARE\Techland\Chrome]
  • [<HKCU>\SOFTWARE\THQ\Dawn of War]
  • [<HKCU>\SOFTWARE\THQ\Dawn of War - Dark Crusade]
  • [<HKCU>\SOFTWARE\Activision\Call of Duty 4]
  • [<HKCU>\SOFTWARE\Activision\Call of Duty WAW]
  • [<HKCU>\SOFTWARE\SEGA\Medieval II Total War]
  • [<HKCU>\SOFTWARE\ACD Systems\PicaView]
  • [<HKCU>\SOFTWARE\Eugen Systems\ActOfWar]
  • [<HKCU>\SOFTWARE\Adobe\Golive\5.0\Registration]
  • [<HKCU>\SOFTWARE\ahead\Installation\BAK\Nero 7\Info]
  • [<HKCU>\Software\IMVU\username]
  • [<HKCU>\Software\Paltalk]
  • [<HKCU>\Software\Microsoft\Internet Explorer\IntelliForms\Storage2]
  • [<HKCU>\Software\Beyluxe Messenger]
  • [<HKCU>\SOFTWARE\Ubisoft\Splinter Cell Pandora Tomorrow]
  • [<HKCU>\SOFTWARE\Activision\Call of Duty United Offensive]
  • [<HKCU>\SOFTWARE\Activision\Call of Duty 2]
  • [<HKCU>\SOFTWARE\Ubisoft\Splinter Cell Chaos Theory\Keys]
  • [<HKCU>\SOFTWARE\Activision\Call of Duty]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA GAMES\Battlefield 2142]
  • [<HKCU>\Software\Electronic Arts\EA GAMES\Battlefield Vietnam]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA GAMES\Battlefield 1942 The Road to Rome]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Games\Battlefield 2]
  • [<HKCU>\Software\Electronic Arts\EA GAMES\Black and White]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Games\Burnout Paradise]
  • [<HKCU>\SOFTWARE\TechSmith\Camtasia Studio\4.0]
  • [<HKCU>\Software\Electronic Arts\Black and White 2]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Games\Boulder Dash Rocks]
  • [<HKCU>\SOFTWARE\Elcom\Advanced PDF Password Recovery\Registration Pro]
  • [<HKCU>\SOFTWARE\Elcom\Advanced ZIP Password Recovery\Registration]
  • [<HKCU>\SOFTWARE\Adobe\Photoshop\7.0\Registration]
  • [<HKCU>\SOFTWARE\Elcom\Advanced PDF Password Recovery\Registration]
  • [<HKCU>\SOFTWARE\Sunflowers\Anno 1701]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA GAMES\Battlefield 1942]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA GAMES\Battlefield 1942 Secret Weapons of WWII]
  • [<HKCU>\SOFTWARE\ashampoo\Ashampoo WinOptimizer Platinum 3]
  • [<HKCU>\SOFTWARE\@stake\LC5\Registration]
  • [<HKCU>\SOFTWARE\Electronic Arts\Electronic Arts\FIFA 08]
  • [<HKCU>\Software\O&O\O&O Defrag\8.0\Pro\licenses]
  • [<HKCU>\Software\PowerQuest\PartitionMagic\8.0\UserInfo]
  • [<HKCU>\Software\NuMega\SmartCheck]
  • [<HKCU>\Software\OnlineTVPlayer\RegInfo]
  • [<HKCU>\Software\Passware\Encryption Analyzer\1\Registration,License]
  • [<HKCU>\Software\KONAMI\PES2008]
  • [<HKCU>\Software\Red Storm Entertainment\RAVENSHIELD]
  • [<HKCU>\Software\Passware\Windows Key\7\Registration]
  • [<HKCU>\Software\EnTech\PowerStrip]
  • [<HKCU>\SOFTWARE\Electronic Arts\Electronic Arts\Need for Speed ProStreet]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA GAMES\Need For Speed Underground]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA GAMES\Need For Speed Hot Pursuit 2]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA GAMES\Need for Speed Most Wanted]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA GAMES\Need For Speed Underground 2]
  • [<HKCU>\SOFTWARE\Nero\Installation\Families\Nero 8\Info]
  • [<HKCU>\Software\Westwood\Nox]
  • [<HKCU>\SOFTWARE\Ahead\Nero - Burning Rom\Info]
  • [<HKCU>\Software\Nero\Installation\Families\Nero 7\Info]
  • [<HKCU>\Software\TechSmith\SnagIt\8]
  • [<HKCU>\Software\TexasCalc\License]
  • [<HKCU>\Software\Steganos\SIAVPN]
  • [<HKCU>\Software\THQ\Gas Powered Games\Supreme Commander]
  • [<HKCU>\Software\Electronic Arts\EA Games\The Battle for Middle-earth]
  • [<HKCU>\Software\TuneUp\Utilities\6.0]
  • [<HKCU>\Software\TuneUp\Utilities\7.0]
  • [<HKCU>\Software\Electronic Arts\EA Games\The Orange Box]
  • [<HKCU>\Software\Pegasys Inc.\TMPGEnc DVD Author\1.0]
  • [<HKCU>\Software\Ubisoft\SILENT HUNTER III\Keys]
  • [<HKCU>\Software\Electronic Arts\Maxis\ Sim City 4 Deluxe]
  • [<HKCU>\Software\Electronic Arts\EA GAMES\Shogun Total War - Warlord Edition]
  • [<HKCU>\Software\Atari\Sid Meier's Pirates!]
  • [<HKCU>\Software\Network Associates, Inc.\Sniffer Pro\4.5\USER]
  • [<HKCU>\Software\LucasArts\Star Wars Battlefront II\1.0]
  • [<HKCU>\Software\LucasArts\Star Wars Battlefront II\1.1]
  • [<HKCU>\Software\Silver Style Entertainment\Soldiers Of Anarchy]
  • [<HKCU>\Software\GSC Game World\STALKER-SHOC]
  • [<HKCU>\SOFTWARE\Electronic Arts\Electronic Arts\Need for Speed Carbon]
  • [<HKCU>\SOFTWARE\JoWooD\InstalledGames\IG2]
  • [<HKCU>\SOFTWARE\AVConverter\iPod Converter]
  • [<HKCU>\SOFTWARE\IGI 2 Retail\CDKey]
  • [<HKCU>\SOFTWARE\Ahead\InCD]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA GAMES\James Bond 007 Nightfire]
  • [<HKCU>\SOFTWARE\Macromedia\Fireworks\7\Registration]
  • [<HKCU>\SOFTWARE\Macromedia\Dreamweaver\7\Registration]
  • [<HKCU>\SOFTWARE\3d0\Status Legends of Might and Magic]
  • [<HKCU>\SOFTWARE\Macromedia\Flash\7\Registration]
  • [<HKCU>\SOFTWARE\THQ\Frontlines: Fuel of War]
  • [<HKCU>\SOFTWARE\Headlight\GetRight]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Distribution\Freedom Force]
  • [<HKCU>\SOFTWARE\THQ\Frontlines: Fuel of War Beta]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA GAMES\Global Operations]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Games\Hellgate: London]
  • [<HKCU>\SOFTWARE\Illusion Softworks\Hidden & Dangerous 2]
  • [<HKCU>\SOFTWARE\Valve\Gunman]
  • [<HKCU>\SOFTWARE\Valve\Half-Life\Setting]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Sports\NHL 2003]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Sports\NHL 2004]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Sports\Nascar Racing 2003]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Sports\NHL 2002]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Sports\NHL 2005]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Sports\NBA LIVE 07]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Sports\NBA Live 08]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Sports\NBA LIVE 2003]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Sports\NBA LIVE 2004]
  • [<HKCU>\SOFTWARE\Electronic Arts\Medal of Honor Airborne]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA GAMES\Medal of Honor Allied Assault]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Sports\Madden NFL 07]
  • [<HKCU>\SOFTWARE\JSG\Matrix Saver V2]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA GAMES\Medal of Honor Allied Assault Breakthrough]
  • [<HKCU>\SOFTWARE\mIRC]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Sports\Nascar Racing 2002]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA GAMES\Medal of Honor Allied Assault Spearhead]
  • [<HKCU>\SOFTWARE\Electronic Arts\EA Games\Medal of Honor: Heroes 2]
Изменения в файловой системе:
Создает следующие файлы:
  • %TEMP%\passwordfox.exe
  • %TEMP%\firefox.txt
  • %TEMP%\iepv.exe
  • %APPDATA%\MSBuild.il
  • %APPDATA%\MSBuild.pdb
  • %APPDATA%\MSBuild.exe
Удаляет следующие файлы:
  • %APPDATA%\MSBuild.pdb
Сетевая активность:
Подключается к:
  • 'sm##.gmail.com':587
UDP:
  • DNS ASK sm##.gmail.com

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке