Поддержка
Круглосуточная поддержка

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.MulDrop6.63428

Добавлен в вирусную базу Dr.Web: 2016-10-28

Описание добавлено:

Техническая информация

Для обеспечения автозапуска и распространения:
Создает следующие сервисы:
  • [<HKLM>\SYSTEM\ControlSet001\Services\USBSafelyRemoveService] 'ImagePath' = '%ProgramFiles%\USB Safely Remove\USBSRService.exe'
  • [<HKLM>\SYSTEM\ControlSet001\Services\USBSafelyRemoveService] 'Start' = '00000002'
Вредоносные функции:
Запускает на исполнение:
  • '%ProgramFiles%\USB Safely Remove\USBSRService.exe' /install /silent
  • '%ProgramFiles%\USB Safely Remove\USBSRService.exe'
  • '%TEMP%\7ZipSfx.000\usbsafelyremovesetup_4-4-beta1.exe' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
  • '%TEMP%\is-T6BEL.tmp\usbsafelyremovesetup_4-4-beta1.tmp' /SL5="$40036,3322107,76288,%TEMP%\7ZipSfx.000\usbsafelyremovesetup_4-4-beta1.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
Изменения в файловой системе:
Создает следующие файлы:
  • %ProgramFiles%\USB Safely Remove\Languages\is-MOIMP.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-J3KTK.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-VLC7S.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-CT7B7.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-95ATI.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-QRNKN.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-84628.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-T68VB.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-5U8DR.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-BP6RN.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-VIACD.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-4Q2PL.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-GVE3G.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-J544P.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-D5TL5.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-3R39J.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-T6CLN.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-UC895.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-K43DU.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-LMCK8.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-7RP0D.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-MMAL7.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-798EB.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-JLBLQ.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-FT16S.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-CB6FU.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-AIIV7.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-CG160.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-KICAJ.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-OLROE.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-A5L5M.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-ATV56.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-SO2K2.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-2IQ72.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-IEF1M.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-947DQ.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-GNHGL.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-N9LUP.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-886D9.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-IVRQ2.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-PVECH.tmp
  • %ProgramFiles%\USB Safely Remove\is-RSHVR.tmp
  • %ProgramFiles%\USB Safely Remove\is-EEPN6.tmp
  • %ProgramFiles%\USB Safely Remove\is-BNL3F.tmp
  • %ALLUSERSPROFILE%\Start Menu\Programs\USB Safely Remove\USB Safely Remove Help.lnk
  • %ALLUSERSPROFILE%\Start Menu\Programs\USB Safely Remove\USB Safely Remove.lnk
  • %ProgramFiles%\USB Safely Remove\is-D7TLR.tmp
  • %ProgramFiles%\USB Safely Remove\is-VCIJ7.tmp
  • %ProgramFiles%\USB Safely Remove\is-72K26.tmp
  • %ProgramFiles%\USB Safely Remove\is-4JRAT.tmp
  • %ProgramFiles%\USB Safely Remove\is-196S3.tmp
  • %APPDATA%\Microsoft\Internet Explorer\Quick Launch\USB Safely Remove.lnk
  • %HOMEPATH%\Desktop\USB Safely Remove.lnk
  • %ProgramFiles%\USB Safely Remove\SafelyRemove.url
  • %ALLUSERSPROFILE%\Application Data\USBSRService\USBSRService.log.txt
  • %ProgramFiles%\USB Safely Remove\unins000.dat
  • %ALLUSERSPROFILE%\Start Menu\Programs\USB Safely Remove\Readme\Readme.lnk
  • %ALLUSERSPROFILE%\Start Menu\Programs\USB Safely Remove\Readme\How to Order.lnk
  • %ALLUSERSPROFILE%\Start Menu\Programs\USB Safely Remove\Readme\What's New.lnk
  • %ALLUSERSPROFILE%\Start Menu\Programs\USB Safely Remove\Uninstall USB Safely Remove.lnk
  • %ALLUSERSPROFILE%\Start Menu\Programs\USB Safely Remove\USB Safely Remove on the Web.lnk
  • %ProgramFiles%\USB Safely Remove\is-DNSQB.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-PNDRL.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-FB93J.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-8I338.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-2JLDU.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-Q48LG.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-ATMNM.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-HQ872.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-QTA55.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-AA3SR.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-G59BN.tmp
  • %ProgramFiles%\USB Safely Remove\is-9IS2H.tmp
  • %ProgramFiles%\USB Safely Remove\is-FC3R2.tmp
  • %ProgramFiles%\USB Safely Remove\is-OH4T1.tmp
  • %ProgramFiles%\USB Safely Remove\is-TGB8R.tmp
  • %ProgramFiles%\USB Safely Remove\is-NK7BP.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-UUMK4.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-2CHQE.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-898SQ.tmp
  • %ProgramFiles%\USB Safely Remove\is-1GH77.tmp
  • %ProgramFiles%\USB Safely Remove\Languages\is-1TFHG.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-G0O6K.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-7LO58.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-E3AA2.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-KPK1G.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-CPLAM.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-7FOK0.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-IE0O7.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-DT6UA.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-8AM50.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-ILNFM.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-5OET8.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-FLOKG.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-UQJ57.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-MBBJ7.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-PAKO5.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-1M880.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-4TIMT.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-IL9VB.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-ULDU1.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-2HL80.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-CEBNQ.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-3TK6C.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-GEITF.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-2HVRB.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-PST39.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-PQ3CD.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-N4E8J.tmp
  • %TEMP%\is-T6BEL.tmp\usbsafelyremovesetup_4-4-beta1.tmp
  • %TEMP%\7ZipSfx.000\usbsafelyremovesetup_4-4-beta1.exe
  • %TEMP%\is-4MN8T.tmp\_isetup\_RegDLL.tmp
  • %ProgramFiles%\USB Safely Remove\is-R62HP.tmp
  • %TEMP%\is-4MN8T.tmp\_isetup\_shfoldr.dll
  • %ProgramFiles%\USB Safely Remove\USBImages\is-H5FT4.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-4ME30.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-ISB14.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-RPOTR.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-JHKRC.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-66LRN.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-M7HDO.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-OTB5Q.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-4KQTQ.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-C1PDE.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-RF71L.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-TRJS3.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-M31QL.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-7VDHN.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-84M9V.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-NDAJQ.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-2BJT6.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-P4SL7.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-35LTE.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-GU1DI.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-TCN2P.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-73GB7.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-HAABT.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-JDL06.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-47APO.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-VG5KV.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-34U0N.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-67U8G.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-1TN25.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-9ITHD.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-LHQIT.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-M7PKU.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-O8OFQ.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-5P0EU.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-OT48G.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-P5FI5.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-3VL2K.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-JMDI6.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-HBRS2.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-J2B5Q.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-SEBVF.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-E773U.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-KJJ9A.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-03P7E.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-8GEFM.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-3T6G3.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-DLAUA.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-501NE.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-C5EDV.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-GKGS7.tmp
  • %ProgramFiles%\USB Safely Remove\USBImages\is-R7IUF.tmp
Удаляет следующие файлы:
  • %TEMP%\is-T6BEL.tmp\usbsafelyremovesetup_4-4-beta1.tmp
  • %TEMP%\7ZipSfx.000\usbsafelyremovesetup_4-4-beta1.exe
  • %TEMP%\is-4MN8T.tmp\_isetup\_RegDLL.tmp
  • %TEMP%\is-4MN8T.tmp\_isetup\_shfoldr.dll
Перемещает следующие файлы:
  • %ProgramFiles%\USB Safely Remove\Languages\is-84628.tmp в %ProgramFiles%\USB Safely Remove\Languages\Dutch-Belgium.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-7RP0D.tmp в %ProgramFiles%\USB Safely Remove\Languages\Danish.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-T68VB.tmp в %ProgramFiles%\USB Safely Remove\Languages\Estonian.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-QRNKN.tmp в %ProgramFiles%\USB Safely Remove\Languages\Dutch-Netherlands.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-IEF1M.tmp в %ProgramFiles%\USB Safely Remove\Languages\Czech.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-ATV56.tmp в %ProgramFiles%\USB Safely Remove\Languages\Chinese-Simplified.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-SO2K2.tmp в %ProgramFiles%\USB Safely Remove\Languages\Catalan.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-947DQ.tmp в %ProgramFiles%\USB Safely Remove\Languages\Croatian.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-2IQ72.tmp в %ProgramFiles%\USB Safely Remove\Languages\Chinese-Traditional.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-CT7B7.tmp в %ProgramFiles%\USB Safely Remove\Languages\Hungarian.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-95ATI.tmp в %ProgramFiles%\USB Safely Remove\Languages\Hebrew.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-3R39J.tmp в %ProgramFiles%\USB Safely Remove\Languages\Italian.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-T6CLN.tmp в %ProgramFiles%\USB Safely Remove\Languages\Indonesian.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-VLC7S.tmp в %ProgramFiles%\USB Safely Remove\Languages\Greek.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-5U8DR.tmp в %ProgramFiles%\USB Safely Remove\Languages\French.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-BP6RN.tmp в %ProgramFiles%\USB Safely Remove\Languages\Finnish.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-MOIMP.tmp в %ProgramFiles%\USB Safely Remove\Languages\German.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-J3KTK.tmp в %ProgramFiles%\USB Safely Remove\Languages\Galician.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-IVRQ2.tmp в %ProgramFiles%\USB Safely Remove\Languages\Bulgarian.lng
  • %ProgramFiles%\USB Safely Remove\USBImages\is-KICAJ.tmp в %ProgramFiles%\USB Safely Remove\USBImages\TV-tuner_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-AIIV7.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Scanner_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-OLROE.tmp в %ProgramFiles%\USB Safely Remove\USBImages\UPS_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-A5L5M.tmp в %ProgramFiles%\USB Safely Remove\USBImages\TV-tuner_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-CG160.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Scanner_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-47APO.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Radio_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-HAABT.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Radio_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-G0O6K.tmp в %ProgramFiles%\USB Safely Remove\USBImages\RemoteControl_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-JDL06.tmp в %ProgramFiles%\USB Safely Remove\USBImages\RemoteControl_large.png
  • %ProgramFiles%\USB Safely Remove\Languages\is-GNHGL.tmp в %ProgramFiles%\USB Safely Remove\Languages\Arabic.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-N9LUP.tmp в %ProgramFiles%\USB Safely Remove\Languages\Albanian.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-PVECH.tmp в %ProgramFiles%\USB Safely Remove\Languages\Bosnian.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-886D9.tmp в %ProgramFiles%\USB Safely Remove\Languages\Belarusian.lng
  • %ProgramFiles%\USB Safely Remove\USBImages\is-FT16S.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Webcam_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-MMAL7.tmp в %ProgramFiles%\USB Safely Remove\USBImages\USB disk_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-798EB.tmp в %ProgramFiles%\USB Safely Remove\USBImages\UPS_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-CB6FU.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Webcam_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-JLBLQ.tmp в %ProgramFiles%\USB Safely Remove\USBImages\USB disk_small.png
  • %ProgramFiles%\USB Safely Remove\is-OH4T1.tmp в %ProgramFiles%\USB Safely Remove\usr.exe
  • %ProgramFiles%\USB Safely Remove\is-9IS2H.tmp в %ProgramFiles%\USB Safely Remove\USBSafelyRemove.exe
  • %ProgramFiles%\USB Safely Remove\is-TGB8R.tmp в %ProgramFiles%\USB Safely Remove\installnotes.rtf
  • %ProgramFiles%\USB Safely Remove\is-NK7BP.tmp в %ProgramFiles%\USB Safely Remove\deviceClassList.txt
  • %ProgramFiles%\USB Safely Remove\is-FC3R2.tmp в %ProgramFiles%\USB Safely Remove\USRFindHandle.sys
  • %ProgramFiles%\USB Safely Remove\Languages\is-898SQ.tmp в %ProgramFiles%\USB Safely Remove\Languages\Vietnamese-unicode.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-UUMK4.tmp в %ProgramFiles%\USB Safely Remove\Languages\Ukrainian.lng
  • %ProgramFiles%\USB Safely Remove\is-1GH77.tmp в %ProgramFiles%\USB Safely Remove\USBSRService.exe
  • %ProgramFiles%\USB Safely Remove\Languages\is-1TFHG.tmp в %ProgramFiles%\USB Safely Remove\Languages\Vietnamese.lng
  • %ProgramFiles%\USB Safely Remove\is-EEPN6.tmp в %ProgramFiles%\USB Safely Remove\SaveSettings.bat
  • %ProgramFiles%\USB Safely Remove\is-4JRAT.tmp в %ProgramFiles%\USB Safely Remove\RestoreSettings.bat
  • %ProgramFiles%\USB Safely Remove\is-BNL3F.tmp в %ProgramFiles%\USB Safely Remove\USBSafelyRemoveRu.chm
  • %ProgramFiles%\USB Safely Remove\is-RSHVR.tmp в %ProgramFiles%\USB Safely Remove\USBSafelyRemove.chm
  • %ProgramFiles%\USB Safely Remove\is-196S3.tmp в %ProgramFiles%\USB Safely Remove\Readme.txt
  • %ProgramFiles%\USB Safely Remove\is-VCIJ7.tmp в %ProgramFiles%\USB Safely Remove\History.txt
  • %ProgramFiles%\USB Safely Remove\is-DNSQB.tmp в %ProgramFiles%\USB Safely Remove\FILE_ID.DIZ
  • %ProgramFiles%\USB Safely Remove\is-72K26.tmp в %ProgramFiles%\USB Safely Remove\Order.txt
  • %ProgramFiles%\USB Safely Remove\is-D7TLR.tmp в %ProgramFiles%\USB Safely Remove\License.txt
  • %ProgramFiles%\USB Safely Remove\Languages\is-2CHQE.tmp в %ProgramFiles%\USB Safely Remove\Languages\Turkish.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-D5TL5.tmp в %ProgramFiles%\USB Safely Remove\Languages\Persian.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-GVE3G.tmp в %ProgramFiles%\USB Safely Remove\Languages\Norwegian.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-HQ872.tmp в %ProgramFiles%\USB Safely Remove\Languages\Portuguese-Brazilian.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-J544P.tmp в %ProgramFiles%\USB Safely Remove\Languages\Polish.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-VIACD.tmp в %ProgramFiles%\USB Safely Remove\Languages\Macedonian.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-LMCK8.tmp в %ProgramFiles%\USB Safely Remove\Languages\Korean.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-UC895.tmp в %ProgramFiles%\USB Safely Remove\Languages\Japanese.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-4Q2PL.tmp в %ProgramFiles%\USB Safely Remove\Languages\Lithuanian.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-K43DU.tmp в %ProgramFiles%\USB Safely Remove\Languages\Latvian.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-8I338.tmp в %ProgramFiles%\USB Safely Remove\Languages\Slovenian.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-PNDRL.tmp в %ProgramFiles%\USB Safely Remove\Languages\Slovak.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-2JLDU.tmp в %ProgramFiles%\USB Safely Remove\Languages\Swedish.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-Q48LG.tmp в %ProgramFiles%\USB Safely Remove\Languages\Spanish.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-FB93J.tmp в %ProgramFiles%\USB Safely Remove\Languages\Serbian-Latin.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-QTA55.tmp в %ProgramFiles%\USB Safely Remove\Languages\Russian.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-ATMNM.tmp в %ProgramFiles%\USB Safely Remove\Languages\Romanian.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-AA3SR.tmp в %ProgramFiles%\USB Safely Remove\Languages\Serbian-Cyrillic.lng
  • %ProgramFiles%\USB Safely Remove\Languages\is-G59BN.tmp в %ProgramFiles%\USB Safely Remove\Languages\Russian_Preved.lng
  • %ProgramFiles%\USB Safely Remove\USBImages\is-TCN2P.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Printer_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-7FOK0.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Flash drive (light)_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-KPK1G.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Flash drive (green)_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-IL9VB.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Flash drive (pink)_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-CPLAM.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Flash drive (light)_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-7LO58.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Flash drive (green)_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-5OET8.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Flash drive (black)_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-8AM50.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Flash drive (black)_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-E3AA2.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Flash drive (gray)_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-ILNFM.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Flash drive (gray)_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-MBBJ7.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Graphics-tablet_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-FLOKG.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Graphics-tablet_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-PAKO5.tmp в %ProgramFiles%\USB Safely Remove\USBImages\HDD (blue)_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-1M880.tmp в %ProgramFiles%\USB Safely Remove\USBImages\HDD (blue)_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-UQJ57.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Flash drive_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-ULDU1.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Flash drive (wine)_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-4TIMT.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Flash drive (pink)_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-2HL80.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Flash drive_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-CEBNQ.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Flash drive (wine)_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-IE0O7.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Default_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-M7HDO.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Camera_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-PQ3CD.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Camera_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-OTB5Q.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Card reader (black)_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-66LRN.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Card reader (black)_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-N4E8J.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Bluetooth_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-2HVRB.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Battery_large.png
  • %ProgramFiles%\USB Safely Remove\is-R62HP.tmp в %ProgramFiles%\USB Safely Remove\unins000.exe
  • %ProgramFiles%\USB Safely Remove\USBImages\is-PST39.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Bluetooth_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-GEITF.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Battery_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-RPOTR.tmp в %ProgramFiles%\USB Safely Remove\USBImages\CD-DVD player_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-JHKRC.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Card reader_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-DT6UA.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Default_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-3TK6C.tmp в %ProgramFiles%\USB Safely Remove\USBImages\CD-DVD player_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-ISB14.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Card reader_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-4KQTQ.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Card reader (green)_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-C1PDE.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Card reader (green)_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-H5FT4.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Card reader (red)_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-4ME30.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Card reader (red)_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-35LTE.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Mobile phone_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-GU1DI.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Mobile phone_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-RF71L.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Modem_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-TRJS3.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Modem_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-P4SL7.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Microphone_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-LHQIT.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Memorystick_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-8GEFM.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Loudspeaker_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-NDAJQ.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Microphone_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-2BJT6.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Memorystick_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-9ITHD.tmp в %ProgramFiles%\USB Safely Remove\USBImages\PDA_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-67U8G.tmp в %ProgramFiles%\USB Safely Remove\USBImages\PCI-card_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-73GB7.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Printer_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-1TN25.tmp в %ProgramFiles%\USB Safely Remove\USBImages\PDA_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-VG5KV.tmp в %ProgramFiles%\USB Safely Remove\USBImages\PCI-card_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-84M9V.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Mouse_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-M31QL.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Mouse_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-34U0N.tmp в %ProgramFiles%\USB Safely Remove\USBImages\MP3 player_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-7VDHN.tmp в %ProgramFiles%\USB Safely Remove\USBImages\MP3 player_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-3T6G3.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Loudspeaker_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-M7PKU.tmp в %ProgramFiles%\USB Safely Remove\USBImages\HDD_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-O8OFQ.tmp в %ProgramFiles%\USB Safely Remove\USBImages\HDD (yellow)_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-P5FI5.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Headphones_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-5P0EU.tmp в %ProgramFiles%\USB Safely Remove\USBImages\HDD_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-J2B5Q.tmp в %ProgramFiles%\USB Safely Remove\USBImages\HDD (yellow)_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-3VL2K.tmp в %ProgramFiles%\USB Safely Remove\USBImages\HDD (green)_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-JMDI6.tmp в %ProgramFiles%\USB Safely Remove\USBImages\HDD (green)_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-SEBVF.tmp в %ProgramFiles%\USB Safely Remove\USBImages\HDD (red)_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-HBRS2.tmp в %ProgramFiles%\USB Safely Remove\USBImages\HDD (red)_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-KJJ9A.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Joystick_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-GKGS7.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Joystick_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-03P7E.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Keyboard_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-E773U.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Keyboard_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-R7IUF.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Joypad_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-501NE.tmp в %ProgramFiles%\USB Safely Remove\USBImages\iPod_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-OT48G.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Headphones_small.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-C5EDV.tmp в %ProgramFiles%\USB Safely Remove\USBImages\Joypad_large.png
  • %ProgramFiles%\USB Safely Remove\USBImages\is-DLAUA.tmp в %ProgramFiles%\USB Safely Remove\USBImages\iPod_small.png
Другое:
Ищет следующие окна:
  • ClassName: 'Shell_TrayWnd' WindowName: ''

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке