マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Trojan.Inject1.44401

Added to the Dr.Web virus database: 2014-08-22

Virus description added:

Technical Information

Malicious functions:
Creates and executes the following:
  • '%HOMEPATH%\Bm63708R46756\00000.exe'
Modifies file system :
Creates the following files:
  • %HOMEPATH%\Bm63708R46756\63315.RRV
  • %HOMEPATH%\Bm63708R46756\I14544O34370.DLM
  • %HOMEPATH%\Bm63708R46756\2375.DQR
  • %HOMEPATH%\Bm63708R46756\K92441S8131.PUA
  • %HOMEPATH%\Bm63708R46756\4501.FQC
  • %HOMEPATH%\Bm63708R46756\27500.YOD
  • %HOMEPATH%\Bm63708R46756\6651.FAA
  • %HOMEPATH%\Bm63708R46756\20100.QEK
  • %HOMEPATH%\Bm63708R46756\Q8546X11801.IWY
  • %HOMEPATH%\Bm63708R46756\C14387F73825.VCV
  • %HOMEPATH%\Bm63708R46756\89457.TZU
  • %HOMEPATH%\Bm63708R46756\Y54243N73829.IIV
  • %HOMEPATH%\Bm63708R46756\Q58169O48985.YPB
  • %HOMEPATH%\Bm63708R46756\64112.AIZ
  • %HOMEPATH%\Bm63708R46756\66587.UED
  • %HOMEPATH%\Bm63708R46756\58974.MAG
  • %HOMEPATH%\Bm63708R46756\X93646W76400.TXV
  • %HOMEPATH%\Bm63708R46756\9375.JRB
  • %HOMEPATH%\Bm63708R46756\O85557R28367.ABN
  • %HOMEPATH%\Bm63708R46756\93877.IFH
  • %HOMEPATH%\Bm63708R46756\57358.HXH
  • %HOMEPATH%\Bm63708R46756\A52281M77708.NIR
  • %HOMEPATH%\Bm63708R46756\O88857A51970.OVL
  • %HOMEPATH%\Bm63708R46756\28609.BMH
  • %HOMEPATH%\Bm63708R46756\V69561T21629.NNE
  • %HOMEPATH%\Bm63708R46756\G53582H66930.XQX
  • %HOMEPATH%\Bm63708R46756\H30322I98819.HQJ
  • %HOMEPATH%\Bm63708R46756\N47787U82775.LGT
  • %HOMEPATH%\Bm63708R46756\63988.SBI
  • %HOMEPATH%\Bm63708R46756\G12067F56574.LMJ
  • %HOMEPATH%\Bm63708R46756\V49760K36106.MBM
  • %HOMEPATH%\Bm63708R46756\B34655I16044.JSS
  • %HOMEPATH%\Bm63708R46756\15840.AYJ
  • %HOMEPATH%\Bm63708R46756\D60458K7147.IBH
  • %HOMEPATH%\Bm63708R46756\34949.XPL
  • %HOMEPATH%\Bm63708R46756\I10684C31964.PHV
  • %HOMEPATH%\Bm63708R46756\M83014H41934.QGL
  • %HOMEPATH%\Bm63708R46756\N57298W37239.YCP
  • %HOMEPATH%\Bm63708R46756\68026.GPL
  • %HOMEPATH%\Bm63708R46756\90527.MWV
  • %HOMEPATH%\Bm63708R46756\18862.OFZ
  • %HOMEPATH%\Bm63708R46756\C36116H48198.RRS
  • %HOMEPATH%\Bm63708R46756\R16022V9972.KHB
  • %HOMEPATH%\Bm63708R46756\96995.PEJ
  • %HOMEPATH%\Bm63708R46756\Y75875C92179.AMQ
  • %HOMEPATH%\Bm63708R46756\W53769N58849.SWO
  • %HOMEPATH%\Bm63708R46756\89223.NTC
  • %HOMEPATH%\Bm63708R46756\B73402O67483.GQN
  • %HOMEPATH%\Bm63708R46756\K89791A75881.MEI
  • %HOMEPATH%\Bm63708R46756\O69526C26224.ANK
  • %HOMEPATH%\Bm63708R46756\73898.CPO
  • %HOMEPATH%\Bm63708R46756\19222.MQN
  • %HOMEPATH%\Bm63708R46756\52951.BZY
  • %HOMEPATH%\Bm63708R46756\54646.ZXW
  • %HOMEPATH%\Bm63708R46756\23936.TRX
  • %HOMEPATH%\Bm63708R46756\46786.GNR
  • %HOMEPATH%\Bm63708R46756\K79931P41186.PAJ
  • %HOMEPATH%\Bm63708R46756\22526.QNR
  • %HOMEPATH%\Bm63708R46756\66508.EOP
  • %HOMEPATH%\Bm63708R46756\X27484X95560.WRY
  • %HOMEPATH%\Bm63708R46756\I88283M35833.LKI
  • %HOMEPATH%\Bm63708R46756\Z20282O54246.HHO
  • %HOMEPATH%\Bm63708R46756\2927.VPD
  • %HOMEPATH%\Bm63708R46756\57365.RXU
  • %HOMEPATH%\Bm63708R46756\E1619K1468.OKV
  • %HOMEPATH%\Bm63708R46756\G48194O91939.ZAW
  • %HOMEPATH%\Bm63708R46756\W72100I76511.OHU
  • %HOMEPATH%\Bm63708R46756\72911.WQJ
  • %HOMEPATH%\Bm63708R46756\67433.PUH
  • %HOMEPATH%\Bm63708R46756\65806.UHE
  • %HOMEPATH%\Bm63708R46756\M23512O78977.RLU
  • %HOMEPATH%\Bm63708R46756\28154.GCH
  • %HOMEPATH%\Bm63708R46756\O59625G92262.QNZ
  • %HOMEPATH%\Bm63708R46756\14912.ZNX
  • %HOMEPATH%\Bm63708R46756\32298.MMX
  • %HOMEPATH%\Bm63708R46756\S14933M41366.YZW
  • %HOMEPATH%\Bm63708R46756\99125.CSD
  • %HOMEPATH%\Bm63708R46756\81443.DFR
  • %HOMEPATH%\Bm63708R46756\49026.MSR
  • %HOMEPATH%\Bm63708R46756\T34903G84948.RPQ
  • %HOMEPATH%\Bm63708R46756\Z13422C68455.ECO
  • %HOMEPATH%\Bm63708R46756\31372.PIN
  • %HOMEPATH%\Bm63708R46756\M55649I93066.JCQ
  • %HOMEPATH%\Bm63708R46756\U77642S61068.KFF
  • %HOMEPATH%\Bm63708R46756\7201.GNF
  • %HOMEPATH%\Bm63708R46756\38807.HZP
  • %HOMEPATH%\Bm63708R46756\A81929Y82172.GUR
  • %HOMEPATH%\Bm63708R46756\43885.ZHV
  • %HOMEPATH%\Bm63708R46756\84242.BDU
  • %HOMEPATH%\Bm63708R46756\V9066G25403.PBY
  • %HOMEPATH%\Bm63708R46756\57226.DTZ
  • %HOMEPATH%\Bm63708R46756\9206.PWI
  • %HOMEPATH%\Bm63708R46756\H66961N74003.VKO
  • %HOMEPATH%\Bm63708R46756\53850.OKX
  • %HOMEPATH%\Bm63708R46756\A21559T49489.MIZ
  • %HOMEPATH%\Bm63708R46756\2987.OSC
  • %HOMEPATH%\Bm63708R46756\G48265O22253.NGR
  • %HOMEPATH%\Bm63708R46756\83139.IOY
  • %HOMEPATH%\Bm63708R46756\5092.IUE
  • %HOMEPATH%\Bm63708R46756\I68671M39601.UNK
  • %HOMEPATH%\Bm63708R46756\52672.CXN
  • %HOMEPATH%\Bm63708R46756\2325.WXM
  • %HOMEPATH%\Bm63708R46756\L78811U82898.RSZ
  • %HOMEPATH%\Bm63708R46756\95304.JJO
  • %HOMEPATH%\Bm63708R46756\N30235Y5116.ZUH
  • %HOMEPATH%\Bm63708R46756\R26418D40360.TKU
  • %HOMEPATH%\Bm63708R46756\32580.WSR
  • %HOMEPATH%\Bm63708R46756\82723.IPQ
  • %HOMEPATH%\Bm63708R46756\W91760U48029.PNZ
  • %HOMEPATH%\Bm63708R46756\76434.UFD
  • %HOMEPATH%\Bm63708R46756\S47503F53066.EKF
  • %HOMEPATH%\Bm63708R46756\96386.PAS
  • %HOMEPATH%\Bm63708R46756\89439.ODU
  • %HOMEPATH%\Bm63708R46756\11721.IPW
  • %HOMEPATH%\Bm63708R46756\C96227J11992.HTQ
  • %HOMEPATH%\Bm63708R46756\73515.GOS
  • %HOMEPATH%\Bm63708R46756\P53168R32797.ULB
  • %HOMEPATH%\Bm63708R46756\H12628X89140.FSH
  • %HOMEPATH%\Bm63708R46756\C59410P4625.XBC
  • %HOMEPATH%\Bm63708R46756\21073.YKD
  • %HOMEPATH%\Bm63708R46756\12208.UET
  • %HOMEPATH%\Bm63708R46756\26700.PNX
  • %HOMEPATH%\Bm63708R46756\19517.LZN
  • %HOMEPATH%\Bm63708R46756\18296.EHA
  • %HOMEPATH%\Bm63708R46756\28246.HUK
  • %HOMEPATH%\Bm63708R46756\U99592K1564.OXV
  • %HOMEPATH%\Bm63708R46756\H82407U39069.WIQ
  • %HOMEPATH%\Bm63708R46756\41924.YPQ
  • %HOMEPATH%\Bm63708R46756\M63690W15040.BOL
  • %HOMEPATH%\Bm63708R46756\M47592M80360.RWD
  • %HOMEPATH%\Bm63708R46756\N38053F91917.BFW
  • %HOMEPATH%\Bm63708R46756\G84800U14096.YDY
  • %HOMEPATH%\Bm63708R46756\19802.MGQ
  • %HOMEPATH%\Bm63708R46756\99813.BKB
  • %HOMEPATH%\Bm63708R46756\65631.RIZ
  • %HOMEPATH%\Bm63708R46756\77670.UXQ
  • %HOMEPATH%\Bm63708R46756\29413.LBK
  • %HOMEPATH%\Bm63708R46756\66619.VKH
  • %HOMEPATH%\Bm63708R46756\J97771G43895.TDK
  • %HOMEPATH%\Bm63708R46756\56895.BCN
  • %HOMEPATH%\Bm63708R46756\A28146C94247.RCS
  • %HOMEPATH%\Bm63708R46756\U42753N85764.PPC
  • %HOMEPATH%\Bm63708R46756\88777.OXF
  • %HOMEPATH%\Bm63708R46756\V39219D48177.VVK
  • %HOMEPATH%\Bm63708R46756\22408.OTQ
  • %HOMEPATH%\Bm63708R46756\P61054Y60393.SCI
  • %HOMEPATH%\Bm63708R46756\D1662R84119.BZB
  • %HOMEPATH%\Bm63708R46756\N81378R86212.VFX
  • %HOMEPATH%\Bm63708R46756\Y92481L10001.NFD
  • %HOMEPATH%\Bm63708R46756\50942.QYS
  • %HOMEPATH%\Bm63708R46756\N42097Q83304.PFD
  • %HOMEPATH%\Bm63708R46756\N24599J89027.XIC
  • %HOMEPATH%\Bm63708R46756\53632.FXN
  • %HOMEPATH%\Bm63708R46756\I4009H19622.AZX
  • %HOMEPATH%\Bm63708R46756\I17645P87531.XWM
  • %HOMEPATH%\Bm63708R46756\E39134Q6512.FHL
  • %HOMEPATH%\Bm63708R46756\81979.JGX
  • %HOMEPATH%\Bm63708R46756\40140.VRS
  • %HOMEPATH%\Bm63708R46756\72584.VOC
  • %HOMEPATH%\Bm63708R46756\72564.ETW
  • %HOMEPATH%\Bm63708R46756\K64606M54090.CYU
  • %HOMEPATH%\Bm63708R46756\42492.OLU
  • %HOMEPATH%\Bm63708R46756\28543.ONL
  • %HOMEPATH%\Bm63708R46756\19014.ZXU
  • %HOMEPATH%\Bm63708R46756\X21059O70894.RCB
  • %HOMEPATH%\Bm63708R46756\97219.WGN
  • %HOMEPATH%\Bm63708R46756\J64053G96627.IDU
  • %HOMEPATH%\Bm63708R46756\EM.TRG
  • %TEMP%\aut1.tmp
  • %HOMEPATH%\Yj35390B67281.BQ1
  • %HOMEPATH%\Bm63708R46756\T77909R66549.LDS
  • %HOMEPATH%\Bm63708R46756\39311.CTV
  • %HOMEPATH%\Bm63708R46756\K97801E29427.OZH
  • %HOMEPATH%\Bm63708R46756\22463.PAR
  • %HOMEPATH%\Bm63708R46756\59347.LBH
  • %HOMEPATH%\Bm63708R46756\U70296I56012.AMW
  • %HOMEPATH%\Bm63708R46756\N31242G19638.SQS
  • %HOMEPATH%\Bm63708R46756\P16656N42541.IAY
  • %HOMEPATH%\Bm63708R46756\88029.WXR
  • %HOMEPATH%\Bm63708R46756\79549.DAB
  • %HOMEPATH%\Bm63708R46756\48242.YWK
  • %HOMEPATH%\Bm63708R46756\90839.KEW
  • %HOMEPATH%\Bm63708R46756\X82016D67155.BTA
  • %HOMEPATH%\Bm63708R46756\U1556R78297.IWI
  • %HOMEPATH%\Bm63708R46756\22693.WPZ
  • %HOMEPATH%\Bm63708R46756\78946.QEK
  • %HOMEPATH%\Bm63708R46756\W13767B27408.XSB
  • %HOMEPATH%\Bm63708R46756\V75246G36689.QSG
  • %HOMEPATH%\Bm63708R46756\H79968Z52602.DQL
  • %HOMEPATH%\Bm63708R46756\W69739F2694.NFM
  • %HOMEPATH%\Bm63708R46756\U60865Q32417.CBO
  • %HOMEPATH%\Bm63708R46756\65113.EJA
  • %HOMEPATH%\Bm63708R46756\69998.UDD
  • %HOMEPATH%\Bm63708R46756\56646.TFV
  • %HOMEPATH%\Bm63708R46756\J10933X14687.QMG
  • %HOMEPATH%\Bm63708R46756\X72069Q39160.TGI
  • %HOMEPATH%\Bm63708R46756\98837.LXP
  • %HOMEPATH%\Bm63708R46756\31110.FNY
  • %HOMEPATH%\Bm63708R46756\N73259N44301.IZM
  • %HOMEPATH%\Bm63708R46756\30918.UPE
  • %HOMEPATH%\Bm63708R46756\26220.KTY
  • %HOMEPATH%\Bm63708R46756\51132.PRL
  • %HOMEPATH%\Bm63708R46756\F61510O27382.ZQB
  • %HOMEPATH%\Bm63708R46756\W36131K58995.SDO
  • %HOMEPATH%\Bm63708R46756\Q98095H71197.UDQ
  • %HOMEPATH%\Bm63708R46756\57048.DAI
  • %HOMEPATH%\Bm63708R46756\H56647M81880.ZNF
  • %HOMEPATH%\Bm63708R46756\B97837U57138.CYR
  • %HOMEPATH%\Bm63708R46756\41367.TTC
  • %HOMEPATH%\Bm63708R46756\83974.OEF
  • %HOMEPATH%\Bm63708R46756\Y85224J27833.XYJ
  • %HOMEPATH%\Bm63708R46756\44145.BGO
  • %HOMEPATH%\Bm63708R46756\34450.WQM
  • %HOMEPATH%\Bm63708R46756\39375.ZWW
  • %HOMEPATH%\Bm63708R46756\20932.JWP
  • %HOMEPATH%\Bm63708R46756\K54303Q20336.QIR
  • %HOMEPATH%\Bm63708R46756\U9088S12195.UIP
  • %HOMEPATH%\Bm63708R46756\82715.WVY
  • %HOMEPATH%\Bm63708R46756\S23119T61140.IEP
  • %HOMEPATH%\Bm63708R46756\R17090B66699.WTE
  • %HOMEPATH%\Bm63708R46756\P10274P46613.BSK
  • %HOMEPATH%\Bm63708R46756\H2440J34371.EKJ
  • %HOMEPATH%\Bm63708R46756\X80600H27764.KEY
  • %HOMEPATH%\Bm63708R46756\36248.VUU
  • %HOMEPATH%\Bm63708R46756\66345.JZS
  • %HOMEPATH%\Bm63708R46756\N12849H45193.HCY
  • %HOMEPATH%\Bm63708R46756\82742.MVF
  • %HOMEPATH%\Bm63708R46756\A15916J56809.NMB
  • %HOMEPATH%\Bm63708R46756\23003.YTJ
  • %HOMEPATH%\Bm63708R46756\F45569K96461.DLF
  • %HOMEPATH%\Bm63708R46756\G83143V16482.GDI
  • %HOMEPATH%\Bm63708R46756\64265.AGD
  • %HOMEPATH%\Bm63708R46756\G37340J74883.UCN
  • %HOMEPATH%\Bm63708R46756\M43451M79954.WTI
  • %HOMEPATH%\Bm63708R46756\46967.VMU
  • %HOMEPATH%\Bm63708R46756\B85191T77053.FNQ
  • %HOMEPATH%\Bm63708R46756\7628.FHA
  • %HOMEPATH%\Bm63708R46756\42377.AWN
  • %HOMEPATH%\Bm63708R46756\53145.DRD
  • %HOMEPATH%\Bm63708R46756\37961.SXR
  • %HOMEPATH%\Bm63708R46756\83308.XRZ
  • %HOMEPATH%\Bm63708R46756\Z61227F63286.JVF
  • %HOMEPATH%\Bm63708R46756\67852.MSK
  • %HOMEPATH%\Bm63708R46756\J58408C4303.GJL
  • %HOMEPATH%\Bm63708R46756\81639.YML
  • %HOMEPATH%\Bm63708R46756\X75420D40150.VQD
  • %HOMEPATH%\Bm63708R46756\90616.MFE
  • %HOMEPATH%\Bm63708R46756\R30424B1321.GHW
  • %HOMEPATH%\Bm63708R46756\34351.EWZ
  • %HOMEPATH%\Bm63708R46756\K64058P50092.DSX
  • %HOMEPATH%\Bm63708R46756\8474.AQZ
  • %HOMEPATH%\Bm63708R46756\75944.LDE
  • %HOMEPATH%\Bm63708R46756\J37110G73655.QOV
  • %HOMEPATH%\Bm63708R46756\A37541Q76725.XWF
  • %HOMEPATH%\Bm63708R46756\11964.QZS
  • %HOMEPATH%\Bm63708R46756\Z48105B16486.UVP
  • %HOMEPATH%\Bm63708R46756\4607.DDF
  • %HOMEPATH%\Bm63708R46756\S74883N39010.SGO
  • %HOMEPATH%\Bm63708R46756\41471.QNV
  • %HOMEPATH%\Bm63708R46756\T99876N8694.CJS
  • %HOMEPATH%\Bm63708R46756\I36068O75881.MJR
  • %HOMEPATH%\Bm63708R46756\44326.GHR
  • %HOMEPATH%\Bm63708R46756\R22671V81790.ZWZ
  • %HOMEPATH%\Bm63708R46756\K84439T55396.GXN
  • %HOMEPATH%\Bm63708R46756\O47268F75477.EFG
  • %HOMEPATH%\Bm63708R46756\Z31430S9162.ABG
  • %HOMEPATH%\Bm63708R46756\S30578Q70885.KCM
  • %HOMEPATH%\Bm63708R46756\J78423N72812.XTH
  • %HOMEPATH%\Bm63708R46756\B13364D32329.VEJ
  • %HOMEPATH%\Bm63708R46756\F12143N50609.CZH
  • %HOMEPATH%\Bm63708R46756\H73365B36066.UFS
  • %HOMEPATH%\Bm63708R46756\M74444E37571.BUZ
  • %HOMEPATH%\Bm63708R46756\N82071G86793.RXE
  • %HOMEPATH%\Bm63708R46756\M96358S76296.GEU
  • %HOMEPATH%\Bm63708R46756\19364.WVB
  • %HOMEPATH%\Bm63708R46756\B84187B99617.JVM
  • %HOMEPATH%\Bm63708R46756\T47237I65983.XZC
  • %HOMEPATH%\Bm63708R46756\C20849W78899.NJJ
  • %HOMEPATH%\Bm63708R46756\18409.KAZ
  • %HOMEPATH%\Bm63708R46756\U56014F8241.JDB
  • %HOMEPATH%\Bm63708R46756\45930.JCO
  • %HOMEPATH%\Bm63708R46756\V10738Q45163.FHC
  • %HOMEPATH%\Bm63708R46756\52729.KRB
  • %HOMEPATH%\Bm63708R46756\44517.PWM
  • %HOMEPATH%\Bm63708R46756\X51288Q30989.EFJ
  • %HOMEPATH%\Bm63708R46756\12849.LGH
  • %HOMEPATH%\Bm63708R46756\O48773M37310.BNC
  • %HOMEPATH%\Bm63708R46756\M19309V64842.POL
  • %HOMEPATH%\Bm63708R46756\M5493M58800.TRX
  • %HOMEPATH%\Bm63708R46756\V91903S20738.LAJ
  • %HOMEPATH%\Bm63708R46756\E23120P23507.BLV
  • %HOMEPATH%\Bm63708R46756\E24578C29280.FEB
  • %HOMEPATH%\Bm63708R46756\40352.TEH
  • %HOMEPATH%\Bm63708R46756\26359.OCA
  • %HOMEPATH%\Bm63708R46756\R63440U44818.NCQ
  • %HOMEPATH%\Bm63708R46756\73890.EQR
  • %HOMEPATH%\Bm63708R46756\2638.HWN
  • %HOMEPATH%\Bm63708R46756\L62099L76136.JYU
  • %HOMEPATH%\Bm63708R46756\R95946U61952.MFR
  • %HOMEPATH%\Bm63708R46756\3225.UUS
  • %HOMEPATH%\Bm63708R46756\90373.IBM
  • %HOMEPATH%\Bm63708R46756\K74705M78606.EGG
  • %HOMEPATH%\Bm63708R46756\43449.XSF
  • %HOMEPATH%\Bm63708R46756\71688.UUC
  • %HOMEPATH%\Bm63708R46756\37662.LMQ
  • %HOMEPATH%\Bm63708R46756\X74275O23777.KLD
  • %HOMEPATH%\Bm63708R46756\97547.RQY
  • %HOMEPATH%\Bm63708R46756\A6568K68761.HOV
  • %HOMEPATH%\Bm63708R46756\C54948A6704.YYS
  • %HOMEPATH%\Bm63708R46756\Q34405M56271.YKC
  • %HOMEPATH%\Bm63708R46756\E36213P65404.YJF
  • %HOMEPATH%\Bm63708R46756\52658.DYK
  • %HOMEPATH%\Bm63708R46756\H43840R95386.HXH
  • %HOMEPATH%\Bm63708R46756\L70053B69515.KOR
  • %HOMEPATH%\Bm63708R46756\64346.FZP
  • %HOMEPATH%\Bm63708R46756\59024.SAM
  • %HOMEPATH%\Bm63708R46756\86020.GRD
  • %HOMEPATH%\Bm63708R46756\14567.GJN
  • %HOMEPATH%\Bm63708R46756\L63196V37073.DYJ
  • %HOMEPATH%\Bm63708R46756\P43499B29442.DFS
  • %HOMEPATH%\Bm63708R46756\50584.AQE
  • %HOMEPATH%\Bm63708R46756\V65998A8860.JEC
  • %HOMEPATH%\Bm63708R46756\13915.KAD
  • %HOMEPATH%\Bm63708R46756\M58947S27365.GDU
  • %HOMEPATH%\Bm63708R46756\K36613A48597.FGN
  • %HOMEPATH%\Bm63708R46756\23823.SLW
  • %HOMEPATH%\Bm63708R46756\R11343U84327.UKG
  • %HOMEPATH%\Bm63708R46756\29596.ADQ
  • %HOMEPATH%\Bm63708R46756\X27754K37394.YUB
  • %HOMEPATH%\Bm63708R46756\55520.WWI
  • %HOMEPATH%\Bm63708R46756\26550.MJF
  • %HOMEPATH%\Bm63708R46756\X62155C65752.CQA
  • %HOMEPATH%\Bm63708R46756\C90490N74563.NFX
  • %HOMEPATH%\Bm63708R46756\80430.IAO
  • %HOMEPATH%\Bm63708R46756\P63506Z23787.VDX
  • %HOMEPATH%\Bm63708R46756\U68753V22385.CFJ
  • %HOMEPATH%\Bm63708R46756\32394.QMY
  • %HOMEPATH%\Bm63708R46756\00000.exe
  • %HOMEPATH%\Bm63708R46756\J1795M95024.QIS
  • %HOMEPATH%\Bm63708R46756\J85226Y16963.PSW
  • %HOMEPATH%\Bm63708R46756\78147.BYU
  • %HOMEPATH%\Bm63708R46756\R58237Y89194.QGV
  • %HOMEPATH%\Bm63708R46756\3405.DBM
  • %HOMEPATH%\Bm63708R46756\56592.JCQ
  • %HOMEPATH%\Bm63708R46756\D42648C90612.EVQ
  • %HOMEPATH%\Bm63708R46756\87075.BFM
  • %HOMEPATH%\Bm63708R46756\36067.LVC
  • %HOMEPATH%\Bm63708R46756\H25746M5642.AUC
  • %HOMEPATH%\Bm63708R46756\U87404L16230.YIY
  • %HOMEPATH%\Bm63708R46756\22633.RBT
  • %HOMEPATH%\Bm63708R46756\U10627H92701.NJL
  • %HOMEPATH%\Bm63708R46756\R10867A33245.GEU
  • %HOMEPATH%\Bm63708R46756\R10613V57503.QWS
  • %HOMEPATH%\Bm63708R46756\74658.TXH
  • %HOMEPATH%\Bm63708R46756\84497.MVP
  • %HOMEPATH%\Bm63708R46756\64480.AGJ
  • %HOMEPATH%\Bm63708R46756\3665.EZY
  • %HOMEPATH%\Bm63708R46756\16699.SMG
  • %HOMEPATH%\Bm63708R46756\7729.ZFH
  • %HOMEPATH%\Bm63708R46756\F65931M27600.MOM
  • %HOMEPATH%\Bm63708R46756\A21164D36982.OIT
  • %HOMEPATH%\Bm63708R46756\J38298J70637.ZRE
  • %HOMEPATH%\Bm63708R46756\88175.JKP
  • %HOMEPATH%\Bm63708R46756\V31383Y96729.LBN
  • %HOMEPATH%\Bm63708R46756\G42881R65428.KNZ
  • %HOMEPATH%\Bm63708R46756\29731.IEG
  • %HOMEPATH%\Bm63708R46756\O38367Q53330.VGH
  • %HOMEPATH%\Bm63708R46756\56050.CMM
  • %HOMEPATH%\Bm63708R46756\Q98115A66439.MCT
  • %HOMEPATH%\Bm63708R46756\35254.ZZX
  • %HOMEPATH%\Bm63708R46756\86661.VMI
  • %HOMEPATH%\Bm63708R46756\77203.WUX
  • %HOMEPATH%\Bm63708R46756\87141.NGF
  • %HOMEPATH%\Bm63708R46756\74257.QSQ
  • %HOMEPATH%\Bm63708R46756\G23441S93917.BNZ
  • %HOMEPATH%\Bm63708R46756\25564.BHA
  • %HOMEPATH%\Bm63708R46756\I72182S71561.WXB
  • %HOMEPATH%\Bm63708R46756\N65882S77654.NHX
  • %HOMEPATH%\Bm63708R46756\12250.RLQ
  • %HOMEPATH%\Bm63708R46756\46741.OVT
  • %HOMEPATH%\Bm63708R46756\49192.ANL
  • %HOMEPATH%\Bm63708R46756\H88488B19542.XKC
  • %HOMEPATH%\Bm63708R46756\39453.SWF
  • %HOMEPATH%\Bm63708R46756\50224.XSR
  • %HOMEPATH%\Bm63708R46756\O36236F4342.FHW
  • %HOMEPATH%\Bm63708R46756\30669.RRN
  • %HOMEPATH%\Bm63708R46756\24500.WAG
  • %HOMEPATH%\Bm63708R46756\17293.SAK
  • %HOMEPATH%\Bm63708R46756\55429.FAZ
  • %HOMEPATH%\Bm63708R46756\70974.DGC
  • %HOMEPATH%\Bm63708R46756\24805.UKM
  • %HOMEPATH%\Bm63708R46756\88665.UNC
  • %HOMEPATH%\Bm63708R46756\Y38895J68899.FSF
  • %HOMEPATH%\Bm63708R46756\L30908Q30305.BBQ
  • %HOMEPATH%\Bm63708R46756\H44828T80989.PUC
  • %HOMEPATH%\Bm63708R46756\65893.VBU
  • %HOMEPATH%\Bm63708R46756\E56754R77729.EEU
  • %HOMEPATH%\Bm63708R46756\66530.RVR
  • %HOMEPATH%\Bm63708R46756\4720.VHY
  • %HOMEPATH%\Bm63708R46756\L84766X15528.ZTZ
  • %HOMEPATH%\Bm63708R46756\42301.WVT
  • %HOMEPATH%\Bm63708R46756\60617.EBV
  • %HOMEPATH%\Bm63708R46756\19836.NBG
  • %HOMEPATH%\Bm63708R46756\O59129F15451.FMX
  • %HOMEPATH%\Bm63708R46756\B29475P91254.VOR
  • %HOMEPATH%\Bm63708R46756\H98361I35466.WJP
  • %HOMEPATH%\Bm63708R46756\32715.UOY
  • %HOMEPATH%\Bm63708R46756\76935.LRE
  • %HOMEPATH%\Bm63708R46756\U65447I48453.FZT
  • %HOMEPATH%\Bm63708R46756\J30879M40682.KHG
  • %HOMEPATH%\Bm63708R46756\4101.EAV
  • %HOMEPATH%\Bm63708R46756\T59932B82098.EVF
  • %HOMEPATH%\Bm63708R46756\P97307Q67691.CCX
  • %HOMEPATH%\Bm63708R46756\21053.NOK
  • %HOMEPATH%\Bm63708R46756\Q54212D3549.RMV
  • %HOMEPATH%\Bm63708R46756\H11321L23276.LEP
  • %HOMEPATH%\Bm63708R46756\G84449R6797.MQF
  • %HOMEPATH%\Bm63708R46756\D93685O75207.LCA
  • %HOMEPATH%\Bm63708R46756\R80521S91865.JGM
  • %HOMEPATH%\Bm63708R46756\75131.CZY
  • %HOMEPATH%\Bm63708R46756\L75999R95610.UKC
  • %HOMEPATH%\Bm63708R46756\80072.ABC
  • %HOMEPATH%\Bm63708R46756\19264.AGV
  • %HOMEPATH%\Bm63708R46756\M50447Q81560.GXG
  • %HOMEPATH%\Bm63708R46756\44518.MHJ
  • %HOMEPATH%\Bm63708R46756\8321.PKX
  • %HOMEPATH%\Bm63708R46756\B5726G82673.FZM
  • %HOMEPATH%\Bm63708R46756\E74175R41187.ZII
  • %HOMEPATH%\Bm63708R46756\71943.ULP
  • %HOMEPATH%\Bm63708R46756\L55887Z86133.YHX
  • %HOMEPATH%\Bm63708R46756\L18574E2397.SUD
  • %HOMEPATH%\Bm63708R46756\22161.DMG
  • %HOMEPATH%\Bm63708R46756\42661.FOR
  • %HOMEPATH%\Bm63708R46756\O30634U86443.IAL
  • %HOMEPATH%\Bm63708R46756\W53137X32261.EXI
  • %HOMEPATH%\Bm63708R46756\51875.NOW
  • %HOMEPATH%\Bm63708R46756\98292.ZML
  • %HOMEPATH%\Bm63708R46756\88108.RSB
  • %HOMEPATH%\Bm63708R46756\I8762U54553.ZIL
  • %HOMEPATH%\Bm63708R46756\C82727L21675.SLZ
  • %HOMEPATH%\Bm63708R46756\R34252U68713.AZU
  • %HOMEPATH%\Bm63708R46756\R61540Z26082.SEG
  • %HOMEPATH%\Bm63708R46756\V56967C18684.BXO
  • %HOMEPATH%\Bm63708R46756\90352.GPK
  • %HOMEPATH%\Bm63708R46756\T88408O80594.DLX
  • %HOMEPATH%\Bm63708R46756\16193.YAU
  • %HOMEPATH%\Bm63708R46756\X65283Y91927.EDR
  • %HOMEPATH%\Bm63708R46756\O46709K65489.XYP
  • %HOMEPATH%\Bm63708R46756\S45568R98839.TIF
  • %HOMEPATH%\Bm63708R46756\48165.ZVH
  • %HOMEPATH%\Bm63708R46756\50086.CFY
  • %HOMEPATH%\Bm63708R46756\V58255H23099.UPN
  • %HOMEPATH%\Bm63708R46756\10729.MDX
  • %HOMEPATH%\Bm63708R46756\J25564V6214.ICN
  • %HOMEPATH%\Bm63708R46756\Y35694L16893.QLE
  • %HOMEPATH%\Bm63708R46756\49266.NUB
  • %HOMEPATH%\Bm63708R46756\25107.MLZ
  • %HOMEPATH%\Bm63708R46756\S14326Q12724.IQK
  • %HOMEPATH%\Bm63708R46756\O4170Y98321.EZW
  • %HOMEPATH%\Bm63708R46756\E82540A21861.MOR
  • %HOMEPATH%\Bm63708R46756\T29552F88480.GAF
  • %HOMEPATH%\Bm63708R46756\Z52022S73997.SKW
  • %HOMEPATH%\Bm63708R46756\H4342E72290.MCF
  • %HOMEPATH%\Bm63708R46756\61509.LHB
  • %HOMEPATH%\Bm63708R46756\7033.UTK
  • %HOMEPATH%\Bm63708R46756\U80156M25451.NTG
  • %HOMEPATH%\Bm63708R46756\V42572W82901.RNM
  • %HOMEPATH%\Bm63708R46756\5455.KAW
  • %HOMEPATH%\Bm63708R46756\O88022M20366.WSU
  • %HOMEPATH%\Bm63708R46756\W83436K57902.OWC
  • %HOMEPATH%\Bm63708R46756\46331.SCX
  • %HOMEPATH%\Bm63708R46756\15911.ZKX
  • %HOMEPATH%\Bm63708R46756\81760.YRR
  • %HOMEPATH%\Bm63708R46756\22357.RTD
  • %HOMEPATH%\Bm63708R46756\H46331T44725.MRN
  • %HOMEPATH%\Bm63708R46756\K52429F51624.YVX
  • %HOMEPATH%\Bm63708R46756\X31315D40480.VTT
  • %HOMEPATH%\Bm63708R46756\R87190Q56667.YMH
  • %HOMEPATH%\Bm63708R46756\M64977I71952.CGJ
  • %HOMEPATH%\Bm63708R46756\69580.BKJ
  • %HOMEPATH%\Bm63708R46756\W72747H54202.QII
  • %HOMEPATH%\Bm63708R46756\47287.PPZ
  • %HOMEPATH%\Bm63708R46756\H73432X44304.DGR
  • %HOMEPATH%\Bm63708R46756\X13891U63831.SSF
  • %HOMEPATH%\Bm63708R46756\C51232G76325.AVV
  • %HOMEPATH%\Bm63708R46756\T52575N69519.YLK
  • %HOMEPATH%\Bm63708R46756\88679.BHX
  • %HOMEPATH%\Bm63708R46756\89928.EXX
  • %HOMEPATH%\Bm63708R46756\16385.TYD
  • %HOMEPATH%\Bm63708R46756\82306.WTL
  • %HOMEPATH%\Bm63708R46756\Q15815V16906.MGK
  • %HOMEPATH%\Bm63708R46756\73303.YQQ
  • %HOMEPATH%\Bm63708R46756\14812.NZT
  • %HOMEPATH%\Bm63708R46756\S45916J69150.SIV
  • %HOMEPATH%\Bm63708R46756\67890.RCQ
  • %HOMEPATH%\Bm63708R46756\J93764E27050.GZQ
  • %HOMEPATH%\Bm63708R46756\X27936B58145.ZYC
  • %HOMEPATH%\Bm63708R46756\85088.SON
  • %HOMEPATH%\Bm63708R46756\67967.VYU
  • %HOMEPATH%\Bm63708R46756\R30803K58556.QIY
  • %HOMEPATH%\Bm63708R46756\61734.GDO
  • %HOMEPATH%\Bm63708R46756\F13933J80832.EAG
  • %HOMEPATH%\Bm63708R46756\Y88735S16812.VKE
  • %HOMEPATH%\Bm63708R46756\7297.OVC
  • %HOMEPATH%\Bm63708R46756\D45424Z32789.EHM
  • %HOMEPATH%\Bm63708R46756\99707.FOK
  • %HOMEPATH%\Bm63708R46756\H48365H27703.ORB
Sets the 'hidden' attribute to the following files:
  • %HOMEPATH%\Yj35390B67281.BQ1
Deletes the following files:
  • %HOMEPATH%\Yj35390B67281.BQ1
  • %TEMP%\aut1.tmp
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: ''
  • ClassName: 'EDIT' WindowName: ''

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android