ユーザー向け情報

閉じる

マイライブラリ
マイライブラリ

+ マイライブラリに追加

検索
検索

電話
テクニカルサポート利用方法

問い合わせ

新規お問い合わせ

電話（英語）

+7 (495) 789-45-86

フォーラム（英語）

お問い合わせ履歴

新規お問い合わせ

電話（英語）

+7 (495) 789-45-86

Profile

JP

RU CN DE EN ES FR IT JP KZ UZ PL BY
閉じる
サービス
スキャナー
Dr.Web vxCube
トライアル
ウイルスライブラリ
ナレッジベース

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

ニュース

Trojan.DownLoader25.53031

Added to the Dr.Web virus database: 2017-11-06

Virus description added:

Technical Information

To ensure autorun and distribution:
Modifies the following registry keys:
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'uTorrent' = '%APPDATA%\uTorrent\uTorrent.exe /MINIMIZED'
Malicious functions:
To bypass firewall, removes or modifies the following registry keys:
  • [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%APPDATA%\uTorrent\uTorrent.exe' = '%APPDATA%\uTorrent\uTorrent.exe:*:...
Creates and executes the following:
  • '%APPDATA%\uTorrent\updates\3.5.0_44090\utorrentie.exe' uTorrent_3432_0017BD70_1191319427 µTorrent4823DF041B09 uTorrent
  • '%TEMP%\settings.exe'
  • '%APPDATA%\uTorrent\updates\3.5.0_44090\utorrentie.exe' uTorrent_3432_0017BFD0_1824571574 µTorrent4823DF041B09 uTorrent
  • '%TEMP%\setup.exe' /S
  • '%APPDATA%\uTorrent\uTorrent.exe' /NOINSTALL /BRINGTOFRONT /S
Modifies file system:
Creates the following files:
  • %APPDATA%\uTorrent\player\plugins\stream_out\libstream_out_setid_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\stream_out\libstream_out_smem_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\stream_out\libstream_out_standard_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\stream_out\libstream_out_record_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\stream_out\libstream_out_rtp_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\stream_out\libstream_out_select_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\stream_out\libstream_out_transcode_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\meta_engine\libtaglib_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\text_renderer\libtdummy_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\codec\libtheora_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libsubsdelay_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libsubtitle_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libswscale_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\stream_out\libstream_out_raop_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\stream_out\libstream_out_bridge_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\stream_out\libstream_out_delay_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\stream_out\libstream_out_description_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\libstream_filter_rar_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\stream_filter\libstream_filter_record_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\stream_out\libstream_out_autodel_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\stream_out\libstream_out_display_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\stream_out\libstream_out_gather_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\stream_out\libstream_out_langfromtelx_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\stream_out\libstream_out_dummy_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\stream_out\libstream_out_duplicate_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\stream_out\libstream_out_es_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libtransform_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libwave_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libwav_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\services_discovery\libwindrive_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\codec\libvorbis_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libwall_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_output\libwaveout_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_output\libwingdi_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libyuvp_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_output\libyuv_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_chroma\libyuy2_i420_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\codec\libx264_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libxa_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\misc\libxml_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libvoc_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libty_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\libugly_resampler_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\services_discovery\libupnp_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libts_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libtta_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libvc1_plugin.dll
  • %APPDATA%\uTorrent\player\libvlc.dll
  • %APPDATA%\uTorrent\player\libvlccore.dll
  • %APPDATA%\uTorrent\player\plugins\video_output\libvmem_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\libvcd_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_output\libvdummy_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\visualization\libvisual_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libpostproc_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\visualization\libprojectm_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libpsychedelic_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\codec\libpng_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\services_discovery\libpodcast_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libposterize_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libps_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\codec\libquicktime_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\librawaud_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\librawdv_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libpuzzle_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libpva_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\gui\libqt4_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libplaylist_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\packetizer\libpacketizer_copy_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\packetizer\libpacketizer_dirac_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\packetizer\libpacketizer_flac_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\control\liboldrc_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libosdmenu_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\misc\libosd_parser_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\packetizer\libpacketizer_h264_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libpanoramix_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\libparam_eq_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\packetizer\libpacketizer_mlp_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\codec\librawvideo_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libsharpen_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libsid_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\libsimple_channel_mixer_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\libscreen_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\libsdp_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libsepia_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\gui\libskins2_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\libspeex_resampler_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\misc\libstats_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\stream_filter\libstream_filter_httplive_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libsmf_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\libspatializer_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\codec\libspeex_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\codec\libschroedinger_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libripple_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\librotate_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\librss_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\librawvid_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libreal_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libremoteosd_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\librtp_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\libscaletempo_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libscale_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libscene_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_chroma\librv32_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\libsamplerate_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\services_discovery\libsap_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_chroma\libyuy2_i422_plugin.dll
  • %APPDATA%\uTorrent\VirusGuard\Plugins\lnk.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\mbox.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\mbx.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\java.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\jpeg.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\lha.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\mdx.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\nelf.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\nsis.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\objd.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\mime.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\mobmalware.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\mso.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\iso.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\dummyscan.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\epoc.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\gzip.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\dbx.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\docfile.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\dummyarch.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\ha.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\imp.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\inno.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\instyler.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\hlp.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\hqx.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\html.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\pdf.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\uudecode.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\ve.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\viza.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\tnef.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\uif.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\unpack.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\wise.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\z.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\zip.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\zoo.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\xar.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\xcookies.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\xishield.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\thebat.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\regarch.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\regscan.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\rpm.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\proc.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\pst.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\rar.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\rtf.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\swf.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\tar.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\td0.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\rup.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\sdx.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\sfx.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\mobmalware.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\na.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\nelf.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\mdx_w95.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\mdx_x95.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\mdx_xf.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\regarch.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\unpack.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\ve.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\vedata.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\regscan.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\rup.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\sdx.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\mdx_97.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\cevakrnl.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\ceva_dll.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\ceva_emu.cvd
  • %APPDATA%\uTorrent\player\plugins\access\libzip_plugin.dll
  • %APPDATA%\uTorrent\VirusGuard\scan.dll
  • %APPDATA%\uTorrent\VirusGuard\Plugins\aspy_emu.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\ceva_vfs.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\gvmscripts.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\hpe.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\java.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\cookie.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\cran.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\e_spyw.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\xlmrd.cvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\arc.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\arj.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\bach.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\ace.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\adsntfs.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\alz.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\boot.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\chm.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\cookie.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\cpio.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\bzip2.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\cab.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\cevakrnl.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\access.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\ceva_vfs.ivd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\cran.ivd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\e_spyw.ivd
  • %APPDATA%\uTorrent\player\plugins\plugins.dat
  • %APPDATA%\uTorrent\freeplayer\open-sans-light.eot
  • %APPDATA%\uTorrent\VirusGuard\Plugins\cevakrnl.ivd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\mdx_97.ivd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\xlmrd.ivd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\orice.rvd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\7zip.xmd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\sdx.ivd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\unpack.ivd
  • %APPDATA%\uTorrent\VirusGuard\Plugins\ve.ivd
  • %APPDATA%\uTorrent\player\plugins\access\libaccess_imem_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\libaccess_mms_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access_output\libaccess_output_dummy_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\libaccess_bd_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\libaccess_ftp_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\libaccess_http_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access_output\libaccess_output_file_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access_output\libaccess_output_udp_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\libaccess_rar_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\libaccess_realrtsp_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access_output\libaccess_output_http_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access_output\libaccess_output_livehttp_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access_output\libaccess_output_shout_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\libaccess_attachment_plugin.dll
  • %APPDATA%\uTorrent\VirusGuard\btinstall.txt
  • %APPDATA%\uTorrent\player\btinstall.txt
  • %APPDATA%\uTorrent\VirusGuard\Plugins\update.txt
  • %APPDATA%\uTorrent\freeplayer\js\jquery.min.js
  • %APPDATA%\uTorrent\freeplayer\mediaelement\mediaelement-and-player.min.js
  • %APPDATA%\uTorrent\freeplayer\js\play.js
  • %APPDATA%\uTorrent\VirusGuard\BitTorrentAntivirus.exe
  • %APPDATA%\uTorrent\player\plugins\audio_filter\liba52tofloat32_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\liba52tospdif_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\codec\liba52_plugin.dll
  • %APPDATA%\uTorrent\VirusGuard\avxdisk.dll
  • %APPDATA%\uTorrent\VirusGuard\bdcore.dll
  • %APPDATA%\uTorrent\VirusGuard\BDUpdateServiceCom.dll
  • %APPDATA%\uTorrent\player\plugins\access\libaccess_smb_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\misc\libaudioscrobbler_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\libaudio_format_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libau_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libatmo_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\libaudiobargraph_a_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libaudiobargraph_v_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\codec\libavcodec_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libblend_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libbluescreen_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_output\libcaca_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libavi_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libball_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libblendbench_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libasf_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libadjust_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_output\libadummy_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\codec\libaes3_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\libaccess_tcp_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\libaccess_udp_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\libaccess_vdr_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libaiff_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_output\libaout_directx_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_output\libaout_file_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\codec\libaraw_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libalphamask_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_output\libamem_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libantiflicker_plugin.dll
  • %APPDATA%\uTorrent\apps\welcome-upsell.btapp
  • %APPDATA%\uTorrent\apps\plus.btapp
  • %TEMP%\utt6.tmp
  • %APPDATA%\uTorrent\maindoc.ico
  • %APPDATA%\uTorrent\apps\featuredContent.btapp
  • %APPDATA%\uTorrent\apps\player.btapp
  • %TEMP%\Cab7.tmp
  • %TEMP%\CabE.tmp
  • %APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\a51f6f05d4d6c13187a842fa51370504_23ef5514-3059-436f-a4a7-4cefaab20eb1
  • %APPDATA%\uTorrent\updates\3.5.0_44090.exe
  • %TEMP%\Cab9.tmp
  • %TEMP%\uttB.tmp
  • %TEMP%\CabC.tmp
  • %APPDATA%\Microsoft\Internet Explorer\Quick Launch\µTorrent.lnk
  • %TEMP%\settings.exe
  • %TEMP%\utt3.tmp
  • %TEMP%\Cab4.tmp
  • %TEMP%\aut1.tmp
  • %TEMP%\setup.exe
  • %TEMP%\aut2.tmp
  • %APPDATA%\Microsoft\Protect\CREDHIST
  • %APPDATA%\uTorrent\uTorrent.exe
  • %HOMEPATH%\Start Menu\µTorrent.lnk
  • %HOMEPATH%\Desktop\µTorrent.lnk
  • %APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\1f91d2d17ea675d4c2c3192e241743f9_23ef5514-3059-436f-a4a7-4cefaab20eb1
  • %APPDATA%\uTorrent\settings.dat.new
  • %HOMEPATH%\Cookies\%USERNAME%@localhost[1].txt
  • %APPDATA%\uTorrent\updates.dat
  • %APPDATA%\uTorrent\freeplayer\mediaelement\skipback.png
  • %APPDATA%\uTorrent\freeplayer\mediaelement\bigplay.svg
  • %APPDATA%\uTorrent\freeplayer\mediaelement\controls.svg
  • %APPDATA%\uTorrent\freeplayer\mediaelement\controls.fw.png
  • %APPDATA%\uTorrent\freeplayer\mediaelement\controls.png
  • %APPDATA%\uTorrent\freeplayer\diag-tile.png
  • %APPDATA%\uTorrent\VirusGuard\plugins.htm
  • %APPDATA%\uTorrent\freeplayer\mediaelement\mediaelementplayer.min.css
  • %APPDATA%\uTorrent\freeplayer\style.css
  • %APPDATA%\uTorrent\freeplayer\js\cookies.js
  • %APPDATA%\uTorrent\freeplayer\play.html
  • %APPDATA%\uTorrent\freeplayer\preload.html
  • %APPDATA%\uTorrent\freeplayer\prestream.html
  • %APPDATA%\uTorrent\freeplayer\mediaelement\controls-wmp.png
  • %TEMP%\~DFC180.tmp
  • %APPDATA%\uTorrent\utorrent.lng
  • %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\index[1].html
  • %HOMEPATH%\Cookies\%USERNAME%@localhost[2].txt
  • %APPDATA%\uTorrent\updates\3.5.0_44090\utorrentie.exe
  • %TEMP%\~DF8797.tmp
  • %APPDATA%\uTorrent\freeplayer\mediaelement\loading.gif
  • %APPDATA%\uTorrent\freeplayer\mediaelement\bigplay.png
  • %APPDATA%\uTorrent\freeplayer\mediaelement\controls-ted.png
  • %APPDATA%\uTorrent\freeplayer\mediaelement\controls-wmp-bg.png
  • %APPDATA%\uTorrent\freeplayer\img\spinner.gif
  • %APPDATA%\uTorrent\freeplayer\mediaelement\background.png
  • %APPDATA%\uTorrent\freeplayer\mediaelement\bigplay.fw.png
  • %APPDATA%\uTorrent\player\plugins\video_filter\libcanvas_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\liblive555_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\misc\liblogger_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\liblogo_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\codec\liblibass_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\liblibbluray_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\codec\liblibmpeg2_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\lua\liblua_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\3dnow\libmemcpy3dn_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\mmxext\libmemcpymmxext_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\mmx\libmemcpymmx_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libmagnify_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libmarq_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\services_discovery\libmediadirs_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\codec\libkate_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_chroma\libi420_yuy2_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\sse2\libi420_yuy2_sse2_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_chroma\libi422_i420_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_chroma\libi420_rgb_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\sse2\libi420_rgb_sse2_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\mmx\libi420_yuy2_mmx_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\mmx\libi422_yuy2_mmx_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libimage_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libinvert_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\libkaraoke_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_chroma\libi422_yuy2_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\sse2\libi422_yuy2_sse2_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\libidummy_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\misc\libmemcpy_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\mux\libmux_mpjpeg_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\mux\libmux_ogg_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\mux\libmux_ps_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\mux\libmux_avi_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\mux\libmux_dummy_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\mux\libmux_mp4_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\control\libnetsync_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\control\libntservice_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libnuv_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libogg_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\libnormvol_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libnsc_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libnsv_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\notify\libmsn_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libmod_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\libmono_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libmosaic_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libmirror_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libmjpeg_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libmkv_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libmotionblur_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\codec\libmpeg_audio_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\libmpgatofixed32_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libmpgv_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libmotiondetect_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libmp4_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libmpc_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\codec\libdmo_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_output\libdrawable_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\libdshow_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_output\libdirect2d_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_output\libdirect3d_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_output\libdirectx_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\libdtstofloat32_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\libdvdnav_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\libdvdread_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\codec\libedummy_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\libdtstospdif_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\libdtv_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\control\libdummy_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libdirac_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libclone_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libcolorthres_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\libcompressor_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\libcdda_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libchain_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\libchorus_flanger_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\libconverter_fixed_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libdemuxdump_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libdemux_cdg_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libdemux_stl_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libcroppadd_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\codec\libddummy_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libdeinterlace_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\libequalizer_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\misc\libgnutls_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\visualization\libgoom_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libgradfun_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\control\libglobalhotkeys_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_output\libglwin32_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libgme_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libgradient_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\control\libhotkeys_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\mmx\libi420_rgb_mmx_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libgrain_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_chroma\libgrey_yuv_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libh264_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\control\libgestures_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libextract_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\codec\libfaad_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\access\libfilesystem_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\liberase_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libes_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\misc\libexport_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_mixer\libfixed32_mixer_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\meta_engine\libfolder_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\text_renderer\libfreetype_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\video_filter\libgaussianblur_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\demux\libflacsys_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\codec\libflac_plugin.dll
  • %APPDATA%\uTorrent\player\plugins\audio_mixer\libfloat32_mixer_plugin.dll
Deletes the following files:
  • %TEMP%\CabE.tmp
  • %TEMP%\CabC.tmp
  • %TEMP%\utt6.tmp
  • %APPDATA%\uTorrent\uTorrent.exe
  • %HOMEPATH%\Cookies\%USERNAME%@localhost[1].txt
  • %TEMP%\uttB.tmp
  • %TEMP%\Cab4.tmp
  • %TEMP%\aut2.tmp
  • %TEMP%\aut1.tmp
  • %TEMP%\Cab9.tmp
  • %TEMP%\Cab7.tmp
  • %TEMP%\utt3.tmp
Moves the following files:
  • from %APPDATA%\uTorrent\settings.dat to %APPDATA%\uTorrent\settings.dat.old
  • from %APPDATA%\uTorrent\settings.dat.new to %APPDATA%\uTorrent\settings.dat
Substitutes the following files:
  • %APPDATA%\uTorrent\uTorrent.exe
  • %APPDATA%\uTorrent\settings.dat
  • %APPDATA%\uTorrent\settings.dat.new
Network activity:
Connects to:
  • 'ut###ent.com':80
  • 'i-##.#####90.ut.bench.utorrent.com':80
  • 'ut#####t.utorrent.com':80
  • 'cd#.###medianetwork.com':80
  • 'up####.bittorrent.com':80
  • 'localhost':1058
  • 'localhost':1043
  • 'www.download.windowsupdate.com':80
  • 'wp#d':80
  • 'ap##.#ittorrent.com':80
  • 'no#.bt.co':80
  • 'up####.utorrent.com':80
TCP:
HTTP GET requests:
  • http://ut#####t.utorrent.com/pro/utorrent/index.html
  • http://ap##.#ittorrent.com/utorrent-onboarding/welcome-upsell.btapp
  • http://ap##.#ittorrent.com/utorrent-onboarding/player.btapp
  • http://cd#.###medianetwork.com/network/index.html?ad#####################################################################################################################
  • http://up####.bittorrent.com/time.php
  • http://ut###ent.com/download/langpacks/dl.php?bu##################################################################
  • http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
  • http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt
  • http://11#.#11.111.1/wpad.dat via wp#d
  • http://no#.bt.co/inclient
  • http://up####.utorrent.com/installstats.php?cl########################################################################################################################
  • http://up####.utorrent.com/installstats.php?cl#################################################################################################################################################
HTTP POST requests:
  • http://i-##.#####90.ut.bench.utorrent.com/e?i=## via ut###ent.com
  • http://i-##.#####90.ut.bench.utorrent.com/e?i=##
UDP:
  • DNS ASK ut###ent.com
  • DNS ASK i-##.#####90.ut.bench.utorrent.com
  • DNS ASK ut#####t.utorrent.com
  • DNS ASK up####.bittorrent.com
  • DNS ASK up####.utorrent.li
  • DNS ASK cd#.##.bittorrent.com
  • DNS ASK cd#.###medianetwork.com
  • DNS ASK ro####.bittorrent.com
  • DNS ASK wp#d
  • DNS ASK www.download.windowsupdate.com
  • DNS ASK ro####.utorrent.com
  • DNS ASK no#.bt.co
  • DNS ASK ap##.#ittorrent.com
  • DNS ASK up####.utorrent.com
  • '23#.#55.255.250':1900
  • '<L####NET_GATEWAY>':5351
  • 'ro####.utorrent.com':6881
Miscellaneous:
Searches for the following windows:
  • ClassName: 'MS_AutodialMonitor' WindowName: ''
  • ClassName: 'MS_WebcheckMonitor' WindowName: ''
  • ClassName: '?Torrent4823DF041B09' WindowName: ''
  • ClassName: 'µTorrent4823DF041B09' WindowName: ''

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Free trial

 

Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

Free trial

 

Download Dr.Web

Download by serial number

Download on App Store

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

 

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android

Free trial

14 days

Download now
Get it on Google Play