マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Trojan.StartPage.41548

Added to the Dr.Web virus database: 2012-01-20

Virus description added:

Technical Information

To ensure autorun and distribution:
Creates the following services:
  • [<HKLM>\SYSTEM\ControlSet001\Services\Messenger] 'Start' = '00000002'
Malicious functions:
To complicate detection of its presence in the operating system,
forces the system hide from view:
  • hidden files
  • file extensions
blocks the following features:
  • System Restore (SR)
  • Windows Security Center
Creates and executes the following:
  • %TEMP%\7ZipSfx.000\Links3.exe 
  • %TEMP%\7ZipSfx.000\Links2.exe 
  • %TEMP%\7ZipSfx.000\Links1.exe 
Executes the following:
  • %WINDIR%\regedit.exe /S Reg-Visual.reg
  • %WINDIR%\regedit.exe /S Reg-IE.reg
  • %WINDIR%\regedit.exe /S Reg-Speed.reg
  • <SYSTEM32>\xcopy.exe Quick Launch "%APPDATA%\Microsoft\Internet Explorer\Quick Launch
  • %WINDIR%\regedit.exe /S Reg-Fine.reg
  • <SYSTEM32>\cmd.exe /c ""%TEMP%\7ZipSfx.000\install.cmd" "
  • <SYSTEM32>\xcopy.exe Favorites\* "%HOMEPATH%\Избранное%" /s /e /i /y
  • %WINDIR%\regedit.exe /S Reg-Need.reg
  • %WINDIR%\regedit.exe /S Reg-WMP.reg
  • %WINDIR%\regedit.exe /S Reg-Serv.reg
Modifies settings of Windows Internet Explorer:
  • [<HKCU>\Software\Microsoft\Internet Explorer\Main] 'Window Title' = 'Internet Explorer'
Sets a new unauthorized home page for Windows Internet Explorer.
Modifies file system :
Creates the following files:
  • %ALLUSERSPROFILE%\Главное меню\DreamLair.net - счастье для всех.url
  • %ALLUSERSPROFILE%\Главное меню\DreamProgs.net - софт и игры.url
  • %TEMP%\7ZipSfx.000\Links3.exe
  • %TEMP%\7ZipSfx.000\Links1.exe
  • %TEMP%\7ZipSfx.000\Links2.exe
  • %HOMEPATH%\Избранное\Favorites\DreamLair.net - логово мечты.url
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP15\RestorePointSize
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\fifo.log
  • <SYSTEM32>\DreamLair.ico
  • %HOMEPATH%\Избранное\Favorites\DreamMusic - музыка души.url
  • %HOMEPATH%\Избранное\Favorites\DreamProgs.net - софт и игры.url
  • %TEMP%\7ZipSfx.000\Quick Launch\Total Commander GigaLair.lnk
  • %TEMP%\7ZipSfx.000\install.cmd
  • %TEMP%\7ZipSfx.000\Reg-Fine.reg
  • %TEMP%\7ZipSfx.000\Reg-Visual.reg
  • %TEMP%\7ZipSfx.000\Quick Launch\desktop.ini
  • %TEMP%\7ZipSfx.000\Quick Launch\Свернуть все окна.scf
  • %TEMP%\7ZipSfx.000\Reg-IE.reg
  • %TEMP%\7ZipSfx.000\Reg-WMP.reg
  • %TEMP%\7ZipSfx.000\Reg-XP.reg
  • %TEMP%\7ZipSfx.000\Reg-Speed.reg
  • %TEMP%\7ZipSfx.000\Reg-Need.reg
  • %TEMP%\7ZipSfx.000\Reg-Serv.reg
Sets the 'hidden' attribute to the following files:
  • %TEMP%\7ZipSfx.000\Quick Launch\desktop.ini
Deletes the following files:
  • <SYSTEM32>\dllcache\EXCH_scripto.dll
  • <SYSTEM32>\dllcache\EXCH_regtrace.exe
  • <SYSTEM32>\dllcache\EXCH_ntfsdrv.dll
  • <SYSTEM32>\dllcache\EXCH_snprfdll.dll
  • <SYSTEM32>\dllcache\EXCH_smtpctrs.dll
  • <SYSTEM32>\dllcache\EXCH_seos.dll
  • <SYSTEM32>\dllcache\EXCH_mailmsg.dll
  • <SYSTEM32>\dllcache\evtrig.exe
  • <SYSTEM32>\dllcache\evtquery.vbs
  • <SYSTEM32>\dllcache\evtgprov.dll
  • <SYSTEM32>\dllcache\EXCH_fcachdll.dll
  • <SYSTEM32>\dllcache\EXCH_aqadmin.dll
  • <SYSTEM32>\dllcache\EXCH_adsiisex.dll
  • <SYSTEM32>\dllcache\exe2bin.exe
  • <SYSTEM32>\dllcache\fastopen.exe
  • <SYSTEM32>\dllcache\fastfat.sys
  • <SYSTEM32>\dllcache\f3ahvoas.dll
  • <SYSTEM32>\dllcache\fc.exe
  • <SYSTEM32>\dllcache\faultrep.dll
  • <SYSTEM32>\dllcache\fastprox.dll
  • <SYSTEM32>\dllcache\exts.dll
  • <SYSTEM32>\dllcache\expsrv.dll
  • <SYSTEM32>\dllcache\explorer.exe
  • <SYSTEM32>\dllcache\expand.exe
  • <SYSTEM32>\dllcache\extrac32.exe
  • <SYSTEM32>\dllcache\extmgr.dll
  • <SYSTEM32>\dllcache\exstrace.dll
  • <SYSTEM32>\dllcache\evntwin.exe
  • <SYSTEM32>\dllcache\es.dll
  • <SYSTEM32>\dllcache\ersvc.dll
  • <SYSTEM32>\dllcache\eqnclass.dll
  • <SYSTEM32>\dllcache\esentprf.dll
  • <SYSTEM32>\dllcache\esent97.dll
  • <SYSTEM32>\dllcache\esent.dll
  • <SYSTEM32>\dllcache\encdec.dll
  • <SYSTEM32>\dllcache\edlin.exe
  • <SYSTEM32>\dllcache\edb500.dll
  • <SYSTEM32>\dllcache\dxtrans.dll
  • <SYSTEM32>\dllcache\encapi.dll
  • <SYSTEM32>\dllcache\els.dll
  • <SYSTEM32>\dllcache\efsadu.dll
  • <SYSTEM32>\dllcache\esentutl.exe
  • <SYSTEM32>\dllcache\eventvwr.exe
  • <SYSTEM32>\dllcache\eventlog.dll
  • <SYSTEM32>\dllcache\eventcls.dll
  • <SYSTEM32>\dllcache\evntrprv.dll
  • <SYSTEM32>\dllcache\evntcmd.exe
  • <SYSTEM32>\dllcache\evntagnt.dll
  • <SYSTEM32>\dllcache\evcreate.exe
  • <SYSTEM32>\dllcache\esuimgd.dll
  • <SYSTEM32>\dllcache\esucmd.dll
  • <SYSTEM32>\dllcache\esscli.dll
  • <SYSTEM32>\dllcache\eudcedit.exe
  • <SYSTEM32>\dllcache\et4000.sys
  • <SYSTEM32>\dllcache\esunid.dll
  • <SYSTEM32>\dllcache\fde.dll
  • <SYSTEM32>\dllcache\fpencode.dll
  • <SYSTEM32>\dllcache\fpcount.exe
  • <SYSTEM32>\dllcache\fpadmdll.dll
  • <SYSTEM32>\dllcache\fpmmcsat.dll
  • <SYSTEM32>\dllcache\fpmmc.dll
  • <SYSTEM32>\dllcache\fpexedll.dll
  • <SYSTEM32>\dllcache\fpadmcgi.exe
  • <SYSTEM32>\dllcache\fp4awebs.dll
  • <SYSTEM32>\dllcache\fp4avss.dll
  • <SYSTEM32>\dllcache\fp4avnb.dll
  • <SYSTEM32>\dllcache\fp98swin.exe
  • <SYSTEM32>\dllcache\fp98sadm.exe
  • <SYSTEM32>\dllcache\fp4awel.dll
  • <SYSTEM32>\dllcache\fpremadm.exe
  • <SYSTEM32>\dllcache\ftlx041e.dll
  • <SYSTEM32>\dllcache\fs_rec.sys
  • <SYSTEM32>\dllcache\fsutil.exe
  • <SYSTEM32>\dllcache\ftpmib.dll
  • <SYSTEM32>\dllcache\ftpctrs2.dll
  • <SYSTEM32>\dllcache\ftp.exe
  • <SYSTEM32>\dllcache\fsusd.dll
  • <SYSTEM32>\dllcache\framebuf.dll
  • <SYSTEM32>\dllcache\framdit.ttf
  • <SYSTEM32>\dllcache\framd.ttf
  • <SYSTEM32>\dllcache\fsconins.dll
  • <SYSTEM32>\dllcache\freecell.exe
  • <SYSTEM32>\dllcache\framedyn.dll
  • <SYSTEM32>\dllcache\fp4autl.dll
  • <SYSTEM32>\dllcache\fixmapi.exe
  • <SYSTEM32>\dllcache\firewall.cpl
  • <SYSTEM32>\dllcache\fips.sys
  • <SYSTEM32>\dllcache\fltlib.dll
  • <SYSTEM32>\dllcache\fldrclnr.dll
  • <SYSTEM32>\dllcache\flattemp.exe
  • <SYSTEM32>\dllcache\finger.exe
  • <SYSTEM32>\dllcache\filemgmt.dll
  • <SYSTEM32>\dllcache\feclient.dll
  • <SYSTEM32>\dllcache\fdeploy.dll
  • <SYSTEM32>\dllcache\findstr.exe
  • <SYSTEM32>\dllcache\find.exe
  • <SYSTEM32>\dllcache\filterpipelineprintproc.dll
  • <SYSTEM32>\dllcache\fltmc.exe
  • <SYSTEM32>\dllcache\fp4anscp.dll
  • <SYSTEM32>\dllcache\fp4amsft.dll
  • <SYSTEM32>\dllcache\fp40ext.dll
  • <SYSTEM32>\dllcache\fp4atxt.dll
  • <SYSTEM32>\dllcache\fp4areg.dll
  • <SYSTEM32>\dllcache\fp4apws.dll
  • <SYSTEM32>\dllcache\FP4.CAT
  • <SYSTEM32>\dllcache\fontext.dll
  • <SYSTEM32>\dllcache\fmifs.dll
  • <SYSTEM32>\dllcache\fltmgr.sys
  • <SYSTEM32>\dllcache\forcedos.exe
  • <SYSTEM32>\dllcache\fontview.exe
  • <SYSTEM32>\dllcache\fontsub.dll
  • <SYSTEM32>\dllcache\dxtmsft.dll
  • <SYSTEM32>\dllcache\dmload.sys
  • <SYSTEM32>\dllcache\dmio.sys
  • <SYSTEM32>\dllcache\dmintf.dll
  • <SYSTEM32>\dllcache\dmremote.exe
  • <SYSTEM32>\dllcache\dmocx.dll
  • <SYSTEM32>\dllcache\dmloader.dll
  • <SYSTEM32>\dllcache\dmime.dll
  • <SYSTEM32>\dllcache\dmconfig.dll
  • <SYSTEM32>\dllcache\dmcompos.dll
  • <SYSTEM32>\dllcache\dmboot.sys
  • <SYSTEM32>\dllcache\dmdskres.dll
  • <SYSTEM32>\dllcache\dmdskmgr.dll
  • <SYSTEM32>\dllcache\dmdlgs.dll
  • <SYSTEM32>\dllcache\dmscript.dll
  • <SYSTEM32>\dllcache\dosapp.fon
  • <SYSTEM32>\dllcache\docprop2.dll
  • <SYSTEM32>\dllcache\docprop.dll
  • <SYSTEM32>\dllcache\dpcdll.dll
  • <SYSTEM32>\dllcache\dosx.exe
  • <SYSTEM32>\dllcache\doskey.exe
  • <SYSTEM32>\dllcache\dnsrslvr.dll
  • <SYSTEM32>\dllcache\dmsynth.dll
  • <SYSTEM32>\dllcache\dmstyle.dll
  • <SYSTEM32>\dllcache\dmserver.dll
  • <SYSTEM32>\dllcache\dnsapi.dll
  • <SYSTEM32>\dllcache\dmview.ocx
  • <SYSTEM32>\dllcache\dmusic.dll
  • <SYSTEM32>\dllcache\dmband.dll
  • <SYSTEM32>\dllcache\dhcpsapi.dll
  • <SYSTEM32>\dllcache\dhcpmon.dll
  • <SYSTEM32>\dllcache\dhcpcsvc.dll
  • <SYSTEM32>\dllcache\dialer.exe
  • <SYSTEM32>\dllcache\diactfrm.dll
  • <SYSTEM32>\dllcache\dhtmled.ocx
  • <SYSTEM32>\dllcache\dgsetup.dll
  • <SYSTEM32>\dllcache\dfrgui.dll
  • <SYSTEM32>\dllcache\dfrgsnap.dll
  • <SYSTEM32>\dllcache\dfrgres.dll
  • <SYSTEM32>\dllcache\dgrpsetu.dll
  • <SYSTEM32>\dllcache\dgnet.dll
  • <SYSTEM32>\dllcache\dfsshlex.dll
  • <SYSTEM32>\dllcache\diantz.exe
  • <SYSTEM32>\dllcache\dispex.dll
  • <SYSTEM32>\dllcache\diskperf.exe
  • <SYSTEM32>\dllcache\diskpart.exe
  • <SYSTEM32>\dllcache\dmadmin.exe
  • <SYSTEM32>\dllcache\dllhst3g.exe
  • <SYSTEM32>\dllcache\dllhost.exe
  • <SYSTEM32>\dllcache\dis<Auxiliary name>.sys
  • <SYSTEM32>\dllcache\dinput.dll
  • <SYSTEM32>\dllcache\dimap.dll
  • <SYSTEM32>\dllcache\digest.dll
  • <SYSTEM32>\dllcache\diskcopy.dll
  • <SYSTEM32>\dllcache\directdb.dll
  • <SYSTEM32>\dllcache\dinput8.dll
  • <SYSTEM32>\dllcache\dplay.dll
  • <SYSTEM32>\dllcache\dsprpres.dll
  • <SYSTEM32>\dllcache\dsprov.dll
  • <SYSTEM32>\dllcache\dsprop.dll
  • <SYSTEM32>\dllcache\dssenh.dll
  • <SYSTEM32>\dllcache\dssec.dll
  • <SYSTEM32>\dllcache\dsquery.dll
  • <SYSTEM32>\dllcache\dsound3d.dll
  • <SYSTEM32>\dllcache\dsdmoprp.dll
  • <SYSTEM32>\dllcache\dsdmo.dll
  • <SYSTEM32>\dllcache\dsauth.dll
  • <SYSTEM32>\dllcache\dsound.dll
  • <SYSTEM32>\dllcache\dskquoui.dll
  • <SYSTEM32>\dllcache\dskquota.dll
  • <SYSTEM32>\dllcache\dsuiext.dll
  • <SYSTEM32>\dllcache\dxdiag.exe
  • <SYSTEM32>\dllcache\dxapi.sys
  • <SYSTEM32>\dllcache\dx8vb.dll
  • <SYSTEM32>\dllcache\dxmasf.dll
  • <SYSTEM32>\dllcache\dxgthk.sys
  • <SYSTEM32>\dllcache\dxdiagn.dll
  • <SYSTEM32>\dllcache\dx7vb.dll
  • <SYSTEM32>\dllcache\duser.dll
  • <SYSTEM32>\dllcache\dumprep.exe
  • <SYSTEM32>\dllcache\dswave.dll
  • <SYSTEM32>\dllcache\dwwin.exe
  • <SYSTEM32>\dllcache\dwil1033.dll
  • <SYSTEM32>\dllcache\dvdupgrd.exe
  • <SYSTEM32>\dllcache\ds32gt.dll
  • <SYSTEM32>\dllcache\dpnsvr.exe
  • <SYSTEM32>\dllcache\dpnmodem.dll
  • <SYSTEM32>\dllcache\dpnlobby.dll
  • <SYSTEM32>\dllcache\dpvacm.dll
  • <SYSTEM32>\dllcache\dpserial.dll
  • <SYSTEM32>\dllcache\dpnwsock.dll
  • <SYSTEM32>\dllcache\dpnhupnp.dll
  • <SYSTEM32>\dllcache\dpmodemx.dll
  • <SYSTEM32>\dllcache\dplayx.dll
  • <SYSTEM32>\dllcache\dplaysvr.exe
  • <SYSTEM32>\dllcache\dpnhpast.dll
  • <SYSTEM32>\dllcache\dpnet.dll
  • <SYSTEM32>\dllcache\dpnaddr.dll
  • <SYSTEM32>\dllcache\dpvoice.dll
  • <SYSTEM32>\dllcache\drvqry.exe
  • <SYSTEM32>\dllcache\drvmain.sdb
  • <SYSTEM32>\dllcache\drprov.dll
  • <SYSTEM32>\dllcache\ds16gt.dll
  • <SYSTEM32>\dllcache\drwtsn32.exe
  • <SYSTEM32>\dllcache\drwatson.exe
  • <SYSTEM32>\dllcache\drmv2clt.dll
  • <SYSTEM32>\dllcache\dpwsock.dll
  • <SYSTEM32>\dllcache\dpvvox.dll
  • <SYSTEM32>\dllcache\dpvsetup.exe
  • <SYSTEM32>\dllcache\drmstor.dll
  • <SYSTEM32>\dllcache\drmclien.dll
  • <SYSTEM32>\dllcache\dpwsockx.dll
  • <SYSTEM32>\dllcache\ils.dll
  • <SYSTEM32>\dllcache\iisui.dll
  • <SYSTEM32>\dllcache\iissync.exe
  • <SYSTEM32>\dllcache\imekr.lex
  • <SYSTEM32>\dllcache\imapi.exe
  • <SYSTEM32>\dllcache\imagehlp.dll
  • <SYSTEM32>\dllcache\iissuba.dll
  • <SYSTEM32>\dllcache\iisreset.exe
  • <SYSTEM32>\dllcache\iismui.dll
  • <SYSTEM32>\dllcache\iismap.dll
  • <SYSTEM32>\dllcache\iisrtl.dll
  • <SYSTEM32>\dllcache\iisrstas.exe
  • <SYSTEM32>\dllcache\iisrstap.dll
  • <SYSTEM32>\dllcache\imekr61.ime
  • <SYSTEM32>\dllcache\imjpcic.dll
  • <SYSTEM32>\dllcache\imjp81k.dll
  • <SYSTEM32>\dllcache\imjp81.ime
  • <SYSTEM32>\dllcache\imjpdct.dll
  • <SYSTEM32>\dllcache\imjpdadm.exe
  • <SYSTEM32>\dllcache\imjpcus.dll
  • <SYSTEM32>\dllcache\imgutil.dll
  • <SYSTEM32>\dllcache\imekrmig.exe
  • <SYSTEM32>\dllcache\imekrmbx.dll
  • <SYSTEM32>\dllcache\imekrcic.dll
  • <SYSTEM32>\dllcache\imeshare.dll
  • <SYSTEM32>\dllcache\imepadsv.exe
  • <SYSTEM32>\dllcache\imepadsm.dll
  • <SYSTEM32>\dllcache\iislog51.dll
  • <SYSTEM32>\dllcache\iedw.exe
  • <SYSTEM32>\dllcache\iedkcs32.dll
  • <SYSTEM32>\dllcache\ieakui.dll
  • <SYSTEM32>\dllcache\iepeers.dll
  • <SYSTEM32>\dllcache\ieinfo5.ocx
  • <SYSTEM32>\dllcache\ieencode.dll
  • <SYSTEM32>\dllcache\ieaksie.dll
  • <SYSTEM32>\dllcache\icwutil.dll
  • <SYSTEM32>\dllcache\icwtutor.exe
  • <SYSTEM32>\dllcache\icwrmind.exe
  • <SYSTEM32>\dllcache\ieakeng.dll
  • <SYSTEM32>\dllcache\ie4uinit.exe
  • <SYSTEM32>\dllcache\idq.dll
  • <SYSTEM32>\dllcache\iernonce.dll
  • <SYSTEM32>\dllcache\iisclex4.dll
  • <SYSTEM32>\dllcache\iische51.dll
  • <SYSTEM32>\dllcache\iisadmin.dll
  • <SYSTEM32>\dllcache\iisfecnv.dll
  • <SYSTEM32>\dllcache\iisext51.dll
  • <SYSTEM32>\dllcache\iiscrmap.dll
  • <SYSTEM32>\dllcache\iis.dll
  • <SYSTEM32>\dllcache\iexpress.exe
  • <SYSTEM32>\dllcache\iexplore.exe
  • <SYSTEM32>\dllcache\iesetup.dll
  • <SYSTEM32>\dllcache\igmpagnt.dll
  • <SYSTEM32>\dllcache\ifsutil.dll
  • <SYSTEM32>\dllcache\ifmon.dll
  • <SYSTEM32>\dllcache\imjpdct.exe
  • <SYSTEM32>\dllcache\ip6fw.sys
  • <SYSTEM32>\dllcache\iologmsg.dll
  • <SYSTEM32>\dllcache\intl.cpl
  • <SYSTEM32>\dllcache\ipfltdrv.sys
  • <SYSTEM32>\dllcache\ipconfig.exe
  • <SYSTEM32>\dllcache\ipconf.tsp
  • <SYSTEM32>\dllcache\inseng.dll
  • <SYSTEM32>\dllcache\infoctrs.dll
  • <SYSTEM32>\dllcache\infocomm.dll
  • <SYSTEM32>\dllcache\infoadmn.dll
  • <SYSTEM32>\dllcache\input.dll
  • <SYSTEM32>\dllcache\initpki.dll
  • <SYSTEM32>\dllcache\infosoft.dll
  • <SYSTEM32>\dllcache\iphlpapi.dll
  • <SYSTEM32>\dllcache\ipsec.sys
  • <SYSTEM32>\dllcache\iprtrmgr.dll
  • <SYSTEM32>\dllcache\iprtprio.dll
  • <SYSTEM32>\dllcache\ipsecsvc.dll
  • <SYSTEM32>\dllcache\ipsecsnp.dll
  • <SYSTEM32>\dllcache\ipsec6.exe
  • <SYSTEM32>\dllcache\iprop.dll
  • <SYSTEM32>\dllcache\ipnat.sys
  • <SYSTEM32>\dllcache\ipmontr.dll
  • <SYSTEM32>\dllcache\ipinip.sys
  • <SYSTEM32>\dllcache\iprip.dll
  • <SYSTEM32>\dllcache\ippromon.dll
  • <SYSTEM32>\dllcache\ipnathlp.dll
  • <SYSTEM32>\dllcache\inetwiz.exe
  • <SYSTEM32>\dllcache\imm32.dll
  • <SYSTEM32>\dllcache\imlang.dll
  • <SYSTEM32>\dllcache\imkrinst.exe
  • <SYSTEM32>\dllcache\imsinsnt.dll
  • <SYSTEM32>\dllcache\imscinst.exe
  • <SYSTEM32>\dllcache\IMS.CAT
  • <SYSTEM32>\dllcache\imjputyc.dll
  • <SYSTEM32>\dllcache\imjpmig.exe
  • <SYSTEM32>\dllcache\imjpinst.exe
  • <SYSTEM32>\dllcache\imjpdsvr.exe
  • <SYSTEM32>\dllcache\imjputy.exe
  • <SYSTEM32>\dllcache\imjpuex.exe
  • <SYSTEM32>\dllcache\imjprw.exe
  • <SYSTEM32>\dllcache\imskdic.dll
  • <SYSTEM32>\dllcache\inetpp.dll
  • <SYSTEM32>\dllcache\inetmib1.dll
  • <SYSTEM32>\dllcache\inetmgr.exe
  • <SYSTEM32>\dllcache\inetsloc.dll
  • <SYSTEM32>\dllcache\inetres.dll
  • <SYSTEM32>\dllcache\inetppui.dll
  • <SYSTEM32>\dllcache\inetmgr.dll
  • <SYSTEM32>\dllcache\inetcomm.dll
  • <SYSTEM32>\dllcache\inetcfg.dll
  • <SYSTEM32>\dllcache\imskf.dll
  • <SYSTEM32>\dllcache\inetin51.exe
  • <SYSTEM32>\dllcache\inetcplc.dll
  • <SYSTEM32>\dllcache\inetcpl.cpl
  • <SYSTEM32>\dllcache\icwres.dll
  • <SYSTEM32>\dllcache\gm.dls
  • <SYSTEM32>\dllcache\glu32.dll
  • <SYSTEM32>\dllcache\glmf32.dll
  • <SYSTEM32>\dllcache\gpkrsrc.dll
  • <SYSTEM32>\dllcache\gpkcsp.dll
  • <SYSTEM32>\dllcache\gpedit.dll
  • <SYSTEM32>\dllcache\getuname.dll
  • <SYSTEM32>\dllcache\gdi.exe
  • <SYSTEM32>\dllcache\gcdef.dll
  • <SYSTEM32>\dllcache\g711codc.ax
  • <SYSTEM32>\dllcache\getmac.exe
  • <SYSTEM32>\dllcache\geo.nls
  • <SYSTEM32>\dllcache\gdi32.dll
  • <SYSTEM32>\dllcache\gprslt.exe
  • <SYSTEM32>\dllcache\hanja.lex
  • <SYSTEM32>\dllcache\h323msp.dll
  • <SYSTEM32>\dllcache\h323cc.dll
  • <SYSTEM32>\dllcache\hdwwiz.cpl
  • <SYSTEM32>\dllcache\hcappres.dll
  • <SYSTEM32>\dllcache\hanjadic.dll
  • <SYSTEM32>\dllcache\h323.tsp
  • <SYSTEM32>\dllcache\grpconv.exe
  • <SYSTEM32>\dllcache\gpupdate.exe
  • <SYSTEM32>\dllcache\gptext.dll
  • <SYSTEM32>\dllcache\gzip.dll
  • <SYSTEM32>\dllcache\guitrn_a.dll
  • <SYSTEM32>\dllcache\guitrn.dll
  • <SYSTEM32>\dllcache\fxsxp32.dll
  • <SYSTEM32>\dllcache\fxscom.dll
  • <SYSTEM32>\dllcache\fxsclntr.dll
  • <SYSTEM32>\dllcache\fxsclnt.exe
  • <SYSTEM32>\dllcache\fxsdrv.dll
  • <SYSTEM32>\dllcache\fxscover.exe
  • <SYSTEM32>\dllcache\fxscomex.dll
  • <SYSTEM32>\dllcache\fxscfgwz.dll
  • <SYSTEM32>\dllcache\ftsrch.dll
  • <SYSTEM32>\dllcache\ftpsv251.dll
  • <SYSTEM32>\dllcache\ftpsapi2.dll
  • <SYSTEM32>\dllcache\fxsapi.dll
  • <SYSTEM32>\dllcache\fwdprov.dll
  • <SYSTEM32>\dllcache\fwcfg.dll
  • <SYSTEM32>\dllcache\fxsevent.dll
  • <SYSTEM32>\dllcache\fxst30.dll
  • <SYSTEM32>\dllcache\fxssvc.exe
  • <SYSTEM32>\dllcache\fxsst.dll
  • <SYSTEM32>\dllcache\fxswzrd.dll
  • <SYSTEM32>\dllcache\fxsui.dll
  • <SYSTEM32>\dllcache\fxstiff.dll
  • <SYSTEM32>\dllcache\fxssend.exe
  • <SYSTEM32>\dllcache\fxsocm.dll
  • <SYSTEM32>\dllcache\fxsmon.dll
  • <SYSTEM32>\dllcache\fxsext32.dll
  • <SYSTEM32>\dllcache\fxsroute.dll
  • <SYSTEM32>\dllcache\fxsres.dll
  • <SYSTEM32>\dllcache\fxsperf.dll
  • <SYSTEM32>\dllcache\help.exe
  • <SYSTEM32>\dllcache\iaspolcy.dll
  • <SYSTEM32>\dllcache\IASNT4.CAT
  • <SYSTEM32>\dllcache\iasnap.dll
  • <SYSTEM32>\dllcache\iassam.dll
  • <SYSTEM32>\dllcache\iasrecst.dll
  • <SYSTEM32>\dllcache\iasrad.dll
  • <SYSTEM32>\dllcache\iashlpr.dll
  • <SYSTEM32>\dllcache\hwxjpn.dll
  • <SYSTEM32>\dllcache\hwxcht.dll
  • <SYSTEM32>\dllcache\htui.dll
  • <SYSTEM32>\dllcache\iasads.dll
  • <SYSTEM32>\dllcache\iasacct.dll
  • <SYSTEM32>\dllcache\hwxkor.dll
  • <SYSTEM32>\dllcache\iassdo.dll
  • <SYSTEM32>\dllcache\icwdial.dll
  • <SYSTEM32>\dllcache\icwconn2.exe
  • <SYSTEM32>\dllcache\icwconn1.exe
  • <SYSTEM32>\dllcache\icwphbk.dll
  • <SYSTEM32>\dllcache\icwhelp.dll
  • <SYSTEM32>\dllcache\icwdl.dll
  • <SYSTEM32>\dllcache\icwconn.dll
  • <SYSTEM32>\dllcache\icfgnt5.dll
  • <SYSTEM32>\dllcache\icaapi.dll
  • <SYSTEM32>\dllcache\iassvcs.dll
  • <SYSTEM32>\dllcache\icmui.dll
  • <SYSTEM32>\dllcache\icmp.dll
  • <SYSTEM32>\dllcache\icm32.dll
  • <SYSTEM32>\dllcache\httpod51.dll
  • <SYSTEM32>\dllcache\hlink.dll
  • <SYSTEM32>\dllcache\himem.sys
  • <SYSTEM32>\dllcache\hidphone.tsp
  • <SYSTEM32>\dllcache\hnetmon.dll
  • <SYSTEM32>\dllcache\hnetcfg.dll
  • <SYSTEM32>\dllcache\hmmapi.dll
  • <SYSTEM32>\dllcache\hhsetup.dll
  • <SYSTEM32>\dllcache\helpsvc.exe
  • <SYSTEM32>\dllcache\helphost.exe
  • <SYSTEM32>\dllcache\helpctr.exe
  • <SYSTEM32>\dllcache\hhctrlui.dll
  • <SYSTEM32>\dllcache\hhctrl.ocx
  • <SYSTEM32>\dllcache\hh.exe
  • <SYSTEM32>\dllcache\hnetwiz.dll
  • <SYSTEM32>\dllcache\htrn_jis.dll
  • <SYSTEM32>\dllcache\hscupd.exe
  • <SYSTEM32>\dllcache\hrtzzm.exe
  • <SYSTEM32>\dllcache\httpmb51.dll
  • <SYSTEM32>\dllcache\httpext.dll
  • <SYSTEM32>\dllcache\httpapi.dll
  • <SYSTEM32>\dllcache\hrtzres.dll
  • <SYSTEM32>\dllcache\hostname.exe
  • <SYSTEM32>\dllcache\hostmib.dll
  • <SYSTEM32>\dllcache\home_ss.dll
  • <SYSTEM32>\dllcache\hrtz.dll
  • <SYSTEM32>\dllcache\HPCRDP.CAT
  • <SYSTEM32>\dllcache\hotplug.dll
  • <SYSTEM32>\dllcache\bootvrfy.exe
  • <SYSTEM32>\dllcache\bootvid.dll
  • <SYSTEM32>\dllcache\bootok.exe
  • <SYSTEM32>\dllcache\browscap.dll
  • <SYSTEM32>\dllcache\bridge.sys
  • <SYSTEM32>\dllcache\bopomofo.nls
  • <SYSTEM32>\dllcache\bootcfg.exe
  • <SYSTEM32>\dllcache\blackbox.dll
  • <SYSTEM32>\dllcache\bitsprx3.dll
  • <SYSTEM32>\dllcache\bitsprx2.dll
  • <SYSTEM32>\dllcache\bnts.dll
  • <SYSTEM32>\dllcache\blue_ss.dll
  • <SYSTEM32>\dllcache\blastcln.exe
  • <SYSTEM32>\dllcache\browselc.dll
  • <SYSTEM32>\dllcache\callcont.dll
  • <SYSTEM32>\dllcache\calc.exe
  • <SYSTEM32>\dllcache\cacls.exe
  • <SYSTEM32>\dllcache\capesnpn.dll
  • <SYSTEM32>\dllcache\cap7146.sys
  • <SYSTEM32>\dllcache\camocx.dll
  • <SYSTEM32>\dllcache\cabview.dll
  • <SYSTEM32>\dllcache\browsewm.dll
  • <SYSTEM32>\dllcache\browseui.dll
  • <SYSTEM32>\dllcache\browser.dll
  • <SYSTEM32>\dllcache\cabinet.dll
  • <SYSTEM32>\dllcache\btpanui.dll
  • <SYSTEM32>\dllcache\brpinfo.dll
  • <SYSTEM32>\dllcache\big5.nls
  • <SYSTEM32>\dllcache\autodisc.dll
  • <SYSTEM32>\dllcache\autoconv.exe
  • <SYSTEM32>\dllcache\autochk.exe
  • <SYSTEM32>\dllcache\avicap.dll
  • <SYSTEM32>\dllcache\autolfn.exe
  • <SYSTEM32>\dllcache\autofmt.exe
  • <SYSTEM32>\dllcache\authz.dll
  • <SYSTEM32>\dllcache\auditusr.exe
  • <SYSTEM32>\dllcache\audiosrv.dll
  • <SYSTEM32>\dllcache\attrib.exe
  • <SYSTEM32>\dllcache\author.exe
  • <SYSTEM32>\dllcache\author.dll
  • <SYSTEM32>\dllcache\authfilt.dll
  • <SYSTEM32>\dllcache\avicap32.dll
  • <SYSTEM32>\dllcache\bckgres.dll
  • <SYSTEM32>\dllcache\bckg.dll
  • <SYSTEM32>\dllcache\batt.dll
  • <SYSTEM32>\dllcache\bidispl.dll
  • <SYSTEM32>\dllcache\beep.sys
  • <SYSTEM32>\dllcache\bckgzm.exe
  • <SYSTEM32>\dllcache\batmeter.dll
  • <SYSTEM32>\dllcache\avmeter.dll
  • <SYSTEM32>\dllcache\avifile.dll
  • <SYSTEM32>\dllcache\avifil32.dll
  • <SYSTEM32>\dllcache\basesrv.dll
  • <SYSTEM32>\dllcache\avwav.dll
  • <SYSTEM32>\dllcache\avtapi.dll
  • <SYSTEM32>\dllcache\cards.dll
  • <SYSTEM32>\dllcache\cimwin32.dll
  • <SYSTEM32>\dllcache\cidaemon.exe
  • <SYSTEM32>\dllcache\cic.dll
  • <SYSTEM32>\dllcache\cintsetp.exe
  • <SYSTEM32>\dllcache\cintlgnt.ime
  • <SYSTEM32>\dllcache\cintime.dll
  • <SYSTEM32>\dllcache\ciadmin.dll
  • <SYSTEM32>\dllcache\chtbrkr.dll
  • <SYSTEM32>\dllcache\chsbrkr.dll
  • <SYSTEM32>\dllcache\chkrzm.exe
  • <SYSTEM32>\dllcache\chtskf.dll
  • <SYSTEM32>\dllcache\chtskdic.dll
  • <SYSTEM32>\dllcache\chtmbx.dll
  • <SYSTEM32>\dllcache\ciodm.dll
  • <SYSTEM32>\dllcache\clipbrd.exe
  • <SYSTEM32>\dllcache\cleanmgr.exe
  • <SYSTEM32>\dllcache\clbcatq.dll
  • <SYSTEM32>\dllcache\cmcfg32.dll
  • <SYSTEM32>\dllcache\clusapi.dll
  • <SYSTEM32>\dllcache\clipsrv.exe
  • <SYSTEM32>\dllcache\clbcatex.dll
  • <SYSTEM32>\dllcache\ckcnv.exe
  • <SYSTEM32>\dllcache\cisvc.exe
  • <SYSTEM32>\dllcache\cipher.exe
  • <SYSTEM32>\dllcache\clb.dll
  • <SYSTEM32>\dllcache\class_ss.dll
  • <SYSTEM32>\dllcache\classpnp.sys
  • <SYSTEM32>\dllcache\chkrres.dll
  • <SYSTEM32>\dllcache\cdosys.dll
  • <SYSTEM32>\dllcache\cdmodem.dll
  • <SYSTEM32>\dllcache\cdm.dll
  • <SYSTEM32>\dllcache\certmgr.dll
  • <SYSTEM32>\dllcache\certmap.ocx
  • <SYSTEM32>\dllcache\certcli.dll
  • <SYSTEM32>\dllcache\cdfview.dll
  • <SYSTEM32>\dllcache\catsrvut.dll
  • <SYSTEM32>\dllcache\catsrvps.dll
  • <SYSTEM32>\dllcache\catsrv.dll
  • <SYSTEM32>\dllcache\cdfs.sys
  • <SYSTEM32>\dllcache\ccfgnt.dll
  • <SYSTEM32>\dllcache\cb32.exe
  • <SYSTEM32>\dllcache\certwiz.ocx
  • <SYSTEM32>\dllcache\chgusr.exe
  • <SYSTEM32>\dllcache\chgport.exe
  • <SYSTEM32>\dllcache\chglogon.exe
  • <SYSTEM32>\dllcache\chkr.dll
  • <SYSTEM32>\dllcache\chkntfs.exe
  • <SYSTEM32>\dllcache\chkdsk.exe
  • <SYSTEM32>\dllcache\charmap.exe
  • <SYSTEM32>\dllcache\cfgmgr32.dll
  • <SYSTEM32>\dllcache\cfgbkend.dll
  • <SYSTEM32>\dllcache\cewmdm.dll
  • <SYSTEM32>\dllcache\change.exe
  • <SYSTEM32>\dllcache\chajei.ime
  • <SYSTEM32>\dllcache\cfgwiz.exe
  • <SYSTEM32>\dllcache\atrace.dll
  • <SYSTEM32>\dllcache\advpack.dll
  • <SYSTEM32>\dllcache\advapi32.dll
  • <SYSTEM32>\dllcache\adsnw.dll
  • <SYSTEM32>\dllcache\agentctl.dll
  • <SYSTEM32>\dllcache\agentanm.dll
  • <SYSTEM32>\dllcache\afd.sys
  • <SYSTEM32>\dllcache\adsnt.dll
  • <SYSTEM32>\dllcache\adsldp.dll
  • <SYSTEM32>\dllcache\adsiis51.dll
  • <SYSTEM32>\dllcache\adrot.dll
  • <SYSTEM32>\dllcache\adsnds.dll
  • <SYSTEM32>\dllcache\adsmsext.dll
  • <SYSTEM32>\dllcache\adsldpc.dll
  • <SYSTEM32>\dllcache\agentdp2.dll
  • <SYSTEM32>\dllcache\agt0407.dll
  • <SYSTEM32>\dllcache\agt0406.dll
  • <SYSTEM32>\dllcache\agt0405.dll
  • <SYSTEM32>\dllcache\agt040b.dll
  • <SYSTEM32>\dllcache\agt0409.dll
  • <SYSTEM32>\dllcache\agt0408.dll
  • <SYSTEM32>\dllcache\agt0404.dll
  • <SYSTEM32>\dllcache\agentpsh.dll
  • <SYSTEM32>\dllcache\agentmpx.dll
  • <SYSTEM32>\dllcache\agentdpv.dll
  • <SYSTEM32>\dllcache\agt0401.dll
  • <SYSTEM32>\dllcache\agentsvr.exe
  • <SYSTEM32>\dllcache\agentsr.dll
  • <SYSTEM32>\dllcache\adptif.dll
  • <SYSTEM32>\dllcache\accwiz.exe
  • <SYSTEM32>\dllcache\acctres.dll
  • <SYSTEM32>\dllcache\access.cpl
  • <SYSTEM32>\dllcache\acledit.dll
  • <SYSTEM32>\dllcache\aclayers.dll
  • <SYSTEM32>\dllcache\acgenral.dll
  • <SYSTEM32>\dllcache\aaaamon.dll
  • %HOMEPATH%\Избранное\Favorites\DreamProgs.net - софт и игры.url
  • %HOMEPATH%\Избранное\Favorites\DreamMusic - музыка души.url
  • %HOMEPATH%\Избранное\Favorites\DreamLair.net - логово мечты.url
  • <SYSTEM32>\dllcache\6to4svc.dll
  • <SYSTEM32>\dllcache\12520850.cpx
  • <SYSTEM32>\dllcache\12520437.cpx
  • <SYSTEM32>\dllcache\aclua.dll
  • <SYSTEM32>\dllcache\admin.exe
  • <SYSTEM32>\dllcache\admin.dll
  • <SYSTEM32>\dllcache\admexs.dll
  • <SYSTEM32>\dllcache\admxprox.dll
  • <SYSTEM32>\dllcache\admwprox.dll
  • <SYSTEM32>\dllcache\admparse.dll
  • <SYSTEM32>\dllcache\acxtrnal.dll
  • <SYSTEM32>\dllcache\activeds.dll
  • <SYSTEM32>\dllcache\acspecfc.dll
  • <SYSTEM32>\dllcache\aclui.dll
  • <SYSTEM32>\dllcache\actxprxy.dll
  • <SYSTEM32>\dllcache\actmovie.exe
  • <SYSTEM32>\dllcache\activeds.tlb
  • <SYSTEM32>\dllcache\agt040c.dll
  • <SYSTEM32>\dllcache\aspperf.dll
  • <SYSTEM32>\dllcache\asp51.dll
  • <SYSTEM32>\dllcache\asferror.dll
  • <SYSTEM32>\dllcache\asr_ldm.exe
  • <SYSTEM32>\dllcache\asr_fmt.exe
  • <SYSTEM32>\dllcache\asptxn.dll
  • <SYSTEM32>\dllcache\asctrls.ocx
  • <SYSTEM32>\dllcache\apps.chm
  • <SYSTEM32>\dllcache\appmgr.dll
  • <SYSTEM32>\dllcache\appmgmts.dll
  • <SYSTEM32>\dllcache\arp.exe
  • <SYSTEM32>\dllcache\aqueue.dll
  • <SYSTEM32>\dllcache\appwiz.cpl
  • <SYSTEM32>\dllcache\asr_pfu.exe
  • <SYSTEM32>\dllcache\atmlane.sys
  • <SYSTEM32>\dllcache\atmfd.dll
  • <SYSTEM32>\dllcache\atmepvc.sys
  • <SYSTEM32>\dllcache\atmuni.sys
  • <SYSTEM32>\dllcache\atmpvcno.dll
  • <SYSTEM32>\dllcache\atmlib.dll
  • <SYSTEM32>\dllcache\atmarpc.sys
  • <SYSTEM32>\dllcache\at.exe
  • <SYSTEM32>\dllcache\asyncmac.sys
  • <SYSTEM32>\dllcache\asycfilt.dll
  • <SYSTEM32>\dllcache\atmadm.exe
  • <SYSTEM32>\dllcache\atl.dll
  • <SYSTEM32>\dllcache\atkctrs.dll
  • <SYSTEM32>\dllcache\apph_sp.sdb
  • <SYSTEM32>\dllcache\agt0419.dll
  • <SYSTEM32>\dllcache\agt0416.dll
  • <SYSTEM32>\dllcache\agt0415.dll
  • <SYSTEM32>\dllcache\agt0804.dll
  • <SYSTEM32>\dllcache\agt041f.dll
  • <SYSTEM32>\dllcache\agt041d.dll
  • <SYSTEM32>\dllcache\agt0414.dll
  • <SYSTEM32>\dllcache\agt0410.dll
  • <SYSTEM32>\dllcache\agt040e.dll
  • <SYSTEM32>\dllcache\agt040d.dll
  • <SYSTEM32>\dllcache\agt0413.dll
  • <SYSTEM32>\dllcache\agt0412.dll
  • <SYSTEM32>\dllcache\agt0411.dll
  • <SYSTEM32>\dllcache\agt0816.dll
  • <SYSTEM32>\dllcache\appconf.dll
  • <SYSTEM32>\dllcache\apcups.dll
  • <SYSTEM32>\dllcache\ansi.sys
  • <SYSTEM32>\dllcache\apphelp.sdb
  • <SYSTEM32>\dllcache\apphelp.dll
  • <SYSTEM32>\dllcache\append.exe
  • <SYSTEM32>\dllcache\amstream.dll
  • <SYSTEM32>\dllcache\agtintl.dll
  • <SYSTEM32>\dllcache\agtctl15.tlb
  • <SYSTEM32>\dllcache\agt0c0a.dll
  • <SYSTEM32>\dllcache\alrsvc.dll
  • <SYSTEM32>\dllcache\alg.exe
  • <SYSTEM32>\dllcache\ahui.exe
  • <SYSTEM32>\dllcache\c_28594.nls
  • <SYSTEM32>\dllcache\c_28593.nls
  • <SYSTEM32>\dllcache\c_28592.nls
  • <SYSTEM32>\dllcache\c_28597.nls
  • <SYSTEM32>\dllcache\c_28596.nls
  • <SYSTEM32>\dllcache\c_28595.nls
  • <SYSTEM32>\dllcache\c_28591.nls
  • <SYSTEM32>\dllcache\c_20949.nls
  • <SYSTEM32>\dllcache\c_20936.nls
  • <SYSTEM32>\dllcache\c_20932.nls
  • <SYSTEM32>\dllcache\c_21866.nls
  • <SYSTEM32>\dllcache\c_21027.nls
  • <SYSTEM32>\dllcache\c_21025.nls
  • <SYSTEM32>\dllcache\c_28598.nls
  • <SYSTEM32>\dllcache\c_850.nls
  • <SYSTEM32>\dllcache\c_775.nls
  • <SYSTEM32>\dllcache\c_737.nls
  • <SYSTEM32>\dllcache\c_857.nls
  • <SYSTEM32>\dllcache\c_855.nls
  • <SYSTEM32>\dllcache\c_852.nls
  • <SYSTEM32>\dllcache\c_720.nls
  • <SYSTEM32>\dllcache\c_28605.nls
  • <SYSTEM32>\dllcache\c_28603.nls
  • <SYSTEM32>\dllcache\c_28599.nls
  • <SYSTEM32>\dllcache\c_708.nls
  • <SYSTEM32>\dllcache\c_500.nls
  • <SYSTEM32>\dllcache\c_437.nls
  • <SYSTEM32>\dllcache\c_20924.nls
  • <SYSTEM32>\dllcache\c_20269.nls
  • <SYSTEM32>\dllcache\c_20261.nls
  • <SYSTEM32>\dllcache\c_20127.nls
  • <SYSTEM32>\dllcache\c_20278.nls
  • <SYSTEM32>\dllcache\c_20277.nls
  • <SYSTEM32>\dllcache\c_20273.nls
  • <SYSTEM32>\dllcache\c_20108.nls
  • <SYSTEM32>\dllcache\c_20005.nls
  • <SYSTEM32>\dllcache\c_20004.nls
  • <SYSTEM32>\dllcache\c_20003.nls
  • <SYSTEM32>\dllcache\c_20107.nls
  • <SYSTEM32>\dllcache\c_20106.nls
  • <SYSTEM32>\dllcache\c_20105.nls
  • <SYSTEM32>\dllcache\c_20280.nls
  • <SYSTEM32>\dllcache\c_20866.nls
  • <SYSTEM32>\dllcache\c_20838.nls
  • <SYSTEM32>\dllcache\c_20833.nls
  • <SYSTEM32>\dllcache\c_20905.nls
  • <SYSTEM32>\dllcache\c_20880.nls
  • <SYSTEM32>\dllcache\c_20871.nls
  • <SYSTEM32>\dllcache\c_20424.nls
  • <SYSTEM32>\dllcache\c_20290.nls
  • <SYSTEM32>\dllcache\c_20285.nls
  • <SYSTEM32>\dllcache\c_20284.nls
  • <SYSTEM32>\dllcache\c_20423.nls
  • <SYSTEM32>\dllcache\c_20420.nls
  • <SYSTEM32>\dllcache\c_20297.nls
  • <SYSTEM32>\dllcache\c_858.nls
  • <SYSTEM32>\dllcache\dbnetlib.dll
  • <SYSTEM32>\dllcache\dbghelp.dll
  • <SYSTEM32>\dllcache\dbgeng.dll
  • <SYSTEM32>\dllcache\dcomcnfg.exe
  • <SYSTEM32>\dllcache\dciman32.dll
  • <SYSTEM32>\dllcache\dcap32.dll
  • <SYSTEM32>\dllcache\dayi.ime
  • <SYSTEM32>\dllcache\datime.dll
  • <SYSTEM32>\dllcache\dataclen.dll
  • <SYSTEM32>\dllcache\dao360.dll
  • <SYSTEM32>\dllcache\daxctle.ocx
  • <SYSTEM32>\dllcache\davclnt.dll
  • <SYSTEM32>\dllcache\davcdata.exe
  • <SYSTEM32>\dllcache\ddeml.dll
  • <SYSTEM32>\dllcache\devenum.dll
  • <SYSTEM32>\dllcache\deskperf.dll
  • <SYSTEM32>\dllcache\deskmon.dll
  • <SYSTEM32>\dllcache\dfrgntfs.exe
  • <SYSTEM32>\dllcache\dfrgfat.exe
  • <SYSTEM32>\dllcache\devmgr.dll
  • <SYSTEM32>\dllcache\deskadp.dll
  • <SYSTEM32>\dllcache\ddrawex.dll
  • <SYSTEM32>\dllcache\ddraw.dll
  • <SYSTEM32>\dllcache\ddeshare.exe
  • <SYSTEM32>\dllcache\desk.cpl
  • <SYSTEM32>\dllcache\defrag.exe
  • <SYSTEM32>\dllcache\debug.exe
  • <SYSTEM32>\dllcache\danim.dll
  • <SYSTEM32>\dllcache\c_874.nls
  • <SYSTEM32>\dllcache\c_870.nls
  • <SYSTEM32>\dllcache\c_869.nls
  • <SYSTEM32>\dllcache\c_936.nls
  • <SYSTEM32>\dllcache\c_932.nls
  • <SYSTEM32>\dllcache\c_875.nls
  • <SYSTEM32>\dllcache\c_866.nls
  • <SYSTEM32>\dllcache\c_862.nls
  • <SYSTEM32>\dllcache\c_861.nls
  • <SYSTEM32>\dllcache\c_860.nls
  • <SYSTEM32>\dllcache\c_865.nls
  • <SYSTEM32>\dllcache\c_864.nls
  • <SYSTEM32>\dllcache\c_863.nls
  • <SYSTEM32>\dllcache\c_949.nls
  • <SYSTEM32>\dllcache\d3dpmesh.dll
  • <SYSTEM32>\dllcache\d3dim700.dll
  • <SYSTEM32>\dllcache\d3dim.dll
  • <SYSTEM32>\dllcache\d3dxof.dll
  • <SYSTEM32>\dllcache\d3drm.dll
  • <SYSTEM32>\dllcache\d3dramp.dll
  • <SYSTEM32>\dllcache\d3d9.dll
  • <SYSTEM32>\dllcache\c_is2022.dll
  • <SYSTEM32>\dllcache\c_g18030.dll
  • <SYSTEM32>\dllcache\c_950.nls
  • <SYSTEM32>\dllcache\d3d8thk.dll
  • <SYSTEM32>\dllcache\d3d8.dll
  • <SYSTEM32>\dllcache\c_iscii.dll
  • <SYSTEM32>\dllcache\c_20002.nls
  • <SYSTEM32>\dllcache\confmrsl.dll
  • <SYSTEM32>\dllcache\conf.exe
  • <SYSTEM32>\dllcache\comuid.dll
  • <SYSTEM32>\dllcache\console.dll
  • <SYSTEM32>\dllcache\conime.exe
  • <SYSTEM32>\dllcache\confmsp.dll
  • <SYSTEM32>\dllcache\comsvcs.dll
  • <SYSTEM32>\dllcache\comrereg.exe
  • <SYSTEM32>\dllcache\comrepl.exe
  • <SYSTEM32>\dllcache\comrepl.dll
  • <SYSTEM32>\dllcache\comsnap.dll
  • <SYSTEM32>\dllcache\comsetup.dll
  • <SYSTEM32>\dllcache\comres.dll
  • <SYSTEM32>\dllcache\control.exe
  • <SYSTEM32>\dllcache\crtdll.dll
  • <SYSTEM32>\dllcache\credui.dll
  • <SYSTEM32>\dllcache\cprofile.exe
  • <SYSTEM32>\dllcache\cryptdll.dll
  • <SYSTEM32>\dllcache\cryptdlg.dll
  • <SYSTEM32>\dllcache\crypt32.dll
  • <SYSTEM32>\dllcache\cplexe.exe
  • <SYSTEM32>\dllcache\convlog.exe
  • <SYSTEM32>\dllcache\convert.exe
  • <SYSTEM32>\dllcache\controt.dll
  • <SYSTEM32>\dllcache\country.sys
  • <SYSTEM32>\dllcache\counters.dll
  • <SYSTEM32>\dllcache\corpol.dll
  • <SYSTEM32>\dllcache\compstui.dll
  • <SYSTEM32>\dllcache\cmstp.exe
  • <SYSTEM32>\dllcache\cmsetacl.dll
  • <SYSTEM32>\dllcache\cmprops.dll
  • <SYSTEM32>\dllcache\cnfgprts.ocx
  • <SYSTEM32>\dllcache\cnetcfg.dll
  • <SYSTEM32>\dllcache\cmutil.dll
  • <SYSTEM32>\dllcache\cmpbk32.dll
  • <SYSTEM32>\dllcache\cmdl32.exe
  • <SYSTEM32>\dllcache\cmdial32.dll
  • <SYSTEM32>\dllcache\cmd.exe
  • <SYSTEM32>\dllcache\cmnresm.dll
  • <SYSTEM32>\dllcache\cmnclim.dll
  • <SYSTEM32>\dllcache\cmmon32.exe
  • <SYSTEM32>\dllcache\cnvfat.dll
  • <SYSTEM32>\dllcache\compact.exe
  • <SYSTEM32>\dllcache\comp.exe
  • <SYSTEM32>\dllcache\commdlg.dll
  • <SYSTEM32>\dllcache\compobj.dll
  • <SYSTEM32>\dllcache\compfilt.dll
  • <SYSTEM32>\dllcache\compatui.dll
  • <SYSTEM32>\dllcache\comdlg32.dll
  • <SYSTEM32>\dllcache\comaddin.dll
  • <SYSTEM32>\dllcache\colbact.dll
  • <SYSTEM32>\dllcache\coadmin.dll
  • <SYSTEM32>\dllcache\comctl32.dll
  • <SYSTEM32>\dllcache\comcat.dll
  • <SYSTEM32>\dllcache\comadmin.dll
  • <SYSTEM32>\dllcache\cryptext.dll
  • <SYSTEM32>\dllcache\c_1144.nls
  • <SYSTEM32>\dllcache\c_1143.nls
  • <SYSTEM32>\dllcache\c_1142.nls
  • <SYSTEM32>\dllcache\c_1147.nls
  • <SYSTEM32>\dllcache\c_1146.nls
  • <SYSTEM32>\dllcache\c_1145.nls
  • <SYSTEM32>\dllcache\c_1141.nls
  • <SYSTEM32>\dllcache\c_10082.nls
  • <SYSTEM32>\dllcache\c_10081.nls
  • <SYSTEM32>\dllcache\c_10079.nls
  • <SYSTEM32>\dllcache\c_1140.nls
  • <SYSTEM32>\dllcache\c_1047.nls
  • <SYSTEM32>\dllcache\c_1026.nls
  • <SYSTEM32>\dllcache\c_1148.nls
  • <SYSTEM32>\dllcache\c_1258.nls
  • <SYSTEM32>\dllcache\c_1257.nls
  • <SYSTEM32>\dllcache\c_1256.nls
  • <SYSTEM32>\dllcache\c_20001.nls
  • <SYSTEM32>\dllcache\c_20000.nls
  • <SYSTEM32>\dllcache\c_1361.nls
  • <SYSTEM32>\dllcache\c_1255.nls
  • <SYSTEM32>\dllcache\c_1251.nls
  • <SYSTEM32>\dllcache\c_1250.nls
  • <SYSTEM32>\dllcache\c_1149.nls
  • <SYSTEM32>\dllcache\c_1254.nls
  • <SYSTEM32>\dllcache\c_1253.nls
  • <SYSTEM32>\dllcache\c_1252.nls
  • <SYSTEM32>\dllcache\c_10029.nls
  • <SYSTEM32>\dllcache\ctfmon.exe
  • <SYSTEM32>\dllcache\csseqchk.dll
  • <SYSTEM32>\dllcache\csrss.exe
  • <SYSTEM32>\dllcache\ctype.nls
  • <SYSTEM32>\dllcache\ctl3dv2.dll
  • <SYSTEM32>\dllcache\ctl3d32.dll
  • <SYSTEM32>\dllcache\csrsrv.dll
  • <SYSTEM32>\dllcache\cryptui.dll
  • <SYSTEM32>\dllcache\cryptsvc.dll
  • <SYSTEM32>\dllcache\cryptnet.dll
  • <SYSTEM32>\dllcache\cscui.dll
  • <SYSTEM32>\dllcache\cscript.exe
  • <SYSTEM32>\dllcache\cscdll.dll
  • <SYSTEM32>\dllcache\custsat.dll
  • <SYSTEM32>\dllcache\c_10008.nls
  • <SYSTEM32>\dllcache\c_10007.nls
  • <SYSTEM32>\dllcache\c_10006.nls
  • <SYSTEM32>\dllcache\c_10021.nls
  • <SYSTEM32>\dllcache\c_10017.nls
  • <SYSTEM32>\dllcache\c_10010.nls
  • <SYSTEM32>\dllcache\c_10005.nls
  • <SYSTEM32>\dllcache\c_10001.nls
  • <SYSTEM32>\dllcache\c_10000.nls
  • <SYSTEM32>\dllcache\c_037.nls
  • <SYSTEM32>\dllcache\c_10004.nls
  • <SYSTEM32>\dllcache\c_10003.nls
  • <SYSTEM32>\dllcache\c_10002.nls
Miscellaneous:
Searches for the following windows:
  • ClassName: 'CicLoaderWndClass' WindowName: ''
  • ClassName: 'RegEdit_RegEdit' WindowName: ''
  • ClassName: 'Shell_TrayWnd' WindowName: ''

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android