マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話

03-6550-8770

Profile

Trojan.Siggen15.13935

Added to the Dr.Web virus database: 2021-09-11

Virus description added:

Technical Information

Modifies file system
Creates the following files
  • %TEMP%\7zipsfx.000\64.exe
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\xalan.md
  • %ProgramFiles%\java\jre1.8.0_301\lib\deploy\ffjcext.zip
  • %ProgramFiles%\java\jre1.8.0_301\lib\currency.data
  • %ProgramFiles%\java\jre1.8.0_301\lib\content-types.properties
  • %ProgramFiles%\java\jre1.8.0_301\lib\cmm\srgb.pf
  • %ProgramFiles%\java\jre1.8.0_301\lib\cmm\pycc.pf
  • %ProgramFiles%\java\jre1.8.0_301\lib\deploy\messages.properties
  • %ProgramFiles%\java\jre1.8.0_301\lib\cmm\linear_rgb.pf
  • %ProgramFiles%\java\jre1.8.0_301\lib\cmm\ciexyz.pf
  • %ProgramFiles%\java\jre1.8.0_301\lib\classlist
  • %ProgramFiles%\java\jre1.8.0_301\lib\calendars.properties
  • %ProgramFiles%\java\jre1.8.0_301\lib\amd64\jvm.cfg
  • %ProgramFiles%\java\jre1.8.0_301\lib\accessibility.properties
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\zlib.md
  • %ProgramFiles%\java\jre1.8.0_301\lib\cmm\gray.pf
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\xmlresolver.md
  • %ProgramFiles%\java\jre1.8.0_301\lib\deploy\messages_es.properties
  • %ProgramFiles%\java\jre1.8.0_301\lib\deploy\messages_fr.properties
  • %ProgramFiles%\java\jre1.8.0_301\lib\ext\cldrdata.jar
  • %ProgramFiles%\java\jre1.8.0_301\lib\ext\access-bridge-64.jar
  • %ProgramFiles%\java\jre1.8.0_301\lib\deploy\splash_11@2x-lic.gif
  • %ProgramFiles%\java\jre1.8.0_301\lib\deploy\splash_11-lic.gif
  • %ProgramFiles%\java\jre1.8.0_301\lib\deploy\splash@2x.gif
  • %ProgramFiles%\java\jre1.8.0_301\lib\deploy\splash.gif
  • %ProgramFiles%\java\jre1.8.0_301\lib\deploy\messages_zh_cn.properties
  • %ProgramFiles%\java\jre1.8.0_301\lib\deploy\messages_zh_tw.properties
  • %ProgramFiles%\java\jre1.8.0_301\lib\deploy\messages_zh_hk.properties
  • %ProgramFiles%\java\jre1.8.0_301\lib\deploy\messages_sv.properties
  • %ProgramFiles%\java\jre1.8.0_301\lib\deploy\messages_pt_br.properties
  • %ProgramFiles%\java\jre1.8.0_301\lib\deploy\messages_ko.properties
  • %ProgramFiles%\java\jre1.8.0_301\lib\deploy\messages_ja.properties
  • %ProgramFiles%\java\jre1.8.0_301\lib\deploy\messages_it.properties
  • %ProgramFiles%\java\jre1.8.0_301\lib\deploy\messages_de.properties
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\xerces.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\unicode.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\thaidict.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\javafx\mesa3d.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\cldr.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\bcel.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\asm.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\javafx\webkit.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\javafx\public_suffix.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\colorimaging.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\cryptix.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\dom.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\javafx\libffi.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\javafx\jpeg_fx.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\javafx\icu_web.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\javafx\gstreamer.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\javafx\glib.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\javafx\libxml2.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\dynalink.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\relaxngom.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\freebxml.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\santuario.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\lcms.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\relaxngdatatype.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\relaxngcc.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\pkcs11wrapper.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\pkcs11cryptotoken.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\mesa3d.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\libpng.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\jpeg.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\ecc.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\jopt-simple.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\joni.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\jcup.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\icu.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\jdk\giflib.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\javafx\directshow.md
  • %ProgramFiles%\java\jre1.8.0_301\legal\javafx\libxslt.md
  • %ProgramFiles%\java\jre1.8.0_301\lib\ext\dnsns.jar
  • %ProgramFiles%\java\jre1.8.0_301\lib\ext\zipfs.jar
  • %ProgramFiles%\java\jre1.8.0_301\lib\security\policy\limited\local_policy.jar
  • %ProgramFiles%\java\jre1.8.0_301\lib\security\javaws.policy
  • %ProgramFiles%\java\jre1.8.0_301\lib\security\java.security
  • %ProgramFiles%\java\jre1.8.0_301\lib\security\java.policy
  • %ProgramFiles%\java\jre1.8.0_301\lib\security\cacerts
  • %ProgramFiles%\java\jre1.8.0_301\lib\security\blacklisted.certs
  • %ProgramFiles%\java\jre1.8.0_301\lib\management\jmxremote.password.template
  • %ProgramFiles%\java\jre1.8.0_301\lib\security\blacklist
  • %ProgramFiles%\java\jre1.8.0_301\lib\psfontj2d.properties
  • %ProgramFiles%\java\jre1.8.0_301\lib\psfont.properties.ja
  • %ProgramFiles%\java\jre1.8.0_301\lib\net.properties
  • %ProgramFiles%\java\jre1.8.0_301\lib\meta-index
  • %ProgramFiles%\java\jre1.8.0_301\lib\management-agent.jar
  • %ProgramFiles%\java\jre1.8.0_301\lib\management\snmp.acl.template
  • %ProgramFiles%\java\jre1.8.0_301\lib\resources.jar
  • %ProgramFiles%\java\jre1.8.0_301\lib\management\management.properties
  • %ProgramFiles%\java\jre1.8.0_301\lib\security\policy\limited\us_export_policy.jar
  • %ProgramFiles%\java\jre1.8.0_301\lib\javaws.pack
  • %ProgramFiles%\java\jre1.8.0_301\lib\javaws.jar
  • %ProgramFiles%\java\jre1.8.0_301\lib\plugin.jar
  • %ProgramFiles%\java\jre1.8.0_301\lib\ext\localedata.pack
  • %ProgramFiles%\java\jre1.8.0_301\lib\charsets.pack
  • %ProgramFiles%\java\jre1.8.0_301\lib\jsse.pack
  • %ProgramFiles%\java\jre1.8.0_301\lib\rt.pack
  • %ProgramFiles%\java\jre1.8.0_301\lib\security\policy\unlimited\us_export_policy.jar
  • %ProgramFiles%\java\jre1.8.0_301\lib\security\policy\unlimited\local_policy.jar
  • %ProgramFiles%\java\jre1.8.0_301\lib\plugin.pack
  • %ProgramFiles%\java\jre1.8.0_301\release
  • %ProgramFiles%\java\jre1.8.0_301\lib\tzmappings
  • %ProgramFiles%\java\jre1.8.0_301\lib\tzdb.dat
  • %ProgramFiles%\java\jre1.8.0_301\lib\sound.properties
  • %ProgramFiles%\java\jre1.8.0_301\lib\security\public_suffix_list.dat
  • %ProgramFiles%\java\jre1.8.0_301\lib\deploy.pack
  • %ProgramFiles%\java\jre1.8.0_301\lib\management\jmxremote.access
  • %ProgramFiles%\java\jre1.8.0_301\lib\jvm.hprof.txt
  • %ProgramFiles%\java\jre1.8.0_301\bin\lcms.dll
  • %ProgramFiles%\java\jre1.8.0_301\lib\flavormap.properties
  • %ProgramFiles%\java\jre1.8.0_301\lib\fonts\lucidabrightitalic.ttf
  • %ProgramFiles%\java\jre1.8.0_301\lib\fonts\lucidabrightdemiitalic.ttf
  • %ProgramFiles%\java\jre1.8.0_301\lib\fonts\lucidabrightdemibold.ttf
  • %ProgramFiles%\java\jre1.8.0_301\lib\fontconfig.properties.src
  • %ProgramFiles%\java\jre1.8.0_301\lib\fontconfig.bfc
  • %ProgramFiles%\java\jre1.8.0_301\lib\fonts\lucidatypewriterbold.ttf
  • %ProgramFiles%\java\jre1.8.0_301\lib\fonts\lucidasansdemibold.ttf
  • %ProgramFiles%\java\jre1.8.0_301\lib\fonts\lucidasansregular.ttf
  • %ProgramFiles%\java\jre1.8.0_301\lib\ext\sunmscapi.jar
  • %ProgramFiles%\java\jre1.8.0_301\lib\ext\sunjce_provider.jar
  • %ProgramFiles%\java\jre1.8.0_301\lib\ext\sunec.jar
  • %ProgramFiles%\java\jre1.8.0_301\lib\ext\nashorn.jar
  • %ProgramFiles%\java\jre1.8.0_301\lib\ext\meta-index
  • %ProgramFiles%\java\jre1.8.0_301\lib\ext\sunpkcs11.jar
  • %ProgramFiles%\java\jre1.8.0_301\lib\fonts\lucidatypewriterregular.ttf
  • %ProgramFiles%\java\jre1.8.0_301\lib\jfxswt.jar
  • %ProgramFiles%\java\jre1.8.0_301\lib\ext\jaccess.jar
  • %ProgramFiles%\java\jre1.8.0_301\lib\fonts\lucidabrightregular.ttf
  • %ProgramFiles%\java\jre1.8.0_301\lib\jfr.jar
  • %ProgramFiles%\java\jre1.8.0_301\lib\jfr\profile.jfc
  • %ProgramFiles%\java\jre1.8.0_301\lib\jfr\default.jfc
  • %ProgramFiles%\java\jre1.8.0_301\lib\jce.jar
  • %ProgramFiles%\java\jre1.8.0_301\lib\javafx.properties
  • %ProgramFiles%\java\jre1.8.0_301\lib\images\cursors\win32_movenodrop32x32.gif
  • %ProgramFiles%\java\jre1.8.0_301\lib\images\cursors\win32_movedrop32x32.gif
  • %ProgramFiles%\java\jre1.8.0_301\lib\images\cursors\win32_linknodrop32x32.gif
  • %ProgramFiles%\java\jre1.8.0_301\lib\images\cursors\win32_linkdrop32x32.gif
  • %ProgramFiles%\java\jre1.8.0_301\lib\images\cursors\win32_copynodrop32x32.gif
  • %ProgramFiles%\java\jre1.8.0_301\lib\images\cursors\win32_copydrop32x32.gif
  • %ProgramFiles%\java\jre1.8.0_301\lib\images\cursors\invalid32x32.gif
  • %ProgramFiles%\java\jre1.8.0_301\lib\images\cursors\cursors.properties
  • %ProgramFiles%\java\jre1.8.0_301\lib\hijrah-config-umalqura.properties
  • %ProgramFiles%\java\jre1.8.0_301\lib\ext\jfxrt.jar
  • %ProgramFiles%\java\jre1.8.0_301\bin\zip.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\wsdetect.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\windowsaccessbridge-64.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-crt-heap-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-crt-process-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-crt-private-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-crt-multibyte-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-crt-math-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-crt-locale-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-crt-string-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-crt-stdio-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-synch-l1-2-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-crt-convert-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-crt-conio-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-util-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-timezone-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-sysinfo-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-crt-environment-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-crt-filesystem-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-crt-utility-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-synch-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\glass.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\fxplugins.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\fontmanager.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\eula.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\dt_socket.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-crt-time-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\glib-lite.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\dt_shmem.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\deploy.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\decora_sse.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\dcpr.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\bci.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\awt.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\dtplugin\npdeployjava1.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\dtplugin\deployjava1.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-string-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\welcome.html
  • %ProgramFiles%\java\jre1.8.0_301\thirdpartylicensereadme-javafx.txt
  • %ProgramFiles%\java\jre1.8.0_301\readme.txt
  • %ProgramFiles%\java\jre1.8.0_301\license
  • %ProgramFiles%\java\jre1.8.0_301\copyright
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-console-l1-1-0.dll
  • %ALLUSERSPROFILE%\oracle\java\installcache_x64\1215060.tmp\newimage
  • %ALLUSERSPROFILE%\oracle\java\installcache_x64\1215060.tmp\bspatch.exe
  • %ALLUSERSPROFILE%\oracle\java\installcache_x64\1215060.tmp\diff
  • %ProgramFiles%\java\jre1.8.0_301\installer.exe
  • %LOCALAPPDATA%low\oracle\java\jre1.8.0_301_x64\jre1.8.0_30164.msi
  • %TEMP%\jds1150710.tmp\jds1150725.tmp
  • %TEMP%\7zipsfx.000\86.exe
  • %ALLUSERSPROFILE%\oracle\java\installcache_x64\1215060.tmp\baseimagefam8
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-console-l1-2-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-datetime-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\thirdpartylicensereadme.txt
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-debug-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-processthreads-l1-1-1.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-interlocked-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-processthreads-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-processenvironment-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-namedpipe-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-memory-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-localization-l1-2-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-libraryloader-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-heap-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-profile-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-handle-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-file-l2-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-file-l1-2-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-file-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-core-errorhandling-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\gstreamer-lite.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\hprof.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\api-ms-win-crt-runtime-l1-1-0.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\instrument.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\resource.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\plugin2\npjp2.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\prism_sw.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\prism_d3d.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\prism_common.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\policytool.exe
  • %ProgramFiles%\java\jre1.8.0_301\bin\plugin2\vcruntime140.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\server\jvm.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\rmid.exe
  • %ProgramFiles%\java\jre1.8.0_301\bin\rmiregistry.exe
  • %ProgramFiles%\java\jre1.8.0_301\bin\orbd.exe
  • %ProgramFiles%\java\jre1.8.0_301\bin\npt.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\nio.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\net.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\msvcp140.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\pack200.exe
  • %ProgramFiles%\java\jre1.8.0_301\bin\server\xusage.txt
  • %ProgramFiles%\java\jre1.8.0_301\bin\w2k_lsa_auth.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\mlib_image.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\j2pcsc.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\verify.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\vcruntime140_1.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\vcruntime140.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\unpack200.exe
  • %ProgramFiles%\java\jre1.8.0_301\bin\unpack.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\ucrtbase.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\tnameserv.exe
  • %ProgramFiles%\java\jre1.8.0_301\bin\t2k.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\sunmscapi.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\sunec.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\ssvagent.exe
  • %ProgramFiles%\java\jre1.8.0_301\bin\ssv.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\splashscreen.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\servertool.exe
  • %ProgramFiles%\java\jre1.8.0_301\bin\plugin2\msvcp140.dll
  • %ProgramFiles%\java\jre1.8.0_301\lib\logging.properties
  • %TEMP%\hsperfdata_user\1244
  • %ProgramFiles%\java\jre1.8.0_301\bin\ktab.exe
  • %ProgramFiles%\java\jre1.8.0_301\bin\javaws.exe
  • %ProgramFiles%\java\jre1.8.0_301\bin\javaw.exe
  • %ProgramFiles%\java\jre1.8.0_301\bin\javafx_iio.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\javafx_font.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\javacpl.exe
  • %ProgramFiles%\java\jre1.8.0_301\bin\jawt.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\javacpl.cpl
  • %ProgramFiles%\java\jre1.8.0_301\bin\java.exe
  • %ProgramFiles%\java\jre1.8.0_301\bin\java.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\java-rmi.exe
  • %ProgramFiles%\java\jre1.8.0_301\bin\jabswitch.exe
  • %ProgramFiles%\java\jre1.8.0_301\bin\jaas_nt.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\j2pkcs11.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\javaaccessbridge-64.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\jawtaccessbridge-64.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\java_crw_demo.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\jdwp.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\klist.exe
  • %ProgramFiles%\java\jre1.8.0_301\bin\jp2ssv.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\kinit.exe
  • %ProgramFiles%\java\jre1.8.0_301\bin\keytool.exe
  • %ProgramFiles%\java\jre1.8.0_301\bin\jsoundds.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\jsound.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\jsdt.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\jpeg.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\jp2native.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\jfr.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\jp2launcher.exe
  • %ProgramFiles%\java\jre1.8.0_301\bin\jp2iexp.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\jli.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\jjs.exe
  • %ProgramFiles%\java\jre1.8.0_301\bin\jfxwebkit.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\jfxmedia.dll
  • %ProgramFiles%\java\jre1.8.0_301\bin\management.dll
  • %TEMP%\hsperfdata_user\1132
Deletes the following files
  • %ALLUSERSPROFILE%\oracle\java\installcache_x64\1215060.tmp\baseimagefam8
  • %ALLUSERSPROFILE%\oracle\java\installcache_x64\1215060.tmp\bspatch.exe
  • %ALLUSERSPROFILE%\oracle\java\installcache_x64\1215060.tmp\diff
  • %ALLUSERSPROFILE%\oracle\java\installcache_x64\1215060.tmp\newimage
  • %ProgramFiles%\java\jre1.8.0_301\lib\plugin.pack
  • %ProgramFiles%\java\jre1.8.0_301\lib\javaws.pack
  • %ProgramFiles%\java\jre1.8.0_301\lib\deploy.pack
  • %ProgramFiles%\java\jre1.8.0_301\lib\rt.pack
  • %ProgramFiles%\java\jre1.8.0_301\lib\jsse.pack
  • %ProgramFiles%\java\jre1.8.0_301\lib\charsets.pack
  • %ProgramFiles%\java\jre1.8.0_301\lib\ext\localedata.pack
  • <SYSTEM32>\windowsaccessbridge-64.dll
  • %ProgramFiles%\java\jre1.8.0_301\installer.exe
  • <SYSTEM32>\java.exe
  • <SYSTEM32>\javaw.exe
Moves the following files
  • from %TEMP%\jds1150710.tmp\jds1150725.tmp to %TEMP%\jds1150710.tmp\64.exe
Modifies the following files
  • %TEMP%\jusched.log
  • %ALLUSERSPROFILE%\oracle\java\installcache_x64\baseimagefam8
Network activity
Connects to
  • 'ja#######d-secure.oracle.com':443
  • 'microsoft.com':80
TCP
HTTP GET requests
  • http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
Other
  • 'ja#######d-secure.oracle.com':443
UDP
  • DNS ASK ja#######d-secure.oracle.com
  • DNS ASK microsoft.com
Miscellaneous
Creates and executes the following
  • '%TEMP%\7zipsfx.000\64.exe' /s
  • '%ProgramFiles%\java\jre1.8.0_301\bin\jp2launcher.exe' -secure -javaws -jre "%ProgramFiles%\Java\jre1.8.0_301" -vma LWNsYXNzcGF0aABDOlxQcm9ncmFtIEZpbGVzXEphdmFcanJlMS44LjBfMzAxXGxpYlxkZXBsb3kuamFyAC1EamF2YS5zZWN1cml0eS5wb2xpY3k9ZmlsZTpDOlxQcm9ncmFt...
  • '%ProgramFiles%\java\jre1.8.0_301\bin\javaws.exe' -wait -fix -permissions -silent
  • '%ProgramFiles%\java\jre1.8.0_301\bin\ssvagent.exe' -doHKCUSSVSetup
  • '%ProgramFiles%\java\jre1.8.0_301\bin\unpack200.exe' -r "%ProgramFiles%\Java\jre1.8.0_301\lib/ext/localedata.pack" "%ProgramFiles%\Java\jre1.8.0_301\lib/ext/localedata.jar"
  • '%ProgramFiles%\java\jre1.8.0_301\bin\unpack200.exe' -r "%ProgramFiles%\Java\jre1.8.0_301\lib/charsets.pack" "%ProgramFiles%\Java\jre1.8.0_301\lib/charsets.jar"
  • '%ProgramFiles%\java\jre1.8.0_301\bin\unpack200.exe' -r "%ProgramFiles%\Java\jre1.8.0_301\lib/jsse.pack" "%ProgramFiles%\Java\jre1.8.0_301\lib/jsse.jar"
  • '%ALLUSERSPROFILE%\oracle\java\installcache_x64\1215060.tmp\bspatch.exe' baseimagefam8 newimage diff
  • '%ProgramFiles%\java\jre1.8.0_301\bin\javaw.exe' -Xshare:dump -Djdk.disableLastUsageTracking
  • '%ProgramFiles%\java\jre1.8.0_301\bin\unpack200.exe' -r "%ProgramFiles%\Java\jre1.8.0_301\lib/rt.pack" "%ProgramFiles%\Java\jre1.8.0_301\lib/rt.jar"
  • '%ProgramFiles%\java\jre1.8.0_301\bin\unpack200.exe' -r "%ProgramFiles%\Java\jre1.8.0_301\lib/javaws.pack" "%ProgramFiles%\Java\jre1.8.0_301\lib/javaws.jar"
  • '%ProgramFiles%\java\jre1.8.0_301\bin\unpack200.exe' -r "%ProgramFiles%\Java\jre1.8.0_301\lib/plugin.pack" "%ProgramFiles%\Java\jre1.8.0_301\lib/plugin.jar"
  • '%ProgramFiles%\java\jre1.8.0_301\installer.exe' /s INSTALLDIR="%ProgramFiles%\Java\jre1.8.0_301\\" INSTALL_SILENT=1 REPAIRMODE=0 ProductCode={26A24AE4-039D-4CA4-87B4-2F64180301F0}
  • '%TEMP%\jds1150710.tmp\64.exe' "/s"
  • '%ProgramFiles%\java\jre1.8.0_301\bin\javaws.exe' -wait -fix -shortcut -silent
  • '%ProgramFiles%\java\jre1.8.0_301\bin\unpack200.exe' -r "%ProgramFiles%\Java\jre1.8.0_301\lib/deploy.pack" "%ProgramFiles%\Java\jre1.8.0_301\lib/deploy.jar"
  • '%TEMP%\7zipsfx.000\64.exe' /s' (with hidden window)
  • '%ProgramFiles%\java\jre1.8.0_301\bin\unpack200.exe' -r "%ProgramFiles%\Java\jre1.8.0_301\lib/deploy.pack" "%ProgramFiles%\Java\jre1.8.0_301\lib/deploy.jar"' (with hidden window)
  • '%ProgramFiles%\java\jre1.8.0_301\bin\unpack200.exe' -r "%ProgramFiles%\Java\jre1.8.0_301\lib/rt.pack" "%ProgramFiles%\Java\jre1.8.0_301\lib/rt.jar"' (with hidden window)
  • '%ProgramFiles%\java\jre1.8.0_301\bin\unpack200.exe' -r "%ProgramFiles%\Java\jre1.8.0_301\lib/plugin.pack" "%ProgramFiles%\Java\jre1.8.0_301\lib/plugin.jar"' (with hidden window)
  • '%ProgramFiles%\java\jre1.8.0_301\bin\unpack200.exe' -r "%ProgramFiles%\Java\jre1.8.0_301\lib/ext/localedata.pack" "%ProgramFiles%\Java\jre1.8.0_301\lib/ext/localedata.jar"' (with hidden window)
  • '%ProgramFiles%\java\jre1.8.0_301\bin\unpack200.exe' -r "%ProgramFiles%\Java\jre1.8.0_301\lib/charsets.pack" "%ProgramFiles%\Java\jre1.8.0_301\lib/charsets.jar"' (with hidden window)
  • '%ProgramFiles%\java\jre1.8.0_301\bin\javaw.exe' -Xshare:dump -Djdk.disableLastUsageTracking' (with hidden window)
  • '%ProgramFiles%\java\jre1.8.0_301\bin\unpack200.exe' -r "%ProgramFiles%\Java\jre1.8.0_301\lib/jsse.pack" "%ProgramFiles%\Java\jre1.8.0_301\lib/jsse.jar"' (with hidden window)
  • '%ALLUSERSPROFILE%\oracle\java\installcache_x64\1215060.tmp\bspatch.exe' baseimagefam8 newimage diff' (with hidden window)
  • '%ProgramFiles%\java\jre1.8.0_301\bin\unpack200.exe' -r "%ProgramFiles%\Java\jre1.8.0_301\lib/javaws.pack" "%ProgramFiles%\Java\jre1.8.0_301\lib/javaws.jar"' (with hidden window)

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android