マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Trojan.Inject4.33953

Added to the Dr.Web virus database: 2022-06-14

Virus description added:

Technical Information

Malicious functions
Injects code into
the following system processes:
  • %WINDIR%\microsoft.net\framework\v4.0.30319\applaunch.exe
Network activity
Connects to
  • '45.#.88.244':3821
Miscellaneous
Searches for the following windows
  • ClassName: 'REbbSqWy6yhKIDCdJOyapnxrpMCARCr4zdGc81tBDKsMlaZTXC1O8YFOGKjxRrJBdT3hVOfoa' WindowName: 'c8Wsa1xVPfvJcrgRYwTiizs2trQF69AzBlax3CF3EDNhm3soLBPh71YexuieaoEiIgxIX4a2d'
  • ClassName: 'frPqHJZYaMBNK1iXZL4ANsS21uD9Mtp2VzxQIMRmH0r1Hy55zODtwAsoIZ8jdX2i5l40Sp2bK' WindowName: 'oSJDXYSCxiw6jM3PhtOg3asEoXv2rqhTqLgPF83SNTgwiXD3sIsKcS8sLizAOrDitBLcba7X5'
  • ClassName: 'eK8FiPwiGrlntAfAGa34PFrs8lBYIdfKbFmpafCDNKSmHg4yDLBeWpihN0tQfHserg3PIBWGN' WindowName: '3mqIzIJ0W4tpNHUR860ewMrJ4FxiaQDKL894NutdD2H2JxI2qDuEgRiSQSlWY5SCk8T859i09'
  • ClassName: '7s4AmNMnAgeFMi0XxQ4NJOvA8GRb33ukYm25ifkQHX2RFyiU5Vc8uo0RYoN8qKOkCGdiqJoNF' WindowName: 'nJBYau9pNGADgZBXNb7zwKkKQtGTObJFGbnJ4058OUejld62G2aF0gH331dpRzJUY0rHp2DJY'
  • ClassName: 'dQOn1SHDLML0tdlmyoXz4mwzW0ux2reztbQMd9tGdw448nVZhR4SrqDE13ydlvbxBPeKIuAuf' WindowName: 'SbDXKIIzihD0tLkN4zhKrqQ5XvZ5wKMrJnHhMDgoaPcC1Af6txVcSlcxpiXKCy4Lx0HYIQlqX'
  • ClassName: 'rmoks31jrc1Szv4cLLpf6P0v7NoH9kVPVdTdjD5iGHqyyaR27KICp3LH9UkWDuCNX05LBVtVc' WindowName: '7RiGWBoMqWklaFFpC9vJErOxAxGbdU9ceiEQ5MzOciSqn3cq49lIiw7LjdOwUzmwigtJKIFtn'
  • ClassName: 'M1U2MqpOhePXsFR2NvMRKGE0YaewOPCNVY3jDzzZXts2uoDrmNXiE36ZUykPf3sjJZDGji7Fg' WindowName: '5NcZ0B4DJkmqZFYbxMFIAgunaLgvecOOxmDnwyMx0NMr1SJvFUSCSekuxVgOY8vO9wANr0BbN'
  • ClassName: 'zzFM95lYrKuhGtvDbbTnTXY0IPR6J6tkabhSBntU04vWNdWmhiuV9NdQuv4QuLYUNXTKvo4AL' WindowName: 'ts0AwRZ4EpPkqOcLlzzXczpS6aVBepdJqH42KmHtja2TkwCAG1K39IYp6ur6G8stIJScNq13E'
  • ClassName: 'bgCfXRpG3MhovsHlDDfNBk04qbH0tZLyBVHbisMt6qCwy9PGxvwZ1JuWoM9X4NZWJYxsZ9Qgf' WindowName: 'KEb2pCsOn5GFuW3zpPaatNle7p95lzBUpchx2wk43s3iOUK4rfFjv3Us1mBYSBCQ31F1lGKI9'
  • ClassName: '4IzRBumJa2quG6a7OpIfew6SsTWnEkJuBeTkvcVVmsAqZ8XCKa1qCAZ5Cbg83fN04NdvWeDKc' WindowName: 'M8xfLX6eiFU4fBatCfz4rGprcJoUf1qP4HzdNRASN3C6XPWw35bxEZz7saPfzeOkZ4R02v5XM'
  • ClassName: 'da1xUzI0ME3ABtD9qKtdI0QMVCmu1iCGwup5T27ErbX9BUP7DwNoVxWOiZJWAKZnfFHwvZ6G6' WindowName: '7KAhVhj1I9xdTmvk9VjDGKO3yQh0BmWdDkIxxC4qZpw8aaKJTJSx3rA5CnTUKgyK5QQwjjaF8'
  • ClassName: 'xeNsXhNyhRAk2Yr0f3PRAzFbgAGWIiQnbKHBgu1S4rMubDIag95oikAosBSsHDBrmY6WgBF8b' WindowName: 'Ox341Bxs0fHkKTKPGNKtLHKqlVFDXb7L9oTrdlAriOnu1PtXKvxboLNZgoNxpjfCufA4fTDnt'
  • ClassName: 'A9TFMkSx0GiXrHRlJanjq0WWRhz4LmXXNe0IVr0WZgdcVpEshVNnfMxnz60a8Na1Czu2zzye6' WindowName: '4JObhcHGs86ArzLZ8oo75Z0ZnlkW5zMRYLlgp6I4W3SGt404cFNGvDWNpuf4EnUxk5aJFukwt'
  • ClassName: 'xk6j2djKHyuJacrsrrSEcAA23TT4lqSjabscU6u5qh6pYlLCepT0NLnfF82RpE4N4wzIw7mIu' WindowName: 'kkHd5bOOxPVtJTpunwyjvMJUH3LIw9UEbP7RzEbycopLeppkQUzLhSC7qpWfcoaEnphSwOCmm'
  • ClassName: 'lDeLSbT8SbJUKj1ZKC6G9WhrqAxIBM60WCp2DiULDDM2PSDQufYFl1qmAcap6kImqPV9lJ6mK' WindowName: 'nWQEQ5z3jJqwRbsxAd8Z9TtX7E4vKSAv9mhXDR4oZndjB0lXa56IygOveMk3XVP6FIpCqvJRI'
  • ClassName: 'hiTQ6Eo6WgiA1phRXnkAh4pEgsbKhp4AxqrMrhGWKVFekasCOBFPqoAvJ9me2vpWhStPyMqZ4' WindowName: 'KV3YsJwRYWnirT1ffk7DClDzS3jCxU98Smd9Xt3LeMfwQBtyp0kLIXrxMVbCn7dAjhfZRk0Pw'
  • ClassName: 'aena9fudgYixyEV6HnO6J3WSgsAvKPccUC5BwSGhuGWhkt2QEsQK0QCitZsofi3jZFZpay84i' WindowName: 'sXF9EU05Di1htxkgej0WCKVjd1piJE6N0SSRax0vqizV0r1cM7YVGFFUvfQwvsLv11v061W4r'
  • ClassName: 'KlXfJJbSvvp9aTfOFscrkOSM82QHPP8EURqqTht1dDqCP0tKyTvJuqTxVxocCub5aYJGlJJQ5' WindowName: 'yNhc0g1ZxS0ObYc4WGkUU8fzGnvwA60YgUoj75Lrn8Ak38O2OMJPd3ZcpARQJpIKmaoT7DkWk'
  • ClassName: 'fr3WnGp1F3l0ZgsoPd0MaPr0hY9nGV2lhd3N2F7gibJHYmvyuqmCygnUvzwgQJOVOp6EN9jNT' WindowName: 'XG2ELkwqthl2BTI2sBpKpUoLVx6d96DOcEKP8TG1ZsARy6fdSqo8QplLXW00DsDvUDu5n3fWT'
  • ClassName: 'uT65bvePvrQoDTciQ1Ee3vSx7pvtDamdMz5FGsDMLM1dtVjhna5fc39NL6GVDj4ABgYMsX0ld' WindowName: '176rBfgiuujLnk9w1iPmkx9SSSSgkEd59kUeriQvdOKsuiWmW8LodasTrC0jfAtIJLQZuRiZ8'
  • ClassName: 'pVS51yOdk7N0SWxx1SpToxqfaMeu3B5sybEhceRawHjmytCECYVFbt5ZKdx64KdN9CVkLUEVZ' WindowName: 'KZ35zGr1Zrl25aeXGtvXptI68kTbSEJebcUdDgDLuuX6eFKu9x3MELFsUDPUOrnUZi57ohfe8'
  • ClassName: 'hBy6oisO1wyI3nNDSdo7stJKiya5KCdJ6qQw9f0QNQebqDwFfmvPhGlhvBXzxaOIRk6uTeNuY' WindowName: 'vj7aNVCESml51o0AagGwTPE1owHmNu5jZuidK4jDXvhyeUzfKtepCoHnTwzMAfXEYbKnYyCku'
  • ClassName: 'xErGsRiYKLXdQrqTDb3XUV4HH6Nb2j4xTLIs01QcCwnyGeJ4V5IjARNj3Kepf3CmNa0vyQmHM' WindowName: 'UfwJKotgKDMCDN1yCebDYfJ9zyHTbCT79XDtdRKA4zXniEa8uj4ePKTKZu5ziMWLCVnHxwITN'
  • ClassName: '4uis42nxhWgRrdYJlqOoUdDhD6Z6bj8qIiwmZrSFT83WXNgkENYKOHSYRyRzUVBucWbP9EVgm' WindowName: '4tHEtTWQ8ZJX4nopK0o5sJmkTwnYMwZakBN0WKu601Va9BBBjxNCNM5C4gNo9LtxEO6FqsGEr'
  • ClassName: 'FEDLmaugyBHFbwf84kTg47KCo8o7trurQyyRx0Ciup3vKIFFFeKznRscLXNP3YD6EIcDlGt9J' WindowName: 'bmMcA1KT2IREtuGahBX4rRNU2ccBjZ9kEqVDZHS1EaJt43KRBuPM0rNZxOTjaADvE5hxc9XUB'
  • ClassName: '3wVG58W1dXVQ7T2jiSnzFCCwJkzVvCZbeeS5vffY8pji5rXgWipVLkwZQjx7RvgslSnHiiQGr' WindowName: 'EewwNhG4uEAcypCT1pUMsEaKrh3alz9FHZGaFIWhett4BtZ5AaKvmfGNJxxbarDKFWUCIgBn2'
  • ClassName: 'bFnlp8nlNiuc1l2fs9ScfbuZLt4gAUsGUPuJ2PodJPa4PBsMQzgutWsiqk9vprFlc7a9bZQre' WindowName: 'LeCHw71QH1AqZhKqTmxITVvJjUyw8IoQZ5SEU5eJKeQg0mbhkZLfLn7siT865wyTN4YgTV3X6'
  • ClassName: 'kzRuWZHHpszdA8AgCUpWJNNH99rHoqMiPGvcT3HQaDEIBZmX62p2PVpS9U6c0EoTIfuYE1Gz9' WindowName: 'Ry7w0KYo53f8g3JBHfu8Wo9wANAhjVEiN6CSJbD5iW7aw2M8GRrFzkPN77j3VolyEu55G7amE'
  • ClassName: 'iaJOLGPCyJs8tCJ4ppre3iVHxj4DeRCd9ynRpxPDT7Q0PqGKl7tctrn9wbysHDMHZNoXBKk0R' WindowName: 'w94Lj7TuuqdJwc5QnPiXDL2shjBVOAclJME2e8hQs5c74A24lNk0dyeGfk69yrhWTZOb2n33f'
  • ClassName: 'USJZPdR3dI32aVj1j2MyL0PSnk2V9Ehyr5eByYJLmfavnl9PDrPvvr4A4mXb6RBE3GnzS4Nll' WindowName: 'TtZdNAAX1itxMM2qIRyNutbNXarHNhCwHLeQWDd8SmEZizyd0ojfJIdoHSi50NK4dXIuo6G7y'
  • ClassName: '3aV52CPt788BSuzJegUAyVE5t7hvR5QnhV6bWY5oxyIRM9EZRMJz7ZGtPIT29VwIbLAjgSDOv' WindowName: 'RwQbSjfhoDAYX4soDlBAenfgCmD5nFoiFcxbVHuCXv4lGWRvv72xsbFhljQEW89th3JtMN3jy'
  • ClassName: '1zDtR8GCLdYgZ2STy3uYN3P6alzwuxhoqgzAOOJyN5vssfCL3IMPGEbYBHOIsXIBoyxuKZNI5' WindowName: '5oEG3bVY3RoyAeV1kQ2eKw66OteEWkLRiCkH8gYuBVh4kq7ipnhP14n69DsTAjaYbcSaNGETd'
  • ClassName: '5hMccLdbDmfQXljZBCSdfcA0FJHIB5cocht8txX3J037MprpamEe6trwuVM9NpssUTIxUgpet' WindowName: 'VHsArm4VnqxZKnjbVOeNC2HzU8yvLlWPNKfYvxfFlfR9ptanGWINImNMtzQtdVN8gi6gFIfQl'
  • ClassName: 'dLydirwybxV6zwy6R6ts9dtHUaoYVUGA7KdNXy5KSQqfXNpAGmAMewKEmeWUWI7npasuAFTK6' WindowName: '3KXS4RXWvLMfJVaWHfJ3naAH6GZ9oRqUdHo29NiVx6BXU8yhQlpKE3FZK76OjdeixQ2GeiN3Q'
  • ClassName: '5ZqeEVXCvEUUlT3sTbOxZkeLZhKGGhWeapCdVK7EoDu8UUDGuwR81NN9rqaocOP3WYV9Ki3wF' WindowName: 'derhzwyBYU7R4lyHVh67dl5DjxtvlSCjjgTPxV8cd40uZAVTvhxz6NUhwKdcfmCRkPwDOMj8k'
  • ClassName: 'j9KvFBUHHHetaPMDuRMIBFVtQpkgcQYZeFJKF50YaLZixHgjpOHzc46SEcOVh1XKT3oQ9YdZP' WindowName: 'XXuoKA09nMxYyMBSSKPheBGKjQZbsCknHuocV1oWgZadbjwCnJoUK8COBc32Qu4z5FLhGsGn8'
  • ClassName: '3AtNq51XLTXIxNi2pPT8mDUUjnC3jpV4UCok05SD6s58hfpohlI7WVYfjwnuRkvudHcIbDK4r' WindowName: 'D3ocCsKPlIsvVaYFXrYDc3HsSXlTbh49koLaq7zG6ctef8TA3iAuVSxUhTXhYDSWCsbSFNOF7'
  • ClassName: '3WfdXCHDPQPeQ8Hzynx6mMA0N7j95k7Ai4Z93xaG0PEPp1ZNxGFFhR1QMD6Wuzlezf98VVWnE' WindowName: 'YKI4JSgVS0qZFUD7BQv0TPW4sVCdFsdgaixwB9dyCCsn00KTMZMvbcowhjvKL4au1o6yALKxH'
  • ClassName: 'i7gvhaLtwrK48ORYeUjCAU8LMNhobVXB9IjcaGN5YivQvwRX5ZaA6L3ZzXkUmtUEd0wEoNfL0' WindowName: '8traZtf673JBaLz8RKrYYflqRSUTPLHr1pdgnzZAHl7SZM8XD8W5a8ZwKjQJnvTOx2GaB8FYy'
  • ClassName: 'ybtua93nII59rKim7xanAZAFA6RBMnMGhVNrqGUKFmhtS2fzqtgqueyVzMdVhByXpOlmoeyZK' WindowName: 'OUImBT7HVVfcORx9b0Ky8FnP0vATc6zuBphInkYkjwJEWzKyxMQBaHkw2lWzLPpS5yFU2Hrm1'
  • ClassName: 'hzapzqpkV40D7kCpFtLhauCGW8YtzZAPqa8u6cUYZc0BhWRmm7x4RbGpd7fJM0FWyDKA0Fiqt' WindowName: 'jKgUskQgabTVnlEPtYAgwPwRz3yaBEK2LISUjNovhkGgCAjcKJBzPlDNOhw8tF1iMXOkyuvSK'
  • ClassName: '3P9pCWdywwXIo9OrDuypUJ1dCyaIg6hsPFOtIqkyHdTGVUX74KD45m4KYmD5KzXxcJ303WXnA' WindowName: 'Fi7HIsKs7GrZAHA5MekyquGBu76J1kqJ3kNoDfICtZckIZM40tjg4AQebW1cLLTCnDBuU2O8Q'
  • ClassName: 'zho1G4DncXlyXRWzNtCpFtj9W9WpZj075BhEo6wCiskehrFomCxULrZBqpYjgss2Tr6J5bRRD' WindowName: 'UlCwzD0488aQayRgmAaIdtYHAUeZCt1EpYU91WcjwjzR1jxdVcEQtpCAwc1qHrQFkUZKwz7Fi'
  • ClassName: 'zE2bs7qtdvD94WYRVk0kRczPMm4e4rNPNAk9bSFKI9pt3LZ5YRfvQ9gnsqN6mNV3aP4ktSerT' WindowName: 'jpAzky1D66hCashmznna85uR8ymUZ3urrVVnN8vd8O8hkht0Cwl0wU33goE6Hlt2roonWiIDw'
  • ClassName: 'WpbHFGm4Fgic7P9ZyGpUGU3woxS8nXNHaO88h22ADBjH3LRgs1dKNVcESA31z9CpVS0z60E28' WindowName: 'Y50XGY9nyB17twsevu29aHSfT4CWQQpXjsW9DoxWhYQK4Hpo1EvgIsU5c5jagz9xzofxz3MCR'
  • ClassName: 'uC0ZsWhuaWQjBlmhoP6fb3v9QPCqionZadzbJGeg4xNHyuMe8MgBgXmyQCnKZcv4wr457Yqu5' WindowName: 'o91Fr8lHugbosFMc4qmj80di0rRdeuJB9ObSaxdANP0Ya0fOJONduMErxhqivOP0tYe9HoR27'
  • ClassName: '0EG3ERUqSlBTBs8OlHwtJVUdOCxPgrwVuBlKIcHIWv6asuC9lnyBdWmwBnScbIFVUAq20Qxw2' WindowName: '1rMPs31BtvN2ai3f5y0zWbT3j3jcJ2Fbua51hlVSQI8vJuWzCsLvVIfLUzW0vCLxEZ2nOkmhg'
  • ClassName: 'wxZnBRdySNu1uojQxu0MOAV8oBgeLkSEWKonGoCLJywdUnEpjGZG8mtBqPyTmio5PT4GvVPqn' WindowName: 'ZcSvindNkGxHlY4wNqaN77FCgUkEDDzrKXqOfF7smiAEyT2kOtSTo66Lrcr5yjOQco3Vj0aPi'
  • ClassName: 'EurTVeLZxQhOFrvVD5x00LFEPhJON60tmzqU5sNZ8KXPYCygq74cjIhqneoAFEjoU7kdsPcw4' WindowName: 't7j7MGSqqiQRFfZ82BUw5rnb6hFmvUR6NZo9omhFFnpl83MXmakYTTOrAd689CmHTtydggFaf'
  • ClassName: 'CIbMJM2jDOyQWPJR2v94gbqtMrEOZtiaW19dbQQTj1beZjVLzgDozOFU45xIJwqk3ZRWZ4KGn' WindowName: 'wq8azNDkAqF0sTAMG6DFeM58ZjzJuQpSv9lVUkEBM4m2s0GufdkpgZgQIUlEhtGZw2HsSkaFh'
  • ClassName: 'dJcsdaMWTYl813lLKht9uAei8rVtXJOAY0Q0nty9AGV3sUy2pvuLt3xiHftn6bToDkmNAP2sa' WindowName: '3iHjRVj1XkJTGzE0j64tbu25jjZXVOeAzwnAbjJVMzP0MMHqzIctsRDuwHN65dwg6TacFe8b9'
  • ClassName: '0synipUKG3NoPJ53xAdfUxcPu6Q5IJB1U2zn9kaY4mOsN03T3z4D5HTaYd7tFsR0FvWCDz06y' WindowName: 'oyfsRaUwIQjMDtCJjXwy5PcXLicsSIwDbDSNVufCXt5NWzVipntaBawfSWL3TtuQP2t0APmhI'
  • ClassName: 'joTD3Roe9tUhzNCjFkhMJ9N1XXwN9r6Mjb526TR5xScJ1D4VjfrfwmOZGylOWSPdkICuBVbdX' WindowName: 'wWsOrkBPg1kIAEXDdao2rPY9Tmtf4IA5WaZ8awIzaTgyKnutVL7pdQQGnJwoIY54dGi6BxMDm'
  • ClassName: 'cdbhY3sPWbgPei2Rv4zNEaZDFtvsXZw234XoJil2JPwKFB81iFPt8VwYU9KSTc7TxJS5fgjZI' WindowName: 'EQxiTmCX4VVSgoKEVwwgXEGiQUNloYdC41w2UFYwoXBcjNemZauOR03U9ph3iHa1QFt7EeMp9'
  • ClassName: 'S3mPW6Yl2M9LhIU3FqTyDvZdPUBXCBZ37CFjIy9znmJIgWyT7YIgH05yfrCMvfoH1VDKMYcf1' WindowName: 'N8tTeVZOXj6Sj9AMQKHQNTkRuv0HclWhC9NY7bxX4xfkPrCtcI90Gp8YjRnkbQUJSCLwxsz3z'
  • ClassName: 'NZSlQiFqDMeb4hgxaWXxsxi3ACh0XXdea2vQfNw0KkibxehT3v5G2OhZgKZmCVSQ9iCvUX1zC' WindowName: 'bgtUaYhSJcgVSEe4d3mbHE3wyiGOft3KmuvFnijwndit6Bb5rW1ssFwxwZrptnzsTGlZHvojW'
  • ClassName: 'soZncwBZWwjV3ZoDNJq8VJQUEOLJ8jECD92Bxch5N00ZEPdi8nfR9Od6xmldTHodT9cZ93mGp' WindowName: '0SCl9nTdejMgZRlccTGX8vuKrACuTi9DM5uXp9fEKZABTNEQDgsYmP69ydQsKCjSE1FtVosqE'
  • ClassName: '2hXyhlbqHeXKIYpOhzGZdGTzkPJe5AhAzvRdS9AaopPbPCxcxwTJIK38Dwmj69IK6KVxSN2yF' WindowName: 'kY8vbduFDFDHnZw3L1gm3H3VlGaUSvXonVZYjXaRgVNcJNzs08I7m4baYXjmxEHysOozZhzLj'
  • ClassName: 'KWTSqZTqOpaZDAqyRvJykTwFn3VsamFkqU1BcDuG07mjjq873tLM70Rm3tBHYf2FpMSsvHgod' WindowName: 'RJCXTNIfkulpeHgd1xYctR9RF3YxVeBJKYQu7A0XTaehlb8tRbhXVz9Az1I6BDvjwRgw6eX3a'
  • ClassName: 'NaQPFKnSJuhqhH2WlcvyL4MAeQXggMnn79XAVJRrz1uBdbraRvC4iU1b6GvS1TiZMqvUrwcY7' WindowName: 'XFyxfRWIz9RwJakyvPmMoLBCRyp0qZbXHjtanzWWpCmfLf8hgMcVOxm7E0c9GUa8m6xqqEZ1E'
  • ClassName: 'tm9WgMaF0mJKATWd43OflAQsoC7WO95efK2h3B98kTDHqyzKXoJMFchjR1wTYI67ekrUydLRJ' WindowName: 'eOpxcfBn4tzYABythRDUSLUcbCkFeXVwVQZaOA2jb1NDCX3vP20n39X6hhgnz4Mf1it18OLKd'
  • ClassName: 'GJhxWkhVYO3dJfBuCov1eETvOmdRXXNsyE4NHRkTZCBldIkbSUz2k4XdH9VxSffSaITvgEsji' WindowName: 'ykKPltKud5EUWDutAgMVsvmUM03YmjIqtYFpEFljgwsA1AnevjPJC0d543tUYLjC0XVLuq9Ca'
  • ClassName: 'rAnGePtx5v3gYKbBkp7iE8TLmAZusXVJpKqtgPAOg1vriJN04X29XdBh8j0SCA0zKFZdSKQc5' WindowName: 'HaJ5P1fJXE0YMq1we9QL2rKEs8yKDAVn3QLJwWy0vNKb4LTfLMMLq080gXW8zW5v6qCQNwWaE'
  • ClassName: 'qabztw5K1eD28Kin4mMxkcNZnWrc6hIXQdczX4fr0RMtivVlvkI3S1WSxzzthFYqGEdkVpeKg' WindowName: 'G35SqTGtifPRHmoGrgKq6MbYsSXvy60MjweSbK31tz14EbA1KG3aMSFgDmnfMwafStMicLMPC'
  • ClassName: 'hTmfAUKYckdKB9Ppfr6SkbeR8PKPlKtGBlyLUlctAOGXldP7MVJKo22zHcL8AII08n8YXDzJF' WindowName: 'swERoC0nE0pAli9Mk6pyZdABIGpASsMZ6uUeHJj8Ut6sSUOT0ouihnKJGjkvaPWolzchUSmJq'
  • ClassName: 'jBQjgnZSCe8nPQHnppZqt456uNhaAAZ7eJqXZMwECM9T0ci76RojHkpC99IR3WsIMd3jKuWwP' WindowName: '71MRVOgDko8fnPYlapdvxlUsBH29Cm3ORYkfrjRZDdw6LcpX33e1IOwWR2uaAtZVB5yi9ijSA'
  • ClassName: 'r7J1hAkTkUFvMA0OSa91e9gqVNBeg10gAI4OMrxF2ltRPWacKwhzQyw8byxIFwOQfxFYy0quu' WindowName: 'GXAPZHAD2vQkWrpqiwdo3Hrdt6z3lSTpgTpRpRVcwo6HM8uA8D9eE4ZADtmvWvN20LBHSkD6q'
  • ClassName: 'UTjlTOSj3iH7JTRsbYH133TyWLIB4G3sV0ykPds7HX27KbNCCytJR8Cu6XFptEIP68v8ZdV60' WindowName: '881nP7VxEE4FdgcL9fOPyc98bI89qTPFtysL1Q4GTOPwD7kkqPqQ5PNEEfuTlCH9WpIYaPHWf'
  • ClassName: 'hmWvn7MIr9oDUTOX7NYEkZgzUny1swObdYSEvWRBLzZ02h67YrlvBndn4cXPaoaKk5lQn33hf' WindowName: 'TmvHeuSEBMSPh2Q6dQAjy4KjsfSXF4YP8arF3SLLny30KKziHtRbOE2u8qvJP3B6Uiu1gJ03O'
  • ClassName: '5Ayy61leDYT3CEW8K69rklPGtfUR2IZ2mB1S7NLt2nQfj3SL3XByImciQTqVaAUnJvUmHVQGs' WindowName: 'CmZFOv1QDIIXJNZI95hFQr77BIElyct4Aj6PKnZpzRiKYpZgnSOKlq8AzrHqDoGL4RHyqyX3g'
  • ClassName: '8S4kwIgTxSl1C00GOzOLMrbAyfKUUTsGCoRblsaqv6UpdvNIsNrmwUlN5u9t3tgj2tusZBauF' WindowName: 'MeAjSWfchoZYFYZ5B6kzMCk8R6BEuZMrF6cI6NX8DYdD3ojxSnqPTGfRyilOYGxlSXPtLJboH'
  • ClassName: 'EWq1n8pIK3y8PebTkARVZR0DshPvYlRIDNgIaW8hqeueIFFc8Ah5QrfAPnUt1fm1jomYqLMlf' WindowName: '1JyHaoYLHGNfzs4hiV6eYBQFaJ81eyTn3iSAM5r4R3MBFj8vRrqVxLAOy99exXT5bbbvHYEMy'
  • ClassName: 'N8p5O7p6UMlRxwQ0gpLRWaNEKvGkmY5kinZQ6XeFHZl1F6yKWN9wGTC2s6aatIYHgVdPedIoA' WindowName: 'qg101S7HPjM8oTPRr0e6FAzwzAENDGJVm9kFydOVVq0pUZ63bMA4rciLwRDfospupEkLJQ65r'
  • ClassName: 'hzxfz0STGR3su0HxcrqCQMsVUX4jF7ZYNRVdoV5Y4fYPkSeGjxoXjAGxtI8m19vmCZI9YZU23' WindowName: 'o4opxOK84fta7oiKuQlPhKATD4GMsKNVH7Wfi1zg5YOvtVkrnzspgnKy5tETPiUphdxe2Scrb'
  • ClassName: '8ksHpDhFkSP3msI6XZMEwGusP3SjwgyDrgY9TcX1dY3RIctvUY16XSOiiZqTo9VxlSDaEFPgT' WindowName: 'hS46TFudBBKa5jiZPnCEDzHOTJcJwef0hg0ANLZMur7bed0KPb9PBkwzFeaKQbIbSBRl1scEx'
  • ClassName: 'hFO98XklvxFefZOTsKRPeWWsM3OLWrHd54Wg8NLSJh1DSdB7XbnwEP4cmXFQCLWMLzbV9NINA' WindowName: 'RWGap93S25ue9CHBn2TeWlQjRFp6NMgQ3msl2PbixNNgVGNTDB2hvzsojL6BYOXXsqwblyU7a'
  • ClassName: '0AiMpIzXoaswtGzU6wy9iUxz2Y2fKO8c7WYFWJhnUqUn6TDQvVpDlfyXC9nuPUABJkOmfySds' WindowName: 's79ax7uR5QwN3gcifOpKg0RM3RXuN3aKtr60OvEXdaEYS8fsa4aLEli2Yl4L4vSa6xKTm1QJJ'
  • ClassName: 'vxr08IES8jYNcr34xTft0d7ghZBWAv7vOaXryg6JJ69ehAZ8Ki063ra5c2DUIIq03fCdDDxaA' WindowName: 'PgWc6rzt26xoiruLrwxOPOKHqlvPsLsT7izFsP1j106ZpPpKU04KOk5Ua7LIrTuVH18CBktRr'
  • ClassName: 'EBt9S4DDQn19BblMuJs5c7LaHJ16TfkhzGDow7MneyNKzVlqet7FFsSNUVpy2I03lOJjOpuPR' WindowName: 'eNks7VZXGlnNqrOvpwNoiWqo3oHv84DQbhKSq6klv47OZi9wBBJYKEnxxuV1mj3g9vBJ2LTPn'
  • ClassName: 'Etz2meRpfwY3Rb07xoQ3jKRkDmupQrNsL1TmvYOZ5bL8lGfUOE5CIZLk4Nnar1jbJBuF9sP2w' WindowName: 'WU1bTwDwHKElzSSjBbvvi6X9ISz24DSpKSKQEDc8MolsspWqMwo2iSKoUn9jvXWnvbW0F0GH0'
  • ClassName: 'Wgxsxcwv8s0G9s83W4BNn3SyYcW0uxdCAB7nmt6658emjMaKXwNEFXgz2lIG41uJDsKLEubuH' WindowName: 'DPCZEYIFmh2KNfmJlqzWBvCXJxhZFaBpm1eHxtWPB1ItdsWlhi1vhT8FDDaKoHW2rLc6AvePJ'
  • ClassName: 'hREY7DLgjznUiKDG0mzmTJq4s8uQ5NLHrYzX4l28T8yGh5UaY0bytXhWmqflCvCViHKEtXTFK' WindowName: 'STB2EN0BCAquxpxf2AzCDJAs36iL06SiqRTTdrDnouIVLqOmUdgZXtS53IvDgj5ogqoUe3CHa'
  • ClassName: 'UvJTquguZlHg4yALGqKDZGxoOe4ZYyjogess9IUg7z2jqhEfxVJqn0Hiqfbroh4tkBMlNG8fs' WindowName: 'm9qx2ctP2HfowD8t408oH1PmUbEzvO2D3GWHdcVy3pukiyS5crtybk1crWfrFTqQfhtdHTwRW'
  • ClassName: 'BsORXtJTrPEvpoeCYHjZQnWIgNsQjiC0Y82GV5gMZ8pHG8vmB5uwGp1a83XIdD9d9dqvxWr1i' WindowName: 'SVgHCispIM9oCIpxKMcjIlYnFhGiU3Q1VBLAljpV00j6Gx2xDOyFyOIb5anh2CV0AgLTfbnLj'
  • ClassName: 'TY1SH4aSk6eXu8RAumtZfM15K4r9Xc2PkfrYQWDPotZIWI7qF4VkHbXt18J7NQQkGwrJFxR6N' WindowName: 'jM2zbncOGIWhSQHa53zPevMKwfbxzgyMxVMMkTRm0MKHCqzT0P5A2R8GpaaiWPLwDTAgZw3Yz'
  • ClassName: 'p5rVitT7qS6HVFpazsCxRBW8B9EZF9cieLr3N4dvVM24tZMkytGETz3g9YtwPrNZH0cPG0rNl' WindowName: 'm83uv8WaDDx47SfOAI8xkpL5gdRpIXJ6ztcvK8XzZbBbDr9YDQSYwvlefn03A5SQmAsorh9hw'
  • ClassName: 'SnlQy54Z3R5VZFhSMYbwdROW00ggvyP21OPXtq5aQOLvrgsyMXI3cLP38nDtYJ6IzKXuwzOiP' WindowName: 'a59W1paYLaqC9V3dRHvragmD4UZhnJDnd2NtE1cigJ0GSMdZyBb1T93lX9W5DrUyNzLMdvrxg'
  • ClassName: 'RofOQINge5pmyol0MB2oVMw8L3Nqd8sTmJG9VoxgBqTf8TbycFd1FvJHHSYLNNOKMqAQqHcNi' WindowName: 'cRU4EFXiDekJ3TdFcJUxBGesVbP8zkXSU9CePswDhQs8iDGo3rqPPhhmNrIHYdagMBstm5tpH'
  • ClassName: 'O3NPVQNjnEo925b76we7p5ieeI8tYWmFGzuR3cRjrXkzmQa4DXFe9OH46yIUFl0XjDqDsE9G4' WindowName: 'zCgWm0oojRZf5LDFzwJsEkG1BZUdWp6sah2jzzjFWtxsrDzQOU2vYTHHoJCDeC83luem7raLU'
  • ClassName: 'C32OM1JOkib5I5qY2lFhXWGXsC6Pt0GIsFTnTZSg06VDgG1FdC5dyGE2qW4HvjBRZVStdwwCU' WindowName: 'j711hzV7fdWFcRBREldWDBwkevQR4yfm8dE4WK2uFXHuibsiEsoM3wStIAQI66y2qtuF65y5q'
  • ClassName: 'qyiCvQEAVXHGUEnG96tWCTpbJXpgSkSjBb8QRKGcEr9EjJT8GSvwdkPZXdphPRP5Ylz86bsQe' WindowName: 'qtyKwsZSva2AIvKLuvHJniJMmpQNGl6WXVW0idt8Zaj95SzkXT8ZpDQjl947fr7MoUF0Flcbt'
  • ClassName: '8bIc6hBsZXDwghPpNQni4Lq5Tx60luda1xIhy5fBefyAMnFn1xH2rTdqgIkaE2HxsdX1KlWXt' WindowName: 'uFoiMD1uTyJ7xgEfAATAO8kk8zTp0KVDibIRxxEqm7GYOpb2ewRo8LXY4dLywY6pHUqINoKRX'
  • ClassName: '4IzwW8GrZPpwYWcp6k8cactZ8rqYI0jHSGvY134iPlCeClSxjb7OdAsExNBNcNDG5OqjGagEu' WindowName: 'biZj9SKb47QxlfFjnWpMXD22rqy3wHKdP8es092dAcDHXjkOCjQJ0cyIXmWiNHDahXnZfIpnL'
  • ClassName: 'a7ZYwr4aTG2C7Qia3eeMydkfj2i13Pl32CTfFJ8zmglOu2GohPm2YQox9Kos6Ydc0ahMkQYpM' WindowName: 'qrMZEYnTQmK7lIhDLqGDyxsvVr0wSSm5SgMHz26YjkS8taguJgNakyOO9TJXQXpS68k8Rbkxg'
  • ClassName: '4bVrNFVCYsA4K3Z6qeY0dLL7FNP3EehjTFOB7BoSptqXhGNFohRDz6vZVDReB6mxB0ZRaxbIR' WindowName: 'ihUPEYYFiiHS6HDN1kvhys8yv2BTixWgo5eeCVjy4wOCWaqQ12lrf58Tp9dlF4BG5xMLLGybR'
  • ClassName: '0QpZG9Uv54oGDDU5Qe8dZhX63rnPGGKZPb8jpgBfQtNRRxJ7Gc2dwPMY20H08Xwi0at2jVEr6' WindowName: 'diFwB4sAfmWR9Y4CP51DYzsDa6KVaDXAq6SHALXYpYf1bCi3eM6KWvIAASKJEO4Lb4bWozXys'
  • ClassName: 'CvxQXSd1tY9cmDzPdSIiwEtLHXVZsObjhSXpcfJ2aHgWeujLwzo8X96pNpLPnVhxSPRW0M25Q' WindowName: '5F6wvy5JvKJa2djXrvvFDy6HLhk91Rggxp9WW1wYsVx5W0yG83ALuOHiI6yefMSqsKTlXhBhU'
  • ClassName: '9RxG5WLsE9f6ebsOTWbp8XIDgvWpgXGELxdEQOmiogcVQq7sZe2nsaw4Ee2fgWq21JU2Idl6E' WindowName: '3S2GU59vVJVXO6aMx3QRb0xN2pI1y7pEgBpN6u9bEKwO76uAIrnHfcFYWeSgMJM08iYfRYDLB'
  • ClassName: 'R85PlbWG9mVUhDpTNHVcrOHYmmgZ0TwQHuylQvPuof9VjztUg5Wq0L8hVnUsngdq6ON7GZ3fb' WindowName: 'zSJsfumcgLBzVfQv2MeiKlEOowgmHlpblyDwOvqaIegkroPTZZPyeZjCzIKAtaBnf44veM0gC'
  • ClassName: 'XLxPSKaDY8OyVSLCLx9qzWX7Y39FM1Zfsx5SvcnmoggorM1U51RmUM5tJt34cNSDREdiozwEK' WindowName: 'RUmj4YsuFJHCGRQOUls7H21KXyymfdbnvu5s1AtEEcxJIghMnitAT5n5IELkPvJiVfT9d0Kws'
Executes the following
  • '%WINDIR%\microsoft.net\framework\v4.0.30319\applaunch.exe'

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android