マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Trojan.Inject1.33113

Added to the Dr.Web virus database: 2013-12-03

Virus description added:

Technical Information

Malicious functions:
Creates and executes the following:
  • '%HOMEPATH%\L67D\Products_We_Want.exe'
Modifies file system :
Creates the following files:
  • %HOMEPATH%\L67D\K92639L63741.JDI
  • %HOMEPATH%\L67D\E37796Q26060.MOC
  • %HOMEPATH%\L67D\49448.GZE
  • %HOMEPATH%\L67D\L49002V67457.DXM
  • %HOMEPATH%\L67D\R58142W99343.SLD
  • %HOMEPATH%\L67D\H61393W67828.ASJ
  • %HOMEPATH%\L67D\88802.PMN
  • %HOMEPATH%\L67D\9784.UYL
  • %HOMEPATH%\L67D\R70437E58112.KSA
  • %HOMEPATH%\L67D\W76596F29725.OHO
  • %HOMEPATH%\L67D\N49584D48672.SCL
  • %HOMEPATH%\L67D\B4088N44575.WWF
  • %HOMEPATH%\L67D\20012.GLW
  • %HOMEPATH%\L67D\77461.ORB
  • %HOMEPATH%\L67D\78301.REB
  • %HOMEPATH%\L67D\98435.PVJ
  • %HOMEPATH%\L67D\97427.EYE
  • %HOMEPATH%\L67D\66292.PUM
  • %HOMEPATH%\L67D\M70349R39867.QRR
  • %HOMEPATH%\L67D\73743.WFH
  • %HOMEPATH%\L67D\24445.EUS
  • %HOMEPATH%\L67D\9908.OYR
  • %HOMEPATH%\L67D\34135.IEL
  • %HOMEPATH%\L67D\11339.QXL
  • %HOMEPATH%\L67D\22149.QOY
  • %HOMEPATH%\L67D\H54748M15319.CBU
  • %HOMEPATH%\L67D\O91252C38988.UPO
  • %HOMEPATH%\L67D\G9382L61677.KHX
  • %HOMEPATH%\L67D\52144.JCV
  • %HOMEPATH%\L67D\Z86418K77256.NQK
  • %HOMEPATH%\L67D\D57132V58849.ZVC
  • %HOMEPATH%\L67D\V52965N11759.VYD
  • %HOMEPATH%\L67D\52393.PXU
  • %HOMEPATH%\L67D\40810.TTE
  • %HOMEPATH%\L67D\R52630B89030.QXX
  • %HOMEPATH%\L67D\84401.NYC
  • %HOMEPATH%\L67D\74831.ZJB
  • %HOMEPATH%\L67D\K16153Y39667.WAA
  • %HOMEPATH%\L67D\O12774E35757.UQG
  • %HOMEPATH%\L67D\49454.RAU
  • %HOMEPATH%\L67D\T72270E71884.OIK
  • %HOMEPATH%\L67D\56973.ADB
  • %HOMEPATH%\L67D\F43270C79489.BET
  • %HOMEPATH%\L67D\C15138O67774.NHL
  • %HOMEPATH%\L67D\I3150V75775.WFT
  • %HOMEPATH%\L67D\G24784L13401.SBF
  • %HOMEPATH%\L67D\47513.TNB
  • %HOMEPATH%\L67D\31858.SNS
  • %HOMEPATH%\L67D\V40922P9464.MKC
  • %HOMEPATH%\L67D\18142.VVZ
  • %HOMEPATH%\L67D\O49127K10653.GTV
  • %HOMEPATH%\L67D\H19873S38141.EJG
  • %HOMEPATH%\L67D\K93231S24450.HNB
  • %HOMEPATH%\L67D\64982.IVD
  • %HOMEPATH%\L67D\W27844D15148.OXS
  • %HOMEPATH%\L67D\E33967O98772.SLK
  • %HOMEPATH%\L67D\65501.IQH
  • %HOMEPATH%\L67D\L67556T10613.SQH
  • %HOMEPATH%\L67D\83108.SPL
  • %HOMEPATH%\L67D\C47766L85390.DLS
  • %HOMEPATH%\L67D\27582.MRR
  • %HOMEPATH%\L67D\27371.XTN
  • %HOMEPATH%\L67D\96726.KAS
  • %HOMEPATH%\L67D\K76197Z77270.TYY
  • %HOMEPATH%\L67D\53489.ZPO
  • %HOMEPATH%\L67D\4573.CKV
  • %HOMEPATH%\L67D\52732.BDK
  • %HOMEPATH%\L67D\29874.RWJ
  • %HOMEPATH%\L67D\33486.INM
  • %HOMEPATH%\L67D\N16607O2798.MXO
  • %HOMEPATH%\L67D\92666.HGO
  • %HOMEPATH%\L67D\M23388M1804.YJD
  • %HOMEPATH%\L67D\A34383H45344.OCA
  • %HOMEPATH%\L67D\46651.UPT
  • %HOMEPATH%\L67D\51965.YAO
  • %HOMEPATH%\L67D\J75555G72868.CYG
  • %HOMEPATH%\L67D\H70175E8012.IUN
  • %HOMEPATH%\L67D\Q40747H29447.RPX
  • %HOMEPATH%\L67D\78209.TMD
  • %HOMEPATH%\L67D\67851.RNM
  • %HOMEPATH%\L67D\C53138E57806.CQA
  • %HOMEPATH%\L67D\14516.FYV
  • %HOMEPATH%\L67D\K27698I41379.ETD
  • %HOMEPATH%\L67D\49139.QVK
  • %HOMEPATH%\L67D\62053.XTZ
  • %HOMEPATH%\L67D\Q96249N34135.YJC
  • %HOMEPATH%\L67D\82343.HQG
  • %HOMEPATH%\L67D\85357.EVB
  • %HOMEPATH%\L67D\43529.ZQF
  • %HOMEPATH%\L67D\Z21725G9822.QDI
  • %HOMEPATH%\L67D\I10094F81047.SPT
  • %HOMEPATH%\L67D\2749.GNM
  • %HOMEPATH%\L67D\N51745G20274.LME
  • %HOMEPATH%\L67D\F48496N71292.ZLS
  • %HOMEPATH%\L67D\87674.WIF
  • %HOMEPATH%\L67D\L91813A98613.BXH
  • %HOMEPATH%\L67D\N80414T97838.XRO
  • %HOMEPATH%\L67D\C96596W12193.PTE
  • %HOMEPATH%\L67D\Q96841B1628.SUE
  • %HOMEPATH%\L67D\32388.JTP
  • %HOMEPATH%\L67D\P14824X99903.ZTU
  • %HOMEPATH%\L67D\E68129A22092.BYH
  • %HOMEPATH%\L67D\8695.EBP
  • %HOMEPATH%\L67D\4301.SJQ
  • %HOMEPATH%\L67D\95616.CEZ
  • %HOMEPATH%\L67D\7112.VCE
  • %HOMEPATH%\L67D\R23497S21260.LCD
  • %HOMEPATH%\L67D\29101.TVP
  • %HOMEPATH%\L67D\79328.XXI
  • %HOMEPATH%\L67D\76611.ADS
  • %HOMEPATH%\L67D\65046.ZOO
  • %HOMEPATH%\L67D\86221.KPJ
  • %HOMEPATH%\L67D\C43142L23700.BCS
  • %HOMEPATH%\L67D\28672.QWX
  • %HOMEPATH%\L67D\B32292Z30920.KLF
  • %HOMEPATH%\L67D\F40139X38205.SEP
  • %HOMEPATH%\L67D\M92000Y92144.DRA
  • %HOMEPATH%\L67D\37882.GTO
  • %HOMEPATH%\L67D\25184.ZLD
  • %HOMEPATH%\L67D\B46910S19561.DCW
  • %HOMEPATH%\L67D\S28305Y11200.RCO
  • %HOMEPATH%\L67D\D13026I41826.GFZ
  • %HOMEPATH%\L67D\S84443V86753.GOJ
  • %HOMEPATH%\L67D\E51070F27836.YCF
  • %HOMEPATH%\L67D\64753.AWN
  • %HOMEPATH%\L67D\K85884M40547.YZK
  • %HOMEPATH%\L67D\2854.JAH
  • %HOMEPATH%\L67D\D22418Z33900.BGW
  • %HOMEPATH%\L67D\83712.QAG
  • %HOMEPATH%\L67D\P76182T18430.YRS
  • %HOMEPATH%\L67D\C53589T14317.LAJ
  • %HOMEPATH%\L67D\76071.OWU
  • %HOMEPATH%\L67D\I46299R55100.YSU
  • %HOMEPATH%\L67D\C21709N88367.THQ
  • %HOMEPATH%\L67D\58271.IHB
  • %HOMEPATH%\L67D\D66973Q96782.VSG
  • %HOMEPATH%\L67D\73772.DLX
  • %HOMEPATH%\L67D\86497.UNO
  • %HOMEPATH%\L67D\7716.KPY
  • %HOMEPATH%\L67D\N74973F11072.GKS
  • %HOMEPATH%\L67D\U13898M73510.IEP
  • %HOMEPATH%\L67D\65986.XBI
  • %HOMEPATH%\L67D\44587.XKC
  • %HOMEPATH%\L67D\80616.SVK
  • %HOMEPATH%\L67D\Q43417C86089.XPF
  • %HOMEPATH%\L67D\T64609V60497.CBJ
  • %HOMEPATH%\L67D\9048.AGG
  • %HOMEPATH%\L67D\36941.VQW
  • %HOMEPATH%\L67D\38632.YZD
  • %HOMEPATH%\L67D\Z6967K84050.XSM
  • %HOMEPATH%\L67D\T85574Y51688.LKG
  • %HOMEPATH%\L67D\46516.KLH
  • %HOMEPATH%\L67D\N85654L42004.QFZ
  • %HOMEPATH%\L67D\61721.EGT
  • %HOMEPATH%\L67D\Q71041Y92356.GBQ
  • %HOMEPATH%\L67D\43638.HOZ
  • %HOMEPATH%\L67D\95329.XVB
  • %HOMEPATH%\L67D\W20038Q9068.FTX
  • %HOMEPATH%\L67D\O21499H12063.FNY
  • %HOMEPATH%\L67D\81586.DNP
  • %HOMEPATH%\L67D\W90937M96173.LLA
  • %HOMEPATH%\L67D\37491.OEB
  • %HOMEPATH%\L67D\L67023L77949.YWQ
  • %HOMEPATH%\L67D\Q38370R3755.VRO
  • %HOMEPATH%\L67D\2950.CCB
  • %HOMEPATH%\L67D\5418.DEZ
  • %HOMEPATH%\L67D\3335.SNL
  • %HOMEPATH%\L67D\Y79908H27360.TGO
  • %HOMEPATH%\L67D\E4350S6627.QDR
  • %HOMEPATH%\L67D\B9163A25820.NMO
  • %HOMEPATH%\L67D\A19183H70489.DTU
  • %HOMEPATH%\L67D\93975.DYO
  • %HOMEPATH%\L67D\92649.SRM
  • %HOMEPATH%\L67D\V55576D16307.QMI
  • %HOMEPATH%\L67D\A4222B72029.ZOR
  • %HOMEPATH%\L67D\17966.OQX
  • %HOMEPATH%\L67D\T13572U29096.ELA
  • %HOMEPATH%\L67D\47916.WQE
  • %HOMEPATH%\L67D\59708.ZFK
  • %HOMEPATH%\L67D\5377.FCC
  • %HOMEPATH%\L67D\B5709O32011.DQF
  • %HOMEPATH%\L67D\74516.JOO
  • %HOMEPATH%\L67D\L61726P31825.PXY
  • %HOMEPATH%\L67D\87605.JGA
  • %HOMEPATH%\L67D\79056.IAL
  • %HOMEPATH%\L67D\E10746D61713.KHX
  • %HOMEPATH%\L67D\78070.EYH
  • %HOMEPATH%\L67D\Q34645T27440.LQR
  • %HOMEPATH%\L67D\40585.IJZ
  • %HOMEPATH%\L67D\53842.OGA
  • %HOMEPATH%\L67D\P98856H71052.CCS
  • %HOMEPATH%\L67D\5653.ZEZ
  • %HOMEPATH%\L67D\C56784R67806.VZQ
  • %HOMEPATH%\L67D\39491.IYT
  • %HOMEPATH%\L67D\S78482H33269.HGK
  • %HOMEPATH%\L67D\D98875A41059.LKA
  • %HOMEPATH%\L67D\39934.KDG
  • %HOMEPATH%\L67D\E78054O21153.DOA
  • %HOMEPATH%\L67D\LK.MDK
  • %HOMEPATH%\L67D\L41252K12667.UIY
  • %HOMEPATH%\Y67P29.FL2
  • %TEMP%\aut1.tmp
  • %HOMEPATH%\L67D\E46020X35252.RLV
  • %HOMEPATH%\L67D\78780.UGN
  • %HOMEPATH%\L67D\43136.WCO
  • %HOMEPATH%\L67D\88521.EDS
  • %HOMEPATH%\L67D\77672.IFO
  • %HOMEPATH%\L67D\F25706K86152.YBX
  • %HOMEPATH%\L67D\W38603Y70481.YSG
  • %HOMEPATH%\L67D\65037.PYM
  • %HOMEPATH%\L67D\56347.CAL
  • %HOMEPATH%\L67D\51482.SOH
  • %HOMEPATH%\L67D\94409.NVX
  • %HOMEPATH%\L67D\53720.RVK
  • %HOMEPATH%\L67D\50630.ATH
  • %HOMEPATH%\L67D\15984.MKT
  • %HOMEPATH%\L67D\6195.ROK
  • %HOMEPATH%\L67D\51323.AUQ
  • %HOMEPATH%\L67D\X99086S39319.GCA
  • %HOMEPATH%\L67D\62699.DZB
  • %HOMEPATH%\L67D\Y79106C70793.XGP
  • %HOMEPATH%\L67D\31326.LVJ
  • %HOMEPATH%\L67D\95164.EVX
  • %HOMEPATH%\L67D\25367.YPK
  • %HOMEPATH%\L67D\81281.XNU
  • %HOMEPATH%\L67D\6316.UTF
  • %HOMEPATH%\L67D\B38711C10041.RWT
  • %HOMEPATH%\L67D\G11551S44781.LWD
  • %HOMEPATH%\L67D\17813.LEI
  • %HOMEPATH%\L67D\J38871J35797.PQY
  • %HOMEPATH%\L67D\64974.PWB
  • %HOMEPATH%\L67D\M62994Q45797.CRC
  • %HOMEPATH%\L67D\Y33857F95523.YVU
  • %HOMEPATH%\L67D\67172.VGS
  • %HOMEPATH%\L67D\M74194K26154.NGT
  • %HOMEPATH%\L67D\A58368L66478.VOS
  • %HOMEPATH%\L67D\60053.TWL
  • %HOMEPATH%\L67D\B26112D61627.JAK
  • %HOMEPATH%\L67D\87678.BRR
  • %HOMEPATH%\L67D\X21929O95958.HAK
  • %HOMEPATH%\L67D\E82932H42777.NFX
  • %HOMEPATH%\L67D\G7528H47908.HNZ
  • %HOMEPATH%\L67D\A61622A43740.OOF
  • %HOMEPATH%\L67D\D83200K54245.AXG
  • %HOMEPATH%\L67D\O63383C32598.JBW
  • %HOMEPATH%\L67D\F53304C6097.NIZ
  • %HOMEPATH%\L67D\U68832H59871.UPM
  • %HOMEPATH%\L67D\T87018I27666.YGQ
  • %HOMEPATH%\L67D\87090.ZMA
  • %HOMEPATH%\L67D\60527.SUA
  • %HOMEPATH%\L67D\68886.VWZ
  • %HOMEPATH%\L67D\3274.DWU
  • %HOMEPATH%\L67D\46364.JQK
  • %HOMEPATH%\L67D\74834.ZKR
  • %HOMEPATH%\L67D\54341.CVI
  • %HOMEPATH%\L67D\64993.XVN
  • %HOMEPATH%\L67D\23384.GCI
  • %HOMEPATH%\L67D\82556.NPL
  • %HOMEPATH%\L67D\95601.QNW
  • %HOMEPATH%\L67D\39564.CLW
  • %HOMEPATH%\L67D\63785.DUB
  • %HOMEPATH%\L67D\69029.DGU
  • %HOMEPATH%\L67D\50016.GEB
  • %HOMEPATH%\L67D\I10124U9240.EHW
  • %HOMEPATH%\L67D\72476.BVO
  • %HOMEPATH%\L67D\D15307C86261.KLE
  • %HOMEPATH%\L67D\S96726J59573.IJI
  • %HOMEPATH%\L67D\X91972V95541.EGW
  • %HOMEPATH%\L67D\2081.ZMN
  • %HOMEPATH%\L67D\Y21078M31685.JVC
  • %HOMEPATH%\L67D\17551.LQD
  • %HOMEPATH%\L67D\32063.AQH
  • %HOMEPATH%\L67D\K46539R31798.LUD
  • %HOMEPATH%\L67D\15222.DNJ
  • %HOMEPATH%\L67D\V56448J1839.EXB
  • %HOMEPATH%\L67D\O28709T84748.ESE
  • %HOMEPATH%\L67D\26383.EGU
  • %HOMEPATH%\L67D\30768.DQI
  • %HOMEPATH%\L67D\L58181E72876.USG
  • %HOMEPATH%\L67D\24162.FZO
  • %HOMEPATH%\L67D\69259.GPQ
  • %HOMEPATH%\L67D\E20573R56177.SOR
  • %HOMEPATH%\L67D\39045.VRY
  • %HOMEPATH%\L67D\44762.LHV
  • %HOMEPATH%\L67D\T24069A46762.WFW
  • %HOMEPATH%\L67D\Q87140O33541.OLW
  • %HOMEPATH%\L67D\83851.KQS
  • %HOMEPATH%\L67D\T3958I16074.TGC
  • %HOMEPATH%\L67D\N47447Z65719.ZPT
  • %HOMEPATH%\L67D\B35537N30836.SAP
  • %HOMEPATH%\L67D\Z43139C97479.RSB
  • %HOMEPATH%\L67D\38341.AIY
  • %HOMEPATH%\L67D\O76271Q42142.UQL
  • %HOMEPATH%\L67D\L75099M39306.PGE
  • %HOMEPATH%\L67D\69469.XFB
  • %HOMEPATH%\L67D\U40186R83069.SNE
  • %HOMEPATH%\L67D\11880.PPG
  • %HOMEPATH%\L67D\91265.ANR
  • %HOMEPATH%\L67D\25835.VDU
  • %HOMEPATH%\L67D\54965.AQP
  • %HOMEPATH%\L67D\77754.ZYS
  • %HOMEPATH%\L67D\33788.YPK
  • %HOMEPATH%\L67D\Q81639F28616.TZR
  • %HOMEPATH%\L67D\46607.EHH
  • %HOMEPATH%\L67D\16715.PRN
  • %HOMEPATH%\L67D\J76767V61491.WKV
  • %HOMEPATH%\L67D\L50396M3772.MWI
  • %HOMEPATH%\L67D\26388.DHP
  • %HOMEPATH%\L67D\O6036T16961.AVX
  • %HOMEPATH%\L67D\24468.SQC
  • %HOMEPATH%\L67D\E69122Q87443.GJR
  • %HOMEPATH%\L67D\45533.RUC
  • %HOMEPATH%\L67D\P44950H51362.FQA
  • %HOMEPATH%\L67D\I40734J7480.KMX
  • %HOMEPATH%\L67D\S67861Z72067.MJB
  • %HOMEPATH%\L67D\96176.LAO
  • %HOMEPATH%\L67D\84797.ITT
  • %HOMEPATH%\L67D\17913.WUE
  • %HOMEPATH%\L67D\N81795W97407.GSS
  • %HOMEPATH%\L67D\Z32254M62007.SGG
  • %HOMEPATH%\L67D\45279.OVP
  • %HOMEPATH%\L67D\W30913V75988.IEM
  • %HOMEPATH%\L67D\92013.OKT
  • %HOMEPATH%\L67D\A33827Z71597.OQI
  • %HOMEPATH%\L67D\D52860V68980.IWT
  • %HOMEPATH%\L67D\28220.BQO
  • %HOMEPATH%\L67D\W97023Z70942.MWZ
  • %HOMEPATH%\L67D\70824.LFT
  • %HOMEPATH%\L67D\H16748Q30749.ADQ
  • %HOMEPATH%\L67D\66991.QLS
  • %HOMEPATH%\L67D\5917.OKM
  • %HOMEPATH%\L67D\37537.DQX
  • %HOMEPATH%\L67D\86079.TAC
  • %HOMEPATH%\L67D\71347.DHO
  • %HOMEPATH%\L67D\N23579D37982.GAR
  • %HOMEPATH%\L67D\H71560E29901.XBB
  • %HOMEPATH%\L67D\O17794G35388.VMF
  • %HOMEPATH%\L67D\L7053M99389.CKD
  • %HOMEPATH%\L67D\79134.RUJ
  • %HOMEPATH%\L67D\L78803A71466.UFH
  • %HOMEPATH%\L67D\A39619S14847.XUU
  • %HOMEPATH%\L67D\S89385I56958.ZVO
  • %HOMEPATH%\L67D\9209.VFK
  • %HOMEPATH%\L67D\L6278T76161.MSR
  • %HOMEPATH%\L67D\98201.KZG
  • %HOMEPATH%\L67D\67566.KZS
  • %HOMEPATH%\L67D\P19512C59657.BMI
  • %HOMEPATH%\L67D\K53642N16798.WDQ
  • %HOMEPATH%\L67D\59098.OZK
  • %HOMEPATH%\L67D\G66927A12329.QHU
  • %HOMEPATH%\L67D\Y68240M52931.QZB
  • %HOMEPATH%\L67D\8073.VFS
  • %HOMEPATH%\L67D\5712.DAH
  • %HOMEPATH%\L67D\28878.MJJ
  • %HOMEPATH%\L67D\54966.NNA
  • %HOMEPATH%\L67D\E99467D65065.KUW
  • %HOMEPATH%\L67D\G91909A6404.CHU
  • %HOMEPATH%\L67D\14233.HXE
  • %HOMEPATH%\L67D\9961.KXH
  • %HOMEPATH%\L67D\N18357W82058.DXD
  • %HOMEPATH%\L67D\18518.QQA
  • %HOMEPATH%\L67D\A60219W87394.WEI
  • %HOMEPATH%\L67D\Y23982E4470.MQX
  • %HOMEPATH%\L67D\8862.BJC
  • %HOMEPATH%\L67D\78061.NCA
  • %HOMEPATH%\L67D\A56440B65369.WZM
  • %HOMEPATH%\L67D\O1106T81653.GJA
  • %HOMEPATH%\L67D\8775.NQV
  • %HOMEPATH%\L67D\A60428F58000.RPH
  • %HOMEPATH%\L67D\B43940O17254.NYM
  • %HOMEPATH%\L67D\U58995M76714.SKT
  • %HOMEPATH%\L67D\E50196L45875.OFY
  • %HOMEPATH%\L67D\49671.GYJ
  • %HOMEPATH%\L67D\C11840S53384.YBA
  • %HOMEPATH%\L67D\B52186T49079.BNQ
  • %HOMEPATH%\L67D\5047.EAX
  • %HOMEPATH%\L67D\88818.HLH
  • %HOMEPATH%\L67D\X96800B55222.CPP
  • %HOMEPATH%\L67D\O60459Y58351.DWU
  • %HOMEPATH%\L67D\C68851A87320.CJH
  • %HOMEPATH%\L67D\65107.LLN
  • %HOMEPATH%\L67D\H92968G35179.APS
  • %HOMEPATH%\L67D\O16103T90790.NPJ
  • %HOMEPATH%\L67D\57348.VSS
  • %HOMEPATH%\L67D\L7192G83260.KLG
  • %HOMEPATH%\L67D\60239.FES
  • %HOMEPATH%\L67D\55373.KDV
  • %HOMEPATH%\L67D\P75679J21589.SSW
  • %HOMEPATH%\L67D\50763.AZS
  • %HOMEPATH%\L67D\93623.ELR
  • %HOMEPATH%\L67D\L77708T19374.TCP
  • %HOMEPATH%\L67D\56827.IKH
  • %HOMEPATH%\L67D\K27352Z44363.PIW
  • %HOMEPATH%\L67D\N2928T47276.NZD
  • %HOMEPATH%\L67D\5817.UYX
  • %HOMEPATH%\L67D\W43136D27498.KBV
  • %HOMEPATH%\L67D\84707.IEJ
  • %HOMEPATH%\L67D\H98892A78979.XWZ
  • %HOMEPATH%\L67D\V54322T61592.IUO
  • %HOMEPATH%\L67D\X76069C16709.WDL
  • %HOMEPATH%\L67D\89757.BMW
  • %HOMEPATH%\L67D\59988.NNT
  • %HOMEPATH%\L67D\Products_We_Want.exe
  • %HOMEPATH%\L67D\P62035W44119.JEI
  • %HOMEPATH%\L67D\29114.DOT
  • %HOMEPATH%\L67D\G81052L80325.EHK
  • %HOMEPATH%\L67D\68559.YVA
  • %HOMEPATH%\L67D\X83678A44957.FOO
  • %HOMEPATH%\L67D\O30419Y92635.UOP
  • %HOMEPATH%\L67D\58265.FWH
  • %HOMEPATH%\L67D\92335.IDU
  • %HOMEPATH%\L67D\Y61174W57452.IZY
  • %HOMEPATH%\L67D\73824.IXL
  • %HOMEPATH%\L67D\79475.SGN
  • %HOMEPATH%\L67D\V56671O55112.OBQ
  • %HOMEPATH%\L67D\29996.FRS
  • %HOMEPATH%\L67D\E41740K91689.VNQ
  • %HOMEPATH%\L67D\O73541F87071.VXC
  • %HOMEPATH%\L67D\K55647P59220.NBL
  • %HOMEPATH%\L67D\63192.XSJ
  • %HOMEPATH%\L67D\43630.JWT
  • %HOMEPATH%\L67D\28294.THS
  • %HOMEPATH%\L67D\91912.UVU
  • %HOMEPATH%\L67D\B42598Z21240.OIT
  • %HOMEPATH%\L67D\85361.SSG
  • %HOMEPATH%\L67D\Z99851D59587.UZI
  • %HOMEPATH%\L67D\19753.NTZ
  • %HOMEPATH%\L67D\87834.FSQ
  • %HOMEPATH%\L67D\30988.HEB
  • %HOMEPATH%\L67D\93911.MHZ
  • %HOMEPATH%\L67D\47171.GXZ
  • %HOMEPATH%\L67D\G90494S22419.XHE
  • %HOMEPATH%\L67D\Q70927C98242.PAO
  • %HOMEPATH%\L67D\E3155V54417.RRP
  • %HOMEPATH%\L67D\E78690F22703.QTF
  • %HOMEPATH%\L67D\E65664P71033.MQW
  • %HOMEPATH%\L67D\75249.KNS
  • %HOMEPATH%\L67D\4160.XUX
  • %HOMEPATH%\L67D\T26760I84871.FIH
  • %HOMEPATH%\L67D\63680.FMG
  • %HOMEPATH%\L67D\35338.VYQ
  • %HOMEPATH%\L67D\J94334T74876.OCG
  • %HOMEPATH%\L67D\57265.LYY
  • %HOMEPATH%\L67D\L3882O44852.BJJ
  • %HOMEPATH%\L67D\E54202M33321.PGO
  • %HOMEPATH%\L67D\39961.DEP
  • %HOMEPATH%\L67D\C95335J46852.AKH
  • %HOMEPATH%\L67D\82710.XUF
  • %HOMEPATH%\L67D\68761.VZL
  • %HOMEPATH%\L67D\J82216K31082.RQT
  • %HOMEPATH%\L67D\26586.ZML
  • %HOMEPATH%\L67D\F23488H8493.PMN
  • %HOMEPATH%\L67D\65771.HLA
  • %HOMEPATH%\L67D\I83104W91261.WUW
  • %HOMEPATH%\L67D\G24494E6363.RVJ
  • %HOMEPATH%\L67D\22339.LAS
  • %HOMEPATH%\L67D\F78212N70029.DWQ
  • %HOMEPATH%\L67D\P39202A90440.FGE
  • %HOMEPATH%\L67D\I44086K51320.XXO
  • %HOMEPATH%\L67D\R41152B76502.BNP
  • %HOMEPATH%\L67D\I65882E32920.RUZ
  • %HOMEPATH%\L67D\K32249F75339.TTK
  • %HOMEPATH%\L67D\53270.ZMS
  • %HOMEPATH%\L67D\10047.RCY
  • %HOMEPATH%\L67D\23522.IDO
  • %HOMEPATH%\L67D\S37376W20213.ORV
  • %HOMEPATH%\L67D\48634.UXX
  • %HOMEPATH%\L67D\16350.ENQ
  • %HOMEPATH%\L67D\P52476V97100.MPI
  • %HOMEPATH%\L67D\X46824N63321.VAJ
  • %HOMEPATH%\L67D\16396.GSO
  • %HOMEPATH%\L67D\Z72178M22996.SEH
  • %HOMEPATH%\L67D\68293.BZX
  • %HOMEPATH%\L67D\79140.LCG
  • %HOMEPATH%\L67D\R49511Y89553.ROP
  • %HOMEPATH%\L67D\C29054I40402.OOF
  • %HOMEPATH%\L67D\C76095Y32408.UXY
  • %HOMEPATH%\L67D\19205.IIL
  • %HOMEPATH%\L67D\46293.PPZ
  • %HOMEPATH%\L67D\G2782Q28784.SIE
  • %HOMEPATH%\L67D\29267.ATO
  • %HOMEPATH%\L67D\36078.TUU
  • %HOMEPATH%\L67D\E76980D86613.FYQ
  • %HOMEPATH%\L67D\95116.RBY
  • %HOMEPATH%\L67D\S95203L79254.KNT
  • %HOMEPATH%\L67D\Y11689J58804.NTI
  • %HOMEPATH%\L67D\D72183L24522.ILI
  • %HOMEPATH%\L67D\O61615B23422.HBA
  • %HOMEPATH%\L67D\69137.LZO
  • %HOMEPATH%\L67D\88737.KGN
  • %HOMEPATH%\L67D\M39917I22793.LUW
  • %HOMEPATH%\L67D\82728.DNZ
  • %HOMEPATH%\L67D\Q10759V44992.BUN
  • %HOMEPATH%\L67D\F30501O3184.IRY
  • %HOMEPATH%\L67D\72002.BHD
  • %HOMEPATH%\L67D\27728.XGB
  • %HOMEPATH%\L67D\F49733O62278.RHB
  • %HOMEPATH%\L67D\L41031H43193.PWY
  • %HOMEPATH%\L67D\9874.CCE
  • %HOMEPATH%\L67D\59658.VFA
  • %HOMEPATH%\L67D\H44194R50174.POA
  • %HOMEPATH%\L67D\L41431M67022.LNB
  • %HOMEPATH%\L67D\A72976S15078.FRE
  • %HOMEPATH%\L67D\I28486O29123.KQL
  • %HOMEPATH%\L67D\34585.GFG
  • %HOMEPATH%\L67D\44463.BWY
  • %HOMEPATH%\L67D\S71450Y50094.MTO
  • %HOMEPATH%\L67D\H39816U23020.GQH
  • %HOMEPATH%\L67D\5795.VGE
  • %HOMEPATH%\L67D\75237.FNR
  • %HOMEPATH%\L67D\F98812W85930.OON
  • %HOMEPATH%\L67D\I68105J10065.OUS
  • %HOMEPATH%\L67D\57491.AYK
  • %HOMEPATH%\L67D\51640.YQJ
  • %HOMEPATH%\L67D\10608.IGG
  • %HOMEPATH%\L67D\86205.OGF
  • %HOMEPATH%\L67D\2938.EFN
  • %HOMEPATH%\L67D\Q54422F71160.CWY
  • %HOMEPATH%\L67D\86949.AFF
  • %HOMEPATH%\L67D\S93988X83620.HYC
  • %HOMEPATH%\L67D\C13507G16941.MDQ
  • %HOMEPATH%\L67D\O99808S33020.NSH
  • %HOMEPATH%\L67D\N60777S63737.MXP
  • %HOMEPATH%\L67D\J54486F93833.GJP
  • %HOMEPATH%\L67D\91308.VWI
  • %HOMEPATH%\L67D\K21952L28000.OLO
  • %HOMEPATH%\L67D\U88606H4598.HCU
  • %HOMEPATH%\L67D\63964.JVI
  • %HOMEPATH%\L67D\20629.DHX
  • %HOMEPATH%\L67D\T32704A89127.ZDT
  • %HOMEPATH%\L67D\21546.ZUL
  • %HOMEPATH%\L67D\52530.CXQ
  • %HOMEPATH%\L67D\2720.CTI
  • %HOMEPATH%\L67D\G17634M89261.DBQ
  • %HOMEPATH%\L67D\34507.ROW
  • %HOMEPATH%\L67D\U45510C46082.YXZ
  • %HOMEPATH%\L67D\7019.IIP
  • %HOMEPATH%\L67D\96725.XSC
  • %HOMEPATH%\L67D\D9015S88955.THV
  • %HOMEPATH%\L67D\Z39612H43778.QWQ
  • %HOMEPATH%\L67D\29785.OSA
  • %HOMEPATH%\L67D\C17466N22554.RKI
  • %HOMEPATH%\L67D\56327.DVH
  • %HOMEPATH%\L67D\62358.IIC
  • %HOMEPATH%\L67D\M31645U81967.DCQ
  • %HOMEPATH%\L67D\I36526I59773.LDK
  • %HOMEPATH%\L67D\K8860E54197.MIH
  • %HOMEPATH%\L67D\64734.MLS
  • %HOMEPATH%\L67D\14218.QXQ
  • %HOMEPATH%\L67D\77744.TWJ
  • %HOMEPATH%\L67D\E43129W46599.NCB
  • %HOMEPATH%\L67D\M86466J73005.EGW
  • %HOMEPATH%\L67D\A1318D60694.UXS
  • %HOMEPATH%\L67D\J27206C92834.SCG
  • %HOMEPATH%\L67D\83407.JRH
  • %HOMEPATH%\L67D\J27408B20666.SGU
  • %HOMEPATH%\L67D\C1437O1793.UYD
  • %HOMEPATH%\L67D\H39112L16663.KVH
  • %HOMEPATH%\L67D\16282.CIM
  • %HOMEPATH%\L67D\70220.ZTF
  • %HOMEPATH%\L67D\37921.LRH
  • %HOMEPATH%\L67D\40765.SBR
  • %HOMEPATH%\L67D\N17368A11467.JFI
  • %HOMEPATH%\L67D\E71982W46244.SDE
  • %HOMEPATH%\L67D\62103.QSW
  • %HOMEPATH%\L67D\K43117I31684.YIB
  • %HOMEPATH%\L67D\83370.HKB
  • %HOMEPATH%\L67D\Z95374G47718.BNN
  • %HOMEPATH%\L67D\50821.ORQ
  • %HOMEPATH%\L67D\66731.KAO
  • %HOMEPATH%\L67D\39652.DJD
  • %HOMEPATH%\L67D\X13935L30319.BDK
  • %HOMEPATH%\L67D\55318.WQF
  • %HOMEPATH%\L67D\58116.JRY
  • %HOMEPATH%\L67D\46912.SOE
  • %HOMEPATH%\L67D\S34863M29303.XTV
  • %HOMEPATH%\L67D\S71166W18011.GKB
  • %HOMEPATH%\L67D\U80232S9251.OJQ
  • %HOMEPATH%\L67D\T18748K8588.GSG
  • %HOMEPATH%\L67D\6578.HWR
  • %HOMEPATH%\L67D\P89410Y48006.XKN
  • %HOMEPATH%\L67D\U73150E56792.OYH
  • %HOMEPATH%\L67D\11685.KSW
  • %HOMEPATH%\L67D\O22561A75175.PTO
  • %HOMEPATH%\L67D\23512.EUV
  • %HOMEPATH%\L67D\T67240L3221.DIY
  • %HOMEPATH%\L67D\9700.OQX
  • %HOMEPATH%\L67D\F43638W95101.NGV
  • %HOMEPATH%\L67D\30038.ZHA
  • %HOMEPATH%\L67D\P4542M35607.JDP
  • %HOMEPATH%\L67D\74839.VWD
  • %HOMEPATH%\L67D\J34630D76492.CYS
  • %HOMEPATH%\L67D\89048.XID
  • %HOMEPATH%\L67D\51596.VBG
  • %HOMEPATH%\L67D\43805.TPJ
  • %HOMEPATH%\L67D\2297.MIG
  • %HOMEPATH%\L67D\T63870F30749.JHF
  • %HOMEPATH%\L67D\B9020S18386.EJZ
  • %HOMEPATH%\L67D\P81892D95976.EEB
  • %HOMEPATH%\L67D\63862.MHU
  • %HOMEPATH%\L67D\35432.KQV
  • %HOMEPATH%\L67D\B93187U72537.YRD
  • %HOMEPATH%\L67D\T29237P47027.NSG
Sets the 'hidden' attribute to the following files:
  • %HOMEPATH%\Y67P29.FL2
Deletes the following files:
  • %HOMEPATH%\Y67P29.FL2
  • %TEMP%\aut1.tmp
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'
  • ClassName: 'EDIT' WindowName: '(null)'

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android