マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Trojan.Inject1.33467

Added to the Dr.Web virus database: 2013-12-11

Virus description added:

Technical Information

Malicious functions:
Creates and executes the following:
  • '%HOMEPATH%\Qh99606F97131\alpha.exe.exe'
Modifies file system :
Creates the following files:
  • %HOMEPATH%\Qh99606F97131\79351.EQE
  • %HOMEPATH%\Qh99606F97131\X81117A39023.HYE
  • %HOMEPATH%\Qh99606F97131\35433.CSN
  • %HOMEPATH%\Qh99606F97131\B50310K60523.EVA
  • %HOMEPATH%\Qh99606F97131\95458.ITE
  • %HOMEPATH%\Qh99606F97131\V24123R83207.TBL
  • %HOMEPATH%\Qh99606F97131\G33415C26334.KAR
  • %HOMEPATH%\Qh99606F97131\46832.KTI
  • %HOMEPATH%\Qh99606F97131\77328.NRY
  • %HOMEPATH%\Qh99606F97131\38229.XWY
  • %HOMEPATH%\Qh99606F97131\T98715S8679.TVL
  • %HOMEPATH%\Qh99606F97131\66460.YDV
  • %HOMEPATH%\Qh99606F97131\B64375B4137.KLZ
  • %HOMEPATH%\Qh99606F97131\L69903T9692.YHQ
  • %HOMEPATH%\Qh99606F97131\C37024R96427.AXV
  • %HOMEPATH%\Qh99606F97131\97538.YRZ
  • %HOMEPATH%\Qh99606F97131\W36852O12913.DBD
  • %HOMEPATH%\Qh99606F97131\G73081O85417.XFQ
  • %HOMEPATH%\Qh99606F97131\69460.BNO
  • %HOMEPATH%\Qh99606F97131\75174.PMK
  • %HOMEPATH%\Qh99606F97131\97440.OKI
  • %HOMEPATH%\Qh99606F97131\E98228R74996.LOX
  • %HOMEPATH%\Qh99606F97131\N26846C22695.ZXT
  • %HOMEPATH%\Qh99606F97131\5498.EBN
  • %HOMEPATH%\Qh99606F97131\19881.YRC
  • %HOMEPATH%\Qh99606F97131\65293.LMV
  • %HOMEPATH%\Qh99606F97131\75769.ITA
  • %HOMEPATH%\Qh99606F97131\95278.MCM
  • %HOMEPATH%\Qh99606F97131\O47469C3874.VFW
  • %HOMEPATH%\Qh99606F97131\Q56545B38319.XOO
  • %HOMEPATH%\Qh99606F97131\12604.YIR
  • %HOMEPATH%\Qh99606F97131\Y75712C47772.DYV
  • %HOMEPATH%\Qh99606F97131\F62940V3456.TCW
  • %HOMEPATH%\Qh99606F97131\S22121Q65723.GSJ
  • %HOMEPATH%\Qh99606F97131\28319.NFQ
  • %HOMEPATH%\Qh99606F97131\Q63377W94655.SPS
  • %HOMEPATH%\Qh99606F97131\B26443R47520.UIU
  • %HOMEPATH%\Qh99606F97131\40899.RID
  • %HOMEPATH%\Qh99606F97131\F14605S14233.EOV
  • %HOMEPATH%\Qh99606F97131\T80755S13006.THG
  • %HOMEPATH%\Qh99606F97131\91001.AEC
  • %HOMEPATH%\Qh99606F97131\I25268B87916.IGR
  • %HOMEPATH%\Qh99606F97131\78527.AWP
  • %HOMEPATH%\Qh99606F97131\67770.YUO
  • %HOMEPATH%\Qh99606F97131\C33331G55272.LUM
  • %HOMEPATH%\Qh99606F97131\10082.OJL
  • %HOMEPATH%\Qh99606F97131\U4805Y84668.OLG
  • %HOMEPATH%\Qh99606F97131\Z55682Q73038.DHK
  • %HOMEPATH%\Qh99606F97131\48877.HYV
  • %HOMEPATH%\Qh99606F97131\28314.CGC
  • %HOMEPATH%\Qh99606F97131\F24130X63293.LSI
  • %HOMEPATH%\Qh99606F97131\57824.DVO
  • %HOMEPATH%\Qh99606F97131\24919.YKK
  • %HOMEPATH%\Qh99606F97131\V97337T49459.GKB
  • %HOMEPATH%\Qh99606F97131\W34235D64243.XFO
  • %HOMEPATH%\Qh99606F97131\14335.XQA
  • %HOMEPATH%\Qh99606F97131\K24455Z83874.CUH
  • %HOMEPATH%\Qh99606F97131\99772.CPL
  • %HOMEPATH%\Qh99606F97131\23046.SNN
  • %HOMEPATH%\Qh99606F97131\45979.WZY
  • %HOMEPATH%\Qh99606F97131\O84036I21414.UOX
  • %HOMEPATH%\Qh99606F97131\H70136H51936.UOV
  • %HOMEPATH%\Qh99606F97131\J92948K68246.VAG
  • %HOMEPATH%\Qh99606F97131\43537.ZRD
  • %HOMEPATH%\Qh99606F97131\50425.RSJ
  • %HOMEPATH%\Qh99606F97131\A86249V28715.GCK
  • %HOMEPATH%\Qh99606F97131\4971.APX
  • %HOMEPATH%\Qh99606F97131\28884.DGU
  • %HOMEPATH%\Qh99606F97131\X71525B32869.RFH
  • %HOMEPATH%\Qh99606F97131\20624.EXK
  • %HOMEPATH%\Qh99606F97131\48853.OYV
  • %HOMEPATH%\Qh99606F97131\S78339F88666.ZEO
  • %HOMEPATH%\Qh99606F97131\A39294T36833.PRD
  • %HOMEPATH%\Qh99606F97131\93798.MKY
  • %HOMEPATH%\Qh99606F97131\1777.OJK
  • %HOMEPATH%\Qh99606F97131\68947.CTH
  • %HOMEPATH%\Qh99606F97131\P69086S32425.GAN
  • %HOMEPATH%\Qh99606F97131\4035.IZW
  • %HOMEPATH%\Qh99606F97131\M41027Q53439.IYA
  • %HOMEPATH%\Qh99606F97131\78737.DOX
  • %HOMEPATH%\Qh99606F97131\P43696A67219.LUG
  • %HOMEPATH%\Qh99606F97131\J1035B96077.HKT
  • %HOMEPATH%\Qh99606F97131\25124.FMN
  • %HOMEPATH%\Qh99606F97131\S29589B71360.OVA
  • %HOMEPATH%\Qh99606F97131\W82926V28622.HLI
  • %HOMEPATH%\Qh99606F97131\G33968Q43457.BUA
  • %HOMEPATH%\Qh99606F97131\M39158W59814.VUV
  • %HOMEPATH%\Qh99606F97131\40904.YAW
  • %HOMEPATH%\Qh99606F97131\81534.YUR
  • %HOMEPATH%\Qh99606F97131\P82913X3759.RNT
  • %HOMEPATH%\Qh99606F97131\B96146J42590.GQL
  • %HOMEPATH%\Qh99606F97131\22397.IVV
  • %HOMEPATH%\Qh99606F97131\S25615X97690.CTK
  • %HOMEPATH%\Qh99606F97131\80709.ADW
  • %HOMEPATH%\Qh99606F97131\58484.PKL
  • %HOMEPATH%\Qh99606F97131\N26096G71014.SOJ
  • %HOMEPATH%\Qh99606F97131\D70052V59858.JWO
  • %HOMEPATH%\Qh99606F97131\D62072I55556.CTD
  • %HOMEPATH%\Qh99606F97131\C53211P97384.AVT
  • %HOMEPATH%\Qh99606F97131\X83967F23467.VLT
  • %HOMEPATH%\Qh99606F97131\46884.HBN
  • %HOMEPATH%\Qh99606F97131\X43711G97298.UES
  • %HOMEPATH%\Qh99606F97131\69186.QCD
  • %HOMEPATH%\Qh99606F97131\H47788W74446.LWQ
  • %HOMEPATH%\Qh99606F97131\A6981R80757.VKY
  • %HOMEPATH%\Qh99606F97131\B79084H15603.OLI
  • %HOMEPATH%\Qh99606F97131\B19509V58449.WKG
  • %HOMEPATH%\Qh99606F97131\40819.SEY
  • %HOMEPATH%\Qh99606F97131\45008.VVS
  • %HOMEPATH%\Qh99606F97131\24586.CRE
  • %HOMEPATH%\Qh99606F97131\S58371N28677.APF
  • %HOMEPATH%\Qh99606F97131\N88171O52281.GTH
  • %HOMEPATH%\Qh99606F97131\E96505N12303.WYI
  • %HOMEPATH%\Qh99606F97131\O86839X46817.OVE
  • %HOMEPATH%\Qh99606F97131\40390.OXW
  • %HOMEPATH%\Qh99606F97131\S31730Q16583.NJQ
  • %HOMEPATH%\Qh99606F97131\12327.ITP
  • %HOMEPATH%\Qh99606F97131\W58771A74303.HAC
  • %HOMEPATH%\Qh99606F97131\40622.UZZ
  • %HOMEPATH%\Qh99606F97131\94548.QKM
  • %HOMEPATH%\Qh99606F97131\50845.EMS
  • %HOMEPATH%\Qh99606F97131\O32702Q7110.QGT
  • %HOMEPATH%\Qh99606F97131\W15621Q10746.TAY
  • %HOMEPATH%\Qh99606F97131\C36587L49607.VLD
  • %HOMEPATH%\Qh99606F97131\49663.PSP
  • %HOMEPATH%\Qh99606F97131\G44555G58239.YZP
  • %HOMEPATH%\Qh99606F97131\C56003C12421.AUE
  • %HOMEPATH%\Qh99606F97131\A9894V3026.XQV
  • %HOMEPATH%\Qh99606F97131\S67715Q65686.ZPO
  • %HOMEPATH%\Qh99606F97131\46750.KPV
  • %HOMEPATH%\Qh99606F97131\88679.XJL
  • %HOMEPATH%\Qh99606F97131\48603.LHF
  • %HOMEPATH%\Qh99606F97131\48956.EQZ
  • %HOMEPATH%\Qh99606F97131\F6569C25117.PEI
  • %HOMEPATH%\Qh99606F97131\47289.XAW
  • %HOMEPATH%\Qh99606F97131\I43083M12185.FMP
  • %HOMEPATH%\Qh99606F97131\X6092O52561.ZFE
  • %HOMEPATH%\Qh99606F97131\96731.TGQ
  • %HOMEPATH%\Qh99606F97131\56287.JPK
  • %HOMEPATH%\Qh99606F97131\E41835W29147.RWW
  • %HOMEPATH%\Qh99606F97131\I84519B97242.IAJ
  • %HOMEPATH%\Qh99606F97131\X49427P90056.KUA
  • %HOMEPATH%\Qh99606F97131\L66353V19670.UMP
  • %HOMEPATH%\Qh99606F97131\22941.ZLD
  • %HOMEPATH%\Qh99606F97131\P22979T46269.LRY
  • %HOMEPATH%\Qh99606F97131\39027.QBT
  • %HOMEPATH%\Qh99606F97131\E69930B25209.GXS
  • %HOMEPATH%\Qh99606F97131\O36163S24758.HOF
  • %HOMEPATH%\Qh99606F97131\59969.YIA
  • %HOMEPATH%\Qh99606F97131\T24585Z52437.TXT
  • %HOMEPATH%\Qh99606F97131\Z74817M70122.BFF
  • %HOMEPATH%\Qh99606F97131\J31874C9962.ZVB
  • %HOMEPATH%\Qh99606F97131\22563.IAQ
  • %HOMEPATH%\Qh99606F97131\71300.TFY
  • %HOMEPATH%\Qh99606F97131\B13407C13864.UCK
  • %HOMEPATH%\Qh99606F97131\J49698G37438.AZX
  • %HOMEPATH%\Qh99606F97131\39212.GGF
  • %HOMEPATH%\Qh99606F97131\I96496U39317.WZX
  • %HOMEPATH%\Qh99606F97131\E91812L38234.KOZ
  • %HOMEPATH%\Qh99606F97131\J93462M41473.NAK
  • %HOMEPATH%\Qh99606F97131\97704.TYJ
  • %HOMEPATH%\Qh99606F97131\Y35078Z66013.XDE
  • %HOMEPATH%\Qh99606F97131\88830.PQQ
  • %HOMEPATH%\Qh99606F97131\56446.ZSW
  • %HOMEPATH%\Qh99606F97131\A73696X4982.RBR
  • %HOMEPATH%\Qh99606F97131\85314.AKR
  • %HOMEPATH%\Qh99606F97131\5703.XND
  • %HOMEPATH%\Qh99606F97131\32742.ZDI
  • %HOMEPATH%\Qh99606F97131\V31422L85230.UHK
  • %HOMEPATH%\Qh99606F97131\L87100M49451.DOH
  • %HOMEPATH%\Qh99606F97131\17574.QKW
  • %HOMEPATH%\Qh99606F97131\48721.LHW
  • %HOMEPATH%\Qh99606F97131\35941.LKJ
  • %HOMEPATH%\Qh99606F97131\A26361X45151.DRO
  • %HOMEPATH%\Qh99606F97131\G51391F93108.LJD
  • %HOMEPATH%\Qh99606F97131\Q55877L64525.JFI
  • %HOMEPATH%\Qh99606F97131\G24639H80111.PAP
  • %HOMEPATH%\Qh99606F97131\A72418G76684.WVX
  • %HOMEPATH%\Qh99606F97131\B75091X10162.VRW
  • %HOMEPATH%\Qh99606F97131\Q32558T8664.SXL
  • %HOMEPATH%\Qh99606F97131\94383.XQM
  • %HOMEPATH%\Qh99606F97131\69843.UKS
  • %HOMEPATH%\Qh99606F97131\IF.YPW
  • %HOMEPATH%\Qh99606F97131\46749.TGU
  • %HOMEPATH%\Rp47477F39082.TK9
  • %TEMP%\aut1.tmp
  • %HOMEPATH%\Qh99606F97131\M36490Y50982.NZX
  • %HOMEPATH%\Qh99606F97131\54736.WWY
  • %HOMEPATH%\Qh99606F97131\L50963D12303.FVP
  • %HOMEPATH%\Qh99606F97131\93044.MDQ
  • %HOMEPATH%\Qh99606F97131\11081.SNI
  • %HOMEPATH%\Qh99606F97131\54006.KXY
  • %HOMEPATH%\Qh99606F97131\R9121P30422.CSU
  • %HOMEPATH%\Qh99606F97131\K77849J94480.KGZ
  • %HOMEPATH%\Qh99606F97131\P19242E23609.YJL
  • %HOMEPATH%\Qh99606F97131\58886.XBU
  • %HOMEPATH%\Qh99606F97131\S87848R64322.MJS
  • %HOMEPATH%\Qh99606F97131\O60902R17213.EDO
  • %HOMEPATH%\Qh99606F97131\4675.UPM
  • %HOMEPATH%\Qh99606F97131\L38303R66370.CKR
  • %HOMEPATH%\Qh99606F97131\P1361B89209.LIZ
  • %HOMEPATH%\Qh99606F97131\I53975I80017.NUZ
  • %HOMEPATH%\Qh99606F97131\30910.ARS
  • %HOMEPATH%\Qh99606F97131\99070.JDY
  • %HOMEPATH%\Qh99606F97131\4215.SWS
  • %HOMEPATH%\Qh99606F97131\90514.QSN
  • %HOMEPATH%\Qh99606F97131\95949.IWW
  • %HOMEPATH%\Qh99606F97131\H88392N5456.WPD
  • %HOMEPATH%\Qh99606F97131\E4893E60475.ZYW
  • %HOMEPATH%\Qh99606F97131\U84297B87037.BRR
  • %HOMEPATH%\Qh99606F97131\13121.BSG
  • %HOMEPATH%\Qh99606F97131\73986.FDQ
  • %HOMEPATH%\Qh99606F97131\86479.KRF
  • %HOMEPATH%\Qh99606F97131\L67389H16512.AXD
  • %HOMEPATH%\Qh99606F97131\O39270S69674.DTS
  • %HOMEPATH%\Qh99606F97131\V12183R29790.PCJ
  • %HOMEPATH%\Qh99606F97131\Q38288V55766.PRO
  • %HOMEPATH%\Qh99606F97131\30195.YCW
  • %HOMEPATH%\Qh99606F97131\M40245P95483.HVC
  • %HOMEPATH%\Qh99606F97131\57320.YDP
  • %HOMEPATH%\Qh99606F97131\64807.QIN
  • %HOMEPATH%\Qh99606F97131\J64769G70544.PFF
  • %HOMEPATH%\Qh99606F97131\I91565T16236.FIN
  • %HOMEPATH%\Qh99606F97131\F77910H25412.COU
  • %HOMEPATH%\Qh99606F97131\60923.PDN
  • %HOMEPATH%\Qh99606F97131\54258.VOW
  • %HOMEPATH%\Qh99606F97131\29209.ZGK
  • %HOMEPATH%\Qh99606F97131\J74064M37019.ECN
  • %HOMEPATH%\Qh99606F97131\X72899A18863.WDV
  • %HOMEPATH%\Qh99606F97131\36302.BNY
  • %HOMEPATH%\Qh99606F97131\F6868C31009.PAL
  • %HOMEPATH%\Qh99606F97131\D60804U61550.RER
  • %HOMEPATH%\Qh99606F97131\88575.SMZ
  • %HOMEPATH%\Qh99606F97131\23999.NWM
  • %HOMEPATH%\Qh99606F97131\1529.BDI
  • %HOMEPATH%\Qh99606F97131\45342.IBU
  • %HOMEPATH%\Qh99606F97131\J55980G95727.LZP
  • %HOMEPATH%\Qh99606F97131\74651.CMU
  • %HOMEPATH%\Qh99606F97131\25069.QBP
  • %HOMEPATH%\Qh99606F97131\X86605Y35784.NOP
  • %HOMEPATH%\Qh99606F97131\39727.YOV
  • %HOMEPATH%\Qh99606F97131\G51281Z52244.HTA
  • %HOMEPATH%\Qh99606F97131\96217.SHW
  • %HOMEPATH%\Qh99606F97131\I70510A45765.AHH
  • %HOMEPATH%\Qh99606F97131\E39922V7594.KDQ
  • %HOMEPATH%\Qh99606F97131\16577.IAM
  • %HOMEPATH%\Qh99606F97131\S91771K14503.YPM
  • %HOMEPATH%\Qh99606F97131\B88490C38774.GTB
  • %HOMEPATH%\Qh99606F97131\4788.ABZ
  • %HOMEPATH%\Qh99606F97131\66030.PAT
  • %HOMEPATH%\Qh99606F97131\Q96676A31333.IUP
  • %HOMEPATH%\Qh99606F97131\T40017N37690.KOQ
  • %HOMEPATH%\Qh99606F97131\M93451U93786.FZE
  • %HOMEPATH%\Qh99606F97131\R37966S98694.DZE
  • %HOMEPATH%\Qh99606F97131\28234.CXE
  • %HOMEPATH%\Qh99606F97131\J48258I7043.NDH
  • %HOMEPATH%\Qh99606F97131\39560.LLX
  • %HOMEPATH%\Qh99606F97131\G97742O19905.WKI
  • %HOMEPATH%\Qh99606F97131\G45655U53714.MTD
  • %HOMEPATH%\Qh99606F97131\R15327T26738.TEX
  • %HOMEPATH%\Qh99606F97131\F24297U88818.CSK
  • %HOMEPATH%\Qh99606F97131\B18669V73024.WMH
  • %HOMEPATH%\Qh99606F97131\1899.GJU
  • %HOMEPATH%\Qh99606F97131\84727.JRY
  • %HOMEPATH%\Qh99606F97131\63469.GKM
  • %HOMEPATH%\Qh99606F97131\59698.YOG
  • %HOMEPATH%\Qh99606F97131\H76747G98122.PNF
  • %HOMEPATH%\Qh99606F97131\22206.GDX
  • %HOMEPATH%\Qh99606F97131\65821.JXW
  • %HOMEPATH%\Qh99606F97131\46590.VPF
  • %HOMEPATH%\Qh99606F97131\N8268N98559.DFU
  • %HOMEPATH%\Qh99606F97131\64126.ITW
  • %HOMEPATH%\Qh99606F97131\18227.DIO
  • %HOMEPATH%\Qh99606F97131\8692.CAO
  • %HOMEPATH%\Qh99606F97131\25904.VGR
  • %HOMEPATH%\Qh99606F97131\V7362U46673.STH
  • %HOMEPATH%\Qh99606F97131\L47961Q45327.QKG
  • %HOMEPATH%\Qh99606F97131\96370.PLA
  • %HOMEPATH%\Qh99606F97131\V59495S40236.HSZ
  • %HOMEPATH%\Qh99606F97131\64483.VCV
  • %HOMEPATH%\Qh99606F97131\44777.GMM
  • %HOMEPATH%\Qh99606F97131\C19400D13569.QBM
  • %HOMEPATH%\Qh99606F97131\L61312V83684.NSQ
  • %HOMEPATH%\Qh99606F97131\P13837F54863.UOS
  • %HOMEPATH%\Qh99606F97131\F60067C79259.TUA
  • %HOMEPATH%\Qh99606F97131\L27643E72135.XCS
  • %HOMEPATH%\Qh99606F97131\D83665G52960.KDA
  • %HOMEPATH%\Qh99606F97131\11131.QRH
  • %HOMEPATH%\Qh99606F97131\8353.GBB
  • %HOMEPATH%\Qh99606F97131\M6939D65104.KNB
  • %HOMEPATH%\Qh99606F97131\71898.QUJ
  • %HOMEPATH%\Qh99606F97131\J9266L69916.SOU
  • %HOMEPATH%\Qh99606F97131\E23079P56435.LBR
  • %HOMEPATH%\Qh99606F97131\D96327Y8991.NHZ
  • %HOMEPATH%\Qh99606F97131\Q66601Y93537.AKG
  • %HOMEPATH%\Qh99606F97131\38889.JKV
  • %HOMEPATH%\Qh99606F97131\51232.XVO
  • %HOMEPATH%\Qh99606F97131\32940.EZI
  • %HOMEPATH%\Qh99606F97131\P51645E59214.BKK
  • %HOMEPATH%\Qh99606F97131\41607.ISB
  • %HOMEPATH%\Qh99606F97131\B57394F30648.LIT
  • %HOMEPATH%\Qh99606F97131\S16231S41540.RCO
  • %HOMEPATH%\Qh99606F97131\S88604D60942.OUU
  • %HOMEPATH%\Qh99606F97131\I76517R86715.JUL
  • %HOMEPATH%\Qh99606F97131\N97648I98923.CSB
  • %HOMEPATH%\Qh99606F97131\57531.UMQ
  • %HOMEPATH%\Qh99606F97131\U19950O23368.EUN
  • %HOMEPATH%\Qh99606F97131\W42334S91509.CWB
  • %HOMEPATH%\Qh99606F97131\G3338L99228.IGE
  • %HOMEPATH%\Qh99606F97131\14614.BJJ
  • %HOMEPATH%\Qh99606F97131\N4152Y91198.KKL
  • %HOMEPATH%\Qh99606F97131\42692.CSK
  • %HOMEPATH%\Qh99606F97131\V59927S47486.YKL
  • %HOMEPATH%\Qh99606F97131\L33425R46639.KFL
  • %HOMEPATH%\Qh99606F97131\K74924Q60754.LLW
  • %HOMEPATH%\Qh99606F97131\L20894C34486.QPK
  • %HOMEPATH%\Qh99606F97131\67531.GWS
  • %HOMEPATH%\Qh99606F97131\W33850C76485.BHQ
  • %HOMEPATH%\Qh99606F97131\98696.LES
  • %HOMEPATH%\Qh99606F97131\19238.BHG
  • %HOMEPATH%\Qh99606F97131\45441.BRI
  • %HOMEPATH%\Qh99606F97131\R43183G65439.LJO
  • %HOMEPATH%\Qh99606F97131\19963.QMF
  • %HOMEPATH%\Qh99606F97131\84648.PWI
  • %HOMEPATH%\Qh99606F97131\73403.MXF
  • %HOMEPATH%\Qh99606F97131\P18263T53541.DUX
  • %HOMEPATH%\Qh99606F97131\47248.OEJ
  • %HOMEPATH%\Qh99606F97131\65972.CXK
  • %HOMEPATH%\Qh99606F97131\58604.WYT
  • %HOMEPATH%\Qh99606F97131\Z7412Q96510.QKW
  • %HOMEPATH%\Qh99606F97131\P17697A22743.SYJ
  • %HOMEPATH%\Qh99606F97131\U4761N22414.VFX
  • %HOMEPATH%\Qh99606F97131\41393.PGM
  • %HOMEPATH%\Qh99606F97131\R13384Z60185.LHA
  • %HOMEPATH%\Qh99606F97131\G38815G67037.SML
  • %HOMEPATH%\Qh99606F97131\M25997M65320.LNF
  • %HOMEPATH%\Qh99606F97131\N74208M67893.KMZ
  • %HOMEPATH%\Qh99606F97131\2009.YTX
  • %HOMEPATH%\Qh99606F97131\95981.HJN
  • %HOMEPATH%\Qh99606F97131\86636.IJV
  • %HOMEPATH%\Qh99606F97131\F93760I69383.DKW
  • %HOMEPATH%\Qh99606F97131\D86619G79754.JTS
  • %HOMEPATH%\Qh99606F97131\U28311F33029.UQX
  • %HOMEPATH%\Qh99606F97131\C53275X40941.LTX
  • %HOMEPATH%\Qh99606F97131\A56116Y14639.YEH
  • %HOMEPATH%\Qh99606F97131\88343.ZYJ
  • %HOMEPATH%\Qh99606F97131\31310.RPZ
  • %HOMEPATH%\Qh99606F97131\5013.MBM
  • %HOMEPATH%\Qh99606F97131\N69812Z19128.FYY
  • %HOMEPATH%\Qh99606F97131\A37750D96518.MIZ
  • %HOMEPATH%\Qh99606F97131\P31044U28358.QDM
  • %HOMEPATH%\Qh99606F97131\12693.QBK
  • %HOMEPATH%\Qh99606F97131\43260.FLB
  • %HOMEPATH%\Qh99606F97131\46399.VAR
  • %HOMEPATH%\Qh99606F97131\R50891I9842.GKX
  • %HOMEPATH%\Qh99606F97131\B24161K12061.VEN
  • %HOMEPATH%\Qh99606F97131\O66378O41876.XQZ
  • %HOMEPATH%\Qh99606F97131\88049.DJF
  • %HOMEPATH%\Qh99606F97131\71018.FLV
  • %HOMEPATH%\Qh99606F97131\R56014I84797.DRM
  • %HOMEPATH%\Qh99606F97131\X64870B58997.XGN
  • %HOMEPATH%\Qh99606F97131\11457.FTF
  • %HOMEPATH%\Qh99606F97131\R57039T86870.JLL
  • %HOMEPATH%\Qh99606F97131\42476.IBL
  • %HOMEPATH%\Qh99606F97131\T95185G45306.BJN
  • %HOMEPATH%\Qh99606F97131\66744.HDB
  • %HOMEPATH%\Qh99606F97131\20609.KVI
  • %HOMEPATH%\Qh99606F97131\38270.QPB
  • %HOMEPATH%\Qh99606F97131\alpha.exe.exe
  • %HOMEPATH%\Qh99606F97131\Z9455H87277.JSW
  • %HOMEPATH%\Qh99606F97131\I96675X9751.PNP
  • %HOMEPATH%\Qh99606F97131\X24829K39753.NQR
  • %HOMEPATH%\Qh99606F97131\13845.TGP
  • %HOMEPATH%\Qh99606F97131\J62841Z42655.BVK
  • %HOMEPATH%\Qh99606F97131\F83444V45436.MXT
  • %HOMEPATH%\Qh99606F97131\I90888M28155.ISE
  • %HOMEPATH%\Qh99606F97131\1635.MVQ
  • %HOMEPATH%\Qh99606F97131\E48418W68172.SLT
  • %HOMEPATH%\Qh99606F97131\G40422V58254.GZW
  • %HOMEPATH%\Qh99606F97131\44205.UBK
  • %HOMEPATH%\Qh99606F97131\23830.OHX
  • %HOMEPATH%\Qh99606F97131\98753.HBA
  • %HOMEPATH%\Qh99606F97131\51310.LPW
  • %HOMEPATH%\Qh99606F97131\Z85390N44661.ZOJ
  • %HOMEPATH%\Qh99606F97131\N27502O52651.KDA
  • %HOMEPATH%\Qh99606F97131\A24151M37524.KFZ
  • %HOMEPATH%\Qh99606F97131\24948.FUK
  • %HOMEPATH%\Qh99606F97131\95187.KFD
  • %HOMEPATH%\Qh99606F97131\32888.TLQ
  • %HOMEPATH%\Qh99606F97131\31821.LFT
  • %HOMEPATH%\Qh99606F97131\45746.ITJ
  • %HOMEPATH%\Qh99606F97131\U91043H8625.GWU
  • %HOMEPATH%\Qh99606F97131\M52974F98161.FVJ
  • %HOMEPATH%\Qh99606F97131\H44501O64632.PEV
  • %HOMEPATH%\Qh99606F97131\D84277M63645.CKV
  • %HOMEPATH%\Qh99606F97131\I95560P51360.MKJ
  • %HOMEPATH%\Qh99606F97131\K90944N21345.BCL
  • %HOMEPATH%\Qh99606F97131\F87762Y47878.IBU
  • %HOMEPATH%\Qh99606F97131\73875.SRM
  • %HOMEPATH%\Qh99606F97131\N62509O8710.HBN
  • %HOMEPATH%\Qh99606F97131\K69845T31337.QKD
  • %HOMEPATH%\Qh99606F97131\K86846G21077.PFV
  • %HOMEPATH%\Qh99606F97131\B23166Q57618.LFL
  • %HOMEPATH%\Qh99606F97131\G4156N7318.UEB
  • %HOMEPATH%\Qh99606F97131\P69936W56928.NJT
  • %HOMEPATH%\Qh99606F97131\26131.FPG
  • %HOMEPATH%\Qh99606F97131\75429.VZS
  • %HOMEPATH%\Qh99606F97131\S13905A73367.BIV
  • %HOMEPATH%\Qh99606F97131\A26073J82297.XPS
  • %HOMEPATH%\Qh99606F97131\W7264C80106.AWD
  • %HOMEPATH%\Qh99606F97131\L84823R92817.IMN
  • %HOMEPATH%\Qh99606F97131\70688.AII
  • %HOMEPATH%\Qh99606F97131\D22307K14697.OZA
  • %HOMEPATH%\Qh99606F97131\A82713V72755.MMA
  • %HOMEPATH%\Qh99606F97131\L87481W22097.ITA
  • %HOMEPATH%\Qh99606F97131\1486.PLV
  • %HOMEPATH%\Qh99606F97131\K42661A73345.GZY
  • %HOMEPATH%\Qh99606F97131\S28240Y53584.HAE
  • %HOMEPATH%\Qh99606F97131\E87464L97002.KYQ
  • %HOMEPATH%\Qh99606F97131\K81442Y43661.FIF
  • %HOMEPATH%\Qh99606F97131\21310.SHU
  • %HOMEPATH%\Qh99606F97131\S79776A8389.QPG
  • %HOMEPATH%\Qh99606F97131\D71335B2019.JMD
  • %HOMEPATH%\Qh99606F97131\Q1638X26136.JAZ
  • %HOMEPATH%\Qh99606F97131\A16723B30465.YGS
  • %HOMEPATH%\Qh99606F97131\H72602O24784.UJE
  • %HOMEPATH%\Qh99606F97131\R60527E69127.DWJ
  • %HOMEPATH%\Qh99606F97131\82912.DJD
  • %HOMEPATH%\Qh99606F97131\47878.ZXG
  • %HOMEPATH%\Qh99606F97131\R37910G84188.NQL
  • %HOMEPATH%\Qh99606F97131\G52904J93432.LMN
  • %HOMEPATH%\Qh99606F97131\69391.WOJ
  • %HOMEPATH%\Qh99606F97131\A79115P39251.ODV
  • %HOMEPATH%\Qh99606F97131\17594.TCV
  • %HOMEPATH%\Qh99606F97131\B40034V1033.VDE
  • %HOMEPATH%\Qh99606F97131\98403.DOJ
  • %HOMEPATH%\Qh99606F97131\C24812M37480.WND
  • %HOMEPATH%\Qh99606F97131\L74378O88437.RRN
  • %HOMEPATH%\Qh99606F97131\I28015Q3898.UGQ
  • %HOMEPATH%\Qh99606F97131\72658.AFE
  • %HOMEPATH%\Qh99606F97131\24306.FZK
  • %HOMEPATH%\Qh99606F97131\T12371Y62400.YIC
  • %HOMEPATH%\Qh99606F97131\Z74064E68292.BNX
  • %HOMEPATH%\Qh99606F97131\M73733H1268.ATH
  • %HOMEPATH%\Qh99606F97131\97284.KYN
  • %HOMEPATH%\Qh99606F97131\23300.NOS
  • %HOMEPATH%\Qh99606F97131\30679.NGG
  • %HOMEPATH%\Qh99606F97131\Q59930B43332.NHB
  • %HOMEPATH%\Qh99606F97131\92454.MPJ
  • %HOMEPATH%\Qh99606F97131\E38558K80740.FIW
  • %HOMEPATH%\Qh99606F97131\H67821O71194.TOF
  • %HOMEPATH%\Qh99606F97131\62492.WZH
  • %HOMEPATH%\Qh99606F97131\43888.CZR
  • %HOMEPATH%\Qh99606F97131\W96051S68130.NUS
  • %HOMEPATH%\Qh99606F97131\G96546V1043.RHR
  • %HOMEPATH%\Qh99606F97131\W60932I86849.IKO
  • %HOMEPATH%\Qh99606F97131\Q16461B58499.ATU
  • %HOMEPATH%\Qh99606F97131\87191.SSL
  • %HOMEPATH%\Qh99606F97131\69315.BPY
  • %HOMEPATH%\Qh99606F97131\54976.KHQ
  • %HOMEPATH%\Qh99606F97131\N42101G73394.ZFF
  • %HOMEPATH%\Qh99606F97131\A30397Q71666.SPY
  • %HOMEPATH%\Qh99606F97131\C80269W59161.JMU
  • %HOMEPATH%\Qh99606F97131\35862.GCE
  • %HOMEPATH%\Qh99606F97131\19566.KDA
  • %HOMEPATH%\Qh99606F97131\40519.BQI
  • %HOMEPATH%\Qh99606F97131\V79797T76971.WKY
  • %HOMEPATH%\Qh99606F97131\P45057A87908.NBI
  • %HOMEPATH%\Qh99606F97131\36245.MDD
  • %HOMEPATH%\Qh99606F97131\35644.UZX
  • %HOMEPATH%\Qh99606F97131\K8150F40509.LTG
  • %HOMEPATH%\Qh99606F97131\38712.NYK
  • %HOMEPATH%\Qh99606F97131\27468.QIR
  • %HOMEPATH%\Qh99606F97131\M98553L74005.FRS
  • %HOMEPATH%\Qh99606F97131\H26570A42317.OKS
  • %HOMEPATH%\Qh99606F97131\10643.BIG
  • %HOMEPATH%\Qh99606F97131\T32815Y56103.SKO
  • %HOMEPATH%\Qh99606F97131\L47417K70052.MJH
  • %HOMEPATH%\Qh99606F97131\E7865D43851.NSN
  • %HOMEPATH%\Qh99606F97131\29585.MPP
  • %HOMEPATH%\Qh99606F97131\42300.VIY
  • %HOMEPATH%\Qh99606F97131\K36345V54554.YBL
  • %HOMEPATH%\Qh99606F97131\12323.DOA
  • %HOMEPATH%\Qh99606F97131\B7799W44377.ANZ
  • %HOMEPATH%\Qh99606F97131\T33669U30743.BTC
  • %HOMEPATH%\Qh99606F97131\17681.MFU
  • %HOMEPATH%\Qh99606F97131\R75053H84741.EBC
  • %HOMEPATH%\Qh99606F97131\D3890G40574.YYA
  • %HOMEPATH%\Qh99606F97131\U46308T25781.DCA
  • %HOMEPATH%\Qh99606F97131\11512.BIH
  • %HOMEPATH%\Qh99606F97131\67923.MIX
  • %HOMEPATH%\Qh99606F97131\93094.SWC
  • %HOMEPATH%\Qh99606F97131\I71167Q1913.RDZ
  • %HOMEPATH%\Qh99606F97131\D13948P73672.AWD
  • %HOMEPATH%\Qh99606F97131\2978.TXY
  • %HOMEPATH%\Qh99606F97131\Z25800X29093.XSI
  • %HOMEPATH%\Qh99606F97131\F69109V49055.CBK
  • %HOMEPATH%\Qh99606F97131\76140.VKW
  • %HOMEPATH%\Qh99606F97131\57446.PBP
  • %HOMEPATH%\Qh99606F97131\I79078H42473.GKB
  • %HOMEPATH%\Qh99606F97131\X84648Q57147.DEG
  • %HOMEPATH%\Qh99606F97131\B71473X5459.JYB
  • %HOMEPATH%\Qh99606F97131\50838.QOL
  • %HOMEPATH%\Qh99606F97131\P70603M24940.RHH
  • %HOMEPATH%\Qh99606F97131\81040.WLB
  • %HOMEPATH%\Qh99606F97131\21498.XON
  • %HOMEPATH%\Qh99606F97131\64539.SPT
  • %HOMEPATH%\Qh99606F97131\X12277Z27112.NSB
  • %HOMEPATH%\Qh99606F97131\C93210Y6104.EVP
  • %HOMEPATH%\Qh99606F97131\87216.FHQ
  • %HOMEPATH%\Qh99606F97131\M3776D42255.FPX
  • %HOMEPATH%\Qh99606F97131\A69423L92251.RRW
  • %HOMEPATH%\Qh99606F97131\D53212N70321.QOZ
  • %HOMEPATH%\Qh99606F97131\59523.MAS
  • %HOMEPATH%\Qh99606F97131\C66682Q5190.RSN
  • %HOMEPATH%\Qh99606F97131\U66785U7697.BGE
  • %HOMEPATH%\Qh99606F97131\87396.JDL
  • %HOMEPATH%\Qh99606F97131\K33724I60518.MDB
  • %HOMEPATH%\Qh99606F97131\46009.QTX
  • %HOMEPATH%\Qh99606F97131\78754.IXS
  • %HOMEPATH%\Qh99606F97131\71688.APN
  • %HOMEPATH%\Qh99606F97131\G41120N24356.DCA
  • %HOMEPATH%\Qh99606F97131\19740.FIZ
  • %HOMEPATH%\Qh99606F97131\22147.ZEK
  • %HOMEPATH%\Qh99606F97131\62182.VTC
  • %HOMEPATH%\Qh99606F97131\O57862P37384.ECE
  • %HOMEPATH%\Qh99606F97131\O65742J63364.SHF
  • %HOMEPATH%\Qh99606F97131\P8099U25443.HYC
  • %HOMEPATH%\Qh99606F97131\G39095O2269.KRO
  • %HOMEPATH%\Qh99606F97131\28728.ACB
  • %HOMEPATH%\Qh99606F97131\L64863L48281.VHO
  • %HOMEPATH%\Qh99606F97131\I39480B43616.VOU
  • %HOMEPATH%\Qh99606F97131\82148.HYO
  • %HOMEPATH%\Qh99606F97131\4425.LWZ
  • %HOMEPATH%\Qh99606F97131\O92783E88713.HMZ
  • %HOMEPATH%\Qh99606F97131\Y24223S83274.XZG
  • %HOMEPATH%\Qh99606F97131\50201.KHD
  • %HOMEPATH%\Qh99606F97131\89297.OOX
  • %HOMEPATH%\Qh99606F97131\X68770Z46132.LFQ
  • %HOMEPATH%\Qh99606F97131\R45107R36277.KCS
  • %HOMEPATH%\Qh99606F97131\D59251H84354.UKA
  • %HOMEPATH%\Qh99606F97131\56257.MMV
  • %HOMEPATH%\Qh99606F97131\V19141E13230.PGP
  • %HOMEPATH%\Qh99606F97131\O63517G48545.KEW
  • %HOMEPATH%\Qh99606F97131\A39377U74706.GOE
  • %HOMEPATH%\Qh99606F97131\16461.LWU
  • %HOMEPATH%\Qh99606F97131\50771.RPG
  • %HOMEPATH%\Qh99606F97131\86439.DQU
  • %HOMEPATH%\Qh99606F97131\69488.WRB
  • %HOMEPATH%\Qh99606F97131\7400.PIV
  • %HOMEPATH%\Qh99606F97131\N28802U44447.HJV
  • %HOMEPATH%\Qh99606F97131\91075.EXB
  • %HOMEPATH%\Qh99606F97131\63807.LQH
Sets the 'hidden' attribute to the following files:
  • %HOMEPATH%\Rp47477F39082.TK9
Deletes the following files:
  • %HOMEPATH%\Rp47477F39082.TK9
  • %TEMP%\aut1.tmp
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'
  • ClassName: 'EDIT' WindowName: '(null)'

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android