マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Trojan.MulDrop6.51962

Added to the Dr.Web virus database: 2016-08-19

Virus description added:

Technical Information

To ensure autorun and distribution:
Creates the following services:
  • [<HKLM>\SYSTEM\ControlSet001\Services\service_launcher_core] 'ImagePath' = '"%ALLUSERSPROFILE%\Application Data\MicrosoftCoreLiveUpdateEngine\smss.exe"'
  • [<HKLM>\SYSTEM\ControlSet001\Services\service_launcher_core] 'Start' = '00000002'
Malicious functions:
Executes the following:
  • '%ALLUSERSPROFILE%\Application Data\MicrosoftCoreLiveUpdateEngine\smss.exe'
  • '%ALLUSERSPROFILE%\Application Data\MicrosoftCoreLiveUpdateEngine\smss.exe' SERVICE_INSTALL
Modifies file system:
Creates the following files:
  • %ALLUSERSPROFILE%\Application Data\gEIfCLCgr.xzr
  • %ALLUSERSPROFILE%\Application Data\rfFy3RTWvVr.mnn
  • %ALLUSERSPROFILE%\Application Data\Ph96LCAJL.sso
  • %ALLUSERSPROFILE%\Application Data\JMSYr.alr
  • %ALLUSERSPROFILE%\Application Data\RVZgjy2.wub
  • %ALLUSERSPROFILE%\Application Data\ZKTOvPE1g5.gli
  • %ALLUSERSPROFILE%\Application Data\AgJ5pT7y.lzl
  • %ALLUSERSPROFILE%\Application Data\2bp.cvv
  • %ALLUSERSPROFILE%\Application Data\Y05GjP.ajq
  • %ALLUSERSPROFILE%\Application Data\zyB9UKsxVm1.cgp
  • %ALLUSERSPROFILE%\Application Data\7DqhUF.kje
  • %ALLUSERSPROFILE%\Application Data\1KhzuQy.smq
  • %ALLUSERSPROFILE%\Application Data\SP7E.crg
  • %ALLUSERSPROFILE%\Application Data\Y70.ovb
  • %ALLUSERSPROFILE%\Application Data\8WOkD7K.mzx
  • %ALLUSERSPROFILE%\Application Data\VZz90D.ueh
  • %ALLUSERSPROFILE%\Application Data\lQL25r.rnb
  • %ALLUSERSPROFILE%\Application Data\ZvIYJB.dsh
  • %ALLUSERSPROFILE%\Application Data\FJw3vJ.vkq
  • %ALLUSERSPROFILE%\Application Data\UJ6xxCMB.ywa
  • %ALLUSERSPROFILE%\Application Data\TMFtlwAiA.lxk
  • %ALLUSERSPROFILE%\Application Data\HuilkDf.tdr
  • %ALLUSERSPROFILE%\Application Data\ud3kfG.hax
  • %ALLUSERSPROFILE%\Application Data\vd89st2XeX.tzv
  • %ALLUSERSPROFILE%\Application Data\eXGYgCqQ.rhr
  • %ALLUSERSPROFILE%\Application Data\rzHcOOCh.ujn
  • %ALLUSERSPROFILE%\Application Data\7bGJd7DBZ.mkk
  • %ALLUSERSPROFILE%\Application Data\R8pygzoF.oqm
  • %ALLUSERSPROFILE%\Application Data\QcNhe.eos
  • %ALLUSERSPROFILE%\Application Data\bjl.ntp
  • %ALLUSERSPROFILE%\Application Data\r0DkAfx3d.hlj
  • %ALLUSERSPROFILE%\Application Data\YHy.wdf
  • %ALLUSERSPROFILE%\Application Data\1YOh36wav.oyp
  • %ALLUSERSPROFILE%\Application Data\vPjrZ0lRVg.bcj
  • %ALLUSERSPROFILE%\Application Data\ZagB7.myh
  • %ALLUSERSPROFILE%\Application Data\7Ljm.vrf
  • %ALLUSERSPROFILE%\Application Data\JlQY.bxg
  • %ALLUSERSPROFILE%\Application Data\AKDX87.atr
  • %ALLUSERSPROFILE%\Application Data\OVyYZ6p.rer
  • %ALLUSERSPROFILE%\Application Data\W802MCT3X.ykz
  • %ALLUSERSPROFILE%\Application Data\GeqaQ8cUTS4.sxk
  • %ALLUSERSPROFILE%\Application Data\GNgggFsbDa.whx
  • %ALLUSERSPROFILE%\Application Data\i9wCj8Jk.ahp
  • %ALLUSERSPROFILE%\Application Data\qY3kgrMoH.auz
  • %ALLUSERSPROFILE%\Application Data\m7sjwT.kna
  • %ALLUSERSPROFILE%\Application Data\BTF0OKcH1.yfl
  • %ALLUSERSPROFILE%\Application Data\5hL99f.dil
  • %ALLUSERSPROFILE%\Application Data\ecRIpsB.phr
  • %ALLUSERSPROFILE%\Application Data\lGixG.bta
  • %ALLUSERSPROFILE%\Application Data\MzTx6qOPB.luh
  • %ALLUSERSPROFILE%\Application Data\wZigL2.lbl
  • %ALLUSERSPROFILE%\Application Data\w2Uz7bpfied.stu
  • %ALLUSERSPROFILE%\Application Data\TnkamWJhs.rvy
  • %ALLUSERSPROFILE%\Application Data\6IulfTeVs8.acf
  • %ALLUSERSPROFILE%\Application Data\9HVa.goi
  • %ALLUSERSPROFILE%\Application Data\elMO.eme
  • %ALLUSERSPROFILE%\Application Data\FhbmOy.raz
  • %ALLUSERSPROFILE%\Application Data\6cS2Ap4.zvi
  • %ALLUSERSPROFILE%\Application Data\65FPZCrcxx.cem
  • %ALLUSERSPROFILE%\Application Data\mApx98X8.xlz
  • %ALLUSERSPROFILE%\Application Data\UNd.sdv
  • %ALLUSERSPROFILE%\Application Data\BtO.gvh
  • %ALLUSERSPROFILE%\Application Data\YQF.mvc
  • %ALLUSERSPROFILE%\Application Data\HlPdOX140fq.ayg
  • %ALLUSERSPROFILE%\Application Data\sOhI6oD.vqc
  • %ALLUSERSPROFILE%\Application Data\sjjNpJ.uvz
  • %ALLUSERSPROFILE%\Application Data\6MF.oop
  • %ALLUSERSPROFILE%\Application Data\04OkL.zev
  • %ALLUSERSPROFILE%\Application Data\D1S.rrs
  • %ALLUSERSPROFILE%\Application Data\7NM5Sdq4t.ktb
  • %ALLUSERSPROFILE%\Application Data\3s59d6oiqWA.ngt
  • %ALLUSERSPROFILE%\Application Data\MicrosoftCoreLiveUpdateEngine\smss.InstallLog
  • %ALLUSERSPROFILE%\Application Data\zec4RjuCAVx.afj
  • %ALLUSERSPROFILE%\Application Data\xnLAnzr.old
  • %ALLUSERSPROFILE%\Application Data\QPVAX2tXzo.idv
  • %ALLUSERSPROFILE%\Application Data\oC8Dw5.nmi
  • %ALLUSERSPROFILE%\Application Data\05Sed.dtr
  • %ALLUSERSPROFILE%\Application Data\aXfZ7iS.afk
  • %ALLUSERSPROFILE%\Application Data\Z5D2rgLA.moy
  • %ALLUSERSPROFILE%\Application Data\l4Ou2avkM.ifk
  • %ALLUSERSPROFILE%\Application Data\lGqiN.ulo
  • %ALLUSERSPROFILE%\Application Data\hfg.npg
  • %ALLUSERSPROFILE%\Application Data\djm1SMbP9.zql
  • %ALLUSERSPROFILE%\Application Data\wbMPo20.mrm
  • %ALLUSERSPROFILE%\Application Data\Jdk0D1B.owt
  • %ALLUSERSPROFILE%\Application Data\eCr.oge
  • %ALLUSERSPROFILE%\Application Data\Me0Qa3mkyul.bfe
  • %ALLUSERSPROFILE%\Application Data\GZIWPWyG3aC.kro
  • %ALLUSERSPROFILE%\Application Data\VGlYU.lnw
  • %ALLUSERSPROFILE%\Application Data\yF2.mnt
  • %ALLUSERSPROFILE%\Application Data\NBOk4E0wwu8.pwn
  • %ALLUSERSPROFILE%\Application Data\OsU26fSY.pkn
  • %ALLUSERSPROFILE%\Application Data\fqkz.ddu
  • %ALLUSERSPROFILE%\Application Data\ml4j.slx
  • %ALLUSERSPROFILE%\Application Data\XI4D4d.rbm
  • %ALLUSERSPROFILE%\Application Data\VyMNtzm.xof
  • %ALLUSERSPROFILE%\Application Data\h27r5uAi.hcc
  • %ALLUSERSPROFILE%\Application Data\TK1.ldz
  • %ALLUSERSPROFILE%\Application Data\BsEzkxwDcO.dmy
  • %ALLUSERSPROFILE%\Application Data\Ooq7nEyhYcr.plo
  • %ALLUSERSPROFILE%\Application Data\MicrosoftCoreLiveUpdateEngine\serial.sn
  • %ALLUSERSPROFILE%\Application Data\MmW9yxFdS.aju
  • %ALLUSERSPROFILE%\Application Data\d3QVz3cRr.weq
  • %ALLUSERSPROFILE%\Application Data\UZpPuq2.cvv
  • %ALLUSERSPROFILE%\Application Data\cJXEsdPy.mpc
  • %ALLUSERSPROFILE%\Application Data\MicrosoftCoreLiveUpdateEngine\smss.InstallState
  • %ALLUSERSPROFILE%\Application Data\jz5aK5hKe.cep
  • %ALLUSERSPROFILE%\Application Data\JzV0IM.qxa
  • %ALLUSERSPROFILE%\Application Data\EXNhnes.fjc
  • %ALLUSERSPROFILE%\Application Data\DEeI.dik
  • %ALLUSERSPROFILE%\Application Data\W0rk9r66M.xbb
  • %ALLUSERSPROFILE%\Application Data\4ssJo8SmeWt.udq
  • %ALLUSERSPROFILE%\Application Data\iaGXSBCET.exc
  • %ALLUSERSPROFILE%\Application Data\5X5KgUM4Q.egn
  • %ALLUSERSPROFILE%\Application Data\kvAJT62VF.ugv
  • %ALLUSERSPROFILE%\Application Data\0GDWqMI.kah
  • %ALLUSERSPROFILE%\Application Data\slBDBsrAu.cdn
  • %ALLUSERSPROFILE%\Application Data\8dhGz3HA9G.lzd
  • %ALLUSERSPROFILE%\Application Data\pJYxyFX9ha.bkv
  • %ALLUSERSPROFILE%\Application Data\XutvNGzUH37.ttg
  • %ALLUSERSPROFILE%\Application Data\QR0FEAAlJ5F.mec
  • %ALLUSERSPROFILE%\Application Data\unasBJ.dmq
  • %ALLUSERSPROFILE%\Application Data\HmSjAP.lod
  • %ALLUSERSPROFILE%\Application Data\j3y.gsv
  • %ALLUSERSPROFILE%\Application Data\KeKnp2J.cio
  • %ALLUSERSPROFILE%\Application Data\CS3t8mRn.ixx
  • %ALLUSERSPROFILE%\Application Data\XaY.yws
  • %ALLUSERSPROFILE%\Application Data\M46.hno
  • %ALLUSERSPROFILE%\Application Data\3zfkaa9aWx.kwe
  • %ALLUSERSPROFILE%\Application Data\x69y3hTN.onn
  • %ALLUSERSPROFILE%\Application Data\bp3hMQY31.sek
  • %ALLUSERSPROFILE%\Application Data\1T6lglG.fsj
  • %ALLUSERSPROFILE%\Application Data\Y8TJX.xjo
  • %ALLUSERSPROFILE%\Application Data\YBIy9.zmc
  • %ALLUSERSPROFILE%\Application Data\oVH.rva
  • %ALLUSERSPROFILE%\Application Data\GFd4.vul
  • %ALLUSERSPROFILE%\Application Data\EpX.qmq
  • %ALLUSERSPROFILE%\Application Data\n52Np2Yn.ume
  • %ALLUSERSPROFILE%\Application Data\gGGYX.oyh
  • %ALLUSERSPROFILE%\Application Data\mCAiy8Vsw.vav
  • %ALLUSERSPROFILE%\Application Data\cbwMML7.gzd
  • %ALLUSERSPROFILE%\Application Data\vWNm.zly
  • %ALLUSERSPROFILE%\Application Data\xeZPH5i.ged
  • %ALLUSERSPROFILE%\Application Data\R50b6Efo.ctl
  • %ALLUSERSPROFILE%\Application Data\IWwpzD1M0Z.mfh
  • %ALLUSERSPROFILE%\Application Data\STkgIh3R.fih
  • %ALLUSERSPROFILE%\Application Data\xrfo.sbx
  • %ALLUSERSPROFILE%\Application Data\7EU.duz
  • %ALLUSERSPROFILE%\Application Data\ou4k2g.wel
  • %ALLUSERSPROFILE%\Application Data\JVG7BWNf.mpl
  • %ALLUSERSPROFILE%\Application Data\hE18cIYftU.oen
  • %ALLUSERSPROFILE%\Application Data\lwD6C.qxb
  • %ALLUSERSPROFILE%\Application Data\1w7xC.ynj
  • %ALLUSERSPROFILE%\Application Data\JgNEAIpSfz.iwf
  • %ALLUSERSPROFILE%\Application Data\ClQ6veKMyW5.bqm
  • %ALLUSERSPROFILE%\Application Data\7vieG.dfd
  • %ALLUSERSPROFILE%\Application Data\mIh0l.luf
  • %ALLUSERSPROFILE%\Application Data\jjD4.rwi
  • %ALLUSERSPROFILE%\Application Data\2gUHpcy3e4R.bdy
  • %ALLUSERSPROFILE%\Application Data\7RyMS5BTUoQ.vgh
  • %ALLUSERSPROFILE%\Application Data\lmfx1yP8wD.ewb
  • %ALLUSERSPROFILE%\Application Data\030keSVli7.vvo
  • %ALLUSERSPROFILE%\Application Data\HJ4vYrqb.nps
  • %ALLUSERSPROFILE%\Application Data\a28.fxy
  • %ALLUSERSPROFILE%\Application Data\RPAdIn.mln
  • %ALLUSERSPROFILE%\Application Data\s1dfJc.eoy
  • %ALLUSERSPROFILE%\Application Data\aDwg.pfh
  • %ALLUSERSPROFILE%\Application Data\iPl.esv
  • %ALLUSERSPROFILE%\Application Data\2vO7hj.ddl
  • %ALLUSERSPROFILE%\Application Data\6T7Kde.cfs
  • %ALLUSERSPROFILE%\Application Data\xj1WtPaLOs.mjt
  • %ALLUSERSPROFILE%\Application Data\SeL.res
  • %ALLUSERSPROFILE%\Application Data\MXWGHJZSB.spv
  • %ALLUSERSPROFILE%\Application Data\mykirdDC.ztc
  • %ALLUSERSPROFILE%\Application Data\QrsQCJFo1.ect
  • %ALLUSERSPROFILE%\Application Data\S42fXiUS.yrf
  • %ALLUSERSPROFILE%\Application Data\Hwo58.uvn
  • %ALLUSERSPROFILE%\Application Data\VULOGTm8Oxh.fbl
  • %ALLUSERSPROFILE%\Application Data\u7PxU38B0.wxh
  • %ALLUSERSPROFILE%\Application Data\DeC02wp.dlv
  • %ALLUSERSPROFILE%\Application Data\yDzxCpnzH5l.dhm
  • %ALLUSERSPROFILE%\Application Data\lyxyw2xRhUG.mqf
  • %ALLUSERSPROFILE%\Application Data\DOKu.whv
  • %ALLUSERSPROFILE%\Application Data\FjhRZK7jE.fuv
  • %ALLUSERSPROFILE%\Application Data\3cfWiKxou4.dwx
  • %ALLUSERSPROFILE%\Application Data\exPn3.sba
  • %ALLUSERSPROFILE%\Application Data\duU2cos.bsd
  • %ALLUSERSPROFILE%\Application Data\BrXefeWqcLU.npa
  • %ALLUSERSPROFILE%\Application Data\WfTwZYuxIm.ocm
  • %ALLUSERSPROFILE%\Application Data\XORynydM.uxu
  • %ALLUSERSPROFILE%\Application Data\kVMX3aiO.eaw
  • %ALLUSERSPROFILE%\Application Data\XrR4AhyP2ak.wzu
  • %ALLUSERSPROFILE%\Application Data\AAb.wwp
  • %ALLUSERSPROFILE%\Application Data\JIjUg.elw
  • %ALLUSERSPROFILE%\Application Data\60rf.eix
  • %ALLUSERSPROFILE%\Application Data\4XbInXh.wki
  • %ALLUSERSPROFILE%\Application Data\GRvA7Gkm.vag
  • %ALLUSERSPROFILE%\Application Data\FvJL.crn
  • %ALLUSERSPROFILE%\Application Data\EAc.ecm
  • %ALLUSERSPROFILE%\Application Data\NChHA0.hov
  • %ALLUSERSPROFILE%\Application Data\NeZmuTcVZ.pgv
  • %ALLUSERSPROFILE%\Application Data\DFneGHU.hbm
  • %ALLUSERSPROFILE%\Application Data\6xQSuoIxq.etw
  • %ALLUSERSPROFILE%\Application Data\xEwy.igj
  • %ALLUSERSPROFILE%\Application Data\JadQrmQ.whs
  • %ALLUSERSPROFILE%\Application Data\tQtyvb.bwn
  • %ALLUSERSPROFILE%\Application Data\5281KfbaQX.wdj
  • %ALLUSERSPROFILE%\Application Data\Jjj.yfk
  • %ALLUSERSPROFILE%\Application Data\JzMoOIBYdb.wmg
  • %ALLUSERSPROFILE%\Application Data\zWUF4mK.lpg
  • %ALLUSERSPROFILE%\Application Data\uT4.ueb
  • %ALLUSERSPROFILE%\Application Data\nkXG.rbb
  • %ALLUSERSPROFILE%\Application Data\DOdE69Uatp.ant
  • %ALLUSERSPROFILE%\Application Data\avDi1p1.kke
  • %ALLUSERSPROFILE%\Application Data\z8g6yH2aCRW.hcf
  • %ALLUSERSPROFILE%\Application Data\JpUyz.vit
  • %ALLUSERSPROFILE%\Application Data\iunUtvX.acn
  • %ALLUSERSPROFILE%\Application Data\Eout8Pz8W.kzt
  • %ALLUSERSPROFILE%\Application Data\PiSnyXiY.tfb
  • %ALLUSERSPROFILE%\Application Data\5a0ftdl4.roi
  • %ALLUSERSPROFILE%\Application Data\bjr2Q1sG.uoz
  • %ALLUSERSPROFILE%\Application Data\lEjGh.yvr
  • %ALLUSERSPROFILE%\Application Data\0qfS2w2.iin
  • %ALLUSERSPROFILE%\Application Data\oGIBHXKzO.fze
  • %ALLUSERSPROFILE%\Application Data\ydn.vet
  • %ALLUSERSPROFILE%\Application Data\eSI.ewy
  • %ALLUSERSPROFILE%\Application Data\keFpJHD.kqq
  • %ALLUSERSPROFILE%\Application Data\yRGCVAt.cbz
  • %ALLUSERSPROFILE%\Application Data\Y4ZlumPQM.nhu
  • %ALLUSERSPROFILE%\Application Data\6n7YMDu.tlq
  • %ALLUSERSPROFILE%\Application Data\dSq.rsf
  • %ALLUSERSPROFILE%\Application Data\um7d9J.wwb
  • %ALLUSERSPROFILE%\Application Data\Oy3KrX5Sd.xlf
  • %ALLUSERSPROFILE%\Application Data\W6bJJD.bgh
  • %ALLUSERSPROFILE%\Application Data\B3os.lkb
  • %ALLUSERSPROFILE%\Application Data\TZm57SZsX.uqe
  • %ALLUSERSPROFILE%\Application Data\9mpmwh.mob
  • %ALLUSERSPROFILE%\Application Data\YYKTyolLNJE.svp
  • %ALLUSERSPROFILE%\Application Data\IYrO7owfnEF.pnl
  • %ALLUSERSPROFILE%\Application Data\87Yytkhndsh.egf
  • %ALLUSERSPROFILE%\Application Data\MicrosoftCoreLiveUpdateEngine\smss.exe
  • %ALLUSERSPROFILE%\Application Data\QQwOS.bsc
  • %ALLUSERSPROFILE%\Application Data\LPTTrp.yqw
  • %ALLUSERSPROFILE%\Application Data\BYL8YiYO.biz
  • %ALLUSERSPROFILE%\Application Data\E81TXf.cab
  • %ALLUSERSPROFILE%\Application Data\qbjRw.ocq
  • %ALLUSERSPROFILE%\Application Data\4dJOWmWZyc.hqg
  • %ALLUSERSPROFILE%\Application Data\wr0g.bev
  • %ALLUSERSPROFILE%\Application Data\ifwUFPsp3.maj
  • %ALLUSERSPROFILE%\Application Data\Ssl.xmn
  • %ALLUSERSPROFILE%\Application Data\mMgNFHUvoRh.ilp
  • %ALLUSERSPROFILE%\Application Data\gysh.jwx
  • %ALLUSERSPROFILE%\Application Data\RcdZbZ.saa
  • %ALLUSERSPROFILE%\Application Data\VvuGll.cxv
  • %ALLUSERSPROFILE%\Application Data\APpPYnUtH.jbt
  • %ALLUSERSPROFILE%\Application Data\VEtXgboXmN3.ctu
  • %ALLUSERSPROFILE%\Application Data\xOCgafZMb.xlc
  • %ALLUSERSPROFILE%\Application Data\r0Vo3P.poo
  • %ALLUSERSPROFILE%\Application Data\GbjgzGG.vbf
  • %ALLUSERSPROFILE%\Application Data\j2Bu.guw
  • %ALLUSERSPROFILE%\Application Data\C9PgC.wos
  • %ALLUSERSPROFILE%\Application Data\ZX7mUegczpc.ngz
  • %ALLUSERSPROFILE%\Application Data\6Bj7bZa.wua
  • %ALLUSERSPROFILE%\Application Data\Bc6Uzk.wlw
  • %ALLUSERSPROFILE%\Application Data\foD1CHp7joG.yps
  • %ALLUSERSPROFILE%\Application Data\sid.pdg
  • %ALLUSERSPROFILE%\Application Data\Mm69QsEhhEJ.dae
  • %ALLUSERSPROFILE%\Application Data\Y58LZ7sHo.frv
  • %ALLUSERSPROFILE%\Application Data\1eWdKKYWhNb.tim
  • %ALLUSERSPROFILE%\Application Data\yMGeXe.tcr
  • %ALLUSERSPROFILE%\Application Data\pZ6L3ShjTP2.sse
  • %ALLUSERSPROFILE%\Application Data\jUY1A9Q7nao.lyu
  • %ALLUSERSPROFILE%\Application Data\YbW.npm
  • %ALLUSERSPROFILE%\Application Data\okFOs4.iij
  • %ALLUSERSPROFILE%\Application Data\lwmCkMxkW.cpm
  • %ALLUSERSPROFILE%\Application Data\59Y7.kbn
  • %ALLUSERSPROFILE%\Application Data\lA2ZK.dnt
  • %ALLUSERSPROFILE%\Application Data\1x3CPzqJ1M.bqs
  • %ALLUSERSPROFILE%\Application Data\IkS0rjc.cpz
  • %ALLUSERSPROFILE%\Application Data\GoeJFwD8F.gbp
  • %ALLUSERSPROFILE%\Application Data\W1YG2LoH0Vf.ybw
  • %ALLUSERSPROFILE%\Application Data\mKV2tCKLD.wrg
  • %ALLUSERSPROFILE%\Application Data\IJWbVL.yaj
  • %ALLUSERSPROFILE%\Application Data\L8P.asd
  • %ALLUSERSPROFILE%\Application Data\j3netLic.kij
  • %ALLUSERSPROFILE%\Application Data\I5Jjx9z.qke
  • %ALLUSERSPROFILE%\Application Data\mU0J.clr
  • %ALLUSERSPROFILE%\Application Data\rtwetI.krw
  • %ALLUSERSPROFILE%\Application Data\tyEo.qcd
  • %ALLUSERSPROFILE%\Application Data\qGv9bSrN.clr
  • %ALLUSERSPROFILE%\Application Data\Ufsu3MM.sid
  • %ALLUSERSPROFILE%\Application Data\ifJQ.xvg
  • %ALLUSERSPROFILE%\Application Data\TvHspL4.chn
  • %ALLUSERSPROFILE%\Application Data\gJ84r9KWGE.xfr
  • %ALLUSERSPROFILE%\Application Data\45s3yT.ssd
  • %ALLUSERSPROFILE%\Application Data\9KMYYK52.kks
  • %ALLUSERSPROFILE%\Application Data\BRKpH.wxv
  • %ALLUSERSPROFILE%\Application Data\DVDuue.nke
  • %ALLUSERSPROFILE%\Application Data\wwrtcJEuO.ddk
  • %ALLUSERSPROFILE%\Application Data\99lJ.ayh
  • %ALLUSERSPROFILE%\Application Data\jUyx.lil
  • %ALLUSERSPROFILE%\Application Data\8bAAFldjsS.xtb
  • %ALLUSERSPROFILE%\Application Data\TWkHjJIoze.axm
  • %ALLUSERSPROFILE%\Application Data\Xz4E.omn
  • %ALLUSERSPROFILE%\Application Data\SjeULny2.amc
  • %ALLUSERSPROFILE%\Application Data\2HB03zgY0sn.znb
  • %ALLUSERSPROFILE%\Application Data\xlGy.zwx
  • %ALLUSERSPROFILE%\Application Data\3WELfS.wde
  • %ALLUSERSPROFILE%\Application Data\dZTB60rZ1.vtv
  • %ALLUSERSPROFILE%\Application Data\fe24Cj2.cow
  • %ALLUSERSPROFILE%\Application Data\rb78.rsy
  • %ALLUSERSPROFILE%\Application Data\ka17t.xje
  • %ALLUSERSPROFILE%\Application Data\O2fm.fso
  • %ALLUSERSPROFILE%\Application Data\H3Qyh.hoj
Deletes the following files:
  • %ALLUSERSPROFILE%\Application Data\gEIfCLCgr.xzr
  • %ALLUSERSPROFILE%\Application Data\rfFy3RTWvVr.mnn
  • %ALLUSERSPROFILE%\Application Data\Ph96LCAJL.sso
  • %ALLUSERSPROFILE%\Application Data\JMSYr.alr
  • %ALLUSERSPROFILE%\Application Data\RVZgjy2.wub
  • %ALLUSERSPROFILE%\Application Data\ZKTOvPE1g5.gli
  • %ALLUSERSPROFILE%\Application Data\AgJ5pT7y.lzl
  • %ALLUSERSPROFILE%\Application Data\2bp.cvv
  • %ALLUSERSPROFILE%\Application Data\Y05GjP.ajq
  • %ALLUSERSPROFILE%\Application Data\zyB9UKsxVm1.cgp
  • %ALLUSERSPROFILE%\Application Data\7DqhUF.kje
  • %ALLUSERSPROFILE%\Application Data\1KhzuQy.smq
  • %ALLUSERSPROFILE%\Application Data\SP7E.crg
  • %ALLUSERSPROFILE%\Application Data\Y70.ovb
  • %ALLUSERSPROFILE%\Application Data\8WOkD7K.mzx
  • %ALLUSERSPROFILE%\Application Data\VZz90D.ueh
  • %ALLUSERSPROFILE%\Application Data\lQL25r.rnb
  • %ALLUSERSPROFILE%\Application Data\ZvIYJB.dsh
  • %ALLUSERSPROFILE%\Application Data\FJw3vJ.vkq
  • %ALLUSERSPROFILE%\Application Data\vd89st2XeX.tzv
  • %ALLUSERSPROFILE%\Application Data\TMFtlwAiA.lxk
  • %ALLUSERSPROFILE%\Application Data\bjl.ntp
  • %ALLUSERSPROFILE%\Application Data\ud3kfG.hax
  • %ALLUSERSPROFILE%\Application Data\HuilkDf.tdr
  • %ALLUSERSPROFILE%\Application Data\QcNhe.eos
  • %ALLUSERSPROFILE%\Application Data\rzHcOOCh.ujn
  • %ALLUSERSPROFILE%\Application Data\eXGYgCqQ.rhr
  • %ALLUSERSPROFILE%\Application Data\R8pygzoF.oqm
  • %ALLUSERSPROFILE%\Application Data\JlQY.bxg
  • %ALLUSERSPROFILE%\Application Data\vPjrZ0lRVg.bcj
  • %ALLUSERSPROFILE%\Application Data\r0DkAfx3d.hlj
  • %ALLUSERSPROFILE%\Application Data\UJ6xxCMB.ywa
  • %ALLUSERSPROFILE%\Application Data\1YOh36wav.oyp
  • %ALLUSERSPROFILE%\Application Data\YHy.wdf
  • %ALLUSERSPROFILE%\Application Data\OVyYZ6p.rer
  • %ALLUSERSPROFILE%\Application Data\7Ljm.vrf
  • %ALLUSERSPROFILE%\Application Data\ZagB7.myh
  • %ALLUSERSPROFILE%\Application Data\AKDX87.atr
  • %ALLUSERSPROFILE%\Application Data\sjjNpJ.uvz
  • %ALLUSERSPROFILE%\Application Data\i9wCj8Jk.ahp
  • %ALLUSERSPROFILE%\Application Data\W802MCT3X.ykz
  • %ALLUSERSPROFILE%\Application Data\lGixG.bta
  • %ALLUSERSPROFILE%\Application Data\GNgggFsbDa.whx
  • %ALLUSERSPROFILE%\Application Data\GeqaQ8cUTS4.sxk
  • %ALLUSERSPROFILE%\Application Data\ecRIpsB.phr
  • %ALLUSERSPROFILE%\Application Data\m7sjwT.kna
  • %ALLUSERSPROFILE%\Application Data\qY3kgrMoH.auz
  • %ALLUSERSPROFILE%\Application Data\5hL99f.dil
  • %ALLUSERSPROFILE%\Application Data\elMO.eme
  • %ALLUSERSPROFILE%\Application Data\TnkamWJhs.rvy
  • %ALLUSERSPROFILE%\Application Data\MzTx6qOPB.luh
  • %ALLUSERSPROFILE%\Application Data\6Bj7bZa.wua
  • %ALLUSERSPROFILE%\Application Data\w2Uz7bpfied.stu
  • %ALLUSERSPROFILE%\Application Data\wZigL2.lbl
  • %ALLUSERSPROFILE%\Application Data\6cS2Ap4.zvi
  • %ALLUSERSPROFILE%\Application Data\9HVa.goi
  • %ALLUSERSPROFILE%\Application Data\6IulfTeVs8.acf
  • %ALLUSERSPROFILE%\Application Data\FhbmOy.raz
  • %ALLUSERSPROFILE%\Application Data\YQF.mvc
  • %ALLUSERSPROFILE%\Application Data\mApx98X8.xlz
  • %ALLUSERSPROFILE%\Application Data\D1S.rrs
  • %ALLUSERSPROFILE%\Application Data\BtO.gvh
  • %ALLUSERSPROFILE%\Application Data\UNd.sdv
  • %ALLUSERSPROFILE%\Application Data\04OkL.zev
  • %ALLUSERSPROFILE%\Application Data\sOhI6oD.vqc
  • %ALLUSERSPROFILE%\Application Data\HlPdOX140fq.ayg
  • %ALLUSERSPROFILE%\Application Data\6MF.oop
  • %ALLUSERSPROFILE%\Application Data\oC8Dw5.nmi
  • %ALLUSERSPROFILE%\Application Data\zec4RjuCAVx.afj
  • %ALLUSERSPROFILE%\Application Data\7NM5Sdq4t.ktb
  • %ALLUSERSPROFILE%\Application Data\BTF0OKcH1.yfl
  • %ALLUSERSPROFILE%\Application Data\65FPZCrcxx.cem
  • %ALLUSERSPROFILE%\Application Data\3s59d6oiqWA.ngt
  • %ALLUSERSPROFILE%\Application Data\aXfZ7iS.afk
  • %ALLUSERSPROFILE%\Application Data\QPVAX2tXzo.idv
  • %ALLUSERSPROFILE%\Application Data\xnLAnzr.old
  • %ALLUSERSPROFILE%\Application Data\05Sed.dtr
  • %ALLUSERSPROFILE%\Application Data\7bGJd7DBZ.mkk
  • %ALLUSERSPROFILE%\Application Data\djm1SMbP9.zql
  • %ALLUSERSPROFILE%\Application Data\l4Ou2avkM.ifk
  • %ALLUSERSPROFILE%\Application Data\VGlYU.lnw
  • %ALLUSERSPROFILE%\Application Data\hfg.npg
  • %ALLUSERSPROFILE%\Application Data\lGqiN.ulo
  • %ALLUSERSPROFILE%\Application Data\GZIWPWyG3aC.kro
  • %ALLUSERSPROFILE%\Application Data\Jdk0D1B.owt
  • %ALLUSERSPROFILE%\Application Data\wbMPo20.mrm
  • %ALLUSERSPROFILE%\Application Data\Me0Qa3mkyul.bfe
  • %ALLUSERSPROFILE%\Application Data\VyMNtzm.xof
  • %ALLUSERSPROFILE%\Application Data\fqkz.ddu
  • %ALLUSERSPROFILE%\Application Data\yF2.mnt
  • %ALLUSERSPROFILE%\Application Data\IWwpzD1M0Z.mfh
  • %ALLUSERSPROFILE%\Application Data\OsU26fSY.pkn
  • %ALLUSERSPROFILE%\Application Data\NBOk4E0wwu8.pwn
  • %ALLUSERSPROFILE%\Application Data\TK1.ldz
  • %ALLUSERSPROFILE%\Application Data\XI4D4d.rbm
  • %ALLUSERSPROFILE%\Application Data\ml4j.slx
  • %ALLUSERSPROFILE%\Application Data\h27r5uAi.hcc
  • %ALLUSERSPROFILE%\Application Data\MmW9yxFdS.aju
  • %ALLUSERSPROFILE%\Application Data\d3QVz3cRr.weq
  • %ALLUSERSPROFILE%\Application Data\0GDWqMI.kah
  • %ALLUSERSPROFILE%\Application Data\EXNhnes.fjc
  • %ALLUSERSPROFILE%\Application Data\Ooq7nEyhYcr.plo
  • %ALLUSERSPROFILE%\Application Data\JzV0IM.qxa
  • %ALLUSERSPROFILE%\Application Data\cJXEsdPy.mpc
  • %ALLUSERSPROFILE%\Application Data\UZpPuq2.cvv
  • %ALLUSERSPROFILE%\Application Data\jz5aK5hKe.cep
  • %ALLUSERSPROFILE%\Application Data\kvAJT62VF.ugv
  • %ALLUSERSPROFILE%\Application Data\4ssJo8SmeWt.udq
  • %ALLUSERSPROFILE%\Application Data\iaGXSBCET.exc
  • %ALLUSERSPROFILE%\Application Data\eCr.oge
  • %ALLUSERSPROFILE%\Application Data\BsEzkxwDcO.dmy
  • %ALLUSERSPROFILE%\Application Data\DEeI.dik
  • %ALLUSERSPROFILE%\Application Data\slBDBsrAu.cdn
  • %ALLUSERSPROFILE%\Application Data\8dhGz3HA9G.lzd
  • %ALLUSERSPROFILE%\Application Data\W0rk9r66M.xbb
  • %ALLUSERSPROFILE%\Application Data\5X5KgUM4Q.egn
  • %ALLUSERSPROFILE%\Application Data\R50b6Efo.ctl
  • %ALLUSERSPROFILE%\Application Data\unasBJ.dmq
  • %ALLUSERSPROFILE%\Application Data\pJYxyFX9ha.bkv
  • %ALLUSERSPROFILE%\Application Data\M46.hno
  • %ALLUSERSPROFILE%\Application Data\QR0FEAAlJ5F.mec
  • %ALLUSERSPROFILE%\Application Data\XutvNGzUH37.ttg
  • %ALLUSERSPROFILE%\Application Data\XaY.yws
  • %ALLUSERSPROFILE%\Application Data\j3y.gsv
  • %ALLUSERSPROFILE%\Application Data\HmSjAP.lod
  • %ALLUSERSPROFILE%\Application Data\CS3t8mRn.ixx
  • %ALLUSERSPROFILE%\Application Data\oVH.rva
  • %ALLUSERSPROFILE%\Application Data\1T6lglG.fsj
  • %ALLUSERSPROFILE%\Application Data\3zfkaa9aWx.kwe
  • %ALLUSERSPROFILE%\Application Data\Z5D2rgLA.moy
  • %ALLUSERSPROFILE%\Application Data\bp3hMQY31.sek
  • %ALLUSERSPROFILE%\Application Data\x69y3hTN.onn
  • %ALLUSERSPROFILE%\Application Data\EpX.qmq
  • %ALLUSERSPROFILE%\Application Data\YBIy9.zmc
  • %ALLUSERSPROFILE%\Application Data\Y8TJX.xjo
  • %ALLUSERSPROFILE%\Application Data\GFd4.vul
  • %ALLUSERSPROFILE%\Application Data\cbwMML7.gzd
  • %ALLUSERSPROFILE%\Application Data\vWNm.zly
  • %ALLUSERSPROFILE%\Application Data\ClQ6veKMyW5.bqm
  • %ALLUSERSPROFILE%\Application Data\7EU.duz
  • %ALLUSERSPROFILE%\Application Data\gGGYX.oyh
  • %ALLUSERSPROFILE%\Application Data\STkgIh3R.fih
  • %ALLUSERSPROFILE%\Application Data\xrfo.sbx
  • %ALLUSERSPROFILE%\Application Data\mCAiy8Vsw.vav
  • %ALLUSERSPROFILE%\Application Data\xeZPH5i.ged
  • %ALLUSERSPROFILE%\Application Data\JgNEAIpSfz.iwf
  • %ALLUSERSPROFILE%\Application Data\hE18cIYftU.oen
  • %ALLUSERSPROFILE%\Application Data\lwD6C.qxb
  • %ALLUSERSPROFILE%\Application Data\KeKnp2J.cio
  • %ALLUSERSPROFILE%\Application Data\n52Np2Yn.ume
  • %ALLUSERSPROFILE%\Application Data\ou4k2g.wel
  • %ALLUSERSPROFILE%\Application Data\7vieG.dfd
  • %ALLUSERSPROFILE%\Application Data\mIh0l.luf
  • %ALLUSERSPROFILE%\Application Data\JVG7BWNf.mpl
  • %ALLUSERSPROFILE%\Application Data\1w7xC.ynj
  • %ALLUSERSPROFILE%\Application Data\jjD4.rwi
  • %ALLUSERSPROFILE%\Application Data\2gUHpcy3e4R.bdy
  • %ALLUSERSPROFILE%\Application Data\7RyMS5BTUoQ.vgh
  • %ALLUSERSPROFILE%\Application Data\lmfx1yP8wD.ewb
  • %ALLUSERSPROFILE%\Application Data\030keSVli7.vvo
  • %ALLUSERSPROFILE%\Application Data\HJ4vYrqb.nps
  • %ALLUSERSPROFILE%\Application Data\a28.fxy
  • %ALLUSERSPROFILE%\Application Data\RPAdIn.mln
  • %ALLUSERSPROFILE%\Application Data\s1dfJc.eoy
  • %ALLUSERSPROFILE%\Application Data\aDwg.pfh
  • %ALLUSERSPROFILE%\Application Data\iPl.esv
  • %ALLUSERSPROFILE%\Application Data\2vO7hj.ddl
  • %ALLUSERSPROFILE%\Application Data\6T7Kde.cfs
  • %ALLUSERSPROFILE%\Application Data\xj1WtPaLOs.mjt
  • %ALLUSERSPROFILE%\Application Data\SeL.res
  • %ALLUSERSPROFILE%\Application Data\MXWGHJZSB.spv
  • %ALLUSERSPROFILE%\Application Data\mykirdDC.ztc
  • %ALLUSERSPROFILE%\Application Data\QrsQCJFo1.ect
  • %ALLUSERSPROFILE%\Application Data\S42fXiUS.yrf
  • %ALLUSERSPROFILE%\Application Data\yDzxCpnzH5l.dhm
  • %ALLUSERSPROFILE%\Application Data\VULOGTm8Oxh.fbl
  • %ALLUSERSPROFILE%\Application Data\duU2cos.bsd
  • %ALLUSERSPROFILE%\Application Data\DeC02wp.dlv
  • %ALLUSERSPROFILE%\Application Data\u7PxU38B0.wxh
  • %ALLUSERSPROFILE%\Application Data\exPn3.sba
  • %ALLUSERSPROFILE%\Application Data\DOKu.whv
  • %ALLUSERSPROFILE%\Application Data\lyxyw2xRhUG.mqf
  • %ALLUSERSPROFILE%\Application Data\3cfWiKxou4.dwx
  • %ALLUSERSPROFILE%\Application Data\JIjUg.elw
  • %ALLUSERSPROFILE%\Application Data\kVMX3aiO.eaw
  • %ALLUSERSPROFILE%\Application Data\BrXefeWqcLU.npa
  • %ALLUSERSPROFILE%\Application Data\Hwo58.uvn
  • %ALLUSERSPROFILE%\Application Data\XORynydM.uxu
  • %ALLUSERSPROFILE%\Application Data\WfTwZYuxIm.ocm
  • %ALLUSERSPROFILE%\Application Data\4XbInXh.wki
  • %ALLUSERSPROFILE%\Application Data\AAb.wwp
  • %ALLUSERSPROFILE%\Application Data\XrR4AhyP2ak.wzu
  • %ALLUSERSPROFILE%\Application Data\60rf.eix
  • %ALLUSERSPROFILE%\Application Data\0qfS2w2.iin
  • %ALLUSERSPROFILE%\Application Data\GRvA7Gkm.vag
  • %ALLUSERSPROFILE%\Application Data\FvJL.crn
  • %ALLUSERSPROFILE%\Application Data\EAc.ecm
  • %ALLUSERSPROFILE%\Application Data\NChHA0.hov
  • %ALLUSERSPROFILE%\Application Data\NeZmuTcVZ.pgv
  • %ALLUSERSPROFILE%\Application Data\DFneGHU.hbm
  • %ALLUSERSPROFILE%\Application Data\6xQSuoIxq.etw
  • %ALLUSERSPROFILE%\Application Data\xEwy.igj
  • %ALLUSERSPROFILE%\Application Data\JadQrmQ.whs
  • %ALLUSERSPROFILE%\Application Data\tQtyvb.bwn
  • %ALLUSERSPROFILE%\Application Data\5281KfbaQX.wdj
  • %ALLUSERSPROFILE%\Application Data\Jjj.yfk
  • %ALLUSERSPROFILE%\Application Data\JzMoOIBYdb.wmg
  • %ALLUSERSPROFILE%\Application Data\zWUF4mK.lpg
  • %ALLUSERSPROFILE%\Application Data\uT4.ueb
  • %ALLUSERSPROFILE%\Application Data\nkXG.rbb
  • %ALLUSERSPROFILE%\Application Data\DOdE69Uatp.ant
  • %ALLUSERSPROFILE%\Application Data\avDi1p1.kke
  • %ALLUSERSPROFILE%\Application Data\z8g6yH2aCRW.hcf
  • %ALLUSERSPROFILE%\Application Data\5a0ftdl4.roi
  • %ALLUSERSPROFILE%\Application Data\iunUtvX.acn
  • %ALLUSERSPROFILE%\Application Data\eSI.ewy
  • %ALLUSERSPROFILE%\Application Data\PiSnyXiY.tfb
  • %ALLUSERSPROFILE%\Application Data\Eout8Pz8W.kzt
  • %ALLUSERSPROFILE%\Application Data\ydn.vet
  • %ALLUSERSPROFILE%\Application Data\lEjGh.yvr
  • %ALLUSERSPROFILE%\Application Data\bjr2Q1sG.uoz
  • %ALLUSERSPROFILE%\Application Data\oGIBHXKzO.fze
  • %ALLUSERSPROFILE%\Application Data\Oy3KrX5Sd.xlf
  • %ALLUSERSPROFILE%\Application Data\6n7YMDu.tlq
  • %ALLUSERSPROFILE%\Application Data\keFpJHD.kqq
  • %ALLUSERSPROFILE%\Application Data\JpUyz.vit
  • %ALLUSERSPROFILE%\Application Data\Y4ZlumPQM.nhu
  • %ALLUSERSPROFILE%\Application Data\yRGCVAt.cbz
  • %ALLUSERSPROFILE%\Application Data\B3os.lkb
  • %ALLUSERSPROFILE%\Application Data\um7d9J.wwb
  • %ALLUSERSPROFILE%\Application Data\dSq.rsf
  • %ALLUSERSPROFILE%\Application Data\W6bJJD.bgh
  • %ALLUSERSPROFILE%\Application Data\FjhRZK7jE.fuv
  • %ALLUSERSPROFILE%\Application Data\87Yytkhndsh.egf
  • %ALLUSERSPROFILE%\Application Data\9mpmwh.mob
  • %ALLUSERSPROFILE%\Application Data\qbjRw.ocq
  • %ALLUSERSPROFILE%\Application Data\IYrO7owfnEF.pnl
  • %ALLUSERSPROFILE%\Application Data\YYKTyolLNJE.svp
  • %ALLUSERSPROFILE%\Application Data\QQwOS.bsc
  • %ALLUSERSPROFILE%\Application Data\LPTTrp.yqw
  • %ALLUSERSPROFILE%\Application Data\BYL8YiYO.biz
  • %ALLUSERSPROFILE%\Application Data\E81TXf.cab
  • %ALLUSERSPROFILE%\Application Data\RcdZbZ.saa
  • %ALLUSERSPROFILE%\Application Data\Ssl.xmn
  • %ALLUSERSPROFILE%\Application Data\4dJOWmWZyc.hqg
  • %ALLUSERSPROFILE%\Application Data\8bAAFldjsS.xtb
  • %ALLUSERSPROFILE%\Application Data\ifwUFPsp3.maj
  • %ALLUSERSPROFILE%\Application Data\wr0g.bev
  • %ALLUSERSPROFILE%\Application Data\APpPYnUtH.jbt
  • %ALLUSERSPROFILE%\Application Data\gysh.jwx
  • %ALLUSERSPROFILE%\Application Data\mMgNFHUvoRh.ilp
  • %ALLUSERSPROFILE%\Application Data\VvuGll.cxv
  • %ALLUSERSPROFILE%\Application Data\j2Bu.guw
  • %ALLUSERSPROFILE%\Application Data\xOCgafZMb.xlc
  • %ALLUSERSPROFILE%\Application Data\sid.pdg
  • %ALLUSERSPROFILE%\Application Data\GbjgzGG.vbf
  • %ALLUSERSPROFILE%\Application Data\r0Vo3P.poo
  • %ALLUSERSPROFILE%\Application Data\foD1CHp7joG.yps
  • %ALLUSERSPROFILE%\Application Data\ZX7mUegczpc.ngz
  • %ALLUSERSPROFILE%\Application Data\C9PgC.wos
  • %ALLUSERSPROFILE%\Application Data\Bc6Uzk.wlw
  • %ALLUSERSPROFILE%\Application Data\YbW.npm
  • %ALLUSERSPROFILE%\Application Data\yMGeXe.tcr
  • %ALLUSERSPROFILE%\Application Data\Mm69QsEhhEJ.dae
  • %ALLUSERSPROFILE%\Application Data\VEtXgboXmN3.ctu
  • %ALLUSERSPROFILE%\Application Data\1eWdKKYWhNb.tim
  • %ALLUSERSPROFILE%\Application Data\Y58LZ7sHo.frv
  • %ALLUSERSPROFILE%\Application Data\lwmCkMxkW.cpm
  • %ALLUSERSPROFILE%\Application Data\jUY1A9Q7nao.lyu
  • %ALLUSERSPROFILE%\Application Data\pZ6L3ShjTP2.sse
  • %ALLUSERSPROFILE%\Application Data\okFOs4.iij
  • %ALLUSERSPROFILE%\Application Data\jUyx.lil
  • %ALLUSERSPROFILE%\Application Data\IkS0rjc.cpz
  • %ALLUSERSPROFILE%\Application Data\59Y7.kbn
  • %ALLUSERSPROFILE%\Application Data\j3netLic.kij
  • %ALLUSERSPROFILE%\Application Data\1x3CPzqJ1M.bqs
  • %ALLUSERSPROFILE%\Application Data\lA2ZK.dnt
  • %ALLUSERSPROFILE%\Application Data\L8P.asd
  • %ALLUSERSPROFILE%\Application Data\W1YG2LoH0Vf.ybw
  • %ALLUSERSPROFILE%\Application Data\GoeJFwD8F.gbp
  • %ALLUSERSPROFILE%\Application Data\IJWbVL.yaj
  • %ALLUSERSPROFILE%\Application Data\ifJQ.xvg
  • %ALLUSERSPROFILE%\Application Data\tyEo.qcd
  • %ALLUSERSPROFILE%\Application Data\I5Jjx9z.qke
  • %ALLUSERSPROFILE%\Application Data\TZm57SZsX.uqe
  • %ALLUSERSPROFILE%\Application Data\rtwetI.krw
  • %ALLUSERSPROFILE%\Application Data\mU0J.clr
  • %ALLUSERSPROFILE%\Application Data\gJ84r9KWGE.xfr
  • %ALLUSERSPROFILE%\Application Data\Ufsu3MM.sid
  • %ALLUSERSPROFILE%\Application Data\qGv9bSrN.clr
  • %ALLUSERSPROFILE%\Application Data\TvHspL4.chn
  • %ALLUSERSPROFILE%\Application Data\DVDuue.nke
  • %ALLUSERSPROFILE%\Application Data\wwrtcJEuO.ddk
  • %ALLUSERSPROFILE%\Application Data\ka17t.xje
  • %ALLUSERSPROFILE%\Application Data\SjeULny2.amc
  • %ALLUSERSPROFILE%\Application Data\9KMYYK52.kks
  • %ALLUSERSPROFILE%\Application Data\TWkHjJIoze.axm
  • %ALLUSERSPROFILE%\Application Data\Xz4E.omn
  • %ALLUSERSPROFILE%\Application Data\BRKpH.wxv
  • %ALLUSERSPROFILE%\Application Data\99lJ.ayh
  • %ALLUSERSPROFILE%\Application Data\rb78.rsy
  • %ALLUSERSPROFILE%\Application Data\3WELfS.wde
  • %ALLUSERSPROFILE%\Application Data\dZTB60rZ1.vtv
  • %ALLUSERSPROFILE%\Application Data\mKV2tCKLD.wrg
  • %ALLUSERSPROFILE%\Application Data\45s3yT.ssd
  • %ALLUSERSPROFILE%\Application Data\2HB03zgY0sn.znb
  • %ALLUSERSPROFILE%\Application Data\O2fm.fso
  • %ALLUSERSPROFILE%\Application Data\H3Qyh.hoj
  • %ALLUSERSPROFILE%\Application Data\xlGy.zwx
  • %ALLUSERSPROFILE%\Application Data\fe24Cj2.cow
Network activity:
UDP:
  • DNS ASK Jx##.com
  • DNS ASK WM##Q.com
  • DNS ASK Lo###wzl2RW.com
  • DNS ASK j4##4f.com
  • DNS ASK LN###2Yu1.com
  • DNS ASK yz##ZwU.com
  • DNS ASK og###SQy6g.com
  • DNS ASK gr###gKBO.com
  • DNS ASK Ut##3oG.com
  • DNS ASK Wa###a84.com
  • DNS ASK P0###5Vu7Rn.com
  • DNS ASK jZ##FX.com
  • DNS ASK fq##c.com
  • DNS ASK un##.com
  • DNS ASK ht###gFi.com
  • DNS ASK Nd##p.com
  • DNS ASK 6k###TPh3g.com
  • DNS ASK zQ##wPq.com
  • DNS ASK l8##.com
  • DNS ASK MO###ms59H.com
  • DNS ASK e9###GRB.com
  • DNS ASK bk##z.com
  • DNS ASK FK##bOS.com
  • DNS ASK T0###5wSsF.com
  • DNS ASK KT###A6rP.com
  • DNS ASK 2Y##oBA.com
  • DNS ASK xa#.com
  • DNS ASK HG##u.com
  • DNS ASK 9s###mfr.com
  • DNS ASK md##T.com
  • DNS ASK ZT##2e.com
  • DNS ASK PM##w.com
  • DNS ASK 6f##Cu7.com
  • DNS ASK S7#.com
  • DNS ASK oY###VU33Z.com
  • DNS ASK QG###VraFJ.com
  • DNS ASK U3###CjC.com
  • DNS ASK 7X##d6o.com
  • DNS ASK z9###wL1.com
  • DNS ASK m3##T.com
  • DNS ASK nk###EKww.com
  • DNS ASK 6I###77VyCw.com
  • DNS ASK V8###9ywJ9.com
  • DNS ASK ni###NVS.com
  • DNS ASK ct##.com
  • DNS ASK 81###NpNP.com
  • DNS ASK tu##.com
  • DNS ASK NV###eFqa3.com
  • DNS ASK nc###GSXF.com
  • DNS ASK Yo##.com
  • DNS ASK nb#.com
  • DNS ASK qy#.com
  • DNS ASK xj#.com
  • DNS ASK fv##v.com
  • DNS ASK 4N###j6Mwc7.com
  • DNS ASK eK##iE.com
  • DNS ASK 5W#.com
  • DNS ASK Q3###ySDW.com
  • DNS ASK aq#.com
  • DNS ASK b2##6Z.com
  • DNS ASK Z0##u.com
  • DNS ASK vG###Wjq.com
  • DNS ASK ZW##.com
  • DNS ASK GC###45Z5B.com
  • DNS ASK 9i##NP.com
  • DNS ASK pp###VEoPoP.com
  • DNS ASK WV##Lb.com
  • DNS ASK 8H##l.com
  • DNS ASK Tk###Eqrh13.com
  • DNS ASK nZ###pJkgRV.com
  • DNS ASK ZA###TNo5.com
  • DNS ASK 3B##q.com
  • DNS ASK fw#.com
  • DNS ASK ai##0X.com
  • DNS ASK 3P###nas.com
  • DNS ASK ZX###sqyoV.com
  • DNS ASK 91###4Gs9eA.com
  • DNS ASK sS##TH.com
  • DNS ASK ET#.com
  • DNS ASK Bk#.com
  • DNS ASK 3O##UE.com
  • DNS ASK Kg##p.com
  • DNS ASK sh##M.com
  • DNS ASK 7Z###QwXf.com
  • DNS ASK AI###bJhzZZ.com
  • DNS ASK dk##Ql.com
  • DNS ASK rw###3Dfp.com
  • DNS ASK gl#.com
  • DNS ASK TU###EIR.com
  • DNS ASK HR##00.com
  • DNS ASK 2G##t4U.com
  • DNS ASK Zr##DC.com
  • DNS ASK 0P###32yd6q.com
  • DNS ASK 6j##6d6.com
  • DNS ASK YN#.com
  • DNS ASK Ze###xj7C.com
  • DNS ASK bn#.com
  • DNS ASK od#.com
  • DNS ASK c8###Z2xw.com
  • DNS ASK U4##6H.com
  • DNS ASK 97###tJF.com
  • DNS ASK uC##4j.com
  • DNS ASK g0###qPJIDw.com
  • DNS ASK 22###dSMCwG.com
  • DNS ASK E3###1IHG.com
  • DNS ASK 0g###f146jR.com
  • DNS ASK gy###mqz4Hj.com
  • DNS ASK jF##urZ.com
  • DNS ASK ba##Ij.com
  • DNS ASK Ky###qHf.com
  • DNS ASK dE##O.com
  • DNS ASK rs#.com
  • DNS ASK 16#.com
  • DNS ASK gk###n5lDX.com
  • DNS ASK gQ###0hGxI.com
  • DNS ASK 9Z###6Q3.com
  • DNS ASK 8M##2z.com
  • DNS ASK x3###T1IZJ.com
  • DNS ASK zS###2Ja.com
  • DNS ASK GS###zZcsye.com
  • DNS ASK 1S###vtR2a.com
  • DNS ASK MR#.com
  • DNS ASK jg##.com
  • DNS ASK zb##2p.com
  • DNS ASK eF###fpkmP.com
  • DNS ASK zT###9h00Fd.com
  • DNS ASK pX###ntaEOc.com
  • DNS ASK c0###Zh1CQ.com
  • DNS ASK k1##37V.com
  • DNS ASK xE#.com
  • DNS ASK xm#.com
  • DNS ASK ZC###R9RInL.com
  • DNS ASK Eb#.com
  • DNS ASK 7X###XAv6XJ.com
  • DNS ASK KJ##d.com
  • DNS ASK WE##x.com
  • DNS ASK DP##75.com
  • DNS ASK pU###PFOZL.com
  • DNS ASK f4###HsWG.com
  • DNS ASK Zd##uU.com
  • DNS ASK LH#.com
  • DNS ASK zY###1qeVAs.com
  • DNS ASK g7##BJG.com
  • DNS ASK S0###UoOGx.com
  • DNS ASK XD###P4jgP.com
  • DNS ASK F5##5gI.com

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android