Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Trojan.DownLoader6.22658

Added to the Dr.Web virus database: 2012-06-25

Virus description added:

Technical Information

Malicious functions:
Injects code into
the following system processes:
  • %WINDIR%\Explorer.EXE
Modifies file system :
Creates the following files:
  • %TEMP%\~!#279.tmp
  • %TEMP%\~!#278.tmp
  • %TEMP%\~!#277.tmp
  • %TEMP%\~!#27A.tmp
  • %TEMP%\~!#27D.tmp
  • %TEMP%\~!#27C.tmp
  • %TEMP%\~!#27B.tmp
  • %TEMP%\~!#272.tmp
  • %TEMP%\~!#271.tmp
  • %TEMP%\~!#270.tmp
  • %TEMP%\~!#273.tmp
  • %TEMP%\~!#276.tmp
  • %TEMP%\~!#275.tmp
  • %TEMP%\~!#274.tmp
  • %TEMP%\~!#27E.tmp
  • %TEMP%\~!#288.tmp
  • %TEMP%\~!#287.tmp
  • %TEMP%\~!#286.tmp
  • %TEMP%\~!#289.tmp
  • %TEMP%\~!#28C.tmp
  • %TEMP%\~!#28B.tmp
  • %TEMP%\~!#28A.tmp
  • %TEMP%\~!#281.tmp
  • %TEMP%\~!#280.tmp
  • %TEMP%\~!#27F.tmp
  • %TEMP%\~!#282.tmp
  • %TEMP%\~!#285.tmp
  • %TEMP%\~!#284.tmp
  • %TEMP%\~!#283.tmp
  • %TEMP%\~!#26F.tmp
  • %TEMP%\~!#25B.tmp
  • %TEMP%\~!#25A.tmp
  • %TEMP%\~!#259.tmp
  • %TEMP%\~!#25C.tmp
  • %TEMP%\~!#25F.tmp
  • %TEMP%\~!#25E.tmp
  • %TEMP%\~!#25D.tmp
  • %TEMP%\~!#254.tmp
  • %TEMP%\~!#253.tmp
  • %TEMP%\~!#252.tmp
  • %TEMP%\~!#255.tmp
  • %TEMP%\~!#258.tmp
  • %TEMP%\~!#257.tmp
  • %TEMP%\~!#256.tmp
  • %TEMP%\~!#260.tmp
  • %TEMP%\~!#26A.tmp
  • %TEMP%\~!#269.tmp
  • %TEMP%\~!#268.tmp
  • %TEMP%\~!#26B.tmp
  • %TEMP%\~!#26E.tmp
  • %TEMP%\~!#26D.tmp
  • %TEMP%\~!#26C.tmp
  • %TEMP%\~!#263.tmp
  • %TEMP%\~!#262.tmp
  • %TEMP%\~!#261.tmp
  • %TEMP%\~!#264.tmp
  • %TEMP%\~!#267.tmp
  • %TEMP%\~!#266.tmp
  • %TEMP%\~!#265.tmp
  • %TEMP%\~!#2B4.tmp
  • %TEMP%\~!#2B3.tmp
  • %TEMP%\~!#2B2.tmp
  • %TEMP%\~!#2B5.tmp
  • %TEMP%\~!#2B8.tmp
  • %TEMP%\~!#2B7.tmp
  • %TEMP%\~!#2B6.tmp
  • %TEMP%\~!#2AD.tmp
  • %TEMP%\~!#2AC.tmp
  • %TEMP%\~!#2AB.tmp
  • %TEMP%\~!#2AE.tmp
  • %TEMP%\~!#2B1.tmp
  • %TEMP%\~!#2B0.tmp
  • %TEMP%\~!#2AF.tmp
  • %TEMP%\~!#2B9.tmp
  • %TEMP%\~!#2C3.tmp
  • %TEMP%\~!#2C2.tmp
  • %TEMP%\~!#2C1.tmp
  • %TEMP%\~!#2C4.tmp
  • %TEMP%\~!#2C7.tmp
  • %TEMP%\~!#2C6.tmp
  • %TEMP%\~!#2C5.tmp
  • %TEMP%\~!#2BC.tmp
  • %TEMP%\~!#2BB.tmp
  • %TEMP%\~!#2BA.tmp
  • %TEMP%\~!#2BD.tmp
  • %TEMP%\~!#2C0.tmp
  • %TEMP%\~!#2BF.tmp
  • %TEMP%\~!#2BE.tmp
  • %TEMP%\~!#2AA.tmp
  • %TEMP%\~!#296.tmp
  • %TEMP%\~!#295.tmp
  • %TEMP%\~!#294.tmp
  • %TEMP%\~!#297.tmp
  • %TEMP%\~!#29A.tmp
  • %TEMP%\~!#299.tmp
  • %TEMP%\~!#298.tmp
  • %TEMP%\~!#28F.tmp
  • %TEMP%\~!#28E.tmp
  • %TEMP%\~!#28D.tmp
  • %TEMP%\~!#290.tmp
  • %TEMP%\~!#293.tmp
  • %TEMP%\~!#292.tmp
  • %TEMP%\~!#291.tmp
  • %TEMP%\~!#29B.tmp
  • %TEMP%\~!#2A5.tmp
  • %TEMP%\~!#2A4.tmp
  • %TEMP%\~!#2A3.tmp
  • %TEMP%\~!#2A6.tmp
  • %TEMP%\~!#2A9.tmp
  • %TEMP%\~!#2A8.tmp
  • %TEMP%\~!#2A7.tmp
  • %TEMP%\~!#29E.tmp
  • %TEMP%\~!#29D.tmp
  • %TEMP%\~!#29C.tmp
  • %TEMP%\~!#29F.tmp
  • %TEMP%\~!#2A2.tmp
  • %TEMP%\~!#2A1.tmp
  • %TEMP%\~!#2A0.tmp
  • %TEMP%\~!#251.tmp
  • %TEMP%\~!#202.tmp
  • %TEMP%\~!#201.tmp
  • %TEMP%\~!#200.tmp
  • %TEMP%\~!#203.tmp
  • %TEMP%\~!#206.tmp
  • %TEMP%\~!#205.tmp
  • %TEMP%\~!#204.tmp
  • %TEMP%\~!#1FB.tmp
  • %TEMP%\~!#1FA.tmp
  • %TEMP%\~!#1F9.tmp
  • %TEMP%\~!#1FC.tmp
  • %TEMP%\~!#1FF.tmp
  • %TEMP%\~!#1FE.tmp
  • %TEMP%\~!#1FD.tmp
  • %TEMP%\~!#207.tmp
  • %TEMP%\~!#211.tmp
  • %TEMP%\~!#210.tmp
  • %TEMP%\~!#20F.tmp
  • %TEMP%\~!#212.tmp
  • %TEMP%\~!#215.tmp
  • %TEMP%\~!#214.tmp
  • %TEMP%\~!#213.tmp
  • %TEMP%\~!#20A.tmp
  • %TEMP%\~!#209.tmp
  • %TEMP%\~!#208.tmp
  • %TEMP%\~!#20B.tmp
  • %TEMP%\~!#20E.tmp
  • %TEMP%\~!#20D.tmp
  • %TEMP%\~!#20C.tmp
  • %TEMP%\~!#1F8.tmp
  • %TEMP%\~!#1E4.tmp
  • %TEMP%\~!#1E3.tmp
  • %TEMP%\~!#1E2.tmp
  • %TEMP%\~!#1E5.tmp
  • %TEMP%\~!#1E8.tmp
  • %TEMP%\~!#1E7.tmp
  • %TEMP%\~!#1E6.tmp
  • %TEMP%\~!#1DD.tmp
  • %TEMP%\~!#1DC.tmp
  • %TEMP%\~!#1DB.tmp
  • %TEMP%\~!#1DE.tmp
  • %TEMP%\~!#1E1.tmp
  • %TEMP%\~!#1E0.tmp
  • %TEMP%\~!#1DF.tmp
  • %TEMP%\~!#1E9.tmp
  • %TEMP%\~!#1F3.tmp
  • %TEMP%\~!#1F2.tmp
  • %TEMP%\~!#1F1.tmp
  • %TEMP%\~!#1F4.tmp
  • %TEMP%\~!#1F7.tmp
  • %TEMP%\~!#1F6.tmp
  • %TEMP%\~!#1F5.tmp
  • %TEMP%\~!#1EC.tmp
  • %TEMP%\~!#1EB.tmp
  • %TEMP%\~!#1EA.tmp
  • %TEMP%\~!#1ED.tmp
  • %TEMP%\~!#1F0.tmp
  • %TEMP%\~!#1EF.tmp
  • %TEMP%\~!#1EE.tmp
  • %TEMP%\~!#23D.tmp
  • %TEMP%\~!#23C.tmp
  • %TEMP%\~!#23B.tmp
  • %TEMP%\~!#23E.tmp
  • %TEMP%\~!#241.tmp
  • %TEMP%\~!#240.tmp
  • %TEMP%\~!#23F.tmp
  • %TEMP%\~!#236.tmp
  • %TEMP%\~!#235.tmp
  • %TEMP%\~!#234.tmp
  • %TEMP%\~!#237.tmp
  • %TEMP%\~!#23A.tmp
  • %TEMP%\~!#239.tmp
  • %TEMP%\~!#238.tmp
  • %TEMP%\~!#242.tmp
  • %TEMP%\~!#24C.tmp
  • %TEMP%\~!#24B.tmp
  • %TEMP%\~!#24A.tmp
  • %TEMP%\~!#24D.tmp
  • %TEMP%\~!#250.tmp
  • %TEMP%\~!#24F.tmp
  • %TEMP%\~!#24E.tmp
  • %TEMP%\~!#245.tmp
  • %TEMP%\~!#244.tmp
  • %TEMP%\~!#243.tmp
  • %TEMP%\~!#246.tmp
  • %TEMP%\~!#249.tmp
  • %TEMP%\~!#248.tmp
  • %TEMP%\~!#247.tmp
  • %TEMP%\~!#233.tmp
  • %TEMP%\~!#21F.tmp
  • %TEMP%\~!#21E.tmp
  • %TEMP%\~!#21D.tmp
  • %TEMP%\~!#220.tmp
  • %TEMP%\~!#223.tmp
  • %TEMP%\~!#222.tmp
  • %TEMP%\~!#221.tmp
  • %TEMP%\~!#218.tmp
  • %TEMP%\~!#217.tmp
  • %TEMP%\~!#216.tmp
  • %TEMP%\~!#219.tmp
  • %TEMP%\~!#21C.tmp
  • %TEMP%\~!#21B.tmp
  • %TEMP%\~!#21A.tmp
  • %TEMP%\~!#224.tmp
  • %TEMP%\~!#22E.tmp
  • %TEMP%\~!#22D.tmp
  • %TEMP%\~!#22C.tmp
  • %TEMP%\~!#22F.tmp
  • %TEMP%\~!#232.tmp
  • %TEMP%\~!#231.tmp
  • %TEMP%\~!#230.tmp
  • %TEMP%\~!#227.tmp
  • %TEMP%\~!#226.tmp
  • %TEMP%\~!#225.tmp
  • %TEMP%\~!#228.tmp
  • %TEMP%\~!#22B.tmp
  • %TEMP%\~!#22A.tmp
  • %TEMP%\~!#229.tmp
  • %TEMP%\~!#366.tmp
  • %TEMP%\~!#365.tmp
  • %TEMP%\~!#364.tmp
  • %TEMP%\~!#367.tmp
  • %TEMP%\~!#36A.tmp
  • %TEMP%\~!#369.tmp
  • %TEMP%\~!#368.tmp
  • %TEMP%\~!#35F.tmp
  • %TEMP%\~!#35E.tmp
  • %TEMP%\~!#35D.tmp
  • %TEMP%\~!#360.tmp
  • %TEMP%\~!#363.tmp
  • %TEMP%\~!#362.tmp
  • %TEMP%\~!#361.tmp
  • %TEMP%\~!#36B.tmp
  • %TEMP%\~!#375.tmp
  • %TEMP%\~!#374.tmp
  • %TEMP%\~!#373.tmp
  • %TEMP%\~!#376.tmp
  • %TEMP%\~!#379.tmp
  • %TEMP%\~!#378.tmp
  • %TEMP%\~!#377.tmp
  • %TEMP%\~!#36E.tmp
  • %TEMP%\~!#36D.tmp
  • %TEMP%\~!#36C.tmp
  • %TEMP%\~!#36F.tmp
  • %TEMP%\~!#372.tmp
  • %TEMP%\~!#371.tmp
  • %TEMP%\~!#370.tmp
  • %TEMP%\~!#35C.tmp
  • %TEMP%\~!#348.tmp
  • %TEMP%\~!#347.tmp
  • %TEMP%\~!#346.tmp
  • %TEMP%\~!#349.tmp
  • %TEMP%\~!#34C.tmp
  • %TEMP%\~!#34B.tmp
  • %TEMP%\~!#34A.tmp
  • %TEMP%\~!#341.tmp
  • %TEMP%\~!#340.tmp
  • %TEMP%\~!#33F.tmp
  • %TEMP%\~!#342.tmp
  • %TEMP%\~!#345.tmp
  • %TEMP%\~!#344.tmp
  • %TEMP%\~!#343.tmp
  • %TEMP%\~!#34D.tmp
  • %TEMP%\~!#357.tmp
  • %TEMP%\~!#356.tmp
  • %TEMP%\~!#355.tmp
  • %TEMP%\~!#358.tmp
  • %TEMP%\~!#35B.tmp
  • %TEMP%\~!#35A.tmp
  • %TEMP%\~!#359.tmp
  • %TEMP%\~!#350.tmp
  • %TEMP%\~!#34F.tmp
  • %TEMP%\~!#34E.tmp
  • %TEMP%\~!#351.tmp
  • %TEMP%\~!#354.tmp
  • %TEMP%\~!#353.tmp
  • %TEMP%\~!#352.tmp
  • %TEMP%\~!#3A1.tmp
  • %TEMP%\~!#3A0.tmp
  • %TEMP%\~!#39F.tmp
  • %TEMP%\~!#3A2.tmp
  • %TEMP%\~!#3A5.tmp
  • %TEMP%\~!#3A4.tmp
  • %TEMP%\~!#3A3.tmp
  • %TEMP%\~!#39A.tmp
  • %TEMP%\~!#399.tmp
  • %TEMP%\~!#398.tmp
  • %TEMP%\~!#39B.tmp
  • %TEMP%\~!#39E.tmp
  • %TEMP%\~!#39D.tmp
  • %TEMP%\~!#39C.tmp
  • %TEMP%\~!#3A6.tmp
  • %TEMP%\~!#3B0.tmp
  • %TEMP%\~!#3AF.tmp
  • %TEMP%\~!#3AE.tmp
  • %TEMP%\~!#3B1.tmp
  • %TEMP%\~!#3B4.tmp
  • %TEMP%\~!#3B3.tmp
  • %TEMP%\~!#3B2.tmp
  • %TEMP%\~!#3A9.tmp
  • %TEMP%\~!#3A8.tmp
  • %TEMP%\~!#3A7.tmp
  • %TEMP%\~!#3AA.tmp
  • %TEMP%\~!#3AD.tmp
  • %TEMP%\~!#3AC.tmp
  • %TEMP%\~!#3AB.tmp
  • %TEMP%\~!#397.tmp
  • %TEMP%\~!#383.tmp
  • %TEMP%\~!#382.tmp
  • %TEMP%\~!#381.tmp
  • %TEMP%\~!#384.tmp
  • %TEMP%\~!#387.tmp
  • %TEMP%\~!#386.tmp
  • %TEMP%\~!#385.tmp
  • %TEMP%\~!#37C.tmp
  • %TEMP%\~!#37B.tmp
  • %TEMP%\~!#37A.tmp
  • %TEMP%\~!#37D.tmp
  • %TEMP%\~!#380.tmp
  • %TEMP%\~!#37F.tmp
  • %TEMP%\~!#37E.tmp
  • %TEMP%\~!#388.tmp
  • %TEMP%\~!#392.tmp
  • %TEMP%\~!#391.tmp
  • %TEMP%\~!#390.tmp
  • %TEMP%\~!#393.tmp
  • %TEMP%\~!#396.tmp
  • %TEMP%\~!#395.tmp
  • %TEMP%\~!#394.tmp
  • %TEMP%\~!#38B.tmp
  • %TEMP%\~!#38A.tmp
  • %TEMP%\~!#389.tmp
  • %TEMP%\~!#38C.tmp
  • %TEMP%\~!#38F.tmp
  • %TEMP%\~!#38E.tmp
  • %TEMP%\~!#38D.tmp
  • %TEMP%\~!#33E.tmp
  • %TEMP%\~!#2EF.tmp
  • %TEMP%\~!#2EE.tmp
  • %TEMP%\~!#2ED.tmp
  • %TEMP%\~!#2F0.tmp
  • %TEMP%\~!#2F3.tmp
  • %TEMP%\~!#2F2.tmp
  • %TEMP%\~!#2F1.tmp
  • %TEMP%\~!#2E8.tmp
  • %TEMP%\~!#2E7.tmp
  • %TEMP%\~!#2E6.tmp
  • %TEMP%\~!#2E9.tmp
  • %TEMP%\~!#2EC.tmp
  • %TEMP%\~!#2EB.tmp
  • %TEMP%\~!#2EA.tmp
  • %TEMP%\~!#2F4.tmp
  • %TEMP%\~!#2FE.tmp
  • %TEMP%\~!#2FD.tmp
  • %TEMP%\~!#2FC.tmp
  • %TEMP%\~!#2FF.tmp
  • %TEMP%\~!#302.tmp
  • %TEMP%\~!#301.tmp
  • %TEMP%\~!#300.tmp
  • %TEMP%\~!#2F7.tmp
  • %TEMP%\~!#2F6.tmp
  • %TEMP%\~!#2F5.tmp
  • %TEMP%\~!#2F8.tmp
  • %TEMP%\~!#2FB.tmp
  • %TEMP%\~!#2FA.tmp
  • %TEMP%\~!#2F9.tmp
  • %TEMP%\~!#2E5.tmp
  • %TEMP%\~!#2D1.tmp
  • %TEMP%\~!#2D0.tmp
  • %TEMP%\~!#2CF.tmp
  • %TEMP%\~!#2D2.tmp
  • %TEMP%\~!#2D5.tmp
  • %TEMP%\~!#2D4.tmp
  • %TEMP%\~!#2D3.tmp
  • %TEMP%\~!#2CA.tmp
  • %TEMP%\~!#2C9.tmp
  • %TEMP%\~!#2C8.tmp
  • %TEMP%\~!#2CB.tmp
  • %TEMP%\~!#2CE.tmp
  • %TEMP%\~!#2CD.tmp
  • %TEMP%\~!#2CC.tmp
  • %TEMP%\~!#2D6.tmp
  • %TEMP%\~!#2E0.tmp
  • %TEMP%\~!#2DF.tmp
  • %TEMP%\~!#2DE.tmp
  • %TEMP%\~!#2E1.tmp
  • %TEMP%\~!#2E4.tmp
  • %TEMP%\~!#2E3.tmp
  • %TEMP%\~!#2E2.tmp
  • %TEMP%\~!#2D9.tmp
  • %TEMP%\~!#2D8.tmp
  • %TEMP%\~!#2D7.tmp
  • %TEMP%\~!#2DA.tmp
  • %TEMP%\~!#2DD.tmp
  • %TEMP%\~!#2DC.tmp
  • %TEMP%\~!#2DB.tmp
  • %TEMP%\~!#32A.tmp
  • %TEMP%\~!#329.tmp
  • %TEMP%\~!#328.tmp
  • %TEMP%\~!#32B.tmp
  • %TEMP%\~!#32E.tmp
  • %TEMP%\~!#32D.tmp
  • %TEMP%\~!#32C.tmp
  • %TEMP%\~!#323.tmp
  • %TEMP%\~!#322.tmp
  • %TEMP%\~!#321.tmp
  • %TEMP%\~!#324.tmp
  • %TEMP%\~!#327.tmp
  • %TEMP%\~!#326.tmp
  • %TEMP%\~!#325.tmp
  • %TEMP%\~!#32F.tmp
  • %TEMP%\~!#339.tmp
  • %TEMP%\~!#338.tmp
  • %TEMP%\~!#337.tmp
  • %TEMP%\~!#33A.tmp
  • %TEMP%\~!#33D.tmp
  • %TEMP%\~!#33C.tmp
  • %TEMP%\~!#33B.tmp
  • %TEMP%\~!#332.tmp
  • %TEMP%\~!#331.tmp
  • %TEMP%\~!#330.tmp
  • %TEMP%\~!#333.tmp
  • %TEMP%\~!#336.tmp
  • %TEMP%\~!#335.tmp
  • %TEMP%\~!#334.tmp
  • %TEMP%\~!#320.tmp
  • %TEMP%\~!#30C.tmp
  • %TEMP%\~!#30B.tmp
  • %TEMP%\~!#30A.tmp
  • %TEMP%\~!#30D.tmp
  • %TEMP%\~!#310.tmp
  • %TEMP%\~!#30F.tmp
  • %TEMP%\~!#30E.tmp
  • %TEMP%\~!#305.tmp
  • %TEMP%\~!#304.tmp
  • %TEMP%\~!#303.tmp
  • %TEMP%\~!#306.tmp
  • %TEMP%\~!#309.tmp
  • %TEMP%\~!#308.tmp
  • %TEMP%\~!#307.tmp
  • %TEMP%\~!#311.tmp
  • %TEMP%\~!#31B.tmp
  • %TEMP%\~!#31A.tmp
  • %TEMP%\~!#319.tmp
  • %TEMP%\~!#31C.tmp
  • %TEMP%\~!#31F.tmp
  • %TEMP%\~!#31E.tmp
  • %TEMP%\~!#31D.tmp
  • %TEMP%\~!#314.tmp
  • %TEMP%\~!#313.tmp
  • %TEMP%\~!#312.tmp
  • %TEMP%\~!#315.tmp
  • %TEMP%\~!#318.tmp
  • %TEMP%\~!#317.tmp
  • %TEMP%\~!#316.tmp
  • %TEMP%\~!#9F.tmp
  • %TEMP%\~!#9E.tmp
  • %TEMP%\~!#9D.tmp
  • %TEMP%\~!#A0.tmp
  • %TEMP%\~!#A3.tmp
  • %TEMP%\~!#A2.tmp
  • %TEMP%\~!#A1.tmp
  • %TEMP%\~!#98.tmp
  • %TEMP%\~!#97.tmp
  • %TEMP%\~!#96.tmp
  • %TEMP%\~!#99.tmp
  • %TEMP%\~!#9C.tmp
  • %TEMP%\~!#9B.tmp
  • %TEMP%\~!#9A.tmp
  • %TEMP%\~!#A4.tmp
  • %TEMP%\~!#AE.tmp
  • %TEMP%\~!#AD.tmp
  • %TEMP%\~!#AC.tmp
  • %TEMP%\~!#AF.tmp
  • %TEMP%\~!#B2.tmp
  • %TEMP%\~!#B1.tmp
  • %TEMP%\~!#B0.tmp
  • %TEMP%\~!#A7.tmp
  • %TEMP%\~!#A6.tmp
  • %TEMP%\~!#A5.tmp
  • %TEMP%\~!#A8.tmp
  • %TEMP%\~!#AB.tmp
  • %TEMP%\~!#AA.tmp
  • %TEMP%\~!#A9.tmp
  • %TEMP%\~!#95.tmp
  • %TEMP%\~!#81.tmp
  • %TEMP%\~!#80.tmp
  • %TEMP%\~!#7F.tmp
  • %TEMP%\~!#82.tmp
  • %TEMP%\~!#85.tmp
  • %TEMP%\~!#84.tmp
  • %TEMP%\~!#83.tmp
  • %TEMP%\~!#7A.tmp
  • %TEMP%\~!#79.tmp
  • %TEMP%\~!#78.tmp
  • %TEMP%\~!#7B.tmp
  • %TEMP%\~!#7E.tmp
  • %TEMP%\~!#7D.tmp
  • %TEMP%\~!#7C.tmp
  • %TEMP%\~!#86.tmp
  • %TEMP%\~!#90.tmp
  • %TEMP%\~!#8F.tmp
  • %TEMP%\~!#8E.tmp
  • %TEMP%\~!#91.tmp
  • %TEMP%\~!#94.tmp
  • %TEMP%\~!#93.tmp
  • %TEMP%\~!#92.tmp
  • %TEMP%\~!#89.tmp
  • %TEMP%\~!#88.tmp
  • %TEMP%\~!#87.tmp
  • %TEMP%\~!#8A.tmp
  • %TEMP%\~!#8D.tmp
  • %TEMP%\~!#8C.tmp
  • %TEMP%\~!#8B.tmp
  • %TEMP%\~!#DA.tmp
  • %TEMP%\~!#D9.tmp
  • %TEMP%\~!#D8.tmp
  • %TEMP%\~!#DB.tmp
  • %TEMP%\~!#DE.tmp
  • %TEMP%\~!#DD.tmp
  • %TEMP%\~!#DC.tmp
  • %TEMP%\~!#D3.tmp
  • %TEMP%\~!#D2.tmp
  • %TEMP%\~!#D1.tmp
  • %TEMP%\~!#D4.tmp
  • %TEMP%\~!#D7.tmp
  • %TEMP%\~!#D6.tmp
  • %TEMP%\~!#D5.tmp
  • %TEMP%\~!#DF.tmp
  • %TEMP%\~!#E9.tmp
  • %TEMP%\~!#E8.tmp
  • %TEMP%\~!#E7.tmp
  • %TEMP%\~!#EA.tmp
  • %TEMP%\~!#ED.tmp
  • %TEMP%\~!#EC.tmp
  • %TEMP%\~!#EB.tmp
  • %TEMP%\~!#E2.tmp
  • %TEMP%\~!#E1.tmp
  • %TEMP%\~!#E0.tmp
  • %TEMP%\~!#E3.tmp
  • %TEMP%\~!#E6.tmp
  • %TEMP%\~!#E5.tmp
  • %TEMP%\~!#E4.tmp
  • %TEMP%\~!#D0.tmp
  • %TEMP%\~!#BC.tmp
  • %TEMP%\~!#BB.tmp
  • %TEMP%\~!#BA.tmp
  • %TEMP%\~!#BD.tmp
  • %TEMP%\~!#C0.tmp
  • %TEMP%\~!#BF.tmp
  • %TEMP%\~!#BE.tmp
  • %TEMP%\~!#B5.tmp
  • %TEMP%\~!#B4.tmp
  • %TEMP%\~!#B3.tmp
  • %TEMP%\~!#B6.tmp
  • %TEMP%\~!#B9.tmp
  • %TEMP%\~!#B8.tmp
  • %TEMP%\~!#B7.tmp
  • %TEMP%\~!#C1.tmp
  • %TEMP%\~!#CB.tmp
  • %TEMP%\~!#CA.tmp
  • %TEMP%\~!#C9.tmp
  • %TEMP%\~!#CC.tmp
  • %TEMP%\~!#CF.tmp
  • %TEMP%\~!#CE.tmp
  • %TEMP%\~!#CD.tmp
  • %TEMP%\~!#C4.tmp
  • %TEMP%\~!#C3.tmp
  • %TEMP%\~!#C2.tmp
  • %TEMP%\~!#C5.tmp
  • %TEMP%\~!#C8.tmp
  • %TEMP%\~!#C7.tmp
  • %TEMP%\~!#C6.tmp
  • %TEMP%\~!#77.tmp
  • %TEMP%\~!#28.tmp
  • %TEMP%\~!#27.tmp
  • %TEMP%\~!#26.tmp
  • %TEMP%\~!#29.tmp
  • %TEMP%\~!#2C.tmp
  • %TEMP%\~!#2B.tmp
  • %TEMP%\~!#2A.tmp
  • %TEMP%\~!#21.tmp
  • %TEMP%\~!#20.tmp
  • %TEMP%\~!#1F.tmp
  • %TEMP%\~!#22.tmp
  • %TEMP%\~!#25.tmp
  • %TEMP%\~!#24.tmp
  • %TEMP%\~!#23.tmp
  • %TEMP%\~!#2D.tmp
  • %TEMP%\~!#37.tmp
  • %TEMP%\~!#36.tmp
  • %TEMP%\~!#35.tmp
  • %TEMP%\~!#38.tmp
  • %TEMP%\~!#3B.tmp
  • %TEMP%\~!#3A.tmp
  • %TEMP%\~!#39.tmp
  • %TEMP%\~!#30.tmp
  • %TEMP%\~!#2F.tmp
  • %TEMP%\~!#2E.tmp
  • %TEMP%\~!#31.tmp
  • %TEMP%\~!#34.tmp
  • %TEMP%\~!#33.tmp
  • %TEMP%\~!#32.tmp
  • %TEMP%\~!#1E.tmp
  • %TEMP%\~!#A.tmp
  • %TEMP%\~!#9.tmp
  • %TEMP%\~!#8.tmp
  • %TEMP%\~!#B.tmp
  • %TEMP%\~!#E.tmp
  • %TEMP%\~!#D.tmp
  • %TEMP%\~!#C.tmp
  • %TEMP%\~!#3.tmp
  • %TEMP%\~!#2.tmp
  • %TEMP%\~!#1.tmp
  • %TEMP%\~!#4.tmp
  • %TEMP%\~!#7.tmp
  • %TEMP%\~!#6.tmp
  • %TEMP%\~!#5.tmp
  • %TEMP%\~!#F.tmp
  • %TEMP%\~!#19.tmp
  • %TEMP%\~!#18.tmp
  • %TEMP%\~!#17.tmp
  • %TEMP%\~!#1A.tmp
  • %TEMP%\~!#1D.tmp
  • %TEMP%\~!#1C.tmp
  • %TEMP%\~!#1B.tmp
  • %TEMP%\~!#12.tmp
  • %TEMP%\~!#11.tmp
  • %TEMP%\~!#10.tmp
  • %TEMP%\~!#13.tmp
  • %TEMP%\~!#16.tmp
  • %TEMP%\~!#15.tmp
  • %TEMP%\~!#14.tmp
  • %TEMP%\~!#63.tmp
  • %TEMP%\~!#62.tmp
  • %TEMP%\~!#61.tmp
  • %TEMP%\~!#64.tmp
  • %TEMP%\~!#67.tmp
  • %TEMP%\~!#66.tmp
  • %TEMP%\~!#65.tmp
  • %TEMP%\~!#5C.tmp
  • %TEMP%\~!#5B.tmp
  • %TEMP%\~!#5A.tmp
  • %TEMP%\~!#5D.tmp
  • %TEMP%\~!#60.tmp
  • %TEMP%\~!#5F.tmp
  • %TEMP%\~!#5E.tmp
  • %TEMP%\~!#68.tmp
  • %TEMP%\~!#72.tmp
  • %TEMP%\~!#71.tmp
  • %TEMP%\~!#70.tmp
  • %TEMP%\~!#73.tmp
  • %TEMP%\~!#76.tmp
  • %TEMP%\~!#75.tmp
  • %TEMP%\~!#74.tmp
  • %TEMP%\~!#6B.tmp
  • %TEMP%\~!#6A.tmp
  • %TEMP%\~!#69.tmp
  • %TEMP%\~!#6C.tmp
  • %TEMP%\~!#6F.tmp
  • %TEMP%\~!#6E.tmp
  • %TEMP%\~!#6D.tmp
  • %TEMP%\~!#59.tmp
  • %TEMP%\~!#45.tmp
  • %TEMP%\~!#44.tmp
  • %TEMP%\~!#43.tmp
  • %TEMP%\~!#46.tmp
  • %TEMP%\~!#49.tmp
  • %TEMP%\~!#48.tmp
  • %TEMP%\~!#47.tmp
  • %TEMP%\~!#3E.tmp
  • %TEMP%\~!#3D.tmp
  • %TEMP%\~!#3C.tmp
  • %TEMP%\~!#3F.tmp
  • %TEMP%\~!#42.tmp
  • %TEMP%\~!#41.tmp
  • %TEMP%\~!#40.tmp
  • %TEMP%\~!#4A.tmp
  • %TEMP%\~!#54.tmp
  • %TEMP%\~!#53.tmp
  • %TEMP%\~!#52.tmp
  • %TEMP%\~!#55.tmp
  • %TEMP%\~!#58.tmp
  • %TEMP%\~!#57.tmp
  • %TEMP%\~!#56.tmp
  • %TEMP%\~!#4D.tmp
  • %TEMP%\~!#4C.tmp
  • %TEMP%\~!#4B.tmp
  • %TEMP%\~!#4E.tmp
  • %TEMP%\~!#51.tmp
  • %TEMP%\~!#50.tmp
  • %TEMP%\~!#4F.tmp
  • %TEMP%\~!#18C.tmp
  • %TEMP%\~!#18B.tmp
  • %TEMP%\~!#18A.tmp
  • %TEMP%\~!#18D.tmp
  • %TEMP%\~!#190.tmp
  • %TEMP%\~!#18F.tmp
  • %TEMP%\~!#18E.tmp
  • %TEMP%\~!#185.tmp
  • %TEMP%\~!#184.tmp
  • %TEMP%\~!#183.tmp
  • %TEMP%\~!#186.tmp
  • %TEMP%\~!#189.tmp
  • %TEMP%\~!#188.tmp
  • %TEMP%\~!#187.tmp
  • %TEMP%\~!#191.tmp
  • %TEMP%\~!#19B.tmp
  • %TEMP%\~!#19A.tmp
  • %TEMP%\~!#199.tmp
  • %TEMP%\~!#19C.tmp
  • %TEMP%\~!#19F.tmp
  • %TEMP%\~!#19E.tmp
  • %TEMP%\~!#19D.tmp
  • %TEMP%\~!#194.tmp
  • %TEMP%\~!#193.tmp
  • %TEMP%\~!#192.tmp
  • %TEMP%\~!#195.tmp
  • %TEMP%\~!#198.tmp
  • %TEMP%\~!#197.tmp
  • %TEMP%\~!#196.tmp
  • %TEMP%\~!#182.tmp
  • %TEMP%\~!#16E.tmp
  • %TEMP%\~!#16D.tmp
  • %TEMP%\~!#16C.tmp
  • %TEMP%\~!#16F.tmp
  • %TEMP%\~!#172.tmp
  • %TEMP%\~!#171.tmp
  • %TEMP%\~!#170.tmp
  • %TEMP%\~!#167.tmp
  • %TEMP%\~!#166.tmp
  • %TEMP%\~!#165.tmp
  • %TEMP%\~!#168.tmp
  • %TEMP%\~!#16B.tmp
  • %TEMP%\~!#16A.tmp
  • %TEMP%\~!#169.tmp
  • %TEMP%\~!#173.tmp
  • %TEMP%\~!#17D.tmp
  • %TEMP%\~!#17C.tmp
  • %TEMP%\~!#17B.tmp
  • %TEMP%\~!#17E.tmp
  • %TEMP%\~!#181.tmp
  • %TEMP%\~!#180.tmp
  • %TEMP%\~!#17F.tmp
  • %TEMP%\~!#176.tmp
  • %TEMP%\~!#175.tmp
  • %TEMP%\~!#174.tmp
  • %TEMP%\~!#177.tmp
  • %TEMP%\~!#17A.tmp
  • %TEMP%\~!#179.tmp
  • %TEMP%\~!#178.tmp
  • %TEMP%\~!#1C7.tmp
  • %TEMP%\~!#1C6.tmp
  • %TEMP%\~!#1C5.tmp
  • %TEMP%\~!#1C8.tmp
  • %TEMP%\~!#1CB.tmp
  • %TEMP%\~!#1CA.tmp
  • %TEMP%\~!#1C9.tmp
  • %TEMP%\~!#1C0.tmp
  • %TEMP%\~!#1BF.tmp
  • %TEMP%\~!#1BE.tmp
  • %TEMP%\~!#1C1.tmp
  • %TEMP%\~!#1C4.tmp
  • %TEMP%\~!#1C3.tmp
  • %TEMP%\~!#1C2.tmp
  • %TEMP%\~!#1CC.tmp
  • %TEMP%\~!#1D6.tmp
  • %TEMP%\~!#1D5.tmp
  • %TEMP%\~!#1D4.tmp
  • %TEMP%\~!#1D7.tmp
  • %TEMP%\~!#1DA.tmp
  • %TEMP%\~!#1D9.tmp
  • %TEMP%\~!#1D8.tmp
  • %TEMP%\~!#1CF.tmp
  • %TEMP%\~!#1CE.tmp
  • %TEMP%\~!#1CD.tmp
  • %TEMP%\~!#1D0.tmp
  • %TEMP%\~!#1D3.tmp
  • %TEMP%\~!#1D2.tmp
  • %TEMP%\~!#1D1.tmp
  • %TEMP%\~!#1BD.tmp
  • %TEMP%\~!#1A9.tmp
  • %TEMP%\~!#1A8.tmp
  • %TEMP%\~!#1A7.tmp
  • %TEMP%\~!#1AA.tmp
  • %TEMP%\~!#1AD.tmp
  • %TEMP%\~!#1AC.tmp
  • %TEMP%\~!#1AB.tmp
  • %TEMP%\~!#1A2.tmp
  • %TEMP%\~!#1A1.tmp
  • %TEMP%\~!#1A0.tmp
  • %TEMP%\~!#1A3.tmp
  • %TEMP%\~!#1A6.tmp
  • %TEMP%\~!#1A5.tmp
  • %TEMP%\~!#1A4.tmp
  • %TEMP%\~!#1AE.tmp
  • %TEMP%\~!#1B8.tmp
  • %TEMP%\~!#1B7.tmp
  • %TEMP%\~!#1B6.tmp
  • %TEMP%\~!#1B9.tmp
  • %TEMP%\~!#1BC.tmp
  • %TEMP%\~!#1BB.tmp
  • %TEMP%\~!#1BA.tmp
  • %TEMP%\~!#1B1.tmp
  • %TEMP%\~!#1B0.tmp
  • %TEMP%\~!#1AF.tmp
  • %TEMP%\~!#1B2.tmp
  • %TEMP%\~!#1B5.tmp
  • %TEMP%\~!#1B4.tmp
  • %TEMP%\~!#1B3.tmp
  • %TEMP%\~!#164.tmp
  • %TEMP%\~!#115.tmp
  • %TEMP%\~!#114.tmp
  • %TEMP%\~!#113.tmp
  • %TEMP%\~!#116.tmp
  • %TEMP%\~!#119.tmp
  • %TEMP%\~!#118.tmp
  • %TEMP%\~!#117.tmp
  • %TEMP%\~!#10E.tmp
  • %TEMP%\~!#10D.tmp
  • %TEMP%\~!#10C.tmp
  • %TEMP%\~!#10F.tmp
  • %TEMP%\~!#112.tmp
  • %TEMP%\~!#111.tmp
  • %TEMP%\~!#110.tmp
  • %TEMP%\~!#11A.tmp
  • %TEMP%\~!#124.tmp
  • %TEMP%\~!#123.tmp
  • %TEMP%\~!#122.tmp
  • %TEMP%\~!#125.tmp
  • %TEMP%\~!#128.tmp
  • %TEMP%\~!#127.tmp
  • %TEMP%\~!#126.tmp
  • %TEMP%\~!#11D.tmp
  • %TEMP%\~!#11C.tmp
  • %TEMP%\~!#11B.tmp
  • %TEMP%\~!#11E.tmp
  • %TEMP%\~!#121.tmp
  • %TEMP%\~!#120.tmp
  • %TEMP%\~!#11F.tmp
  • %TEMP%\~!#10B.tmp
  • %TEMP%\~!#F7.tmp
  • %TEMP%\~!#F6.tmp
  • %TEMP%\~!#F5.tmp
  • %TEMP%\~!#F8.tmp
  • %TEMP%\~!#FB.tmp
  • %TEMP%\~!#FA.tmp
  • %TEMP%\~!#F9.tmp
  • %TEMP%\~!#F0.tmp
  • %TEMP%\~!#EF.tmp
  • %TEMP%\~!#EE.tmp
  • %TEMP%\~!#F1.tmp
  • %TEMP%\~!#F4.tmp
  • %TEMP%\~!#F3.tmp
  • %TEMP%\~!#F2.tmp
  • %TEMP%\~!#FC.tmp
  • %TEMP%\~!#106.tmp
  • %TEMP%\~!#105.tmp
  • %TEMP%\~!#104.tmp
  • %TEMP%\~!#107.tmp
  • %TEMP%\~!#10A.tmp
  • %TEMP%\~!#109.tmp
  • %TEMP%\~!#108.tmp
  • %TEMP%\~!#FF.tmp
  • %TEMP%\~!#FE.tmp
  • %TEMP%\~!#FD.tmp
  • %TEMP%\~!#100.tmp
  • %TEMP%\~!#103.tmp
  • %TEMP%\~!#102.tmp
  • %TEMP%\~!#101.tmp
  • %TEMP%\~!#150.tmp
  • %TEMP%\~!#14F.tmp
  • %TEMP%\~!#14E.tmp
  • %TEMP%\~!#151.tmp
  • %TEMP%\~!#154.tmp
  • %TEMP%\~!#153.tmp
  • %TEMP%\~!#152.tmp
  • %TEMP%\~!#149.tmp
  • %TEMP%\~!#148.tmp
  • %TEMP%\~!#147.tmp
  • %TEMP%\~!#14A.tmp
  • %TEMP%\~!#14D.tmp
  • %TEMP%\~!#14C.tmp
  • %TEMP%\~!#14B.tmp
  • %TEMP%\~!#155.tmp
  • %TEMP%\~!#15F.tmp
  • %TEMP%\~!#15E.tmp
  • %TEMP%\~!#15D.tmp
  • %TEMP%\~!#160.tmp
  • %TEMP%\~!#163.tmp
  • %TEMP%\~!#162.tmp
  • %TEMP%\~!#161.tmp
  • %TEMP%\~!#158.tmp
  • %TEMP%\~!#157.tmp
  • %TEMP%\~!#156.tmp
  • %TEMP%\~!#159.tmp
  • %TEMP%\~!#15C.tmp
  • %TEMP%\~!#15B.tmp
  • %TEMP%\~!#15A.tmp
  • %TEMP%\~!#146.tmp
  • %TEMP%\~!#132.tmp
  • %TEMP%\~!#131.tmp
  • %TEMP%\~!#130.tmp
  • %TEMP%\~!#133.tmp
  • %TEMP%\~!#136.tmp
  • %TEMP%\~!#135.tmp
  • %TEMP%\~!#134.tmp
  • %TEMP%\~!#12B.tmp
  • %TEMP%\~!#12A.tmp
  • %TEMP%\~!#129.tmp
  • %TEMP%\~!#12C.tmp
  • %TEMP%\~!#12F.tmp
  • %TEMP%\~!#12E.tmp
  • %TEMP%\~!#12D.tmp
  • %TEMP%\~!#137.tmp
  • %TEMP%\~!#141.tmp
  • %TEMP%\~!#140.tmp
  • %TEMP%\~!#13F.tmp
  • %TEMP%\~!#142.tmp
  • %TEMP%\~!#145.tmp
  • %TEMP%\~!#144.tmp
  • %TEMP%\~!#143.tmp
  • %TEMP%\~!#13A.tmp
  • %TEMP%\~!#139.tmp
  • %TEMP%\~!#138.tmp
  • %TEMP%\~!#13B.tmp
  • %TEMP%\~!#13E.tmp
  • %TEMP%\~!#13D.tmp
  • %TEMP%\~!#13C.tmp
Network activity:
Connects to:
  • '37.##7.255.37':80
TCP:
HTTP GET requests:
  • 37.##7.255.37/962224.html

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android