Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Trojan.MulDrop33.17942

Added to the Dr.Web virus database: 2025-10-21

Virus description added:

Technical Information

To ensure autorun and distribution
Creates or modifies the following files
  • %APPDATA%\microsoft\windows\start menu\programs\startup\total commander.lnk
Modifies file system
Creates the following files
  • %TEMP%\7zipsfx.000\distname
  • %TEMP%\7zipsfx.000\totalcmd.7zs
  • %TEMP%\7zipsfx.000\setup.exe
  • %TEMP%\nsk8895.tmp
  • %WINDIR%\arj.pif
  • %WINDIR%\lsplugin.ini
  • %WINDIR%\lha.pif
  • %WINDIR%\noclose.ini
  • %WINDIR%\noclose.pif
  • %WINDIR%\pkunzip.pif
  • %WINDIR%\pkzip.pif
  • %WINDIR%\rar.pif
  • %WINDIR%\uc.pif
  • %ProgramFiles(x86)%\total commander\language\hist_rus.txt
  • %ProgramFiles(x86)%\total commander\language\keyb_rus.txt
  • %ProgramFiles(x86)%\total commander\language\readme.txt
  • %ProgramFiles(x86)%\total commander\language\wcmd_rus.hlp
  • %ProgramFiles(x86)%\total commander\language\wcmd_rus.inc
  • %ProgramFiles(x86)%\total commander\language\wcmd_rus.lng
  • %ProgramFiles(x86)%\total commander\language\wcmd_rus.mnu
  • %ProgramFiles(x86)%\total commander\cabrk.dll
  • %ProgramFiles(x86)%\total commander\cglpt9x.vxd
  • %ProgramFiles(x86)%\total commander\cglptnt.sys
  • %ProgramFiles(x86)%\total commander\descript.ion
  • %ProgramFiles(x86)%\total commander\drives.dll
  • %ProgramFiles(x86)%\total commander\freres32.dll
  • %ProgramFiles(x86)%\total commander\no.bar
  • %ProgramFiles(x86)%\total commander\sam lab.url
  • %ProgramFiles(x86)%\total commander\sfxhead.sfx
  • %ProgramFiles(x86)%\total commander\share_nt.exe
  • %ProgramFiles(x86)%\total commander\tcmadmin.exe
  • %ProgramFiles(x86)%\total commander\tcunzlib.dll
  • %ProgramFiles(x86)%\total commander\totalcmd.exe.manifest
  • %ProgramFiles(x86)%\total commander\totalcmd.inc
  • %ProgramFiles(x86)%\total commander\unacev2.dll
  • %ProgramFiles(x86)%\total commander\unrar.dll
  • %ProgramFiles(x86)%\total commander\wc32to16.exe
  • %ProgramFiles(x86)%\total commander\wcmicons.inc
  • %ProgramFiles(x86)%\total commander\wcmzip32.dll
  • %ProgramFiles(x86)%\total commander\totalcmd.exe
  • %ProgramFiles(x86)%\total commander\wincmd.ini
  • %APPDATA%\microsoft\windows\start menu\programs\total commander\total commander rus.lnk
  • %APPDATA%\microsoft\windows\start menu\programs\total commander\èíôîðìàöèÿ Г® âåðñèè.lnk
  • %APPDATA%\microsoft\windows\start menu\programs\total commander\ñïðàâêà ГЄ ïðîãðàììå.lnk
  • %APPDATA%\microsoft\windows\start menu\programs\total commander\óäàëåíèå êîìàíäåðà.lnk
  • %APPDATA%\microsoft\windows\start menu\programs\total commander\samlab.ws - new soft.lnk
  • %HOMEPATH%\desktop\total commander.lnk
  • %ProgramFiles(x86)%\total commander\uninstall.exe
  • %ProgramFiles(x86)%\total commander\fileicons.dll
  • %ProgramFiles(x86)%\total commander\wcmicons.dll
  • %ProgramFiles(x86)%\total commander\default.bar
  • %ProgramFiles(x86)%\total commander\system.bar
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\balloon.wav
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\command.wav
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\default.wav
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\mfc80.dll
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\microsoft.vc80.crt.manifest
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\microsoft.vc80.mfc.manifest
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\microsoft.vc80.mfcloc.manifest
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\msvcr80.dll
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\ace_utilities_settings.reg
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\au.chm
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\au.cmd
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\au.exe
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\clearpasticonhistory.vbs
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\da.exe
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\russian.reg
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\webupdate.exe
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\wipe.dll
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\wipext.dll
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\ziparchive.dll
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\zlib.dll
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\info.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_dup\ignorelist.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_empty\ignore.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_junk\microsoft publisher.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_junk\new2.41.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_junk\new3.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_junk\aceignore_junk.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_junk\additional.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_junk\hp.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_junk\mozilla.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_junk\new2.2.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_junk\new2.5.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_junk\powertech.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_junk\vista.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\afterxp.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\acrobat.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\autocad.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\careful241.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\careful3.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\diskeeper.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\dont scan.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\easy cd creator.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\easy media creator.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\encarta.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\flash player.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\genie backup manager.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\hp fax machine.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\ie7.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\kinko file prep tool.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\ms dotnet.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\ms office.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\ms publisher.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\ms visualstudionet.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\msn.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\mcafee.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\microsoft money.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\norton antivirus.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\norton internet security.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\oracle.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\paint shop pro.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\panda av.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\powerarchiver.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\standardscanonly.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\the bat!.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\ws_ftp pro.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\windows desktop search.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\aftervista.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\apps.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\careful.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\careful2.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\dangerous.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\ignore_reg\wordperfect.dat
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\regfixer\ignorefolders.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\data\regfixer\ignorekeys.ini
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\7-zip compression.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\acdsee 4.x.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\acdsee 5.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\aol 7.0 chat log.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\aol instant messenger.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\ax-icons 4.x.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\absoluteftp.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\acon digital media acoustica 3.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\acoustica cd label maker.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\ad-aware.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\adaptec easy cd creator.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\addsoft log files.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\addweb.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\adobe acrobat full 4.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\adobe acrobat reader 3.x.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\adobe acrobat reader 4.0.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\adobe acrobat reader 5.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\adobe acrobat reader 6.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\advanced disk catalog.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\advanced mp3 catalog.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\agent newsreader.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\alcohol mru.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\altavista toolbar.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\audio cd info.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\audiocatalyst.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\avant browser history.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\awicons.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\axialis icon workshop.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\axialis media browser.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\babylon builder.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\babylon.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\bearshare.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\beyond compare 2.x.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\bookreader.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\borland delphi.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\crt.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\cabinet manager.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\chameleon web browser.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\coffeecup directftp.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\coffeecup gif animator.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\conexware powerarchivier 8.6.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\cooleditpro.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\cute mx.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\cuteftp 4.0 .aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\cutehtml.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\disk explorer professional.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\diskeeper.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\divx player.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\download accelerator (dap).aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\dreamweaver 3.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\dreamweaver ultradev_4.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\easy cd creator.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\easy icon maker.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\ebay toolbar.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\editpad.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\editplus.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\enigma browser.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\eudora mail.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\far.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\ftp explorer.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\ftp voyager.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\flash5.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\flashget(jetcar).aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\fotostation.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\free download manager.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\freecell statistics.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\fun cd.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\go!zlla.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\gamani gif movie gear 3.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\game maker 4.3c.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\getright 4x.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\goldwave.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\google deskbar.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\google tool bar.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\google video player.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\gravity newsreader.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\hex workshop 4.2.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\homesite (allaire).aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\hotjava browser.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\html help workshop.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\icq 2000.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\ie default download dir.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\izarc.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\imaging.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\indigo rose setup factory 6.0.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\inoculatelt pe virus scan.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\interquick.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\internet download manager.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\irfanview3.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\jasc animation shop 3.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\jet photo shell.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\k-lite codec pack.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\kazaa.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\kazaa media desktop.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\lview pro.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\leapftp.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\letterbox.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\meda mp3 splitter.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\ms media player 7.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\ms media player 9.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\ms movie maker.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\msn messenger.txt
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\msn tool bar.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\macromedia dreamweaver mx.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\macromedia firework mx.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\macromedia flash mx.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\magic iso maker.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\mass download.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\mastersplitter.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\mcafee virus scan.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\media player 6.0.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\metapad.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\microangelo.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\micrografx picture publisher.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\microsoft netmeeting.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\microsoft office infopath.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\microsoft photo editor_3.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\microsoft pictureit.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\microsoft windows media player 8.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\microsoft works.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\miranda icq.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\morpheus.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\mozart 4.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\musicmatch jukebox.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\naviscope.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\negatory assembly studio 1.0.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\nero - burning rom.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\netants.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\netcaptor.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\netsonic.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\netzip.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\newsbin.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\norton anti-virus.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\norton file manager.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\nortonav2000.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\nortoncom.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\notepad plus.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\notetab light.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\notetab pro.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\office 2003.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\office xp.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\office2000.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\office97.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\omnipage.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\opera6.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\opera7.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\pe explorer.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\pkzip for windows.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\paint shop pro 5.x.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\paint shop pro 6.x.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\paint shop pro 7.x.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\passwordsafe.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\personal ancestral file.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\photodraw.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\photoexpress.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\photoimpact.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\photocanvas.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\photoshop 50.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\photoshop 55.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\photoshop 6.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\photoshop 7.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\picozip.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\polyview.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\popupcop.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\popup purger.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\powerarchiver.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\powerdvd.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\powerdesk.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\powerzip.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\quicktime.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\realnetworks real download.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\realone player.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\realplayer.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\realvnc.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\swish.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\smart explorer.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\sonique.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\spinner plus.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\spybot.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\star downloader.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\staroffice.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\sunjavacache.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\sygate personal firewall.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\system mechanic 4 pro.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\system mechanic 4.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\system mechanic3.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\teleport pro.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\tennyson maxwell teleport pro 1.29.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\textpad_4.x.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\the playe.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\trillian.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\ulead gif animator.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\ultimate paint.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\ultra edit.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\ultraiso.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\visual studio 6.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\winrar.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\webferret.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\winace.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\winme regedit recent key.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\winzip.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\winamp.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\windows commander.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\windows logs.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\windows paint.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\windows word pad.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\wordperfect10.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\xara 3d.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\xingmp3 player.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\xnview.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\xnews.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\xolox.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\yahoo! messenger.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\yahoo! toolbar.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\yahooplayer.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\yamaha xg.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\zipmagic.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\zonealarm.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\emule.aup
  • %ProgramFiles(x86)%\total commander\soft\ace utilities\plugins\utorrent.aup
  • %APPDATA%\microsoft\windows\start menu\programs\total commander\ïîëåçíûå óòèëèòû\îáñëóæèâàíèå ñèñòåìû.lnk
  • %ProgramFiles(x86)%\total commander\plugins\exe\akelpad.exe
  • %ProgramFiles(x86)%\total commander\plugins\exe\akelfiles\plugs\highlight.dll
  • %ProgramFiles(x86)%\total commander\plugins\exe\akelfiles\plugs\highlight\bat.highlight
  • %ProgramFiles(x86)%\total commander\plugins\exe\akelfiles\plugs\highlight\cpp.highlight
  • %ProgramFiles(x86)%\total commander\plugins\exe\akelfiles\plugs\highlight\css.highlight
  • %ProgramFiles(x86)%\total commander\plugins\exe\akelfiles\plugs\highlight\html.highlight
  • %ProgramFiles(x86)%\total commander\plugins\exe\akelfiles\plugs\highlight\nsis.highlight
  • %ProgramFiles(x86)%\total commander\plugins\exe\akelfiles\plugs\highlight\pascal.highlight
  • %APPDATA%\microsoft\windows\start menu\programs\akelpad.lnk
  • %ProgramFiles(x86)%\total commander\plugins\exe\decryptc.exe
  • %APPDATA%\microsoft\windows\start menu\programs\total commander\îòêðûòèå ïàðîëåé ftp.lnk
  • %WINDIR%\syswow64\mswtif.dll
  • %ProgramFiles(x86)%\total commander\soft\fitw\default.ftw
  • %ProgramFiles(x86)%\total commander\soft\fitw\fitw.exe
  • %APPDATA%\microsoft\windows\start menu\programs\total commander\ïîëåçíûå óòèëèòû\îïòèìèçàöèÿ ñèñòåìû.lnk
  • %ProgramFiles(x86)%\total commander\soft\sateira\databurner.exe
  • %APPDATA%\microsoft\windows\start menu\programs\total commander\ïîëåçíûå óòèëèòû\çàïèñûâàíèå cd&dvd.lnk
  • %ProgramFiles(x86)%\total commander\plugins\exe\tweaktc.exe
  • %ProgramFiles(x86)%\total commander\plugins\exe\tweaktc.ini
  • %APPDATA%\microsoft\windows\start menu\programs\total commander\íàñòðîéêà êîìàíäåðà.lnk
  • %ProgramFiles(x86)%\total commander\plugins\wcx\multiarc\7za.exe
  • %ProgramFiles(x86)%\total commander\plugins\wcx\multiarc\conspawn.pipe
  • %ProgramFiles(x86)%\total commander\plugins\wcx\multiarc\multiarc.ini
  • %ProgramFiles(x86)%\total commander\plugins\wcx\multiarc\multiarc.wcx
  • %ProgramFiles(x86)%\total commander\plugins\wcx\multiarc\lang\multiarc_russian.lng
  • %ProgramFiles(x86)%\total commander\plugins\arc\ace.cfg
  • %ProgramFiles(x86)%\total commander\plugins\arc\ace.exe
  • %ProgramFiles(x86)%\total commander\plugins\arc\ace.key
  • %ProgramFiles(x86)%\total commander\plugins\arc\ace.msg
  • %ProgramFiles(x86)%\total commander\plugins\arc\arj.exe
  • %ProgramFiles(x86)%\total commander\plugins\arc\register.dat
  • %ProgramFiles(x86)%\total commander\plugins\wcx\multiarc\cab.exe
  • %ProgramFiles(x86)%\total commander\plugins\arc\lha.exe
  • %ProgramFiles(x86)%\total commander\plugins\arc\rar.exe
  • %ProgramFiles(x86)%\total commander\plugins\arc\rarreg.key
  • %ProgramFiles(x86)%\total commander\plugins\arc\default.sfx
  • %ProgramFiles(x86)%\total commander\plugins\arc\uc2.exe
  • %ProgramFiles(x86)%\total commander\plugins\wcx\multiarc\uha.exe
  • %ProgramFiles(x86)%\total commander\plugins\wlx\ampview\ampview.exe
  • %ProgramFiles(x86)%\total commander\plugins\wlx\ampview\ampview.wlx
  • %ProgramFiles(x86)%\total commander\plugins\wlx\ampview\bass.dll
  • %ProgramFiles(x86)%\total commander\plugins\wlx\ampview\bassmidi.dll
  • %ProgramFiles(x86)%\total commander\plugins\wlx\ampview\basswma.dll
  • %ProgramFiles(x86)%\total commander\plugins\wlx\ampview\tags.dll
  • %ProgramFiles(x86)%\total commander\plugins\wlx\ampview\config\default.ini
  • %ProgramFiles(x86)%\total commander\plugins\wlx\ampview\language\ampview_russian.lng
  • %ProgramFiles(x86)%\total commander\plugins\wlx\ampview\skins\aqua x.avsz
  • %ProgramFiles(x86)%\total commander\plugins\wlx\ampview\skins\lister lite.avsz
  • %ProgramFiles(x86)%\total commander\plugins\wlx\ampview\skins\lister.avsz
  • %ProgramFiles(x86)%\total commander\plugins\wlx\ampview\skins\winamp 5.avsz
  • %APPDATA%\microsoft\windows\start menu\programs\total commander\ïîëåçíûå óòèëèòû\ïðîèãðûâàòåëü àóäèî.lnk
  • %ProgramFiles(x86)%\total commander\plugins\wlx\archview\archview.ini
  • %ProgramFiles(x86)%\total commander\plugins\wlx\archview\archview.wlx
  • %ProgramFiles(x86)%\total commander\plugins\wlx\archview\language\archview_russian.lng
  • %ProgramFiles(x86)%\total commander\plugins\wlx\excellence\excellence.lng
  • %ProgramFiles(x86)%\total commander\plugins\wlx\excellence\excellence.wlx
  • %ProgramFiles(x86)%\total commander\plugins\wlx\fileinfo\fileinfo.ini
  • %ProgramFiles(x86)%\total commander\plugins\wlx\fileinfo\fileinfo.wlx
  • %ProgramFiles(x86)%\total commander\plugins\wlx\fileinfo\unaspack.dll
  • %ProgramFiles(x86)%\total commander\plugins\wlx\font\font.russian.lng
  • %ProgramFiles(x86)%\total commander\plugins\wlx\font\font.wlx
  • %ProgramFiles(x86)%\total commander\plugins\wlx\ieview\ieview.ini
  • %ProgramFiles(x86)%\total commander\plugins\wlx\ieview\ieview.wlx
  • %ProgramFiles(x86)%\total commander\plugins\wlx\imagine\imagine.dll
  • %ProgramFiles(x86)%\total commander\plugins\wlx\imagine\imagine.exe
  • %ProgramFiles(x86)%\total commander\plugins\wlx\imagine\imagine.ini
  • %ProgramFiles(x86)%\total commander\plugins\wlx\imagine\imagine.wlx
  • %ProgramFiles(x86)%\total commander\plugins\wlx\imagine\language\imagine_russian.lng
  • %ProgramFiles(x86)%\total commander\plugins\wlx\imagine\language\imagine_russian.mnu
  • %ProgramFiles(x86)%\total commander\plugins\wlx\imagine\plugin\j2k.dll
  • %ProgramFiles(x86)%\total commander\plugins\wlx\imagine\plugin\lbm.dll
  • %ProgramFiles(x86)%\total commander\plugins\wlx\listdoc\listdoc.wlx
  • %ProgramFiles(x86)%\total commander\plugins\wlx\mmedia\mmedia.ini
  • %ProgramFiles(x86)%\total commander\plugins\wlx\mmedia\mmedia.wlx
  • %ProgramFiles(x86)%\total commander\plugins\wlx\swfview\swfview.wlx
  • %WINDIR%\syswow64\devcon.exe
  • %ProgramFiles(x86)%\total commander\plugins\wfx\devman\devman.wfx
  • %ProgramFiles(x86)%\total commander\plugins\wfx\pluginmanager\language.pml
  • %ProgramFiles(x86)%\total commander\plugins\wfx\pluginmanager\pluginmanager.cfg
  • %ProgramFiles(x86)%\total commander\plugins\wfx\pluginmanager\pluginmanager.wfx
  • %ProgramFiles(x86)%\total commander\plugins\wfx\procfs\procfs.wfx
  • %ProgramFiles(x86)%\total commander\plugins\wfx\registry\registry.wfx
  • %ProgramFiles(x86)%\total commander\plugins\wfx\registry\registry_vk.ini
  • %ProgramFiles(x86)%\total commander\plugins\wfx\rss_reader\default.tmpl
  • %ProgramFiles(x86)%\total commander\plugins\wfx\rss_reader\likeopera.tmpl
  • %ProgramFiles(x86)%\total commander\plugins\wfx\rss_reader\modern.tmpl
  • %ProgramFiles(x86)%\total commander\plugins\wfx\rss_reader\textonly.tmpl
  • %ProgramFiles(x86)%\total commander\plugins\wfx\rss_reader\wfx_rss.ini
  • %ProgramFiles(x86)%\total commander\plugins\wfx\rss_reader\wfx_rss.wfx
  • %ProgramFiles(x86)%\total commander\plugins\wfx\services\services.wfx
  • %ProgramFiles(x86)%\total commander\plugins\wfx\services\app2srv.exe
  • %ProgramFiles(x86)%\total commander\plugins\wfx\tcburner\foxburner.dll
  • %ProgramFiles(x86)%\total commander\plugins\wfx\tcburner\tcburner.ini
  • %ProgramFiles(x86)%\total commander\plugins\wfx\tcburner\tcburner.wfx
  • %ProgramFiles(x86)%\total commander\plugins\wfx\tcburner\lang\tcburner_russian.locale
  • %ProgramFiles(x86)%\total commander\plugins\wcx\catalogmaker\catalogmaker.wcx
  • %ProgramFiles(x86)%\total commander\plugins\wcx\chmdir\chmdir.lng
  • %ProgramFiles(x86)%\total commander\plugins\wcx\chmdir\chmdir.wcx
  • %ProgramFiles(x86)%\total commander\plugins\wcx\iclread\iclread.wcx
  • %ProgramFiles(x86)%\total commander\plugins\wcx\iso\iso.wcx
  • %ProgramFiles(x86)%\total commander\plugins\wcx\installexplorer\instexpl.dll
  • %ProgramFiles(x86)%\total commander\plugins\wcx\installexplorer\instexpl.wcx
  • %ProgramFiles(x86)%\total commander\plugins\wcx\installexplorer\unp\bzip2_1.unp
  • %ProgramFiles(x86)%\total commander\plugins\wcx\installexplorer\unp\bzip2_2.unp
  • %ProgramFiles(x86)%\total commander\plugins\wcx\installexplorer\unp\bzip2_3.unp
  • %ProgramFiles(x86)%\total commander\plugins\wcx\installexplorer\unp\eschalon.unp
  • %ProgramFiles(x86)%\total commander\plugins\wcx\installexplorer\unp\gentee.unp
  • %ProgramFiles(x86)%\total commander\plugins\wcx\installexplorer\unp\inflate1.unp
  • %ProgramFiles(x86)%\total commander\plugins\wcx\installexplorer\unp\inflate2.unp
  • %ProgramFiles(x86)%\total commander\plugins\wcx\installexplorer\unp\inflate3.unp
  • %ProgramFiles(x86)%\total commander\plugins\wcx\installexplorer\unp\lzma.unp
  • %ProgramFiles(x86)%\total commander\plugins\wcx\installexplorer\unp\pkware.unp
  • %ProgramFiles(x86)%\total commander\plugins\wcx\installexplorer\unp\vise.unp
  • %ProgramFiles(x86)%\total commander\plugins\wdx\wdx_exif\exif.wdx
  • %ProgramFiles(x86)%\total commander\plugins\wdx\media\codecs.cfg
  • %ProgramFiles(x86)%\total commander\plugins\wdx\media\media.lng
  • %ProgramFiles(x86)%\total commander\plugins\wdx\media\media.wdx
  • %ProgramFiles(x86)%\total commander\plugins\wdx\media\settings.bat
  • %ProgramFiles(x86)%\total commander\plugins\wdx\shelldetails\shelldetails.wdx
Deletes following files that it created itself
  • %TEMP%\7zipsfx.000\distname
  • %TEMP%\7zipsfx.000\setup.exe
  • %TEMP%\7zipsfx.000\totalcmd.7zs
Miscellaneous
Creates and executes the following
  • '%TEMP%\7zipsfx.000\setup.exe' /S

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android