La mia libreria
La mia libreria

+ Aggiungi alla libreria

Supporto
Supporto 24/7 | Regole per contattare

Richieste

Profile

Trojan.DownLoader25.5025

Aggiunto al database dei virus Dr.Web: 2017-07-03

La descrizione è stata aggiunta:

Technical Information

To ensure autorun and distribution:
Modifies the following registry keys:
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'BitTorrent' = '%APPDATA%\BitTorrent\BitTorrent.exe /MINIMIZED'
Malicious functions:
Executes the following:
  • '%CommonProgramFiles%\~mktqkky.tmp' /PERFORMINSTALL /NORUN /S
  • '%APPDATA%\BitTorrent\Kur.exe'
Modifies file system:
Creates the following files:
  • %APPDATA%\BitTorrent\player\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\stream_out\libstream_out_raop_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\stream_out\libstream_out_gather_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\stream_out\libstream_out_langfromtelx_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\stream_out\libstream_out_record_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\stream_out\libstream_out_setid_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\stream_out\libstream_out_smem_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\stream_out\libstream_out_rtp_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\stream_out\libstream_out_select_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\stream_out\libstream_out_bridge_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\stream_out\libstream_out_delay_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\stream_filter\libstream_filter_record_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\stream_out\libstream_out_autodel_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\stream_out\libstream_out_description_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\stream_out\libstream_out_duplicate_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\stream_out\libstream_out_es_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\stream_out\libstream_out_display_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\stream_out\libstream_out_dummy_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_chroma\libyuy2_i422_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libadjust_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_chroma\librv32_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_chroma\libyuy2_i420_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libalphamask_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libaudiobargraph_v_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libball_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libantiflicker_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libatmo_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\text_renderer\libfreetype_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\text_renderer\libtdummy_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\stream_out\libstream_out_standard_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\stream_out\libstream_out_transcode_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_chroma\libgrey_yuv_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_chroma\libi422_i420_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_chroma\libi422_yuy2_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_chroma\libi420_rgb_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_chroma\libi420_yuy2_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\mmxext\libmemcpymmxext_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\mux\libmux_avi_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\mmx\libi422_yuy2_mmx_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\mmx\libmemcpymmx_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\mux\libmux_dummy_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\mux\libmux_ogg_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\mux\libmux_ps_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\mux\libmux_mp4_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\mux\libmux_mpjpeg_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\misc\liblogger_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\misc\libmemcpy_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\misc\libexport_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\misc\libgnutls_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\misc\libosd_parser_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\mmx\libi420_rgb_mmx_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\mmx\libi420_yuy2_mmx_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\misc\libstats_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\misc\libxml_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\services_discovery\libsap_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\services_discovery\libupnp_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\services_discovery\libmediadirs_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\services_discovery\libpodcast_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\services_discovery\libwindrive_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\sse2\libi422_yuy2_sse2_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\stream_filter\libstream_filter_httplive_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\sse2\libi420_rgb_sse2_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\sse2\libi420_yuy2_sse2_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\packetizer\libpacketizer_dirac_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\packetizer\libpacketizer_flac_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\notify\libmsn_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\packetizer\libpacketizer_copy_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\packetizer\libpacketizer_h264_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\packetizer\libpacketizer_mlp_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_output\libdrawable_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_output\libglwin32_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_output\libdirect3d_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_output\libdirectx_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_output\libvdummy_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_output\libyuv_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\visualization\libgoom_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_output\libvmem_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_output\libwingdi_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libswscale_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libtransform_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libsharpen_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libsubsdelay_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libwall_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_output\libcaca_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_output\libdirect2d_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libwave_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libyuvp_plugin.dll
  • %APPDATA%\BitTorrent\BitTorrent.exe
  • %HOMEPATH%\Start Menu\BitTorrent.lnk
  • %APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\9d1627c087e30ee6fe8c9cce3c77e841_23ef5514-3059-436f-a4a7-4cefaab20eb1
  • %HOMEPATH%\Cookies\%USERNAME%@localhost[1].txt
  • %HOMEPATH%\Desktop\BitTorrent.lnk
  • %APPDATA%\BitTorrent\settings.dat.new
  • %APPDATA%\BitTorrent\apps\featuredContent.btapp
  • %APPDATA%\Microsoft\Internet Explorer\Quick Launch\BitTorrent.lnk
  • %APPDATA%\BitTorrent\maindoc.ico
  • %APPDATA%\BitTorrent\VirusGuard\avxdisk.dll
  • %APPDATA%\BitTorrent\VirusGuard\BDUpdateServiceCom.dll
  • %APPDATA%\BitTorrent\player\plugins\visualization\libprojectm_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\visualization\libvisual_plugin.dll
  • %APPDATA%\BitTorrent\VirusGuard\BitTorrentAntivirus.exe
  • %CommonProgramFiles%\~mktqkky.tmp
  • %APPDATA%\Microsoft\Protect\CREDHIST
  • %APPDATA%\BitTorrent\VirusGuard\scan.dll
  • %TEMP%\aut1.tmp
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libgaussianblur_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libgradfun_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\liberase_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libextract_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libgradient_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\liblogo_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libmagnify_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libgrain_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libinvert_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libbluescreen_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libcanvas_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libblendbench_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libblend_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libchain_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libcroppadd_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libdeinterlace_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libclone_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libcolorthres_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libremoteosd_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libripple_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libpsychedelic_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libpuzzle_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\librotate_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libscene_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libsepia_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\librss_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libscale_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libmosaic_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libmotionblur_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libmarq_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libmirror_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libmotiondetect_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libposterize_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libpostproc_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libosdmenu_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\video_filter\libpanoramix_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\misc\libaudioscrobbler_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\libdtstofloat32_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\libdtstospdif_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\libcompressor_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\libconverter_fixed_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\libequalizer_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\libmono_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\libmpgatofixed32_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\libkaraoke_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access_output\libaccess_output_shout_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access_output\libaccess_output_udp_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access_output\libaccess_output_http_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access_output\libaccess_output_livehttp_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\liba52tofloat32_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\libaudio_format_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\libchorus_flanger_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\liba52tospdif_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\libaudiobargraph_a_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_output\libadummy_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_output\libamem_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_mixer\libfixed32_mixer_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_mixer\libfloat32_mixer_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_output\libaout_directx_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\codec\liba52_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\codec\libaes3_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_output\libaout_file_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_output\libwaveout_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\libsamplerate_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\libscaletempo_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\libnormvol_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\libparam_eq_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\libsimple_channel_mixer_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\libugly_resampler_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\libspatializer_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\audio_filter\libspeex_resampler_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libaccess_http_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libaccess_imem_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libaccess_bd_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libaccess_ftp_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libaccess_mms_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libaccess_smb_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libaccess_tcp_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libaccess_rar_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libaccess_realrtsp_plugin.dll
  • %APPDATA%\BitTorrent\player\btinstall.txt
  • %APPDATA%\BitTorrent\settings.dat
  • %APPDATA%\BitTorrent\bittorrent.lng
  • %APPDATA%\BitTorrent\ipfilter.dat
  • %APPDATA%\BitTorrent\Kur.exe
  • %APPDATA%\BitTorrent\player\plugins\3dnow\libmemcpy3dn_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libaccess_attachment_plugin.dll
  • %APPDATA%\BitTorrent\player\libvlc.dll
  • %APPDATA%\BitTorrent\player\libvlccore.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libscreen_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libsdp_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\liblibbluray_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\librtp_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libstream_filter_rar_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access_output\libaccess_output_dummy_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access_output\libaccess_output_file_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libvcd_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libzip_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libcdda_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libdshow_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libaccess_udp_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libaccess_vdr_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libdtv_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libfilesystem_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libidummy_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libdvdnav_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\access\libdvdread_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libnsv_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libnuv_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libmpgv_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libnsc_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libogg_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libpva_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\librawaud_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libplaylist_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libps_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libimage_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\liblive555_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libgme_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libh264_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libmjpeg_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libmp4_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libmpc_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libmkv_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libmod_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libwav_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libxa_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libvc1_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libvoc_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\gui\libqt4_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\meta_engine\libfolder_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\meta_engine\libtaglib_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\gui\libskins2_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\lua\liblua_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libreal_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libsid_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\librawdv_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\librawvid_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libsmf_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libtta_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libty_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libsubtitle_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libts_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\codec\libpng_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\codec\libquicktime_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\codec\liblibmpeg2_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\codec\libmpeg_audio_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\codec\librawvideo_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\codec\libtheora_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\codec\libvorbis_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\codec\libschroedinger_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\codec\libspeex_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\codec\libddummy_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\codec\libdmo_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\codec\libaraw_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\codec\libavcodec_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\codec\libedummy_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\codec\libkate_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\codec\liblibass_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\codec\libfaad_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\codec\libflac_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libavi_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libdemuxdump_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libasf_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libau_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libdemux_cdg_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libes_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libflacsys_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libdemux_stl_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libdirac_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\control\libgestures_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\control\libglobalhotkeys_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\codec\libx264_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\control\libdummy_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\control\libhotkeys_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\control\liboldrc_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\demux\libaiff_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\control\libnetsync_plugin.dll
  • %APPDATA%\BitTorrent\player\plugins\control\libntservice_plugin.dll
Sets the 'hidden' attribute to the following files:
  • %CommonProgramFiles%\~mktqkky.tmp
Deletes the following files:
  • %TEMP%\aut1.tmp
Moves the following files:
  • from %APPDATA%\BitTorrent\settings.dat to %APPDATA%\BitTorrent\settings.dat.old
Network activity:
Connects to:
  • 'no#.bt.co':80
  • 'up####.utorrent.com':80
  • 'localhost':1039
TCP:
HTTP GET requests:
  • http://no#.bt.co/inclient
  • http://up####.utorrent.com/installstats.php?cl######################################################################################################
  • http://up####.utorrent.com/installstats.php?cl###############################################################################################################################
UDP:
  • DNS ASK no#.bt.co
  • DNS ASK ut#####t.utorrent.com
  • DNS ASK up####.utorrent.com
  • DNS ASK ro####.utorrent.com
  • DNS ASK ro####.bittorrent.com
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: ''

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android