La mia libreria
La mia libreria

+ Aggiungi alla libreria

Supporto
Supporto 24/7 | Regole per contattare

Richieste

Profile

Trojan.Encoder.22571

Aggiunto al database dei virus Dr.Web: 2017-12-05

La descrizione è stata aggiunta:

Technical Information

To ensure autorun and distribution:
Modifies the following registry keys:
  • [<HKCU>\Software\Microsoft\Command Processor] 'AutoRun' = '"%APPDATA%\{EAD8C9EB-CE7E-1A35-C2EE-F26F5E13EB94}\wowdeb.exe"'
  • [<HKCU>\Control Panel\Desktop] 'SCRNSAVE.EXE' = '"%APPDATA%\{EAD8C9EB-CE7E-1A35-C2EE-F26F5E13EB94}\wowdeb.exe"'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'wowdeb' = '"%APPDATA%\{EAD8C9EB-CE7E-1A35-C2EE-F26F5E13EB94}\wowdeb.exe"'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'wowdeb' = '"%APPDATA%\{EAD8C9EB-CE7E-1A35-C2EE-F26F5E13EB94}\wowdeb.exe"'
Creates or modifies the following files:
  • %HOMEPATH%\Start Menu\Programs\Startup\wowdeb.lnk
Malicious functions:
Creates and executes the following:
  • '%APPDATA%\{EAD8C9EB-CE7E-1A35-C2EE-F26F5E13EB94}\wowdeb.exe'
Executes the following:
  • '<SYSTEM32>\taskkill.exe' /t /f /im "<File name>.exe"
  • '<SYSTEM32>\cmd.exe' /c taskkill /t /f /im "<File name>.exe" > NUL & ping -n 1 127.0.0.1 > NUL & del "<Full path to file>" > NUL
Terminates or attempts to terminate
the following system processes:
  • <SYSTEM32>\cmd.exe
Modifies file system:
Creates the following files:
  • %APPDATA%\{EAD8C9EB-CE7E-1A35-C2EE-F26F5E13EB94}\wowdeb.exe
Network activity:
UDP:
  • '85.#3.2.168':6892
  • '85.#3.2.167':6892
  • '85.#3.2.166':6892
  • '85.#3.2.169':6892
  • '85.#3.2.172':6892
  • '85.#3.2.171':6892
  • '85.#3.2.170':6892
  • '85.#3.2.165':6892
  • '85.#3.2.160':6892
  • '85.#3.2.159':6892
  • '85.#3.2.158':6892
  • '85.#3.2.161':6892
  • '85.#3.2.164':6892
  • '85.#3.2.163':6892
  • '85.#3.2.162':6892
  • '85.#3.2.173':6892
  • '85.#3.2.184':6892
  • '85.#3.2.183':6892
  • '85.#3.2.182':6892
  • '85.#3.2.185':6892
  • '85.#3.2.188':6892
  • '85.#3.2.187':6892
  • '85.#3.2.186':6892
  • '85.#3.2.181':6892
  • '85.#3.2.176':6892
  • '85.#3.2.175':6892
  • '85.#3.2.174':6892
  • '85.#3.2.177':6892
  • '85.#3.2.180':6892
  • '85.#3.2.179':6892
  • '85.#3.2.178':6892
  • '85.#3.2.157':6892
  • '85.#3.2.136':6892
  • '85.#3.2.135':6892
  • '85.#3.2.134':6892
  • '85.#3.2.137':6892
  • '85.#3.2.140':6892
  • '85.#3.2.139':6892
  • '85.#3.2.138':6892
  • '85.#3.2.133':6892
  • '85.#3.2.128':6892
  • '85.#3.2.127':6892
  • '85.#3.2.126':6892
  • '85.#3.2.129':6892
  • '85.#3.2.132':6892
  • '85.#3.2.131':6892
  • '85.#3.2.130':6892
  • '85.#3.2.141':6892
  • '85.#3.2.152':6892
  • '85.#3.2.151':6892
  • '85.#3.2.150':6892
  • '85.#3.2.153':6892
  • '85.#3.2.156':6892
  • '85.#3.2.155':6892
  • '85.#3.2.154':6892
  • '85.#3.2.149':6892
  • '85.#3.2.144':6892
  • '85.#3.2.143':6892
  • '85.#3.2.142':6892
  • '85.#3.2.145':6892
  • '85.#3.2.148':6892
  • '85.#3.2.147':6892
  • '85.#3.2.146':6892
  • '85.#3.2.189':6892
  • '85.#3.2.232':6892
  • '85.#3.2.231':6892
  • '85.#3.2.230':6892
  • '85.#3.2.233':6892
  • '85.#3.2.236':6892
  • '85.#3.2.235':6892
  • '85.#3.2.234':6892
  • '85.#3.2.229':6892
  • '85.#3.2.224':6892
  • '85.#3.2.223':6892
  • '85.#3.2.222':6892
  • '85.#3.2.225':6892
  • '85.#3.2.228':6892
  • '85.#3.2.227':6892
  • '85.#3.2.226':6892
  • '85.#3.2.237':6892
  • '85.#3.2.248':6892
  • '85.#3.2.247':6892
  • '85.#3.2.246':6892
  • '85.#3.2.249':6892
  • '85.#3.2.252':6892
  • '85.#3.2.251':6892
  • '85.#3.2.250':6892
  • '85.#3.2.245':6892
  • '85.#3.2.240':6892
  • '85.#3.2.239':6892
  • '85.#3.2.238':6892
  • '85.#3.2.241':6892
  • '85.#3.2.244':6892
  • '85.#3.2.243':6892
  • '85.#3.2.242':6892
  • '85.#3.2.221':6892
  • '85.#3.2.200':6892
  • '85.#3.2.199':6892
  • '85.#3.2.198':6892
  • '85.#3.2.201':6892
  • '85.#3.2.204':6892
  • '85.#3.2.203':6892
  • '85.#3.2.202':6892
  • '85.#3.2.197':6892
  • '85.#3.2.192':6892
  • '85.#3.2.191':6892
  • '85.#3.2.190':6892
  • '85.#3.2.193':6892
  • '85.#3.2.196':6892
  • '85.#3.2.195':6892
  • '85.#3.2.194':6892
  • '85.#3.2.205':6892
  • '85.#3.2.216':6892
  • '85.#3.2.215':6892
  • '85.#3.2.214':6892
  • '85.#3.2.217':6892
  • '85.#3.2.220':6892
  • '85.#3.2.219':6892
  • '85.#3.2.218':6892
  • '85.#3.2.213':6892
  • '85.#3.2.208':6892
  • '85.#3.2.207':6892
  • '85.#3.2.206':6892
  • '85.#3.2.209':6892
  • '85.#3.2.212':6892
  • '85.#3.2.211':6892
  • '85.#3.2.210':6892
  • '85.#3.2.125':6892
  • '85.#3.2.40':6892
  • '85.#3.2.39':6892
  • '85.#3.2.38':6892
  • '85.#3.2.41':6892
  • '85.#3.2.44':6892
  • '85.#3.2.43':6892
  • '85.#3.2.42':6892
  • '85.#3.2.37':6892
  • '85.#3.2.32':6892
  • '85.#3.2.31':6892
  • '85.#3.2.30':6892
  • '85.#3.2.33':6892
  • '85.#3.2.36':6892
  • '85.#3.2.35':6892
  • '85.#3.2.34':6892
  • '85.#3.2.45':6892
  • '85.#3.2.56':6892
  • '85.#3.2.55':6892
  • '85.#3.2.54':6892
  • '85.#3.2.57':6892
  • '85.#3.2.60':6892
  • '85.#3.2.59':6892
  • '85.#3.2.58':6892
  • '85.#3.2.53':6892
  • '85.#3.2.48':6892
  • '85.#3.2.47':6892
  • '85.#3.2.46':6892
  • '85.#3.2.49':6892
  • '85.#3.2.52':6892
  • '85.#3.2.51':6892
  • '85.#3.2.50':6892
  • '85.#3.2.29':6892
  • '85.#3.2.8':6892
  • '85.#3.2.7':6892
  • '85.#3.2.6':6892
  • '85.#3.2.9':6892
  • '85.#3.2.12':6892
  • '85.#3.2.11':6892
  • '85.#3.2.10':6892
  • '85.#3.2.5':6892
  • '85.#3.2.0':6892
  • '85.#3.1.255':6892
  • '85.#3.1.254':6892
  • '85.#3.2.1':6892
  • '85.#3.2.4':6892
  • '85.#3.2.3':6892
  • '85.#3.2.2':6892
  • '85.#3.2.13':6892
  • '85.#3.2.24':6892
  • '85.#3.2.23':6892
  • '85.#3.2.22':6892
  • '85.#3.2.25':6892
  • '85.#3.2.28':6892
  • '85.#3.2.27':6892
  • '85.#3.2.26':6892
  • '85.#3.2.21':6892
  • '85.#3.2.16':6892
  • '85.#3.2.15':6892
  • '85.#3.2.14':6892
  • '85.#3.2.17':6892
  • '85.#3.2.20':6892
  • '85.#3.2.19':6892
  • '85.#3.2.18':6892
  • '85.#3.2.61':6892
  • '85.#3.2.104':6892
  • '85.#3.2.103':6892
  • '85.#3.2.102':6892
  • '85.#3.2.105':6892
  • '85.#3.2.108':6892
  • '85.#3.2.107':6892
  • '85.#3.2.106':6892
  • '85.#3.2.101':6892
  • '85.#3.2.96':6892
  • '85.#3.2.95':6892
  • '85.#3.2.94':6892
  • '85.#3.2.97':6892
  • '85.#3.2.100':6892
  • '85.#3.2.99':6892
  • '85.#3.2.98':6892
  • '85.#3.2.109':6892
  • '85.#3.2.120':6892
  • '85.#3.2.119':6892
  • '85.#3.2.118':6892
  • '85.#3.2.121':6892
  • '85.#3.2.124':6892
  • '85.#3.2.123':6892
  • '85.#3.2.122':6892
  • '85.#3.2.117':6892
  • '85.#3.2.112':6892
  • '85.#3.2.111':6892
  • '85.#3.2.110':6892
  • '85.#3.2.113':6892
  • '85.#3.2.116':6892
  • '85.#3.2.115':6892
  • '85.#3.2.114':6892
  • '85.#3.2.93':6892
  • '85.#3.2.72':6892
  • '85.#3.2.71':6892
  • '85.#3.2.70':6892
  • '85.#3.2.73':6892
  • '85.#3.2.76':6892
  • '85.#3.2.75':6892
  • '85.#3.2.74':6892
  • '85.#3.2.69':6892
  • '85.#3.2.64':6892
  • '85.#3.2.63':6892
  • '85.#3.2.62':6892
  • '85.#3.2.65':6892
  • '85.#3.2.68':6892
  • '85.#3.2.67':6892
  • '85.#3.2.66':6892
  • '85.#3.2.77':6892
  • '85.#3.2.88':6892
  • '85.#3.2.87':6892
  • '85.#3.2.86':6892
  • '85.#3.2.89':6892
  • '85.#3.2.92':6892
  • '85.#3.2.91':6892
  • '85.#3.2.90':6892
  • '85.#3.2.85':6892
  • '85.#3.2.80':6892
  • '85.#3.2.79':6892
  • '85.#3.2.78':6892
  • '85.#3.2.81':6892
  • '85.#3.2.84':6892
  • '85.#3.2.83':6892
  • '85.#3.2.82':6892
  • '85.#3.3.167':6892
  • '85.#3.3.166':6892
  • '85.#3.3.165':6892
  • '85.#3.3.168':6892
  • '85.#3.3.171':6892
  • '85.#3.3.170':6892
  • '85.#3.3.169':6892
  • '85.#3.3.164':6892
  • '85.#3.3.159':6892
  • '85.#3.3.158':6892
  • '85.#3.3.157':6892
  • '85.#3.3.160':6892
  • '85.#3.3.163':6892
  • '85.#3.3.162':6892
  • '85.#3.3.161':6892
  • '85.#3.3.172':6892
  • '85.#3.3.183':6892
  • '85.#3.3.182':6892
  • '85.#3.3.181':6892
  • '85.#3.3.184':6892
  • '85.#3.3.187':6892
  • '85.#3.3.186':6892
  • '85.#3.3.185':6892
  • '85.#3.3.180':6892
  • '85.#3.3.175':6892
  • '85.#3.3.174':6892
  • '85.#3.3.173':6892
  • '85.#3.3.176':6892
  • '85.#3.3.179':6892
  • '85.#3.3.178':6892
  • '85.#3.3.177':6892
  • '85.#3.3.156':6892
  • '85.#3.3.135':6892
  • '85.#3.3.134':6892
  • '85.#3.3.133':6892
  • '85.#3.3.136':6892
  • '85.#3.3.139':6892
  • '85.#3.3.138':6892
  • '85.#3.3.137':6892
  • '85.#3.3.132':6892
  • '85.#3.3.127':6892
  • '85.#3.3.126':6892
  • '85.#3.3.125':6892
  • '85.#3.3.128':6892
  • '85.#3.3.131':6892
  • '85.#3.3.130':6892
  • '85.#3.3.129':6892
  • '85.#3.3.140':6892
  • '85.#3.3.151':6892
  • '85.#3.3.150':6892
  • '85.#3.3.149':6892
  • '85.#3.3.152':6892
  • '85.#3.3.155':6892
  • '85.#3.3.154':6892
  • '85.#3.3.153':6892
  • '85.#3.3.148':6892
  • '85.#3.3.143':6892
  • '85.#3.3.142':6892
  • '85.#3.3.141':6892
  • '85.#3.3.144':6892
  • '85.#3.3.147':6892
  • '85.#3.3.146':6892
  • '85.#3.3.145':6892
  • '85.#3.3.188':6892
  • '85.#3.3.231':6892
  • '85.#3.3.230':6892
  • '85.#3.3.229':6892
  • '85.#3.3.232':6892
  • '85.#3.3.235':6892
  • '85.#3.3.234':6892
  • '85.#3.3.233':6892
  • '85.#3.3.228':6892
  • '85.#3.3.223':6892
  • '85.#3.3.222':6892
  • '85.#3.3.221':6892
  • '85.#3.3.224':6892
  • '85.#3.3.227':6892
  • '85.#3.3.226':6892
  • '85.#3.3.225':6892
  • '85.#3.3.236':6892
  • '85.#3.3.247':6892
  • '85.#3.3.246':6892
  • '85.#3.3.245':6892
  • '85.#3.3.248':6892
  • '85.#3.3.251':6892
  • '85.#3.3.250':6892
  • '85.#3.3.249':6892
  • '85.#3.3.244':6892
  • '85.#3.3.239':6892
  • '85.#3.3.238':6892
  • '85.#3.3.237':6892
  • '85.#3.3.240':6892
  • '85.#3.3.243':6892
  • '85.#3.3.242':6892
  • '85.#3.3.241':6892
  • '85.#3.3.220':6892
  • '85.#3.3.199':6892
  • '85.#3.3.198':6892
  • '85.#3.3.197':6892
  • '85.#3.3.200':6892
  • '85.#3.3.203':6892
  • '85.#3.3.202':6892
  • '85.#3.3.201':6892
  • '85.#3.3.196':6892
  • '85.#3.3.191':6892
  • '85.#3.3.190':6892
  • '85.#3.3.189':6892
  • '85.#3.3.192':6892
  • '85.#3.3.195':6892
  • '85.#3.3.194':6892
  • '85.#3.3.193':6892
  • '85.#3.3.204':6892
  • '85.#3.3.215':6892
  • '85.#3.3.214':6892
  • '85.#3.3.213':6892
  • '85.#3.3.216':6892
  • '85.#3.3.219':6892
  • '85.#3.3.218':6892
  • '85.#3.3.217':6892
  • '85.#3.3.212':6892
  • '85.#3.3.207':6892
  • '85.#3.3.206':6892
  • '85.#3.3.205':6892
  • '85.#3.3.208':6892
  • '85.#3.3.211':6892
  • '85.#3.3.210':6892
  • '85.#3.3.209':6892
  • '85.#3.3.124':6892
  • '85.#3.3.39':6892
  • '85.#3.3.38':6892
  • '85.#3.3.37':6892
  • '85.#3.3.40':6892
  • '85.#3.3.43':6892
  • '85.#3.3.42':6892
  • '85.#3.3.41':6892
  • '85.#3.3.36':6892
  • '85.#3.3.31':6892
  • '85.#3.3.30':6892
  • '85.#3.3.29':6892
  • '85.#3.3.32':6892
  • '85.#3.3.35':6892
  • '85.#3.3.34':6892
  • '85.#3.3.33':6892
  • '85.#3.3.44':6892
  • '85.#3.3.55':6892
  • '85.#3.3.54':6892
  • '85.#3.3.53':6892
  • '85.#3.3.56':6892
  • '85.#3.3.59':6892
  • '85.#3.3.58':6892
  • '85.#3.3.57':6892
  • '85.#3.3.52':6892
  • '85.#3.3.47':6892
  • '85.#3.3.46':6892
  • '85.#3.3.45':6892
  • '85.#3.3.48':6892
  • '85.#3.3.51':6892
  • '85.#3.3.50':6892
  • '85.#3.3.49':6892
  • '85.#3.3.28':6892
  • '85.#3.3.7':6892
  • '85.#3.3.6':6892
  • '85.#3.3.5':6892
  • '85.#3.3.8':6892
  • '85.#3.3.11':6892
  • '85.#3.3.10':6892
  • '85.#3.3.9':6892
  • '85.#3.3.4':6892
  • '85.#3.2.255':6892
  • '85.#3.2.254':6892
  • '85.#3.2.253':6892
  • '85.#3.3.0':6892
  • '85.#3.3.3':6892
  • '85.#3.3.2':6892
  • '85.#3.3.1':6892
  • '85.#3.3.12':6892
  • '85.#3.3.23':6892
  • '85.#3.3.22':6892
  • '85.#3.3.21':6892
  • '85.#3.3.24':6892
  • '85.#3.3.27':6892
  • '85.#3.3.26':6892
  • '85.#3.3.25':6892
  • '85.#3.3.20':6892
  • '85.#3.3.15':6892
  • '85.#3.3.14':6892
  • '85.#3.3.13':6892
  • '85.#3.3.16':6892
  • '85.#3.3.19':6892
  • '85.#3.3.18':6892
  • '85.#3.3.17':6892
  • '85.#3.3.60':6892
  • '85.#3.3.103':6892
  • '85.#3.3.102':6892
  • '85.#3.3.101':6892
  • '85.#3.3.104':6892
  • '85.#3.3.107':6892
  • '85.#3.3.106':6892
  • '85.#3.3.105':6892
  • '85.#3.3.100':6892
  • '85.#3.3.95':6892
  • '85.#3.3.94':6892
  • '85.#3.3.93':6892
  • '85.#3.3.96':6892
  • '85.#3.3.99':6892
  • '85.#3.3.98':6892
  • '85.#3.3.97':6892
  • '85.#3.3.108':6892
  • '85.#3.3.119':6892
  • '85.#3.3.118':6892
  • '85.#3.3.117':6892
  • '85.#3.3.120':6892
  • '85.#3.3.123':6892
  • '85.#3.3.122':6892
  • '85.#3.3.121':6892
  • '85.#3.3.116':6892
  • '85.#3.3.111':6892
  • '85.#3.3.110':6892
  • '85.#3.3.109':6892
  • '85.#3.3.112':6892
  • '85.#3.3.115':6892
  • '85.#3.3.114':6892
  • '85.#3.3.113':6892
  • '85.#3.3.92':6892
  • '85.#3.3.71':6892
  • '85.#3.3.70':6892
  • '85.#3.3.69':6892
  • '85.#3.3.72':6892
  • '85.#3.3.75':6892
  • '85.#3.3.74':6892
  • '85.#3.3.73':6892
  • '85.#3.3.68':6892
  • '85.#3.3.63':6892
  • '85.#3.3.62':6892
  • '85.#3.3.61':6892
  • '85.#3.3.64':6892
  • '85.#3.3.67':6892
  • '85.#3.3.66':6892
  • '85.#3.3.65':6892
  • '85.#3.3.76':6892
  • '85.#3.3.87':6892
  • '85.#3.3.86':6892
  • '85.#3.3.85':6892
  • '85.#3.3.88':6892
  • '85.#3.3.91':6892
  • '85.#3.3.90':6892
  • '85.#3.3.89':6892
  • '85.#3.3.84':6892
  • '85.#3.3.79':6892
  • '85.#3.3.78':6892
  • '85.#3.3.77':6892
  • '85.#3.3.80':6892
  • '85.#3.3.83':6892
  • '85.#3.3.82':6892
  • '85.#3.3.81':6892
  • '85.#3.0.170':6892
  • '85.#3.0.169':6892
  • '85.#3.0.168':6892
  • '85.#3.0.171':6892
  • '85.#3.0.174':6892
  • '85.#3.0.173':6892
  • '85.#3.0.172':6892
  • '85.#3.0.167':6892
  • '85.#3.0.162':6892
  • '85.#3.0.161':6892
  • '85.#3.0.160':6892
  • '85.#3.0.163':6892
  • '85.#3.0.166':6892
  • '85.#3.0.165':6892
  • '85.#3.0.164':6892
  • '85.#3.0.175':6892
  • '85.#3.0.186':6892
  • '85.#3.0.185':6892
  • '85.#3.0.184':6892
  • '85.#3.0.187':6892
  • '85.#3.0.190':6892
  • '85.#3.0.189':6892
  • '85.#3.0.188':6892
  • '85.#3.0.183':6892
  • '85.#3.0.178':6892
  • '85.#3.0.177':6892
  • '85.#3.0.176':6892
  • '85.#3.0.179':6892
  • '85.#3.0.182':6892
  • '85.#3.0.181':6892
  • '85.#3.0.180':6892
  • '85.#3.0.159':6892
  • '85.#3.0.138':6892
  • '85.#3.0.137':6892
  • '85.#3.0.136':6892
  • '85.#3.0.139':6892
  • '85.#3.0.142':6892
  • '85.#3.0.141':6892
  • '85.#3.0.140':6892
  • '85.#3.0.135':6892
  • '85.#3.0.130':6892
  • '85.#3.0.129':6892
  • '85.#3.0.128':6892
  • '85.#3.0.131':6892
  • '85.#3.0.134':6892
  • '85.#3.0.133':6892
  • '85.#3.0.132':6892
  • '85.#3.0.143':6892
  • '85.#3.0.154':6892
  • '85.#3.0.153':6892
  • '85.#3.0.152':6892
  • '85.#3.0.155':6892
  • '85.#3.0.158':6892
  • '85.#3.0.157':6892
  • '85.#3.0.156':6892
  • '85.#3.0.151':6892
  • '85.#3.0.146':6892
  • '85.#3.0.145':6892
  • '85.#3.0.144':6892
  • '85.#3.0.147':6892
  • '85.#3.0.150':6892
  • '85.#3.0.149':6892
  • '85.#3.0.148':6892
  • '85.#3.0.191':6892
  • '85.#3.0.234':6892
  • '85.#3.0.233':6892
  • '85.#3.0.232':6892
  • '85.#3.0.235':6892
  • '85.#3.0.238':6892
  • '85.#3.0.237':6892
  • '85.#3.0.236':6892
  • '85.#3.0.231':6892
  • '85.#3.0.226':6892
  • '85.#3.0.225':6892
  • '85.#3.0.224':6892
  • '85.#3.0.227':6892
  • '85.#3.0.230':6892
  • '85.#3.0.229':6892
  • '85.#3.0.228':6892
  • '85.#3.0.239':6892
  • '85.#3.0.250':6892
  • '85.#3.0.249':6892
  • '85.#3.0.248':6892
  • '85.#3.0.251':6892
  • '85.#3.0.254':6892
  • '85.#3.0.253':6892
  • '85.#3.0.252':6892
  • '85.#3.0.247':6892
  • '85.#3.0.242':6892
  • '85.#3.0.241':6892
  • '85.#3.0.240':6892
  • '85.#3.0.243':6892
  • '85.#3.0.246':6892
  • '85.#3.0.245':6892
  • '85.#3.0.244':6892
  • '85.#3.0.223':6892
  • '85.#3.0.202':6892
  • '85.#3.0.201':6892
  • '85.#3.0.200':6892
  • '85.#3.0.203':6892
  • '85.#3.0.206':6892
  • '85.#3.0.205':6892
  • '85.#3.0.204':6892
  • '85.#3.0.199':6892
  • '85.#3.0.194':6892
  • '85.#3.0.193':6892
  • '85.#3.0.192':6892
  • '85.#3.0.195':6892
  • '85.#3.0.198':6892
  • '85.#3.0.197':6892
  • '85.#3.0.196':6892
  • '85.#3.0.207':6892
  • '85.#3.0.218':6892
  • '85.#3.0.217':6892
  • '85.#3.0.216':6892
  • '85.#3.0.219':6892
  • '85.#3.0.222':6892
  • '85.#3.0.221':6892
  • '85.#3.0.220':6892
  • '85.#3.0.215':6892
  • '85.#3.0.210':6892
  • '85.#3.0.209':6892
  • '85.#3.0.208':6892
  • '85.#3.0.211':6892
  • '85.#3.0.214':6892
  • '85.#3.0.213':6892
  • '85.#3.0.212':6892
  • '85.#3.0.127':6892
  • '85.#3.0.42':6892
  • '85.#3.0.41':6892
  • '85.#3.0.40':6892
  • '85.#3.0.43':6892
  • '85.#3.0.46':6892
  • '85.#3.0.45':6892
  • '85.#3.0.44':6892
  • '85.#3.0.39':6892
  • '85.#3.0.34':6892
  • '85.#3.0.33':6892
  • '85.#3.0.32':6892
  • '85.#3.0.35':6892
  • '85.#3.0.38':6892
  • '85.#3.0.37':6892
  • '85.#3.0.36':6892
  • '85.#3.0.47':6892
  • '85.#3.0.58':6892
  • '85.#3.0.57':6892
  • '85.#3.0.56':6892
  • '85.#3.0.59':6892
  • '85.#3.0.62':6892
  • '85.#3.0.61':6892
  • '85.#3.0.60':6892
  • '85.#3.0.55':6892
  • '85.#3.0.50':6892
  • '85.#3.0.49':6892
  • '85.#3.0.48':6892
  • '85.#3.0.51':6892
  • '85.#3.0.54':6892
  • '85.#3.0.53':6892
  • '85.#3.0.52':6892
  • '85.#3.0.31':6892
  • '85.#3.0.10':6892
  • '85.#3.0.9':6892
  • '85.#3.0.8':6892
  • '85.#3.0.11':6892
  • '85.#3.0.14':6892
  • '85.#3.0.13':6892
  • '85.#3.0.12':6892
  • '85.#3.0.7':6892
  • '85.#3.0.2':6892
  • '85.#3.0.1':6892
  • '85.#3.0.0':6892
  • '85.#3.0.3':6892
  • '85.#3.0.6':6892
  • '85.#3.0.5':6892
  • '85.#3.0.4':6892
  • '85.#3.0.15':6892
  • '85.#3.0.26':6892
  • '85.#3.0.25':6892
  • '85.#3.0.24':6892
  • '85.#3.0.27':6892
  • '85.#3.0.30':6892
  • '85.#3.0.29':6892
  • '85.#3.0.28':6892
  • '85.#3.0.23':6892
  • '85.#3.0.18':6892
  • '85.#3.0.17':6892
  • '85.#3.0.16':6892
  • '85.#3.0.19':6892
  • '85.#3.0.22':6892
  • '85.#3.0.21':6892
  • '85.#3.0.20':6892
  • '85.#3.0.63':6892
  • '85.#3.0.106':6892
  • '85.#3.0.105':6892
  • '85.#3.0.104':6892
  • '85.#3.0.107':6892
  • '85.#3.0.110':6892
  • '85.#3.0.109':6892
  • '85.#3.0.108':6892
  • '85.#3.0.103':6892
  • '85.#3.0.98':6892
  • '85.#3.0.97':6892
  • '85.#3.0.96':6892
  • '85.#3.0.99':6892
  • '85.#3.0.102':6892
  • '85.#3.0.101':6892
  • '85.#3.0.100':6892
  • '85.#3.0.111':6892
  • '85.#3.0.122':6892
  • '85.#3.0.121':6892
  • '85.#3.0.120':6892
  • '85.#3.0.123':6892
  • '85.#3.0.126':6892
  • '85.#3.0.125':6892
  • '85.#3.0.124':6892
  • '85.#3.0.119':6892
  • '85.#3.0.114':6892
  • '85.#3.0.113':6892
  • '85.#3.0.112':6892
  • '85.#3.0.115':6892
  • '85.#3.0.118':6892
  • '85.#3.0.117':6892
  • '85.#3.0.116':6892
  • '85.#3.0.95':6892
  • '85.#3.0.74':6892
  • '85.#3.0.73':6892
  • '85.#3.0.72':6892
  • '85.#3.0.75':6892
  • '85.#3.0.78':6892
  • '85.#3.0.77':6892
  • '85.#3.0.76':6892
  • '85.#3.0.71':6892
  • '85.#3.0.66':6892
  • '85.#3.0.65':6892
  • '85.#3.0.64':6892
  • '85.#3.0.67':6892
  • '85.#3.0.70':6892
  • '85.#3.0.69':6892
  • '85.#3.0.68':6892
  • '85.#3.0.79':6892
  • '85.#3.0.90':6892
  • '85.#3.0.89':6892
  • '85.#3.0.88':6892
  • '85.#3.0.91':6892
  • '85.#3.0.94':6892
  • '85.#3.0.93':6892
  • '85.#3.0.92':6892
  • '85.#3.0.87':6892
  • '85.#3.0.82':6892
  • '85.#3.0.81':6892
  • '85.#3.0.80':6892
  • '85.#3.0.83':6892
  • '85.#3.0.86':6892
  • '85.#3.0.85':6892
  • '85.#3.0.84':6892
  • '85.#3.1.169':6892
  • '85.#3.1.168':6892
  • '85.#3.1.167':6892
  • '85.#3.1.170':6892
  • '85.#3.1.173':6892
  • '85.#3.1.172':6892
  • '85.#3.1.171':6892
  • '85.#3.1.166':6892
  • '85.#3.1.161':6892
  • '85.#3.1.160':6892
  • '85.#3.1.159':6892
  • '85.#3.1.162':6892
  • '85.#3.1.165':6892
  • '85.#3.1.164':6892
  • '85.#3.1.163':6892
  • '85.#3.1.174':6892
  • '85.#3.1.185':6892
  • '85.#3.1.184':6892
  • '85.#3.1.183':6892
  • '85.#3.1.186':6892
  • '85.#3.1.189':6892
  • '85.#3.1.188':6892
  • '85.#3.1.187':6892
  • '85.#3.1.182':6892
  • '85.#3.1.177':6892
  • '85.#3.1.176':6892
  • '85.#3.1.175':6892
  • '85.#3.1.178':6892
  • '85.#3.1.181':6892
  • '85.#3.1.180':6892
  • '85.#3.1.179':6892
  • '85.#3.1.158':6892
  • '85.#3.1.137':6892
  • '85.#3.1.136':6892
  • '85.#3.1.135':6892
  • '85.#3.1.138':6892
  • '85.#3.1.141':6892
  • '85.#3.1.140':6892
  • '85.#3.1.139':6892
  • '85.#3.1.134':6892
  • '85.#3.1.129':6892
  • '85.#3.1.128':6892
  • '85.#3.1.127':6892
  • '85.#3.1.130':6892
  • '85.#3.1.133':6892
  • '85.#3.1.132':6892
  • '85.#3.1.131':6892
  • '85.#3.1.142':6892
  • '85.#3.1.153':6892
  • '85.#3.1.152':6892
  • '85.#3.1.151':6892
  • '85.#3.1.154':6892
  • '85.#3.1.157':6892
  • '85.#3.1.156':6892
  • '85.#3.1.155':6892
  • '85.#3.1.150':6892
  • '85.#3.1.145':6892
  • '85.#3.1.144':6892
  • '85.#3.1.143':6892
  • '85.#3.1.146':6892
  • '85.#3.1.149':6892
  • '85.#3.1.148':6892
  • '85.#3.1.147':6892
  • '85.#3.1.190':6892
  • '85.#3.1.233':6892
  • '85.#3.1.232':6892
  • '85.#3.1.231':6892
  • '85.#3.1.234':6892
  • '85.#3.1.237':6892
  • '85.#3.1.236':6892
  • '85.#3.1.235':6892
  • '85.#3.1.230':6892
  • '85.#3.1.225':6892
  • '85.#3.1.224':6892
  • '85.#3.1.223':6892
  • '85.#3.1.226':6892
  • '85.#3.1.229':6892
  • '85.#3.1.228':6892
  • '85.#3.1.227':6892
  • '85.#3.1.238':6892
  • '85.#3.1.249':6892
  • '85.#3.1.248':6892
  • '85.#3.1.247':6892
  • '85.#3.1.250':6892
  • '85.#3.1.253':6892
  • '85.#3.1.252':6892
  • '85.#3.1.251':6892
  • '85.#3.1.246':6892
  • '85.#3.1.241':6892
  • '85.#3.1.240':6892
  • '85.#3.1.239':6892
  • '85.#3.1.242':6892
  • '85.#3.1.245':6892
  • '85.#3.1.244':6892
  • '85.#3.1.243':6892
  • '85.#3.1.222':6892
  • '85.#3.1.201':6892
  • '85.#3.1.200':6892
  • '85.#3.1.199':6892
  • '85.#3.1.202':6892
  • '85.#3.1.205':6892
  • '85.#3.1.204':6892
  • '85.#3.1.203':6892
  • '85.#3.1.198':6892
  • '85.#3.1.193':6892
  • '85.#3.1.192':6892
  • '85.#3.1.191':6892
  • '85.#3.1.194':6892
  • '85.#3.1.197':6892
  • '85.#3.1.196':6892
  • '85.#3.1.195':6892
  • '85.#3.1.206':6892
  • '85.#3.1.217':6892
  • '85.#3.1.216':6892
  • '85.#3.1.215':6892
  • '85.#3.1.218':6892
  • '85.#3.1.221':6892
  • '85.#3.1.220':6892
  • '85.#3.1.219':6892
  • '85.#3.1.214':6892
  • '85.#3.1.209':6892
  • '85.#3.1.208':6892
  • '85.#3.1.207':6892
  • '85.#3.1.210':6892
  • '85.#3.1.213':6892
  • '85.#3.1.212':6892
  • '85.#3.1.211':6892
  • '85.#3.1.126':6892
  • '85.#3.1.41':6892
  • '85.#3.1.40':6892
  • '85.#3.1.39':6892
  • '85.#3.1.42':6892
  • '85.#3.1.45':6892
  • '85.#3.1.44':6892
  • '85.#3.1.43':6892
  • '85.#3.1.38':6892
  • '85.#3.1.33':6892
  • '85.#3.1.32':6892
  • '85.#3.1.31':6892
  • '85.#3.1.34':6892
  • '85.#3.1.37':6892
  • '85.#3.1.36':6892
  • '85.#3.1.35':6892
  • '85.#3.1.46':6892
  • '85.#3.1.57':6892
  • '85.#3.1.56':6892
  • '85.#3.1.55':6892
  • '85.#3.1.58':6892
  • '85.#3.1.61':6892
  • '85.#3.1.60':6892
  • '85.#3.1.59':6892
  • '85.#3.1.54':6892
  • '85.#3.1.49':6892
  • '85.#3.1.48':6892
  • '85.#3.1.47':6892
  • '85.#3.1.50':6892
  • '85.#3.1.53':6892
  • '85.#3.1.52':6892
  • '85.#3.1.51':6892
  • '85.#3.1.30':6892
  • '85.#3.1.9':6892
  • '85.#3.1.8':6892
  • '85.#3.1.7':6892
  • '85.#3.1.10':6892
  • '85.#3.1.13':6892
  • '85.#3.1.12':6892
  • '85.#3.1.11':6892
  • '85.#3.1.6':6892
  • '85.#3.1.1':6892
  • '85.#3.1.0':6892
  • '85.#3.0.255':6892
  • '85.#3.1.2':6892
  • '85.#3.1.5':6892
  • '85.#3.1.4':6892
  • '85.#3.1.3':6892
  • '85.#3.1.14':6892
  • '85.#3.1.25':6892
  • '85.#3.1.24':6892
  • '85.#3.1.23':6892
  • '85.#3.1.26':6892
  • '85.#3.1.29':6892
  • '85.#3.1.28':6892
  • '85.#3.1.27':6892
  • '85.#3.1.22':6892
  • '85.#3.1.17':6892
  • '85.#3.1.16':6892
  • '85.#3.1.15':6892
  • '85.#3.1.18':6892
  • '85.#3.1.21':6892
  • '85.#3.1.20':6892
  • '85.#3.1.19':6892
  • '85.#3.1.62':6892
  • '85.#3.1.105':6892
  • '85.#3.1.104':6892
  • '85.#3.1.103':6892
  • '85.#3.1.106':6892
  • '85.#3.1.109':6892
  • '85.#3.1.108':6892
  • '85.#3.1.107':6892
  • '85.#3.1.102':6892
  • '85.#3.1.97':6892
  • '85.#3.1.96':6892
  • '85.#3.1.95':6892
  • '85.#3.1.98':6892
  • '85.#3.1.101':6892
  • '85.#3.1.100':6892
  • '85.#3.1.99':6892
  • '85.#3.1.110':6892
  • '85.#3.1.121':6892
  • '85.#3.1.120':6892
  • '85.#3.1.119':6892
  • '85.#3.1.122':6892
  • '85.#3.1.125':6892
  • '85.#3.1.124':6892
  • '85.#3.1.123':6892
  • '85.#3.1.118':6892
  • '85.#3.1.113':6892
  • '85.#3.1.112':6892
  • '85.#3.1.111':6892
  • '85.#3.1.114':6892
  • '85.#3.1.117':6892
  • '85.#3.1.116':6892
  • '85.#3.1.115':6892
  • '85.#3.1.94':6892
  • '85.#3.1.73':6892
  • '85.#3.1.72':6892
  • '85.#3.1.71':6892
  • '85.#3.1.74':6892
  • '85.#3.1.77':6892
  • '85.#3.1.76':6892
  • '85.#3.1.75':6892
  • '85.#3.1.70':6892
  • '85.#3.1.65':6892
  • '85.#3.1.64':6892
  • '85.#3.1.63':6892
  • '85.#3.1.66':6892
  • '85.#3.1.69':6892
  • '85.#3.1.68':6892
  • '85.#3.1.67':6892
  • '85.#3.1.78':6892
  • '85.#3.1.89':6892
  • '85.#3.1.88':6892
  • '85.#3.1.87':6892
  • '85.#3.1.90':6892
  • '85.#3.1.93':6892
  • '85.#3.1.92':6892
  • '85.#3.1.91':6892
  • '85.#3.1.86':6892
  • '85.#3.1.81':6892
  • '85.#3.1.80':6892
  • '85.#3.1.79':6892
  • '85.#3.1.82':6892
  • '85.#3.1.85':6892
  • '85.#3.1.84':6892
  • '85.#3.1.83':6892
Miscellaneous:
Searches for the following windows:
  • ClassName: '' WindowName: ''

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android