La mia libreria
La mia libreria

+ Aggiungi alla libreria

Supporto
Supporto 24/7 | Regole per contattare

Richieste

Profile

Trojan.MulDrop3.38653

Aggiunto al database dei virus Dr.Web: 2012-03-03

La descrizione è stata aggiunta:

Technical Information

Malicious functions:
Creates and executes the following:
  • %PROGRAM_FILES%\CoralExplorer\Coral.exe --update=install
Hides the following processes:
  • <Full path to virus>
Modifies file system :
Creates the following files:
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_google.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_gpaipai.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_gjingdong.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_gjyjo.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_igoogle.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_isoso.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_gtaobao.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_ibaidu.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_gdangdang.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\youku_big.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\youku_small.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\taobao_big.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\taobao_small.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_dbaidu.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_dgoogle.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_baidu.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_bing.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_mbaidu.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_wsoso.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_wwiki.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_vyouku.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_wbaidu.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_xverycd.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_xxunlei.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_xduote.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_xshooter.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_vtudou.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_none.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_sogou.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_mgoogle.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_msoso.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_vgoogle.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_vsoso.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_soso.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_vbaidu.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\sohu_small.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_list_tit_hover2.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_preview_but.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_list_tit2.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_list_tit_hover.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\switch_bj.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\switch_combar_icon1.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_preview_but2.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\quan.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_list_tit.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_list_icon.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_list_icon1.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_list_button2.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_list_button3.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_list_icon4.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_list_icon4_2.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_list_icon2.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_list_icon3.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\switch_widbar_icon2.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\kaixin_small.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\qq_big.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\google_small.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\kaixin_big.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\sina_small.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\sohu_big.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\qq_small.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\sina_big.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\google_big.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\2345_big.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\2345_small.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\163_big.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\163_small.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\fenghuang_big.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\fenghuang_small.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\baidu_big.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\home\baidu_small.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_yahoo.png
  • %PROGRAM_FILES%\CoralExplorer\Config\FavIcon\85131C29C8F7B398A345BD7F1A51DAB1.ico
  • %PROGRAM_FILES%\CoralExplorer\Config\FavIcon\8FDEAD446A8D607C20207D38D669E349.ico
  • %PROGRAM_FILES%\CoralExplorer\Config\FavIcon\6E086A7049DD129DF69051413AC6AB3A.ico
  • %PROGRAM_FILES%\CoralExplorer\Config\FavIcon\81C6AF03AC3E2B181DD99A3C1AFD1AA3.ico
  • %PROGRAM_FILES%\CoralExplorer\Config\FavIcon\default_page.ico
  • %PROGRAM_FILES%\CoralExplorer\Config\FavIcon\home.ico
  • %PROGRAM_FILES%\CoralExplorer\Config\FavIcon\A4C4A052651124668E8F829A3AA6D63C.ico
  • %PROGRAM_FILES%\CoralExplorer\Config\FavIcon\F2A7BED2A1035F9E4EC022B3ECA481A8.ico
  • %PROGRAM_FILES%\CoralExplorer\Config\FavIcon\3D6A8AC8F2013B0D7A1EA53076E96320.ico
  • %PROGRAM_FILES%\CoralExplorer\StartPage\js\coral_se.js
  • %PROGRAM_FILES%\CoralExplorer\StartPage\js\iepng.js
  • %PROGRAM_FILES%\CoralExplorer\StartPage\js\coral_lib_min.js
  • %PROGRAM_FILES%\CoralExplorer\StartPage\js\coral_myfav.js
  • %PROGRAM_FILES%\CoralExplorer\StartPage\js\unitpngfix.js
  • %PROGRAM_FILES%\CoralExplorer\Config\FavIcon\1860F34853BBC50F66BF81B679989830.ico
  • %PROGRAM_FILES%\CoralExplorer\StartPage\js\jquery.loadmask.js
  • %PROGRAM_FILES%\CoralExplorer\StartPage\js\move.js
  • %PROGRAM_FILES%\CoralExplorer\Config\Users\Default\SystemUrl.data
  • %PROGRAM_FILES%\CoralExplorer\Uninstall.exe
  • %TEMP%\nst3.tmp\FileInfo.dll
  • %APPDATA%\CoralExplorer\FavIcon\home.ico
  • %APPDATA%\CoralExplorer\Users\Default\SystemUrl.data
  • %APPDATA%\CoralExplorer\Users\Default\CrashUrl.data-journal
  • %APPDATA%\CoralExplorer\Users\Default\CrashUrl.data
  • %APPDATA%\CoralExplorer\Users\Default\AliasUrl.data-journal
  • %APPDATA%\CoralExplorer\Users\Default\AliasUrl.data
  • %APPDATA%\CoralExplorer\FavIcon\default_page.ico
  • %APPDATA%\CoralExplorer\FavIcon\6E086A7049DD129DF69051413AC6AB3A.ico
  • %APPDATA%\CoralExplorer\FavIcon\81C6AF03AC3E2B181DD99A3C1AFD1AA3.ico
  • %APPDATA%\CoralExplorer\FavIcon\1860F34853BBC50F66BF81B679989830.ico
  • %APPDATA%\CoralExplorer\FavIcon\3D6A8AC8F2013B0D7A1EA53076E96320.ico
  • %APPDATA%\CoralExplorer\FavIcon\A4C4A052651124668E8F829A3AA6D63C.ico
  • %APPDATA%\CoralExplorer\FavIcon\F2A7BED2A1035F9E4EC022B3ECA481A8.ico
  • %APPDATA%\CoralExplorer\FavIcon\85131C29C8F7B398A345BD7F1A51DAB1.ico
  • %APPDATA%\CoralExplorer\FavIcon\8FDEAD446A8D607C20207D38D669E349.ico
  • %PROGRAM_FILES%\CoralExplorer\StartPage\js\coral_commom.js
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_ibaidu.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_igoogle.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_gpaipai.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_gtaobao.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_mgoogle.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_msoso.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_isoso.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_mbaidu.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_google.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_bing.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_dbaidu.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_icon_youdao.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_baidu.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_gjingdong.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_gjyjo.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_dgoogle.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_gdangdang.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_none.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_xshooter.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_xverycd.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_wwiki.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_xduote.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_youdao.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\js\clear.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_xxunlei.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_yahoo.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_wsoso.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_vbaidu.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_vgoogle.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_sogou.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_soso.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_vyouku.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_wbaidu.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_vsoso.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\search\main_search_logo_vtudou.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_box_line.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_box_ls.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_box_ks.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_box_ks.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_box_ss.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_box_title1.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_box_ls.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_box_ss.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_box_bottom.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\gradient_bg.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\gradient_bottom.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\close_tab.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\close_tab2.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_box_bg.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_box_bg.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\gradient_top.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_bg.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_box_title2.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_btn6.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_btn7.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_btn5.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_btn6.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_img1.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_img2.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_btn7.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_ie.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_btn4.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_box_title5.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_box_wd.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_box_title3.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_box_title4.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_btn2.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_btn3.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_box_wd.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_btn1.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\blank.gif
  • %PROGRAM_FILES%\CoralExplorer\lang\CoralLang_chs.dll
  • %PROGRAM_FILES%\CoralExplorer\2345浏览器免责声明.txt
  • %PROGRAM_FILES%\CoralExplorer\CoralUpdate.dll
  • %PROGRAM_FILES%\CoralExplorer\CoralRender.dll
  • %PROGRAM_FILES%\CoralExplorer\CoralUI2.dll
  • %PROGRAM_FILES%\CoralExplorer\Skins\Coral.dui
  • %PROGRAM_FILES%\CoralExplorer\Microsoft.VC80.CRT.manifest
  • %PROGRAM_FILES%\CoralExplorer\msvcr80.dll
  • %PROGRAM_FILES%\CoralExplorer\CoralUI.dll
  • %PROGRAM_FILES%\CoralExplorer\Coral.exe
  • %PROGRAM_FILES%\CoralExplorer\CoralApp.dll
  • %TEMP%\nst2.tmp
  • %TEMP%\nst3.tmp\System.dll
  • %PROGRAM_FILES%\CoralExplorer\CoralDownload.dll
  • %PROGRAM_FILES%\CoralExplorer\CoralTrident.dll
  • %PROGRAM_FILES%\CoralExplorer\Coral.dll
  • %PROGRAM_FILES%\CoralExplorer\CoralDb.dll
  • %PROGRAM_FILES%\CoralExplorer\Skins\Coral.skn
  • %PROGRAM_FILES%\CoralExplorer\StartPage\css\css.css
  • %PROGRAM_FILES%\CoralExplorer\StartPage\css\home.css
  • %PROGRAM_FILES%\CoralExplorer\StartPage\pop_edit.html
  • %PROGRAM_FILES%\CoralExplorer\StartPage\search.htm
  • %PROGRAM_FILES%\CoralExplorer\StartPage\fancybox\jquery.fancybox-1.3.4.js
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\all_search_icon_baidu.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\css\jquery.loadmask.css
  • %PROGRAM_FILES%\CoralExplorer\StartPage\fancybox\jquery.fancybox-1.3.4.css
  • %PROGRAM_FILES%\CoralExplorer\StartPage\index.htm
  • %PROGRAM_FILES%\CoralExplorer\StartPage\guide.htm
  • %PROGRAM_FILES%\CoralExplorer\StartPage\guide1.htm
  • %PROGRAM_FILES%\CoralExplorer\Skins\CoralIE.skn
  • %PROGRAM_FILES%\CoralExplorer\Skins\Coral.xml
  • %PROGRAM_FILES%\CoralExplorer\StartPage\guide4.htm
  • %PROGRAM_FILES%\CoralExplorer\StartPage\guide5.htm
  • %PROGRAM_FILES%\CoralExplorer\StartPage\guide2.htm
  • %PROGRAM_FILES%\CoralExplorer\StartPage\guide3.htm
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_img3.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_button_bg1.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_button_bg2.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_bigicon_yahoo.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_bigicon_youdao.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_smallicon_bing.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_smallicon_google.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_button_bg3.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_smallicon_baidu.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_bigicon_soso.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_bg1.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_bg2.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_grid_item_hover1b.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_grid_item_loading.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_bigicon_google.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_bigicon_sogou.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_bigicon_baidu.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_bigicon_bing.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_smallicon_sogou.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_edit_background.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_edit_background2.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_close.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_close2.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_edit_bg2.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_list_button.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_edit_bg.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_edit_bg1.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_background.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_smallicon_youdao.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_xl_arrow.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_smallicon_soso.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_smallicon_yahoo.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\page_white.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\popup_dialog_background.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_xl_background1.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_search_xl_background2.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_grid_item_hover1.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_nav5.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_nav5a.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_nav4.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_nav4a.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\loading.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_bottombar_report.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\hot.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\list_bg.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_nav3a.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_logo.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_nav1.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_img4.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_logo.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_nav2a.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_nav3.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_nav1a.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\guide_nav2.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_bottombar_report2.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_grid_item1.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_grid_item1b.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_grid_bar_remove_hover.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_grid_item1-03.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_grid_item_add_bak.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_grid_item_add_hover.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_grid_item_add.jpg
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_grid_item_add.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_grid_bar_remove2.png
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_grid_bar_bj.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_grid_bar_blank.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_bottombar_report3.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_content_error.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_grid_bar_edit_hover.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_grid_bar_remove.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_grid_bar_blank_hover.gif
  • %PROGRAM_FILES%\CoralExplorer\StartPage\images\main_grid_bar_edit.gif
Deletes the following files:
  • %APPDATA%\CoralExplorer\Users\Default\AliasUrl.data-journal
  • %TEMP%\nst3.tmp\System.dll
  • %TEMP%\nst3.tmp\FileInfo.dll

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android