La mia libreria
La mia libreria

+ Aggiungi alla libreria

Supporto
Supporto 24/7 | Regole per contattare

Richieste

Profile

Trojan.DownLoader44.46753

Aggiunto al database dei virus Dr.Web: 2022-03-17

La descrizione è stata aggiunta:

Technical Information

Modifies file system
Creates the following files
  • %TEMP%\ava.exe
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-install-default0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-install-press0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-install-process0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-install-disabled0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-install-default1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-install-press1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-install-process1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-install-disabled1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-customize0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\slogan-e1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-fold0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\slogan-t1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-fold1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\unchecked0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\checked1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\unchecked1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\button-exit-default0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\button-exit-press0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\button-exit-hover0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\button-continue-default0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\button-continue-press0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\button-continue-hover0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-customize1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\button-exit-default1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\checked0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\slogan-c1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\slogan-t0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\slogan-c0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\fc_beta_header_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\fc_beta_header_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\bg10.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\bg11.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\bg20.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-minimize-default0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-minimize-press0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-minimize-process0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-minimize-null0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-minimize-default1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\close_btn_grey_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-minimize-press1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-minimize-null1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-close-default0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-close-press0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-close-process0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-close-null0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-close-default1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-close-press1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-close-process1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-close-null1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\loading0.gif
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\loading1.gif
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn-minimize-process1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\slogan-e0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\loading_200.gif
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\close_btn_grey_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\button-exit-press1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\button-continue-hover1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\customize-line-1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\pullup_blue_button_left_normal_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\pullup_blue_button_left_pressed_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\pullup_blue_button_left_disabled_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\pullup_blue_button_left_hover_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\pullup_blue_button_left_normal_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\pullup_blue_button_left_pressed_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\pullup_blue_button_left_disabled_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\pullup_blue_button_left_hover_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\pullup_blue_button_right_normal_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\install-complete-cn-1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\customize-line-0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\pullup_blue_button_right_pressed_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\pullup_blue_button_right_normal_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\pullup_blue_button_right_pressed_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\pullup_blue_button_right_disabled_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\pullup_blue_button_right_hover_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\pullup_bg_box_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\pullup_bg_box_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\pullup_bg_row_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\pullup_bg_row_200.png
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\re1n75kr\sc[1]
  • %TEMP%\adobe_cdmlogs\adobe_gde.log
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\pullup_blue_button_right_disabled_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\pullup_blue_button_right_hover_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\install-complete-cn-0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\install-complete-en-0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\min_btn_press_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar-bg0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar-active0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\banner1-e0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\banner2-e0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\banner3-e0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\banner1-c0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\banner2-c0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\banner3-c0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar-bg1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar-active1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\banner1-e1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\banner2-e1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\banner3-e1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\banner1-c1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\banner2-c1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\banner3-c1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\bg21.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\banner1-t0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\banner2-t0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\banner3-t0.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\banner1-t1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\banner2-t1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\banner3-t1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\button-exit-hover1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\button-continue-press1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\button-continue-default1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\loading.gif
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_btn_big_disable_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_btn_big_press_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\yellow_button_125.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\yellow_button_150.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\yellow_button_mini_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\yellow_button_mini_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\yellow_button_mini_125.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\yellow_button_mini_150.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\yellow_button_short_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\yellow_button_short_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\yellow_button_short_125.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_pole_null_150.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\yellow_button_short_150.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\yellow_button_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\logo_top_left_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_pole_null.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_darkgray_base.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_active.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\xbutton.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_poll_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_poll_125.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_poll_150.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_poll_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_button_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\info_icon_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_pole_null_125.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\btn1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_pole_null_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_pole_null_200.png
  • %TEMP%\flashplayerpp_install_cn.exe
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\bzjx5bke\160[1]
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\warning_icon.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\status_icon_caution_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\status_icon_caution_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\status_icon_caution_125.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\status_icon_caution_150.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\status_icon_x_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\status_icon_x_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\status_icon_x_125.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\status_icon_x_150.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\status_icon_check_200.png
  • %TEMP%\adobe_cdmlogs\adobe_cdm.log
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\status_icon_check_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\status_icon_check_150.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_darkgray_base_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_darkgray_base_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_blue_active_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_blue_active_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_blue_active_125.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_blue_active_150.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\transparent.gif
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\gray_button_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\close_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_button_125.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\status_icon_check_125.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_button_150.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\yellow_button_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_button_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\min_btn_hover_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\min_btn_disable_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\cls_btn_normal_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\cls_btn_hover_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\cls_btn_press_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\cls_btn_disable_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\cls_btn_normal_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\cls_btn_hover_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\cls_btn_press_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\cls_btn_disable_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_btn_normal_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_btn_hover_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_btn_press_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_btn_disable_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_btn_normal_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_btn_hover_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_btn_press_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_btn_disable_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_btn_big_normal_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_btn_big_hover_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_btn_big_press_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_btn_big_disable_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_btn_big_normal_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_btn_big_hover_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\min_btn_normal_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\close_button_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\min_btn_press_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\install-complete-en-1.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\e7821983-66c0-483d-9672-8f1dbf645211\115442f4-9fec-41d2-90b8-31475893ae83.aamdownload
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\min_btn_hover_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\close_button_150.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\close_button_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_active_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_active_125.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_active_150.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_active_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_darkgray_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_darkgray_125.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_darkgray_150.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\progressbar_darkgray_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\logo_top_left_125.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\close_button_125.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\logo_top_left_150.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_button_big_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_button_big_125.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_button_big_150.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_button_big_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\bg.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_button_min_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_button_min_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_button_cls_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\blue_button_cls_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\warning_icon_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\min_btn_normal_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\logo_top_left_200.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\min_btn_disable_100.png
  • %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\0cc07f61-bbfa-4f93-b705-44b3eafabf6d\3c73aebc-e5ea-4f24-bd46-6fc0601e3c96.aamdownload
Moves the following files
  • from %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\e7821983-66c0-483d-9672-8f1dbf645211\115442f4-9fec-41d2-90b8-31475893ae83.aamdownload to %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\e7821983-66c0-483d-9672-8f1dbf645211\115442f4-9fec-41d2-90b8-31475893ae83
  • from %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\0cc07f61-bbfa-4f93-b705-44b3eafabf6d\3c73aebc-e5ea-4f24-bd46-6fc0601e3c96.aamdownload to %LOCALAPPDATA%\adobe\4f84b93e-8714-422b-b966-21d1d49a8628\0cc07f61-bbfa-4f93-b705-44b3eafabf6d\3c73aebc-e5ea-4f24-bd46-6fc0601e3c96
Modifies the following files
Network activity
Connects to
  • 'do###.huorong.cn':80
  • 'qu########.oss-cn-hongkong.aliyuncs.com':443
  • 'fl##h.cn':443
  • 'fusionpings.adobe.com':443
  • 'stats.adobe.com':80
TCP
HTTP GET requests
  • http://do###.huorong.cn/upgrade7/1621674490/upgrade.html
  • http://stats.adobe.com/b/ss/adbacdcprod/1/H.25.4/s45891539125046?AQ##############################################################################################################################...
Other
  • 'qu########.oss-cn-hongkong.aliyuncs.com':443
  • 'fl##h.cn':443
  • 'fusionpings.adobe.com':443
UDP
  • DNS ASK do###.huorong.cn
  • DNS ASK qu########.oss-cn-hongkong.aliyuncs.com
  • DNS ASK fl##h.cn
  • DNS ASK ap#.#lash.cn
  • DNS ASK fusionpings.adobe.com
  • DNS ASK stats.adobe.com
Miscellaneous
Searches for the following windows
  • ClassName: 'EDIT' WindowName: ''
  • ClassName: 'MS_AutodialMonitor' WindowName: ''
  • ClassName: 'MS_WebCheckMonitor' WindowName: ''
Creates and executes the following
  • '%TEMP%\ava.exe'
  • '%TEMP%\flashplayerpp_install_cn.exe'

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android