La mia libreria
La mia libreria

+ Aggiungi alla libreria

Supporto
Supporto 24/7 | Regole per contattare

Richieste

Profile

Trojan.KillProc2.19535

Aggiunto al database dei virus Dr.Web: 2023-02-28

La descrizione è stata aggiunta:

Technical Information

Malicious functions
To complicate detection of its presence in the operating system,
blocks execution of the following system utilities:
  • Windows Task Manager (Taskmgr)
Executes the following
  • '%WINDIR%\syswow64\taskkill.exe' /f /im explorer.exe
  • '%WINDIR%\syswow64\taskkill.exe' /f /im taskmgr.exe
Terminates or attempts to terminate
the following system processes:
  • %WINDIR%\explorer.exe
Modifies file system
Creates the following files
  • %TEMP%\icon.ico
  • %HOMEPATH%\desktop\turki n268xt.txt
  • %HOMEPATH%\desktop\turki n267xt.txt
  • %HOMEPATH%\desktop\turki n266xt.txt
  • %HOMEPATH%\desktop\turki n265xt.txt
  • %HOMEPATH%\desktop\turki n264xt.txt
  • %HOMEPATH%\desktop\turki n263xt.txt
  • %HOMEPATH%\desktop\turki n262xt.txt
  • %HOMEPATH%\desktop\turki n261xt.txt
  • %HOMEPATH%\desktop\turki n260xt.txt
  • %HOMEPATH%\desktop\turki n259xt.txt
  • %HOMEPATH%\desktop\turki n257xt.txt
  • %HOMEPATH%\desktop\turki n270xt.txt
  • %HOMEPATH%\desktop\turki n256xt.txt
  • %HOMEPATH%\desktop\turki n255xt.txt
  • %HOMEPATH%\desktop\turki n254xt.txt
  • %HOMEPATH%\desktop\turki n253xt.txt
  • %HOMEPATH%\desktop\turki n252xt.txt
  • %HOMEPATH%\desktop\turki n251xt.txt
  • %HOMEPATH%\desktop\turki n250xt.txt
  • %HOMEPATH%\desktop\turki n249xt.txt
  • %HOMEPATH%\desktop\turki n248xt.txt
  • %HOMEPATH%\desktop\turki n258xt.txt
  • %HOMEPATH%\desktop\turki n296xt.txt
  • %HOMEPATH%\desktop\turki n271xt.txt
  • %HOMEPATH%\desktop\turki n294xt.txt
  • %HOMEPATH%\desktop\turki n293xt.txt
  • %HOMEPATH%\desktop\turki n292xt.txt
  • %HOMEPATH%\desktop\turki n291xt.txt
  • %HOMEPATH%\desktop\turki n290xt.txt
  • %HOMEPATH%\desktop\turki n289xt.txt
  • %HOMEPATH%\desktop\turki n288xt.txt
  • %HOMEPATH%\desktop\turki n287xt.txt
  • %HOMEPATH%\desktop\turki n286xt.txt
  • %HOMEPATH%\desktop\turki n285xt.txt
  • %HOMEPATH%\desktop\turki n247xt.txt
  • %HOMEPATH%\desktop\turki n269xt.txt
  • %HOMEPATH%\desktop\turki n282xt.txt
  • %HOMEPATH%\desktop\turki n281xt.txt
  • %HOMEPATH%\desktop\turki n280xt.txt
  • %HOMEPATH%\desktop\turki n279xt.txt
  • %HOMEPATH%\desktop\turki n278xt.txt
  • %HOMEPATH%\desktop\turki n277xt.txt
  • %HOMEPATH%\desktop\turki n276xt.txt
  • %HOMEPATH%\desktop\turki n275xt.txt
  • %HOMEPATH%\desktop\turki n274xt.txt
  • %HOMEPATH%\desktop\turki n273xt.txt
  • %HOMEPATH%\desktop\turki n283xt.txt
  • %HOMEPATH%\desktop\turki n272xt.txt
  • %HOMEPATH%\desktop\turki n284xt.txt
  • %HOMEPATH%\desktop\turki n295xt.txt
  • %HOMEPATH%\desktop\turki n244xt.txt
  • %HOMEPATH%\desktop\turki n219xt.txt
  • %HOMEPATH%\desktop\turki n216xt.txt
  • %HOMEPATH%\desktop\turki n215xt.txt
  • %HOMEPATH%\desktop\turki n214xt.txt
  • %HOMEPATH%\desktop\turki n213xt.txt
  • %HOMEPATH%\desktop\turki n212xt.txt
  • %HOMEPATH%\desktop\turki n211xt.txt
  • %HOMEPATH%\desktop\turki n210xt.txt
  • %HOMEPATH%\desktop\turki n209xt.txt
  • %HOMEPATH%\desktop\turki n208xt.txt
  • %HOMEPATH%\desktop\turki n207xt.txt
  • %HOMEPATH%\desktop\turki n206xt.txt
  • %HOMEPATH%\desktop\turki n205xt.txt
  • %HOMEPATH%\desktop\turki n204xt.txt
  • %HOMEPATH%\desktop\turki n203xt.txt
  • %HOMEPATH%\desktop\turki n202xt.txt
  • %HOMEPATH%\desktop\turki n201xt.txt
  • %HOMEPATH%\desktop\turki n200xt.txt
  • %HOMEPATH%\desktop\turki n199xt.txt
  • %HOMEPATH%\desktop\turki n198xt.txt
  • %HOMEPATH%\desktop\turki n197xt.txt
  • %HOMEPATH%\desktop\turki n220xt.txt
  • %HOMEPATH%\desktop\turki n221xt.txt
  • %HOMEPATH%\desktop\turki n243xt.txt
  • %HOMEPATH%\desktop\turki n232xt.txt
  • %HOMEPATH%\desktop\turki n233xt.txt
  • %HOMEPATH%\desktop\turki n242xt.txt
  • %HOMEPATH%\desktop\turki n241xt.txt
  • %HOMEPATH%\desktop\turki n240xt.txt
  • %HOMEPATH%\desktop\turki n239xt.txt
  • %HOMEPATH%\desktop\turki n238xt.txt
  • %HOMEPATH%\desktop\turki n237xt.txt
  • %HOMEPATH%\desktop\turki n236xt.txt
  • %HOMEPATH%\desktop\turki n235xt.txt
  • %HOMEPATH%\desktop\turki n234xt.txt
  • %HOMEPATH%\desktop\turki n246xt.txt
  • %HOMEPATH%\desktop\turki n245xt.txt
  • %HOMEPATH%\desktop\turki n217xt.txt
  • %HOMEPATH%\desktop\turki n230xt.txt
  • %HOMEPATH%\desktop\turki n229xt.txt
  • %HOMEPATH%\desktop\turki n228xt.txt
  • %HOMEPATH%\desktop\turki n227xt.txt
  • %HOMEPATH%\desktop\turki n226xt.txt
  • %HOMEPATH%\desktop\turki n225xt.txt
  • %HOMEPATH%\desktop\turki n224xt.txt
  • %HOMEPATH%\desktop\turki n223xt.txt
  • %HOMEPATH%\desktop\turki n222xt.txt
  • %HOMEPATH%\desktop\turki n231xt.txt
  • %HOMEPATH%\desktop\turki n130xt.txt
  • %HOMEPATH%\desktop\turki n297xt.txt
  • %HOMEPATH%\desktop\turki n371xt.txt
  • %HOMEPATH%\desktop\turki n370xt.txt
  • %HOMEPATH%\desktop\turki n369xt.txt
  • %HOMEPATH%\desktop\turki n368xt.txt
  • %HOMEPATH%\desktop\turki n367xt.txt
  • %HOMEPATH%\desktop\turki n366xt.txt
  • %HOMEPATH%\desktop\turki n365xt.txt
  • %HOMEPATH%\desktop\turki n364xt.txt
  • %HOMEPATH%\desktop\turki n363xt.txt
  • %HOMEPATH%\desktop\turki n362xt.txt
  • %HOMEPATH%\desktop\turki n361xt.txt
  • %HOMEPATH%\desktop\turki n359xt.txt
  • %HOMEPATH%\desktop\turki n374xt.txt
  • %HOMEPATH%\desktop\turki n358xt.txt
  • %HOMEPATH%\desktop\turki n357xt.txt
  • %HOMEPATH%\desktop\turki n356xt.txt
  • %HOMEPATH%\desktop\turki n355xt.txt
  • %HOMEPATH%\desktop\turki n354xt.txt
  • %HOMEPATH%\desktop\turki n353xt.txt
  • %HOMEPATH%\desktop\turki n352xt.txt
  • %HOMEPATH%\desktop\turki n351xt.txt
  • %HOMEPATH%\desktop\turki n372xt.txt
  • %HOMEPATH%\desktop\turki n360xt.txt
  • %HOMEPATH%\desktop\turki n298xt.txt
  • %HOMEPATH%\desktop\turki n375xt.txt
  • %HOMEPATH%\desktop\turki n396xt.txt
  • %HOMEPATH%\desktop\turki n395xt.txt
  • %HOMEPATH%\desktop\turki n394xt.txt
  • %HOMEPATH%\desktop\turki n393xt.txt
  • %HOMEPATH%\desktop\turki n392xt.txt
  • %HOMEPATH%\desktop\turki n391xt.txt
  • %HOMEPATH%\desktop\turki n390xt.txt
  • %HOMEPATH%\desktop\turki n389xt.txt
  • %HOMEPATH%\desktop\turki n388xt.txt
  • %HOMEPATH%\desktop\turki n350xt.txt
  • %HOMEPATH%\desktop\turki n387xt.txt
  • %HOMEPATH%\desktop\turki n373xt.txt
  • %HOMEPATH%\desktop\turki n384xt.txt
  • %HOMEPATH%\desktop\turki n383xt.txt
  • %HOMEPATH%\desktop\turki n382xt.txt
  • %HOMEPATH%\desktop\turki n381xt.txt
  • %HOMEPATH%\desktop\turki n380xt.txt
  • %HOMEPATH%\desktop\turki n379xt.txt
  • %HOMEPATH%\desktop\turki n378xt.txt
  • %HOMEPATH%\desktop\turki n377xt.txt
  • %HOMEPATH%\desktop\turki n376xt.txt
  • %HOMEPATH%\desktop\turki n386xt.txt
  • %HOMEPATH%\desktop\turki n349xt.txt
  • %HOMEPATH%\desktop\turki n397xt.txt
  • %HOMEPATH%\desktop\turki n348xt.txt
  • %HOMEPATH%\desktop\turki n347xt.txt
  • %HOMEPATH%\desktop\turki n320xt.txt
  • %HOMEPATH%\desktop\turki n196xt.txt
  • %HOMEPATH%\desktop\turki n318xt.txt
  • %HOMEPATH%\desktop\turki n317xt.txt
  • %HOMEPATH%\desktop\turki n316xt.txt
  • %HOMEPATH%\desktop\turki n315xt.txt
  • %HOMEPATH%\desktop\turki n314xt.txt
  • %HOMEPATH%\desktop\turki n313xt.txt
  • %HOMEPATH%\desktop\turki n312xt.txt
  • %HOMEPATH%\desktop\turki n311xt.txt
  • %HOMEPATH%\desktop\turki n321xt.txt
  • %HOMEPATH%\desktop\turki n322xt.txt
  • %HOMEPATH%\desktop\turki n310xt.txt
  • %HOMEPATH%\desktop\turki n307xt.txt
  • %HOMEPATH%\desktop\turki n306xt.txt
  • %HOMEPATH%\desktop\turki n305xt.txt
  • %HOMEPATH%\desktop\turki n304xt.txt
  • %HOMEPATH%\desktop\turki n303xt.txt
  • %HOMEPATH%\desktop\turki n302xt.txt
  • %HOMEPATH%\desktop\turki n301xt.txt
  • %HOMEPATH%\desktop\turki n300xt.txt
  • %HOMEPATH%\desktop\turki n299xt.txt
  • %HOMEPATH%\desktop\turki n309xt.txt
  • %HOMEPATH%\desktop\turki n308xt.txt
  • %HOMEPATH%\desktop\turki n218xt.txt
  • %HOMEPATH%\desktop\turki n324xt.txt
  • %HOMEPATH%\desktop\turki n335xt.txt
  • %HOMEPATH%\desktop\turki n336xt.txt
  • %HOMEPATH%\desktop\turki n345xt.txt
  • %HOMEPATH%\desktop\turki n344xt.txt
  • %HOMEPATH%\desktop\turki n343xt.txt
  • %HOMEPATH%\desktop\turki n342xt.txt
  • %HOMEPATH%\desktop\turki n341xt.txt
  • %HOMEPATH%\desktop\turki n340xt.txt
  • %HOMEPATH%\desktop\turki n339xt.txt
  • %HOMEPATH%\desktop\turki n338xt.txt
  • %HOMEPATH%\desktop\turki n337xt.txt
  • %HOMEPATH%\desktop\turki n346xt.txt
  • %HOMEPATH%\desktop\turki n323xt.txt
  • %HOMEPATH%\desktop\turki n319xt.txt
  • %HOMEPATH%\desktop\turki n333xt.txt
  • %HOMEPATH%\desktop\turki n332xt.txt
  • %HOMEPATH%\desktop\turki n331xt.txt
  • %HOMEPATH%\desktop\turki n330xt.txt
  • %HOMEPATH%\desktop\turki n329xt.txt
  • %HOMEPATH%\desktop\turki n328xt.txt
  • %HOMEPATH%\desktop\turki n327xt.txt
  • %HOMEPATH%\desktop\turki n326xt.txt
  • %HOMEPATH%\desktop\turki n325xt.txt
  • %HOMEPATH%\desktop\turki n334xt.txt
  • %HOMEPATH%\desktop\turki n195xt.txt
  • %HOMEPATH%\desktop\turki n194xt.txt
  • %HOMEPATH%\desktop\turki n193xt.txt
  • %HOMEPATH%\desktop\turki n65xt.txt
  • %HOMEPATH%\desktop\turki n62xt.txt
  • %HOMEPATH%\desktop\turki n61xt.txt
  • %HOMEPATH%\desktop\turki n60xt.txt
  • %HOMEPATH%\desktop\turki n59xt.txt
  • %HOMEPATH%\desktop\turki n58xt.txt
  • %HOMEPATH%\desktop\turki n57xt.txt
  • %HOMEPATH%\desktop\turki n56xt.txt
  • %HOMEPATH%\desktop\turki n55xt.txt
  • %HOMEPATH%\desktop\turki n54xt.txt
  • %HOMEPATH%\desktop\turki n53xt.txt
  • %HOMEPATH%\desktop\turki n52xt.txt
  • %HOMEPATH%\desktop\turki n51xt.txt
  • %HOMEPATH%\desktop\turki n50xt.txt
  • %HOMEPATH%\desktop\turki n49xt.txt
  • %HOMEPATH%\desktop\turki n48xt.txt
  • %HOMEPATH%\desktop\turki n47xt.txt
  • %HOMEPATH%\desktop\turki n46xt.txt
  • %HOMEPATH%\desktop\turki n45xt.txt
  • %HOMEPATH%\desktop\turki n44xt.txt
  • %HOMEPATH%\desktop\turki n43xt.txt
  • %HOMEPATH%\desktop\turki n66xt.txt
  • %HOMEPATH%\desktop\turki n67xt.txt
  • %HOMEPATH%\desktop\turki n89xt.txt
  • %HOMEPATH%\desktop\turki n78xt.txt
  • %HOMEPATH%\desktop\turki n79xt.txt
  • %HOMEPATH%\desktop\turki n88xt.txt
  • %HOMEPATH%\desktop\turki n87xt.txt
  • %HOMEPATH%\desktop\turki n86xt.txt
  • %HOMEPATH%\desktop\turki n85xt.txt
  • %HOMEPATH%\desktop\turki n84xt.txt
  • %HOMEPATH%\desktop\turki n83xt.txt
  • %HOMEPATH%\desktop\turki n82xt.txt
  • %HOMEPATH%\desktop\turki n81xt.txt
  • %HOMEPATH%\desktop\turki n80xt.txt
  • %HOMEPATH%\desktop\turki n64xt.txt
  • %HOMEPATH%\desktop\turki n42xt.txt
  • %HOMEPATH%\desktop\turki n40xt.txt
  • %HOMEPATH%\desktop\turki n76xt.txt
  • %HOMEPATH%\desktop\turki n75xt.txt
  • %HOMEPATH%\desktop\turki n74xt.txt
  • %HOMEPATH%\desktop\turki n73xt.txt
  • %HOMEPATH%\desktop\turki n72xt.txt
  • %HOMEPATH%\desktop\turki n71xt.txt
  • %HOMEPATH%\desktop\turki n70xt.txt
  • %HOMEPATH%\desktop\turki n69xt.txt
  • %HOMEPATH%\desktop\turki n68xt.txt
  • %HOMEPATH%\desktop\turki n77xt.txt
  • %HOMEPATH%\desktop\turki n41xt.txt
  • %HOMEPATH%\desktop\turki n39xt.txt
  • %HOMEPATH%\desktop\openmeopenmeopenmeopenmeopenmeopenmeopenmeopenmeopenmeopenmeopenmeopenmeopenme.rtf
  • %HOMEPATH%\desktop\turki n2xt.txt
  • %HOMEPATH%\desktop\turki n12xt.txt
  • %HOMEPATH%\desktop\turki n11xt.txt
  • %HOMEPATH%\desktop\turki n10xt.txt
  • %HOMEPATH%\desktop\turki n9xt.txt
  • %HOMEPATH%\desktop\turki n8xt.txt
  • %HOMEPATH%\desktop\turki n7xt.txt
  • %HOMEPATH%\desktop\turki n6xt.txt
  • %HOMEPATH%\desktop\turki n5xt.txt
  • %HOMEPATH%\desktop\turki n4xt.txt
  • %HOMEPATH%\desktop\turki n90xt.txt
  • %HOMEPATH%\desktop\turki n14xt.txt
  • %HOMEPATH%\desktop\turki n1xt.txt
  • %HOMEPATH%\desktop\turki n0xt.txt
  • %HOMEPATH%\virusremover.zip
  • %HOMEPATH%\desktop\virusremover.zip
  • %TEMP%\v.mp4
  • %TEMP%\virusremover.zip
  • %TEMP%\7lewi.exe
  • %TEMP%\one.rtf
  • %TEMP%\windl.bat
  • %TEMP%\text.txt
  • %HOMEPATH%\desktop\turki n3xt.txt
  • %HOMEPATH%\desktop\turki n398xt.txt
  • %HOMEPATH%\desktop\turki n15xt.txt
  • %HOMEPATH%\desktop\turki n18xt.txt
  • %HOMEPATH%\desktop\turki n16xt.txt
  • %HOMEPATH%\desktop\turki n38xt.txt
  • %HOMEPATH%\desktop\turki n37xt.txt
  • %HOMEPATH%\desktop\turki n36xt.txt
  • %HOMEPATH%\desktop\turki n35xt.txt
  • %HOMEPATH%\desktop\turki n34xt.txt
  • %HOMEPATH%\desktop\turki n33xt.txt
  • %HOMEPATH%\desktop\turki n32xt.txt
  • %HOMEPATH%\desktop\turki n31xt.txt
  • %HOMEPATH%\desktop\turki n30xt.txt
  • %HOMEPATH%\desktop\turki n17xt.txt
  • %HOMEPATH%\desktop\turki n29xt.txt
  • %HOMEPATH%\desktop\turki n13xt.txt
  • %HOMEPATH%\desktop\turki n27xt.txt
  • %HOMEPATH%\desktop\turki n26xt.txt
  • %HOMEPATH%\desktop\turki n25xt.txt
  • %HOMEPATH%\desktop\turki n24xt.txt
  • %HOMEPATH%\desktop\turki n23xt.txt
  • %HOMEPATH%\desktop\turki n22xt.txt
  • %HOMEPATH%\desktop\turki n21xt.txt
  • %HOMEPATH%\desktop\turki n20xt.txt
  • %HOMEPATH%\desktop\turki n19xt.txt
  • %HOMEPATH%\desktop\turki n28xt.txt
  • %HOMEPATH%\desktop\turki n385xt.txt
  • %HOMEPATH%\desktop\turki n91xt.txt
  • %HOMEPATH%\desktop\turki n94xt.txt
  • %HOMEPATH%\desktop\turki n156xt.txt
  • %HOMEPATH%\desktop\turki n166xt.txt
  • %HOMEPATH%\desktop\turki n165xt.txt
  • %HOMEPATH%\desktop\turki n164xt.txt
  • %HOMEPATH%\desktop\turki n163xt.txt
  • %HOMEPATH%\desktop\turki n162xt.txt
  • %HOMEPATH%\desktop\turki n161xt.txt
  • %HOMEPATH%\desktop\turki n160xt.txt
  • %HOMEPATH%\desktop\turki n159xt.txt
  • %HOMEPATH%\desktop\turki n158xt.txt
  • %HOMEPATH%\desktop\turki n157xt.txt
  • %HOMEPATH%\desktop\turki n155xt.txt
  • %HOMEPATH%\desktop\turki n168xt.txt
  • %HOMEPATH%\desktop\turki n154xt.txt
  • %HOMEPATH%\desktop\turki n153xt.txt
  • %HOMEPATH%\desktop\turki n152xt.txt
  • %HOMEPATH%\desktop\turki n151xt.txt
  • %HOMEPATH%\desktop\turki n150xt.txt
  • %HOMEPATH%\desktop\turki n149xt.txt
  • %HOMEPATH%\desktop\turki n148xt.txt
  • %HOMEPATH%\desktop\turki n147xt.txt
  • %HOMEPATH%\desktop\turki n63xt.txt
  • %HOMEPATH%\desktop\turki n169xt.txt
  • %HOMEPATH%\desktop\turki n192xt.txt
  • %HOMEPATH%\desktop\turki n181xt.txt
  • %HOMEPATH%\desktop\turki n182xt.txt
  • %HOMEPATH%\desktop\turki n191xt.txt
  • %HOMEPATH%\desktop\turki n190xt.txt
  • %HOMEPATH%\desktop\turki n189xt.txt
  • %HOMEPATH%\desktop\turki n188xt.txt
  • %HOMEPATH%\desktop\turki n187xt.txt
  • %HOMEPATH%\desktop\turki n186xt.txt
  • %HOMEPATH%\desktop\turki n185xt.txt
  • %HOMEPATH%\desktop\turki n184xt.txt
  • %HOMEPATH%\desktop\turki n183xt.txt
  • %HOMEPATH%\desktop\turki n146xt.txt
  • %HOMEPATH%\desktop\turki n145xt.txt
  • %HOMEPATH%\desktop\turki n170xt.txt
  • %HOMEPATH%\desktop\turki n179xt.txt
  • %HOMEPATH%\desktop\turki n178xt.txt
  • %HOMEPATH%\desktop\turki n177xt.txt
  • %HOMEPATH%\desktop\turki n176xt.txt
  • %HOMEPATH%\desktop\turki n175xt.txt
  • %HOMEPATH%\desktop\turki n174xt.txt
  • %HOMEPATH%\desktop\turki n173xt.txt
  • %HOMEPATH%\desktop\turki n172xt.txt
  • %HOMEPATH%\desktop\turki n171xt.txt
  • %HOMEPATH%\desktop\turki n180xt.txt
  • %HOMEPATH%\desktop\turki n167xt.txt
  • %HOMEPATH%\desktop\turki n144xt.txt
  • %HOMEPATH%\desktop\turki n143xt.txt
  • %HOMEPATH%\desktop\turki n92xt.txt
  • %HOMEPATH%\desktop\turki n104xt.txt
  • %HOMEPATH%\desktop\turki n114xt.txt
  • %HOMEPATH%\desktop\turki n113xt.txt
  • %HOMEPATH%\desktop\turki n112xt.txt
  • %HOMEPATH%\desktop\turki n111xt.txt
  • %HOMEPATH%\desktop\turki n110xt.txt
  • %HOMEPATH%\desktop\turki n109xt.txt
  • %HOMEPATH%\desktop\turki n108xt.txt
  • %HOMEPATH%\desktop\turki n107xt.txt
  • %HOMEPATH%\desktop\turki n117xt.txt
  • %HOMEPATH%\desktop\turki n106xt.txt
  • %HOMEPATH%\desktop\turki n105xt.txt
  • %HOMEPATH%\desktop\turki n103xt.txt
  • %HOMEPATH%\desktop\turki n102xt.txt
  • %HOMEPATH%\desktop\turki n101xt.txt
  • %HOMEPATH%\desktop\turki n100xt.txt
  • %HOMEPATH%\desktop\turki n99xt.txt
  • %HOMEPATH%\desktop\turki n98xt.txt
  • %HOMEPATH%\desktop\turki n97xt.txt
  • %HOMEPATH%\desktop\turki n96xt.txt
  • %HOMEPATH%\desktop\turki n95xt.txt
  • %HOMEPATH%\desktop\turki n116xt.txt
  • %HOMEPATH%\desktop\turki n93xt.txt
  • %HOMEPATH%\desktop\turki n119xt.txt
  • %HOMEPATH%\desktop\turki n121xt.txt
  • %HOMEPATH%\desktop\turki n142xt.txt
  • %HOMEPATH%\desktop\turki n118xt.txt
  • %HOMEPATH%\desktop\turki n141xt.txt
  • %HOMEPATH%\desktop\turki n140xt.txt
  • %HOMEPATH%\desktop\turki n139xt.txt
  • %HOMEPATH%\desktop\turki n138xt.txt
  • %HOMEPATH%\desktop\turki n137xt.txt
  • %HOMEPATH%\desktop\turki n136xt.txt
  • %HOMEPATH%\desktop\turki n135xt.txt
  • %HOMEPATH%\desktop\turki n134xt.txt
  • %HOMEPATH%\desktop\turki n120xt.txt
  • %HOMEPATH%\desktop\turki n133xt.txt
  • %HOMEPATH%\desktop\turki n131xt.txt
  • %HOMEPATH%\desktop\turki n115xt.txt
  • %HOMEPATH%\desktop\turki n129xt.txt
  • %HOMEPATH%\desktop\turki n128xt.txt
  • %HOMEPATH%\desktop\turki n127xt.txt
  • %HOMEPATH%\desktop\turki n126xt.txt
  • %HOMEPATH%\desktop\turki n125xt.txt
  • %HOMEPATH%\desktop\turki n124xt.txt
  • %HOMEPATH%\desktop\turki n123xt.txt
  • %HOMEPATH%\desktop\turki n122xt.txt
  • %HOMEPATH%\desktop\turki n132xt.txt
  • %HOMEPATH%\desktop\turki n399xt.txt
Miscellaneous
Searches for the following windows
  • ClassName: '' WindowName: ''
  • ClassName: 'WMPlayerApp' WindowName: ''
Executes the following
  • '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\windl.bat""
  • '%WINDIR%\syswow64\wbem\wmic.exe' useraccount where name='user' set FullName='7lewi'
  • '%WINDIR%\syswow64\wbem\wmic.exe' useraccount where name='user' rename '7lewi'
  • '%WINDIR%\syswow64\shutdown.exe' /f /r /t 0
Attempts to shut down the Windows operating system.

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android