La mia libreria
La mia libreria

+ Aggiungi alla libreria

Supporto
Supporto 24/7 | Regole per contattare

Richieste

Profile

Trojan.KillProc.25897

Aggiunto al database dei virus Dr.Web: 2013-05-24

La descrizione è stata aggiunta:

Technical Information

To ensure autorun and distribution:
Creates or modifies the following files:
  • %HOMEPATH%\Start Menu\Programs\Startup\Skype.lnk
Malicious functions:
Creates and executes the following:
  • '%APPDATA%\WinDefenders\macromedia.exe' -o htpp://pool.50btc.com:8332 -u sarah_hobs@yahoo.co.uk -p pandorasbox123 -g no
  • '%APPDATA%\WinDefenders\shell.exe' -o htpp://pool.50btc.com:8332 -u sarah_hobs@yahoo.co.uk -p pandorasbox123 -t 0 -I 10
Executes the following:
  • '<SYSTEM32>\cscript.exe' usft_ext.exe.vbs
  • '<SYSTEM32>\ping.exe' -n 5 127.0.0.1
  • '<SYSTEM32>\taskkill.exe' /im macromedia.exe
  • '<SYSTEM32>\taskkill.exe' /im Shell.exe
  • '<SYSTEM32>\taskkill.exe' /im "shell.exe"
  • '<SYSTEM32>\taskkill.exe' /im "macromedia.exe"
  • '<SYSTEM32>\wscript.exe' put.vbs
  • '<SYSTEM32>\taskkill.exe' /f /im "cscript.exe"
  • '<SYSTEM32>\taskkill.exe' /f /im "wscript.exe"
Terminates or attempts to terminate
the following system processes:
  • <SYSTEM32>\cscript.exe
Modifies file system :
Creates the following files:
  • %APPDATA%\WinDefenders\min\miner.dll_part535
  • %APPDATA%\WinDefenders\min\miner.dll_part534
  • %APPDATA%\WinDefenders\min\miner.dll_part533
  • %APPDATA%\WinDefenders\min\miner.dll_part536
  • %APPDATA%\WinDefenders\min\miner.dll_part539
  • %APPDATA%\WinDefenders\min\miner.dll_part538
  • %APPDATA%\WinDefenders\min\miner.dll_part537
  • %APPDATA%\WinDefenders\min\miner.dll_part529
  • %APPDATA%\WinDefenders\min\miner.dll_part528
  • %APPDATA%\WinDefenders\min\miner.dll_part527
  • %APPDATA%\WinDefenders\min\miner.dll_part53
  • %APPDATA%\WinDefenders\min\miner.dll_part532
  • %APPDATA%\WinDefenders\min\miner.dll_part531
  • %APPDATA%\WinDefenders\min\miner.dll_part530
  • %APPDATA%\WinDefenders\min\miner.dll_part548
  • %APPDATA%\WinDefenders\min\miner.dll_part547
  • %APPDATA%\WinDefenders\min\miner.dll_part546
  • %APPDATA%\WinDefenders\min\miner.dll_part549
  • %APPDATA%\WinDefenders\min\miner.dll_part551
  • %APPDATA%\WinDefenders\min\miner.dll_part550
  • %APPDATA%\WinDefenders\min\miner.dll_part55
  • %APPDATA%\WinDefenders\min\miner.dll_part541
  • %APPDATA%\WinDefenders\min\miner.dll_part540
  • %APPDATA%\WinDefenders\min\miner.dll_part54
  • %APPDATA%\WinDefenders\min\miner.dll_part542
  • %APPDATA%\WinDefenders\min\miner.dll_part545
  • %APPDATA%\WinDefenders\min\miner.dll_part544
  • %APPDATA%\WinDefenders\min\miner.dll_part543
  • %APPDATA%\WinDefenders\min\miner.dll_part51
  • %APPDATA%\WinDefenders\min\miner.dll_part509
  • %APPDATA%\WinDefenders\min\miner.dll_part508
  • %APPDATA%\WinDefenders\min\miner.dll_part510
  • %APPDATA%\WinDefenders\min\miner.dll_part513
  • %APPDATA%\WinDefenders\min\miner.dll_part512
  • %APPDATA%\WinDefenders\min\miner.dll_part511
  • %APPDATA%\WinDefenders\min\miner.dll_part503
  • %APPDATA%\WinDefenders\min\miner.dll_part502
  • %APPDATA%\WinDefenders\min\miner.dll_part501
  • %APPDATA%\WinDefenders\min\miner.dll_part504
  • %APPDATA%\WinDefenders\min\miner.dll_part507
  • %APPDATA%\WinDefenders\min\miner.dll_part506
  • %APPDATA%\WinDefenders\min\miner.dll_part505
  • %APPDATA%\WinDefenders\min\miner.dll_part522
  • %APPDATA%\WinDefenders\min\miner.dll_part521
  • %APPDATA%\WinDefenders\min\miner.dll_part520
  • %APPDATA%\WinDefenders\min\miner.dll_part523
  • %APPDATA%\WinDefenders\min\miner.dll_part526
  • %APPDATA%\WinDefenders\min\miner.dll_part525
  • %APPDATA%\WinDefenders\min\miner.dll_part524
  • %APPDATA%\WinDefenders\min\miner.dll_part516
  • %APPDATA%\WinDefenders\min\miner.dll_part515
  • %APPDATA%\WinDefenders\min\miner.dll_part514
  • %APPDATA%\WinDefenders\min\miner.dll_part517
  • %APPDATA%\WinDefenders\min\miner.dll_part52
  • %APPDATA%\WinDefenders\min\miner.dll_part519
  • %APPDATA%\WinDefenders\min\miner.dll_part518
  • %APPDATA%\WinDefenders\min\miner.dll_part586
  • %APPDATA%\WinDefenders\min\miner.dll_part585
  • %APPDATA%\WinDefenders\min\miner.dll_part584
  • %APPDATA%\WinDefenders\min\miner.dll_part587
  • %APPDATA%\WinDefenders\min\miner.dll_part59
  • %APPDATA%\WinDefenders\min\miner.dll_part589
  • %APPDATA%\WinDefenders\min\miner.dll_part588
  • %APPDATA%\WinDefenders\min\miner.dll_part58
  • %APPDATA%\WinDefenders\min\miner.dll_part579
  • %APPDATA%\WinDefenders\min\miner.dll_part578
  • %APPDATA%\WinDefenders\min\miner.dll_part580
  • %APPDATA%\WinDefenders\min\miner.dll_part583
  • %APPDATA%\WinDefenders\min\miner.dll_part582
  • %APPDATA%\WinDefenders\min\miner.dll_part581
  • %APPDATA%\WinDefenders\min\miner.dll_part599
  • %APPDATA%\WinDefenders\min\miner.dll_part598
  • %APPDATA%\WinDefenders\min\miner.dll_part597
  • %APPDATA%\WinDefenders\min\miner.dll_part6
  • %APPDATA%\WinDefenders\min\miner.dll_part601
  • %APPDATA%\WinDefenders\min\miner.dll_part600
  • %APPDATA%\WinDefenders\min\miner.dll_part60
  • %APPDATA%\WinDefenders\min\miner.dll_part592
  • %APPDATA%\WinDefenders\min\miner.dll_part591
  • %APPDATA%\WinDefenders\min\miner.dll_part590
  • %APPDATA%\WinDefenders\min\miner.dll_part593
  • %APPDATA%\WinDefenders\min\miner.dll_part596
  • %APPDATA%\WinDefenders\min\miner.dll_part595
  • %APPDATA%\WinDefenders\min\miner.dll_part594
  • %APPDATA%\WinDefenders\min\miner.dll_part560
  • %APPDATA%\WinDefenders\min\miner.dll_part56
  • %APPDATA%\WinDefenders\min\miner.dll_part559
  • %APPDATA%\WinDefenders\min\miner.dll_part561
  • %APPDATA%\WinDefenders\min\miner.dll_part564
  • %APPDATA%\WinDefenders\min\miner.dll_part563
  • %APPDATA%\WinDefenders\min\miner.dll_part562
  • %APPDATA%\WinDefenders\min\miner.dll_part554
  • %APPDATA%\WinDefenders\min\miner.dll_part553
  • %APPDATA%\WinDefenders\min\miner.dll_part552
  • %APPDATA%\WinDefenders\min\miner.dll_part555
  • %APPDATA%\WinDefenders\min\miner.dll_part558
  • %APPDATA%\WinDefenders\min\miner.dll_part557
  • %APPDATA%\WinDefenders\min\miner.dll_part556
  • %APPDATA%\WinDefenders\min\miner.dll_part573
  • %APPDATA%\WinDefenders\min\miner.dll_part572
  • %APPDATA%\WinDefenders\min\miner.dll_part571
  • %APPDATA%\WinDefenders\min\miner.dll_part574
  • %APPDATA%\WinDefenders\min\miner.dll_part577
  • %APPDATA%\WinDefenders\min\miner.dll_part576
  • %APPDATA%\WinDefenders\min\miner.dll_part575
  • %APPDATA%\WinDefenders\min\miner.dll_part567
  • %APPDATA%\WinDefenders\min\miner.dll_part566
  • %APPDATA%\WinDefenders\min\miner.dll_part565
  • %APPDATA%\WinDefenders\min\miner.dll_part568
  • %APPDATA%\WinDefenders\min\miner.dll_part570
  • %APPDATA%\WinDefenders\min\miner.dll_part57
  • %APPDATA%\WinDefenders\min\miner.dll_part569
  • %APPDATA%\WinDefenders\min\miner.dll_part500
  • %APPDATA%\WinDefenders\min\miner.dll_part433
  • %APPDATA%\WinDefenders\min\miner.dll_part432
  • %APPDATA%\WinDefenders\min\miner.dll_part431
  • %APPDATA%\WinDefenders\min\miner.dll_part434
  • %APPDATA%\WinDefenders\min\miner.dll_part437
  • %APPDATA%\WinDefenders\min\miner.dll_part436
  • %APPDATA%\WinDefenders\min\miner.dll_part435
  • %APPDATA%\WinDefenders\min\miner.dll_part427
  • %APPDATA%\WinDefenders\min\miner.dll_part426
  • %APPDATA%\WinDefenders\min\miner.dll_part425
  • %APPDATA%\WinDefenders\min\miner.dll_part428
  • %APPDATA%\WinDefenders\min\miner.dll_part430
  • %APPDATA%\WinDefenders\min\miner.dll_part43
  • %APPDATA%\WinDefenders\min\miner.dll_part429
  • %APPDATA%\WinDefenders\min\miner.dll_part446
  • %APPDATA%\WinDefenders\min\miner.dll_part445
  • %APPDATA%\WinDefenders\min\miner.dll_part444
  • %APPDATA%\WinDefenders\min\miner.dll_part447
  • %APPDATA%\WinDefenders\min\miner.dll_part45
  • %APPDATA%\WinDefenders\min\miner.dll_part449
  • %APPDATA%\WinDefenders\min\miner.dll_part448
  • %APPDATA%\WinDefenders\min\miner.dll_part44
  • %APPDATA%\WinDefenders\min\miner.dll_part439
  • %APPDATA%\WinDefenders\min\miner.dll_part438
  • %APPDATA%\WinDefenders\min\miner.dll_part440
  • %APPDATA%\WinDefenders\min\miner.dll_part443
  • %APPDATA%\WinDefenders\min\miner.dll_part442
  • %APPDATA%\WinDefenders\min\miner.dll_part441
  • %APPDATA%\WinDefenders\min\miner.dll_part408
  • %APPDATA%\WinDefenders\min\miner.dll_part407
  • %APPDATA%\WinDefenders\min\miner.dll_part406
  • %APPDATA%\WinDefenders\min\miner.dll_part409
  • %APPDATA%\WinDefenders\min\miner.dll_part411
  • %APPDATA%\WinDefenders\min\miner.dll_part410
  • %APPDATA%\WinDefenders\min\miner.dll_part41
  • %APPDATA%\WinDefenders\min\miner.dll_part401
  • %APPDATA%\WinDefenders\min\miner.dll_part400
  • %APPDATA%\WinDefenders\min\miner.dll_part40
  • %APPDATA%\WinDefenders\min\miner.dll_part402
  • %APPDATA%\WinDefenders\min\miner.dll_part405
  • %APPDATA%\WinDefenders\min\miner.dll_part404
  • %APPDATA%\WinDefenders\min\miner.dll_part403
  • %APPDATA%\WinDefenders\min\miner.dll_part420
  • %APPDATA%\WinDefenders\min\miner.dll_part42
  • %APPDATA%\WinDefenders\min\miner.dll_part419
  • %APPDATA%\WinDefenders\min\miner.dll_part421
  • %APPDATA%\WinDefenders\min\miner.dll_part424
  • %APPDATA%\WinDefenders\min\miner.dll_part423
  • %APPDATA%\WinDefenders\min\miner.dll_part422
  • %APPDATA%\WinDefenders\min\miner.dll_part414
  • %APPDATA%\WinDefenders\min\miner.dll_part413
  • %APPDATA%\WinDefenders\min\miner.dll_part412
  • %APPDATA%\WinDefenders\min\miner.dll_part415
  • %APPDATA%\WinDefenders\min\miner.dll_part418
  • %APPDATA%\WinDefenders\min\miner.dll_part417
  • %APPDATA%\WinDefenders\min\miner.dll_part416
  • %APPDATA%\WinDefenders\min\miner.dll_part484
  • %APPDATA%\WinDefenders\min\miner.dll_part483
  • %APPDATA%\WinDefenders\min\miner.dll_part482
  • %APPDATA%\WinDefenders\min\miner.dll_part485
  • %APPDATA%\WinDefenders\min\miner.dll_part488
  • %APPDATA%\WinDefenders\min\miner.dll_part487
  • %APPDATA%\WinDefenders\min\miner.dll_part486
  • %APPDATA%\WinDefenders\min\miner.dll_part478
  • %APPDATA%\WinDefenders\min\miner.dll_part477
  • %APPDATA%\WinDefenders\min\miner.dll_part476
  • %APPDATA%\WinDefenders\min\miner.dll_part479
  • %APPDATA%\WinDefenders\min\miner.dll_part481
  • %APPDATA%\WinDefenders\min\miner.dll_part480
  • %APPDATA%\WinDefenders\min\miner.dll_part48
  • %APPDATA%\WinDefenders\min\miner.dll_part497
  • %APPDATA%\WinDefenders\min\miner.dll_part496
  • %APPDATA%\WinDefenders\min\miner.dll_part495
  • %APPDATA%\WinDefenders\min\miner.dll_part498
  • %APPDATA%\WinDefenders\min\miner.dll_part50
  • %APPDATA%\WinDefenders\min\miner.dll_part5
  • %APPDATA%\WinDefenders\min\miner.dll_part499
  • %APPDATA%\WinDefenders\min\miner.dll_part490
  • %APPDATA%\WinDefenders\min\miner.dll_part49
  • %APPDATA%\WinDefenders\min\miner.dll_part489
  • %APPDATA%\WinDefenders\min\miner.dll_part491
  • %APPDATA%\WinDefenders\min\miner.dll_part494
  • %APPDATA%\WinDefenders\min\miner.dll_part493
  • %APPDATA%\WinDefenders\min\miner.dll_part492
  • %APPDATA%\WinDefenders\min\miner.dll_part459
  • %APPDATA%\WinDefenders\min\miner.dll_part458
  • %APPDATA%\WinDefenders\min\miner.dll_part457
  • %APPDATA%\WinDefenders\min\miner.dll_part46
  • %APPDATA%\WinDefenders\min\miner.dll_part462
  • %APPDATA%\WinDefenders\min\miner.dll_part461
  • %APPDATA%\WinDefenders\min\miner.dll_part460
  • %APPDATA%\WinDefenders\min\miner.dll_part452
  • %APPDATA%\WinDefenders\min\miner.dll_part451
  • %APPDATA%\WinDefenders\min\miner.dll_part450
  • %APPDATA%\WinDefenders\min\miner.dll_part453
  • %APPDATA%\WinDefenders\min\miner.dll_part456
  • %APPDATA%\WinDefenders\min\miner.dll_part455
  • %APPDATA%\WinDefenders\min\miner.dll_part454
  • %APPDATA%\WinDefenders\min\miner.dll_part471
  • %APPDATA%\WinDefenders\min\miner.dll_part470
  • %APPDATA%\WinDefenders\min\miner.dll_part47
  • %APPDATA%\WinDefenders\min\miner.dll_part472
  • %APPDATA%\WinDefenders\min\miner.dll_part475
  • %APPDATA%\WinDefenders\min\miner.dll_part474
  • %APPDATA%\WinDefenders\min\miner.dll_part473
  • %APPDATA%\WinDefenders\min\miner.dll_part465
  • %APPDATA%\WinDefenders\min\miner.dll_part464
  • %APPDATA%\WinDefenders\min\miner.dll_part463
  • %APPDATA%\WinDefenders\min\miner.dll_part466
  • %APPDATA%\WinDefenders\min\miner.dll_part469
  • %APPDATA%\WinDefenders\min\miner.dll_part468
  • %APPDATA%\WinDefenders\min\miner.dll_part467
  • %APPDATA%\WinDefenders\min\miner.dll_part602
  • %APPDATA%\WinDefenders\shel\shell.exe_part35
  • %APPDATA%\WinDefenders\shel\shell.exe_part34
  • %APPDATA%\WinDefenders\shel\shell.exe_part33
  • %APPDATA%\WinDefenders\shel\shell.exe_part36
  • %APPDATA%\WinDefenders\shel\shell.exe_part39
  • %APPDATA%\WinDefenders\shel\shell.exe_part38
  • %APPDATA%\WinDefenders\shel\shell.exe_part37
  • %APPDATA%\WinDefenders\shel\shell.exe_part29
  • %APPDATA%\WinDefenders\shel\shell.exe_part28
  • %APPDATA%\WinDefenders\shel\shell.exe_part27
  • %APPDATA%\WinDefenders\shel\shell.exe_part3
  • %APPDATA%\WinDefenders\shel\shell.exe_part32
  • %APPDATA%\WinDefenders\shel\shell.exe_part31
  • %APPDATA%\WinDefenders\shel\shell.exe_part30
  • %APPDATA%\WinDefenders\shel\shell.exe_part48
  • %APPDATA%\WinDefenders\shel\shell.exe_part47
  • %APPDATA%\WinDefenders\shel\shell.exe_part46
  • %APPDATA%\WinDefenders\shel\shell.exe_part49
  • %APPDATA%\WinDefenders\shel\shell.exe_part51
  • %APPDATA%\WinDefenders\shel\shell.exe_part50
  • %APPDATA%\WinDefenders\shel\shell.exe_part5
  • %APPDATA%\WinDefenders\shel\shell.exe_part41
  • %APPDATA%\WinDefenders\shel\shell.exe_part40
  • %APPDATA%\WinDefenders\shel\shell.exe_part4
  • %APPDATA%\WinDefenders\shel\shell.exe_part42
  • %APPDATA%\WinDefenders\shel\shell.exe_part45
  • %APPDATA%\WinDefenders\shel\shell.exe_part44
  • %APPDATA%\WinDefenders\shel\shell.exe_part43
  • %APPDATA%\WinDefenders\shel\shell.exe_part108
  • %APPDATA%\WinDefenders\shel\shell.exe_part107
  • %APPDATA%\WinDefenders\shel\shell.exe_part106
  • %APPDATA%\WinDefenders\shel\shell.exe_part109
  • %APPDATA%\WinDefenders\shel\shell.exe_part13
  • %APPDATA%\WinDefenders\shel\shell.exe_part12
  • %APPDATA%\WinDefenders\shel\shell.exe_part11
  • %APPDATA%\WinDefenders\shel\shell.exe_part101
  • %APPDATA%\WinDefenders\shel\shell.exe_part100
  • %APPDATA%\WinDefenders\shel\shell.exe_part10
  • %APPDATA%\WinDefenders\shel\shell.exe_part102
  • %APPDATA%\WinDefenders\shel\shell.exe_part105
  • %APPDATA%\WinDefenders\shel\shell.exe_part104
  • %APPDATA%\WinDefenders\shel\shell.exe_part103
  • %APPDATA%\WinDefenders\shel\shell.exe_part22
  • %APPDATA%\WinDefenders\shel\shell.exe_part21
  • %APPDATA%\WinDefenders\shel\shell.exe_part20
  • %APPDATA%\WinDefenders\shel\shell.exe_part23
  • %APPDATA%\WinDefenders\shel\shell.exe_part26
  • %APPDATA%\WinDefenders\shel\shell.exe_part25
  • %APPDATA%\WinDefenders\shel\shell.exe_part24
  • %APPDATA%\WinDefenders\shel\shell.exe_part16
  • %APPDATA%\WinDefenders\shel\shell.exe_part15
  • %APPDATA%\WinDefenders\shel\shell.exe_part14
  • %APPDATA%\WinDefenders\shel\shell.exe_part17
  • %APPDATA%\WinDefenders\shel\shell.exe_part2
  • %APPDATA%\WinDefenders\shel\shell.exe_part19
  • %APPDATA%\WinDefenders\shel\shell.exe_part18
  • %APPDATA%\WinDefenders\shel\shell.exe_part86
  • %APPDATA%\WinDefenders\shel\shell.exe_part85
  • %APPDATA%\WinDefenders\shel\shell.exe_part84
  • %APPDATA%\WinDefenders\shel\shell.exe_part87
  • %APPDATA%\WinDefenders\shel\shell.exe_part9
  • %APPDATA%\WinDefenders\shel\shell.exe_part89
  • %APPDATA%\WinDefenders\shel\shell.exe_part88
  • %APPDATA%\WinDefenders\shel\shell.exe_part8
  • %APPDATA%\WinDefenders\shel\shell.exe_part79
  • %APPDATA%\WinDefenders\shel\shell.exe_part78
  • %APPDATA%\WinDefenders\shel\shell.exe_part80
  • %APPDATA%\WinDefenders\shel\shell.exe_part83
  • %APPDATA%\WinDefenders\shel\shell.exe_part82
  • %APPDATA%\WinDefenders\shel\shell.exe_part81
  • %APPDATA%\WinDefenders\shel\shell.exe_part99
  • %APPDATA%\WinDefenders\shel\shell.exe_part98
  • %APPDATA%\WinDefenders\shel\shell.exe_part97
  • %APPDATA%\WinDefenders\coinutil.dll
  • %APPDATA%\WinDefenders\kill.bat
  • %APPDATA%\WinDefenders\ftpcmd.bat
  • %APPDATA%\WinDefenders\shel\shell.exe_part92
  • %APPDATA%\WinDefenders\shel\shell.exe_part91
  • %APPDATA%\WinDefenders\shel\shell.exe_part90
  • %APPDATA%\WinDefenders\shel\shell.exe_part93
  • %APPDATA%\WinDefenders\shel\shell.exe_part96
  • %APPDATA%\WinDefenders\shel\shell.exe_part95
  • %APPDATA%\WinDefenders\shel\shell.exe_part94
  • %APPDATA%\WinDefenders\shel\shell.exe_part60
  • %APPDATA%\WinDefenders\shel\shell.exe_part6
  • %APPDATA%\WinDefenders\shel\shell.exe_part59
  • %APPDATA%\WinDefenders\shel\shell.exe_part61
  • %APPDATA%\WinDefenders\shel\shell.exe_part64
  • %APPDATA%\WinDefenders\shel\shell.exe_part63
  • %APPDATA%\WinDefenders\shel\shell.exe_part62
  • %APPDATA%\WinDefenders\shel\shell.exe_part54
  • %APPDATA%\WinDefenders\shel\shell.exe_part53
  • %APPDATA%\WinDefenders\shel\shell.exe_part52
  • %APPDATA%\WinDefenders\shel\shell.exe_part55
  • %APPDATA%\WinDefenders\shel\shell.exe_part58
  • %APPDATA%\WinDefenders\shel\shell.exe_part57
  • %APPDATA%\WinDefenders\shel\shell.exe_part56
  • %APPDATA%\WinDefenders\shel\shell.exe_part73
  • %APPDATA%\WinDefenders\shel\shell.exe_part72
  • %APPDATA%\WinDefenders\shel\shell.exe_part71
  • %APPDATA%\WinDefenders\shel\shell.exe_part74
  • %APPDATA%\WinDefenders\shel\shell.exe_part77
  • %APPDATA%\WinDefenders\shel\shell.exe_part76
  • %APPDATA%\WinDefenders\shel\shell.exe_part75
  • %APPDATA%\WinDefenders\shel\shell.exe_part67
  • %APPDATA%\WinDefenders\shel\shell.exe_part66
  • %APPDATA%\WinDefenders\shel\shell.exe_part65
  • %APPDATA%\WinDefenders\shel\shell.exe_part68
  • %APPDATA%\WinDefenders\shel\shell.exe_part70
  • %APPDATA%\WinDefenders\shel\shell.exe_part7
  • %APPDATA%\WinDefenders\shel\shell.exe_part69
  • %APPDATA%\WinDefenders\shel\shell.exe_part1
  • %APPDATA%\WinDefenders\min\miner.dll_part637
  • %APPDATA%\WinDefenders\min\miner.dll_part636
  • %APPDATA%\WinDefenders\min\miner.dll_part635
  • %APPDATA%\WinDefenders\min\miner.dll_part638
  • %APPDATA%\WinDefenders\min\miner.dll_part640
  • %APPDATA%\WinDefenders\min\miner.dll_part64
  • %APPDATA%\WinDefenders\min\miner.dll_part639
  • %APPDATA%\WinDefenders\min\miner.dll_part630
  • %APPDATA%\WinDefenders\min\miner.dll_part63
  • %APPDATA%\WinDefenders\min\miner.dll_part629
  • %APPDATA%\WinDefenders\min\miner.dll_part631
  • %APPDATA%\WinDefenders\min\miner.dll_part634
  • %APPDATA%\WinDefenders\min\miner.dll_part633
  • %APPDATA%\WinDefenders\min\miner.dll_part632
  • %APPDATA%\WinDefenders\min\miner.dll_part65
  • %APPDATA%\WinDefenders\min\miner.dll_part649
  • %APPDATA%\WinDefenders\min\miner.dll_part648
  • %APPDATA%\WinDefenders\min\miner.dll_part650
  • %APPDATA%\WinDefenders\min\miner.dll_part653
  • %APPDATA%\WinDefenders\min\miner.dll_part652
  • %APPDATA%\WinDefenders\min\miner.dll_part651
  • %APPDATA%\WinDefenders\min\miner.dll_part643
  • %APPDATA%\WinDefenders\min\miner.dll_part642
  • %APPDATA%\WinDefenders\min\miner.dll_part641
  • %APPDATA%\WinDefenders\min\miner.dll_part644
  • %APPDATA%\WinDefenders\min\miner.dll_part647
  • %APPDATA%\WinDefenders\min\miner.dll_part646
  • %APPDATA%\WinDefenders\min\miner.dll_part645
  • %APPDATA%\WinDefenders\min\miner.dll_part611
  • %APPDATA%\WinDefenders\min\miner.dll_part610
  • %APPDATA%\WinDefenders\min\miner.dll_part61
  • %APPDATA%\WinDefenders\min\miner.dll_part612
  • %APPDATA%\WinDefenders\min\miner.dll_part615
  • %APPDATA%\WinDefenders\min\miner.dll_part614
  • %APPDATA%\WinDefenders\min\miner.dll_part613
  • %APPDATA%\WinDefenders\min\miner.dll_part605
  • %APPDATA%\WinDefenders\min\miner.dll_part604
  • %APPDATA%\WinDefenders\min\miner.dll_part603
  • %APPDATA%\WinDefenders\min\miner.dll_part606
  • %APPDATA%\WinDefenders\min\miner.dll_part609
  • %APPDATA%\WinDefenders\min\miner.dll_part608
  • %APPDATA%\WinDefenders\min\miner.dll_part607
  • %APPDATA%\WinDefenders\min\miner.dll_part624
  • %APPDATA%\WinDefenders\min\miner.dll_part623
  • %APPDATA%\WinDefenders\min\miner.dll_part622
  • %APPDATA%\WinDefenders\min\miner.dll_part625
  • %APPDATA%\WinDefenders\min\miner.dll_part628
  • %APPDATA%\WinDefenders\min\miner.dll_part627
  • %APPDATA%\WinDefenders\min\miner.dll_part626
  • %APPDATA%\WinDefenders\min\miner.dll_part618
  • %APPDATA%\WinDefenders\min\miner.dll_part617
  • %APPDATA%\WinDefenders\min\miner.dll_part616
  • %APPDATA%\WinDefenders\min\miner.dll_part619
  • %APPDATA%\WinDefenders\min\miner.dll_part621
  • %APPDATA%\WinDefenders\min\miner.dll_part620
  • %APPDATA%\WinDefenders\min\miner.dll_part62
  • %APPDATA%\WinDefenders\min\miner.dll_part83
  • %APPDATA%\WinDefenders\min\miner.dll_part82
  • %APPDATA%\WinDefenders\min\miner.dll_part81
  • %APPDATA%\WinDefenders\min\miner.dll_part84
  • %APPDATA%\WinDefenders\min\miner.dll_part87
  • %APPDATA%\WinDefenders\min\miner.dll_part86
  • %APPDATA%\WinDefenders\min\miner.dll_part85
  • %APPDATA%\WinDefenders\min\miner.dll_part77
  • %APPDATA%\WinDefenders\min\miner.dll_part76
  • %APPDATA%\WinDefenders\min\miner.dll_part75
  • %APPDATA%\WinDefenders\min\miner.dll_part78
  • %APPDATA%\WinDefenders\min\miner.dll_part80
  • %APPDATA%\WinDefenders\min\miner.dll_part8
  • %APPDATA%\WinDefenders\min\miner.dll_part79
  • %APPDATA%\WinDefenders\min\miner.dll_part96
  • %APPDATA%\WinDefenders\min\miner.dll_part95
  • %APPDATA%\WinDefenders\min\miner.dll_part94
  • %APPDATA%\WinDefenders\min\miner.dll_part97
  • %APPDATA%\WinDefenders\shel\compile.bat
  • %APPDATA%\WinDefenders\min\miner.dll_part99
  • %APPDATA%\WinDefenders\min\miner.dll_part98
  • %APPDATA%\WinDefenders\min\miner.dll_part9
  • %APPDATA%\WinDefenders\min\miner.dll_part89
  • %APPDATA%\WinDefenders\min\miner.dll_part88
  • %APPDATA%\WinDefenders\min\miner.dll_part90
  • %APPDATA%\WinDefenders\min\miner.dll_part93
  • %APPDATA%\WinDefenders\min\miner.dll_part92
  • %APPDATA%\WinDefenders\min\miner.dll_part91
  • %APPDATA%\WinDefenders\min\miner.dll_part662
  • %APPDATA%\WinDefenders\min\miner.dll_part661
  • %APPDATA%\WinDefenders\min\miner.dll_part660
  • %APPDATA%\WinDefenders\min\miner.dll_part663
  • %APPDATA%\WinDefenders\min\miner.dll_part666
  • %APPDATA%\WinDefenders\min\miner.dll_part665
  • %APPDATA%\WinDefenders\min\miner.dll_part664
  • %APPDATA%\WinDefenders\min\miner.dll_part656
  • %APPDATA%\WinDefenders\min\miner.dll_part655
  • %APPDATA%\WinDefenders\min\miner.dll_part654
  • %APPDATA%\WinDefenders\min\miner.dll_part657
  • %APPDATA%\WinDefenders\min\miner.dll_part66
  • %APPDATA%\WinDefenders\min\miner.dll_part659
  • %APPDATA%\WinDefenders\min\miner.dll_part658
  • %APPDATA%\WinDefenders\min\miner.dll_part70
  • %APPDATA%\WinDefenders\min\miner.dll_part7
  • %APPDATA%\WinDefenders\min\miner.dll_part69
  • %APPDATA%\WinDefenders\min\miner.dll_part71
  • %APPDATA%\WinDefenders\min\miner.dll_part74
  • %APPDATA%\WinDefenders\min\miner.dll_part73
  • %APPDATA%\WinDefenders\min\miner.dll_part72
  • %APPDATA%\WinDefenders\min\miner.dll_part669
  • %APPDATA%\WinDefenders\min\miner.dll_part668
  • %APPDATA%\WinDefenders\min\miner.dll_part667
  • %APPDATA%\WinDefenders\min\miner.dll_part67
  • %APPDATA%\WinDefenders\min\miner.dll_part68
  • %APPDATA%\WinDefenders\min\miner.dll_part671
  • %APPDATA%\WinDefenders\min\miner.dll_part670
  • %APPDATA%\WinDefenders\min\miner.dll_part129
  • %APPDATA%\WinDefenders\min\miner.dll_part128
  • %APPDATA%\WinDefenders\min\miner.dll_part127
  • %APPDATA%\WinDefenders\min\miner.dll_part13
  • %APPDATA%\WinDefenders\min\miner.dll_part132
  • %APPDATA%\WinDefenders\min\miner.dll_part131
  • %APPDATA%\WinDefenders\min\miner.dll_part130
  • %APPDATA%\WinDefenders\min\miner.dll_part122
  • %APPDATA%\WinDefenders\min\miner.dll_part121
  • %APPDATA%\WinDefenders\min\miner.dll_part120
  • %APPDATA%\WinDefenders\min\miner.dll_part123
  • %APPDATA%\WinDefenders\min\miner.dll_part126
  • %APPDATA%\WinDefenders\min\miner.dll_part125
  • %APPDATA%\WinDefenders\min\miner.dll_part124
  • %APPDATA%\WinDefenders\min\miner.dll_part141
  • %APPDATA%\WinDefenders\min\miner.dll_part140
  • %APPDATA%\WinDefenders\min\miner.dll_part14
  • %APPDATA%\WinDefenders\min\miner.dll_part142
  • %APPDATA%\WinDefenders\min\miner.dll_part145
  • %APPDATA%\WinDefenders\min\miner.dll_part144
  • %APPDATA%\WinDefenders\min\miner.dll_part143
  • %APPDATA%\WinDefenders\min\miner.dll_part135
  • %APPDATA%\WinDefenders\min\miner.dll_part134
  • %APPDATA%\WinDefenders\min\miner.dll_part133
  • %APPDATA%\WinDefenders\min\miner.dll_part136
  • %APPDATA%\WinDefenders\min\miner.dll_part139
  • %APPDATA%\WinDefenders\min\miner.dll_part138
  • %APPDATA%\WinDefenders\min\miner.dll_part137
  • %APPDATA%\WinDefenders\min\miner.dll_part103
  • %APPDATA%\WinDefenders\min\miner.dll_part102
  • %APPDATA%\WinDefenders\min\miner.dll_part101
  • %APPDATA%\WinDefenders\min\miner.dll_part104
  • %APPDATA%\WinDefenders\min\miner.dll_part107
  • %APPDATA%\WinDefenders\min\miner.dll_part106
  • %APPDATA%\WinDefenders\min\miner.dll_part105
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part99
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part98
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part97
  • %APPDATA%\WinDefenders\min\compile.bat
  • %APPDATA%\WinDefenders\min\miner.dll_part100
  • %APPDATA%\WinDefenders\min\miner.dll_part10
  • %APPDATA%\WinDefenders\min\miner.dll_part1
  • %APPDATA%\WinDefenders\min\miner.dll_part116
  • %APPDATA%\WinDefenders\min\miner.dll_part115
  • %APPDATA%\WinDefenders\min\miner.dll_part114
  • %APPDATA%\WinDefenders\min\miner.dll_part117
  • %APPDATA%\WinDefenders\min\miner.dll_part12
  • %APPDATA%\WinDefenders\min\miner.dll_part119
  • %APPDATA%\WinDefenders\min\miner.dll_part118
  • %APPDATA%\WinDefenders\min\miner.dll_part11
  • %APPDATA%\WinDefenders\min\miner.dll_part109
  • %APPDATA%\WinDefenders\min\miner.dll_part108
  • %APPDATA%\WinDefenders\min\miner.dll_part110
  • %APPDATA%\WinDefenders\min\miner.dll_part113
  • %APPDATA%\WinDefenders\min\miner.dll_part112
  • %APPDATA%\WinDefenders\min\miner.dll_part111
  • %APPDATA%\WinDefenders\min\miner.dll_part18
  • %APPDATA%\WinDefenders\min\miner.dll_part179
  • %APPDATA%\WinDefenders\min\miner.dll_part178
  • %APPDATA%\WinDefenders\min\miner.dll_part180
  • %APPDATA%\WinDefenders\min\miner.dll_part183
  • %APPDATA%\WinDefenders\min\miner.dll_part182
  • %APPDATA%\WinDefenders\min\miner.dll_part181
  • %APPDATA%\WinDefenders\min\miner.dll_part173
  • %APPDATA%\WinDefenders\min\miner.dll_part172
  • %APPDATA%\WinDefenders\min\miner.dll_part171
  • %APPDATA%\WinDefenders\min\miner.dll_part174
  • %APPDATA%\WinDefenders\min\miner.dll_part177
  • %APPDATA%\WinDefenders\min\miner.dll_part176
  • %APPDATA%\WinDefenders\min\miner.dll_part175
  • %APPDATA%\WinDefenders\min\miner.dll_part192
  • %APPDATA%\WinDefenders\min\miner.dll_part191
  • %APPDATA%\WinDefenders\min\miner.dll_part190
  • %APPDATA%\WinDefenders\min\miner.dll_part193
  • %APPDATA%\WinDefenders\min\miner.dll_part196
  • %APPDATA%\WinDefenders\min\miner.dll_part195
  • %APPDATA%\WinDefenders\min\miner.dll_part194
  • %APPDATA%\WinDefenders\min\miner.dll_part186
  • %APPDATA%\WinDefenders\min\miner.dll_part185
  • %APPDATA%\WinDefenders\min\miner.dll_part184
  • %APPDATA%\WinDefenders\min\miner.dll_part187
  • %APPDATA%\WinDefenders\min\miner.dll_part19
  • %APPDATA%\WinDefenders\min\miner.dll_part189
  • %APPDATA%\WinDefenders\min\miner.dll_part188
  • %APPDATA%\WinDefenders\min\miner.dll_part154
  • %APPDATA%\WinDefenders\min\miner.dll_part153
  • %APPDATA%\WinDefenders\min\miner.dll_part152
  • %APPDATA%\WinDefenders\min\miner.dll_part155
  • %APPDATA%\WinDefenders\min\miner.dll_part158
  • %APPDATA%\WinDefenders\min\miner.dll_part157
  • %APPDATA%\WinDefenders\min\miner.dll_part156
  • %APPDATA%\WinDefenders\min\miner.dll_part148
  • %APPDATA%\WinDefenders\min\miner.dll_part147
  • %APPDATA%\WinDefenders\min\miner.dll_part146
  • %APPDATA%\WinDefenders\min\miner.dll_part149
  • %APPDATA%\WinDefenders\min\miner.dll_part151
  • %APPDATA%\WinDefenders\min\miner.dll_part150
  • %APPDATA%\WinDefenders\min\miner.dll_part15
  • %APPDATA%\WinDefenders\min\miner.dll_part167
  • %APPDATA%\WinDefenders\min\miner.dll_part166
  • %APPDATA%\WinDefenders\min\miner.dll_part165
  • %APPDATA%\WinDefenders\min\miner.dll_part168
  • %APPDATA%\WinDefenders\min\miner.dll_part170
  • %APPDATA%\WinDefenders\min\miner.dll_part17
  • %APPDATA%\WinDefenders\min\miner.dll_part169
  • %APPDATA%\WinDefenders\min\miner.dll_part160
  • %APPDATA%\WinDefenders\min\miner.dll_part16
  • %APPDATA%\WinDefenders\min\miner.dll_part159
  • %APPDATA%\WinDefenders\min\miner.dll_part161
  • %APPDATA%\WinDefenders\min\miner.dll_part164
  • %APPDATA%\WinDefenders\min\miner.dll_part163
  • %APPDATA%\WinDefenders\min\miner.dll_part162
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part96
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part28
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part27
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part26
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part29
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part31
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part30
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part3
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part21
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part20
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part2
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part22
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part25
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part24
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part23
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part40
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part4
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part39
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part41
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part44
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part43
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part42
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part34
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part33
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part32
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part35
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part38
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part37
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part36
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part100
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part10
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part1
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part101
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part104
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part103
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part102
  • %APPDATA%\WinDefenders\put.vbs
  • %APPDATA%\WinDefenders\phatk.ptx
  • %APPDATA%\WinDefenders\phatk.cl
  • %APPDATA%\WinDefenders\usft_ext.dll
  • %APPDATA%\WinDefenders\macro\compile.bat
  • %APPDATA%\WinDefenders\wallet.vbs
  • %APPDATA%\WinDefenders\usft_ext.exe.vbs
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part15
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part14
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part13
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part16
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part19
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part18
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part17
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part107
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part106
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part105
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part108
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part12
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part11
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part109
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part79
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part78
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part77
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part8
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part82
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part81
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part80
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part72
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part71
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part70
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part73
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part76
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part75
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part74
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part91
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part90
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part9
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part92
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part95
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part94
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part93
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part85
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part84
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part83
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part86
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part89
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part88
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part87
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part53
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part52
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part51
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part54
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part57
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part56
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part55
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part47
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part46
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part45
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part48
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part50
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part5
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part49
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part66
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part65
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part64
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part67
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part7
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part69
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part68
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part6
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part59
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part58
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part60
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part63
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part62
  • %APPDATA%\WinDefenders\macro\macromedia.exe_part61
  • %APPDATA%\WinDefenders\min\miner.dll_part197
  • %APPDATA%\WinDefenders\min\miner.dll_part332
  • %APPDATA%\WinDefenders\min\miner.dll_part331
  • %APPDATA%\WinDefenders\min\miner.dll_part330
  • %APPDATA%\WinDefenders\min\miner.dll_part333
  • %APPDATA%\WinDefenders\min\miner.dll_part336
  • %APPDATA%\WinDefenders\min\miner.dll_part335
  • %APPDATA%\WinDefenders\min\miner.dll_part334
  • %APPDATA%\WinDefenders\min\miner.dll_part326
  • %APPDATA%\WinDefenders\min\miner.dll_part325
  • %APPDATA%\WinDefenders\min\miner.dll_part324
  • %APPDATA%\WinDefenders\min\miner.dll_part327
  • %APPDATA%\WinDefenders\min\miner.dll_part33
  • %APPDATA%\WinDefenders\min\miner.dll_part329
  • %APPDATA%\WinDefenders\min\miner.dll_part328
  • %APPDATA%\WinDefenders\min\miner.dll_part345
  • %APPDATA%\WinDefenders\min\miner.dll_part344
  • %APPDATA%\WinDefenders\min\miner.dll_part343
  • %APPDATA%\WinDefenders\min\miner.dll_part346
  • %APPDATA%\WinDefenders\min\miner.dll_part349
  • %APPDATA%\WinDefenders\min\miner.dll_part348
  • %APPDATA%\WinDefenders\min\miner.dll_part347
  • %APPDATA%\WinDefenders\min\miner.dll_part339
  • %APPDATA%\WinDefenders\min\miner.dll_part338
  • %APPDATA%\WinDefenders\min\miner.dll_part337
  • %APPDATA%\WinDefenders\min\miner.dll_part34
  • %APPDATA%\WinDefenders\min\miner.dll_part342
  • %APPDATA%\WinDefenders\min\miner.dll_part341
  • %APPDATA%\WinDefenders\min\miner.dll_part340
  • %APPDATA%\WinDefenders\min\miner.dll_part307
  • %APPDATA%\WinDefenders\min\miner.dll_part306
  • %APPDATA%\WinDefenders\min\miner.dll_part305
  • %APPDATA%\WinDefenders\min\miner.dll_part308
  • %APPDATA%\WinDefenders\min\miner.dll_part310
  • %APPDATA%\WinDefenders\min\miner.dll_part31
  • %APPDATA%\WinDefenders\min\miner.dll_part309
  • %APPDATA%\WinDefenders\min\miner.dll_part300
  • %APPDATA%\WinDefenders\min\miner.dll_part30
  • %APPDATA%\WinDefenders\min\miner.dll_part3
  • %APPDATA%\WinDefenders\min\miner.dll_part301
  • %APPDATA%\WinDefenders\min\miner.dll_part304
  • %APPDATA%\WinDefenders\min\miner.dll_part303
  • %APPDATA%\WinDefenders\min\miner.dll_part302
  • %APPDATA%\WinDefenders\min\miner.dll_part32
  • %APPDATA%\WinDefenders\min\miner.dll_part319
  • %APPDATA%\WinDefenders\min\miner.dll_part318
  • %APPDATA%\WinDefenders\min\miner.dll_part320
  • %APPDATA%\WinDefenders\min\miner.dll_part323
  • %APPDATA%\WinDefenders\min\miner.dll_part322
  • %APPDATA%\WinDefenders\min\miner.dll_part321
  • %APPDATA%\WinDefenders\min\miner.dll_part313
  • %APPDATA%\WinDefenders\min\miner.dll_part312
  • %APPDATA%\WinDefenders\min\miner.dll_part311
  • %APPDATA%\WinDefenders\min\miner.dll_part314
  • %APPDATA%\WinDefenders\min\miner.dll_part317
  • %APPDATA%\WinDefenders\min\miner.dll_part316
  • %APPDATA%\WinDefenders\min\miner.dll_part315
  • %APPDATA%\WinDefenders\min\miner.dll_part383
  • %APPDATA%\WinDefenders\min\miner.dll_part382
  • %APPDATA%\WinDefenders\min\miner.dll_part381
  • %APPDATA%\WinDefenders\min\miner.dll_part384
  • %APPDATA%\WinDefenders\min\miner.dll_part387
  • %APPDATA%\WinDefenders\min\miner.dll_part386
  • %APPDATA%\WinDefenders\min\miner.dll_part385
  • %APPDATA%\WinDefenders\min\miner.dll_part377
  • %APPDATA%\WinDefenders\min\miner.dll_part376
  • %APPDATA%\WinDefenders\min\miner.dll_part375
  • %APPDATA%\WinDefenders\min\miner.dll_part378
  • %APPDATA%\WinDefenders\min\miner.dll_part380
  • %APPDATA%\WinDefenders\min\miner.dll_part38
  • %APPDATA%\WinDefenders\min\miner.dll_part379
  • %APPDATA%\WinDefenders\min\miner.dll_part396
  • %APPDATA%\WinDefenders\min\miner.dll_part395
  • %APPDATA%\WinDefenders\min\miner.dll_part394
  • %APPDATA%\WinDefenders\min\miner.dll_part397
  • %APPDATA%\WinDefenders\min\miner.dll_part4
  • %APPDATA%\WinDefenders\min\miner.dll_part399
  • %APPDATA%\WinDefenders\min\miner.dll_part398
  • %APPDATA%\WinDefenders\min\miner.dll_part39
  • %APPDATA%\WinDefenders\min\miner.dll_part389
  • %APPDATA%\WinDefenders\min\miner.dll_part388
  • %APPDATA%\WinDefenders\min\miner.dll_part390
  • %APPDATA%\WinDefenders\min\miner.dll_part393
  • %APPDATA%\WinDefenders\min\miner.dll_part392
  • %APPDATA%\WinDefenders\min\miner.dll_part391
  • %APPDATA%\WinDefenders\min\miner.dll_part358
  • %APPDATA%\WinDefenders\min\miner.dll_part357
  • %APPDATA%\WinDefenders\min\miner.dll_part356
  • %APPDATA%\WinDefenders\min\miner.dll_part359
  • %APPDATA%\WinDefenders\min\miner.dll_part361
  • %APPDATA%\WinDefenders\min\miner.dll_part360
  • %APPDATA%\WinDefenders\min\miner.dll_part36
  • %APPDATA%\WinDefenders\min\miner.dll_part351
  • %APPDATA%\WinDefenders\min\miner.dll_part350
  • %APPDATA%\WinDefenders\min\miner.dll_part35
  • %APPDATA%\WinDefenders\min\miner.dll_part352
  • %APPDATA%\WinDefenders\min\miner.dll_part355
  • %APPDATA%\WinDefenders\min\miner.dll_part354
  • %APPDATA%\WinDefenders\min\miner.dll_part353
  • %APPDATA%\WinDefenders\min\miner.dll_part370
  • %APPDATA%\WinDefenders\min\miner.dll_part37
  • %APPDATA%\WinDefenders\min\miner.dll_part369
  • %APPDATA%\WinDefenders\min\miner.dll_part371
  • %APPDATA%\WinDefenders\min\miner.dll_part374
  • %APPDATA%\WinDefenders\min\miner.dll_part373
  • %APPDATA%\WinDefenders\min\miner.dll_part372
  • %APPDATA%\WinDefenders\min\miner.dll_part364
  • %APPDATA%\WinDefenders\min\miner.dll_part363
  • %APPDATA%\WinDefenders\min\miner.dll_part362
  • %APPDATA%\WinDefenders\min\miner.dll_part365
  • %APPDATA%\WinDefenders\min\miner.dll_part368
  • %APPDATA%\WinDefenders\min\miner.dll_part367
  • %APPDATA%\WinDefenders\min\miner.dll_part366
  • %APPDATA%\WinDefenders\min\miner.dll_part299
  • %APPDATA%\WinDefenders\min\miner.dll_part230
  • %APPDATA%\WinDefenders\min\miner.dll_part23
  • %APPDATA%\WinDefenders\min\miner.dll_part229
  • %APPDATA%\WinDefenders\min\miner.dll_part231
  • %APPDATA%\WinDefenders\min\miner.dll_part234
  • %APPDATA%\WinDefenders\min\miner.dll_part233
  • %APPDATA%\WinDefenders\min\miner.dll_part232
  • %APPDATA%\WinDefenders\min\miner.dll_part224
  • %APPDATA%\WinDefenders\min\miner.dll_part223
  • %APPDATA%\WinDefenders\min\miner.dll_part222
  • %APPDATA%\WinDefenders\min\miner.dll_part225
  • %APPDATA%\WinDefenders\min\miner.dll_part228
  • %APPDATA%\WinDefenders\min\miner.dll_part227
  • %APPDATA%\WinDefenders\min\miner.dll_part226
  • %APPDATA%\WinDefenders\min\miner.dll_part243
  • %APPDATA%\WinDefenders\min\miner.dll_part242
  • %APPDATA%\WinDefenders\min\miner.dll_part241
  • %APPDATA%\WinDefenders\min\miner.dll_part244
  • %APPDATA%\WinDefenders\min\miner.dll_part247
  • %APPDATA%\WinDefenders\min\miner.dll_part246
  • %APPDATA%\WinDefenders\min\miner.dll_part245
  • %APPDATA%\WinDefenders\min\miner.dll_part237
  • %APPDATA%\WinDefenders\min\miner.dll_part236
  • %APPDATA%\WinDefenders\min\miner.dll_part235
  • %APPDATA%\WinDefenders\min\miner.dll_part238
  • %APPDATA%\WinDefenders\min\miner.dll_part240
  • %APPDATA%\WinDefenders\min\miner.dll_part24
  • %APPDATA%\WinDefenders\min\miner.dll_part239
  • %APPDATA%\WinDefenders\min\miner.dll_part205
  • %APPDATA%\WinDefenders\min\miner.dll_part204
  • %APPDATA%\WinDefenders\min\miner.dll_part203
  • %APPDATA%\WinDefenders\min\miner.dll_part206
  • %APPDATA%\WinDefenders\min\miner.dll_part209
  • %APPDATA%\WinDefenders\min\miner.dll_part208
  • %APPDATA%\WinDefenders\min\miner.dll_part207
  • %APPDATA%\WinDefenders\min\miner.dll_part2
  • %APPDATA%\WinDefenders\min\miner.dll_part199
  • %APPDATA%\WinDefenders\min\miner.dll_part198
  • %APPDATA%\WinDefenders\min\miner.dll_part20
  • %APPDATA%\WinDefenders\min\miner.dll_part202
  • %APPDATA%\WinDefenders\min\miner.dll_part201
  • %APPDATA%\WinDefenders\min\miner.dll_part200
  • %APPDATA%\WinDefenders\min\miner.dll_part218
  • %APPDATA%\WinDefenders\min\miner.dll_part217
  • %APPDATA%\WinDefenders\min\miner.dll_part216
  • %APPDATA%\WinDefenders\min\miner.dll_part219
  • %APPDATA%\WinDefenders\min\miner.dll_part221
  • %APPDATA%\WinDefenders\min\miner.dll_part220
  • %APPDATA%\WinDefenders\min\miner.dll_part22
  • %APPDATA%\WinDefenders\min\miner.dll_part211
  • %APPDATA%\WinDefenders\min\miner.dll_part210
  • %APPDATA%\WinDefenders\min\miner.dll_part21
  • %APPDATA%\WinDefenders\min\miner.dll_part212
  • %APPDATA%\WinDefenders\min\miner.dll_part215
  • %APPDATA%\WinDefenders\min\miner.dll_part214
  • %APPDATA%\WinDefenders\min\miner.dll_part213
  • %APPDATA%\WinDefenders\min\miner.dll_part281
  • %APPDATA%\WinDefenders\min\miner.dll_part280
  • %APPDATA%\WinDefenders\min\miner.dll_part28
  • %APPDATA%\WinDefenders\min\miner.dll_part282
  • %APPDATA%\WinDefenders\min\miner.dll_part285
  • %APPDATA%\WinDefenders\min\miner.dll_part284
  • %APPDATA%\WinDefenders\min\miner.dll_part283
  • %APPDATA%\WinDefenders\min\miner.dll_part275
  • %APPDATA%\WinDefenders\min\miner.dll_part274
  • %APPDATA%\WinDefenders\min\miner.dll_part273
  • %APPDATA%\WinDefenders\min\miner.dll_part276
  • %APPDATA%\WinDefenders\min\miner.dll_part279
  • %APPDATA%\WinDefenders\min\miner.dll_part278
  • %APPDATA%\WinDefenders\min\miner.dll_part277
  • %APPDATA%\WinDefenders\min\miner.dll_part294
  • %APPDATA%\WinDefenders\min\miner.dll_part293
  • %APPDATA%\WinDefenders\min\miner.dll_part292
  • %APPDATA%\WinDefenders\min\miner.dll_part295
  • %APPDATA%\WinDefenders\min\miner.dll_part298
  • %APPDATA%\WinDefenders\min\miner.dll_part297
  • %APPDATA%\WinDefenders\min\miner.dll_part296
  • %APPDATA%\WinDefenders\min\miner.dll_part288
  • %APPDATA%\WinDefenders\min\miner.dll_part287
  • %APPDATA%\WinDefenders\min\miner.dll_part286
  • %APPDATA%\WinDefenders\min\miner.dll_part289
  • %APPDATA%\WinDefenders\min\miner.dll_part291
  • %APPDATA%\WinDefenders\min\miner.dll_part290
  • %APPDATA%\WinDefenders\min\miner.dll_part29
  • %APPDATA%\WinDefenders\min\miner.dll_part256
  • %APPDATA%\WinDefenders\min\miner.dll_part255
  • %APPDATA%\WinDefenders\min\miner.dll_part254
  • %APPDATA%\WinDefenders\min\miner.dll_part257
  • %APPDATA%\WinDefenders\min\miner.dll_part26
  • %APPDATA%\WinDefenders\min\miner.dll_part259
  • %APPDATA%\WinDefenders\min\miner.dll_part258
  • %APPDATA%\WinDefenders\min\miner.dll_part25
  • %APPDATA%\WinDefenders\min\miner.dll_part249
  • %APPDATA%\WinDefenders\min\miner.dll_part248
  • %APPDATA%\WinDefenders\min\miner.dll_part250
  • %APPDATA%\WinDefenders\min\miner.dll_part253
  • %APPDATA%\WinDefenders\min\miner.dll_part252
  • %APPDATA%\WinDefenders\min\miner.dll_part251
  • %APPDATA%\WinDefenders\min\miner.dll_part269
  • %APPDATA%\WinDefenders\min\miner.dll_part268
  • %APPDATA%\WinDefenders\min\miner.dll_part267
  • %APPDATA%\WinDefenders\min\miner.dll_part27
  • %APPDATA%\WinDefenders\min\miner.dll_part272
  • %APPDATA%\WinDefenders\min\miner.dll_part271
  • %APPDATA%\WinDefenders\min\miner.dll_part270
  • %APPDATA%\WinDefenders\min\miner.dll_part262
  • %APPDATA%\WinDefenders\min\miner.dll_part261
  • %APPDATA%\WinDefenders\min\miner.dll_part260
  • %APPDATA%\WinDefenders\min\miner.dll_part263
  • %APPDATA%\WinDefenders\min\miner.dll_part266
  • %APPDATA%\WinDefenders\min\miner.dll_part265
  • %APPDATA%\WinDefenders\min\miner.dll_part264
Sets the 'hidden' attribute to the following files:
  • %APPDATA%\WinDefenders\coinutil.dll
  • %APPDATA%\WinDefenders\usft_ext.exe.vbs
  • %APPDATA%\WinDefenders\kill.bat
  • %APPDATA%\WinDefenders\ftpcmd.bat
  • %APPDATA%\WinDefenders\phatk.ptx
  • %APPDATA%\WinDefenders\phatk.cl
  • %APPDATA%\WinDefenders\usft_ext.dll
  • %APPDATA%\WinDefenders\put.vbs
Moves the following files:
  • from %APPDATA%\WinDefenders\shel\shell.exe to %APPDATA%\WinDefenders\shell.exe
  • from %APPDATA%\WinDefenders\macro\macromedia.exe_part1 to %APPDATA%\WinDefenders\macro\macromedia.exe
  • from %APPDATA%\WinDefenders\macro\macromedia.exe to %APPDATA%\WinDefenders\macromedia.exe
  • from %APPDATA%\WinDefenders\min\miner.dll_part1 to %APPDATA%\WinDefenders\min\miner.dll
  • from %APPDATA%\WinDefenders\min\miner.dll to %APPDATA%\WinDefenders\miner.dll
  • from %APPDATA%\WinDefenders\shel\shell.exe_part1 to %APPDATA%\WinDefenders\shel\shell.exe
Network activity:
Connects to:
  • 'po##.50btc.com':8332
UDP:
  • DNS ASK po##.50btc.com
Miscellaneous:
Searches for the following windows:
  • ClassName: '' WindowName: ''
  • ClassName: 'Shell_TrayWnd' WindowName: ''
  • ClassName: 'EDIT' WindowName: ''

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android