PER UTENTI

Chiudi

La mia libreria
La mia libreria

+ Aggiungi alla libreria

Ricerca
Ricerca

Supporto
Supporto 24/7 | Regole per contattare

Scrivi

Una richiesta attraverso il modulo

Chiama

+7 (495) 789-45-86

Forum

Richieste

Crea nuova richiesta

Chiama

+7 (495) 789-45-86

Profile

IT

RU CN DE EN ES FR IT JP KZ UZ PL BY
Chiudi
Servizi
Scanner
Dr.Web vxCube
Versione di prova
Perizia di incidenti informatici legati ai virus
Libreria dei virus
Base di conoscenza

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Notizie

Trojan.PWS.Marcos.38

Aggiunto al database dei virus Dr.Web: 2013-10-10

La descrizione è stata aggiunta:

Technical Information

To ensure autorun and distribution:
Modifies the following registry keys:
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ActMovie32.exe' = '<SYSTEM32>\ActMovie32.exe'
Malicious functions:
Creates and executes the following:
  • '<SYSTEM32>\ActMovie32.exe'
Modifies file system :
Creates the following files:
  • <SYSTEM32>\ActMovie32.exe
Miscellaneous:
Searches for the following windows:
  • ClassName: '(null)' WindowName: 'Bancard | Administradora y Procesadora de Tarjetas de Cr?dito y D?bito - Microsoft Internet Explore'
  • ClassName: '(null)' WindowName: 'Abogacia del Tesoro - Bienvenidos a nuestro sitio! - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'BBVA - Paraguay - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Welcome to ABN AMRO - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Sudameris Paraguay - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Continental S.A.E.C.A. - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'http://bancoamambay.com.py/inicio.html - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'http://www.bancoregional.com.py - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'http://www.bancoregional.com.py/ - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Portugu?s de Neg?cios - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Santander NetB@nco - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'BCV - Banco de Cabo Verde - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Totta Netb@nco - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: '..:: Banif.pt - Bem vindo ::.. - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Bancu BPH - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'BBVA - BBVANet - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Millennium bcp - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco de Portugal - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Citibank - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Macro Bansud - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: '.: BANCO PATAGONIA :. - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Home BankBoston - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Suqu?a - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Ita? Buen Ayre - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banca Nazionale del Lavoro - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Ciudad de Buenos Aires - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: '.:: Banco De La Naci?n Argentina ::. - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'ABN AMRO Argentina - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Onapb Ertvbany qr Phlb - Zvpebfbsg Vagrearg Rkcybere'
  • ClassName: '(null)' WindowName: 'www.bancochubut.com.ar | Banco del Chubut S.A. - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: '-INTERBANCO S.A.- - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Onapb Fhdh?n - Zvpebfbsg Vagrearg Rkcybere'
  • ClassName: '(null)' WindowName: 'Bank of America | Home | Personal - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco RIO - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Welcome to Citibank - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'HSBC GROUP Home - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Comafi - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Grupo Safra S.A. - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: 'Ita? - Banco 479 - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco BGN S.A - Home - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: 'BANESTES | Sempre perto de voc? - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Indusval S.A. - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: 'BNP Paribas - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: 'Alfa Net - Site [Home page] - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: ':: BICBANCO :: - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: 'Nordeste Eletr?nico - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: 'T I M - D S F W E B - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: '[Banco da Amaz?nia] - Windows Internet Explorer'
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'
  • ClassName: '(null)' WindowName: 'Gerenciador Financeiro - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: ':: Bem-vindo ao Banco J. Safra :: - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: '[ BEP - Banco do Estado do Piau? ] - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco CNH Capital - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: '.: Banco Cruzeiro do Sul :. - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: 'BRP - Banco Ribeir?o Preto - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Fibra Internet Banking - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Invest > Home Page - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Cetelem-O seu cr?dito ao consumo - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Santander Banespa - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: 'T I M - D S F W E B - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Citibank Portugal - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'BBVA Portugal - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'A melhor Curretagem Online - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Barclays Bank - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Finantia - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: ':. Tribanco - O banco que investe no varejo - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Sudameris S.A. - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Luso Brasileiro S.A. - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banese - O Banco de Sergipe - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: 'Mercantil do Brasil - Compromisso com voc?. - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banparanet - O Banco do Estado do Par? na Internet. - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: '[bb.com.br] - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: 'Bem-vindo ao Citibank Brasil - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: 'Internet Banking CAIXA - Windows Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Credicoop Coop. Ltdo. - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Ita? - Banco 479 - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Indusval S.A. - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'BANESTES | Sempre perto de voc? - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Grupo Safra S.A. - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: ':: BICBANCO :: - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Alfa Net - Site [Home page] - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Fibra Internet Banking - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Nordeste Eletr?nico - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'BNP Paribas - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: '[Banco da Amaz?nia] - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: ':: Bem-vindo ao Banco J. Safra :: - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Caixa Econ?mica Federal - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Gerenciador Financeiro - Mozilla Firefox'
  • ClassName: '(null)' WindowName: '.: Banco Cruzeiro do Sul :. - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco CNH Capital - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco BGN S.A - Home - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'BRP - Banco Ribeir?o Preto - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: '[ BEP - Banco do Estado do Piau? ] - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Luso Brasileiro S.A. - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Santander - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Rural - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Santander Banespa# - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banespa - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'BESC - Banco do Estado de Santa Catarina - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Gerenciador Financeiro - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'PuTTY Configuration'
  • ClassName: '(null)' WindowName: 'Portal Internet Banrisul - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Caixa Econ?mica Federal - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco Sudameris S.A. - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Mercantil do Brasil - Compromisso com voc?. - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banese - O Banco de Sergipe - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: ':. Tribanco - O banco que investe no varejo - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Bem-vindo ao Citibank Brasil - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: '[bb.com.br] - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Santander Banespa - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Internet Banking CAIXA - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banparanet - O Banco do Estado do Par? na Internet. - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco BGN S.A - Home - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'BANESTES | Sempre perto de voc? - Mozilla Firefox'
  • ClassName: '(null)' WindowName: '[ BEP - Banco do Estado do Piau? ] - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Banco CNH Capital - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Grupo Safra S.A. - Mozilla Firefox'
  • ClassName: '(null)' WindowName: ':: BICBANCO :: - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Nordeste Eletr?nico - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Ita? - Banco 479 - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Banco Indusval S.A. - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Banco Hipotecario - Home - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: '-- BBVA Banco Franc?s -- - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco de la Provincia de Buenos Aires - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'Banco de La Pampa - Microsoft Internet Explorer'
  • ClassName: '(null)' WindowName: 'T I M - D S F W E B - Mozilla Firefox'
  • ClassName: '(null)' WindowName: '.: Banco Cruzeiro do Sul :. - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'BRP - Banco Ribeir?o Preto - Mozilla Firefox'
  • ClassName: '(null)' WindowName: '[Banco da Amaz?nia] - Mozilla Firefox'
  • ClassName: '(null)' WindowName: ':: Bem-vindo ao Banco J. Safra :: - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'BNP Paribas - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'BEC - Banco do Estado do Cear? - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Santander Banespa - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Banparanet - O Banco do Estado do Par? na Internet. - Mozilla Firefox'
  • ClassName: '(null)' WindowName: '[bb.com.br] - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Santander Banespa# - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Banco Rural - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Portal Internet Banrisul - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Banespa - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Banco Santander - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Banco Luso Brasileiro S.A. - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Banese - O Banco de Sergipe - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Alfa Net - Site [Home page] - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Banco Fibra Internet Banking - Mozilla Firefox'
  • ClassName: '(null)' WindowName: ':. Tribanco - O banco que investe no varejo - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Bem-vindo ao Citibank Brasil - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Internet Banking CAIXA - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Banco Sudameris S.A. - Mozilla Firefox'
  • ClassName: '(null)' WindowName: 'Mercantil do Brasil - Compromisso com voc?. - Mozilla Firefox'

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Free trial

 

Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

Free trial

 

Download Dr.Web

Download by serial number

Download on App Store

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

 

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android

Free trial

14 days

Download now
Get it on Google Play