La mia libreria
La mia libreria

+ Aggiungi alla libreria

Supporto
Supporto 24/7 | Regole per contattare

Richieste

Profile

Trojan.MulDrop5.33013

Aggiunto al database dei virus Dr.Web: 2014-06-08

La descrizione è stata aggiunta:

Technical Information

Malicious functions:
Creates and executes the following:
  • '<SYSTEM32>\GetGshi.exe'
  • '<SYSTEM32>\SetGshi.exe'
Modifies file system :
Creates the following files:
  • <SYSTEM32>\$GONGSI\userdata\zhuanyecp\06超短.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhuanyecp\07心态操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhuanyecp\04短线操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhuanyecp\05超短操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhuanyecp\08波段操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhiyecp\1资金指令.TPM
  • <SYSTEM32>\$GONGSI\userdata\zhiyecp\02心理博弈.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhuanyecp\09稳赚操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhiyecp\01成本博弈.TPT
  • <SYSTEM32>\$GONGSI\userdata\maixh\zen20.bmp
  • <SYSTEM32>\$GONGSI\userdata\maixh\jian20.bmp
  • <SYSTEM32>\$GONGSI\userdata\maixh\jian60.bmp
  • <SYSTEM32>\$GONGSI\userdata\maixh\zen60.bmp
  • <SYSTEM32>\$GONGSI\userdata\qihuo\0强庄背景.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhuanyecp\02选时选股.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhuanyecp\03中线操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhuanyecp\01市场分析.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhuanyecp\1资金指令.TPM
  • <SYSTEM32>\$GONGSI\userdata\zhiyecp\B5波段操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhiyecp\B6稳赚操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhiyecp\B3超短操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhiyecp\B4心态操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhiyecp\标准.TPM
  • <SYSTEM32>\$GONGSI\userdata\baocunsz\01市场分析.TPT
  • <SYSTEM32>\$GONGSI\userdata\baocunsz\1资金指令.TPM
  • <SYSTEM32>\$GONGSI\userdata\zhiyecp\标准.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhiyecp\投资评估.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhiyecp\05大盘指令.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhiyecp\06大盘资金.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhiyecp\03预测节奏.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhiyecp\04时间指令.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhiyecp\07板块资金.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhiyecp\B1中线操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhiyecp\B2短线操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhiyecp\08个股资金.TPT
  • <SYSTEM32>\$GONGSI\userdata\zhiyecp\A7◆███◆__.TPT
  • <SYSTEM32>\$GONGSI\userdata\maixh\zen30.bmp
  • <SYSTEM32>\$GONGSI\userdata\xuangu\1资金指令.TPM
  • <SYSTEM32>\$GONGSI\userdata\xuangu\0投资评估.TPT
  • <SYSTEM32>\$GONGSI\userdata\chigu\8稳赚训练2.TPT
  • <SYSTEM32>\$GONGSI\userdata\chigu\1资金指令.TPM
  • <SYSTEM32>\$GONGSI\userdata\cangxh\zj3.bmp
  • <SYSTEM32>\$GONGSI\userdata\cangxh\jian10.bmp
  • <SYSTEM32>\$GONGSI\userdata\cangxh\zen10.bmp
  • <SYSTEM32>\$GONGSI\userdata\cangxh\jian60.bmp
  • <SYSTEM32>\$GONGSI\userdata\cangxh\zen60.bmp
  • <SYSTEM32>\$GONGSI\userdata\chigu\1看大盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\chigu\2看50指数.TPT
  • <SYSTEM32>\$GONGSI\userdata\SELFN9.DTA
  • <SYSTEM32>\$GONGSI\userdata\chigu\9稳赚训练3.TPT
  • <SYSTEM32>\$GONGSI\userdata\chigu\3心态训练.TPT
  • <SYSTEM32>\$GONGSI\userdata\chigu\6波段训练3.TPT
  • <SYSTEM32>\$GONGSI\userdata\chigu\7稳赚训练1.TPT
  • <SYSTEM32>\$GONGSI\userdata\chigu\4波段训练1.TPT
  • <SYSTEM32>\$GONGSI\userdata\chigu\5波段训练2.TPT
  • <SYSTEM32>\$GONGSI\userdata\jiaxh\zj3.bmp
  • <SYSTEM32>\$GONGSI\userdata\jiaxh\zen20.bmp
  • <SYSTEM32>\$GONGSI\userdata\jiaxh\jian60.bmp
  • <SYSTEM32>\$GONGSI\userdata\jiaxh\zen10.bmp
  • <SYSTEM32>\$GONGSI\userdata\jiaxh\jian20.bmp
  • <SYSTEM32>\$GONGSI\userdata\maixh\jian10.bmp
  • <SYSTEM32>\$GONGSI\userdata\maixh\jian30.bmp
  • <SYSTEM32>\$GONGSI\userdata\maixh\zen10.bmp
  • <SYSTEM32>\$GONGSI\userdata\maixh\zj3.bmp
  • <SYSTEM32>\$GONGSI\userdata\cangxh\jian20.bmp
  • <SYSTEM32>\$GONGSI\userdata\cangxh\zen20.bmp
  • <SYSTEM32>\$GONGSI\userdata\cangxh\jian30.bmp
  • <SYSTEM32>\$GONGSI\userdata\cangxh\zen30.bmp
  • <SYSTEM32>\$GONGSI\userdata\cangxh\Thumbs.db
  • <SYSTEM32>\$GONGSI\userdata\jiaxh\jian10.bmp
  • <SYSTEM32>\$GONGSI\userdata\jiaxh\jian30.bmp
  • <SYSTEM32>\$GONGSI\userdata\jiaxh\zen30.bmp
  • <SYSTEM32>\$GONGSI\userdata\jiaxh\zen60.bmp
  • <SYSTEM32>\$GONGSI\userdata\SELF\A强庄超短.CEP
  • <SYSTEM32>\GetGshi.exe
  • <SYSTEM32>\$GONGSI\userdata\SELF\C超短2天.CEP
  • <SYSTEM32>\$GONGSI\userdata\SELF\D超短3天.CEP
  • <SYSTEM32>\qiang62.exe
  • <SYSTEM32>\mqdbfc2.exe
  • <SYSTEM32>\pjqzgpa.dll
  • <SYSTEM32>\qiang62.dll
  • <SYSTEM32>\mqdbfc2.dll
  • <SYSTEM32>\shezhi1.exe
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\②专业板块.WSP
  • <SYSTEM32>\$GONGSI\userdata\kongxink\09稳赚操盘.TPT
  • <SYSTEM32>\SetGshi.exe
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\③专业个股.WSP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\①专业大盘.WSP
  • <SYSTEM32>\$GONGSI\userdata\SELF\B超短1天.CEP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\④自选板块.WSP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\⑤自选个股.WSP
  • <SYSTEM32>\GetGsh1.exe
  • <SYSTEM32>\ZLTray.exe
  • <SYSTEM32>\zhiling02.dll
  • <SYSTEM32>\zhiling03.dll
  • <SYSTEM32>\shuibo.exe
  • <SYSTEM32>\DMDM.exe
  • <SYSTEM32>\LTFunc4.dll
  • <SYSTEM32>\WaterDll.dll
  • <SYSTEM32>\hnqiangz.exe
  • <SYSTEM32>\lqznyt4.exe
  • <SYSTEM32>\nqdbfc2.DLL
  • <SYSTEM32>\pjqzgpa.exe
  • <SYSTEM32>\lqznyt4.dll
  • <SYSTEM32>\m9bdfc2.dll
  • <SYSTEM32>\nqdbfc2.exe
  • <SYSTEM32>\zhiling01.dll
  • <SYSTEM32>\mqbdfc2.dll
  • <SYSTEM32>\mqbdfc2.exe
  • <SYSTEM32>\$GONGSI\userdata\kongxink\08波段操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\litik\03中线操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\litik\04短线操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\litik\1资金指令.TPM
  • <SYSTEM32>\$GONGSI\userdata\litik\02选时选股.TPT
  • <SYSTEM32>\$GONGSI\userdata\litik\05超短操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\litik\08波段操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\litik\09稳赚操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\litik\06超短.TPT
  • <SYSTEM32>\$GONGSI\userdata\litik\07心态操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\baocunsz\04短线操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\baocunsz\05超短操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\baocunsz\02选时选股.TPT
  • <SYSTEM32>\$GONGSI\userdata\baocunsz\03中线操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\baocunsz\06超短.TPT
  • <SYSTEM32>\$GONGSI\userdata\baocunsz\09稳赚操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\litik\01市场分析.TPT
  • <SYSTEM32>\$GONGSI\userdata\baocunsz\07心态操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\baocunsz\08波段操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\kongxink\1资金指令.TPM
  • <SYSTEM32>\$GONGSI\userdata\kongxink\02选时选股.TPT
  • <SYSTEM32>\$GONGSI\userdata\shixink\09稳赚操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\kongxink\01市场分析.TPT
  • <SYSTEM32>\$GONGSI\userdata\kongxink\03中线操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\kongxink\06超短.TPT
  • <SYSTEM32>\$GONGSI\userdata\kongxink\07心态操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\kongxink\04短线操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\kongxink\05超短操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\shixink\02选时选股.TPT
  • <SYSTEM32>\$GONGSI\userdata\shixink\03中线操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\shixink\01市场分析.TPT
  • <SYSTEM32>\$GONGSI\userdata\shixink\1资金指令.TPM
  • <SYSTEM32>\$GONGSI\userdata\shixink\04短线操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\shixink\07心态操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\shixink\08波段操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\shixink\05超短操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\shixink\06超短.TPT
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\逐笔成交.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\队列矩阵.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\盘口矩阵.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\逐笔交易.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\默认页面.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\index\分时成交.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\index\分时走势.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\index\全屏.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\index\分价表.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\分价表.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\分时成交.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\TOP综合.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\全屏.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\分时走势.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\成交统计.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\技术分析.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\基本资料.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\成交明细.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\成交明细.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\成交统计.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\分时走势.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\基本资料.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\技术分析.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\逐笔成交.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\队列矩阵.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\盘口矩阵.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\逐笔交易.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\index\技术分析.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\index\技术分析1.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\index\基本资料.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\index\成交明细.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\index\逐笔成交.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\分价表.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\分时成交.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sh\index\默认页面.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\全屏.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\SG\技术分析.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\hk\技术分析.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\hk\盘口矩阵.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\hk\成交明细.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\hk\成交统计.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\hk\逐笔交易.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\Public\分价表.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\Public\分时走势.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\hk\逐笔成交.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\hk\队列矩阵.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\DC\分时走势.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\DC\技术分析.SKV
  • <SYSTEM32>\Vsock28.vxd
  • <SYSTEM32>\$GONGSI\layout\指令专家\Thumbs.db
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\FI\分时走势.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\hk\分时走势.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\hk\基本资料.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\FI\技术分析.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\hk\分价表.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\Public\index\技术分析1.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\Public\index\逐笔成交.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\Public\index\成交明细.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\Public\index\技术分析.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\SC\分时走势.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\SF\技术分析.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\SG\分时走势.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\SC\技术分析.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\SF\分时走势.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\Public\技术分析.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\Public\逐笔成交.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\Public\基本资料.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\Public\成交明细.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\Public\默认页面.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\Public\index\分时走势.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\Public\index\基本资料.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\Public\index\三位一体.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\Public\index\分价表.SKV
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\DDE决策.WSP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\板块监控.WSP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\2持股系统.WSP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\3股指期货.WSP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\港股.WSP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\商品市场.WSP
  • <SYSTEM32>\$GONGSI\userdata\BMP\2.bmp
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\港股权证.WSP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\固定收益平台.WSP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\B持股系统.WSP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\A选股系统.WSP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\指令右看.WSP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\C股指期货.WSP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\主力实时监控.WSP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\★职业操盘.WSP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\1选股系统.WSP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\专业操盘1.WSP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\专业操盘2.WSP
  • <SYSTEM32>\$GONGSI\userdata\BMP\jian20.bmp
  • <SYSTEM32>\$GONGSI\userdata\BMP\jian30.bmp
  • <SYSTEM32>\$GONGSI\userdata\BMP\91119.bmp
  • <SYSTEM32>\$GONGSI\userdata\BMP\jian10.bmp
  • <SYSTEM32>\$GONGSI\userdata\BMP\jian60.bmp
  • <SYSTEM32>\$GONGSI\userdata\BMP\92.bmp
  • <SYSTEM32>\$GONGSI\userdata\BMP\91.bmp
  • <SYSTEM32>\$GONGSI\userdata\BMP\zen10.bmp
  • <SYSTEM32>\$GONGSI\userdata\BMP\Thumbs.db
  • <SYSTEM32>\$GONGSI\userdata\BMP\4.bmp
  • <SYSTEM32>\$GONGSI\userdata\BMP\5.bmp
  • <SYSTEM32>\$GONGSI\userdata\BMP\1.bmp
  • <SYSTEM32>\$GONGSI\userdata\BMP\3.bmp
  • <SYSTEM32>\$GONGSI\userdata\BMP\6.bmp
  • <SYSTEM32>\$GONGSI\userdata\BMP\zen60.bmp
  • <SYSTEM32>\$GONGSI\userdata\BMP\zj3.bmp
  • <SYSTEM32>\$GONGSI\userdata\BMP\zen20.bmp
  • <SYSTEM32>\$GONGSI\userdata\BMP\zen30.bmp
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\指令下看.WSP
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\ZC\技术分析.SKV
  • <SYSTEM32>\$GONGSI\Update\指令专家.FNC
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\index\默认页面.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\ZC\分时走势.SKV
  • <SYSTEM32>\$GONGSI\userdata\block\总之全部股票.BLK
  • <SYSTEM32>\$GONGSI\userdata\block\自选03深圳.BLK
  • <SYSTEM32>\$GONGSI\userdata\block\自选00板块.BLK
  • <SYSTEM32>\$GONGSI\userdata\block\自选01全部.BLK
  • <SYSTEM32>\$GONGSI\userdata\block\自选02上海.BLK
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\index\分价表.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\index\分时成交.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\默认页面.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\index\全屏.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\index\分时走势.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\index\技术分析.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\index\逐笔成交.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\index\基本资料.SKV
  • <SYSTEM32>\$GONGSI\layout\指令专家\StkView\sz\index\成交明细.SKV
  • <SYSTEM32>\$GONGSI\userdata\star\4市场全部股票.str
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\1大盘.WSP
  • <SYSTEM32>\$GONGSI\userdata\IndiTemp\08波段操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\IndiTemp\09稳赚操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\2板快.WSP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\指令左看.WSP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\指令上看.WSP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\3个股.WSP
  • <SYSTEM32>\$GONGSI\userdata\WorkSpace\指令专家.WSP
  • <SYSTEM32>\$GONGSI\userdata\IndiTemp\1资金指令.TPM
  • <SYSTEM32>\$GONGSI\userdata\IndiTemp\02选时选股.TPT
  • <SYSTEM32>\$GONGSI\userdata\block\自选00指数.BLK
  • <SYSTEM32>\$GONGSI\userdata\IndiTemp\01市场分析.TPT
  • <SYSTEM32>\$GONGSI\userdata\IndiTemp\03中线操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\IndiTemp\06超短.TPT
  • <SYSTEM32>\$GONGSI\userdata\IndiTemp\07心态操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\IndiTemp\04短线操盘.TPT
  • <SYSTEM32>\$GONGSI\userdata\IndiTemp\05超短操盘.TPT
Sets the 'hidden' attribute to the following files:
  • <SYSTEM32>\$GONGSI\userdata\cangxh\Thumbs.db
  • <SYSTEM32>\$GONGSI\userdata\BMP\Thumbs.db
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'
  • ClassName: 'EDIT' WindowName: '(null)'

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android