Защити созданное

Другие наши ресурсы

  • free.drweb.uz — бесплатные утилиты, плагины, информеры
  • av-desk.com — интернет-сервис для поставщиков услуг Dr.Web AV-Desk
  • curenet.drweb.uz — сетевая лечащая утилита Dr.Web CureNet!
  • www.drweb.uz/web-iq — ВебIQметр
Закрыть

Библиотека
Моя библиотека

Чтобы добавить ресурс в библиотеку, войдите в аккаунт.

+ Добавить в библиотеку

Ресурсов: -

Последний: -

Моя библиотека

Поиск

Поиск

Поддержка
Круглосуточная поддержка | Правила обращения

Напишите

Запрос через форму

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -
Создать новый запрос Частые вопросы

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

UZ

RU CN DE EN ES FR IT JP KZ UZ PL BY
Закрыть
Сервисы
Сканеры
Dr.Web vxCube
Демо
Экспертиза ВКИ
Вирусная библиотека
База знаний

Технологии

Термины

Обучение и просвещение

Мифы

Новости

Trojan.DownLoader25.12677

Добавлен в вирусную базу Dr.Web: 2017-07-25

Описание добавлено:

Technical Information

To ensure autorun and distribution:
Creates or modifies the following files:
  • %WINDIR%\Tasks\AupAvUpdate.job
  • %WINDIR%\Tasks\UninstallMonitor.job
Malicious functions:
Executes the following:
  • '<Current directory>\App\local\stubexe\0x873F8AF66346171C\checker.exe' 600 -INNO
  • '<Current directory>\App\local\stubexe\0xD67C4381631912A7\uninstaller.exe'
Modifies file system:
Creates the following files:
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Orange Defender@1.0.0.0\X86_Orange Defender@1.0.0.0.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Orange Defender@1.0.0.0\Orange Defender.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\x86_JR.Inno.Setup@1.0.0.0\x86_JR.Inno.Setup@1.0.0.0.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\x86_SampleCode.GetWindowsVersionInfo@1.0.0.0\SampleCode.GetWindowsVersionInfo.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Submitter@1.0.0.0\X86_Submitter@1.0.0.0.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Submitter@1.0.0.0\Submitter.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\x86_SampleCode.GetWindowsVersionInfo@1.0.0.0\x86_SampleCode.GetWindowsVersionInfo@1.0.0.0.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\x86_JR.Inno.Setup@1.0.0.0\JR.Inno.Setup.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_DriverMax@1.0.0.0\X86_DriverMax@1.0.0.0.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_DriverMax@1.0.0.0\DriverMax.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Advanced Uninstaller@1.0.0.0\X86_Advanced Uninstaller@1.0.0.0.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Health Check@1.0.0.0\Health Check.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_InnoUpdater@1.0.0.0\X86_InnoUpdater@1.0.0.0.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_InnoUpdater@1.0.0.0\InnoUpdater.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Health Check@1.0.0.0\X86_Health Check@1.0.0.0.manifest.__tmp__
  • <Current directory>\App\local\temp\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x4.mem
  • <Current directory>\App\local\meta\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x3.mem.__meta__.__tmp__
  • <Current directory>\App\local\temp\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x3.mem
  • <Current directory>\App\local\meta\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x4.mem.__meta__.__tmp__
  • <Current directory>\App\local\modified\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\ratings.txt
  • <Current directory>\App\local\meta\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\ratings.txt.__meta__.__tmp__
  • <Current directory>\App\local\temp\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\ratings.txt
  • <Current directory>\App\local\meta\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x2.mem.__meta__.__tmp__
  • <Current directory>\App\local\stubexe\0x873F8AF66346171C\checker.exe.__tmp__
  • <Current directory>\App\local\meta\@PROGRAMFILESX86@\Innovative Solutions\Advanced Uninstaller PRO\checker.exe.__meta__.__tmp__
  • <Current directory>\App\local\temp\@PROGRAMFILESX86@\Innovative Solutions\Advanced Uninstaller PRO\checker.exe
  • <Current directory>\App\local\stubexe\0x873F8AF66346171C\checker.exe.manifest.__tmp__
  • <Current directory>\App\local\temp\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x2.mem
  • <Current directory>\App\local\meta\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x1.mem.__meta__.__tmp__
  • <Current directory>\App\local\temp\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x1.mem
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Advanced Uninstaller@1.0.0.0\Advanced Uninstaller.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\checker.exe_0x6935c90577aebb18da67b596582d661a.1.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\avupdate.exe_0xb8411a477c0b80a00eb14dbc406901a2.1.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\avgio.dll_0x22ae68839fd7710cee4187f359d7842b.2.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\explorer.exe_0x3b87d94fc6feee17231d9e7b02c89a07.1.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\innoupd.exe_0xfb733b706c65f402f720d9bf0d26509a.1.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\innoupd.exe_0x637b76ed0526803b474c276491d0567b.1.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\healthcheck.exe_0xa49bd0daa9a1055d30704cb9c2618dc6.1.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\adv_lib.exe_0x2fd2143c49fda109f2788d6eda5ad107.1.manifest.__tmp__
  • <Current directory>\App\local\meta\@PROGRAMFILESX86@\Innovative Solutions\Advanced Uninstaller PRO\uninstaller.exe.__meta__.__tmp__
  • <Current directory>\App\local\temp\@PROGRAMFILESX86@\Innovative Solutions\Advanced Uninstaller PRO\uninstaller.exe
  • <Current directory>\App\xsandbox.bin.__tmp__
  • <Current directory>\App\local\stubexe\0xD67C4381631912A7\uninstaller.exe.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\_OpenVPN.GUI.Manifest@1.0.0.0\OpenVPN.GUI.Manifest.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\_OpenVPN.GUI.Manifest@1.0.0.0\_OpenVPN.GUI.Manifest@1.0.0.0.manifest.__tmp__
  • <Current directory>\App\local\stubexe\0xD67C4381631912A7\uninstaller.exe.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\uninstaller.exe_0xef9e0b8b0c36ca2e987dd46aa9237355.1.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\unins000.exe_0xdaa04def0bd92e4c5839883049e1ac8d.1.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\unins000.exe_0x3e48d32fca25227840bce192002a7570.1.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Advanced Uninstaller - Installation Monitor@1.0.0.0\Advanced Uninstaller - Installation Monitor.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Advanced Uninstaller PRO@1.0.0.0\X86_Advanced Uninstaller PRO@1.0.0.0.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Advanced Uninstaller PRO@1.0.0.0\Advanced Uninstaller PRO.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Advanced Uninstaller - Installation Monitor@1.0.0.0\X86_Advanced Uninstaller - Installation Monitor@1.0.0.0.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\stop_aup.exe_0x07983f21794141ae44da4079eb6084da.1.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\openvpn-gui.exe_0xd60536a568fcfdbdf5ffc46c1e22e7fc.1.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\openvpn-gui.exe_0x630848199728ce60db0c49906306a902.1.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\Monitor.exe_0x4e1e1d219fe913ad7734bf48b7bbfdee.1.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\orangedefender.exe_0x4c6b7d23e74f792b80843d8daf7c9003.1.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\stop_all.exe_0x2a702a19dc60c72fd20a71a5ec4606a4.1.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\servpc.exe_0x14faf30493c68088fa070972a5741f4d.1.manifest.__tmp__
  • %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\sd_inst.exe_0xff92ed9412469f30a27659782b271d8c.1.manifest.__tmp__
Deletes the following files:
  • <Current directory>\App\local\meta\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x3.mem.__meta__
  • <Current directory>\App\local\modified\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x3.mem
  • <Current directory>\App\local\meta\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x4.mem.__meta__
  • <Current directory>\App\local\modified\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x4.mem
  • <Current directory>\App\local\meta\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x1.mem.__meta__
  • <Current directory>\App\local\modified\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x1.mem
  • <Current directory>\App\local\meta\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x2.mem.__meta__
  • <Current directory>\App\local\modified\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x2.mem
Moves the following files:
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Orange Defender@1.0.0.0\Orange Defender.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Orange Defender@1.0.0.0\Orange Defender.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\x86_JR.Inno.Setup@1.0.0.0\x86_JR.Inno.Setup@1.0.0.0.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\x86_JR.Inno.Setup@1.0.0.0\x86_JR.Inno.Setup@1.0.0.0.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\x86_JR.Inno.Setup@1.0.0.0\JR.Inno.Setup.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\x86_JR.Inno.Setup@1.0.0.0\JR.Inno.Setup.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Orange Defender@1.0.0.0\X86_Orange Defender@1.0.0.0.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Orange Defender@1.0.0.0\X86_Orange Defender@1.0.0.0.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Submitter@1.0.0.0\Submitter.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Submitter@1.0.0.0\Submitter.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\x86_SampleCode.GetWindowsVersionInfo@1.0.0.0\x86_SampleCode.GetWindowsVersionInfo@1.0.0.0.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\x86_SampleCode.GetWindowsVersionInfo@1.0.0.0\x86_SampleCode.GetWindowsVersionInfo@1.0.0.0.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\x86_SampleCode.GetWindowsVersionInfo@1.0.0.0\SampleCode.GetWindowsVersionInfo.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\x86_SampleCode.GetWindowsVersionInfo@1.0.0.0\SampleCode.GetWindowsVersionInfo.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_InnoUpdater@1.0.0.0\X86_InnoUpdater@1.0.0.0.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_InnoUpdater@1.0.0.0\X86_InnoUpdater@1.0.0.0.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_DriverMax@1.0.0.0\DriverMax.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_DriverMax@1.0.0.0\DriverMax.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Advanced Uninstaller@1.0.0.0\X86_Advanced Uninstaller@1.0.0.0.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Advanced Uninstaller@1.0.0.0\X86_Advanced Uninstaller@1.0.0.0.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Advanced Uninstaller@1.0.0.0\Advanced Uninstaller.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Advanced Uninstaller@1.0.0.0\Advanced Uninstaller.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_DriverMax@1.0.0.0\X86_DriverMax@1.0.0.0.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_DriverMax@1.0.0.0\X86_DriverMax@1.0.0.0.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_InnoUpdater@1.0.0.0\InnoUpdater.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_InnoUpdater@1.0.0.0\InnoUpdater.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Health Check@1.0.0.0\X86_Health Check@1.0.0.0.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Health Check@1.0.0.0\X86_Health Check@1.0.0.0.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Health Check@1.0.0.0\Health Check.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Health Check@1.0.0.0\Health Check.manifest
  • from <Current directory>\App\local\meta\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x3.mem.__meta__.__tmp__ to <Current directory>\App\local\meta\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x3.mem.__meta__
  • from <Current directory>\App\local\temp\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x3.mem to <Current directory>\App\local\modified\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x3.mem
  • from <Current directory>\App\local\meta\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x2.mem.__meta__.__tmp__ to <Current directory>\App\local\meta\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x2.mem.__meta__
  • from <Current directory>\App\local\temp\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x4.mem to <Current directory>\App\local\modified\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x4.mem
  • from <Current directory>\App\local\meta\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\ratings.txt.__meta__.__tmp__ to <Current directory>\App\local\meta\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\ratings.txt.__meta__
  • from <Current directory>\App\local\temp\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\ratings.txt to <Current directory>\App\local\modified\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\ratings.txt
  • from <Current directory>\App\local\meta\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x4.mem.__meta__.__tmp__ to <Current directory>\App\local\meta\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x4.mem.__meta__
  • from <Current directory>\App\local\temp\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x2.mem to <Current directory>\App\local\modified\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x2.mem
  • from <Current directory>\App\local\meta\@PROGRAMFILESX86@\Innovative Solutions\Advanced Uninstaller PRO\checker.exe.__meta__.__tmp__ to <Current directory>\App\local\meta\@PROGRAMFILESX86@\Innovative Solutions\Advanced Uninstaller PRO\checker.exe.__meta__
  • from <Current directory>\App\local\temp\@PROGRAMFILESX86@\Innovative Solutions\Advanced Uninstaller PRO\checker.exe to <Current directory>\App\local\modified\@PROGRAMFILESX86@\Innovative Solutions\Advanced Uninstaller PRO\checker.exe
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Submitter@1.0.0.0\X86_Submitter@1.0.0.0.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Submitter@1.0.0.0\X86_Submitter@1.0.0.0.manifest
  • from <Current directory>\App\local\stubexe\0x873F8AF66346171C\checker.exe.__tmp__ to <Current directory>\App\local\stubexe\0x873F8AF66346171C\checker.exe
  • from <Current directory>\App\local\meta\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x1.mem.__meta__.__tmp__ to <Current directory>\App\local\meta\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x1.mem.__meta__
  • from <Current directory>\App\local\temp\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x1.mem to <Current directory>\App\local\modified\@APPDATALOCAL@\Innovative Solutions\Advanced Uninstaller PRO\x1.mem
  • from <Current directory>\App\local\stubexe\0x873F8AF66346171C\checker.exe.manifest.__tmp__ to <Current directory>\App\local\stubexe\0x873F8AF66346171C\checker.exe.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\checker.exe_0x6935c90577aebb18da67b596582d661a.1.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\checker.exe_0x6935c90577aebb18da67b596582d661a.1.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\avupdate.exe_0xb8411a477c0b80a00eb14dbc406901a2.1.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\avupdate.exe_0xb8411a477c0b80a00eb14dbc406901a2.1.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\avgio.dll_0x22ae68839fd7710cee4187f359d7842b.2.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\avgio.dll_0x22ae68839fd7710cee4187f359d7842b.2.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\explorer.exe_0x3b87d94fc6feee17231d9e7b02c89a07.1.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\explorer.exe_0x3b87d94fc6feee17231d9e7b02c89a07.1.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\innoupd.exe_0xfb733b706c65f402f720d9bf0d26509a.1.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\innoupd.exe_0xfb733b706c65f402f720d9bf0d26509a.1.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\innoupd.exe_0x637b76ed0526803b474c276491d0567b.1.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\innoupd.exe_0x637b76ed0526803b474c276491d0567b.1.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\healthcheck.exe_0xa49bd0daa9a1055d30704cb9c2618dc6.1.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\healthcheck.exe_0xa49bd0daa9a1055d30704cb9c2618dc6.1.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\adv_lib.exe_0x2fd2143c49fda109f2788d6eda5ad107.1.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\adv_lib.exe_0x2fd2143c49fda109f2788d6eda5ad107.1.manifest
  • from <Current directory>\App\local\meta\@PROGRAMFILESX86@\Innovative Solutions\Advanced Uninstaller PRO\uninstaller.exe.__meta__.__tmp__ to <Current directory>\App\local\meta\@PROGRAMFILESX86@\Innovative Solutions\Advanced Uninstaller PRO\uninstaller.exe.__meta__
  • from <Current directory>\App\local\temp\@PROGRAMFILESX86@\Innovative Solutions\Advanced Uninstaller PRO\uninstaller.exe to <Current directory>\App\local\modified\@PROGRAMFILESX86@\Innovative Solutions\Advanced Uninstaller PRO\uninstaller.exe
  • from <Current directory>\App\xsandbox.bin.__tmp__ to <Current directory>\App\xsandbox.bin
  • from <Current directory>\App\local\stubexe\0xD67C4381631912A7\uninstaller.exe.__tmp__ to <Current directory>\App\local\stubexe\0xD67C4381631912A7\uninstaller.exe
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\_OpenVPN.GUI.Manifest@1.0.0.0\OpenVPN.GUI.Manifest.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\_OpenVPN.GUI.Manifest@1.0.0.0\OpenVPN.GUI.Manifest.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\_OpenVPN.GUI.Manifest@1.0.0.0\_OpenVPN.GUI.Manifest@1.0.0.0.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\_OpenVPN.GUI.Manifest@1.0.0.0\_OpenVPN.GUI.Manifest@1.0.0.0.manifest
  • from <Current directory>\App\local\stubexe\0xD67C4381631912A7\uninstaller.exe.manifest.__tmp__ to <Current directory>\App\local\stubexe\0xD67C4381631912A7\uninstaller.exe.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\uninstaller.exe_0xef9e0b8b0c36ca2e987dd46aa9237355.1.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\uninstaller.exe_0xef9e0b8b0c36ca2e987dd46aa9237355.1.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\unins000.exe_0xdaa04def0bd92e4c5839883049e1ac8d.1.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\unins000.exe_0xdaa04def0bd92e4c5839883049e1ac8d.1.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\unins000.exe_0x3e48d32fca25227840bce192002a7570.1.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\unins000.exe_0x3e48d32fca25227840bce192002a7570.1.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Advanced Uninstaller - Installation Monitor@1.0.0.0\Advanced Uninstaller - Installation Monitor.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Advanced Uninstaller - Installation Monitor@1.0.0.0\Advanced Uninstaller - Installation Monitor.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Advanced Uninstaller PRO@1.0.0.0\X86_Advanced Uninstaller PRO@1.0.0.0.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Advanced Uninstaller PRO@1.0.0.0\X86_Advanced Uninstaller PRO@1.0.0.0.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Advanced Uninstaller PRO@1.0.0.0\Advanced Uninstaller PRO.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Advanced Uninstaller PRO@1.0.0.0\Advanced Uninstaller PRO.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Advanced Uninstaller - Installation Monitor@1.0.0.0\X86_Advanced Uninstaller - Installation Monitor@1.0.0.0.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\X86_Advanced Uninstaller - Installation Monitor@1.0.0.0\X86_Advanced Uninstaller - Installation Monitor@1.0.0.0.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\stop_aup.exe_0x07983f21794141ae44da4079eb6084da.1.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\stop_aup.exe_0x07983f21794141ae44da4079eb6084da.1.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\openvpn-gui.exe_0xd60536a568fcfdbdf5ffc46c1e22e7fc.1.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\openvpn-gui.exe_0xd60536a568fcfdbdf5ffc46c1e22e7fc.1.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\openvpn-gui.exe_0x630848199728ce60db0c49906306a902.1.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\openvpn-gui.exe_0x630848199728ce60db0c49906306a902.1.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\Monitor.exe_0x4e1e1d219fe913ad7734bf48b7bbfdee.1.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\Monitor.exe_0x4e1e1d219fe913ad7734bf48b7bbfdee.1.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\orangedefender.exe_0x4c6b7d23e74f792b80843d8daf7c9003.1.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\orangedefender.exe_0x4c6b7d23e74f792b80843d8daf7c9003.1.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\stop_all.exe_0x2a702a19dc60c72fd20a71a5ec4606a4.1.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\stop_all.exe_0x2a702a19dc60c72fd20a71a5ec4606a4.1.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\servpc.exe_0x14faf30493c68088fa070972a5741f4d.1.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\servpc.exe_0x14faf30493c68088fa070972a5741f4d.1.manifest
  • from %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\sd_inst.exe_0xff92ed9412469f30a27659782b271d8c.1.manifest.__tmp__ to %TEMP%\SPOON\CACHE\0xE81C7361DE9808B8\sxs\Manifests\sd_inst.exe_0xff92ed9412469f30a27659782b271d8c.1.manifest
Network activity:
Connects to:
  • 'st###.spoon.net':443
  • 'in###iles.com':80
  • 'bi##.#ikimedia.org':443
  • 'www.ad#####duninstaller.com':80
  • 'www.go#####analytics.com':80
  • 'www.in####tive-sol.com':80
TCP:
HTTP GET requests:
  • http:///soft/uninstaller/_update_aup.xml via in###iles.com
  • http://www.ad#####duninstaller.com/app-info/config/v6/?ve##############################
  • http://www.ad#####duninstaller.com/promo8//Other%20websites/_v3.xml
  • http://www.in####tive-sol.com/in_app_offer/aup/offer12.xml
HTTP POST requests:
  • http://www.go#####analytics.com/collect
UDP:
  • DNS ASK st###.spoon.net
  • DNS ASK in###iles.com
  • DNS ASK bi##.#ikimedia.org
  • DNS ASK www.ad#####duninstaller.com
  • DNS ASK www.go#####analytics.com
  • DNS ASK www.in####tive-sol.com
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: ''

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Демо бесплатно

 

Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

Демо бесплатно

 

Скачать Dr.Web

По серийному номеру

Скачать Dr.Web с Apple Store

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Демо бесплатно

 

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке

Скачать с сайта
Скачать с Google Play