Защити созданное

Другие наши ресурсы

  • free.drweb.uz — бесплатные утилиты, плагины, информеры
  • av-desk.com — интернет-сервис для поставщиков услуг Dr.Web AV-Desk
  • curenet.drweb.uz — сетевая лечащая утилита Dr.Web CureNet!
  • www.drweb.uz/web-iq — ВебIQметр
Закрыть

Библиотека
Моя библиотека

Чтобы добавить ресурс в библиотеку, войдите в аккаунт.

+ Добавить в библиотеку

Ресурсов: -

Последний: -

Моя библиотека

Поиск

Поиск

Поддержка
Круглосуточная поддержка | Правила обращения

Напишите

Запрос через форму

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -
Создать новый запрос Частые вопросы

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

UZ

RU CN DE EN ES FR IT JP KZ UZ PL BY
Закрыть
Сервисы
Сканеры
Dr.Web vxCube
Демо
Экспертиза ВКИ
Вирусная библиотека
База знаний

Технологии

Термины

Обучение и просвещение

Мифы

Новости

Trojan.DownLoad3.28370

Добавлен в вирусную базу Dr.Web: 2013-09-02

Описание добавлено:

Technical Information

To ensure autorun and distribution:
Modifies the following registry keys:
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11591' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21596' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '18232' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20373' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5562' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5824' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '18014' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4994' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12771' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26096' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9756' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '16746' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8621' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21204' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5780' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31732' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15960' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25310' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21989' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3727' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27800' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30247' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '1935' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '712' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30553' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '275' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11110' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9494' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17140' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31864' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26533' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15392' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6130' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24174' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '32126' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20984' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9363' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20766' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31033' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '7528' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12814' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6435' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21334' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12465' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27276' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27669' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13382' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9406' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19368' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '1062' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '18057' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13426' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21159' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21946' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24392' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15698' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14300' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3464' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15916' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27713' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27145' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14212' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5518' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10892' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4863' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8926' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5736' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11198' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2634' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '16878' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19980' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24698' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '12421' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26446' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '18101' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3028' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '32257' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22034' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2591' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17970' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21422' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20810' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3553' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10324' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22645' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3072' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20941' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28630' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27320' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22689' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13994' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21465' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8052' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15785' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '29592' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26796' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '29024' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '32519' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8795' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31208' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28019' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4033' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15741' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3946' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28281' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10455' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5343' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '7834' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21902' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8270' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13470' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6654' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '18669' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13120' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9538' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17271' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17489' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27538' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25572' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27931' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26227' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6392' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14344' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10411' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '57' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10805' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14563' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6174' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30160' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10849' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5431' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9581' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20635' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '7790' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31602' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20547' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22994' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30946' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21509' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '16398' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '18494' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14912' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '800' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8664' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '16354' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '1979' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6611' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28762' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24234' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28063' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13077' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '26534' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13950' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '32300' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11504' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '18188' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13601' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28325' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13164' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22121' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '1018' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6305' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '23534' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '16790' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9931' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '931' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20854' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '31951' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13819' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '18538' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17314' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '1848' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '16659' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17227' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19106' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28718' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5300' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10586' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28062' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '29111' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24873' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '1717' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '18276' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '1149' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28194' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4732' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3508' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '16834' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27975' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14562' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9450' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21683' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '15261' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14780' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5825' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14737' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10674' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20460' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3203' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27364' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30203' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2547' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9232' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '7615' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '5911' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21160' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6086' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25528' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '17402' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2460' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '27888' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '25791' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6523' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24830' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '14824' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9800' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3858' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '30684' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21421' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3290' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '21727' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '19324' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '24523' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22907' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '18756' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '10630' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22820' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '28106' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2110' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '11460' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2765' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8445' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '6173' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '2984' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8839' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '8139' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '29810' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3770' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '9057' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '18887' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '22776' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '4164' = '<Full path to virus>'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '13' = '<Full path to virus>'
Malicious functions:
To bypass firewall, removes or modifies the following registry keys:
  • [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'EnableFirewall' = '00000000'
Creates and executes the following:
  • 'C:\lsass.exe' /pid=196
  • 'C:\lsass.exe' /pid=3556
  • 'C:\lsass.exe' /pid=728
  • 'C:\lsass.exe' /pid=2884
  • 'C:\lsass.exe' /pid=3064
  • 'C:\lsass.exe' /pid=2940
  • 'C:\lsass.exe' /pid=3648
  • 'C:\lsass.exe' /pid=332
  • 'C:\lsass.exe' /pid=3424
  • 'C:\lsass.exe' /pid=3780
  • 'C:\lsass.exe' /pid=3716
  • 'C:\lsass.exe' /pid=1392
  • 'C:\lsass.exe' /pid=3560
  • 'C:\lsass.exe' exe <Full path to virus>
  • 'C:\lsass.exe' /pid=2068
  • 'C:\lsass.exe' /pid=3728
  • 'C:\lsass.exe' /pid=4032
  • 'C:\lsass.exe' /pid=2656
  • 'C:\lsass.exe' -x -s 1112
  • 'C:\lsass.exe' /pid=2712
Injects code into
the following system processes:
  • <SYSTEM32>\drwtsn32.exe
Hides the following processes:
  • C:\lsass.exe
Modifies file system :
Creates the following files:
  • %TEMP%\509BB.dmp
  • C:\lsass.exe
Network activity:
Connects to:
  • '94.##3.64.232':3128
  • '83.##.248.27':3128
  • '20#.#08.151.226':3128
  • '83.#.58.37':3128
  • '61.#.20.9':3128
  • '82.##5.60.11':3128
  • '59.##.243.118':3128
  • '41.##9.34.60':3128
  • '78.##.158.180':3128
  • '18#.#27.129.97':3128
  • '59.##.128.180':3128
  • '83.#0.32.1':3128
  • '11#.#4.24.192':3128
  • '82.##6.163.238':3128
  • '19#.#29.223.27':3128
  • '83.#0.46.40':3128
  • '86.##.123.35':3128
  • '22#.#04.2.156':3128
  • '84.##5.190.121':3128
  • '61.##.198.151':3128
  • '12#.#68.46.56':3128
  • '20#.#65.110.106':3128
  • '58.##0.93.153':3128
  • '21#.#1.10.178':3128
  • '95.##2.211.216':3128
  • '85.##8.120.133':3128
  • '19#.#83.111.223':3128
  • '83.##.75.213':3128
  • '18#.#95.35.67':3128
  • '62.##.146.223':3128
  • '86.##.121.166':3128
  • '78.##1.180.250':3128
  • '82.##7.152.108':3128
  • '20#.#0.29.245':3128
  • '12#.#41.147.103':3128
  • '79.##3.237.165':3128
  • '21#.#19.194.130':3128
  • '21#.#93.223.7':3128
  • '12#.#4.166.173':3128
  • '93.##3.231.214':3128
  • '21#.#88.82.205':3128
  • '89.##2.101.25':3128
  • '89.##5.246.91':3128
  • '81.##.193.206':3128
  • '83.#0.46.17':3128
  • '62.##1.251.100':3128
  • '78.##7.176.108':3128
  • '86.##3.234.133':3128
  • '79.##3.57.22':3128
  • '85.##7.158.138':3128
  • '19#.#19.167.114':3128
  • '82.##.205.50':3128
  • '88.##9.54.134':3128
  • '82.##2.63.130':3128
  • '83.##.66.136':3128
  • '87.#.234.114':3128
  • '19#.#13.144.187':3128
  • '77.##0.218.213':3128
  • '95.##5.240.176':3128
  • '82.##.198.203':3128
  • '20#.#1.219.94':3128
  • '17#.#8.4.115':3128
  • '18#.#2.178.92':3128
  • '94.##9.103.23':3128
  • '18#.#22.201.175':3128
  • '82.##.174.180':3128
  • '11#.#54.222.170':3128
  • '89.##2.110.12':3128
  • '59.##8.36.157':3128
  • '95.#3.0.230':3128
  • '78.##.241.204':3128
  • '21#.#35.175.244':3128
  • '78.##.230.97':3128
  • '20#.#52.63.37':3128
  • '78.##.207.39':3128
  • '18#.#95.37.171':3128
  • '89.##7.75.85':3128
  • '22#.#65.9.203':3128
  • '82.##7.100.20':3128
  • '21#.#0.133.128':3128
  • '94.##9.236.60':3128
  • '89.##8.8.238':3128
  • '59.##.210.80':3128
  • '21#.#16.154.231':3128
  • '12#.#68.7.25':3128
  • '78.##.169.196':3128
  • '92.##9.18.216':3128
  • '62.##3.38.134':3128
  • '87.##.190.247':3128
  • '93.##.14.187':3128
  • '22#.#9.16.77':3128
  • '20#.#49.69.68':3128
  • '18#.#7.150.80':3128
  • '59.##.40.186':3128
  • '61.##.240.63':3128
  • '11#.#71.65.201':3128
  • '59.##.136.186':3128
  • '19#.#49.21.214':3128
  • '80.##.120.43':3128
  • '67.##6.222.84':3128
  • '20#.#40.66.99':3128
  • '87.##0.211.35':3128
  • '21#.#28.216.119':3128
  • '59.##8.61.156':3128
  • '82.##9.181.50':3128
  • '22#.#1.225.73':3128
  • '11#.#52.116.221':3128
  • '89.##8.120.165':3128
  • '89.##4.169.235':3128
  • '83.##.81.108':3128
  • '12#.#3.105.87':3128
  • '77.##.183.218':3128
  • '61.#.207.235':3128
  • '89.##3.154.185':3128
  • '20#.#12.126.218':6667
  • '21#.#7.225.18':6667
  • '20#.#65.110.106':6667
  • '12#.#68.20.156':6667
  • '83.##.118.174':6667
  • '21#.#74.143.206':6667
  • '82.##7.100.20':6667
  • '21#.#88.82.205':6667
  • '95.##.222.154':6667
  • '20#.#36.151.149':6667
  • '78.##.225.232':6667
  • '21#.#.166.230':6667
  • '18#.#9.248.168':6667
  • '21#.#0.230.195':6667
  • 'localhost':2976
  • '20#.#7.153.210':6667
  • '95.##5.240.176':6667
  • '20#.#2.175.80':6667
  • '88.##9.54.134':6667
  • '22#.#9.252.37':6667
  • '95.#4.78.50':6667
  • '21#.#36.120.25':6667
  • '12#.#89.165.64':3128
  • '85.##6.232.248':3128
  • '89.##8.48.100':3128
  • '18#.#3.64.193':3128
  • '87.##.200.82':3128
  • '20#.#3.233.211':3128
  • '95.##5.166.230':3128
  • '59.##8.153.121':3128
  • '41.##0.10.243':3128
  • '83.##.28.214':3128
  • '19#.#46.106.12':3128
  • '20#.#09.60.66':3128
  • '59.##8.133.174':3128
  • '83.##7.79.214':3128
  • '19#.#37.241.111':3128
  • '12#.#0.129.84':3128
  • '82.##0.231.44':3128
  • '19#.#.147.59':3128
  • '18#.#95.39.178':3128
  • '41.##2.173.59':3128
  • '18#.#95.36.98':3128
  • '62.##2.15.226':3128
  • '12#.#68.59.152':3128
  • '83.##.242.84':3128
  • '86.##5.240.217':3128
  • '20#.#77.215.190':3128
  • '41.##0.233.252':3128
  • '91.##4.56.58':3128
  • '19#.#05.222.20':3128
  • '12#.#68.171.106':3128
  • '12#.#83.86.128':3128
  • '84.##8.199.70':3128
  • '41.##0.98.165':3128
  • '88.##0.105.48':3128
  • '12#.#7.160.81':3128
  • '77.##2.170.158':3128
  • '41.##7.27.156':3128
  • '85.##2.222.122':3128
  • '84.#7.34.17':3128
  • '89.##4.95.132':3128
  • '24.##8.249.128':3128
  • '11#.38.9.60':3128
  • '22#.#9.252.37':3128
  • '87.##.235.180':3128
  • '21#.#2.78.253':3128
  • '59.##.130.161':3128
  • '19#.#17.225.132':3128
  • '12#.#68.163.25':3128
  • '21#.#12.133.16':3128
  • '89.##5.240.3':3128
  • '59.#.185.218':3128
  • '95.##5.190.81':3128
  • '12#.#68.20.156':3128
  • '11#.#96.131.122':3128
  • '20#.#17.231.231':3128
  • '88.##6.79.53':3128
  • '17#.88.6.81':3128
  • '12#.#68.213.133':3128
  • '89.##.88.140':3128
  • '83.##.207.238':3128
  • '20#.#03.160.98':3128
  • '95.##.32.212':3128
  • '12#.#08.226.94':3128
  • '18#.#3.64.143':3128
  • '84.##9.83.196':3128
  • '77.#5.51.14':3128
  • '21#.#50.170.26':3128
  • '78.##.231.101':3128
  • '21#.#58.95.201':3128
  • '18#.#9.248.168':3128
  • '84.##5.154.116':3128
  • '78.##.199.43':3128
  • '92.##9.18.195':3128
  • '84.##5.190.122':3128
  • '20#.#39.141.72':3128
  • '19#.#25.9.202':3128
  • '20#.#36.151.149':3128
  • '84.##5.142.223':3128
  • '19#.#05.80.247':3128
  • '21#.#51.90.54':3128
  • '13#.#32.183.222':3128
  • '83.##.118.174':3128
  • '92.##4.218.140':3128
  • '21#.#0.230.195':3128
  • '12#.#68.82.216':3128
  • '12#.#68.5.154':3128
  • '12#.#68.40.131':3128
  • '93.##3.126.79':3128
  • '80.##2.96.26':3128
  • '19#.#17.214.86':3128
  • '89.##9.47.62':3128
  • '89.#9.22.3':3128
  • '82.##8.148.6':3128
  • '19#.#17.139.53':3128
  • '18#.#82.227.103':3128
  • '74.##2.74.238':3128
  • '82.##3.221.63':3128
  • '59.##8.157.82':3128
  • '83.#0.41.70':3128
  • '18#.#6.72.22':3128
  • '95.##5.196.21':3128
  • '20#.#53.180.213':3128
  • '93.##6.11.109':3128
  • '41.##0.250.106':3128
  • '78.#.157.205':3128
  • '59.##8.57.71':3128
  • '19#.#28.241.83':3128
  • '89.#8.28.23':3128
  • '79.##5.216.233':3128
  • '82.##5.170.203':3128
  • '77.##0.3.157':3128
  • '18#.#95.39.151':3128
  • '12#.#68.217.244':3128
  • '95.##5.93.73':3128
  • '12#.#43.239.200':3128
  • '84.##5.164.157':3128
  • '19#.#48.250.126':3128
  • '18#.#95.34.12':3128
  • '78.##.46.158':3128
  • '19#.#28.242.75':3128
  • '19#.#.103.42':3128
  • '19#.#3.80.215':3128
  • '93.##2.91.253':3128
  • '83.##.21.127':3128
  • '88.##5.169.190':3128
  • '59.##.200.52':3128
  • '78.##5.204.89':3128
  • '19#.#60.99.17':3128
  • '59.##.131.44':3128
  • '80.##8.110.132':3128
  • '89.##3.142.181':3128
  • '19#.#4.16.14':3128
  • '19#.#31.49.232':3128
  • '21#.#36.120.25':3128
  • '59.##8.36.78':3128
  • '94.##.57.131':3128
  • '89.##3.42.57':3128
  • '41.##0.17.63':3128
  • '59.##.188.226':3128
  • '59.##.166.137':3128
  • '77.##2.18.14':3128
  • '81.##.115.138':3128
  • '17#.#9.150.139':3128
  • '83.##.203.205':3128
  • '19#.#31.50.119':3128
  • '11#.#5.129.119':3128
  • '11#.#4.125.85':3128
  • '10.#.1.254':3128
  • '21#.#0.143.159':3128
  • '21#.#1.207.83':3128
  • '19#.#37.245.179':3128
  • '20#.#0.121.199':3128
  • '81.##5.85.215':3128
  • '83.##.200.59':3128
  • '19#.#06.78.137':3128
  • '21#.#09.162.104':3128
  • '11#.#55.3.189':3128
  • '19#.#38.170.108':3128
  • '88.##0.228.166':3128
  • '84.##9.234.235':3128
  • '82.##2.103.247':3128
  • '12#.#22.118.35':3128
  • '12#.#0.244.107':3128
  • '80.##5.110.175':3128
  • '21#.#74.143.206':3128
  • '91.##2.146.35':3128
  • '18#.#3.64.135':3128
  • '11#.#33.137.45':3128
  • '19#.#17.202.60':3128
  • '89.##5.44.119':3128
  • '41.##0.23.224':3128
  • '12#.#36.22.172':3128
  • '14#.#15.73.142':3128
  • '19#.#1.245.93':3128
  • '95.#4.78.50':3128
  • '78.##.225.232':3128
  • '12#.#68.15.6':3128
  • '88.##0.143.38':3128
  • '19#.#06.207.57':3128
  • '88.##.193.97':3128
  • '24.##.23.185':3128
  • '18#.#95.37.199':3128
  • '41.##.44.169':3128
  • '59.##1.186.206':3128
  • '19#.#26.114.203':3128
  • '18#.#95.33.163':3128
  • '22#.#21.70.244':3128
  • '18#.#95.33.241':3128
  • '83.##6.209.123':3128
  • '21#.#48.20.76':3128
  • '11#.#05.107.2':3128
  • '79.##9.122.140':3128
  • '84.##5.135.144':3128
  • '11#.#40.84.43':3128
  • '60.##3.50.78':3128
  • '21#.#1.204.235':3128
  • '83.#0.20.69':3128
  • '95.##.222.154':3128
  • '59.##.235.10':3128
  • '20#.#7.153.210':3128
  • '18#.#95.38.10':3128
  • '20#.#93.185.75':3128
  • '59.##3.155.205':3128
  • '89.##8.66.213':3128
  • '95.##.27.155':3128
  • '20#.#1.233.58':3128
  • '78.##.185.170':3128
  • '92.##4.217.87':3128
  • '20#.#76.151.197':3128
  • '17#.#8.5.162':3128
  • '87.##.212.226':3128
  • '83.##.214.243':3128
  • '85.##.185.143':3128
  • '21#.#.142.39':3128
  • '82.##8.85.59':3128
  • '17#.#9.140.112':3128
  • '82.##9.127.108':3128
  • '20#.#17.44.14':3128
  • '59.##.228.138':3128
  • '21#.#34.169.162':3128
  • '19#.#06.214.121':3128
  • '12#.#68.36.64':3128
  • '11#.#04.197.6':3128
  • '12#.#20.156.251':3128
  • '11#.#84.21.158':3128
  • '85.##7.57.116':3128
UDP:
  • DNS ASK 19#.#05.http
  • DNS ASK 89###P.148.http
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'
  • ClassName: 'Indicator' WindowName: '(null)'

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Демо бесплатно

 

Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

Демо бесплатно

 

Скачать Dr.Web

По серийному номеру

Скачать Dr.Web с Apple Store

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Демо бесплатно

 

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке

Скачать с сайта
Скачать с Google Play