Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Trojan.Siggen19.60483

Added to the Dr.Web virus database: 2023-02-28

Virus description added:

Technical Information

To ensure autorun and distribution
Sets the following service settings
  • [<HKLM>\System\CurrentControlSet\Services\MySQL5] 'Start' = '00000002'
  • [<HKLM>\System\CurrentControlSet\Services\MySQL5] 'ImagePath' = '%ProgramFiles%\MySQL5\bin\mysqld.exe MySQL5'
Creates the following services
  • 'MySQL5' %ProgramFiles%\MySQL5\bin\mysqld.exe MySQL5
Modifies file system
Creates the following files
  • %ProgramFiles(x86)%\mysql5\bin\mysqldumpslow.pl
  • %ProgramFiles%\mysql5\data\performance_schema\events_transactions_current.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_statements_summary_global_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_statements_summary_by_account_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_statements_summary_by_user_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_statements_summary_by_host_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_statements_summary_by_thread_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_statements_history_long.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_statements_history.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_statements_current.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_stages_summary_global_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_stages_summary_by_account_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_stages_summary_by_user_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_stages_summary_by_host_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_stages_summary_by_thread_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_stages_history_long.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_stages_history.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_stages_current.frm
  • %ProgramFiles%\mysql5\data\performance_schema\threads.frm
  • %ProgramFiles%\mysql5\data\performance_schema\table_lock_waits_summary_by_table.frm
  • %ProgramFiles%\mysql5\data\performance_schema\table_io_waits_summary_by_table.frm
  • %ProgramFiles%\mysql5\data\performance_schema\table_io_waits_summary_by_index_usage.frm
  • %ProgramFiles%\mysql5\data\performance_schema\setup_timers.frm
  • %ProgramFiles%\mysql5\data\performance_schema\setup_objects.frm
  • %ProgramFiles%\mysql5\data\performance_schema\setup_instruments.frm
  • %ProgramFiles%\mysql5\data\performance_schema\setup_consumers.frm
  • %ProgramFiles%\mysql5\data\performance_schema\setup_actors.frm
  • %ProgramFiles%\mysql5\data\performance_schema\rwlock_instances.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_transactions_history.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_transactions_history_long.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_transactions_summary_by_thread_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_transactions_summary_by_host_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\variables_by_thread.frm
  • %ProgramFiles%\mysql5\data\performance_schema\user_variables_by_thread.frm
  • %ProgramFiles%\mysql5\data\performance_schema\metadata_locks.frm
  • %ProgramFiles%\mysql5\data\performance_schema\table_handles.frm
  • %ProgramFiles%\mysql5\data\performance_schema\session_account_connect_attrs.frm
  • %ProgramFiles%\mysql5\data\performance_schema\session_connect_attrs.frm
  • %ProgramFiles%\mysql5\data\performance_schema\replication_applier_status_by_worker.frm
  • %ProgramFiles%\mysql5\data\performance_schema\replication_applier_status_by_coordinator.frm
  • %ProgramFiles%\mysql5\data\performance_schema\replication_applier_status.frm
  • %ProgramFiles%\mysql5\data\performance_schema\replication_applier_configuration.frm
  • %ProgramFiles%\mysql5\data\performance_schema\replication_connection_status.frm
  • %ProgramFiles%\mysql5\data\performance_schema\replication_group_members.frm
  • %ProgramFiles%\mysql5\data\performance_schema\replication_group_member_stats.frm
  • %ProgramFiles%\mysql5\data\performance_schema\prepared_statements_instances.frm
  • %ProgramFiles%\mysql5\data\performance_schema\replication_connection_configuration.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_statements_summary_by_program.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_statements_summary_by_digest.frm
  • %ProgramFiles%\mysql5\data\performance_schema\memory_summary_by_user_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\memory_summary_by_host_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\memory_summary_by_account_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\memory_summary_by_thread_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\memory_summary_global_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\accounts.frm
  • %ProgramFiles%\mysql5\data\performance_schema\users.frm
  • %ProgramFiles%\mysql5\data\performance_schema\hosts.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_transactions_summary_global_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_transactions_summary_by_account_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_transactions_summary_by_user_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\global_variables.frm
  • %ProgramFiles%\mysql5\data\performance_schema\performance_timers.frm
  • %ProgramFiles%\mysql5\data\performance_schema\objects_summary_global_by_type.frm
  • %ProgramFiles%\mysql5\data\performance_schema\mutex_instances.frm
  • %ProgramFiles%\mysql5\data\mysql\innodb_table_stats.frm
  • %ProgramFiles%\mysql5\data\mysql\ndb_binlog_index.myi
  • %ProgramFiles%\mysql5\data\mysql\ndb_binlog_index.frm
  • %ProgramFiles%\mysql5\data\mysql\event.myi
  • %ProgramFiles%\mysql5\data\mysql\event.frm
  • %ProgramFiles%\mysql5\data\mysql\slow_log.csm
  • %ProgramFiles%\mysql5\data\mysql\slow_log.frm
  • %ProgramFiles%\mysql5\data\mysql\general_log.csm
  • %ProgramFiles%\mysql5\data\mysql\general_log.frm
  • %ProgramFiles%\mysql5\data\mysql\procs_priv.myi
  • %ProgramFiles%\mysql5\data\mysql\procs_priv.frm
  • %ProgramFiles%\mysql5\data\mysql\proc.myi
  • %ProgramFiles%\mysql5\data\mysql\proc.frm
  • %ProgramFiles%\mysql5\data\mysql\time_zone_leap_second.ibd
  • %ProgramFiles%\mysql5\data\mysql\time_zone_leap_second.frm
  • %ProgramFiles%\mysql5\data\mysql\time_zone_transition_type.ibd
  • %ProgramFiles%\mysql5\data\mysql\time_zone_transition_type.frm
  • %ProgramFiles%\mysql5\data\mysql\time_zone_transition.ibd
  • %ProgramFiles%\mysql5\data\mysql\time_zone_transition.frm
  • %ProgramFiles%\mysql5\data\mysql\time_zone.ibd
  • %ProgramFiles%\mysql5\data\mysql\time_zone.frm
  • %ProgramFiles%\mysql5\data\mysql\time_zone_name.ibd
  • %ProgramFiles%\mysql5\data\mysql\time_zone_name.frm
  • %ProgramFiles%\mysql5\data\mysql\help_keyword.ibd
  • %ProgramFiles%\mysql5\data\mysql\help_keyword.frm
  • %ProgramFiles%\mysql5\data\mysql\help_relation.ibd
  • %ProgramFiles%\mysql5\data\mysql\help_relation.frm
  • %ProgramFiles%\mysql5\data\mysql\innodb_table_stats.ibd
  • %ProgramFiles%\mysql5\data\mysql\innodb_index_stats.frm
  • %ProgramFiles%\mysql5\data\mysql\innodb_index_stats.ibd
  • %ProgramFiles%\mysql5\data\mysql\slave_relay_log_info.frm
  • %ProgramFiles%\mysql5\data\performance_schema\socket_summary_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\socket_summary_by_instance.frm
  • %ProgramFiles%\mysql5\data\performance_schema\socket_instances.frm
  • %ProgramFiles%\mysql5\data\performance_schema\file_summary_by_instance.frm
  • %ProgramFiles%\mysql5\data\performance_schema\file_summary_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\file_instances.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_waits_summary_global_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_waits_summary_by_thread_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_waits_summary_by_account_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_waits_summary_by_user_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_waits_summary_by_host_by_event_name.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_waits_summary_by_instance.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_waits_history_long.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_waits_current.frm
  • %ProgramFiles%\mysql5\data\performance_schema\events_waits_history.frm
  • %ProgramFiles%\mysql5\data\performance_schema\cond_instances.frm
  • %ProgramFiles%\mysql5\data\performance_schema\db.opt
  • %ProgramFiles%\mysql5\data\mysql\engine_cost.ibd
  • %ProgramFiles%\mysql5\data\mysql\engine_cost.frm
  • %ProgramFiles%\mysql5\data\mysql\server_cost.ibd
  • %ProgramFiles%\mysql5\data\mysql\server_cost.frm
  • %ProgramFiles%\mysql5\data\mysql\gtid_executed.ibd
  • %ProgramFiles%\mysql5\data\mysql\gtid_executed.frm
  • %ProgramFiles%\mysql5\data\mysql\slave_worker_info.ibd
  • %ProgramFiles%\mysql5\data\mysql\slave_worker_info.frm
  • %ProgramFiles%\mysql5\data\mysql\slave_master_info.ibd
  • %ProgramFiles%\mysql5\data\mysql\slave_master_info.frm
  • %ProgramFiles%\mysql5\data\mysql\slave_relay_log_info.ibd
  • %ProgramFiles%\mysql5\data\performance_schema\host_cache.frm
  • %ProgramFiles%\mysql5\data\sys\x@0024io_global_by_wait_by_latency.frm~
  • %ProgramFiles%\mysql5\data\duffwqskso.err
  • %ProgramFiles%\mysql5\data\performance_schema\status_by_user.frm
  • %ProgramFiles%\mysql5\data\sys\user_summary_by_stages.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024user_summary_by_statement_latency.frm~
  • %ProgramFiles%\mysql5\data\sys\user_summary_by_statement_latency.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024user_summary_by_statement_type.frm~
  • %ProgramFiles%\mysql5\data\sys\user_summary_by_statement_type.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024user_summary_by_file_io.frm~
  • %ProgramFiles%\mysql5\data\sys\user_summary_by_file_io.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024user_summary_by_file_io_type.frm~
  • %ProgramFiles%\mysql5\data\sys\user_summary_by_file_io_type.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024statements_with_temp_tables.frm~
  • %ProgramFiles%\mysql5\data\sys\statements_with_temp_tables.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024statements_with_sorting.frm~
  • %ProgramFiles%\mysql5\data\sys\statements_with_sorting.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024statements_with_runtimes_in_95th_percentile.frm~
  • %ProgramFiles%\mysql5\data\sys\statements_with_runtimes_in_95th_percentile.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024ps_digest_95th_percentile_by_avg_us.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024ps_digest_avg_latency_distribution.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024statements_with_full_table_scans.frm~
  • %ProgramFiles%\mysql5\data\sys\statements_with_full_table_scans.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024statements_with_errors_or_warnings.frm~
  • %ProgramFiles%\mysql5\data\sys\statements_with_errors_or_warnings.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024statement_analysis.frm~
  • %ProgramFiles%\mysql5\data\sys\statement_analysis.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024schema_table_lock_waits.frm~
  • %ProgramFiles%\mysql5\data\sys\schema_table_lock_waits.frm~
  • %ProgramFiles%\mysql5\data\sys\schema_unused_indexes.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024schema_tables_with_full_table_scans.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024user_summary_by_stages.frm~
  • %ProgramFiles%\mysql5\data\sys\user_summary.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024user_summary.frm~
  • %ProgramFiles%\mysql5\data\sys\host_summary_by_file_io_type.frm~
  • %ProgramFiles%\mysql5\data\ib_buffer_pool.incomplete
  • %ProgramFiles%\mysql5\data\sys\session_ssl_status.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024session.frm~
  • %ProgramFiles%\mysql5\data\sys\session.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024processlist.frm~
  • %ProgramFiles%\mysql5\data\sys\processlist.frm~
  • %ProgramFiles%\mysql5\data\sys\metrics.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024waits_global_by_latency.frm~
  • %ProgramFiles%\mysql5\data\sys\waits_global_by_latency.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024waits_by_host_by_latency.frm~
  • %ProgramFiles%\mysql5\data\sys\waits_by_host_by_latency.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024waits_by_user_by_latency.frm~
  • %ProgramFiles%\mysql5\data\sys\waits_by_user_by_latency.frm~
  • %ProgramFiles%\mysql5\data\sys\wait_classes_global_by_latency.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024wait_classes_global_by_latency.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024wait_classes_global_by_avg_latency.frm~
  • %ProgramFiles%\mysql5\data\sys\wait_classes_global_by_avg_latency.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024host_summary.frm~
  • %ProgramFiles%\mysql5\data\sys\host_summary.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024host_summary_by_stages.frm~
  • %ProgramFiles%\mysql5\data\sys\host_summary_by_stages.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024host_summary_by_statement_latency.frm~
  • %ProgramFiles%\mysql5\data\sys\host_summary_by_statement_latency.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024host_summary_by_statement_type.frm~
  • %ProgramFiles%\mysql5\data\sys\host_summary_by_statement_type.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024host_summary_by_file_io.frm~
  • %ProgramFiles%\mysql5\data\sys\host_summary_by_file_io.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024host_summary_by_file_io_type.frm~
  • %ProgramFiles%\mysql5\data\performance_schema\status_by_thread.frm
  • %ProgramFiles%\mysql5\data\mysql\help_category.ibd
  • %ProgramFiles%\mysql5\data\sys\x@0024schema_table_statistics_with_buffer.frm~
  • %ProgramFiles%\mysql5\data\sys\schema_table_statistics_with_buffer.frm~
  • %ProgramFiles%\mysql5\data\sys\innodb_lock_waits.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024innodb_buffer_stats_by_table.frm~
  • %ProgramFiles%\mysql5\data\sys\innodb_buffer_stats_by_table.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024innodb_buffer_stats_by_schema.frm~
  • %ProgramFiles%\mysql5\data\sys\innodb_buffer_stats_by_schema.frm~
  • %ProgramFiles%\mysql5\data\mysql\proc.myd
  • %ProgramFiles%\mysql5\data\sys\sys_config_update_set_user.trn~
  • %ProgramFiles%\mysql5\data\sys\sys_config.trg~
  • %ProgramFiles%\mysql5\data\sys\sys_config_insert_set_user.trn~
  • %ProgramFiles%\mysql5\data\sys\sys_config.ibd
  • %ProgramFiles%\mysql5\data\sys\sys_config.frm
  • %ProgramFiles%\mysql5\data\sys\version.frm~
  • %ProgramFiles%\mysql5\data\sys\db.opt
  • %ProgramFiles%\mysql5\data\mysql\db.myd
  • %ProgramFiles%\mysql5\data\mysql\tables_priv.myd
  • %ProgramFiles%\mysql5\data\ib_6_20_trunc.log
  • %ProgramFiles%\mysql5\data\ib_7_21_trunc.log
  • %ProgramFiles%\mysql5\data\ib_5_19_trunc.log
  • %ProgramFiles%\mysql5\data\ib_4_18_trunc.log
  • %ProgramFiles%\mysql5\data\mysql\proxies_priv.myd
  • %ProgramFiles%\mysql5\data\mysql\user.myd
  • %ProgramFiles%\mysql5\data\mysql\proxies_priv.myi
  • %ProgramFiles%\mysql5\data\mysql\proxies_priv.frm
  • %ProgramFiles%\mysql5\data\performance_schema\session_status.frm
  • %ProgramFiles%\mysql5\data\performance_schema\global_status.frm
  • %ProgramFiles%\mysql5\data\performance_schema\status_by_account.frm
  • %ProgramFiles%\mysql5\data\performance_schema\status_by_host.frm
  • %ProgramFiles%\mysql5\data\sys\x@0024innodb_lock_waits.frm~
  • %ProgramFiles%\mysql5\data\sys\schema_object_overview.frm~
  • %ProgramFiles%\mysql5\data\sys\schema_auto_increment_columns.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024schema_flattened_keys.frm~
  • %ProgramFiles%\mysql5\data\sys\schema_table_statistics.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024ps_schema_table_statistics_io.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024schema_index_statistics.frm~
  • %ProgramFiles%\mysql5\data\sys\schema_index_statistics.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024memory_global_total.frm~
  • %ProgramFiles%\mysql5\data\sys\memory_global_total.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024memory_global_by_current_bytes.frm~
  • %ProgramFiles%\mysql5\data\sys\memory_global_by_current_bytes.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024memory_by_thread_by_current_bytes.frm~
  • %ProgramFiles%\mysql5\data\sys\memory_by_thread_by_current_bytes.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024memory_by_host_by_current_bytes.frm~
  • %ProgramFiles%\mysql5\data\sys\memory_by_host_by_current_bytes.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024memory_by_user_by_current_bytes.frm~
  • %ProgramFiles%\mysql5\data\performance_schema\session_variables.frm
  • %ProgramFiles%\mysql5\data\sys\memory_by_user_by_current_bytes.frm~
  • %ProgramFiles%\mysql5\data\sys\io_global_by_wait_by_latency.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024io_global_by_wait_by_bytes.frm~
  • %ProgramFiles%\mysql5\data\sys\io_global_by_wait_by_bytes.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024io_global_by_file_by_latency.frm~
  • %ProgramFiles%\mysql5\data\sys\io_global_by_file_by_latency.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024io_global_by_file_by_bytes.frm~
  • %ProgramFiles%\mysql5\data\sys\io_global_by_file_by_bytes.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024io_by_thread_by_latency.frm~
  • %ProgramFiles%\mysql5\data\sys\io_by_thread_by_latency.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024latest_file_io.frm~
  • %ProgramFiles%\mysql5\data\sys\latest_file_io.frm~
  • %ProgramFiles%\mysql5\data\sys\ps_check_lost_instrumentation.frm~
  • %ProgramFiles%\mysql5\data\sys\schema_redundant_indexes.frm~
  • %ProgramFiles%\mysql5\data\sys\x@0024schema_table_statistics.frm~
  • %ProgramFiles%\mysql5\data\sys\schema_tables_with_full_table_scans.frm~
  • %ProgramFiles%\mysql5\data\mysql\help_category.frm
  • %ProgramFiles(x86)%\mysql5\bin\replace.exe
  • %ProgramFiles(x86)%\mysql5\include\my_dbug.h
  • %ProgramFiles(x86)%\mysql5\include\my_config.h
  • %ProgramFiles(x86)%\mysql5\include\my_compiler.h
  • %ProgramFiles(x86)%\mysql5\include\my_command.h
  • %ProgramFiles(x86)%\mysql5\include\my_byteorder.h
  • %ProgramFiles(x86)%\mysql5\include\my_alloc.h
  • %ProgramFiles(x86)%\mysql5\include\mysql_version.h
  • %ProgramFiles(x86)%\mysql5\include\mysql_time.h
  • %ProgramFiles(x86)%\mysql5\include\mysql_embed.h
  • %ProgramFiles(x86)%\mysql5\include\mysql_com_server.h
  • %ProgramFiles(x86)%\mysql5\include\mysql_com.h
  • %ProgramFiles(x86)%\mysql5\include\mysqlx_version.h
  • %ProgramFiles(x86)%\mysql5\include\mysqlx_error.h
  • %ProgramFiles(x86)%\mysql5\include\mysqlx_ername.h
  • %ProgramFiles(x86)%\mysql5\include\mysqld_error.h
  • %ProgramFiles(x86)%\mysql5\include\mysqld_ername.h
  • %ProgramFiles(x86)%\mysql5\include\mysql.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\thread_type.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\thread_pool_priv.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\service_thread_scheduler.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\service_thd_wait.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\service_thd_engine_lock.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\service_thd_alloc.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\service_ssl_wrapper.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\service_srv_session_info.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\service_srv_session.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\service_security_context.h
  • %ProgramFiles(x86)%\mysql5\include\my_dir.h
  • %ProgramFiles(x86)%\mysql5\include\my_getopt.h
  • %ProgramFiles(x86)%\mysql5\include\my_global.h
  • %ProgramFiles(x86)%\mysql5\include\my_list.h
  • %ProgramFiles(x86)%\mysql5\share\charsets\armscii8.xml
  • %ProgramFiles(x86)%\mysql5\readme
  • %ProgramFiles(x86)%\mysql5\mysql_uninstall.bat
  • %ProgramFiles(x86)%\mysql5\mysql-5.7-win32.ico
  • %ProgramFiles(x86)%\mysql5\license
  • %ProgramFiles(x86)%\mysql5\lib\libmysql.lib
  • %ProgramFiles(x86)%\mysql5\install.bat
  • %ProgramFiles(x86)%\mysql5\include\typelib.h
  • %ProgramFiles(x86)%\mysql5\include\thr_rwlock.h
  • %ProgramFiles(x86)%\mysql5\include\thr_mutex.h
  • %ProgramFiles(x86)%\mysql5\include\thr_cond.h
  • %ProgramFiles(x86)%\mysql5\include\sslopt-vars.h
  • %ProgramFiles(x86)%\mysql5\include\sslopt-longopts.h
  • %ProgramFiles(x86)%\mysql5\include\sql_state.h
  • %ProgramFiles(x86)%\mysql5\include\sslopt-case.h
  • %ProgramFiles(x86)%\mysql5\include\sql_common.h
  • %ProgramFiles(x86)%\mysql5\include\plugin_validate_password.h
  • %ProgramFiles(x86)%\mysql5\include\plugin_keyring.h
  • %ProgramFiles(x86)%\mysql5\include\plugin_group_replication.h
  • %ProgramFiles(x86)%\mysql5\include\plugin_ftparser.h
  • %ProgramFiles(x86)%\mysql5\include\plugin_audit.h
  • %ProgramFiles(x86)%\mysql5\include\plugin.h
  • %ProgramFiles(x86)%\mysql5\include\m_string.h
  • %ProgramFiles(x86)%\mysql5\include\m_ctype.h
  • %ProgramFiles(x86)%\mysql5\include\my_xml.h
  • %ProgramFiles(x86)%\mysql5\include\my_thread_local.h
  • %ProgramFiles(x86)%\mysql5\include\my_thread.h
  • %ProgramFiles(x86)%\mysql5\include\my_sys.h
  • %ProgramFiles(x86)%\mysql5\share\charsets\ascii.xml
  • %ProgramFiles(x86)%\mysql5\include\mysql\service_rules_table.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\service_rpl_transaction_write_set.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\service_rpl_transaction_ctx.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\plugin_auth_common.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\plugin_auth.h.pp
  • %ProgramFiles(x86)%\mysql5\include\mysql\plugin_auth.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\plugin_audit.h.pp
  • %ProgramFiles(x86)%\mysql5\include\mysql\plugin_audit.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\plugin.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\mysql_lex_string.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\innodb_priv.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\group_replication_priv.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\get_password.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\com_data.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\client_plugin.h.pp
  • %ProgramFiles(x86)%\mysql5\include\mysql\client_plugin.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\client_authentication.h
  • %ProgramFiles(x86)%\mysql5\include\little_endian.h
  • %ProgramFiles(x86)%\mysql5\include\keycache.h
  • %ProgramFiles(x86)%\mysql5\include\errmsg.h
  • %ProgramFiles(x86)%\mysql5\include\decimal.h
  • %ProgramFiles(x86)%\mysql5\include\byte_order_generic_x86.h
  • %ProgramFiles(x86)%\mysql5\include\byte_order_generic.h
  • %ProgramFiles(x86)%\mysql5\include\binary_log_types.h
  • %ProgramFiles(x86)%\mysql5\include\big_endian.h
  • %ProgramFiles(x86)%\mysql5\docs\info_src
  • %ProgramFiles(x86)%\mysql5\docs\info_bin
  • %ProgramFiles(x86)%\mysql5\docs\changelog
  • %ProgramFiles(x86)%\mysql5\bin\mysql_config.pl
  • %ProgramFiles(x86)%\mysql5\bin\mysqld_multi.pl
  • %ProgramFiles(x86)%\mysql5\include\mysql\plugin_ftparser.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\plugin_ftparser.h.pp
  • %ProgramFiles(x86)%\mysql5\include\mysql\plugin_group_replication.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\plugin_keyring.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\service_my_snprintf.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\service_my_plugin_log.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\service_mysql_string.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\service_mysql_password_policy.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\service_mysql_keyring.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\service_mysql_alloc.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\service_locking.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\service_command.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\services.h.pp
  • %ProgramFiles(x86)%\mysql5\include\mysql\services.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\psi\psi_memory.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\psi\psi_base.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\psi\psi.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\psi\mysql_thread.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\psi\mysql_transaction.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\psi\mysql_table.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\psi\mysql_statement.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\psi\mysql_stage.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\psi\mysql_sp.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\psi\mysql_socket.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\psi\mysql_ps.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\psi\mysql_memory.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\psi\mysql_mdl.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\psi\mysql_idle.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\psi\mysql_file.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\plugin_validate_password.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\plugin_trace.h
  • %ProgramFiles(x86)%\mysql5\include\mysql\plugin_keyring.h.pp
  • %ProgramFiles(x86)%\mysql5\include\mysql\service_parser.h
  • %ProgramFiles(x86)%\mysql5\bin\mysqld.exe
  • %ProgramFiles%\mysql5\data\mysql\help_topic.frm
  • %ProgramFiles(x86)%\mysql5\share\charsets\cp1256.xml
  • %ProgramFiles(x86)%\mysql5\share\ukrainian\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\swedish\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\spanish\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\slovak\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\serbian\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\russian\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\romanian\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\portuguese\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\polish\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\norwegian-ny\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\norwegian\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\korean\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\japanese\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\italian\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\hungarian\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\greek\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\german\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\french\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\estonian\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\english\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\dutch\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\danish\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\czech\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\share\bulgarian\errmsg.sys
  • %ProgramFiles(x86)%\mysql5\lib\libmysql.dll
  • %ProgramFiles(x86)%\mysql5\bin\zlib_decompress.exe
  • %ProgramFiles(x86)%\mysql5\bin\resolveip.exe
  • %TEMP%\7zsfx000.cmd
  • nul
  • %ProgramFiles%\mysql5\my.ini
  • %ProgramFiles%\mysql5\data\ibdata1
  • %ProgramFiles%\mysql5\data\mysql\columns_priv.myi
  • %ProgramFiles%\mysql5\data\mysql\columns_priv.frm
  • %ProgramFiles%\mysql5\data\mysql\tables_priv.myi
  • %ProgramFiles%\mysql5\data\mysql\tables_priv.frm
  • %ProgramFiles%\mysql5\data\mysql\servers.ibd
  • %ProgramFiles%\mysql5\data\mysql\servers.frm
  • %ProgramFiles%\mysql5\data\mysql\plugin.ibd
  • %ProgramFiles%\mysql5\data\mysql\plugin.frm
  • %ProgramFiles%\mysql5\data\mysql\func.myi
  • %ProgramFiles%\mysql5\data\mysql\func.frm
  • %ProgramFiles%\mysql5\data\mysql\user.myi
  • %ProgramFiles%\mysql5\data\mysql\user.frm
  • %ProgramFiles%\mysql5\data\mysql\db.myi
  • %ProgramFiles%\mysql5\data\mysql\db.opt
  • %ProgramFiles%\mysql5\data\mysql\db.frm
  • %ProgramFiles%\mysql5\data\public_key.pem
  • %ProgramFiles%\mysql5\data\private_key.pem
  • %ProgramFiles%\mysql5\data\client-cert.pem
  • %ProgramFiles%\mysql5\data\client-key.pem
  • %ProgramFiles%\mysql5\data\server-cert.pem
  • %ProgramFiles%\mysql5\data\server-key.pem
  • %ProgramFiles%\mysql5\data\ca.pem
  • %ProgramFiles%\mysql5\data\ca-key.pem
  • %ProgramFiles%\mysql5\data\auto.cnf
  • %ProgramFiles%\mysql5\data\ib_logfile0
  • %ProgramFiles%\mysql5\data\ibtmp1
  • %ProgramFiles%\mysql5\data\ib_logfile1
  • %ProgramFiles%\mysql5\data\ib_logfile101
  • %ProgramFiles(x86)%\mysql5\share\charsets\cp1251.xml
  • %ProgramFiles%\mysql5\data\mysql\help_topic.ibd
  • %ProgramFiles(x86)%\mysql5\bin\perror.exe
  • %ProgramFiles(x86)%\mysql5\bin\my_print_defaults.exe
  • %ProgramFiles(x86)%\mysql5\share\mysql_security_commands.sql
  • %ProgramFiles(x86)%\mysql5\share\install_rewriter.sql
  • %ProgramFiles(x86)%\mysql5\share\innodb_memcached_config.sql
  • %ProgramFiles(x86)%\mysql5\share\fill_help_tables.sql
  • %ProgramFiles(x86)%\mysql5\share\errmsg-utf8.txt
  • %ProgramFiles(x86)%\mysql5\share\dictionary.txt
  • %ProgramFiles(x86)%\mysql5\share\charsets\swe7.xml
  • %ProgramFiles(x86)%\mysql5\share\charsets\readme
  • %ProgramFiles(x86)%\mysql5\share\charsets\macroman.xml
  • %ProgramFiles(x86)%\mysql5\share\charsets\macce.xml
  • %ProgramFiles(x86)%\mysql5\share\charsets\latin7.xml
  • %ProgramFiles(x86)%\mysql5\share\charsets\latin5.xml
  • %ProgramFiles(x86)%\mysql5\share\charsets\latin2.xml
  • %ProgramFiles(x86)%\mysql5\share\charsets\latin1.xml
  • %ProgramFiles(x86)%\mysql5\share\charsets\koi8u.xml
  • %ProgramFiles(x86)%\mysql5\share\charsets\koi8r.xml
  • %ProgramFiles(x86)%\mysql5\share\charsets\keybcs2.xml
  • %ProgramFiles(x86)%\mysql5\share\charsets\index.xml
  • %ProgramFiles(x86)%\mysql5\share\charsets\hp8.xml
  • %ProgramFiles(x86)%\mysql5\share\charsets\hebrew.xml
  • %ProgramFiles(x86)%\mysql5\share\charsets\greek.xml
  • %ProgramFiles(x86)%\mysql5\share\charsets\geostd8.xml
  • %ProgramFiles(x86)%\mysql5\share\charsets\dec8.xml
  • %ProgramFiles(x86)%\mysql5\share\charsets\cp866.xml
  • %ProgramFiles(x86)%\mysql5\share\charsets\cp852.xml
  • %ProgramFiles(x86)%\mysql5\share\charsets\cp850.xml
  • %ProgramFiles(x86)%\mysql5\share\charsets\cp1257.xml
  • %ProgramFiles(x86)%\mysql5\share\mysql_system_tables.sql
  • %ProgramFiles(x86)%\mysql5\share\mysql_system_tables_data.sql
  • %ProgramFiles(x86)%\mysql5\share\mysql_sys_schema.sql
  • %ProgramFiles(x86)%\mysql5\share\mysql_test_data_timezone.sql
  • %ProgramFiles(x86)%\mysql5\bin\mysql_tzinfo_to_sql.exe
  • %ProgramFiles(x86)%\mysql5\bin\mysql_ssl_rsa_setup.exe
  • %ProgramFiles(x86)%\mysql5\bin\mysql_secure_installation.exe
  • %ProgramFiles(x86)%\mysql5\bin\mysql_plugin.exe
  • %ProgramFiles(x86)%\mysql5\bin\mysql_embedded.exe
  • %ProgramFiles(x86)%\mysql5\bin\mysql_config_editor.exe
  • %ProgramFiles(x86)%\mysql5\bin\mysql_client_test_embedded.exe
  • %ProgramFiles(x86)%\mysql5\bin\mysqlxtest.exe
  • %ProgramFiles(x86)%\mysql5\bin\mysqltest_embedded.exe
  • %ProgramFiles(x86)%\mysql5\bin\mysqlslap.exe
  • %ProgramFiles(x86)%\mysql5\bin\mysqlshow.exe
  • %ProgramFiles(x86)%\mysql5\bin\mysqlpump.exe
  • %ProgramFiles(x86)%\mysql5\bin\mysqlimport.exe
  • %ProgramFiles(x86)%\mysql5\share\charsets\cp1250.xml
  • %ProgramFiles(x86)%\mysql5\bin\mysqldump.exe
  • %ProgramFiles(x86)%\mysql5\bin\mysqlcheck.exe
  • %ProgramFiles(x86)%\mysql5\bin\mysqlbinlog.exe
  • %ProgramFiles(x86)%\mysql5\bin\mysqladmin.exe
  • %ProgramFiles(x86)%\mysql5\bin\mysql.exe
  • %ProgramFiles(x86)%\mysql5\bin\myisam_ftdump.exe
  • %ProgramFiles(x86)%\mysql5\bin\myisampack.exe
  • %ProgramFiles(x86)%\mysql5\bin\myisamlog.exe
  • %ProgramFiles(x86)%\mysql5\bin\myisamchk.exe
  • %ProgramFiles(x86)%\mysql5\bin\lz4_decompress.exe
  • %ProgramFiles(x86)%\mysql5\bin\libmecab.dll
  • %ProgramFiles(x86)%\mysql5\bin\innochecksum.exe
  • %ProgramFiles(x86)%\mysql5\bin\echo.exe
  • %ProgramFiles(x86)%\mysql5\share\uninstall_rewriter.sql
  • %ProgramFiles(x86)%\mysql5\bin\mysql_upgrade.exe
  • %ProgramFiles%\mysql5\data\duffwqskso.pid
Deletes the following files
  • %TEMP%\7zsfx000.cmd
  • %ProgramFiles%\mysql5\data\ib_4_18_trunc.log
  • %ProgramFiles%\mysql5\data\ib_5_19_trunc.log
  • %ProgramFiles%\mysql5\data\ib_7_21_trunc.log
  • %ProgramFiles%\mysql5\data\ib_6_20_trunc.log
  • %ProgramFiles%\mysql5\data\ibtmp1
Moves the following files
  • from %ProgramFiles%\mysql5\data\ib_logfile101 to %ProgramFiles%\mysql5\data\ib_logfile0
  • from %ProgramFiles%\mysql5\data\sys\x@0024user_summary.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024user_summary.frm
  • from %ProgramFiles%\mysql5\data\sys\user_summary.frm~ to %ProgramFiles%\mysql5\data\sys\user_summary.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024user_summary_by_stages.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024user_summary_by_stages.frm
  • from %ProgramFiles%\mysql5\data\sys\user_summary_by_stages.frm~ to %ProgramFiles%\mysql5\data\sys\user_summary_by_stages.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024user_summary_by_statement_latency.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024user_summary_by_statement_latency.frm
  • from %ProgramFiles%\mysql5\data\sys\user_summary_by_statement_latency.frm~ to %ProgramFiles%\mysql5\data\sys\user_summary_by_statement_latency.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024user_summary_by_statement_type.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024user_summary_by_statement_type.frm
  • from %ProgramFiles%\mysql5\data\sys\user_summary_by_statement_type.frm~ to %ProgramFiles%\mysql5\data\sys\user_summary_by_statement_type.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024user_summary_by_file_io.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024user_summary_by_file_io.frm
  • from %ProgramFiles%\mysql5\data\sys\user_summary_by_file_io.frm~ to %ProgramFiles%\mysql5\data\sys\user_summary_by_file_io.frm
  • from %ProgramFiles%\mysql5\data\sys\host_summary_by_file_io_type.frm~ to %ProgramFiles%\mysql5\data\sys\host_summary_by_file_io_type.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024user_summary_by_file_io_type.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024user_summary_by_file_io_type.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024statements_with_temp_tables.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024statements_with_temp_tables.frm
  • from %ProgramFiles%\mysql5\data\sys\statements_with_temp_tables.frm~ to %ProgramFiles%\mysql5\data\sys\statements_with_temp_tables.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024statements_with_sorting.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024statements_with_sorting.frm
  • from %ProgramFiles%\mysql5\data\sys\statements_with_sorting.frm~ to %ProgramFiles%\mysql5\data\sys\statements_with_sorting.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024statements_with_runtimes_in_95th_percentile.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024statements_with_runtimes_in_95th_percentile.frm
  • from %ProgramFiles%\mysql5\data\sys\statements_with_runtimes_in_95th_percentile.frm~ to %ProgramFiles%\mysql5\data\sys\statements_with_runtimes_in_95th_percentile.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024ps_digest_95th_percentile_by_avg_us.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024ps_digest_95th_percentile_by_avg_us.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024ps_digest_avg_latency_distribution.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024ps_digest_avg_latency_distribution.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024statements_with_full_table_scans.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024statements_with_full_table_scans.frm
  • from %ProgramFiles%\mysql5\data\sys\statements_with_full_table_scans.frm~ to %ProgramFiles%\mysql5\data\sys\statements_with_full_table_scans.frm
  • from %ProgramFiles%\mysql5\data\sys\user_summary_by_file_io_type.frm~ to %ProgramFiles%\mysql5\data\sys\user_summary_by_file_io_type.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024host_summary_by_file_io_type.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024host_summary_by_file_io_type.frm
  • from %ProgramFiles%\mysql5\data\sys\host_summary_by_file_io.frm~ to %ProgramFiles%\mysql5\data\sys\host_summary_by_file_io.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024host_summary_by_file_io.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024host_summary_by_file_io.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024session.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024session.frm
  • from %ProgramFiles%\mysql5\data\sys\session.frm~ to %ProgramFiles%\mysql5\data\sys\session.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024processlist.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024processlist.frm
  • from %ProgramFiles%\mysql5\data\sys\processlist.frm~ to %ProgramFiles%\mysql5\data\sys\processlist.frm
  • from %ProgramFiles%\mysql5\data\sys\metrics.frm~ to %ProgramFiles%\mysql5\data\sys\metrics.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024waits_global_by_latency.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024waits_global_by_latency.frm
  • from %ProgramFiles%\mysql5\data\sys\waits_global_by_latency.frm~ to %ProgramFiles%\mysql5\data\sys\waits_global_by_latency.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024waits_by_host_by_latency.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024waits_by_host_by_latency.frm
  • from %ProgramFiles%\mysql5\data\sys\waits_by_host_by_latency.frm~ to %ProgramFiles%\mysql5\data\sys\waits_by_host_by_latency.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024waits_by_user_by_latency.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024waits_by_user_by_latency.frm
  • from %ProgramFiles%\mysql5\data\sys\waits_by_user_by_latency.frm~ to %ProgramFiles%\mysql5\data\sys\waits_by_user_by_latency.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024wait_classes_global_by_latency.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024wait_classes_global_by_latency.frm
  • from %ProgramFiles%\mysql5\data\sys\wait_classes_global_by_latency.frm~ to %ProgramFiles%\mysql5\data\sys\wait_classes_global_by_latency.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024wait_classes_global_by_avg_latency.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024wait_classes_global_by_avg_latency.frm
  • from %ProgramFiles%\mysql5\data\sys\wait_classes_global_by_avg_latency.frm~ to %ProgramFiles%\mysql5\data\sys\wait_classes_global_by_avg_latency.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024host_summary.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024host_summary.frm
  • from %ProgramFiles%\mysql5\data\sys\host_summary.frm~ to %ProgramFiles%\mysql5\data\sys\host_summary.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024host_summary_by_stages.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024host_summary_by_stages.frm
  • from %ProgramFiles%\mysql5\data\sys\host_summary_by_stages.frm~ to %ProgramFiles%\mysql5\data\sys\host_summary_by_stages.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024host_summary_by_statement_latency.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024host_summary_by_statement_latency.frm
  • from %ProgramFiles%\mysql5\data\sys\host_summary_by_statement_latency.frm~ to %ProgramFiles%\mysql5\data\sys\host_summary_by_statement_latency.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024host_summary_by_statement_type.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024host_summary_by_statement_type.frm
  • from %ProgramFiles%\mysql5\data\sys\host_summary_by_statement_type.frm~ to %ProgramFiles%\mysql5\data\sys\host_summary_by_statement_type.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024statements_with_errors_or_warnings.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024statements_with_errors_or_warnings.frm
  • from %ProgramFiles%\mysql5\data\sys\session_ssl_status.frm~ to %ProgramFiles%\mysql5\data\sys\session_ssl_status.frm
  • from %ProgramFiles%\mysql5\data\sys\statements_with_errors_or_warnings.frm~ to %ProgramFiles%\mysql5\data\sys\statements_with_errors_or_warnings.frm
  • from %ProgramFiles%\mysql5\data\sys\statement_analysis.frm~ to %ProgramFiles%\mysql5\data\sys\statement_analysis.frm
  • from %ProgramFiles%\mysql5\data\sys\io_global_by_file_by_latency.frm~ to %ProgramFiles%\mysql5\data\sys\io_global_by_file_by_latency.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024io_global_by_file_by_bytes.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024io_global_by_file_by_bytes.frm
  • from %ProgramFiles%\mysql5\data\sys\io_global_by_file_by_bytes.frm~ to %ProgramFiles%\mysql5\data\sys\io_global_by_file_by_bytes.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024io_by_thread_by_latency.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024io_by_thread_by_latency.frm
  • from %ProgramFiles%\mysql5\data\sys\io_by_thread_by_latency.frm~ to %ProgramFiles%\mysql5\data\sys\io_by_thread_by_latency.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024latest_file_io.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024latest_file_io.frm
  • from %ProgramFiles%\mysql5\data\sys\latest_file_io.frm~ to %ProgramFiles%\mysql5\data\sys\latest_file_io.frm
  • from %ProgramFiles%\mysql5\data\sys\ps_check_lost_instrumentation.frm~ to %ProgramFiles%\mysql5\data\sys\ps_check_lost_instrumentation.frm
  • from %ProgramFiles%\mysql5\data\sys\schema_redundant_indexes.frm~ to %ProgramFiles%\mysql5\data\sys\schema_redundant_indexes.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024schema_flattened_keys.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024schema_flattened_keys.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024io_global_by_file_by_latency.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024io_global_by_file_by_latency.frm
  • from %ProgramFiles%\mysql5\data\sys\schema_auto_increment_columns.frm~ to %ProgramFiles%\mysql5\data\sys\schema_auto_increment_columns.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024innodb_lock_waits.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024innodb_lock_waits.frm
  • from %ProgramFiles%\mysql5\data\sys\innodb_lock_waits.frm~ to %ProgramFiles%\mysql5\data\sys\innodb_lock_waits.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024innodb_buffer_stats_by_table.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024innodb_buffer_stats_by_table.frm
  • from %ProgramFiles%\mysql5\data\sys\innodb_buffer_stats_by_table.frm~ to %ProgramFiles%\mysql5\data\sys\innodb_buffer_stats_by_table.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024innodb_buffer_stats_by_schema.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024innodb_buffer_stats_by_schema.frm
  • from %ProgramFiles%\mysql5\data\sys\innodb_buffer_stats_by_schema.frm~ to %ProgramFiles%\mysql5\data\sys\innodb_buffer_stats_by_schema.frm
  • from %ProgramFiles%\mysql5\data\sys\sys_config_update_set_user.trn~ to %ProgramFiles%\mysql5\data\sys\sys_config_update_set_user.trn
  • from %ProgramFiles%\mysql5\data\sys\sys_config.trg~ to %ProgramFiles%\mysql5\data\sys\sys_config.trg
  • from %ProgramFiles%\mysql5\data\sys\sys_config_insert_set_user.trn~ to %ProgramFiles%\mysql5\data\sys\sys_config_insert_set_user.trn
  • from %ProgramFiles%\mysql5\data\sys\version.frm~ to %ProgramFiles%\mysql5\data\sys\version.frm
  • from %ProgramFiles%\mysql5\data\sys\schema_object_overview.frm~ to %ProgramFiles%\mysql5\data\sys\schema_object_overview.frm
  • from %ProgramFiles%\mysql5\data\sys\io_global_by_wait_by_bytes.frm~ to %ProgramFiles%\mysql5\data\sys\io_global_by_wait_by_bytes.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024io_global_by_wait_by_bytes.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024io_global_by_wait_by_bytes.frm
  • from %ProgramFiles%\mysql5\data\sys\io_global_by_wait_by_latency.frm~ to %ProgramFiles%\mysql5\data\sys\io_global_by_wait_by_latency.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024schema_table_lock_waits.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024schema_table_lock_waits.frm
  • from %ProgramFiles%\mysql5\data\sys\schema_table_lock_waits.frm~ to %ProgramFiles%\mysql5\data\sys\schema_table_lock_waits.frm
  • from %ProgramFiles%\mysql5\data\sys\schema_unused_indexes.frm~ to %ProgramFiles%\mysql5\data\sys\schema_unused_indexes.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024schema_tables_with_full_table_scans.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024schema_tables_with_full_table_scans.frm
  • from %ProgramFiles%\mysql5\data\sys\schema_tables_with_full_table_scans.frm~ to %ProgramFiles%\mysql5\data\sys\schema_tables_with_full_table_scans.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024schema_table_statistics_with_buffer.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024schema_table_statistics_with_buffer.frm
  • from %ProgramFiles%\mysql5\data\sys\schema_table_statistics_with_buffer.frm~ to %ProgramFiles%\mysql5\data\sys\schema_table_statistics_with_buffer.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024schema_table_statistics.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024schema_table_statistics.frm
  • from %ProgramFiles%\mysql5\data\sys\schema_table_statistics.frm~ to %ProgramFiles%\mysql5\data\sys\schema_table_statistics.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024ps_schema_table_statistics_io.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024ps_schema_table_statistics_io.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024schema_index_statistics.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024schema_index_statistics.frm
  • from %ProgramFiles%\mysql5\data\sys\schema_index_statistics.frm~ to %ProgramFiles%\mysql5\data\sys\schema_index_statistics.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024memory_global_total.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024memory_global_total.frm
  • from %ProgramFiles%\mysql5\data\sys\memory_global_total.frm~ to %ProgramFiles%\mysql5\data\sys\memory_global_total.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024memory_global_by_current_bytes.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024memory_global_by_current_bytes.frm
  • from %ProgramFiles%\mysql5\data\sys\memory_global_by_current_bytes.frm~ to %ProgramFiles%\mysql5\data\sys\memory_global_by_current_bytes.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024memory_by_thread_by_current_bytes.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024memory_by_thread_by_current_bytes.frm
  • from %ProgramFiles%\mysql5\data\sys\memory_by_thread_by_current_bytes.frm~ to %ProgramFiles%\mysql5\data\sys\memory_by_thread_by_current_bytes.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024memory_by_host_by_current_bytes.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024memory_by_host_by_current_bytes.frm
  • from %ProgramFiles%\mysql5\data\sys\memory_by_host_by_current_bytes.frm~ to %ProgramFiles%\mysql5\data\sys\memory_by_host_by_current_bytes.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024memory_by_user_by_current_bytes.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024memory_by_user_by_current_bytes.frm
  • from %ProgramFiles%\mysql5\data\sys\memory_by_user_by_current_bytes.frm~ to %ProgramFiles%\mysql5\data\sys\memory_by_user_by_current_bytes.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024io_global_by_wait_by_latency.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024io_global_by_wait_by_latency.frm
  • from %ProgramFiles%\mysql5\data\sys\x@0024statement_analysis.frm~ to %ProgramFiles%\mysql5\data\sys\x@0024statement_analysis.frm
  • from %ProgramFiles%\mysql5\data\ib_buffer_pool.incomplete to %ProgramFiles%\mysql5\data\ib_buffer_pool
Substitutes the following files
  • %ProgramFiles%\mysql5\data\sys\sys_config.trg~
  • %ProgramFiles%\mysql5\data\ibtmp1
Deletes itself.
Miscellaneous
Searches for the following windows
  • ClassName: 'MS_AutodialMonitor' WindowName: ''
  • ClassName: 'MS_WebCheckMonitor' WindowName: ''
Creates and executes the following
  • '%WINDIR%\syswow64\cmd.exe' /c ""%ProgramFiles(x86)%\MySQL5\install.bat" "' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\7ZSfx000.cmd" "' (with hidden window)
Executes the following
  • '%WINDIR%\syswow64\cmd.exe' /c ""%ProgramFiles(x86)%\MySQL5\install.bat" "
  • '%WINDIR%\syswow64\mshta.exe' vbscript:CreateObject("Shell.Application").ShellExecute("cmd.exe","/c C:\PROGRA~2\MySQL5\install.bat ::","","runas",1)(window.close)
  • '%WINDIR%\syswow64\cmd.exe' /c C:\PROGRA~2\MySQL5\install.bat :
  • '%WINDIR%\syswow64\wbem\wmic.exe' ENVIRONMENT create name="MYSQL_HOME",username="<system>",VariableValue="C:\PROGRA~2\MySQL5\"
  • '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\7ZSfx000.cmd" "
  • '%WINDIR%\syswow64\ping.exe' -t 3 127.0.0.1
  • '%WINDIR%\syswow64\setx.exe' "Path" "C:\PROGRA~2\MySQL5\;%ALLUSERSPROFILE%\Oracle\Java\javapath;<SYSTEM32>;%WINDIR%;<SYSTEM32>\Wbem;<SYSTEM32>\WindowsPowerShell\v1.0\" /m
  • '%WINDIR%\syswow64\net.exe' start MySQL5
  • '%WINDIR%\syswow64\net1.exe' start MySQL5
  • '%WINDIR%\syswow64\reg.exe' add "HKLM\SYSTEM\ControlSet001\Services\MySQL5" /f /v "DelayedAutostart" /t REG_DWORD /d "1"

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android