Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Trojan.Siggen32.5461

Added to the Dr.Web virus database: 2025-11-04

Virus description added:

Technical Information

To ensure autorun and distribution
Modifies the following registry keys
  • [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'JOXDHJ' = '"%APPDATA%\Windata\Microsoft Office Click-to-Run.exe"'
Creates or modifies the following files
  • %APPDATA%\microsoft\windows\start menu\programs\startup\joxdhj.lnk
Modifies file system
Creates the following files
  • %TEMP%\aut8712.tmp
  • %TEMP%\yvuelx.exe
  • %TEMP%\auta7ab.tmp
  • %TEMP%\lskkev.exe
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\binding.gyp
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\index.d.ts
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\index.js
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\license
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\node-hide-console-window.cc
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\package.json
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\readme.md
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\build\binding.sln
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\build\config.gypi
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\build\node-hide-console-window.vcxproj
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\build\node-hide-console-window.vcxproj.filters
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\build\release\node-hide-console-window.iobj
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\build\release\node-hide-console-window.ipdb
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\build\release\node-hide-console-window.node
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\build\release\node-hide-console-window.pdb
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\build\release\obj\node-hide-console-window\node-hide-console-window.node.recipe
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\build\release\obj\node-hide-console-window\node-hide-console-window.obj
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\build\release\obj\node-hide-console-window\win_delay_load_hook.obj
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\build\release\obj\node-hide-console-window\node-hid.1c2e9e9d.tlog\cl.command.1.tlog
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\build\release\obj\node-hide-console-window\node-hid.1c2e9e9d.tlog\cl.read.1.tlog
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\build\release\obj\node-hide-console-window\node-hid.1c2e9e9d.tlog\cl.write.1.tlog
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\build\release\obj\node-hide-console-window\node-hid.1c2e9e9d.tlog\link.command.1.tlog
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\build\release\obj\node-hide-console-window\node-hid.1c2e9e9d.tlog\link.read.1.tlog
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\build\release\obj\node-hide-console-window\node-hid.1c2e9e9d.tlog\link.write.1.tlog
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\build\release\obj\node-hide-console-window\node-hid.1c2e9e9d.tlog\link.write.2u.tlog
  • %TEMP%\pkg\309599fb6beecbc56c7559b1bb33fac10a1bd2c6a19d0d1c8269337890982a93\node-hide-console-window\build\release\obj\node-hide-console-window\node-hid.1c2e9e9d.tlog\node-hide-console-window.l...
  • %APPDATA%\windata\microsoft office click-to-run.exe
  • %TEMP%\vgm_player.dll
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\binding.gyp
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\index.d.ts
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\index.js
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\license
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\package.json
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\readme.md
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\test.js
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\build\binding.sln
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\build\config.gypi
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\build\node-dpapi.vcxproj
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\build\node-dpapi.vcxproj.filters
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\build\release\node-dpapi.exp
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\build\release\node-dpapi.iobj
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\build\release\node-dpapi.ipdb
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\build\release\node-dpapi.lib
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\build\release\node-dpapi.node
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\build\release\node-dpapi.pdb
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\build\release\obj\node-dpapi\node-dpapi.node.recipe
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\build\release\obj\node-dpapi\win_delay_load_hook.obj
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\build\release\obj\node-dpapi\node-dpapi.tlog\cl.command.1.tlog
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\build\release\obj\node-dpapi\node-dpapi.tlog\cl.read.1.tlog
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\build\release\obj\node-dpapi\node-dpapi.tlog\cl.write.1.tlog
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\build\release\obj\node-dpapi\node-dpapi.tlog\link.command.1.tlog
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\build\release\obj\node-dpapi\node-dpapi.tlog\link.read.1.tlog
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\build\release\obj\node-dpapi\node-dpapi.tlog\link.write.1.tlog
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\build\release\obj\node-dpapi\node-dpapi.tlog\link.write.2u.tlog
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\build\release\obj\node-dpapi\node-dpapi.tlog\node-dpapi.lastbuildstate
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\build\release\obj\node-dpapi\src\node-dpapi.obj
  • %TEMP%\pkg\80c446ecc6c39196fbb188670940277c4997448950e89e32968a7983c17bb002\win-dpapi\src\node-dpapi.cpp
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\binding.gyp
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\license
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\package.json
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\readme.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\deps\common-sqlite.gypi
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\deps\extract.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\deps\sqlite-autoconf-3380400.tar.gz
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\deps\sqlite3.gyp
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\lib\sqlite3-binding.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\lib\sqlite3.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\lib\trace.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\lib\binding\napi-v6-win32-unknown-x64\node_sqlite3.node
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\src\async.h
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\src\backup.cc
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\src\backup.h
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\src\database.cc
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\src\database.h
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\src\gcc-preinclude.h
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\src\macros.h
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\src\node_sqlite3.cc
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\src\statement.cc
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\src\statement.h
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\src\threading.h
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\.bin\node-gyp
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\.bin\node-gyp.cmd
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\.bin\node-gyp.ps1
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\are-we-there-yet\license.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\are-we-there-yet\package.json
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\are-we-there-yet\readme.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\are-we-there-yet\lib\index.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\are-we-there-yet\lib\tracker-base.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\are-we-there-yet\lib\tracker-group.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\are-we-there-yet\lib\tracker-stream.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\are-we-there-yet\lib\tracker.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\cacache\get.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\cacache\index.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\cacache\license.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\cacache\ls.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\cacache\package.json
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\cacache\put.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\cacache\readme.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\cacache\rm.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\cacache\verify.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\cacache\lib\entry-index.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\cacache\lib\memoization.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\cacache\lib\verify.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\cacache\lib\content\path.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\cacache\lib\content\read.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\cacache\lib\content\rm.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\cacache\lib\content\write.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\cacache\lib\util\disposer.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\cacache\lib\util\fix-owner.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\cacache\lib\util\hash-to-segments.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\cacache\lib\util\move-file.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\cacache\lib\util\tmp.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\gauge\license.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\gauge\package.json
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\gauge\readme.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\gauge\lib\base-theme.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\gauge\lib\error.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\gauge\lib\has-color.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\gauge\lib\index.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\gauge\lib\plumbing.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\gauge\lib\process.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\gauge\lib\progress-bar.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\gauge\lib\render-template.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\gauge\lib\set-immediate.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\gauge\lib\set-interval.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\gauge\lib\spin.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\gauge\lib\template-item.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\gauge\lib\theme-set.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\gauge\lib\themes.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\gauge\lib\wide-truncate.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\http-proxy-agent\package.json
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\http-proxy-agent\readme.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\http-proxy-agent\dist\agent.d.ts
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\http-proxy-agent\dist\agent.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\http-proxy-agent\dist\agent.js.map
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\http-proxy-agent\dist\index.d.ts
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\http-proxy-agent\dist\index.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\http-proxy-agent\dist\index.js.map
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\make-fetch-happen\license
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\make-fetch-happen\package.json
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\make-fetch-happen\readme.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\make-fetch-happen\lib\agent.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\make-fetch-happen\lib\fetch.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\make-fetch-happen\lib\index.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\make-fetch-happen\lib\options.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\make-fetch-happen\lib\remote.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\make-fetch-happen\lib\cache\entry.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\make-fetch-happen\lib\cache\errors.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\make-fetch-happen\lib\cache\index.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\make-fetch-happen\lib\cache\key.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\make-fetch-happen\lib\cache\policy.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\minipass-fetch\index.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\minipass-fetch\license
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\minipass-fetch\package.json
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\minipass-fetch\readme.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\minipass-fetch\lib\abort-error.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\minipass-fetch\lib\blob.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\minipass-fetch\lib\body.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\minipass-fetch\lib\fetch-error.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\minipass-fetch\lib\headers.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\minipass-fetch\lib\index.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\minipass-fetch\lib\request.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\minipass-fetch\lib\response.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\addon.gypi
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\changelog.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\contributing.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\license
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\macos_catalina.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\macos_catalina_acid_test.sh
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\package.json
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\readme.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\update-gyp.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\.github\issue_template.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\.github\pull_request_template.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\.github\workflows\release-please.yml
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\.github\workflows\tests.yml
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\.github\workflows\visual-studio.yml
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\bin\node-gyp.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\docs\binding.gyp-files-in-the-wild.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\docs\common-issues.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\docs\error-pre-versions-of-node-cannot-be-installed.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\docs\home.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\docs\linking-to-openssl.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\docs\updating-npm-bundled-node-gyp.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\.flake8
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\authors
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\changelog.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\code_of_conduct.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\contributing.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\gyp
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\gyp.bat
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\gyp_main.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\license
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\readme.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\requirements_dev.txt
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\setup.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\test_gyp.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\tools\graphviz.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\tools\pretty_gyp.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\tools\pretty_sln.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\tools\pretty_vcproj.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\tools\readme
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\tools\emacs\gyp-tests.el
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\tools\emacs\gyp.el
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\tools\emacs\readme
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\tools\emacs\run-unit-tests.sh
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\tools\emacs\testdata\media.gyp
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\tools\emacs\testdata\media.gyp.fontified
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\tools\xcode\readme
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\tools\xcode\specifications\gyp.pbfilespec
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\tools\xcode\specifications\gyp.xclangspec
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\.github\workflows\node-gyp.yml
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\.github\workflows\nodejs-windows.yml
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\.github\workflows\python_tests.yml
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\.github\workflows\release-please.yml
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\data\win\large-pdb-shim.cc
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\common.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\common_test.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\easy_xml.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\easy_xml_test.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\flock_tool.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\input.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\input_test.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\mac_tool.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\msvsnew.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\msvsproject.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\msvssettings.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\msvssettings_test.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\msvstoolfile.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\msvsuserfile.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\msvsutil.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\msvsversion.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\msvs_emulation.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\ninja_syntax.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\simple_copy.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\win_tool.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\xcodeproj_file.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\xcode_emulation.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\xcode_ninja.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\xml_fix.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\__init__.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\generator\analyzer.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\generator\android.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\generator\cmake.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\generator\compile_commands_json.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\generator\dump_dependency_json.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\generator\eclipse.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\generator\gypd.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\generator\gypsh.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\generator\make.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\generator\msvs.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\generator\msvs_test.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\generator\ninja.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\generator\ninja_test.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\generator\xcode.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\generator\xcode_test.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\gyp\pylib\gyp\generator\__init__.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\lib\build.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\lib\clean.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\lib\configure.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\lib\create-config-gypi.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\lib\find-node-directory.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\lib\find-python.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\lib\find-visualstudio.cs
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\lib\find-visualstudio.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\lib\install.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\lib\list.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\lib\node-gyp.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\lib\process-release.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\lib\rebuild.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\lib\remove.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\lib\util.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\src\win_delay_load_hook.cc
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\common.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\process-exec-sync.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\simple-proxy.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\test-addon.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\test-configure-python.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\test-create-config-gypi.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\test-download.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\test-find-accessible-sync.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\test-find-node-directory.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\test-find-python.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\test-find-visualstudio.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\test-install.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\test-options.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\test-process-release.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\fixtures\ca-bundle.crt
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\fixtures\ca.crt
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\fixtures\server.crt
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\fixtures\server.key
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\fixtures\test-charmap.py
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\fixtures\vs_2017_buildtools_minimal.txt
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\fixtures\vs_2017_community_workload.txt
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\fixtures\vs_2017_express.txt
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\fixtures\vs_2017_unusable.txt
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\fixtures\vs_2019_buildtools_minimal.txt
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\fixtures\vs_2019_community_workload.txt
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\fixtures\vs_2019_preview.txt
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\node-gyp\test\fixtures\nodedir\include\node\config.gypi
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\npmlog\license.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\npmlog\package.json
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\npmlog\readme.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\npmlog\lib\log.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\socks-proxy-agent\package.json
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\socks-proxy-agent\readme.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\socks-proxy-agent\dist\index.d.ts
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\socks-proxy-agent\dist\index.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\socks-proxy-agent\dist\index.js.map
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\ssri\changelog.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\ssri\index.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\ssri\license.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\ssri\package.json
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\ssri\readme.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\license.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\package.json
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\readme.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\lib\copy-file.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\lib\errors.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\lib\fs.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\lib\index.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\lib\mkdtemp.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\lib\with-temp-dir.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\lib\write-file.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\lib\common\get-options.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\lib\common\node.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\lib\common\owner.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\lib\common\file-url-to-path\index.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\lib\common\file-url-to-path\polyfill.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\lib\cp\index.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\lib\cp\license
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\lib\cp\polyfill.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\lib\mkdir\index.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\lib\mkdir\polyfill.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\lib\rm\index.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\fs\lib\rm\polyfill.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\move-file\index.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\move-file\license.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\move-file\package.json
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@npmcli\move-file\readme.md
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@tootallnate\once\package.json
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@tootallnate\once\dist\index.d.ts
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@tootallnate\once\dist\index.js
  • %TEMP%\pkg\152ddddf0ebc8fd9fdd0143778b6765e49678532a2b1e33e66adc235fa88b7a7\sqlite3\node_modules\@tootallnate\once\dist\index.js.map
Deletes following files that it created itself
  • %TEMP%\aut8712.tmp
  • %TEMP%\auta7ab.tmp
Network activity
Connects to
  • 'google.com':443
TCP
Other
  • 'google.com':443
UDP
  • DNS ASK google.com
  • DNS ASK do#######.#######ccicxiudstqonfotuwsrhuxkwhqjjfsbjhonoubrccy.nl
  • DNS ASK 0.###.sa.ngrok.io
Miscellaneous
Creates and executes the following
  • '%TEMP%\yvuelx.exe'
  • '%TEMP%\lskkev.exe'
Executes the following
  • '<SYSTEM32>\cmd.exe' /d /s /c "chcp"
  • '<SYSTEM32>\chcp.com'
  • '%WINDIR%\syswow64\cmd.exe' /c schtasks /create /tn JOXDHJ.exe /tr %APPDATA%\Windata\Microsoft Office Click-to-Run.exe /sc minute /mo 1
  • '%WINDIR%\syswow64\schtasks.exe' /create /tn JOXDHJ.exe /tr %APPDATA%\Windata\Microsoft Office Click-to-Run.exe /sc minute /mo 1
  • '<SYSTEM32>\cmd.exe' /d /s /c "chcp"' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c schtasks /create /tn JOXDHJ.exe /tr %APPDATA%\Windata\Microsoft Office Click-to-Run.exe /sc minute /mo 1' (with hidden window)

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android