Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Trojan.StartPage.57349

Added to the Dr.Web virus database: 2013-11-25

Virus description added:

Technical Information

To ensure autorun and distribution:
Modifies the following registry keys:
  • [<HKLM>\SOFTWARE\Microsoft\Internet Explorer\Extensions\{FB5F1910-F110-11d2-BB9E-00C04F795683}] 'Exec' = 'http://www.78789.cn'
Malicious functions:
Executes the following:
  • '%WINDIR%\regedit.exe' /s ICO.reg
  • '%WINDIR%\regedit.exe' /s TyoedUrls.reg
  • '%WINDIR%\regedit.exe' /s ie.reg
  • '<SYSTEM32>\cmd.exe' /c ""%HOMEPATH%\Favorites\Run.bat" "
  • '%WINDIR%\regedit.exe' /s Toolbar.reg
  • '%WINDIR%\regedit.exe' /s Toolbar2.reg
Modifies settings of Windows Internet Explorer:
  • [<HKCU>\Software\Microsoft\Internet Explorer\Main] 'Window Title' = '78789.cn 祝您上网愉快'
Sets a new unauthorized home page for Windows Internet Explorer.
Modifies file system :
Creates the following files:
  • %HOMEPATH%\Favorites\网址大全\爱情交友\百合网.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\网易 同城约会.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\珍爱网.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\瑞丽女性 情感频道.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\雅虎交缘人.url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\爱情交友\网易交友.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\赛我网.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\爱情公寓.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\新浪交友中心.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\爱情交友\情爱 网易女人.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\搜狐交友.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\更多\百度搜索_婚介.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\更多\百度搜索_征婚.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\更多\爱情交友 网址大全.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\更多\百度搜索_交友.url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\QQ聊天室.url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\网易聊天站.url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\聊天软件\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\聊天网址\碧聊.url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\网易POPO.url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\聊天软件\新浪UC.url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\聊天软件\腾讯QQ.url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\聊天软件\MSN Messenger.url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\聊天软件\skype简体中文.url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\更多\视频聊天.url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\北方聊吧 .url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\学生聊天网 .url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\上海热线聊天室.url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\中华网聊天室.url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\更多\聊天网.url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\更多\聊天网址 网址大全.url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\新浪聊天.url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\游戏\更多\游戏网址集 网址大全.url
  • %HOMEPATH%\Favorites\网址大全\游戏\更多\百度搜索_游戏.url
  • %HOMEPATH%\Favorites\网址大全\游戏\新浪游戏.url
  • %HOMEPATH%\Favorites\网址大全\游戏\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\游戏\浩方对战平台.url
  • %HOMEPATH%\Favorites\网址大全\游戏\游戏网址集 网址大全.url
  • %HOMEPATH%\Favorites\网址大全\游戏\更多\百度搜索_网络游戏.url
  • %HOMEPATH%\Favorites\网址大全\游戏\梦幻西游.url
  • %HOMEPATH%\Favorites\网址大全\游戏\征途.url
  • %HOMEPATH%\Favorites\网址大全\游戏\17173 游戏门户.url
  • %HOMEPATH%\Favorites\网址大全\游戏\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\搜索引擎\繁体Google.url
  • %HOMEPATH%\Favorites\网址大全\搜索引擎\迅雷资源搜索.url
  • %HOMEPATH%\Favorites\网址大全\游戏\劲舞团.url
  • %HOMEPATH%\Favorites\网址大全\游戏\太平洋游戏网.url
  • %HOMEPATH%\Favorites\网址大全\游戏\QQ游戏下载中心.url
  • %HOMEPATH%\Favorites\网址大全\游戏\中国游戏中心.url
  • %HOMEPATH%\Favorites\网址大全\游戏\百度搜索_游戏.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\伊人风采.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\奥一 非常情缘.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\世纪佳缘.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\亚洲交友中心.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\心理测试.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\情感空间 搜狐女人.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\嫁我网.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\心理测试 39健康网.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\TOM 无限情缘.url
  • %HOMEPATH%\Favorites\网址大全\游戏\跑跑卡丁车.url
  • %HOMEPATH%\Favorites\网址大全\游戏\边锋棋牌游戏.url
  • %HOMEPATH%\Favorites\网址大全\游戏\百度搜索_网络游戏.url
  • %HOMEPATH%\Favorites\网址大全\游戏\联众世界.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\爱情交友\QQ交友中心.url
  • %HOMEPATH%\Favorites\网址大全\游戏\魔兽世界.url
  • %HOMEPATH%\Favorites\网址大全\爱情交友\51.com 交友.url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\聊天软件\阿里旺旺.url
  • %HOMEPATH%\Favorites\网址大全\门户名站\Yahoo 雅虎.url
  • %HOMEPATH%\Favorites\网址大全\门户名站\凤 凰 网.url
  • %HOMEPATH%\Favorites\网址大全\门户名站\Sohu 搜狐.url
  • %HOMEPATH%\Favorites\网址大全\门户名站\Tom.url
  • %HOMEPATH%\Favorites\网址大全\门户名站\新 华 网.url
  • %HOMEPATH%\Favorites\网址大全\门户名站\新浪 Sina.url
  • %HOMEPATH%\Favorites\网址大全\门户名站\太平洋电脑网.url
  • %HOMEPATH%\Favorites\网址大全\门户名站\搜狐 Sohu.url
  • %HOMEPATH%\Favorites\网址大全\门户名站\Sina 新浪.url
  • %HOMEPATH%\Favorites\网址大全\邮箱\更多\更多邮箱...... .url
  • %HOMEPATH%\Favorites\网址大全\邮箱\更多\百度搜索_免费邮箱.url
  • %HOMEPATH%\Favorites\网址大全\邮箱\新浪邮箱.url
  • %HOMEPATH%\Favorites\网址大全\邮箱\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\门户名站\21CN.url
  • %HOMEPATH%\Favorites\网址大全\门户名站\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\邮箱\雅虎邮箱.url
  • %HOMEPATH%\Favorites\网址大全\门户名站\163 网易.url
  • %HOMEPATH%\Favorites\网址大全\门户名站\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\音乐MP3\更多\百度搜索_MP3.url
  • %HOMEPATH%\Favorites\网址大全\音乐MP3\更多\音乐MP3 网址大全.url
  • %HOMEPATH%\Favorites\网址大全\音乐MP3\搜刮音乐 Sogua.url
  • %HOMEPATH%\Favorites\网址大全\音乐MP3\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\音乐MP3\音乐MP3 网址大全.url
  • %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\78789[1]
  • %HOMEPATH%\Favorites\网址大全\音乐MP3\百度MP3.url
  • %HOMEPATH%\Favorites\网址大全\音乐MP3\雅虎音乐.url
  • %HOMEPATH%\Favorites\网址大全\音乐MP3\千千音乐.url
  • %HOMEPATH%\Favorites\网址大全\门户名站\腾讯QQ.url
  • %HOMEPATH%\Favorites\网址大全\音乐MP3\Baidu 百度MP3.url
  • %HOMEPATH%\Favorites\网址大全\门户名站\更多\实用网址,搜索大全.url
  • %HOMEPATH%\Favorites\网址大全\门户名站\网易 163.url
  • %HOMEPATH%\Favorites\网址大全\音乐MP3\Sogua 搜刮音乐.url
  • %HOMEPATH%\Favorites\网址大全\音乐MP3\一听音乐网.url
  • %HOMEPATH%\Favorites\网址大全\音乐MP3\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\音乐MP3\QQ163 音乐.url
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\博客论坛 .url
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\大旗网.url
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\人民网强国社区.url
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\凯迪社区 .url
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\奇虎.url
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\搜狐社区.url
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\大洋论坛 .url
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\天涯社区.url
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\QQ论坛.url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\西陆聊天室.url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\鹏城聊天室(深圳).url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\聊天软件\雅虎通.url
  • %HOMEPATH%\Favorites\网址大全\聊天网址\聊聊.url
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\ChinaRen社区.url
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\聊天网址\鹏城聊天室.url
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\CCTV论坛.url
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\新浪论坛.url
  • %HOMEPATH%\Favorites\网址大全\邮箱\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\邮箱\Gmail.url
  • %HOMEPATH%\Favorites\网址大全\邮箱\163邮箱.url
  • %HOMEPATH%\Favorites\网址大全\邮箱\21CN邮箱.url
  • %HOMEPATH%\Favorites\网址大全\邮箱\TOM邮箱.url
  • %HOMEPATH%\Favorites\网址大全\邮箱\搜狐邮箱.url
  • %HOMEPATH%\Favorites\网址大全\邮箱\Hotmail.url
  • %HOMEPATH%\Favorites\网址大全\邮箱\QQ邮箱.url
  • %HOMEPATH%\Favorites\网址大全\邮箱\126邮箱.url
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\更多\论坛BBS 网址大全.url
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\猫朴.url
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\更多\百度搜索_论坛.url
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\网易论坛.url
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\西祠 .url
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\瑞丽女性论坛.url
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\百度贴吧.url
  • %HOMEPATH%\Favorites\网址大全\搜索引擎\更多搜索--推荐.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\无锡人才网.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\杭州人才网.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\广西人才网.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\我的工作网.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\泉州人才网.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\浙江人才网.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\江西人才网.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\河北人才网.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\厦门人才网.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\南方人才网.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\人才招聘\八方人才.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\卓博人才.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\人才招聘 网址大全.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\北京人才网.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\上海招聘网.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\中国卫生人才网.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\深圳人才网.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\更多\百度搜索_人才.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\更多\百度搜索_人才招聘.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\人才招聘\更多\人才招聘 网址大全.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\更多\百度搜索_猎头.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\百度搜索_猎头.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\更多\百度搜索_博客.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\更多\百度搜索_招聘.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\智通人才网.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\百度搜索_招聘.lnk
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\苏州人才网.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\温州人才网.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\湖南人才网.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\齐鲁人才网.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\智联招聘.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\西安市人才网.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\长沙人才网.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\两性健康\Sohu 两性健康论坛.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\39社区谈性说爱.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\ChinaRen人之初.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\两性-腾讯女性频道.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\两性健康 网址大全.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\TOM 两性情感论坛.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\《家庭医生》性知识.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\39健康男性生理.url
  • %HOMEPATH%\Favorites\Toolbar2.reg
  • %HOMEPATH%\Favorites\Toolbar.reg
  • %HOMEPATH%\Favorites\IE.reg
  • %HOMEPATH%\Favorites\Run.bat
  • %HOMEPATH%\Favorites\网址大全\两性健康\21cn-两性世界.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\21cn性爱阳光 论坛.url
  • %HOMEPATH%\Favorites\TyoedUrls.reg
  • %HOMEPATH%\Favorites\ICO.reg
  • %HOMEPATH%\Favorites\网址大全\两性健康\两性问题-百度知道.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\瑞丽女性论坛-两性私语.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\男性频道_新浪网.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\搜狐两性健康.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\新华网两性健康.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\人才招聘\中国人才热线.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\51job 前程无忧.url
  • %HOMEPATH%\Favorites\网址大全\人才招聘\ChinaHR 中华英才.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\成人用品\成人用品.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\人民网-两性健康.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\女人健康-搜狐健康.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\中华网-性爱天地.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\人之初网站.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\成人用品\伟哥.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\成人用品\性用品.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\性爱-39健康网.url
  • %HOMEPATH%\Favorites\网址大全\两性健康\成人用品\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\博客相册\51 博客.url
  • %HOMEPATH%\Favorites\网址大全\影视\QQ直播.url
  • %HOMEPATH%\Favorites\网址大全\影视\Vagaa(哇嘎).url
  • %HOMEPATH%\Favorites\网址大全\影视\PPlive网络视频.url
  • %HOMEPATH%\Favorites\网址大全\影视\PPstream在线电视.url
  • %HOMEPATH%\Favorites\网址大全\影视\土豆网-豆单.url
  • %HOMEPATH%\Favorites\网址大全\影视\影视帝国.url
  • %HOMEPATH%\Favorites\网址大全\影视\VeryCD共享.url
  • %HOMEPATH%\Favorites\网址大全\影视\世纪前线.url
  • %HOMEPATH%\Favorites\网址大全\影视\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\实用工具\联通话费查询 .url
  • %HOMEPATH%\Favorites\网址大全\实用工具\航班查询.url
  • %HOMEPATH%\Favorites\网址大全\实用工具\机票预订.url
  • %HOMEPATH%\Favorites\网址大全\实用工具\移动话费查询 .url
  • %HOMEPATH%\Favorites\网址大全\影视\BT中国联盟 .url
  • %HOMEPATH%\Favorites\网址大全\影视\BT之家.url
  • %HOMEPATH%\Favorites\网址大全\实用工具\邮编电话.url
  • %HOMEPATH%\Favorites\网址大全\实用工具\酒店预订.url
  • %HOMEPATH%\Favorites\网址大全\影视\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\搜索引擎\图片搜索.url
  • %HOMEPATH%\Favorites\网址大全\搜索引擎\地图搜索.url
  • %HOMEPATH%\Favorites\网址大全\搜索引擎\Sogou 搜狗.url
  • %HOMEPATH%\Favorites\网址大全\搜索引擎\Yahoo 雅虎.url
  • %HOMEPATH%\Favorites\网址大全\搜索引擎\更多\搜索引擎 网址大全.url
  • %HOMEPATH%\Favorites\网址大全\搜索引擎\更多\更多搜索.url
  • %HOMEPATH%\Favorites\网址大全\搜索引擎\新闻搜索.url
  • %HOMEPATH%\Favorites\网址大全\搜索引擎\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\搜索引擎\Google 谷歌.url
  • %HOMEPATH%\Favorites\网址大全\影视\更多\百度搜索_电视.url
  • %HOMEPATH%\Favorites\网址大全\影视\贪婪大陆-BT发布区.url
  • %HOMEPATH%\Favorites\网址大全\影视\更多\宽带电影 网址大全.url
  • %HOMEPATH%\Favorites\网址大全\影视\更多\百度搜索_电影.url
  • %HOMEPATH%\Favorites\网址大全\搜索引擎\BT搜索.url
  • %HOMEPATH%\Favorites\网址大全\搜索引擎\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\影视\迅雷影视.url
  • %HOMEPATH%\Favorites\网址大全\搜索引擎\Baidu 百度搜索.url
  • %HOMEPATH%\Favorites\网址大全\博客相册\搜狐 博客.url
  • %HOMEPATH%\Favorites\网址大全\博客相册\新浪 博客.url
  • %HOMEPATH%\Favorites\网址大全\博客相册\和讯博客.url
  • %HOMEPATH%\Favorites\网址大全\博客相册\天涯博客.url
  • %HOMEPATH%\Favorites\网址大全\博客相册\更多\百度搜索_博客.url
  • %HOMEPATH%\Favorites\网址大全\博客相册\百度空间.url
  • %HOMEPATH%\Favorites\网址大全\博客相册\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\博客相册\更多\博客Blog 相册 网址大全.url
  • %HOMEPATH%\Favorites\网址大全\博客相册\博客网.url
  • %HOMEPATH%\Favorites\网址大全\博客相册\QQ相册.url
  • %HOMEPATH%\Favorites\网址大全\博客相册\QZone 城市达人.url
  • %HOMEPATH%\Favorites\网址大全\博客相册\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\博客相册\MSN 博客.url
  • %HOMEPATH%\Favorites\网址大全\博客相册\凤凰博客.url
  • %HOMEPATH%\Favorites\网址大全\博客相册\博客大巴.url
  • %HOMEPATH%\Favorites\网址大全\博客相册\Tom 博客.url
  • %HOMEPATH%\Favorites\网址大全\博客相册\中国博客网.url
  • %HOMEPATH%\Favorites\网址大全\博客相册\网易 博客.url
  • %HOMEPATH%\Favorites\网址大全\实用工具\彩票查询 .url
  • %HOMEPATH%\Favorites\网址大全\实用工具\手机号码.url
  • %HOMEPATH%\Favorites\网址大全\实用工具\天气预报.url
  • %HOMEPATH%\Favorites\网址大全\实用工具\学历查询 .url
  • %HOMEPATH%\Favorites\网址大全\实用工具\更多\日常生话.url
  • %HOMEPATH%\Favorites\网址大全\实用工具\更多\更多实用查询.url
  • %HOMEPATH%\Favorites\网址大全\实用工具\扩展名在线查 .url
  • %HOMEPATH%\Favorites\网址大全\实用工具\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\实用工具\域名查询 .url
  • %HOMEPATH%\Favorites\网址大全\实用工具\IP 地址.url
  • %HOMEPATH%\Favorites\网址大全\实用工具\免费在线杀毒.url
  • %HOMEPATH%\Favorites\网址大全\博客相册\网易相册.url
  • %HOMEPATH%\Favorites\网址大全\实用工具\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\实用工具\在线翻译.url
  • %HOMEPATH%\Favorites\网址大全\实用工具\地图公交.url
  • %HOMEPATH%\Favorites\网址大全\实用工具\列车时刻.url
  • %HOMEPATH%\Favorites\网址大全\实用工具\周公解梦.url
Sets the 'hidden' attribute to the following files:
  • %HOMEPATH%\Favorites\网址大全\聊天网址\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\爱情交友\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\聊天网址\聊天软件\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\聊天网址\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\游戏\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\搜索引擎\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\爱情交友\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\游戏\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\门户名站\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\门户名站\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\音乐MP3\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\音乐MP3\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\论坛BBS\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\邮箱\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\邮箱\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\搜索引擎\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\两性健康\Desktop.ini
  • %HOMEPATH%\Favorites\ICO.reg
  • %HOMEPATH%\Favorites\网址大全\人才招聘\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\两性健康\成人用品\Desktop.ini
  • %HOMEPATH%\Favorites\Run.bat
  • %HOMEPATH%\Favorites\IE.reg
  • %HOMEPATH%\Favorites\TyoedUrls.reg
  • %HOMEPATH%\Favorites\Toolbar.reg
  • %HOMEPATH%\Favorites\网址大全\实用工具\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\实用工具\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\影视\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\影视\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\人才招聘\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\人才招聘\各地人才\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\博客相册\更多\Desktop.ini
  • %HOMEPATH%\Favorites\网址大全\博客相册\Desktop.ini
Network activity:
Connects to:
  • 'www.78##9.cn':80
  • 'localhost':1035
TCP:
HTTP GET requests:
  • www.78##9.cn/
UDP:
  • DNS ASK www.78##9.cn
Miscellaneous:
Searches for the following windows:
  • ClassName: '' WindowName: '(null)'
  • ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
  • ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
  • ClassName: 'EDIT' WindowName: '(null)'
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'
  • ClassName: 'RegEdit_RegEdit' WindowName: '(null)'

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android