C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\<INETFILES>\content.ie5\re1n75kr\8gc0kolxvga0p8yqaftzeevzch1b52...
Moves the following files
from %ALLUSERSPROFILE%\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\acrordrdcupd1500820082.msp to %ALLUSERSPROFILE%\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\acrordrdcupd1500820082.msp.ryk
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application ... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\application ...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\adobe\acrobat\dc\shareddataevents to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\adobe\acrobat\dc\shareddataevents.ryk
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\adobe\acrobat\dc\iconcacherdr.dat to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\adobe\acrobat\dc\iconcacherdr.dat.ryk
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\adobe\acrobat\dc\adobesysfnt15.lst to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\adobe\acrobat\dc\adobesysfnt15.lst.ryk
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\adobe\acrobat\dc\usercache.bin to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\adobe\acrobat\dc\usercache.bin.ryk
from C:\documents and settings\user\appdata\local\adobe\acrocef\dc\acrobat\cache\data_1 to C:\documents and settings\user\appdata\local\adobe\acrocef\dc\acrobat\cache\data_1.ryk
from C:\documents and settings\user\appdata\local\adobe\acrocef\dc\acrobat\cache\index to C:\documents and settings\user\appdata\local\adobe\acrocef\dc\acrobat\cache\index.ryk
from C:\documents and settings\user\appdata\local\adobe\color\profiles\wsrgb.icc to C:\documents and settings\user\appdata\local\adobe\color\profiles\wsrgb.icc.ryk
from C:\documents and settings\user\appdata\local\adobe\color\profiles\wscrgb.icc to C:\documents and settings\user\appdata\local\adobe\color\profiles\wscrgb.icc.ryk
from C:\documents and settings\user\appdata\local\adobe\color\acecache11.lst to C:\documents and settings\user\appdata\local\adobe\color\acecache11.lst.ryk
from C:\documents and settings\user\appdata\local\adobe\acrocef\dc\acrobat\cache\data_2 to C:\documents and settings\user\appdata\local\adobe\acrocef\dc\acrobat\cache\data_2.ryk
from C:\documents and settings\user\appdata\local\adobe\acrocef\dc\acrobat\cache\data_3 to C:\documents and settings\user\appdata\local\adobe\acrocef\dc\acrobat\cache\data_3.ryk
from C:\documents and settings\user\appdata\local\adobe\acrocef\dc\acrobat\cache\data_0 to C:\documents and settings\user\appdata\local\adobe\acrocef\dc\acrobat\cache\data_0.ryk
from C:\documents and settings\user\appdata\local\adobe\acrobat\dc\cache\acrofnt15.lst to C:\documents and settings\user\appdata\local\adobe\acrobat\dc\cache\acrofnt15.lst.ryk
from C:\documents and settings\user\appdata\local\adobe\acrocef\dc\acrobat\cookie\cookies to C:\documents and settings\user\appdata\local\adobe\acrocef\dc\acrobat\cookie\cookies.ryk
from C:\documents and settings\default user\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf to C:\documents and settings\default user\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf.ryk
from C:\documents and settings\default user\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms to C:\documents and settings\default user\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms.ryk
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\in... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\in...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\me... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\me...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\of... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\microsoft\of...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\<INETFILES>\... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\<INETFILES>\...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\<INETFILES>\content.ie5\0u8lpyu9\wxgyhhpdzg-ed4sr0bqelbfmapgw1p... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\<INETFILES>\content.ie5\0u8lpyu9\wxgyhhpdzg-ed4sr0bqelbfmapgw1p...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\<INETFILES>\content.ie5\0u8lpyu9\vt12abarw5hnohlt-y66pkclfe7azd... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\<INETFILES>\content.ie5\0u8lpyu9\vt12abarw5hnohlt-y66pkclfe7azd...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\<INETFILES>\content.ie5\caasbycl\satellitelib-... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\<INETFILES>\content.ie5\caasbycl\satellitelib-...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\<INETFILES>\content.ie5\bzjx5bke\mbox-contents... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\<INETFILES>\content.ie5\bzjx5bke\mbox-contents...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\<INETFILES>\content.ie5\0u8lpyu9\dil-contents-... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\<INETFILES>\content.ie5\0u8lpyu9\dil-contents-...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\temp\temp1_fp_13.0.0.182_archive.zip\fp_13.0.0... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\temp\temp1_fp_13.0.0.182_archive.zip\fp_13.0.0...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\microsoft\internet explorer\recovery\high\acti... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\microsoft\internet explorer\recovery\high\acti...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\<INETFILES>\content.ie5\re1n7... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\<INETFILES>\content.ie5\re1n7...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\<INETFILES>\content.ie5\bzjx5... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\<INETFILES>\content.ie5\bzjx5...
from volume{600ba660-c712-11e6-a54f-080027cffa47}\system volume information\tracking.log.tmp to volume{600ba660-c712-11e6-a54f-080027cffa47}\system volume information\tracking.log
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\<INETFILES>\content.ie5\0u8lp... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\<INETFILES>\content.ie5\0u8lp...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\temp\microsoft .net framework... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\temp\microsoft .net framework...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\microsoft\media player\sync p... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\microsoft\media player\sync p...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\microsoft\internet explorer\r... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\microsoft\internet explorer\r...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\microsoft\feeds\feeds for uni... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\microsoft\feeds\feeds for uni...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\thunderbird\... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\thunderbird\...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\temp\dd_ndp4... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\temp\dd_ndp4...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\temp\dd_vcre... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\application data\application data\application data\temp\dd_vcre...
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\<INETFILES>\content.ie5\bzjx5bke\fdc5uco11re5u283tqazmjrjqbqgkv... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\<INETFILES>\content.ie5\bzjx5bke\fdc5uco11re5u283tqazmjrjqbqgkv...
from C:\documents and settings\public\recorded tv\sample media\win7_scenic-demoshort_raw.wtv to C:\documents and settings\public\recorded tv\sample media\win7_scenic-demoshort_raw.wtv.ryk
from C:\documents and settings\default\ntuser.dat.log1 to C:\documents and settings\default\ntuser.dat.log1.ryk
from C:\documents and settings\default user\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms to C:\documents and settings\default user\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms.ryk
from %ALLUSERSPROFILE%\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\data1.cab to %ALLUSERSPROFILE%\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\data1.cab.ryk
from %ALLUSERSPROFILE%\application data\application data\application data\adobe\arm\s\armmanifest.msi to %ALLUSERSPROFILE%\application data\application data\application data\adobe\arm\s\armmanifest.msi.ryk
from %ALLUSERSPROFILE%\application data\adobe\arm\reader_15.007.20033\readerdcmanifest.msi to %ALLUSERSPROFILE%\application data\adobe\arm\reader_15.007.20033\readerdcmanifest.msi.ryk
from C:\documents and settings\public\libraries\recordedtv.library-ms to C:\documents and settings\public\libraries\recordedtv.library-ms.ryk
from C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\<INETFILES>\content.ie5\re1n75kr\8gc0kolxvga0p8yqaftzeevzch1b52... to C:\documents and settings\user\appdata\local\application data\application data\application data\application data\application data\<INETFILES>\content.ie5\re1n75kr\8gc0kolxvga0p8yqaftzeevzch1b52...
Changes user data files extensions (Trojan.Encoder).
В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.
Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
выключите устройство и включите его в обычном режиме.
Подальший перегляд даного сайта означає, що Ви погоджуєтесь на використання нами cookie-файлів та інших технологій збору статистичних відомостей про відвідувачів. Докладніше