Bibliothèque
Ma bibliothèque

+ Ajouter à la bibliothèque

Contacter-nous !
Support 24/24 | Rules regarding submitting

Nous téléphoner

0 825 300 230

Forum

Vos requêtes

  • Toutes : -
  • Non clôturées : -
  • Dernière : le -

Nous téléphoner

0 825 300 230

Profil

Adware.StartPage.42

Added to the Dr.Web virus database: 2017-10-19

Virus description added:

Technical Information

Modifies file system
Creates the following files
  • %PROGRAMDATA%\mail.ru\id
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\thumbnails\games.mail.ru.jpeg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\thumbnails\mail.ru.jpeg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\thumbnails\news.mail.ru.jpeg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\thumbnails\torg.mail.ru.jpeg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\thumbnails\travel.mail.ru.jpeg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\01.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\02.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\03.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\04.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\wood_2.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\thumbnails\calendar.mail.ru.jpeg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\05.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\08.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\09.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\10.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\11.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\application_core\file-system.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\application_core\jquery-core.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\application_core\sqlitestorage.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\application_core\visibletab.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\config\config.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\06.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\weather\07.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\libs\jquery-ui.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\google-analytics.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\themes__theme-fade-wrong.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\_flax.jpg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\_mosaic.jpg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\_wall.jpg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-1.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-10.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-11.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-13.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-3.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\wall.jpg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\_cookies.jpg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\wood.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-4.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-8.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-9.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\leather.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\wood.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\wood_2.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\themes__arrow-left.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\themes__arrow-right.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\themes__theme-fade-ok.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-5.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-6.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\body__bg-7.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\favicon.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\libs\jquery.js
  • %TEMP%\d87b-4e30-e034-2c71
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\homepage@mail.ru\meta-inf\mozilla.rsa
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\homepage@mail.ru\meta-inf\mozilla.sf
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\homepage@mail.ru\bootstrap.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\homepage@mail.ru\chrome.manifest
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\homepage@mail.ru\content\fx-metrics.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\homepage@mail.ru\content\loader.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\homepage@mail.ru\install.rdf
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\homepage@mail.ru\skin\mail48.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\lib\version.js
  • %TEMP%\e6ba-2232-7aa2-6636
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\homepage@mail.ru\meta-inf\manifest.mf
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\desktop.ini
  • %LOCALAPPDATA%\microsoft\windows\history\low\desktop.ini
  • %LOCALAPPDATA%\microsoft\windows\history\low\history.ie5\desktop.ini
  • %TEMP%\amigo_scoped_dir_1584927058\e6ba-2232-7aa2-6636.dul!
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\index.dat
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\xjdcdp5t\desktop.ini
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\350cdmrl\desktop.ini
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\4w6wgrq3\desktop.ini
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\cuke7d4m\desktop.ini
  • %TEMP%\amigo_ldir_2460_22512\e6ba-2232-7aa2-6636
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\install.rdf
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\desktop.ini
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\skin\vb-logo.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\visual-bookmarks.html
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\libs\suggests.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\bookmarks\drag_drop.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\bookmarks\edit-dialog.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\bookmarks\layout.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\bookmarks\remove-dialog.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\bookmarks\updates.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\currency.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\geo-monitoring.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\mail-counter.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\news.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\odnoklassniki-counter.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\main.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\searchbar.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\traffic.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\weather.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\proto\informer.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\proto\pane.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\proto\slider.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\proto\tab-strip.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\sandbox\facade.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\utils\utils.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\manifest.json
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\mosaic.jpg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\modules\themes.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\preview\_fabric.jpg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\leather.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\flax.jpg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\fabric.jpg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\customscrollbar.css
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\dialog.css
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\general.css
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\grid.css
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\informers.css
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\menu.css
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\news.css
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\searchbar.css
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\background\background.html
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\newtabhomepage.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\background\modules.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\slide.css
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\themes.css
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\128x128.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\16x16.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\48x48.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\add_button.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\ajax_loader_mc.gif
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\clock.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\close.v2.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\splash.css
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\suggests.css
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\css\tabs.css
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\overlay.xul
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\main.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\cross.png
  • %WINDIR%\syswow64\grouppolicy\gpt.ini
  • %LOCALAPPDATA%\mail.ru\gochromiumnativehost\manifest.json
  • %TEMP%\13ad-aeef-d78a-72ec
  • %LOCALAPPDATA%\mail.ru\gochromiumnativehost\native_host_app.exe
  • %TEMP%\52fb-c676-15b1-8063
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\search@mail.ru\meta-inf\manifest.mf
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\search@mail.ru\meta-inf\mozilla.rsa
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\search@mail.ru\meta-inf\mozilla.sf
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\search@mail.ru\bootstrap.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\search@mail.ru\chrome.manifest
  • %TEMP%\updcf72.tmp
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\search@mail.ru\content\fx-metrics.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\search@mail.ru\install.rdf
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\search@mail.ru\skin\mail48.png
  • %TEMP%\b4e7-6e5f-450a-71c3
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\meta-inf\manifest.mf
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\meta-inf\mozilla.rsa
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\meta-inf\mozilla.sf
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome.manifest
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\utils.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\fx-metrics.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\loader.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\search@mail.ru\content\loader.js
  • %APPDATA%\microsoft\windows\cookies\low\index.dat
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\js\libs\knockout-2.2.1.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\dialog\close.v2.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\exchange\exchange-3.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\searchbar.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\searchbar__button.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\sgmus.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\slide__control\slide__control-delete-hover.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\slide__control\slide__control-delete.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\slide__control\slide__control-edit-hover.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\slide__control\slide__control-edit.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\slider-arrow.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\pane-arrow.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-1.jpg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\search_bg.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-11.jpg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-3.jpg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-4.jpg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-5.jpg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-6.jpg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-7.jpg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-8.jpg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-9.jpg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\cookies.jpg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-10.jpg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\background\background.js
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\themes\body__bg-13.jpg
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\reg1.bg.v2.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\p-main_sub__gradient.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\no_photo.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\traffic\informers__traffic-jam.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\01.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\02.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\03.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\04.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\05.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\06.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\07.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\08.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\exchange\exchange-2.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\09.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\11.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\leftright.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\loader.gif
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\loading.gif
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\logo.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\logo_bg.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\menu__item\menu__item-1.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\menu__item\menu__item-2.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\menu__item\menu__item-3.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\menu__item\menu__item-4.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\weather\10.png
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\multiauth.gif
  • %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\{a38384b3-2d1d-4f36-bc22-0f7ae402bcd7}\chrome\content\visual-bookmarks\images\informers\exchange\exchange-1.png
  • %LOCALAPPDATA%\microsoft\windows\history\low\history.ie5\index.dat
Sets the 'hidden' attribute to the following files
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\desktop.ini
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\desktop.ini
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\xjdcdp5t\desktop.ini
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\350cdmrl\desktop.ini
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\4w6wgrq3\desktop.ini
  • %LOCALAPPDATA%\microsoft\windows\<INETFILES>\low\content.ie5\cuke7d4m\desktop.ini
  • %LOCALAPPDATA%\microsoft\windows\history\low\history.ie5\desktop.ini
Deletes the following files
  • %TEMP%\13ad-aeef-d78a-72ec
  • %TEMP%\52fb-c676-15b1-8063
  • %TEMP%\b4e7-6e5f-450a-71c3
  • %TEMP%\d87b-4e30-e034-2c71
  • %TEMP%\e6ba-2232-7aa2-6636
Network activity
Connects to
  • 'ar###il.adv.biz':80
TCP
HTTP GET requests
  • http://xm#.###update.mail.ru/switcher/conf.mrdj?co###############################################################################################################################################...
  • http://mr##.mail.ru/update/2/version.txt?ty######################################################################################################################################################...
  • http://mr##.mail.ru/update/2/version.txt?GU###############################################################################
  • http://am###dl.mail.ru/AmigoInstallerD1.exe
  • 'go####dl.mail.ru':443
  • 'am###.mail.ru':443
  • UDP
    • DNS ASK go####dl.mail.ru
    • DNS ASK xm#.###update.mail.ru
    • DNS ASK mr##.mail.ru
    • DNS ASK ar###il.adv.biz
    • DNS ASK xt#####ru.cdnmail.ru
    • DNS ASK am###.mail.ru
    • DNS ASK am###dl.mail.ru
    Miscellaneous
    Creates and executes the following
    • '%TEMP%\updcf72.tmp' --binded_data="AAAAAQAABF4AAAEAeyJwYXNzX3BheWxvYWQiOiB0cnVlLCAiY29tbWFuZF9saW5lIjogIiIsICJ0cyI6IDE0NjkxNjA1MjQsICJxdWVyeV9zdHJpbmciOiAicmZyPTgxMTY0NCZwYXJ0bmVyaWQ9ODExNjQ0JnBhcnRuZXJfbmV3X3VybD...
    • '%TEMP%\e6ba-2232-7aa2-6636' --with-updater --ils=12 --no-gui --rfr=811644 --partner_new_url=http://ar###il.adv.biz/save/index/?gu############################################################################################...
    • '%TEMP%\amigo_ldir_2460_22512\e6ba-2232-7aa2-6636' --ils=12 --rfr=811644 --partner_new_url=http://ar###il.adv.biz/save/index/?gu########################################################################################################## --ua_rfr=...
    Executes the following
    • '%WINDIR%\syswow64\rundll32.exe' "%WINDIR%\syswow64\wininet.dll",DispatchAPICall 1

    Recommandations pour le traitement

    1. Si le système d'exploitation peut être démarré (en mode normal ou en mode sans échec), téléchargez Dr.Web Security Space et lancez un scan complet de votre ordinateur et de tous les supports amovibles que vous utilisez. En savoir plus sur Dr.Web Security Space.
    2. Si le démarrage du système d'exploitation est impossible, veuillez modifier les paramètres du BIOS de votre ordinateur pour démarrer votre ordinateur via CD/DVD ou clé USB. Téléchargez l'image du disque de secours de restauration du système Dr.Web® LiveDisk ou l'utilitaire pour enregistrer Dr.Web® LiveDisk sur une clé USB, puis préparez la clé USB appropriée. Démarrez l'ordinateur à l'aide de cette clé et lancez le scan complet et le traitement des menaces détectées.

    Veuillez lancer le scan complet du système à l'aide de Dr.Web Antivirus pour Mac OS.

    Veuillez lancer le scan complet de toutes les partitions du disque à l'aide de Dr.Web Antivirus pour Linux.

    1. Si votre appareil mobile fonctionne correctement, veuillez télécharger et installer sur votre appareil mobile Dr.Web pour Android. Lancez un scan complet et suivez les recommandations sur la neutralisation des menaces détectées.
    2. Si l'appareil mobile est bloqué par le Trojan de la famille Android.Locker (un message sur la violation grave de la loi ou la demande d'une rançon est affiché sur l'écran de l'appareil mobile), procédez comme suit:
      • démarrez votre Smartphone ou votre tablette en mode sans échec (si vous ne savez pas comment faire, consultez la documentation de l'appareil mobile ou contactez le fabricant) ;
      • puis téléchargez et installez sur votre appareil mobile Dr.Web pour Android et lancez un scan complet puis suivez les recommandations sur la neutralisation des menaces détectées ;
      • Débranchez votre appareil et rebranchez-le.

    En savoir plus sur Dr.Web pour Android