Pour les utilisateurs

Fermer

Bibliothèque
Ma bibliothèque

+ Ajouter à la bibliothèque

Recherche
Recherche

Contacter-nous !
Support 24/24 | Rules regarding submitting

Envoyer un message

Requête à l'aide du formulaire

Nous téléphoner

0 825 300 230

Forum

Vos requêtes

  • Toutes : -
  • Non clôturées : -
  • Dernière : le -
Créer une nouvelle requête

Nous téléphoner

0 825 300 230

Profil

FR

RU CN DE EN ES FR IT JP KZ UZ PL BY ID
Fermer
Services support
Scanners
Dr.Web vxCube
Démo
Bibliothèque virale
Base documentaire

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Actualités

Trojan.Siggen18.29188

Added to the Dr.Web virus database: 2022-07-29

Virus description added:

Technical Information

Malicious functions
Executes the following
  • '%WINDIR%\syswow64\taskkill.exe' /F /IM nnu.exe
  • '%WINDIR%\syswow64\taskkill.exe' /f /im iss.exe
Modifies file system
Creates the following files
  • %TEMP%\ckz_bsa7\lib\bz2.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp856.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp855.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp852.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp850.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp775.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp737.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp720.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp500.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp437.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp857.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp424.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1257.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1256.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1255.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1254.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1253.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1252.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1251.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1250.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1140.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1258.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp858.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp860.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp861.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\hz.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\hp_roman8.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\hex_codec.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\gbk.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\gb2312.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\gb18030.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\euc_kr.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\euc_jp.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\euc_jis_2004.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\euc_jisx0213.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp950.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp949.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp932.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp875.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp874.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp869.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp866.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp865.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp864.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp863.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp862.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1026.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\idna.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1006.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\charmap.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_31.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_30.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_29.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_28.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_27.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_26.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_25.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_24.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_23.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_32.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_22.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_20.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_19.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_18.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_17.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_16.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_15.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_14.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_13.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_12a.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_21.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_33.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_34.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_35.txt
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\bz2_codec.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\big5hkscs.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\big5.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\base64_codec.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\ascii.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\aliases.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\__init__.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\_parseaddr.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\utils.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\pybanner048.gif
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_46.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_45.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_44.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_43.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_42.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_41.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_40.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_39.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_38.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_37.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_36.txt
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp037.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\undefined.pyc
  • %ALLUSERSPROFILE%\panasonic\00000.bat
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso2022_jp_2.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\unittest\loader.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\unittest\case.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\unicodedata.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\select.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\pywintypes27.dll
  • %ALLUSERSPROFILE%\panasonic\lib\logging\__init__.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\library.zip
  • %ALLUSERSPROFILE%\panasonic\lib\engineid.dll
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\__init__.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\unittest\main.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\zlib_codec.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\utf_8_sig.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\utf_8.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\utf_7.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\utf_32_le.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\utf_32_be.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\utf_32.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\utf_16_le.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\utf_16_be.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\utf_16.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\uu_codec.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\unittest\result.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\unittest\runner.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\unittest\signals.pyc
  • %ALLUSERSPROFILE%\panasonic\0000.txt
  • %ALLUSERSPROFILE%\panasonic\000.txt
  • %ALLUSERSPROFILE%\panasonic\00.txt
  • %ALLUSERSPROFILE%\panasonic\0000.bat
  • %ALLUSERSPROFILE%\panasonic\0.bat
  • %ALLUSERSPROFILE%\panasonic\00.bat
  • %ALLUSERSPROFILE%\panasonic\000.bat
  • %ALLUSERSPROFILE%\panasonic\0.txt
  • %ALLUSERSPROFILE%\nnu.bnb
  • %ALLUSERSPROFILE%\panasonic\nnu.exe
  • %ALLUSERSPROFILE%\panasonic\iss.exe
  • %ALLUSERSPROFILE%\panasonic\engineid.dll
  • %ALLUSERSPROFILE%\panasonic\lib\_win32sysloader.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\_ssl.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\_socket.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\_hashlib.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\_ctypes.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\win32api.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\unittest\__init__.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\unittest\util.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\unittest\suite.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\unicode_internal.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_12.txt
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\unicode_escape.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\tis_620.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\johab.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_9.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_8.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_7.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_6.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_5.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_4.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_3.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_2.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\koi8_r.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_16.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_14.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_13.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_11.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_10.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_1.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso2022_kr.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso2022_jp_ext.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso2022_jp_3.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso2022_jp_2004.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_15.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\koi8_u.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\latin_1.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_arabic.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\string_escape.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\shift_jis_2004.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\shift_jisx0213.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\shift_jis.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\rot_13.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\raw_unicode_escape.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\quopri_codec.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\punycode.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\ptcp154.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\palmos.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mbcs.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_turkish.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_romanian.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_roman.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_latin2.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_iceland.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_greek.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_farsi.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_cyrillic.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_croatian.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_centeuro.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso2022_jp.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso2022_jp_1.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_11.txt
  • %TEMP%\ckz_bsa7\lib\encodings\mac_cyrillic.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp_1.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\idna.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\hz.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\hp_roman8.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\hex_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\gbk.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\gb2312.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\gb18030.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp_2.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\euc_kr.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\euc_jis_2004.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\euc_jisx0213.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp950.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp949.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp932.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp875.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp874.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp869.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp866.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\euc_jp.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp_2004.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp_3.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp_ext.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_arabic.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\latin_1.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\koi8_u.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\koi8_r.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\johab.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_9.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_8.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_7.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_6.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_5.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_4.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_3.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_2.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_16.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_15.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_14.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_13.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_11.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_10.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_1.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_kr.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp865.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_centeuro.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp864.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp862.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1006.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp037.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\charmap.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\bz2_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\big5hkscs.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\big5.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\base64_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\ascii.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\aliases.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1026.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\__init__.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\tests\setup.sample
  • %TEMP%\ckz_bsa7\lib\distutils\sysconfig.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\log.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\errors.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\command\wininst-9.0.exe
  • %TEMP%\ckz_bsa7\lib\distutils\command\wininst-9.0-amd64.exe
  • %TEMP%\ckz_bsa7\lib\distutils\command\wininst-8.0.exe
  • %TEMP%\ckz_bsa7\lib\distutils\command\wininst-7.1.exe
  • %TEMP%\ckz_bsa7\lib\distutils\command\wininst-6.0.exe
  • %TEMP%\ckz_bsa7\lib\distutils\text_file.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1140.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1250.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1251.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp861.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp860.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp858.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp857.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp856.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp855.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp852.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp850.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp775.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp737.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp720.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp500.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp437.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp424.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1258.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1257.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1256.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1255.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1254.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1253.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1252.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp863.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\util.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_09.txt
  • %TEMP%\ckz_bsa7\lib\encodings\mac_farsi.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\log.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\errors.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\command\wininst-9.0.exe
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\command\wininst-9.0-amd64.exe
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\command\wininst-8.0.exe
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\command\wininst-7.1.exe
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\command\wininst-6.0.exe
  • %ALLUSERSPROFILE%\panasonic\lib\ctypes\__init__.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\ctypes\_endian.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\sysconfig.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\ctypes\wintypes.pyc
  • %ALLUSERSPROFILE%\panasonic\omegle.rpg
  • %ALLUSERSPROFILE%\nokia\nvidia.exe
  • %ALLUSERSPROFILE%\adobe\directx6.opx
  • %TEMP%\ckz_bsa7\rundnn.exe
  • %TEMP%\ckz_bsa7\ogg.exe
  • %TEMP%\ckz_bsa7\engineid.dll
  • %TEMP%\ckz_bsa7\data6.ogg
  • %TEMP%\ckz_bsa7\lib\_win32sysloader.pyd
  • %TEMP%\ckz_bsa7\lib\_hashlib.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\bz2.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\tests\setup.sample
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\text_file.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\__init__.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_08.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_07.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_06.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_05.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_04.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_03.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_02.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_01.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\audiotest.au
  • %ALLUSERSPROFILE%\panasonic\lib\email\quoprimime.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\parser.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\mime\__init__.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\message.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\iterators.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\header.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\generator.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\feedparser.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\errors.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\encoders.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\charset.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\base64mime.pyc
  • %TEMP%\ckz_bsa7\lib\win32api.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_10.txt
  • %TEMP%\ckz_bsa7\lib\unittest\__init__.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\suite.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\unicode_escape.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\undefined.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\tis_620.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\string_escape.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\shift_jis_2004.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\shift_jisx0213.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\shift_jis.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\rot_13.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\raw_unicode_escape.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\unicode_internal.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\quopri_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\ptcp154.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\palmos.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mbcs.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_turkish.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_romanian.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_roman.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_latin2.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_iceland.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_greek.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\punycode.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_16.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_16_be.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_16_le.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\signals.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\runner.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\result.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\main.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\loader.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\case.pyc
  • %TEMP%\ckz_bsa7\lib\unicodedata.pyd
  • %TEMP%\ckz_bsa7\lib\select.pyd
  • %TEMP%\ckz_bsa7\lib\pywintypes27.dll
  • %TEMP%\ckz_bsa7\lib\logging\__init__.pyc
  • %TEMP%\ckz_bsa7\lib\library.zip
  • %TEMP%\ckz_bsa7\lib\engineid.dll
  • %TEMP%\ckz_bsa7\lib\encodings\__init__.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\zlib_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\uu_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_8_sig.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_8.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_7.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_32_le.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_32_be.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_32.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_croatian.pyc
  • %ALLUSERSPROFILE%\panasonic\iss.txt
Deletes the following files
  • %TEMP%\ckz_bsa7\rundnn.exe
  • %TEMP%\ckz_bsa7\lib\encodings\cp869.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp866.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp865.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp864.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp863.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp862.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp949.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp861.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp858.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp857.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp856.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp855.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp852.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp850.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp875.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp874.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp932.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp950.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp737.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp_2.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp_1.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\idna.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\hz.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp775.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp_3.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp860.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\hp_roman8.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\gb18030.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\euc_kr.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\euc_jp.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\euc_jis_2004.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\euc_jisx0213.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\hex_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\gbk.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\gb2312.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_turkish.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp720.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\ascii.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\aliases.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\__init__.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\text_file.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\tests\setup.sample
  • %TEMP%\ckz_bsa7\lib\distutils\sysconfig.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\log.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\base64_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp_ext.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\big5.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\command\wininst-8.0.exe
  • %TEMP%\ckz_bsa7\lib\distutils\command\wininst-7.1.exe
  • %TEMP%\ckz_bsa7\lib\distutils\command\wininst-6.0.exe
  • %TEMP%\ckz_bsa7\lib\bz2.pyd
  • %ALLUSERSPROFILE%\panasonic\0.txt
  • %ALLUSERSPROFILE%\panasonic\00.txt
  • %TEMP%\ckz_bsa7\lib\distutils\command\wininst-9.0.exe
  • %TEMP%\ckz_bsa7\lib\distutils\errors.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp_2004.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\bz2_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1251.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp424.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1258.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1257.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1256.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1255.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1254.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\big5hkscs.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp500.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp437.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1250.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1140.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1026.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1006.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp037.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\charmap.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1252.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1253.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_kr.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_1.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_10.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\zlib_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\uu_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_8_sig.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_8.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_7.pyc
  • %TEMP%\ckz_bsa7\lib\library.zip
  • %TEMP%\ckz_bsa7\lib\unittest\suite.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\__init__.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_32_le.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_16_be.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_16.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\unicode_internal.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\unicode_escape.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\undefined.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_32_be.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_32.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_16_le.pyc
  • %ALLUSERSPROFILE%\panasonic\000.txt
  • %TEMP%\ckz_bsa7\lib\encodings\tis_620.pyc
  • %TEMP%\ckz_bsa7\lib\select.pyd
  • %TEMP%\ckz_bsa7\engineid.dll
  • %TEMP%\ckz_bsa7\data6.ogg
  • %TEMP%\ckz_bsa7\lib\_win32sysloader.pyd
  • %TEMP%\ckz_bsa7\lib\_hashlib.pyd
  • %TEMP%\ckz_bsa7\lib\win32api.pyd
  • %TEMP%\ckz_bsa7\lib\unittest\__init__.pyc
  • %TEMP%\ckz_bsa7\lib\pywintypes27.dll
  • %TEMP%\ckz_bsa7\lib\logging\__init__.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\util.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\runner.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\result.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\main.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\loader.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\case.pyc
  • %TEMP%\ckz_bsa7\lib\unicodedata.pyd
  • %TEMP%\ckz_bsa7\ogg.exe
  • %TEMP%\ckz_bsa7\lib\unittest\signals.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\command\wininst-9.0-amd64.exe
  • %TEMP%\ckz_bsa7\lib\encodings\string_escape.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\shift_jis.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\koi8_r.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\johab.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_9.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_8.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_7.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_6.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\shift_jis_2004.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\koi8_u.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\latin_1.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_2.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_16.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_15.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_14.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_13.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_11.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_5.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_3.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\shift_jisx0213.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_4.pyc
  • %TEMP%\ckz_bsa7\lib\engineid.dll
  • %TEMP%\ckz_bsa7\lib\encodings\rot_13.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\raw_unicode_escape.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\quopri_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\punycode.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\ptcp154.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\palmos.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_croatian.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_arabic.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_centeuro.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_roman.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_latin2.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_iceland.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_greek.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_farsi.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_cyrillic.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mbcs.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_romanian.pyc
  • %ALLUSERSPROFILE%\panasonic\0000.txt
Network activity
Connects to
  • 'pa###bin.com':443
  • '20#.#80.208.205':8899
TCP
Other
  • 'pa###bin.com':443
UDP
  • DNS ASK pa###bin.com
Miscellaneous
Searches for the following windows
  • ClassName: '' WindowName: ''
Creates and executes the following
  • '%TEMP%\ckz_bsa7\ogg.exe'
  • '%ALLUSERSPROFILE%\nokia\nvidia.exe' x -o+ -pxvmoa9F15jka95x %ALLUSERSPROFILE%\Panasonic\omegle.rpg %ALLUSERSPROFILE%\Panasonic\
  • '%ALLUSERSPROFILE%\panasonic\nnu.exe'
  • '%TEMP%\ckz_bsa7\rundnn.exe' x -o+ -p8ay73yG6s6gHu8H data6.ogg %ALLUSERSPROFILE%\
  • '%ALLUSERSPROFILE%\panasonic\iss.exe'
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\00.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\00.txt' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\000.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\000.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\000.txt' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\0000.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\0.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\0000.txt' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\00000.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c rundnn.exe x -o+ -p8ay73yG6s6gHu8H data6.ogg %ALLUSERSPROFILE%\' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\0000.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\0.txt' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\iss.txt' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\0.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c rmdir /s /q %ALLUSERSPROFILE%\Panasonic\' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c taskkill.exe /F /IM nnu.exe' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\nnu.exe' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c copy /y data6.ogg %ALLUSERSPROFILE%\Adobe\directx6.opx' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Adobe\directx6.opx' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im iss.exe' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c md %ALLUSERSPROFILE%\Panasonic\' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c RMDIR /Q/S %ALLUSERSPROFILE%\LaCie\' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c md %ALLUSERSPROFILE%\Infotec\' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\inn.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\00000.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\00.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Nokia\nvidia.exe x -o+ -pxvmoa9F15jka95x %ALLUSERSPROFILE%\Panasonic\omegle.rpg %ALLUSERSPROFILE%\Panasonic\' (with hidden window)
Executes the following
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Adobe\directx6.opx
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\00000.bat
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\0000.txt
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\0000.bat
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\0000.bat
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\000.txt
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\000.bat
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\000.bat
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\00.txt
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\00.bat
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\00.bat
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\0.txt
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\0.bat
  • '%WINDIR%\syswow64\timeout.exe'
  • '%WINDIR%\syswow64\findstr.exe' /c:"#HTML" 0.txt
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Nokia\nvidia.exe x -o+ -pxvmoa9F15jka95x %ALLUSERSPROFILE%\Panasonic\omegle.rpg %ALLUSERSPROFILE%\Panasonic\
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\inn.bat
  • '%WINDIR%\syswow64\cmd.exe' /c md %ALLUSERSPROFILE%\Infotec\
  • '%WINDIR%\syswow64\cmd.exe' /c RMDIR /Q/S %ALLUSERSPROFILE%\LaCie\
  • '%WINDIR%\syswow64\cmd.exe' /c md %ALLUSERSPROFILE%\Panasonic\
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\iss.txt
  • '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im iss.exe
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\nnu.exe
  • '%WINDIR%\syswow64\cmd.exe' /c rundnn.exe x -o+ -p8ay73yG6s6gHu8H data6.ogg %ALLUSERSPROFILE%\
  • '%WINDIR%\syswow64\cmd.exe' /c rmdir /s /q %ALLUSERSPROFILE%\Panasonic\
  • '%WINDIR%\syswow64\cmd.exe' /c taskkill.exe /F /IM nnu.exe
  • '%WINDIR%\syswow64\cmd.exe' /c copy /y data6.ogg %ALLUSERSPROFILE%\Adobe\directx6.opx
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\0.bat
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\00000.bat

Recommandations pour le traitement

  1. Si le système d'exploitation peut être démarré (en mode normal ou en mode sans échec), téléchargez Dr.Web Security Space et lancez un scan complet de votre ordinateur et de tous les supports amovibles que vous utilisez. En savoir plus sur Dr.Web Security Space.
  2. Si le démarrage du système d'exploitation est impossible, veuillez modifier les paramètres du BIOS de votre ordinateur pour démarrer votre ordinateur via CD/DVD ou clé USB. Téléchargez l'image du disque de secours de restauration du système Dr.Web® LiveDisk ou l'utilitaire pour enregistrer Dr.Web® LiveDisk sur une clé USB, puis préparez la clé USB appropriée. Démarrez l'ordinateur à l'aide de cette clé et lancez le scan complet et le traitement des menaces détectées.
Version démo gratuite

 

Télécharger Dr.Web

Par le numéro de série

Veuillez lancer le scan complet du système à l'aide de Dr.Web Antivirus pour Mac OS.

Version démo gratuite

 

Télécharger Dr.Web sur le site

Par le numéro de série

Télécharger Dr.Web sur l'Apple Store

Veuillez lancer le scan complet de toutes les partitions du disque à l'aide de Dr.Web Antivirus pour Linux.

Version démo gratuite

 

Télécharger Dr.Web

Par le numéro de série

  1. Si votre appareil mobile fonctionne correctement, veuillez télécharger et installer sur votre appareil mobile Dr.Web pour Android. Lancez un scan complet et suivez les recommandations sur la neutralisation des menaces détectées.
  2. Si l'appareil mobile est bloqué par le Trojan de la famille Android.Locker (un message sur la violation grave de la loi ou la demande d'une rançon est affiché sur l'écran de l'appareil mobile), procédez comme suit:
    • démarrez votre Smartphone ou votre tablette en mode sans échec (si vous ne savez pas comment faire, consultez la documentation de l'appareil mobile ou contactez le fabricant) ;
    • puis téléchargez et installez sur votre appareil mobile Dr.Web pour Android et lancez un scan complet puis suivez les recommandations sur la neutralisation des menaces détectées ;
    • Débranchez votre appareil et rebranchez-le.

En savoir plus sur Dr.Web pour Android

Free trial

14 days

Download now
Get it on Google Play