Bibliothèque
Ma bibliothèque

+ Ajouter à la bibliothèque

Contacter-nous !
Support 24/24 | Rules regarding submitting

Nous téléphoner

0 825 300 230

Forum

Vos requêtes

  • Toutes : -
  • Non clôturées : -
  • Dernière : le -

Nous téléphoner

0 825 300 230

Profil

Trojan.MulDrop31.5045

Added to the Dr.Web virus database: 2025-04-14

Virus description added:

Technical Information

To ensure autorun and distribution
Modifies the following registry keys
  • [HKLM\Software\Classes\2345Pic.bmp\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.kdc\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.mdc\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.mdc\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.mef\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.mef\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.mos\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.mos\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.mrw\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.kc2\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.kdc\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.mrw\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.nrw\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.nrw\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.orf\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.orf\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.pef\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.pef\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.ptx\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.ptx\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.nef\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.nef\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.kc2\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.k25\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.pxn\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.crw\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.cs1\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.cs1\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.dc2\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.dc2\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.dcr\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.dcr\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.dng\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.dng\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.drf\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.drf\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.dsc\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.dsc\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.fff\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.fff\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.ia\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.ia\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.iiq\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.iiq\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.pxn\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.cr3\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.k25\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.j2c\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.qtk\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.pnm\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.pgm\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.pgm\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.pbm\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.pbm\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.ppm\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.ppm\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.ska\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.ska\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.webp\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.webp\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.wdp\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.wdp\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.tbi\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.tbi\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.heic\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.heic\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.ai\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PdfReader.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.ai\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PdfReader.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.ofd\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PdfReader.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.ofd\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PdfReader.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.pnm\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.cr3\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.crw\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.jpc\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.raf\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.raf\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.rdc\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.rdc\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.rw2\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.rw2\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.rwz\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.rwz\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.sr2\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.sr2\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.srf\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.srf\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.sti\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.sti\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.x3f\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.x3f\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.wmf\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.wmf\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.emf\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.emf\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.jpc\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.pgx\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.qtk\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.cr2\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.cr2\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.cine\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.pcx\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.pcx\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.png\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.png\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.ras\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.ras\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.tga\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.tga\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.targa\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.targa\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.tif\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.tif\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.tiff\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.tiff\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.wap\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.wap\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.wbmp\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.wbmp\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.wbm\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.mng\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.lbm\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.pcd\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.pdf\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PdfReader.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.wbm\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.lbm\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.dib\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.dib\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.ico\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.ico\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.cur\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.cur\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.jpg\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.jpg\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.jpeg\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.bmp\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.jpeg\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.jpe\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.jfif\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.jfif\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.jng\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.jng\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.koa\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.koa\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.iff\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.iff\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.jpe\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.mng\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.pgx\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.psd\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.psb\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.pfm\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.pct\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.pct\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.pict\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.pict\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.pic\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.pic\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.raw\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.raw\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.3fr\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.3fr\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.arw\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.arw\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.bay\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.bay\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.bmq\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.bmq\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.cap\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.cap\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.cine\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.psd\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.pfm\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.psb\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.jp2\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.pcd\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.cut\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.cut\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.xbm\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.xbm\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.xpm\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.xpm\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.dds\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.dds\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.gif\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.gif\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.hdr\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.hdr\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.g3\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.g3\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.sgi\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.sgi\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.exr\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.exr\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.j2k\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.j2k\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.j2c\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKLM\Software\Classes\2345Pic.jp2\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PicViewer.exe" "%1"'
  • [HKCU\Software\Classes\2345Pic.pdf\shell\open\command] '' = '"%ProgramFiles%\2345Pic\2345PdfReader.exe" "%1"'
Modifies file system
Creates the following files
  • %ProgramFiles%\2345pic\icon\bmp.ico
  • %ProgramFiles%\2345pic\2345miniui.dll
  • %ProgramFiles%\2345pic\2345pdfapp.dll
  • %ProgramFiles%\2345pic\hdpi\2345pdf_x100.dll
  • %ProgramFiles%\2345pic\hdpi\2345pdf_x125.dll
  • %ProgramFiles%\2345pic\hdpi\2345pdf_x200.dll
  • %ProgramFiles%\2345pic\2345printerapp.dll
  • %ProgramFiles%\2345pic\concrt140.dll
  • %ProgramFiles%\2345pic\d3dx9_43.dll
  • %ProgramFiles%\2345pic\freeimage.dll
  • %ProgramFiles%\2345pic\2345imagethumb64.dll
  • %ProgramFiles%\2345pic\2345imagethumbcore64.dll
  • %ProgramFiles%\2345pic\freeimageplus.dll
  • %ProgramFiles%\2345pic\pdfium.dll
  • %ProgramFiles%\2345pic\ucrtbase.dll
  • %ProgramFiles%\2345pic\vcruntime140.dll
  • %ProgramFiles%\2345pic\zlib.dll
  • nul
  • %APPDATA%\2345pic\rcimage.hzc
  • %APPDATA%\2345pic\2345image.hzv
  • %APPDATA%\2345pic\rescue.dat
  • %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\2345看图王\@卸载清除.lnk
  • %ProgramFiles%\2345pic\icuuc.dll
  • %ProgramFiles%\2345pic\msvcp140.dll
  • %ProgramFiles%\2345pic\hdpi\2345imageres_x150.dll
  • %ProgramFiles%\2345pic\hdpi\2345imageres_x125.dll
  • %ProgramFiles%\2345pic\lang\2345imagelang_chs.dll
  • %ProgramFiles%\2345pic\icon\gif.ico
  • %ProgramFiles%\2345pic\icon\jpg.ico
  • %ProgramFiles%\2345pic\icon\ofd.ico
  • %ProgramFiles%\2345pic\icon\pdf.ico
  • %ProgramFiles%\2345pic\icon\png.ico
  • %ProgramFiles%\2345pic\icon\psd.ico
  • %ProgramFiles%\2345pic\icon\tif.ico
  • %ProgramFiles%\2345pic\@卸载清除.bat
  • %ProgramFiles%\2345pic\@绿化安装.bat
  • %ProgramFiles%\2345pic\2345pdfreader.exe
  • %ProgramFiles%\2345pic\icon\common.ico
  • %ProgramFiles%\2345pic\2345pic.exe
  • %ProgramFiles%\2345pic\2345piceditor.exe
  • %ProgramFiles%\2345pic\2345picloader.exe
  • %ProgramFiles%\2345pic\2345picprinter.exe
  • %ProgramFiles%\2345pic\2345picviewer.exe
  • %ProgramFiles%\2345pic\2345batchrename.dll
  • %ProgramFiles%\2345pic\2345editorapp.dll
  • %ProgramFiles%\2345pic\lang\2345editorlang_chs.dll
  • %ProgramFiles%\2345pic\2345image.dll
  • %ProgramFiles%\2345pic\2345imageapp.dll
  • %ProgramFiles%\2345pic\2345imagecapture.dll
  • %ProgramFiles%\2345pic\2345piccapture.exe
  • %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\2345看图王\2345看图王-浏览图片.lnk
  • %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\2345看图王\2345看图王-图片美化.lnk
Miscellaneous
Creates and executes the following
  • '%ProgramFiles%\2345pic\2345picloader.exe' -install 79 -invoke-platform-x64
  • '%ProgramFiles%\2345pic\2345picloader.exe' --rescue --invoke-point=1
  • '%ProgramFiles%\2345pic\2345picloader.exe' -skinselected 0 -invoke-platform-x64
  • '%ProgramFiles%\2345pic\2345picloader.exe' -check-thumbnail -invoke-platform-x64
  • '%ProgramFiles%\2345pic\2345picloader.exe' -check-pdfconverter -invoke-platform-x64
Executes the following
  • '%WINDIR%\syswow64\cmd.exe' /c ""%ProgramFiles%\2345Pic\@绿化安装.bat" "
  • '%WINDIR%\syswow64\reg.exe' QUERY "HKU\S-1-5-19"
  • '%WINDIR%\syswow64\schtasks.exe' /delete /tn "Pic_2345Upgrade Task.job" /f
  • '%WINDIR%\syswow64\reg.exe' delete "HKLM\SYSTEM\CurrentControlSet\Services\ViewPic_2345Svc" /f
  • '%WINDIR%\syswow64\regsvr32.exe' /s ".\2345ImageThumb64.dll"
  • '<SYSTEM32>\regsvr32.exe' /s ".\2345ImageThumb64.dll"
  • '%WINDIR%\syswow64\timeout.exe' /t 3
  • '%WINDIR%\syswow64\cmd.exe' /c ""%ProgramFiles%\2345Pic\@绿化安装.bat" "' (with hidden window)

Recommandations pour le traitement

  1. Si le système d'exploitation peut être démarré (en mode normal ou en mode sans échec), téléchargez Dr.Web Security Space et lancez un scan complet de votre ordinateur et de tous les supports amovibles que vous utilisez. En savoir plus sur Dr.Web Security Space.
  2. Si le démarrage du système d'exploitation est impossible, veuillez modifier les paramètres du BIOS de votre ordinateur pour démarrer votre ordinateur via CD/DVD ou clé USB. Téléchargez l'image du disque de secours de restauration du système Dr.Web® LiveDisk ou l'utilitaire pour enregistrer Dr.Web® LiveDisk sur une clé USB, puis préparez la clé USB appropriée. Démarrez l'ordinateur à l'aide de cette clé et lancez le scan complet et le traitement des menaces détectées.

Veuillez lancer le scan complet du système à l'aide de Dr.Web Antivirus pour Mac OS.

Veuillez lancer le scan complet de toutes les partitions du disque à l'aide de Dr.Web Antivirus pour Linux.

  1. Si votre appareil mobile fonctionne correctement, veuillez télécharger et installer sur votre appareil mobile Dr.Web pour Android. Lancez un scan complet et suivez les recommandations sur la neutralisation des menaces détectées.
  2. Si l'appareil mobile est bloqué par le Trojan de la famille Android.Locker (un message sur la violation grave de la loi ou la demande d'une rançon est affiché sur l'écran de l'appareil mobile), procédez comme suit:
    • démarrez votre Smartphone ou votre tablette en mode sans échec (si vous ne savez pas comment faire, consultez la documentation de l'appareil mobile ou contactez le fabricant) ;
    • puis téléchargez et installez sur votre appareil mobile Dr.Web pour Android et lancez un scan complet puis suivez les recommandations sur la neutralisation des menaces détectées ;
    • Débranchez votre appareil et rebranchez-le.

En savoir plus sur Dr.Web pour Android