PARA USUARIOS

Cerrar

Mi biblioteca
Mi biblioteca

+ Añadir a la biblioteca

Buscar
Buscar

Soporte
Soporte 24 horas | Normas de contactar

Escribir

una solicitud al rellenar un formulario

Llamar

+7 (495) 789-45-86

Foro

Sus solicitudes

Crear una nueva solicitud

Llamar

+7 (495) 789-45-86

Perfil

ES

RU CN DE EN ES FR IT JP KZ UZ PL BY ID
Cerrar
Servicios
Escáneres
Dr.Web vxCube
Demo
Peritaje de IIV
Biblioteca de virus
Base de conocimiento

Tecnologías

Términos

Formación y educación

Mitos

Noticias

Trojan.Siggen18.29188

Added to the Dr.Web virus database: 2022-07-29

Virus description added:

Technical Information

Malicious functions
Executes the following
  • '%WINDIR%\syswow64\taskkill.exe' /F /IM nnu.exe
  • '%WINDIR%\syswow64\taskkill.exe' /f /im iss.exe
Modifies file system
Creates the following files
  • %TEMP%\ckz_bsa7\lib\bz2.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp856.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp855.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp852.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp850.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp775.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp737.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp720.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp500.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp437.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp857.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp424.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1257.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1256.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1255.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1254.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1253.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1252.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1251.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1250.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1140.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1258.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp858.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp860.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp861.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\hz.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\hp_roman8.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\hex_codec.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\gbk.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\gb2312.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\gb18030.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\euc_kr.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\euc_jp.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\euc_jis_2004.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\euc_jisx0213.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp950.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp949.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp932.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp875.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp874.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp869.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp866.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp865.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp864.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp863.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp862.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1026.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\idna.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp1006.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\charmap.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_31.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_30.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_29.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_28.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_27.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_26.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_25.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_24.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_23.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_32.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_22.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_20.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_19.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_18.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_17.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_16.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_15.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_14.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_13.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_12a.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_21.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_33.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_34.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_35.txt
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\bz2_codec.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\big5hkscs.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\big5.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\base64_codec.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\ascii.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\aliases.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\__init__.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\_parseaddr.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\utils.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\pybanner048.gif
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_46.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_45.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_44.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_43.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_42.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_41.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_40.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_39.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_38.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_37.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_36.txt
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\cp037.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\undefined.pyc
  • %ALLUSERSPROFILE%\panasonic\00000.bat
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso2022_jp_2.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\unittest\loader.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\unittest\case.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\unicodedata.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\select.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\pywintypes27.dll
  • %ALLUSERSPROFILE%\panasonic\lib\logging\__init__.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\library.zip
  • %ALLUSERSPROFILE%\panasonic\lib\engineid.dll
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\__init__.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\unittest\main.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\zlib_codec.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\utf_8_sig.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\utf_8.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\utf_7.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\utf_32_le.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\utf_32_be.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\utf_32.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\utf_16_le.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\utf_16_be.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\utf_16.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\uu_codec.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\unittest\result.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\unittest\runner.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\unittest\signals.pyc
  • %ALLUSERSPROFILE%\panasonic\0000.txt
  • %ALLUSERSPROFILE%\panasonic\000.txt
  • %ALLUSERSPROFILE%\panasonic\00.txt
  • %ALLUSERSPROFILE%\panasonic\0000.bat
  • %ALLUSERSPROFILE%\panasonic\0.bat
  • %ALLUSERSPROFILE%\panasonic\00.bat
  • %ALLUSERSPROFILE%\panasonic\000.bat
  • %ALLUSERSPROFILE%\panasonic\0.txt
  • %ALLUSERSPROFILE%\nnu.bnb
  • %ALLUSERSPROFILE%\panasonic\nnu.exe
  • %ALLUSERSPROFILE%\panasonic\iss.exe
  • %ALLUSERSPROFILE%\panasonic\engineid.dll
  • %ALLUSERSPROFILE%\panasonic\lib\_win32sysloader.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\_ssl.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\_socket.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\_hashlib.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\_ctypes.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\win32api.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\unittest\__init__.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\unittest\util.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\unittest\suite.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\unicode_internal.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_12.txt
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\unicode_escape.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\tis_620.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\johab.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_9.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_8.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_7.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_6.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_5.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_4.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_3.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_2.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\koi8_r.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_16.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_14.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_13.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_11.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_10.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_1.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso2022_kr.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso2022_jp_ext.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso2022_jp_3.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso2022_jp_2004.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso8859_15.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\koi8_u.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\latin_1.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_arabic.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\string_escape.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\shift_jis_2004.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\shift_jisx0213.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\shift_jis.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\rot_13.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\raw_unicode_escape.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\quopri_codec.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\punycode.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\ptcp154.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\palmos.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mbcs.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_turkish.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_romanian.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_roman.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_latin2.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_iceland.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_greek.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_farsi.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_cyrillic.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_croatian.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\mac_centeuro.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso2022_jp.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\encodings\iso2022_jp_1.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_11.txt
  • %TEMP%\ckz_bsa7\lib\encodings\mac_cyrillic.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp_1.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\idna.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\hz.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\hp_roman8.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\hex_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\gbk.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\gb2312.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\gb18030.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp_2.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\euc_kr.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\euc_jis_2004.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\euc_jisx0213.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp950.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp949.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp932.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp875.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp874.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp869.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp866.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\euc_jp.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp_2004.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp_3.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp_ext.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_arabic.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\latin_1.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\koi8_u.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\koi8_r.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\johab.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_9.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_8.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_7.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_6.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_5.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_4.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_3.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_2.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_16.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_15.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_14.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_13.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_11.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_10.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_1.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_kr.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp865.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_centeuro.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp864.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp862.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1006.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp037.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\charmap.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\bz2_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\big5hkscs.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\big5.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\base64_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\ascii.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\aliases.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1026.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\__init__.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\tests\setup.sample
  • %TEMP%\ckz_bsa7\lib\distutils\sysconfig.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\log.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\errors.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\command\wininst-9.0.exe
  • %TEMP%\ckz_bsa7\lib\distutils\command\wininst-9.0-amd64.exe
  • %TEMP%\ckz_bsa7\lib\distutils\command\wininst-8.0.exe
  • %TEMP%\ckz_bsa7\lib\distutils\command\wininst-7.1.exe
  • %TEMP%\ckz_bsa7\lib\distutils\command\wininst-6.0.exe
  • %TEMP%\ckz_bsa7\lib\distutils\text_file.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1140.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1250.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1251.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp861.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp860.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp858.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp857.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp856.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp855.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp852.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp850.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp775.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp737.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp720.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp500.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp437.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp424.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1258.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1257.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1256.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1255.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1254.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1253.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1252.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp863.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\util.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_09.txt
  • %TEMP%\ckz_bsa7\lib\encodings\mac_farsi.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\log.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\errors.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\command\wininst-9.0.exe
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\command\wininst-9.0-amd64.exe
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\command\wininst-8.0.exe
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\command\wininst-7.1.exe
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\command\wininst-6.0.exe
  • %ALLUSERSPROFILE%\panasonic\lib\ctypes\__init__.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\ctypes\_endian.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\sysconfig.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\ctypes\wintypes.pyc
  • %ALLUSERSPROFILE%\panasonic\omegle.rpg
  • %ALLUSERSPROFILE%\nokia\nvidia.exe
  • %ALLUSERSPROFILE%\adobe\directx6.opx
  • %TEMP%\ckz_bsa7\rundnn.exe
  • %TEMP%\ckz_bsa7\ogg.exe
  • %TEMP%\ckz_bsa7\engineid.dll
  • %TEMP%\ckz_bsa7\data6.ogg
  • %TEMP%\ckz_bsa7\lib\_win32sysloader.pyd
  • %TEMP%\ckz_bsa7\lib\_hashlib.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\bz2.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\tests\setup.sample
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\text_file.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\distutils\__init__.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_08.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_07.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_06.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_05.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_04.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_03.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_02.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_01.txt
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\audiotest.au
  • %ALLUSERSPROFILE%\panasonic\lib\email\quoprimime.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\parser.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\mime\__init__.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\message.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\iterators.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\header.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\generator.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\feedparser.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\errors.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\encoders.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\charset.pyc
  • %ALLUSERSPROFILE%\panasonic\lib\email\base64mime.pyc
  • %TEMP%\ckz_bsa7\lib\win32api.pyd
  • %ALLUSERSPROFILE%\panasonic\lib\email\test\data\msg_10.txt
  • %TEMP%\ckz_bsa7\lib\unittest\__init__.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\suite.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\unicode_escape.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\undefined.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\tis_620.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\string_escape.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\shift_jis_2004.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\shift_jisx0213.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\shift_jis.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\rot_13.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\raw_unicode_escape.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\unicode_internal.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\quopri_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\ptcp154.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\palmos.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mbcs.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_turkish.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_romanian.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_roman.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_latin2.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_iceland.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_greek.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\punycode.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_16.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_16_be.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_16_le.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\signals.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\runner.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\result.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\main.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\loader.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\case.pyc
  • %TEMP%\ckz_bsa7\lib\unicodedata.pyd
  • %TEMP%\ckz_bsa7\lib\select.pyd
  • %TEMP%\ckz_bsa7\lib\pywintypes27.dll
  • %TEMP%\ckz_bsa7\lib\logging\__init__.pyc
  • %TEMP%\ckz_bsa7\lib\library.zip
  • %TEMP%\ckz_bsa7\lib\engineid.dll
  • %TEMP%\ckz_bsa7\lib\encodings\__init__.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\zlib_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\uu_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_8_sig.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_8.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_7.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_32_le.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_32_be.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_32.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_croatian.pyc
  • %ALLUSERSPROFILE%\panasonic\iss.txt
Deletes the following files
  • %TEMP%\ckz_bsa7\rundnn.exe
  • %TEMP%\ckz_bsa7\lib\encodings\cp869.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp866.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp865.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp864.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp863.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp862.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp949.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp861.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp858.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp857.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp856.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp855.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp852.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp850.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp875.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp874.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp932.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp950.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp737.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp_2.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp_1.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\idna.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\hz.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp775.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp_3.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp860.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\hp_roman8.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\gb18030.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\euc_kr.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\euc_jp.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\euc_jis_2004.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\euc_jisx0213.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\hex_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\gbk.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\gb2312.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_turkish.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp720.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\ascii.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\aliases.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\__init__.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\text_file.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\tests\setup.sample
  • %TEMP%\ckz_bsa7\lib\distutils\sysconfig.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\log.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\base64_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp_ext.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\big5.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\command\wininst-8.0.exe
  • %TEMP%\ckz_bsa7\lib\distutils\command\wininst-7.1.exe
  • %TEMP%\ckz_bsa7\lib\distutils\command\wininst-6.0.exe
  • %TEMP%\ckz_bsa7\lib\bz2.pyd
  • %ALLUSERSPROFILE%\panasonic\0.txt
  • %ALLUSERSPROFILE%\panasonic\00.txt
  • %TEMP%\ckz_bsa7\lib\distutils\command\wininst-9.0.exe
  • %TEMP%\ckz_bsa7\lib\distutils\errors.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_jp_2004.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\bz2_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1251.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp424.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1258.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1257.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1256.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1255.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1254.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\big5hkscs.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp500.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp437.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1250.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1140.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1026.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1006.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp037.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\charmap.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1252.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\cp1253.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso2022_kr.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_1.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_10.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\zlib_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\uu_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_8_sig.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_8.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_7.pyc
  • %TEMP%\ckz_bsa7\lib\library.zip
  • %TEMP%\ckz_bsa7\lib\unittest\suite.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\__init__.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_32_le.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_16_be.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_16.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\unicode_internal.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\unicode_escape.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\undefined.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_32_be.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_32.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\utf_16_le.pyc
  • %ALLUSERSPROFILE%\panasonic\000.txt
  • %TEMP%\ckz_bsa7\lib\encodings\tis_620.pyc
  • %TEMP%\ckz_bsa7\lib\select.pyd
  • %TEMP%\ckz_bsa7\engineid.dll
  • %TEMP%\ckz_bsa7\data6.ogg
  • %TEMP%\ckz_bsa7\lib\_win32sysloader.pyd
  • %TEMP%\ckz_bsa7\lib\_hashlib.pyd
  • %TEMP%\ckz_bsa7\lib\win32api.pyd
  • %TEMP%\ckz_bsa7\lib\unittest\__init__.pyc
  • %TEMP%\ckz_bsa7\lib\pywintypes27.dll
  • %TEMP%\ckz_bsa7\lib\logging\__init__.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\util.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\runner.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\result.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\main.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\loader.pyc
  • %TEMP%\ckz_bsa7\lib\unittest\case.pyc
  • %TEMP%\ckz_bsa7\lib\unicodedata.pyd
  • %TEMP%\ckz_bsa7\ogg.exe
  • %TEMP%\ckz_bsa7\lib\unittest\signals.pyc
  • %TEMP%\ckz_bsa7\lib\distutils\command\wininst-9.0-amd64.exe
  • %TEMP%\ckz_bsa7\lib\encodings\string_escape.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\shift_jis.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\koi8_r.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\johab.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_9.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_8.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_7.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_6.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\shift_jis_2004.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\koi8_u.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\latin_1.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_2.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_16.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_15.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_14.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_13.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_11.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_5.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_3.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\shift_jisx0213.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\iso8859_4.pyc
  • %TEMP%\ckz_bsa7\lib\engineid.dll
  • %TEMP%\ckz_bsa7\lib\encodings\rot_13.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\raw_unicode_escape.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\quopri_codec.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\punycode.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\ptcp154.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\palmos.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_croatian.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_arabic.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_centeuro.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_roman.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_latin2.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_iceland.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_greek.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_farsi.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_cyrillic.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mbcs.pyc
  • %TEMP%\ckz_bsa7\lib\encodings\mac_romanian.pyc
  • %ALLUSERSPROFILE%\panasonic\0000.txt
Network activity
Connects to
  • 'pa###bin.com':443
  • '20#.#80.208.205':8899
TCP
Other
  • 'pa###bin.com':443
UDP
  • DNS ASK pa###bin.com
Miscellaneous
Searches for the following windows
  • ClassName: '' WindowName: ''
Creates and executes the following
  • '%TEMP%\ckz_bsa7\ogg.exe'
  • '%ALLUSERSPROFILE%\nokia\nvidia.exe' x -o+ -pxvmoa9F15jka95x %ALLUSERSPROFILE%\Panasonic\omegle.rpg %ALLUSERSPROFILE%\Panasonic\
  • '%ALLUSERSPROFILE%\panasonic\nnu.exe'
  • '%TEMP%\ckz_bsa7\rundnn.exe' x -o+ -p8ay73yG6s6gHu8H data6.ogg %ALLUSERSPROFILE%\
  • '%ALLUSERSPROFILE%\panasonic\iss.exe'
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\00.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\00.txt' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\000.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\000.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\000.txt' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\0000.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\0.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\0000.txt' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\00000.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c rundnn.exe x -o+ -p8ay73yG6s6gHu8H data6.ogg %ALLUSERSPROFILE%\' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\0000.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\0.txt' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\iss.txt' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\0.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c rmdir /s /q %ALLUSERSPROFILE%\Panasonic\' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c taskkill.exe /F /IM nnu.exe' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\nnu.exe' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c copy /y data6.ogg %ALLUSERSPROFILE%\Adobe\directx6.opx' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Adobe\directx6.opx' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im iss.exe' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c md %ALLUSERSPROFILE%\Panasonic\' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c RMDIR /Q/S %ALLUSERSPROFILE%\LaCie\' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c md %ALLUSERSPROFILE%\Infotec\' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\inn.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\00000.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\00.bat' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Nokia\nvidia.exe x -o+ -pxvmoa9F15jka95x %ALLUSERSPROFILE%\Panasonic\omegle.rpg %ALLUSERSPROFILE%\Panasonic\' (with hidden window)
Executes the following
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Adobe\directx6.opx
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\00000.bat
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\0000.txt
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\0000.bat
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\0000.bat
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\000.txt
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\000.bat
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\000.bat
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\00.txt
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\00.bat
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\00.bat
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\0.txt
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\0.bat
  • '%WINDIR%\syswow64\timeout.exe'
  • '%WINDIR%\syswow64\findstr.exe' /c:"#HTML" 0.txt
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Nokia\nvidia.exe x -o+ -pxvmoa9F15jka95x %ALLUSERSPROFILE%\Panasonic\omegle.rpg %ALLUSERSPROFILE%\Panasonic\
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\inn.bat
  • '%WINDIR%\syswow64\cmd.exe' /c md %ALLUSERSPROFILE%\Infotec\
  • '%WINDIR%\syswow64\cmd.exe' /c RMDIR /Q/S %ALLUSERSPROFILE%\LaCie\
  • '%WINDIR%\syswow64\cmd.exe' /c md %ALLUSERSPROFILE%\Panasonic\
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\iss.txt
  • '%WINDIR%\syswow64\cmd.exe' /c taskkill /f /im iss.exe
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\nnu.exe
  • '%WINDIR%\syswow64\cmd.exe' /c rundnn.exe x -o+ -p8ay73yG6s6gHu8H data6.ogg %ALLUSERSPROFILE%\
  • '%WINDIR%\syswow64\cmd.exe' /c rmdir /s /q %ALLUSERSPROFILE%\Panasonic\
  • '%WINDIR%\syswow64\cmd.exe' /c taskkill.exe /F /IM nnu.exe
  • '%WINDIR%\syswow64\cmd.exe' /c copy /y data6.ogg %ALLUSERSPROFILE%\Adobe\directx6.opx
  • '%WINDIR%\syswow64\cmd.exe' /c %ALLUSERSPROFILE%\Panasonic\0.bat
  • '%WINDIR%\syswow64\cmd.exe' /c del /F /Q %ALLUSERSPROFILE%\Panasonic\00000.bat

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Free trial

 

Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

Free trial

 

Download Dr.Web

Download by serial number

Download on App Store

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

 

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android

Free trial

14 days

Download now
Get it on Google Play