Dr.Web Anti-virus - Innovative IT-Security Solutions
Global Sites
Russia (Headquarter)
Estonia Finland France Germany Greece Hungary Italy Iran Israel Japan Kazakhstan Lithuania Poland Portugal Slovakia Spain Taiwan Ukraine


Latest Released Update : (HKT) 2014-04-19 15:41
Virus Database Total Records : 5127328
Home About Dr.Web Products Downloads Purchase FAQ Contact Us  
Dr.Web Anti-virus Video Channel  

‹ How To Remove Virus "Trojan.MulDrop4.28482" ›

Technical Information
Virus Name : Trojan.MulDrop4.28482
Named By : Dr.Web

Malicious functions:
Creates and executes the following:
  • %TEMP%\7zS1.tmp\5151fe0ac3b91.exe /s
Modifies file system :
Creates the following files:
  • <LS_APPDATA>\Google\Chrome\User Data\Default\Extensions\apjnacfmfejapfigdffgiincppfogjoc\1\content.js
  • <LS_APPDATA>\Google\Chrome\User Data\Default\Extensions\apjnacfmfejapfigdffgiincppfogjoc\1\background.html
  • <LS_APPDATA>\Google\Chrome\User Data\Default\Extensions\apjnacfmfejapfigdffgiincppfogjoc\1\manifest.json
  • <LS_APPDATA>\Google\Chrome\User Data\Default\Extensions\apjnacfmfejapfigdffgiincppfogjoc\1\lsdb.js
  • <LS_APPDATA>\Google\Chrome\User Data\Default\Extensions\apjnacfmfejapfigdffgiincppfogjoc\1\5151fe0ac39ca8.62939347.js
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\rypkr3@eqkcdk.com\install.rdf
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\rypkr3@eqkcdk.com\chrome.manifest
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\rypkr3@eqkcdk.com\content\zy.xul
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\rypkr3@eqkcdk.com\content\bg.js
  • %ALLUSERSPROFILE%\Application Data\BirowwsyE2savee\uninstall.exe
  • %ALLUSERSPROFILE%\Application Data\BirowwsyE2savee\5151fe0ac3bc8.tlb
  • %ALLUSERSPROFILE%\Start Menu\Programs\BirowwsyE2savee\Uninstall.lnk
  • %ALLUSERSPROFILE%\Start Menu\Programs\BirowwsyE2savee\BirowwsyE2savee.lnk
  • %ALLUSERSPROFILE%\Application Data\BirowwsyE2savee\5151fe0ac3bc8.dll
  • %TEMP%\nsa3.tmp\nsJSON.dll
  • <LS_APPDATA>\Google\Chrome\User Data\Default\Extensions\apjnacfmfejapfigdffgiincppfogjoc\1\sqlite.js
  • %ALLUSERSPROFILE%\Application Data\BirowwsyE2savee\settings.ini
  • <LS_APPDATA>\Google\Chrome\User Data\Default\Preferences
  • %TEMP%\7zS1.tmp\apjnacfmfejapfigdffgiincppfogjoc\content.js
  • %TEMP%\7zS1.tmp\rypkr3@eqkcdk.com\bootstrap.js
  • %TEMP%\7zS1.tmp\apjnacfmfejapfigdffgiincppfogjoc\sqlite.js
  • %TEMP%\7zS1.tmp\apjnacfmfejapfigdffgiincppfogjoc\lsdb.js
  • %TEMP%\7zS1.tmp\rypkr3@eqkcdk.com\content\bg.js
  • <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini
  • %TEMP%\7zS1.tmp\rypkr3@eqkcdk.com\chrome.manifest
  • %TEMP%\7zS1.tmp\apjnacfmfejapfigdffgiincppfogjoc\5151fe0ac39ca8.62939347.js
  • %TEMP%\7zS1.tmp\apjnacfmfejapfigdffgiincppfogjoc\background.html
  • %TEMP%\7zS1.tmp\rypkr3@eqkcdk.com\content\zy.xul
  • %TEMP%\7zS1.tmp\rypkr3@eqkcdk.com\install.rdf
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\rypkr3@eqkcdk.com\bootstrap.js
  • %TEMP%\nsa3.tmp\UserInfo.dll
  • %TEMP%\7zS1.tmp\apjnacfmfejapfigdffgiincppfogjoc\manifest.json
  • %TEMP%\7zS1.tmp\5151fe0ac3b91.exe
  • %TEMP%\7zS1.tmp\settings.ini
  • %TEMP%\7zS1.tmp\5151fe0ac3bc8.tlb
  • %TEMP%\7zS1.tmp\5151fe0ac3bc8.dll
Deletes the following files:
  • %TEMP%\7zS1.tmp\rypkr3@eqkcdk.com\bootstrap.js
  • %TEMP%\7zS1.tmp\rypkr3@eqkcdk.com\chrome.manifest
  • %TEMP%\7zS1.tmp\apjnacfmfejapfigdffgiincppfogjoc\manifest.json
  • %TEMP%\7zS1.tmp\apjnacfmfejapfigdffgiincppfogjoc\sqlite.js
  • %TEMP%\7zS1.tmp\rypkr3@eqkcdk.com\install.rdf
  • %TEMP%\7zS1.tmp\settings.ini
  • %TEMP%\7zS1.tmp\rypkr3@eqkcdk.com\content\bg.js
  • %TEMP%\7zS1.tmp\rypkr3@eqkcdk.com\content\zy.xul
  • %TEMP%\7zS1.tmp\apjnacfmfejapfigdffgiincppfogjoc\lsdb.js
  • %TEMP%\7zS1.tmp\5151fe0ac3b91.exe
  • %TEMP%\7zS1.tmp\5151fe0ac3bc8.dll
  • %TEMP%\nsa3.tmp\nsJSON.dll
  • %TEMP%\nsa3.tmp\UserInfo.dll
  • %TEMP%\7zS1.tmp\apjnacfmfejapfigdffgiincppfogjoc\background.html
  • %TEMP%\7zS1.tmp\apjnacfmfejapfigdffgiincppfogjoc\content.js
  • %TEMP%\7zS1.tmp\5151fe0ac3bc8.tlb
  • %TEMP%\7zS1.tmp\apjnacfmfejapfigdffgiincppfogjoc\5151fe0ac39ca8.62939347.js
Please note : some of the characters are replaced with symbols in order to prevent improper access to malwares.


Steps to remove "Trojan.MulDrop4.28482" automatically
  • Download Dr.Web CureIt! and save it in desktop.
  • Download Security Space Pro 7.0 (32/64-bit), save it in desktop.
  • Reboot computer to Safe Mode (press F8 before any Microsoft logo appears).
  • Double click "cureit.exe" on desktop, follow on screen instructions to scan hard disk.
    (Wait patiently, it may take 20-60 minutes to perform an express scan.)
  • After scanning is done, select all viruses found and choose "Cure".
    (If some files are not suitable to be cured, choose "Quarantine" or "Delete".)
  • When all viruses found are cured, quarantined, or deleted, reboot to Normal Mode.
  • Uninstall existing anti-virus software which cannot kill the viruses, and then reboot again.
  • Locate the setup file of Security Space Pro on desktop, double click to run it.
    (For step-by-step procedures, please refer to installation video guide.)
  • During setup, choose to obtain a demo key.
  • After first time update, the scanner will be launched again, quit the scanner at this point.
  • Complete the setup by rebooting computer.
  • When time is allowed (may need several hours), perform a full scan in Dr.Web Scanner.

Note :
  • If it is unable to start Windows due to virus infection, try Dr.Web LiveCD or Dr.Web LiveUSB instead of Dr.Web CureIt!
  • Time needed for express scan or full scan relies on many factors, such as system performance, available memory, running processes, number of drives and files, etc.

‹ Dr.Web CureIt! › Select Download Source

Dr.Web Global Servers Google Drive SkyDrive
Released :
2013-11-10 14:43
Released :
2013-08-16 03:25
Released :
2013-11-10 14:43
Download Dr.Web CureIt! from Dr.Web Global Servers Download Dr.Web CureIt! from Google Drive Download Dr.Web CureIt! from SkyDrive

‹ Dr.Web Security Space Pro › Select Download Source

Dropbox Google Drive SkyDrive
Released :
2013-02-07 16:02
Released :
2013-02-07 16:02
Released :
2013-02-07 16:02
Download Dr.Web Security Space Pro from Dropbox Download Dr.Web Security Space Pro from Google Drive Download Dr.Web Security Space Pro from SkyDrive

WINDOWS 7, VISTA, XP
MAC OS X 10.4 OR ABOVE

TOP 5 EMAIL VIRUSES (24HR)
15:41
 
Win32.HLLM.MyDoom.54464
Win32.HLLM.MyDoom.54464
 
Win32.HLLM.MyDoom.33808
Win32.HLLM.MyDoom.33808
 
BackDoor.Paper.56
BackDoor.Paper.56
 
Trojan.Fraudster.778
Trojan.Fraudster.778
 
Trojan.Siggen6.14312
Trojan.Siggen6.14312

TOP 5 FILE VIRUSES (24HR)
15:41
 
SCRIPT.Virus
SCRIPT.Virus
 
Trojan.Packed.24524
Trojan.Packed.24524
 
Trojan.InstallMonster.51
Trojan.InstallMonster.51
 
Adware.Downware.2095
Adware.Downware.2095
 
Trojan.LoadMoney.257
Trojan.LoadMoney.257

FREE ANTI-VIRUS TOOLS
  » Dr.Web CureIt!
  » Dr.Web LiveCD
  » Dr.Web LiveUSB
  » Dr.Web Light for Mac OS X
  » LinkChecker for Google Chrome
  » LinkChecker for Internet Explorer
  » LinkChecker for Mozilla Firefox
  » LinkChecker for Opera
  » LinkChecker for Safari

Member of CHKCI

|

Click to Verify Domain Originator
:: Privacy Policy Statement ::