Поддержка
Круглосуточная поддержка

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.DownLoader9.60781

Добавлен в вирусную базу Dr.Web: 2013-08-05

Описание добавлено:

Техническая информация

Для обеспечения автозапуска и распространения:
Модифицирует следующие ключи реестра:
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'XSMET' = '%HOMEPATH%\XSMET\start.vbs'
Вредоносные функции:
Создает и запускает на исполнение:
  • '%HOMEPATH%\XSMET\361071.exe' LJQLSAPT.dat
  • '%HOMEPATH%\XSMET\361071.exe' 387663.dat
Запускает на исполнение:
  • '%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
  • '<SYSTEM32>\wscript.exe' "%HOMEPATH%\XSMET\runner.vbs"
Внедряет код в
следующие системные процессы:
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
Изменения в файловой системе:
Создает следующие файлы:
  • %HOMEPATH%\XSMET\W95319.ITM
  • %HOMEPATH%\XSMET\G61450.VIM
  • %HOMEPATH%\XSMET\35829.FFO
  • %HOMEPATH%\XSMET\T14266.TDG
  • %HOMEPATH%\XSMET\K18954.TUS
  • %HOMEPATH%\XSMET\A61940.WNW
  • %HOMEPATH%\XSMET\G82317.MMZ
  • %HOMEPATH%\XSMET\P8719.GJJ
  • %HOMEPATH%\XSMET\22779.BIJ
  • %HOMEPATH%\XSMET\53834.ZYV
  • %HOMEPATH%\XSMET\M74452.HVV
  • %HOMEPATH%\XSMET\Q74631.BMR
  • %HOMEPATH%\XSMET\12841.STU
  • %HOMEPATH%\XSMET\54901.QAX
  • %HOMEPATH%\XSMET\D4223.BFA
  • %HOMEPATH%\XSMET\G1361.LWQ
  • %HOMEPATH%\XSMET\50655.LAI
  • %HOMEPATH%\XSMET\67196.YFU
  • %HOMEPATH%\XSMET\15184.ODQ
  • %HOMEPATH%\XSMET\9343.XDC
  • %HOMEPATH%\XSMET\26966.SMM
  • %HOMEPATH%\XSMET\F69676.RDY
  • %HOMEPATH%\XSMET\C64272.TOW
  • %HOMEPATH%\XSMET\W29993.ZWT
  • %HOMEPATH%\XSMET\75143.IGO
  • %HOMEPATH%\XSMET\H90516.SLG
  • %HOMEPATH%\XSMET\68860.HHH
  • %HOMEPATH%\XSMET\W3603.LMW
  • %HOMEPATH%\XSMET\Y72101.NYX
  • %HOMEPATH%\XSMET\70049.ZWR
  • %HOMEPATH%\XSMET\73141.UJY
  • %HOMEPATH%\XSMET\58989.LBE
  • %HOMEPATH%\XSMET\76152.EOB
  • %HOMEPATH%\XSMET\30035.CXE
  • %HOMEPATH%\XSMET\V55352.YJW
  • %HOMEPATH%\XSMET\2562.TRQ
  • %HOMEPATH%\XSMET\68483.RRC
  • %HOMEPATH%\XSMET\W91974.WWZ
  • %HOMEPATH%\XSMET\V62583.PAK
  • %HOMEPATH%\XSMET\S61662.JTH
  • %HOMEPATH%\XSMET\B41592.XQQ
  • %HOMEPATH%\XSMET\E2349.AVN
  • %HOMEPATH%\XSMET\65116.YCO
  • %HOMEPATH%\XSMET\53090.IKK
  • %HOMEPATH%\XSMET\89649.YSL
  • %HOMEPATH%\XSMET\83892.EGR
  • %HOMEPATH%\XSMET\R21600.FYV
  • %HOMEPATH%\XSMET\F2697.BRC
  • %HOMEPATH%\XSMET\Z53881.FED
  • %HOMEPATH%\XSMET\74264.CHK
  • %HOMEPATH%\XSMET\12079.LGT
  • %HOMEPATH%\XSMET\18190.ZZO
  • %HOMEPATH%\XSMET\O18598.EXT
  • %HOMEPATH%\XSMET\A56169.TJF
  • %HOMEPATH%\XSMET\69188.AJL
  • %HOMEPATH%\XSMET\T1811.NVM
  • %HOMEPATH%\XSMET\U97109.HLB
  • %HOMEPATH%\XSMET\39703.YLG
  • %HOMEPATH%\XSMET\T74154.SMU
  • %HOMEPATH%\XSMET\38086.VXH
  • %HOMEPATH%\XSMET\D18308.MSZ
  • %HOMEPATH%\XSMET\26662.XTA
  • %HOMEPATH%\XSMET\40192.UGE
  • %HOMEPATH%\XSMET\U15281.FBV
  • %HOMEPATH%\XSMET\37158.OJL
  • %HOMEPATH%\XSMET\T97074.DMW
  • %HOMEPATH%\XSMET\79032.QMQ
  • %HOMEPATH%\XSMET\I97674.YTR
  • %HOMEPATH%\XSMET\X59880.VYW
  • %HOMEPATH%\XSMET\W10902.EZS
  • %HOMEPATH%\XSMET\P96262.NKS
  • %HOMEPATH%\XSMET\89583.HRY
  • %HOMEPATH%\XSMET\57601.GZL
  • %HOMEPATH%\XSMET\2581.BCV
  • %HOMEPATH%\XSMET\56557.CLB
  • %HOMEPATH%\XSMET\83006.ALP
  • %HOMEPATH%\XSMET\95636.JFE
  • %HOMEPATH%\XSMET\H29267.XIH
  • %HOMEPATH%\XSMET\32185.SBU
  • %HOMEPATH%\XSMET\76291.ZJI
  • %HOMEPATH%\XSMET\A33205.FHA
  • %HOMEPATH%\XSMET\49776.VQH
  • %HOMEPATH%\XSMET\M17026.YHY
  • %HOMEPATH%\XSMET\36642.PZF
  • %HOMEPATH%\XSMET\C29815.IEQ
  • %HOMEPATH%\XSMET\U24999.GVH
  • %HOMEPATH%\XSMET\18427.BUE
  • %HOMEPATH%\XSMET\Q76736.BNG
  • %HOMEPATH%\XSMET\40020.WVD
  • %HOMEPATH%\XSMET\H52100.ESW
  • %HOMEPATH%\XSMET\44653.LDU
  • %HOMEPATH%\XSMET\M78581.AVF
  • %HOMEPATH%\XSMET\O43953.MTA
  • %HOMEPATH%\XSMET\O58351.RDS
  • %HOMEPATH%\XSMET\29219.FMD
  • %HOMEPATH%\XSMET\R57656.TCX
  • %HOMEPATH%\XSMET\Z35021.XIV
  • %HOMEPATH%\XSMET\O1625.UXP
  • %HOMEPATH%\XSMET\G39862.IYO
  • %HOMEPATH%\XSMET\I89446.LTW
  • %HOMEPATH%\XSMET\Q45942.WDN
  • %HOMEPATH%\XSMET\W10990.GBH
  • %HOMEPATH%\XSMET\44445.YWT
  • %HOMEPATH%\XSMET\A19941.BHV
  • %HOMEPATH%\XSMET\I38594.EJF
  • %HOMEPATH%\XSMET\80950.VFT
  • %HOMEPATH%\XSMET\A88532.SUW
  • %HOMEPATH%\XSMET\28026.LEP
  • %HOMEPATH%\XSMET\C92573.YJJ
  • %HOMEPATH%\XSMET\D56448.KQS
  • %HOMEPATH%\XSMET\47151.KQK
  • %HOMEPATH%\XSMET\87547.QBI
  • %HOMEPATH%\XSMET\M7755.YTN
  • %HOMEPATH%\XSMET\W13567.AFE
  • %HOMEPATH%\XSMET\6658.CTH
  • %HOMEPATH%\XSMET\V43159.EJX
  • %HOMEPATH%\XSMET\E96932.VVY
  • %HOMEPATH%\XSMET\42457.YIP
  • %HOMEPATH%\XSMET\L61702.YMQ
  • %HOMEPATH%\XSMET\30325.VHL
  • %HOMEPATH%\XSMET\I48087.SSQ
  • %HOMEPATH%\XSMET\49516.KDI
  • %HOMEPATH%\XSMET\D47572.UBI
  • %HOMEPATH%\XSMET\95192.SJX
  • %HOMEPATH%\XSMET\N49395.DEP
  • %HOMEPATH%\XSMET\40189.KZU
  • %HOMEPATH%\XSMET\46038.HJM
  • %HOMEPATH%\XSMET\45323.PCP
  • %HOMEPATH%\XSMET\72352.IWC
  • %HOMEPATH%\XSMET\93616.UCH
  • %HOMEPATH%\XSMET\22113.LNF
  • %HOMEPATH%\XSMET\75013.DVX
  • %HOMEPATH%\XSMET\6330.VZR
  • %HOMEPATH%\XSMET\31579.LAN
  • %HOMEPATH%\XSMET\V13301.MAN
  • %HOMEPATH%\XSMET\41379.NFL
  • %HOMEPATH%\XSMET\Y74820.YQG
  • %HOMEPATH%\XSMET\56264.OGF
  • %HOMEPATH%\XSMET\P91438.RWX
  • %HOMEPATH%\XSMET\P78857.AEQ
  • %HOMEPATH%\XSMET\S77832.OGE
  • %HOMEPATH%\XSMET\F6924.PPG
  • %HOMEPATH%\XSMET\F8412.XXW
  • %HOMEPATH%\XSMET\G93269.HNN
  • %HOMEPATH%\XSMET\68230.XQV
  • %HOMEPATH%\XSMET\20682.NDY
  • %HOMEPATH%\XSMET\49024.AMW
  • %HOMEPATH%\XSMET\48809.WSP
  • %HOMEPATH%\XSMET\M49749.KOS
  • %HOMEPATH%\XSMET\Y34927.CSG
  • %HOMEPATH%\XSMET\55401.YTN
  • %HOMEPATH%\XSMET\40624.COL
  • %HOMEPATH%\XSMET\Z49255.WYE
  • %HOMEPATH%\XSMET\H70942.KUC
  • %HOMEPATH%\XSMET\89396.NIZ
  • %HOMEPATH%\XSMET\I43596.ZZA
  • %HOMEPATH%\XSMET\O47058.ZZL
  • %HOMEPATH%\XSMET\P96895.QEG
  • %HOMEPATH%\XSMET\T15220.APV
  • %HOMEPATH%\XSMET\9488.JXQ
  • %HOMEPATH%\XSMET\80323.WFJ
  • %HOMEPATH%\XSMET\2129.OAQ
  • %HOMEPATH%\XSMET\11434.QNY
  • %HOMEPATH%\XSMET\36176.WVR
  • %HOMEPATH%\XSMET\91974.FLB
  • %HOMEPATH%\XSMET\81779.VQI
  • %HOMEPATH%\XSMET\D88198.AEF
  • %HOMEPATH%\XSMET\M20822.MNB
  • %HOMEPATH%\XSMET\X40093.VOP
  • %HOMEPATH%\XSMET\LJQLSAPT.dat
  • %HOMEPATH%\XSMET\T13594.EEL
  • %HOMEPATH%\XSMET\start.vbs
  • %HOMEPATH%\XSMET\start.cmd
  • %HOMEPATH%\XSMET\I84260.BAS
  • %HOMEPATH%\XSMET\T26861.XXD
  • %HOMEPATH%\XSMET\J67089.KSO
  • %HOMEPATH%\XSMET\F40484.OGD
  • %HOMEPATH%\XSMET\C90784.ZYW
  • %HOMEPATH%\XSMET\L37196.SXA
  • %HOMEPATH%\XSMET\51142.PLZ
  • %HOMEPATH%\XSMET\D33378.RUZ
  • %HOMEPATH%\XSMET\41114.NMM
  • %HOMEPATH%\XSMET\Q48796.KCD
  • %HOMEPATH%\XSMET\W85734.AJD
  • %HOMEPATH%\XSMET\X67543.XPV
  • %HOMEPATH%\XSMET\4028.WOE
  • %HOMEPATH%\XSMET\B59456.PWA
  • %HOMEPATH%\XSMET\59228.GGJ
  • %HOMEPATH%\XSMET\91128.EVL
  • %HOMEPATH%\XSMET\8615.CLM
  • %HOMEPATH%\XSMET\10021.EFA
  • %HOMEPATH%\XSMET\Z25755.NHZ
  • %HOMEPATH%\XSMET\L59561.VOA
  • %HOMEPATH%\XSMET\K3821.SQA
  • %HOMEPATH%\XSMET\59363.CNJ
  • %HOMEPATH%\XSMET\D70049.YXU
  • %HOMEPATH%\XSMET\30850.PAP
  • %HOMEPATH%\XSMET\F2162.TBA
  • %HOMEPATH%\XSMET\56590.CFN
  • %HOMEPATH%\XSMET\23237.XZZ
  • %HOMEPATH%\XSMET\F34004.XLV
  • %HOMEPATH%\XSMET\B4416.NML
  • %HOMEPATH%\XSMET\73301.FMS
  • %HOMEPATH%\XSMET\I65775.SMU
  • %HOMEPATH%\XSMET\W27221.KIW
  • %HOMEPATH%\XSMET\E3599.HKD
  • %HOMEPATH%\XSMET\X60431.VHP
  • %HOMEPATH%\XSMET\L32826.OUI
  • %HOMEPATH%\XSMET\74002.PJW
  • %HOMEPATH%\XSMET\U72017.RKD
  • %HOMEPATH%\XSMET\I8612.VFX
  • %HOMEPATH%\XSMET\I60031.CUV
  • %HOMEPATH%\XSMET\C77864.PZZ
  • %HOMEPATH%\XSMET\33154.TUF
  • %HOMEPATH%\XSMET\N29017.NSV
  • %HOMEPATH%\XSMET\91506.AER
  • %HOMEPATH%\XSMET\37144.JZG
  • %HOMEPATH%\XSMET\I60210.ULU
  • %HOMEPATH%\XSMET\T32822.MSC
  • %HOMEPATH%\XSMET\79540.WLK
  • %HOMEPATH%\XSMET\40412.NDU
  • %HOMEPATH%\XSMET\M50635.ZPQ
  • %HOMEPATH%\XSMET\U92613.PDN
  • %HOMEPATH%\XSMET\L93097.HRZ
  • %HOMEPATH%\XSMET\55752.MGY
  • %HOMEPATH%\XSMET\51362.ZGL
  • %HOMEPATH%\XSMET\L16682.COO
  • %HOMEPATH%\XSMET\Z75142.BSU
  • %HOMEPATH%\XSMET\A6589.IWJ
  • %HOMEPATH%\XSMET\J81208.KVV
  • %HOMEPATH%\XSMET\67431.OCC
  • %HOMEPATH%\XSMET\92235.AYA
  • %HOMEPATH%\XSMET\V93162.ZQH
  • %HOMEPATH%\XSMET\74392.NML
  • %HOMEPATH%\XSMET\45172.LIY
  • %HOMEPATH%\XSMET\F44606.HJD
  • %HOMEPATH%\XSMET\M77447.TBB
  • %HOMEPATH%\XSMET\I6281.QMC
  • %HOMEPATH%\XSMET\42634.KFA
  • %HOMEPATH%\XSMET\44189.LZO
  • %HOMEPATH%\XSMET\K3561.DKO
  • %HOMEPATH%\XSMET\90876.TNA
  • %HOMEPATH%\XSMET\G12501.TGC
  • %HOMEPATH%\XSMET\C81041.LPD
  • %HOMEPATH%\XSMET\O34889.JRQ
  • %HOMEPATH%\XSMET\90201.PEQ
  • %HOMEPATH%\XSMET\89347.YLX
  • %HOMEPATH%\XSMET\B62353.YTF
  • %HOMEPATH%\XSMET\63164.HAI
  • %HOMEPATH%\XSMET\Z7927.FWT
  • %HOMEPATH%\XSMET\R15418.OMC
  • %HOMEPATH%\XSMET\62054.SLJ
  • %HOMEPATH%\XSMET\R37016.LQG
  • %HOMEPATH%\XSMET\E54195.GYJ
  • %HOMEPATH%\XSMET\X86114.MSK
  • %HOMEPATH%\XSMET\T3098.NGC
  • %HOMEPATH%\XSMET\C45208.FAS
  • %HOMEPATH%\XSMET\78577.JYO
  • %HOMEPATH%\XSMET\T75424.IMU
  • %HOMEPATH%\XSMET\B90284.LMJ
  • %HOMEPATH%\XSMET\92001.GGV
  • %HOMEPATH%\XSMET\U78482.CCT
  • %HOMEPATH%\XSMET\M83321.OAZ
  • %HOMEPATH%\XSMET\86721.MYU
  • %HOMEPATH%\XSMET\52330.RSG
  • %HOMEPATH%\XSMET\36958.MXT
  • %HOMEPATH%\XSMET\N94180.AMT
  • %HOMEPATH%\XSMET\E48541.KFT
  • %HOMEPATH%\XSMET\93443.ZQR
  • %HOMEPATH%\XSMET\R99874.OLT
  • %HOMEPATH%\XSMET\34836.YEH
  • %HOMEPATH%\XSMET\29963.OWQ
  • %HOMEPATH%\XSMET\29133.HYF
  • %HOMEPATH%\XSMET\17121.UVD
  • %HOMEPATH%\XSMET\26836.BRG
  • %HOMEPATH%\XSMET\9928.CZS
  • %HOMEPATH%\XSMET\22474.SQE
  • %HOMEPATH%\XSMET\A58735.NKB
  • %HOMEPATH%\XSMET\95614.TNJ
  • %HOMEPATH%\XSMET\X77702.SAJ
  • %HOMEPATH%\XSMET\J28095.OGL
  • %HOMEPATH%\XSMET\D89986.BBQ
  • %HOMEPATH%\XSMET\21145.BLB
  • %HOMEPATH%\XSMET\N47668.WRS
  • %HOMEPATH%\XSMET\Z51832.KFT
  • %HOMEPATH%\XSMET\X3688.DIL
  • %HOMEPATH%\XSMET\81127.SWY
  • %HOMEPATH%\XSMET\14810.SLH
  • %HOMEPATH%\XSMET\Z78928.CZG
  • %HOMEPATH%\XSMET\63297.YPS
  • %HOMEPATH%\XSMET\G44730.NHB
  • %HOMEPATH%\XSMET\E84548.RCS
  • %HOMEPATH%\XSMET\V75978.TWP
  • %HOMEPATH%\XSMET\M85661.WGS
  • %HOMEPATH%\XSMET\9165.SRQ
  • %HOMEPATH%\XSMET\F28174.XGG
  • %HOMEPATH%\XSMET\26407.BUV
  • %HOMEPATH%\XSMET\58532.BYJ
  • %HOMEPATH%\XSMET\99326.XLE
  • %HOMEPATH%\XSMET\F21281.IVV
  • %HOMEPATH%\XSMET\60608.LPO
  • %HOMEPATH%\XSMET\K84507.JAT
  • %HOMEPATH%\XSMET\T79038.KKO
  • %HOMEPATH%\XSMET\30012.RIN
  • %HOMEPATH%\XSMET\U13986.YCA
  • %HOMEPATH%\XSMET\96892.ZCM
  • %HOMEPATH%\XSMET\T48493.YVW
  • %HOMEPATH%\XSMET\83987.YBQ
  • %HOMEPATH%\XSMET\T63113.BSN
  • %HOMEPATH%\XSMET\Z1623.IYV
  • %HOMEPATH%\XSMET\94509.TAJ
  • %HOMEPATH%\XSMET\64004.LXL
  • %HOMEPATH%\XSMET\G93852.ZZL
  • %HOMEPATH%\XSMET\47275.NTS
  • %HOMEPATH%\XSMET\J65294.QXL
  • %HOMEPATH%\XSMET\R75675.OYN
  • %HOMEPATH%\XSMET\D87811.BOB
  • %HOMEPATH%\XSMET\12528.KNB
  • %HOMEPATH%\XSMET\O12702.AFO
  • %HOMEPATH%\XSMET\R50385.GLK
  • %HOMEPATH%\XSMET\89315.TZV
  • %HOMEPATH%\XSMET\N89012.OYQ
  • %HOMEPATH%\XSMET\41732.KRM
  • %HOMEPATH%\XSMET\I75423.EUH
  • %HOMEPATH%\XSMET\19395.QBR
  • %HOMEPATH%\XSMET\J23118.NQW
  • %HOMEPATH%\XSMET\8050.PSV
  • %HOMEPATH%\XSMET\17062.UIC
  • %HOMEPATH%\XSMET\M24983.HMY
  • %HOMEPATH%\XSMET\48704.DTZ
  • %HOMEPATH%\XSMET\54135.NOX
  • %HOMEPATH%\XSMET\I62090.XPX
  • %HOMEPATH%\XSMET\A78077.UGV
  • %HOMEPATH%\XSMET\69781.ZDX
  • %HOMEPATH%\XSMET\35580.RIH
  • %HOMEPATH%\XSMET\38657.TKN
  • %HOMEPATH%\XSMET\L70265.AIJ
  • %HOMEPATH%\XSMET\runner.vbs
  • %HOMEPATH%\XSMET\settings.ini
  • %HOMEPATH%\XSMET\Z44411.QZX
  • %HOMEPATH%\XSMET\39008.ARZ
  • %HOMEPATH%\XSMET\42421.dat
  • %HOMEPATH%\XSMET\387663.dat
  • %HOMEPATH%\XSMET\361071.exe
  • %HOMEPATH%\XSMET\55785.dat
  • %HOMEPATH%\XSMET\J28845.RVI
  • %HOMEPATH%\XSMET\91619.OOZ
  • %HOMEPATH%\XSMET\N81500.TVN
  • %HOMEPATH%\XSMET\I88105.MLZ
  • %HOMEPATH%\XSMET\E96490.DDW
  • %HOMEPATH%\XSMET\27961.VWF
  • %HOMEPATH%\XSMET\69451.URB
  • %HOMEPATH%\XSMET\O49097.OZM
  • %HOMEPATH%\XSMET\86186.OXB
  • %HOMEPATH%\XSMET\N59141.OUS
  • %HOMEPATH%\XSMET\99996.QWI
  • %HOMEPATH%\XSMET\79174.RIA
  • %HOMEPATH%\XSMET\G29001.GEY
  • %HOMEPATH%\XSMET\G14917.DJF
  • %HOMEPATH%\XSMET\70406.ABT
  • %HOMEPATH%\XSMET\76041.ENO
  • %HOMEPATH%\XSMET\T22521.BPD
  • %HOMEPATH%\XSMET\12083.CVQ
  • %HOMEPATH%\XSMET\E25518.BVF
  • %HOMEPATH%\XSMET\E96293.QYB
  • %HOMEPATH%\XSMET\46769.WIG
  • %HOMEPATH%\XSMET\64483.KGO
  • %HOMEPATH%\XSMET\78148.XRM
  • %HOMEPATH%\XSMET\89024.LBM
  • %HOMEPATH%\XSMET\25776.EJB
  • %HOMEPATH%\XSMET\G30446.HWO
  • %HOMEPATH%\XSMET\83936.EEB
  • %HOMEPATH%\XSMET\84596.JHT
  • %HOMEPATH%\XSMET\58957.YNG
  • %HOMEPATH%\XSMET\45561.BXC
  • %HOMEPATH%\XSMET\T22026.BYL
  • %HOMEPATH%\XSMET\A73165.QHH
  • %HOMEPATH%\XSMET\12539.YXM
  • %HOMEPATH%\XSMET\Q77734.LIX
  • %HOMEPATH%\XSMET\68130.BIJ
  • %HOMEPATH%\XSMET\C6572.OGA
  • %HOMEPATH%\XSMET\N29634.NHP
  • %HOMEPATH%\XSMET\I75195.OZV
  • %HOMEPATH%\XSMET\23674.KPT
  • %HOMEPATH%\XSMET\12180.TDF
  • %HOMEPATH%\XSMET\37635.ROF
  • %HOMEPATH%\XSMET\70868.OAF
  • %HOMEPATH%\XSMET\60901.ZIK
  • %HOMEPATH%\XSMET\E16972.TKP
  • %HOMEPATH%\XSMET\57590.IIE
  • %HOMEPATH%\XSMET\J61102.CHO
  • %HOMEPATH%\XSMET\19063.WDM
  • %HOMEPATH%\XSMET\Q51235.HRX
  • %HOMEPATH%\XSMET\V42353.LCJ
  • %HOMEPATH%\XSMET\75476.ASK
  • %HOMEPATH%\XSMET\D80292.GAD
  • %HOMEPATH%\XSMET\39463.DHA
  • %HOMEPATH%\XSMET\69437.DQZ
  • %HOMEPATH%\XSMET\S56317.SRN
  • %HOMEPATH%\XSMET\53525.JQC
  • %HOMEPATH%\XSMET\48098.TIT
  • %HOMEPATH%\XSMET\H65756.AUX
  • %HOMEPATH%\XSMET\G88706.KUW
  • %HOMEPATH%\XSMET\49991.ZNF
  • %HOMEPATH%\XSMET\41870.FVQ
  • %HOMEPATH%\XSMET\21380.FQT
  • %HOMEPATH%\XSMET\39421.WXD
  • %HOMEPATH%\XSMET\98674.UGX
  • %HOMEPATH%\XSMET\22679.XAH
  • %HOMEPATH%\XSMET\I56082.RYI
  • %HOMEPATH%\XSMET\28799.OGN
  • %HOMEPATH%\XSMET\88781.SFB
  • %HOMEPATH%\XSMET\14411.VMD
  • %HOMEPATH%\XSMET\A50185.JGA
  • %HOMEPATH%\XSMET\Z86568.QFE
  • %HOMEPATH%\XSMET\W37772.DMY
  • %HOMEPATH%\XSMET\62671.GZM
  • %HOMEPATH%\XSMET\B68360.RSY
  • %HOMEPATH%\XSMET\P26833.ABQ
  • %HOMEPATH%\XSMET\60159.QUE
  • %HOMEPATH%\XSMET\F33415.TVJ
  • %HOMEPATH%\XSMET\C2015.QDL
  • %HOMEPATH%\XSMET\K80927.SZN
  • %HOMEPATH%\XSMET\78188.CEC
  • %HOMEPATH%\XSMET\58706.FDC
  • %HOMEPATH%\XSMET\J77220.WCE
  • %HOMEPATH%\XSMET\60260.LFZ
  • %HOMEPATH%\XSMET\R30936.OSO
  • %HOMEPATH%\XSMET\N65145.BYX
  • %HOMEPATH%\XSMET\92885.GAB
  • %HOMEPATH%\XSMET\63657.LVD
  • %HOMEPATH%\XSMET\44961.EXM
  • %HOMEPATH%\XSMET\26796.LCL
  • %HOMEPATH%\XSMET\95132.LMA
  • %HOMEPATH%\XSMET\91419.GZK
  • %HOMEPATH%\XSMET\29599.JLB
  • %HOMEPATH%\XSMET\26310.WFL
  • %HOMEPATH%\XSMET\83460.FIO
  • %HOMEPATH%\XSMET\61198.PDD
  • %HOMEPATH%\XSMET\Y40515.OTW
  • %HOMEPATH%\XSMET\52432.SKS
  • %HOMEPATH%\XSMET\L6810.VLO
  • %HOMEPATH%\XSMET\72002.HNW
  • %HOMEPATH%\XSMET\96256.COJ
  • %HOMEPATH%\XSMET\65035.IAK
  • %HOMEPATH%\XSMET\V2413.ZKO
  • %HOMEPATH%\XSMET\D89182.XGZ
  • %HOMEPATH%\XSMET\F4340.WWD
  • %HOMEPATH%\XSMET\O68687.VOK
  • %HOMEPATH%\XSMET\1372.MGN
  • %HOMEPATH%\XSMET\B32029.MLY
  • %HOMEPATH%\XSMET\99149.FIG
  • %HOMEPATH%\XSMET\E33477.IZC
  • %HOMEPATH%\XSMET\52596.YKQ
  • %HOMEPATH%\XSMET\72967.XBW
  • %HOMEPATH%\XSMET\87437.IDR
  • %HOMEPATH%\XSMET\C10121.ZQM
  • %HOMEPATH%\XSMET\57196.EVO
  • %HOMEPATH%\XSMET\60239.QQN
  • %HOMEPATH%\XSMET\A47717.ICE
  • %HOMEPATH%\XSMET\64776.GWY
  • %HOMEPATH%\XSMET\30509.TFO
  • %HOMEPATH%\XSMET\E93039.LLD
  • %HOMEPATH%\XSMET\87575.EUQ
  • %HOMEPATH%\XSMET\O33296.VZC
  • %HOMEPATH%\XSMET\I23824.EIC
  • %HOMEPATH%\XSMET\U5136.NMQ
  • %HOMEPATH%\XSMET\P48215.VXA
  • %HOMEPATH%\XSMET\87361.UAO
  • %HOMEPATH%\XSMET\B52466.AHH
  • %HOMEPATH%\XSMET\G86862.ZXM
  • %HOMEPATH%\XSMET\74533.EGS
  • %HOMEPATH%\XSMET\3257.WET
  • %HOMEPATH%\XSMET\J32122.FKV
  • %HOMEPATH%\XSMET\47023.USR
  • %HOMEPATH%\XSMET\52422.ARX
  • %HOMEPATH%\XSMET\35945.YKW
  • %HOMEPATH%\XSMET\E51420.CQH
  • %HOMEPATH%\XSMET\N60443.BJJ
  • %HOMEPATH%\XSMET\16639.QGU
  • %HOMEPATH%\XSMET\G92409.QEX
  • %HOMEPATH%\XSMET\21028.BHF
  • %HOMEPATH%\XSMET\31853.SHB
  • %HOMEPATH%\XSMET\24451.AYN
  • %HOMEPATH%\XSMET\F27562.LLM
  • %HOMEPATH%\XSMET\C6987.DER
  • %HOMEPATH%\XSMET\23384.BMJ
  • %HOMEPATH%\XSMET\21810.DOS
  • %HOMEPATH%\XSMET\85997.LJV
  • %HOMEPATH%\XSMET\R3692.XYO
  • %HOMEPATH%\XSMET\8373.MLV
  • %HOMEPATH%\XSMET\77455.ACV
  • %HOMEPATH%\XSMET\79045.KPK
  • %HOMEPATH%\XSMET\C30248.LFZ
  • %HOMEPATH%\XSMET\P60998.ICG
  • %HOMEPATH%\XSMET\1495.RSH
  • %HOMEPATH%\XSMET\71978.CZP
  • %HOMEPATH%\XSMET\74479.JRR
  • %HOMEPATH%\XSMET\27962.MZE
  • %HOMEPATH%\XSMET\14883.USQ
  • %HOMEPATH%\XSMET\B84703.ZML
  • %HOMEPATH%\XSMET\J40073.IYU
  • %HOMEPATH%\XSMET\27793.SAT
  • %HOMEPATH%\XSMET\S76049.BXV
  • %HOMEPATH%\XSMET\49604.NTB
  • %HOMEPATH%\XSMET\F7859.MGY
  • %HOMEPATH%\XSMET\5167.SWE
  • %HOMEPATH%\XSMET\94794.TAF
  • %HOMEPATH%\XSMET\M41214.QBL
  • %HOMEPATH%\XSMET\L40196.NUD
  • %HOMEPATH%\XSMET\89874.LUJ
  • %HOMEPATH%\XSMET\26271.CUA
  • %HOMEPATH%\XSMET\10387.YJG
  • %HOMEPATH%\XSMET\G63364.WXZ
Присваивает атрибут 'скрытый' для следующих файлов:
  • %HOMEPATH%\XSMET\G82317.MMZ
  • %HOMEPATH%\XSMET\G61450.VIM
  • %HOMEPATH%\XSMET\W95319.ITM
  • %HOMEPATH%\XSMET\P8719.GJJ
  • %HOMEPATH%\XSMET\68860.HHH
  • %HOMEPATH%\XSMET\A61940.WNW
  • %HOMEPATH%\XSMET\K18954.TUS
  • %HOMEPATH%\XSMET\T14266.TDG
  • %HOMEPATH%\XSMET\D4223.BFA
  • %HOMEPATH%\XSMET\53834.ZYV
  • %HOMEPATH%\XSMET\22779.BIJ
  • %HOMEPATH%\XSMET\G1361.LWQ
  • %HOMEPATH%\XSMET\35829.FFO
  • %HOMEPATH%\XSMET\54901.QAX
  • %HOMEPATH%\XSMET\12841.STU
  • %HOMEPATH%\XSMET\W3603.LMW
  • %HOMEPATH%\XSMET\C64272.TOW
  • %HOMEPATH%\XSMET\67196.YFU
  • %HOMEPATH%\XSMET\50655.LAI
  • %HOMEPATH%\XSMET\W29993.ZWT
  • %HOMEPATH%\XSMET\A88532.SUW
  • %HOMEPATH%\XSMET\F69676.RDY
  • %HOMEPATH%\XSMET\26966.SMM
  • %HOMEPATH%\XSMET\9343.XDC
  • %HOMEPATH%\XSMET\73141.UJY
  • %HOMEPATH%\XSMET\H90516.SLG
  • %HOMEPATH%\XSMET\75143.IGO
  • %HOMEPATH%\XSMET\58989.LBE
  • %HOMEPATH%\XSMET\15184.ODQ
  • %HOMEPATH%\XSMET\70049.ZWR
  • %HOMEPATH%\XSMET\Y72101.NYX
  • %HOMEPATH%\XSMET\Q74631.BMR
  • %HOMEPATH%\XSMET\V62583.PAK
  • %HOMEPATH%\XSMET\30035.CXE
  • %HOMEPATH%\XSMET\76152.EOB
  • %HOMEPATH%\XSMET\S61662.JTH
  • %HOMEPATH%\XSMET\T74154.SMU
  • %HOMEPATH%\XSMET\W91974.WWZ
  • %HOMEPATH%\XSMET\68483.RRC
  • %HOMEPATH%\XSMET\2562.TRQ
  • %HOMEPATH%\XSMET\R21600.FYV
  • %HOMEPATH%\XSMET\E2349.AVN
  • %HOMEPATH%\XSMET\B41592.XQQ
  • %HOMEPATH%\XSMET\F2697.BRC
  • %HOMEPATH%\XSMET\V55352.YJW
  • %HOMEPATH%\XSMET\83892.EGR
  • %HOMEPATH%\XSMET\89649.YSL
  • %HOMEPATH%\XSMET\38086.VXH
  • %HOMEPATH%\XSMET\69188.AJL
  • %HOMEPATH%\XSMET\74264.CHK
  • %HOMEPATH%\XSMET\Z53881.FED
  • %HOMEPATH%\XSMET\T1811.NVM
  • %HOMEPATH%\XSMET\M74452.HVV
  • %HOMEPATH%\XSMET\A56169.TJF
  • %HOMEPATH%\XSMET\O18598.EXT
  • %HOMEPATH%\XSMET\18190.ZZO
  • %HOMEPATH%\XSMET\40192.UGE
  • %HOMEPATH%\XSMET\39703.YLG
  • %HOMEPATH%\XSMET\U97109.HLB
  • %HOMEPATH%\XSMET\U15281.FBV
  • %HOMEPATH%\XSMET\12079.LGT
  • %HOMEPATH%\XSMET\26662.XTA
  • %HOMEPATH%\XSMET\D18308.MSZ
  • %HOMEPATH%\XSMET\28026.LEP
  • %HOMEPATH%\XSMET\P96262.NKS
  • %HOMEPATH%\XSMET\T97074.DMW
  • %HOMEPATH%\XSMET\37158.OJL
  • %HOMEPATH%\XSMET\89583.HRY
  • %HOMEPATH%\XSMET\44653.LDU
  • %HOMEPATH%\XSMET\W10902.EZS
  • %HOMEPATH%\XSMET\X59880.VYW
  • %HOMEPATH%\XSMET\I97674.YTR
  • %HOMEPATH%\XSMET\32185.SBU
  • %HOMEPATH%\XSMET\2581.BCV
  • %HOMEPATH%\XSMET\57601.GZL
  • %HOMEPATH%\XSMET\76291.ZJI
  • %HOMEPATH%\XSMET\79032.QMQ
  • %HOMEPATH%\XSMET\H29267.XIH
  • %HOMEPATH%\XSMET\95636.JFE
  • %HOMEPATH%\XSMET\M78581.AVF
  • %HOMEPATH%\XSMET\18427.BUE
  • %HOMEPATH%\XSMET\49776.VQH
  • %HOMEPATH%\XSMET\A33205.FHA
  • %HOMEPATH%\XSMET\Q76736.BNG
  • %HOMEPATH%\XSMET\N65145.BYX
  • %HOMEPATH%\XSMET\U24999.GVH
  • %HOMEPATH%\XSMET\C29815.IEQ
  • %HOMEPATH%\XSMET\36642.PZF
  • %HOMEPATH%\XSMET\29219.FMD
  • %HOMEPATH%\XSMET\H52100.ESW
  • %HOMEPATH%\XSMET\40020.WVD
  • %HOMEPATH%\XSMET\R57656.TCX
  • %HOMEPATH%\XSMET\M17026.YHY
  • %HOMEPATH%\XSMET\O58351.RDS
  • %HOMEPATH%\XSMET\O43953.MTA
  • %HOMEPATH%\XSMET\83006.ALP
  • %HOMEPATH%\XSMET\44445.YWT
  • %HOMEPATH%\XSMET\O1625.UXP
  • %HOMEPATH%\XSMET\Z35021.XIV
  • %HOMEPATH%\XSMET\A19941.BHV
  • %HOMEPATH%\XSMET\D47572.UBI
  • %HOMEPATH%\XSMET\W10990.GBH
  • %HOMEPATH%\XSMET\Q45942.WDN
  • %HOMEPATH%\XSMET\I89446.LTW
  • %HOMEPATH%\XSMET\47151.KQK
  • %HOMEPATH%\XSMET\80950.VFT
  • %HOMEPATH%\XSMET\I38594.EJF
  • %HOMEPATH%\XSMET\87547.QBI
  • %HOMEPATH%\XSMET\G39862.IYO
  • %HOMEPATH%\XSMET\D56448.KQS
  • %HOMEPATH%\XSMET\C92573.YJJ
  • %HOMEPATH%\XSMET\95192.SJX
  • %HOMEPATH%\XSMET\L61702.YMQ
  • %HOMEPATH%\XSMET\W13567.AFE
  • %HOMEPATH%\XSMET\M7755.YTN
  • %HOMEPATH%\XSMET\30325.VHL
  • %HOMEPATH%\XSMET\56557.CLB
  • %HOMEPATH%\XSMET\42457.YIP
  • %HOMEPATH%\XSMET\E96932.VVY
  • %HOMEPATH%\XSMET\V43159.EJX
  • %HOMEPATH%\XSMET\46038.HJM
  • %HOMEPATH%\XSMET\49516.KDI
  • %HOMEPATH%\XSMET\I48087.SSQ
  • %HOMEPATH%\XSMET\45323.PCP
  • %HOMEPATH%\XSMET\6658.CTH
  • %HOMEPATH%\XSMET\40189.KZU
  • %HOMEPATH%\XSMET\N49395.DEP
  • %HOMEPATH%\XSMET\53090.IKK
  • %HOMEPATH%\XSMET\Y74820.YQG
  • %HOMEPATH%\XSMET\41379.NFL
  • %HOMEPATH%\XSMET\22113.LNF
  • %HOMEPATH%\XSMET\31579.LAN
  • %HOMEPATH%\XSMET\O47058.ZZL
  • %HOMEPATH%\XSMET\I43596.ZZA
  • %HOMEPATH%\XSMET\V13301.MAN
  • %HOMEPATH%\XSMET\93616.UCH
  • %HOMEPATH%\XSMET\68230.XQV
  • %HOMEPATH%\XSMET\G93269.HNN
  • %HOMEPATH%\XSMET\P91438.RWX
  • %HOMEPATH%\XSMET\F6924.PPG
  • %HOMEPATH%\XSMET\6330.VZR
  • %HOMEPATH%\XSMET\75013.DVX
  • %HOMEPATH%\XSMET\F8412.XXW
  • %HOMEPATH%\XSMET\H70942.KUC
  • %HOMEPATH%\XSMET\Z49255.WYE
  • %HOMEPATH%\XSMET\40624.COL
  • %HOMEPATH%\XSMET\49024.AMW
  • %HOMEPATH%\XSMET\Y34927.CSG
  • %HOMEPATH%\XSMET\M77447.TBB
  • %HOMEPATH%\XSMET\F44606.HJD
  • %HOMEPATH%\XSMET\55401.YTN
  • %HOMEPATH%\XSMET\20682.NDY
  • %HOMEPATH%\XSMET\80323.WFJ
  • %HOMEPATH%\XSMET\9488.JXQ
  • %HOMEPATH%\XSMET\89396.NIZ
  • %HOMEPATH%\XSMET\P96895.QEG
  • %HOMEPATH%\XSMET\M49749.KOS
  • %HOMEPATH%\XSMET\48809.WSP
  • %HOMEPATH%\XSMET\T15220.APV
  • %HOMEPATH%\XSMET\56264.OGF
  • %HOMEPATH%\XSMET\X40093.VOP
  • %HOMEPATH%\XSMET\M20822.MNB
  • %HOMEPATH%\XSMET\11434.QNY
  • %HOMEPATH%\XSMET\81779.VQI
  • %HOMEPATH%\XSMET\91128.EVL
  • %HOMEPATH%\XSMET\59228.GGJ
  • %HOMEPATH%\XSMET\D88198.AEF
  • %HOMEPATH%\XSMET\2129.OAQ
  • %HOMEPATH%\XSMET\F40484.OGD
  • %HOMEPATH%\XSMET\J67089.KSO
  • %HOMEPATH%\XSMET\T13594.EEL
  • %HOMEPATH%\XSMET\I84260.BAS
  • %HOMEPATH%\XSMET\91974.FLB
  • %HOMEPATH%\XSMET\36176.WVR
  • %HOMEPATH%\XSMET\T26861.XXD
  • %HOMEPATH%\XSMET\4028.WOE
  • %HOMEPATH%\XSMET\X67543.XPV
  • %HOMEPATH%\XSMET\W85734.AJD
  • %HOMEPATH%\XSMET\L37196.SXA
  • %HOMEPATH%\XSMET\41114.NMM
  • %HOMEPATH%\XSMET\S77832.OGE
  • %HOMEPATH%\XSMET\P78857.AEQ
  • %HOMEPATH%\XSMET\Q48796.KCD
  • %HOMEPATH%\XSMET\C90784.ZYW
  • %HOMEPATH%\XSMET\L59561.VOA
  • %HOMEPATH%\XSMET\Z25755.NHZ
  • %HOMEPATH%\XSMET\B59456.PWA
  • %HOMEPATH%\XSMET\8615.CLM
  • %HOMEPATH%\XSMET\D33378.RUZ
  • %HOMEPATH%\XSMET\51142.PLZ
  • %HOMEPATH%\XSMET\10021.EFA
  • %HOMEPATH%\XSMET\74392.NML
  • %HOMEPATH%\XSMET\F34004.XLV
  • %HOMEPATH%\XSMET\23237.XZZ
  • %HOMEPATH%\XSMET\59363.CNJ
  • %HOMEPATH%\XSMET\F2162.TBA
  • %HOMEPATH%\XSMET\40412.NDU
  • %HOMEPATH%\XSMET\79540.WLK
  • %HOMEPATH%\XSMET\56590.CFN
  • %HOMEPATH%\XSMET\K3821.SQA
  • %HOMEPATH%\XSMET\74002.PJW
  • %HOMEPATH%\XSMET\L32826.OUI
  • %HOMEPATH%\XSMET\73301.FMS
  • %HOMEPATH%\XSMET\E3599.HKD
  • %HOMEPATH%\XSMET\30850.PAP
  • %HOMEPATH%\XSMET\D70049.YXU
  • %HOMEPATH%\XSMET\X60431.VHP
  • %HOMEPATH%\XSMET\I60210.ULU
  • %HOMEPATH%\XSMET\37144.JZG
  • %HOMEPATH%\XSMET\91506.AER
  • %HOMEPATH%\XSMET\I8612.VFX
  • %HOMEPATH%\XSMET\33154.TUF
  • %HOMEPATH%\XSMET\65116.YCO
  • %HOMEPATH%\XSMET\72352.IWC
  • %HOMEPATH%\XSMET\N29017.NSV
  • %HOMEPATH%\XSMET\U72017.RKD
  • %HOMEPATH%\XSMET\55752.MGY
  • %HOMEPATH%\XSMET\L93097.HRZ
  • %HOMEPATH%\XSMET\T32822.MSC
  • %HOMEPATH%\XSMET\M50635.ZPQ
  • %HOMEPATH%\XSMET\C77864.PZZ
  • %HOMEPATH%\XSMET\I60031.CUV
  • %HOMEPATH%\XSMET\U92613.PDN
  • %HOMEPATH%\XSMET\B4416.NML
  • %HOMEPATH%\XSMET\V93162.ZQH
  • %HOMEPATH%\XSMET\92235.AYA
  • %HOMEPATH%\XSMET\L16682.COO
  • %HOMEPATH%\XSMET\J81208.KVV
  • %HOMEPATH%\XSMET\R37016.LQG
  • %HOMEPATH%\XSMET\62054.SLJ
  • %HOMEPATH%\XSMET\67431.OCC
  • %HOMEPATH%\XSMET\51362.ZGL
  • %HOMEPATH%\XSMET\K3561.DKO
  • %HOMEPATH%\XSMET\44189.LZO
  • %HOMEPATH%\XSMET\45172.LIY
  • %HOMEPATH%\XSMET\I6281.QMC
  • %HOMEPATH%\XSMET\A6589.IWJ
  • %HOMEPATH%\XSMET\Z75142.BSU
  • %HOMEPATH%\XSMET\42634.KFA
  • %HOMEPATH%\XSMET\Z7927.FWT
  • %HOMEPATH%\XSMET\63164.HAI
  • %HOMEPATH%\XSMET\B62353.YTF
  • %HOMEPATH%\XSMET\G12501.TGC
  • %HOMEPATH%\XSMET\90201.PEQ
  • %HOMEPATH%\XSMET\W27221.KIW
  • %HOMEPATH%\XSMET\I65775.SMU
  • %HOMEPATH%\XSMET\89347.YLX
  • %HOMEPATH%\XSMET\90876.TNA
  • %HOMEPATH%\XSMET\C45208.FAS
  • %HOMEPATH%\XSMET\T3098.NGC
  • %HOMEPATH%\XSMET\R15418.OMC
  • %HOMEPATH%\XSMET\E54195.GYJ
  • %HOMEPATH%\XSMET\O34889.JRQ
  • %HOMEPATH%\XSMET\C81041.LPD
  • %HOMEPATH%\XSMET\X86114.MSK
  • %HOMEPATH%\XSMET\92885.GAB
  • %HOMEPATH%\XSMET\T75424.IMU
  • %HOMEPATH%\XSMET\78577.JYO
  • %HOMEPATH%\XSMET\92001.GGV
  • %HOMEPATH%\XSMET\86721.MYU
  • %HOMEPATH%\XSMET\M83321.OAZ
  • %HOMEPATH%\XSMET\U78482.CCT
  • %HOMEPATH%\XSMET\52330.RSG
  • %HOMEPATH%\XSMET\B90284.LMJ
  • %HOMEPATH%\XSMET\N94180.AMT
  • %HOMEPATH%\XSMET\36958.MXT
  • %HOMEPATH%\XSMET\93443.ZQR
  • %HOMEPATH%\XSMET\29963.OWQ
  • %HOMEPATH%\XSMET\34836.YEH
  • %HOMEPATH%\XSMET\R99874.OLT
  • %HOMEPATH%\XSMET\29133.HYF
  • %HOMEPATH%\XSMET\N47668.WRS
  • %HOMEPATH%\XSMET\26836.BRG
  • %HOMEPATH%\XSMET\17121.UVD
  • %HOMEPATH%\XSMET\22474.SQE
  • %HOMEPATH%\XSMET\X77702.SAJ
  • %HOMEPATH%\XSMET\95614.TNJ
  • %HOMEPATH%\XSMET\A58735.NKB
  • %HOMEPATH%\XSMET\J28095.OGL
  • %HOMEPATH%\XSMET\9928.CZS
  • %HOMEPATH%\XSMET\21145.BLB
  • %HOMEPATH%\XSMET\D89986.BBQ
  • %HOMEPATH%\XSMET\Z51832.KFT
  • %HOMEPATH%\XSMET\14810.SLH
  • %HOMEPATH%\XSMET\81127.SWY
  • %HOMEPATH%\XSMET\X3688.DIL
  • %HOMEPATH%\XSMET\Z78928.CZG
  • %HOMEPATH%\XSMET\E48541.KFT
  • %HOMEPATH%\XSMET\G44730.NHB
  • %HOMEPATH%\XSMET\63297.YPS
  • %HOMEPATH%\XSMET\V75978.TWP
  • %HOMEPATH%\XSMET\F28174.XGG
  • %HOMEPATH%\XSMET\9165.SRQ
  • %HOMEPATH%\XSMET\M85661.WGS
  • %HOMEPATH%\XSMET\26407.BUV
  • %HOMEPATH%\XSMET\E84548.RCS
  • %HOMEPATH%\XSMET\99326.XLE
  • %HOMEPATH%\XSMET\58532.BYJ
  • %HOMEPATH%\XSMET\60608.LPO
  • %HOMEPATH%\XSMET\30012.RIN
  • %HOMEPATH%\XSMET\T79038.KKO
  • %HOMEPATH%\XSMET\K84507.JAT
  • %HOMEPATH%\XSMET\U13986.YCA
  • %HOMEPATH%\XSMET\R75675.OYN
  • %HOMEPATH%\XSMET\T48493.YVW
  • %HOMEPATH%\XSMET\96892.ZCM
  • %HOMEPATH%\XSMET\T63113.BSN
  • %HOMEPATH%\XSMET\64004.LXL
  • %HOMEPATH%\XSMET\94509.TAJ
  • %HOMEPATH%\XSMET\Z1623.IYV
  • %HOMEPATH%\XSMET\G93852.ZZL
  • %HOMEPATH%\XSMET\83987.YBQ
  • %HOMEPATH%\XSMET\J65294.QXL
  • %HOMEPATH%\XSMET\47275.NTS
  • %HOMEPATH%\XSMET\D87811.BOB
  • %HOMEPATH%\XSMET\R50385.GLK
  • %HOMEPATH%\XSMET\O12702.AFO
  • %HOMEPATH%\XSMET\12528.KNB
  • %HOMEPATH%\XSMET\89315.TZV
  • %HOMEPATH%\XSMET\E25518.BVF
  • %HOMEPATH%\XSMET\41732.KRM
  • %HOMEPATH%\XSMET\N89012.OYQ
  • %HOMEPATH%\XSMET\19395.QBR
  • %HOMEPATH%\XSMET\17062.UIC
  • %HOMEPATH%\XSMET\8050.PSV
  • %HOMEPATH%\XSMET\J23118.NQW
  • %HOMEPATH%\XSMET\M24983.HMY
  • %HOMEPATH%\XSMET\I75423.EUH
  • %HOMEPATH%\XSMET\54135.NOX
  • %HOMEPATH%\XSMET\48704.DTZ
  • %HOMEPATH%\XSMET\A78077.UGV
  • %HOMEPATH%\XSMET\38657.TKN
  • %HOMEPATH%\XSMET\35580.RIH
  • %HOMEPATH%\XSMET\69781.ZDX
  • %HOMEPATH%\XSMET\L70265.AIJ
  • %HOMEPATH%\XSMET\N81500.TVN
  • %HOMEPATH%\XSMET\settings.ini
  • %HOMEPATH%\XSMET\runner.vbs
  • %HOMEPATH%\XSMET\39008.ARZ
  • %HOMEPATH%\XSMET\361071.exe
  • %HOMEPATH%\XSMET\387663.dat
  • %HOMEPATH%\XSMET\42421.dat
  • %HOMEPATH%\XSMET\55785.dat
  • %HOMEPATH%\XSMET\Z44411.QZX
  • %HOMEPATH%\XSMET\91619.OOZ
  • %HOMEPATH%\XSMET\J28845.RVI
  • %HOMEPATH%\XSMET\I88105.MLZ
  • %HOMEPATH%\XSMET\69451.URB
  • %HOMEPATH%\XSMET\27961.VWF
  • %HOMEPATH%\XSMET\E96490.DDW
  • %HOMEPATH%\XSMET\O49097.OZM
  • %HOMEPATH%\XSMET\I62090.XPX
  • %HOMEPATH%\XSMET\N59141.OUS
  • %HOMEPATH%\XSMET\86186.OXB
  • %HOMEPATH%\XSMET\79174.RIA
  • %HOMEPATH%\XSMET\70406.ABT
  • %HOMEPATH%\XSMET\G14917.DJF
  • %HOMEPATH%\XSMET\G29001.GEY
  • %HOMEPATH%\XSMET\76041.ENO
  • %HOMEPATH%\XSMET\99996.QWI
  • %HOMEPATH%\XSMET\12083.CVQ
  • %HOMEPATH%\XSMET\T22521.BPD
  • %HOMEPATH%\XSMET\E96293.QYB
  • %HOMEPATH%\XSMET\78148.XRM
  • %HOMEPATH%\XSMET\64483.KGO
  • %HOMEPATH%\XSMET\46769.WIG
  • %HOMEPATH%\XSMET\89024.LBM
  • %HOMEPATH%\XSMET\68130.BIJ
  • %HOMEPATH%\XSMET\G30446.HWO
  • %HOMEPATH%\XSMET\25776.EJB
  • %HOMEPATH%\XSMET\84596.JHT
  • %HOMEPATH%\XSMET\T22026.BYL
  • %HOMEPATH%\XSMET\45561.BXC
  • %HOMEPATH%\XSMET\58957.YNG
  • %HOMEPATH%\XSMET\A73165.QHH
  • %HOMEPATH%\XSMET\83936.EEB
  • %HOMEPATH%\XSMET\Q77734.LIX
  • %HOMEPATH%\XSMET\12539.YXM
  • %HOMEPATH%\XSMET\C6572.OGA
  • %HOMEPATH%\XSMET\23674.KPT
  • %HOMEPATH%\XSMET\I75195.OZV
  • %HOMEPATH%\XSMET\N29634.NHP
  • %HOMEPATH%\XSMET\12180.TDF
  • %HOMEPATH%\XSMET\F21281.IVV
  • %HOMEPATH%\XSMET\Q51235.HRX
  • %HOMEPATH%\XSMET\60901.ZIK
  • %HOMEPATH%\XSMET\70868.OAF
  • %HOMEPATH%\XSMET\V42353.LCJ
  • %HOMEPATH%\XSMET\14411.VMD
  • %HOMEPATH%\XSMET\19063.WDM
  • %HOMEPATH%\XSMET\J61102.CHO
  • %HOMEPATH%\XSMET\57590.IIE
  • %HOMEPATH%\XSMET\48098.TIT
  • %HOMEPATH%\XSMET\D80292.GAD
  • %HOMEPATH%\XSMET\75476.ASK
  • %HOMEPATH%\XSMET\H65756.AUX
  • %HOMEPATH%\XSMET\E16972.TKP
  • %HOMEPATH%\XSMET\53525.JQC
  • %HOMEPATH%\XSMET\S56317.SRN
  • %HOMEPATH%\XSMET\A50185.JGA
  • %HOMEPATH%\XSMET\22679.XAH
  • %HOMEPATH%\XSMET\49991.ZNF
  • %HOMEPATH%\XSMET\G88706.KUW
  • %HOMEPATH%\XSMET\I56082.RYI
  • %HOMEPATH%\XSMET\79045.KPK
  • %HOMEPATH%\XSMET\98674.UGX
  • %HOMEPATH%\XSMET\39421.WXD
  • %HOMEPATH%\XSMET\21380.FQT
  • %HOMEPATH%\XSMET\62671.GZM
  • %HOMEPATH%\XSMET\88781.SFB
  • %HOMEPATH%\XSMET\28799.OGN
  • %HOMEPATH%\XSMET\B68360.RSY
  • %HOMEPATH%\XSMET\41870.FVQ
  • %HOMEPATH%\XSMET\W37772.DMY
  • %HOMEPATH%\XSMET\Z86568.QFE
  • %HOMEPATH%\XSMET\69437.DQZ
  • %HOMEPATH%\XSMET\58706.FDC
  • %HOMEPATH%\XSMET\60159.QUE
  • %HOMEPATH%\XSMET\P26833.ABQ
  • %HOMEPATH%\XSMET\J77220.WCE
  • %HOMEPATH%\XSMET\65035.IAK
  • %HOMEPATH%\XSMET\78188.CEC
  • %HOMEPATH%\XSMET\K80927.SZN
  • %HOMEPATH%\XSMET\C2015.QDL
  • %HOMEPATH%\XSMET\26796.LCL
  • %HOMEPATH%\XSMET\R30936.OSO
  • %HOMEPATH%\XSMET\60260.LFZ
  • %HOMEPATH%\XSMET\95132.LMA
  • %HOMEPATH%\XSMET\F33415.TVJ
  • %HOMEPATH%\XSMET\44961.EXM
  • %HOMEPATH%\XSMET\63657.LVD
  • %HOMEPATH%\XSMET\V2413.ZKO
  • %HOMEPATH%\XSMET\52432.SKS
  • %HOMEPATH%\XSMET\29599.JLB
  • %HOMEPATH%\XSMET\91419.GZK
  • %HOMEPATH%\XSMET\L6810.VLO
  • %HOMEPATH%\XSMET\39463.DHA
  • %HOMEPATH%\XSMET\Y40515.OTW
  • %HOMEPATH%\XSMET\61198.PDD
  • %HOMEPATH%\XSMET\83460.FIO
  • %HOMEPATH%\XSMET\O68687.VOK
  • %HOMEPATH%\XSMET\96256.COJ
  • %HOMEPATH%\XSMET\72002.HNW
  • %HOMEPATH%\XSMET\1372.MGN
  • %HOMEPATH%\XSMET\26310.WFL
  • %HOMEPATH%\XSMET\F4340.WWD
  • %HOMEPATH%\XSMET\D89182.XGZ
  • %HOMEPATH%\XSMET\C30248.LFZ
  • %HOMEPATH%\XSMET\C10121.ZQM
  • %HOMEPATH%\XSMET\99149.FIG
  • %HOMEPATH%\XSMET\B32029.MLY
  • %HOMEPATH%\XSMET\57196.EVO
  • %HOMEPATH%\XSMET\35945.YKW
  • %HOMEPATH%\XSMET\87437.IDR
  • %HOMEPATH%\XSMET\72967.XBW
  • %HOMEPATH%\XSMET\52596.YKQ
  • %HOMEPATH%\XSMET\O33296.VZC
  • %HOMEPATH%\XSMET\A47717.ICE
  • %HOMEPATH%\XSMET\60239.QQN
  • %HOMEPATH%\XSMET\I23824.EIC
  • %HOMEPATH%\XSMET\E33477.IZC
  • %HOMEPATH%\XSMET\87575.EUQ
  • %HOMEPATH%\XSMET\E93039.LLD
  • %HOMEPATH%\XSMET\E51420.CQH
  • %HOMEPATH%\XSMET\3257.WET
  • %HOMEPATH%\XSMET\P48215.VXA
  • %HOMEPATH%\XSMET\U5136.NMQ
  • %HOMEPATH%\XSMET\J32122.FKV
  • %HOMEPATH%\XSMET\37635.ROF
  • %HOMEPATH%\XSMET\74533.EGS
  • %HOMEPATH%\XSMET\G86862.ZXM
  • %HOMEPATH%\XSMET\B52466.AHH
  • %HOMEPATH%\XSMET\G92409.QEX
  • %HOMEPATH%\XSMET\52422.ARX
  • %HOMEPATH%\XSMET\47023.USR
  • %HOMEPATH%\XSMET\21028.BHF
  • %HOMEPATH%\XSMET\87361.UAO
  • %HOMEPATH%\XSMET\16639.QGU
  • %HOMEPATH%\XSMET\N60443.BJJ
  • %HOMEPATH%\XSMET\30509.TFO
  • %HOMEPATH%\XSMET\85997.LJV
  • %HOMEPATH%\XSMET\24451.AYN
  • %HOMEPATH%\XSMET\31853.SHB
  • %HOMEPATH%\XSMET\R3692.XYO
  • %HOMEPATH%\XSMET\M41214.QBL
  • %HOMEPATH%\XSMET\21810.DOS
  • %HOMEPATH%\XSMET\23384.BMJ
  • %HOMEPATH%\XSMET\C6987.DER
  • %HOMEPATH%\XSMET\71978.CZP
  • %HOMEPATH%\XSMET\77455.ACV
  • %HOMEPATH%\XSMET\8373.MLV
  • %HOMEPATH%\XSMET\74479.JRR
  • %HOMEPATH%\XSMET\F27562.LLM
  • %HOMEPATH%\XSMET\1495.RSH
  • %HOMEPATH%\XSMET\P60998.ICG
  • %HOMEPATH%\XSMET\L40196.NUD
  • %HOMEPATH%\XSMET\49604.NTB
  • %HOMEPATH%\XSMET\14883.USQ
  • %HOMEPATH%\XSMET\27962.MZE
  • %HOMEPATH%\XSMET\F7859.MGY
  • %HOMEPATH%\XSMET\64776.GWY
  • %HOMEPATH%\XSMET\S76049.BXV
  • %HOMEPATH%\XSMET\27793.SAT
  • %HOMEPATH%\XSMET\J40073.IYU
  • %HOMEPATH%\XSMET\10387.YJG
  • %HOMEPATH%\XSMET\94794.TAF
  • %HOMEPATH%\XSMET\5167.SWE
  • %HOMEPATH%\XSMET\G63364.WXZ
  • %HOMEPATH%\XSMET\B84703.ZML
  • %HOMEPATH%\XSMET\26271.CUA
  • %HOMEPATH%\XSMET\89874.LUJ
Удаляет следующие файлы:
  • %HOMEPATH%\XSMET\LJQLSAPT.dat
Сетевая активность:
Подключается к:
  • '<IP-адрес в локальной сети>':550
Другое:
Ищет следующие окна:
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'
  • ClassName: 'EDIT' WindowName: '(null)'

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке