Trojan.PWS.Siggen1.7416

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\housecalllauncher.exe] 'Debugger' = 'hn_.exe'
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Saitek Driver Handler' = '"%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe"'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Saitek Driver Handler' = '"%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe"'
[<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rstrui.exe] 'Debugger' = 'if_.exe'
[<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\hijackthis.exe] 'Debugger' = 'og_.exe'
[<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\spybotsd.exe] 'Debugger' = 'jv_.exe'

Создает следующие сервисы:

[<HKLM>\SYSTEM\ControlSet001\Services\SSDPSRV] 'Start' = '00000002'

Вредоносные функции:

Для затруднения выявления своего присутствия в системе

блокирует отображение:

скрытых файлов

Создает и запускает на исполнение:

'%HOMEPATH%\MJHPK\935754.exe' QJHWTGXU.dat
'%HOMEPATH%\MJHPK\935754.exe' 937756.VNX

Запускает на исполнение:

'<SYSTEM32>\wuauclt.exe'
'%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
'<SYSTEM32>\wscript.exe' "%HOMEPATH%\MJHPK\setup.vbs" 5994

Внедряет код в

следующие системные процессы:

<SYSTEM32>\ctfmon.exe
<SYSTEM32>\cmd.exe
<SYSTEM32>\cscript.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
<SYSTEM32>\wuauclt.exe
%WINDIR%\Explorer.EXE

большое количество пользовательских процессов.

Ищет ветки реестра, отвечающие за хранение паролей сторонними программами:

[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FTP Commander]
[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FTP Commander Deluxe]
[<HKCU>\Software\FTPWare\CoreFTP\Sites]
[<HKCU>\Software\Martin Prikryl\WinSCP 2\Sessions]

Ищет следующие окна с целью

обнаружения утилит для анализа:

ClassName: 'PROCMON_WINDOW_CLASS' WindowName: '(null)'

Изменяет следующие настройки браузера Windows Internet Explorer:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '2500' = '00000003'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] '2500' = '00000003'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1] '2500' = '00000003'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '2500' = '00000003'

Изменения в файловой системе:

Создает следующие файлы:

%HOMEPATH%\MJHPK\I1894.BDU
%HOMEPATH%\MJHPK\25244.WBU
%HOMEPATH%\MJHPK\X77554.LRQ
%HOMEPATH%\MJHPK\81847.VOR
%HOMEPATH%\MJHPK\R71154.IEO
%HOMEPATH%\MJHPK\O53942.UUN
%HOMEPATH%\MJHPK\53815.QUZ
%HOMEPATH%\MJHPK\Y60358.OGY
%HOMEPATH%\MJHPK\32928.MVC
%HOMEPATH%\MJHPK\41247.CSU
%HOMEPATH%\MJHPK\K77419.FCC
%HOMEPATH%\MJHPK\10360.TNW
%HOMEPATH%\MJHPK\18946.FOY
%HOMEPATH%\MJHPK\O84991.TEP
%HOMEPATH%\MJHPK\X48295.FHK
%HOMEPATH%\MJHPK\J62627.TON
%HOMEPATH%\MJHPK\U33206.MWX
%HOMEPATH%\MJHPK\22249.WOR
%HOMEPATH%\MJHPK\T64390.XRW
%HOMEPATH%\MJHPK\Y63139.UXA
%HOMEPATH%\MJHPK\36575.HXO
%HOMEPATH%\MJHPK\11653.AFX
%HOMEPATH%\MJHPK\H28147.REF
%HOMEPATH%\MJHPK\N96321.LUJ
%HOMEPATH%\MJHPK\21553.LFW
%HOMEPATH%\MJHPK\V1697.YJW
%HOMEPATH%\MJHPK\45547.AAV
%HOMEPATH%\MJHPK\11073.TPP
%HOMEPATH%\MJHPK\R25049.UIY
%HOMEPATH%\MJHPK\Z68044.OHY
%HOMEPATH%\MJHPK\P86500.IPM
%HOMEPATH%\MJHPK\L64441.THY
%HOMEPATH%\MJHPK\50168.CLV
%HOMEPATH%\MJHPK\57493.MED
%HOMEPATH%\MJHPK\M49060.NCL
%HOMEPATH%\MJHPK\G78176.NAV
%HOMEPATH%\MJHPK\16340.YIC
%HOMEPATH%\MJHPK\55032.RHI
%HOMEPATH%\MJHPK\P54347.CAC
%HOMEPATH%\MJHPK\90754.FRA
%HOMEPATH%\MJHPK\10430.KXP
%HOMEPATH%\MJHPK\T91521.QFA
%HOMEPATH%\MJHPK\85829.XLL
%HOMEPATH%\MJHPK\76435.FNC
%HOMEPATH%\MJHPK\15549.YLG
%HOMEPATH%\MJHPK\76396.ADI
%HOMEPATH%\MJHPK\U8481.NDM
%HOMEPATH%\MJHPK\31504.YXG
%HOMEPATH%\MJHPK\D45626.DTU
%HOMEPATH%\MJHPK\16537.AQE
%HOMEPATH%\MJHPK\97376.FQU
%HOMEPATH%\MJHPK\58712.QCV
%HOMEPATH%\MJHPK\10185.DJV
%HOMEPATH%\MJHPK\25983.AHT
%HOMEPATH%\MJHPK\81047.GFF
%HOMEPATH%\MJHPK\X48088.OWC
%HOMEPATH%\MJHPK\I13308.RHU
%HOMEPATH%\MJHPK\73082.YXW
%HOMEPATH%\MJHPK\L66396.EBQ
%HOMEPATH%\MJHPK\79450.XKQ
%HOMEPATH%\MJHPK\15704.OZI
%HOMEPATH%\MJHPK\U98200.FTD
%HOMEPATH%\MJHPK\97890.VHC
%HOMEPATH%\MJHPK\1715.HQB
%HOMEPATH%\MJHPK\U30734.FAO
%HOMEPATH%\MJHPK\26362.VHP
%HOMEPATH%\MJHPK\15936.JUK
%HOMEPATH%\MJHPK\Z52260.HEU
%HOMEPATH%\MJHPK\20608.YDQ
%HOMEPATH%\MJHPK\16521.FXN
%HOMEPATH%\MJHPK\Y3101.SZB
%HOMEPATH%\MJHPK\B26021.IVU
%HOMEPATH%\MJHPK\R3176.NSE
%HOMEPATH%\MJHPK\38759.RFL
%HOMEPATH%\MJHPK\J64627.ZDJ
%HOMEPATH%\MJHPK\2156.QKH
%HOMEPATH%\MJHPK\B78327.DGR
%HOMEPATH%\MJHPK\U64063.UTQ
%HOMEPATH%\MJHPK\B4222.ZZJ
%HOMEPATH%\MJHPK\46123.XEM
%HOMEPATH%\MJHPK\K50334.EAC
%HOMEPATH%\MJHPK\J17674.WAU
%HOMEPATH%\MJHPK\R11494.MSS
%HOMEPATH%\MJHPK\24790.TTT
%HOMEPATH%\MJHPK\33096.GQO
%HOMEPATH%\MJHPK\Z8992.NOV
%HOMEPATH%\MJHPK\95436.LVH
%HOMEPATH%\MJHPK\V17239.WXC
%HOMEPATH%\MJHPK\K5991.EFC
%HOMEPATH%\MJHPK\79524.RDM
%HOMEPATH%\MJHPK\14826.EON
%HOMEPATH%\MJHPK\O15934.XMN
%HOMEPATH%\MJHPK\87230.CVE
%HOMEPATH%\MJHPK\J67181.DBV
%HOMEPATH%\MJHPK\86344.AQT
%HOMEPATH%\MJHPK\14560.WQP
%HOMEPATH%\MJHPK\W94204.TLJ
%HOMEPATH%\MJHPK\59197.PVS
%HOMEPATH%\MJHPK\A84851.FIR
%HOMEPATH%\MJHPK\K88687.QBG
%HOMEPATH%\MJHPK\I36558.VIQ
%HOMEPATH%\MJHPK\C66521.YDN
%HOMEPATH%\MJHPK\3614.HTV
%HOMEPATH%\MJHPK\Z14098.NRJ
%HOMEPATH%\MJHPK\48846.FRO
%HOMEPATH%\MJHPK\R48271.WJM
%HOMEPATH%\MJHPK\V33083.SWN
%HOMEPATH%\MJHPK\L27648.MZU
%HOMEPATH%\MJHPK\B64387.WMA
%HOMEPATH%\MJHPK\51794.RYL
%HOMEPATH%\MJHPK\F68326.XST
%HOMEPATH%\MJHPK\C9243.KJW
%HOMEPATH%\MJHPK\R64296.WCX
%HOMEPATH%\MJHPK\Q40182.SSR
%HOMEPATH%\MJHPK\B45629.XDM
%HOMEPATH%\MJHPK\Q22010.ZDM
%HOMEPATH%\MJHPK\95715.ECU
%HOMEPATH%\MJHPK\26783.EIW
%HOMEPATH%\MJHPK\15142.TGJ
%HOMEPATH%\MJHPK\3782.IJM
%HOMEPATH%\MJHPK\1339.KBI
%HOMEPATH%\MJHPK\61342.PCK
%HOMEPATH%\MJHPK\K28657.VDL
%HOMEPATH%\MJHPK\C57714.PXM
%HOMEPATH%\MJHPK\57127.FDX
%HOMEPATH%\MJHPK\69654.HZG
%HOMEPATH%\MJHPK\85033.WQG
%HOMEPATH%\MJHPK\31569.QRZ
%HOMEPATH%\MJHPK\50339.BBT
%HOMEPATH%\MJHPK\R34957.HQG
%HOMEPATH%\MJHPK\45350.HFL
%HOMEPATH%\MJHPK\11024.PRT
%HOMEPATH%\MJHPK\47382.TIR
%HOMEPATH%\MJHPK\D25500.BNB
%HOMEPATH%\MJHPK\14909.TPJ
%HOMEPATH%\MJHPK\I60903.YFA
%HOMEPATH%\MJHPK\H42886.IVL
%HOMEPATH%\MJHPK\N58179.ZBE
%HOMEPATH%\MJHPK\G62271.KOZ
%HOMEPATH%\MJHPK\65629.TKV
%HOMEPATH%\MJHPK\P49860.SJC
%HOMEPATH%\MJHPK\M34277.ZYS
%HOMEPATH%\MJHPK\4328.OFP
%HOMEPATH%\MJHPK\F44187.BPM
%HOMEPATH%\MJHPK\S49015.TOO
%HOMEPATH%\MJHPK\16912.JEL
%HOMEPATH%\MJHPK\99680.UKE
%HOMEPATH%\MJHPK\31796.HRE
%HOMEPATH%\MJHPK\63913.GWB
%HOMEPATH%\MJHPK\9464.QNN
%HOMEPATH%\MJHPK\S94010.MKE
%HOMEPATH%\MJHPK\66014.TCK
%HOMEPATH%\MJHPK\T39263.XYL
%HOMEPATH%\MJHPK\26108.SMR
%HOMEPATH%\MJHPK\F98344.HDS
%HOMEPATH%\MJHPK\Z65621.SDN
%HOMEPATH%\MJHPK\Y23955.QHS
%HOMEPATH%\MJHPK\31629.ZNP
%HOMEPATH%\MJHPK\4548.XXN
%HOMEPATH%\MJHPK\16402.YTB
%HOMEPATH%\MJHPK\56472.ALN
%HOMEPATH%\MJHPK\83046.GFL
%HOMEPATH%\MJHPK\51442.BWZ
%HOMEPATH%\MJHPK\R33776.VZJ
%HOMEPATH%\MJHPK\S7299.YSW
%HOMEPATH%\MJHPK\15869.HUZ
%HOMEPATH%\MJHPK\Q40689.YPJ
%HOMEPATH%\MJHPK\94011.PDB
%HOMEPATH%\MJHPK\O95968.FXB
%HOMEPATH%\MJHPK\M62365.KVK
%HOMEPATH%\MJHPK\G69584.ZPM
%HOMEPATH%\MJHPK\68729.CKR
%HOMEPATH%\MJHPK\D79551.BUB
%HOMEPATH%\MJHPK\49987.CSG
%HOMEPATH%\MJHPK\A69790.PZL
%HOMEPATH%\MJHPK\35417.WVY
%HOMEPATH%\MJHPK\97829.GNN
%HOMEPATH%\MJHPK\N52151.SUJ
%HOMEPATH%\MJHPK\33841.MFW
%HOMEPATH%\MJHPK\61132.BJC
%HOMEPATH%\MJHPK\S74883.PLU
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\order[1].htm
%HOMEPATH%\MJHPK\QJHWTGXU.dat
%HOMEPATH%\MJHPK\Y43622.AUO
%HOMEPATH%\MJHPK\I88141.SFU
%HOMEPATH%\MJHPK\R65534.NYU
%HOMEPATH%\MJHPK\M78286.RVZ
%HOMEPATH%\MJHPK\71307.WKY
%HOMEPATH%\MJHPK\58550.QLQ
%HOMEPATH%\MJHPK\22305.JTG
%HOMEPATH%\MJHPK\P71318.EBS
%HOMEPATH%\MJHPK\L9044.JIF
%HOMEPATH%\MJHPK\22031.JTT
%HOMEPATH%\MJHPK\V17674.CFI
%HOMEPATH%\MJHPK\62165.GVT
%HOMEPATH%\MJHPK\Y18079.LDS
%HOMEPATH%\MJHPK\A66296.MPO
%HOMEPATH%\MJHPK\4634.DAA
%HOMEPATH%\MJHPK\E42615.TQB
%HOMEPATH%\MJHPK\X48428.PNM
%HOMEPATH%\MJHPK\76796.FAZ
%HOMEPATH%\MJHPK\67052.CDY
%HOMEPATH%\MJHPK\92467.QTN
%HOMEPATH%\MJHPK\17998.RRV
%HOMEPATH%\MJHPK\50940.AJH
%HOMEPATH%\MJHPK\R9410.QFL
%HOMEPATH%\MJHPK\L81501.DAR
%HOMEPATH%\MJHPK\81456.HOO
%HOMEPATH%\MJHPK\I60348.BXO
%HOMEPATH%\MJHPK\M59537.COE
%HOMEPATH%\MJHPK\B48676.MRL
%HOMEPATH%\MJHPK\D56584.CLW
%HOMEPATH%\MJHPK\B97305.FMP
%HOMEPATH%\MJHPK\F41167.FQJ
%HOMEPATH%\MJHPK\54842.YQF
%HOMEPATH%\MJHPK\I24597.YVK
%HOMEPATH%\MJHPK\27381.KXH
%HOMEPATH%\MJHPK\Z25295.BCJ
%HOMEPATH%\MJHPK\50516.ULI
%HOMEPATH%\MJHPK\Q33204.LKX
%HOMEPATH%\MJHPK\55784.IKU
%HOMEPATH%\MJHPK\68413.ODK
%HOMEPATH%\MJHPK\J78823.HVX
%HOMEPATH%\MJHPK\29567.IDZ
%HOMEPATH%\MJHPK\J64241.VCW
%HOMEPATH%\MJHPK\15558.KQV
%HOMEPATH%\MJHPK\77723.RBI
%HOMEPATH%\MJHPK\Z9859.TCA
%HOMEPATH%\MJHPK\38956.ORY
%HOMEPATH%\MJHPK\W69131.LHR
%HOMEPATH%\MJHPK\71991.ORB
%HOMEPATH%\MJHPK\O42483.FMM
%HOMEPATH%\MJHPK\H85430.QHL
%HOMEPATH%\MJHPK\R99777.KTF
%HOMEPATH%\MJHPK\16412.IFR
%HOMEPATH%\MJHPK\G7656.NYF
%HOMEPATH%\MJHPK\Z88940.MPD
%HOMEPATH%\MJHPK\80231.XAP
%HOMEPATH%\MJHPK\P80998.DIO
%HOMEPATH%\MJHPK\59113.HZU
%HOMEPATH%\MJHPK\G73747.CXQ
%HOMEPATH%\MJHPK\10112.NPM
%HOMEPATH%\MJHPK\52953.MYO
%HOMEPATH%\MJHPK\98065.YIX
%HOMEPATH%\MJHPK\96032.CXU
%HOMEPATH%\MJHPK\E39922.LKE
%HOMEPATH%\MJHPK\T76202.DWE
%HOMEPATH%\MJHPK\J96613.VMA
%HOMEPATH%\MJHPK\9164.TPD
%HOMEPATH%\MJHPK\99057.IYR
%HOMEPATH%\MJHPK\O78023.EBD
%HOMEPATH%\MJHPK\87890.BXP
%HOMEPATH%\MJHPK\81457.UAM
%HOMEPATH%\MJHPK\42281.UAU
%HOMEPATH%\MJHPK\Q53021.AEX
%HOMEPATH%\MJHPK\22448.RUK
%HOMEPATH%\MJHPK\R60280.KJE
%HOMEPATH%\MJHPK\Q43937.TNL
%HOMEPATH%\MJHPK\13799.YZT
%HOMEPATH%\MJHPK\Z76037.EHV
%HOMEPATH%\MJHPK\13145.SSH
%HOMEPATH%\MJHPK\L34989.BXR
%HOMEPATH%\MJHPK\T4391.ZSF
%HOMEPATH%\MJHPK\Q56442.KTW
%HOMEPATH%\MJHPK\C51959.GGS
%HOMEPATH%\MJHPK\23667.IFT
%HOMEPATH%\MJHPK\35479.WXS
%HOMEPATH%\MJHPK\55634.GZB
%HOMEPATH%\MJHPK\34352.JHV
%HOMEPATH%\MJHPK\87210.EEE
%HOMEPATH%\MJHPK\7840.OZV
%HOMEPATH%\MJHPK\49965.GVC
%HOMEPATH%\MJHPK\E55072.IZU
%HOMEPATH%\MJHPK\83598.MIW
%HOMEPATH%\MJHPK\Z78342.VFW
%HOMEPATH%\MJHPK\X75621.ZMY
%HOMEPATH%\MJHPK\Z91241.ESA
%HOMEPATH%\MJHPK\K46077.QMF
%HOMEPATH%\MJHPK\47787.CXY
%HOMEPATH%\MJHPK\87108.HFL
%HOMEPATH%\MJHPK\92387.YCQ
%HOMEPATH%\MJHPK\T21119.KPK
%HOMEPATH%\MJHPK\P82419.GXO
%HOMEPATH%\MJHPK\O14287.EWF
%HOMEPATH%\MJHPK\47600.SES
%HOMEPATH%\MJHPK\30457.FOX
%HOMEPATH%\MJHPK\P11734.GVD
%HOMEPATH%\MJHPK\90406.ZDC
%HOMEPATH%\MJHPK\B44313.VON
%HOMEPATH%\MJHPK\26204.IGH
%HOMEPATH%\MJHPK\23089.FHP
%HOMEPATH%\MJHPK\U56127.JQX
%HOMEPATH%\MJHPK\69502.EFK
%HOMEPATH%\MJHPK\87732.HOL
%HOMEPATH%\MJHPK\47379.XAV
%HOMEPATH%\MJHPK\23068.THX
%HOMEPATH%\MJHPK\4133.LYH
%HOMEPATH%\MJHPK\33071.WQN
%HOMEPATH%\MJHPK\E81468.WWO
%HOMEPATH%\MJHPK\Q12152.GUA
%HOMEPATH%\MJHPK\62384.PCZ
%HOMEPATH%\MJHPK\60773.PRX
%HOMEPATH%\MJHPK\89511.LKP
%HOMEPATH%\MJHPK\64569.XQD
%HOMEPATH%\MJHPK\J58299.ZXN
%HOMEPATH%\MJHPK\O48866.VGD
%HOMEPATH%\MJHPK\68913.FTO
%HOMEPATH%\MJHPK\76074.RDM
%HOMEPATH%\MJHPK\85997.IJO
%HOMEPATH%\MJHPK\V79541.TYM
%HOMEPATH%\MJHPK\82584.DEG
%HOMEPATH%\MJHPK\Y96450.IQA
%HOMEPATH%\MJHPK\58033.POH
%HOMEPATH%\MJHPK\88421.RVB
%HOMEPATH%\MJHPK\32506.KCJ
%HOMEPATH%\MJHPK\38658.CYD
%HOMEPATH%\MJHPK\33689.AYT
%HOMEPATH%\MJHPK\64503.MYH
%HOMEPATH%\MJHPK\2200.RRB
%HOMEPATH%\MJHPK\X42801.CIJ
%HOMEPATH%\MJHPK\86761.DXL
%HOMEPATH%\MJHPK\88226.DPY
%HOMEPATH%\MJHPK\Y1010.WFT
%HOMEPATH%\MJHPK\17468.BZR
%HOMEPATH%\MJHPK\R30966.JMM
%HOMEPATH%\MJHPK\30605.QCN
%HOMEPATH%\MJHPK\93482.PLB
%HOMEPATH%\MJHPK\U70129.VAG
%HOMEPATH%\MJHPK\68557.LBK
%HOMEPATH%\MJHPK\H35091.SZC
%HOMEPATH%\MJHPK\84903.TCY
%HOMEPATH%\MJHPK\Q38539.QRR
%HOMEPATH%\MJHPK\T16256.BEI
%HOMEPATH%\MJHPK\40794.GER
%HOMEPATH%\MJHPK\12682.VNA
%HOMEPATH%\MJHPK\E32734.PKJ
%HOMEPATH%\MJHPK\R45547.SJK
%HOMEPATH%\MJHPK\95836.LCP
%HOMEPATH%\MJHPK\R65441.IBJ
%HOMEPATH%\MJHPK\J68350.IVK
%HOMEPATH%\MJHPK\84374.CFC
%HOMEPATH%\MJHPK\X56248.KSU
%HOMEPATH%\MJHPK\8527.UVD
%HOMEPATH%\MJHPK\D88112.OVJ
%HOMEPATH%\MJHPK\E32875.NQN
%HOMEPATH%\MJHPK\7609.RBB
%HOMEPATH%\MJHPK\N93214.EPV
%HOMEPATH%\MJHPK\15722.TUM
%HOMEPATH%\MJHPK\Q59727.QNJ
%HOMEPATH%\MJHPK\27416.LUD
%HOMEPATH%\MJHPK\J14227.STZ
%HOMEPATH%\MJHPK\L59434.VVC
%HOMEPATH%\MJHPK\35023.QYM
%HOMEPATH%\MJHPK\64681.NKK
%HOMEPATH%\MJHPK\67311.ZCZ
%HOMEPATH%\MJHPK\N68039.UOA
%HOMEPATH%\MJHPK\25968.GDP
%HOMEPATH%\MJHPK\setup.vbs
%HOMEPATH%\MJHPK\settings.ini
%HOMEPATH%\MJHPK\S21863.QAT
%HOMEPATH%\MJHPK\91313.WXV
%HOMEPATH%\MJHPK\519233.dat
%HOMEPATH%\MJHPK\937756.VNX
%HOMEPATH%\MJHPK\935754.exe
%HOMEPATH%\MJHPK\83373.dat
%HOMEPATH%\MJHPK\61786.SXI
%HOMEPATH%\MJHPK\R89806.SPM
%HOMEPATH%\MJHPK\51101.XEO
%HOMEPATH%\MJHPK\76883.LKN
%HOMEPATH%\MJHPK\R37934.YLC
%HOMEPATH%\MJHPK\S32937.GKD
%HOMEPATH%\MJHPK\8093.YQG
%HOMEPATH%\MJHPK\G64371.NQM
%HOMEPATH%\MJHPK\13096.EHA
%HOMEPATH%\MJHPK\76100.IEG
%HOMEPATH%\MJHPK\K72923.ZQO
%HOMEPATH%\MJHPK\Q47976.RYD
%HOMEPATH%\MJHPK\83551.VAW
%HOMEPATH%\MJHPK\14474.CXA
%HOMEPATH%\MJHPK\A90647.ERQ
%HOMEPATH%\MJHPK\77677.MUJ
%HOMEPATH%\MJHPK\X65350.JCT
%HOMEPATH%\MJHPK\25968.OBU
%HOMEPATH%\MJHPK\24336.NEQ
%HOMEPATH%\MJHPK\W4443.NDV
%HOMEPATH%\MJHPK\52911.OJI
%HOMEPATH%\MJHPK\M65517.WTA
%HOMEPATH%\MJHPK\V46008.NGQ
%HOMEPATH%\MJHPK\97933.FDN
%HOMEPATH%\MJHPK\32220.FLI
%HOMEPATH%\MJHPK\66117.FDI
%HOMEPATH%\MJHPK\38124.JPB
%HOMEPATH%\MJHPK\A43861.VMQ
%HOMEPATH%\MJHPK\19958.IAO
%HOMEPATH%\MJHPK\97901.RHT
%HOMEPATH%\MJHPK\52258.KFT
%HOMEPATH%\MJHPK\M66196.GOZ
%HOMEPATH%\MJHPK\W62661.AQK
%HOMEPATH%\MJHPK\1770.XVJ
%HOMEPATH%\MJHPK\U93027.TDA
%HOMEPATH%\MJHPK\E49277.EZB
%HOMEPATH%\MJHPK\59762.CUX
%HOMEPATH%\MJHPK\30417.ULR
%HOMEPATH%\MJHPK\O13679.GHL
%HOMEPATH%\MJHPK\X93939.CAL
%HOMEPATH%\MJHPK\3270.WDW
%HOMEPATH%\MJHPK\Y43027.TAZ
%HOMEPATH%\MJHPK\55898.TMQ
%HOMEPATH%\MJHPK\36755.BEW
%HOMEPATH%\MJHPK\G22688.IXY
%HOMEPATH%\MJHPK\Z64028.ONP
%HOMEPATH%\MJHPK\G24740.JXM
%HOMEPATH%\MJHPK\77383.OIT
%HOMEPATH%\MJHPK\95626.DFC
%HOMEPATH%\MJHPK\B59874.GHO
%HOMEPATH%\MJHPK\54766.HIB
%HOMEPATH%\MJHPK\27767.SAK
%HOMEPATH%\MJHPK\G64490.QIV
%HOMEPATH%\MJHPK\11240.IDC
%HOMEPATH%\MJHPK\P14904.NLN
%HOMEPATH%\MJHPK\59118.FSG
%HOMEPATH%\MJHPK\94618.FQB
%HOMEPATH%\MJHPK\U57412.AWA
%HOMEPATH%\MJHPK\59703.CFZ
%HOMEPATH%\MJHPK\18246.KAE
%HOMEPATH%\MJHPK\2224.CRM
%HOMEPATH%\MJHPK\22820.WKP
%HOMEPATH%\MJHPK\P66557.CYF
%HOMEPATH%\MJHPK\B49513.LON
%HOMEPATH%\MJHPK\54576.OHR
%HOMEPATH%\MJHPK\92825.RPQ
%HOMEPATH%\MJHPK\V27205.EJB
%HOMEPATH%\MJHPK\6119.OAJ
%HOMEPATH%\MJHPK\24614.PRV
%HOMEPATH%\MJHPK\7721.YYJ
%HOMEPATH%\MJHPK\63558.LLR
%HOMEPATH%\MJHPK\M85906.MSZ
%HOMEPATH%\MJHPK\A61103.SDO
%HOMEPATH%\MJHPK\P44828.YTQ
%HOMEPATH%\MJHPK\8551.HCX
%HOMEPATH%\MJHPK\B49991.BPE
%HOMEPATH%\MJHPK\W72225.GMV
%HOMEPATH%\MJHPK\64994.QPR
%HOMEPATH%\MJHPK\91011.MKP
%HOMEPATH%\MJHPK\L1979.GVN
%HOMEPATH%\MJHPK\20770.JOK
%HOMEPATH%\MJHPK\29504.OYS
%HOMEPATH%\MJHPK\G70630.DPR
%HOMEPATH%\MJHPK\Q93885.KIA
%HOMEPATH%\MJHPK\2888.GJO
%HOMEPATH%\MJHPK\R23263.GYS
%HOMEPATH%\MJHPK\C62741.PWJ
%HOMEPATH%\MJHPK\57473.XRR
%HOMEPATH%\MJHPK\6212.XEL
%HOMEPATH%\MJHPK\U15250.VZG
%HOMEPATH%\MJHPK\X36947.VWU
%HOMEPATH%\MJHPK\80391.OCO
%HOMEPATH%\MJHPK\K44409.UVE
%HOMEPATH%\MJHPK\N40404.PGG
%HOMEPATH%\MJHPK\V16037.HPK
%HOMEPATH%\MJHPK\25634.UND
%HOMEPATH%\MJHPK\K67053.MEH
%HOMEPATH%\MJHPK\70304.IJM
%HOMEPATH%\MJHPK\64546.OKH
%HOMEPATH%\MJHPK\E72559.AVG
%HOMEPATH%\MJHPK\G44915.VMN
%HOMEPATH%\MJHPK\Y65722.LYZ
%HOMEPATH%\MJHPK\L19308.OVZ
%HOMEPATH%\MJHPK\39275.XAX
%HOMEPATH%\MJHPK\W6675.MQM
%HOMEPATH%\MJHPK\86784.AGK
%HOMEPATH%\MJHPK\3522.DMX
%HOMEPATH%\MJHPK\V77936.HSZ
%HOMEPATH%\MJHPK\G82150.LES
%HOMEPATH%\MJHPK\C31865.JKX
%HOMEPATH%\MJHPK\W31861.VAC
%HOMEPATH%\MJHPK\79213.RVZ
%HOMEPATH%\MJHPK\W45727.GOD
%HOMEPATH%\MJHPK\R59413.IYU
%HOMEPATH%\MJHPK\Q44413.INJ
%HOMEPATH%\MJHPK\L2693.JQK
%HOMEPATH%\MJHPK\91700.ZHF
%HOMEPATH%\MJHPK\N5381.PZT
%HOMEPATH%\MJHPK\84166.KSN
%HOMEPATH%\MJHPK\X37395.PMD
%HOMEPATH%\MJHPK\L94361.TFM
%HOMEPATH%\MJHPK\92460.UKT
%HOMEPATH%\MJHPK\9419.KTF
%HOMEPATH%\MJHPK\22125.DXP
%HOMEPATH%\MJHPK\58896.LEV
%HOMEPATH%\MJHPK\Q40083.OUX
%HOMEPATH%\MJHPK\A81463.EFC
%HOMEPATH%\MJHPK\40618.KPT
%HOMEPATH%\MJHPK\7026.PBU
%HOMEPATH%\MJHPK\F21527.CLQ
%HOMEPATH%\MJHPK\E12093.FUE
%HOMEPATH%\MJHPK\M50036.FPI
%HOMEPATH%\MJHPK\S94890.OLB
%HOMEPATH%\MJHPK\X34599.EGQ
%HOMEPATH%\MJHPK\B27201.LTE
%HOMEPATH%\MJHPK\1906.BNJ
%HOMEPATH%\MJHPK\90461.DHE
%HOMEPATH%\MJHPK\L69106.UNH
%HOMEPATH%\MJHPK\U87118.HMU
%HOMEPATH%\MJHPK\G89649.BRE
%HOMEPATH%\MJHPK\88821.QXC
%HOMEPATH%\MJHPK\R75992.NFV
%HOMEPATH%\MJHPK\21890.AHH
%HOMEPATH%\MJHPK\Z68399.VRJ
%HOMEPATH%\MJHPK\H24120.QPI
%HOMEPATH%\MJHPK\X7879.TUE
%HOMEPATH%\MJHPK\52084.YLE
%HOMEPATH%\MJHPK\11687.DUL
%HOMEPATH%\MJHPK\J23761.IHA
%HOMEPATH%\MJHPK\92071.XYT
%HOMEPATH%\MJHPK\90471.XZB
%HOMEPATH%\MJHPK\23202.OPR
%HOMEPATH%\MJHPK\K60575.HDB
%HOMEPATH%\MJHPK\N30926.CWK
%HOMEPATH%\MJHPK\B28213.HDY
%HOMEPATH%\MJHPK\66394.ECL
%HOMEPATH%\MJHPK\U33827.PVE
%HOMEPATH%\MJHPK\E34035.DDE
%HOMEPATH%\MJHPK\41230.HLJ
%HOMEPATH%\MJHPK\5185.ZKC
%HOMEPATH%\MJHPK\Z3401.NZH
%HOMEPATH%\MJHPK\C57423.HYI
%HOMEPATH%\MJHPK\P51917.BMH
%HOMEPATH%\MJHPK\2129.MHN
%HOMEPATH%\MJHPK\97470.ECZ
%HOMEPATH%\MJHPK\74672.TDD
%HOMEPATH%\MJHPK\89268.WDR
%HOMEPATH%\MJHPK\P32417.QCX
%HOMEPATH%\MJHPK\J80335.YXP
%HOMEPATH%\MJHPK\C90733.FQS
%HOMEPATH%\MJHPK\92473.RDL
%HOMEPATH%\MJHPK\L78817.QAB
%HOMEPATH%\MJHPK\24342.RYM
%HOMEPATH%\MJHPK\11690.QRJ
%HOMEPATH%\MJHPK\Y24715.WHB
%HOMEPATH%\MJHPK\12558.HMV
%HOMEPATH%\MJHPK\E84960.ULO
%HOMEPATH%\MJHPK\59378.AHH
%HOMEPATH%\MJHPK\62802.VZN

Присваивает атрибут 'скрытый' для следующих файлов:

%HOMEPATH%\MJHPK\25244.WBU
%HOMEPATH%\MJHPK\53815.QUZ
%HOMEPATH%\MJHPK\81847.VOR
%HOMEPATH%\MJHPK\I1894.BDU
%HOMEPATH%\MJHPK\O53942.UUN
%HOMEPATH%\MJHPK\R25049.UIY
%HOMEPATH%\MJHPK\Y60358.OGY
%HOMEPATH%\MJHPK\R71154.IEO
%HOMEPATH%\MJHPK\J62627.TON
%HOMEPATH%\MJHPK\U33206.MWX
%HOMEPATH%\MJHPK\41247.CSU
%HOMEPATH%\MJHPK\K77419.FCC
%HOMEPATH%\MJHPK\32928.MVC
%HOMEPATH%\MJHPK\X77554.LRQ
%HOMEPATH%\MJHPK\O84991.TEP
%HOMEPATH%\MJHPK\X48295.FHK
%HOMEPATH%\MJHPK\Z68044.OHY
%HOMEPATH%\MJHPK\T64390.XRW
%HOMEPATH%\MJHPK\N96321.LUJ
%HOMEPATH%\MJHPK\36575.HXO
%HOMEPATH%\MJHPK\22249.WOR
%HOMEPATH%\MJHPK\H28147.REF
%HOMEPATH%\MJHPK\Q40182.SSR
%HOMEPATH%\MJHPK\21553.LFW
%HOMEPATH%\MJHPK\11653.AFX
%HOMEPATH%\MJHPK\50168.CLV
%HOMEPATH%\MJHPK\57493.MED
%HOMEPATH%\MJHPK\45547.AAV
%HOMEPATH%\MJHPK\11073.TPP
%HOMEPATH%\MJHPK\V1697.YJW
%HOMEPATH%\MJHPK\Y63139.UXA
%HOMEPATH%\MJHPK\P86500.IPM
%HOMEPATH%\MJHPK\L64441.THY
%HOMEPATH%\MJHPK\18946.FOY
%HOMEPATH%\MJHPK\G78176.NAV
%HOMEPATH%\MJHPK\10430.KXP
%HOMEPATH%\MJHPK\55032.RHI
%HOMEPATH%\MJHPK\M49060.NCL
%HOMEPATH%\MJHPK\90754.FRA
%HOMEPATH%\MJHPK\97890.VHC
%HOMEPATH%\MJHPK\T91521.QFA
%HOMEPATH%\MJHPK\P54347.CAC
%HOMEPATH%\MJHPK\16537.AQE
%HOMEPATH%\MJHPK\97376.FQU
%HOMEPATH%\MJHPK\76435.FNC
%HOMEPATH%\MJHPK\15549.YLG
%HOMEPATH%\MJHPK\85829.XLL
%HOMEPATH%\MJHPK\16340.YIC
%HOMEPATH%\MJHPK\31504.YXG
%HOMEPATH%\MJHPK\D45626.DTU
%HOMEPATH%\MJHPK\1715.HQB
%HOMEPATH%\MJHPK\10185.DJV
%HOMEPATH%\MJHPK\73082.YXW
%HOMEPATH%\MJHPK\81047.GFF
%HOMEPATH%\MJHPK\58712.QCV
%HOMEPATH%\MJHPK\I13308.RHU
%HOMEPATH%\MJHPK\10360.TNW
%HOMEPATH%\MJHPK\L66396.EBQ
%HOMEPATH%\MJHPK\X48088.OWC
%HOMEPATH%\MJHPK\15936.JUK
%HOMEPATH%\MJHPK\Z52260.HEU
%HOMEPATH%\MJHPK\15704.OZI
%HOMEPATH%\MJHPK\U98200.FTD
%HOMEPATH%\MJHPK\79450.XKQ
%HOMEPATH%\MJHPK\25983.AHT
%HOMEPATH%\MJHPK\U30734.FAO
%HOMEPATH%\MJHPK\26362.VHP
%HOMEPATH%\MJHPK\B45629.XDM
%HOMEPATH%\MJHPK\16521.FXN
%HOMEPATH%\MJHPK\J64627.ZDJ
%HOMEPATH%\MJHPK\B26021.IVU
%HOMEPATH%\MJHPK\20608.YDQ
%HOMEPATH%\MJHPK\38759.RFL
%HOMEPATH%\MJHPK\W94204.TLJ
%HOMEPATH%\MJHPK\2156.QKH
%HOMEPATH%\MJHPK\R3176.NSE
%HOMEPATH%\MJHPK\24790.TTT
%HOMEPATH%\MJHPK\33096.GQO
%HOMEPATH%\MJHPK\U64063.UTQ
%HOMEPATH%\MJHPK\B4222.ZZJ
%HOMEPATH%\MJHPK\B78327.DGR
%HOMEPATH%\MJHPK\Y3101.SZB
%HOMEPATH%\MJHPK\J17674.WAU
%HOMEPATH%\MJHPK\R11494.MSS
%HOMEPATH%\MJHPK\59197.PVS
%HOMEPATH%\MJHPK\95436.LVH
%HOMEPATH%\MJHPK\O15934.XMN
%HOMEPATH%\MJHPK\K5991.EFC
%HOMEPATH%\MJHPK\Z8992.NOV
%HOMEPATH%\MJHPK\14826.EON
%HOMEPATH%\MJHPK\6212.XEL
%HOMEPATH%\MJHPK\87230.CVE
%HOMEPATH%\MJHPK\79524.RDM
%HOMEPATH%\MJHPK\I36558.VIQ
%HOMEPATH%\MJHPK\C66521.YDN
%HOMEPATH%\MJHPK\86344.AQT
%HOMEPATH%\MJHPK\14560.WQP
%HOMEPATH%\MJHPK\J67181.DBV
%HOMEPATH%\MJHPK\V17239.WXC
%HOMEPATH%\MJHPK\A84851.FIR
%HOMEPATH%\MJHPK\K88687.QBG
%HOMEPATH%\MJHPK\K50334.EAC
%HOMEPATH%\MJHPK\Z14098.NRJ
%HOMEPATH%\MJHPK\B64387.WMA
%HOMEPATH%\MJHPK\R48271.WJM
%HOMEPATH%\MJHPK\3614.HTV
%HOMEPATH%\MJHPK\L27648.MZU
%HOMEPATH%\MJHPK\45350.HFL
%HOMEPATH%\MJHPK\51794.RYL
%HOMEPATH%\MJHPK\V33083.SWN
%HOMEPATH%\MJHPK\26783.EIW
%HOMEPATH%\MJHPK\15142.TGJ
%HOMEPATH%\MJHPK\C9243.KJW
%HOMEPATH%\MJHPK\R64296.WCX
%HOMEPATH%\MJHPK\F68326.XST
%HOMEPATH%\MJHPK\48846.FRO
%HOMEPATH%\MJHPK\Q22010.ZDM
%HOMEPATH%\MJHPK\95715.ECU
%HOMEPATH%\MJHPK\11024.PRT
%HOMEPATH%\MJHPK\1339.KBI
%HOMEPATH%\MJHPK\69654.HZG
%HOMEPATH%\MJHPK\K28657.VDL
%HOMEPATH%\MJHPK\3782.IJM
%HOMEPATH%\MJHPK\57127.FDX
%HOMEPATH%\MJHPK\46123.XEM
%HOMEPATH%\MJHPK\85033.WQG
%HOMEPATH%\MJHPK\C57714.PXM
%HOMEPATH%\MJHPK\14909.TPJ
%HOMEPATH%\MJHPK\I60903.YFA
%HOMEPATH%\MJHPK\50339.BBT
%HOMEPATH%\MJHPK\R34957.HQG
%HOMEPATH%\MJHPK\31569.QRZ
%HOMEPATH%\MJHPK\61342.PCK
%HOMEPATH%\MJHPK\47382.TIR
%HOMEPATH%\MJHPK\D25500.BNB
%HOMEPATH%\MJHPK\U8481.NDM
%HOMEPATH%\MJHPK\N58179.ZBE
%HOMEPATH%\MJHPK\4328.OFP
%HOMEPATH%\MJHPK\65629.TKV
%HOMEPATH%\MJHPK\H42886.IVL
%HOMEPATH%\MJHPK\M34277.ZYS
%HOMEPATH%\MJHPK\S7299.YSW
%HOMEPATH%\MJHPK\F44187.BPM
%HOMEPATH%\MJHPK\P49860.SJC
%HOMEPATH%\MJHPK\66014.TCK
%HOMEPATH%\MJHPK\T39263.XYL
%HOMEPATH%\MJHPK\16912.JEL
%HOMEPATH%\MJHPK\99680.UKE
%HOMEPATH%\MJHPK\S49015.TOO
%HOMEPATH%\MJHPK\G62271.KOZ
%HOMEPATH%\MJHPK\9464.QNN
%HOMEPATH%\MJHPK\S94010.MKE
%HOMEPATH%\MJHPK\15869.HUZ
%HOMEPATH%\MJHPK\F98344.HDS
%HOMEPATH%\MJHPK\16402.YTB
%HOMEPATH%\MJHPK\Y23955.QHS
%HOMEPATH%\MJHPK\26108.SMR
%HOMEPATH%\MJHPK\4548.XXN
%HOMEPATH%\MJHPK\99057.IYR
%HOMEPATH%\MJHPK\56472.ALN
%HOMEPATH%\MJHPK\31629.ZNP
%HOMEPATH%\MJHPK\O95968.FXB
%HOMEPATH%\MJHPK\M62365.KVK
%HOMEPATH%\MJHPK\51442.BWZ
%HOMEPATH%\MJHPK\R33776.VZJ
%HOMEPATH%\MJHPK\83046.GFL
%HOMEPATH%\MJHPK\Z65621.SDN
%HOMEPATH%\MJHPK\Q40689.YPJ
%HOMEPATH%\MJHPK\94011.PDB
%HOMEPATH%\MJHPK\63913.GWB
%HOMEPATH%\MJHPK\68729.CKR
%HOMEPATH%\MJHPK\97829.GNN
%HOMEPATH%\MJHPK\49987.CSG
%HOMEPATH%\MJHPK\G69584.ZPM
%HOMEPATH%\MJHPK\35417.WVY
%HOMEPATH%\MJHPK\E42615.TQB
%HOMEPATH%\MJHPK\N52151.SUJ
%HOMEPATH%\MJHPK\A69790.PZL
%HOMEPATH%\MJHPK\R65534.NYU
%HOMEPATH%\MJHPK\M78286.RVZ
%HOMEPATH%\MJHPK\61132.BJC
%HOMEPATH%\MJHPK\S74883.PLU
%HOMEPATH%\MJHPK\33841.MFW
%HOMEPATH%\MJHPK\D79551.BUB
%HOMEPATH%\MJHPK\Y43622.AUO
%HOMEPATH%\MJHPK\I88141.SFU
%HOMEPATH%\MJHPK\X48428.PNM
%HOMEPATH%\MJHPK\58550.QLQ
%HOMEPATH%\MJHPK\V17674.CFI
%HOMEPATH%\MJHPK\P71318.EBS
%HOMEPATH%\MJHPK\71307.WKY
%HOMEPATH%\MJHPK\22031.JTT
%HOMEPATH%\MJHPK\31796.HRE
%HOMEPATH%\MJHPK\62165.GVT
%HOMEPATH%\MJHPK\L9044.JIF
%HOMEPATH%\MJHPK\92467.QTN
%HOMEPATH%\MJHPK\17998.RRV
%HOMEPATH%\MJHPK\A66296.MPO
%HOMEPATH%\MJHPK\4634.DAA
%HOMEPATH%\MJHPK\Y18079.LDS
%HOMEPATH%\MJHPK\22305.JTG
%HOMEPATH%\MJHPK\76796.FAZ
%HOMEPATH%\MJHPK\67052.CDY
%HOMEPATH%\MJHPK\O78023.EBD
%HOMEPATH%\MJHPK\R9410.QFL
%HOMEPATH%\MJHPK\B48676.MRL
%HOMEPATH%\MJHPK\81456.HOO
%HOMEPATH%\MJHPK\50940.AJH
%HOMEPATH%\MJHPK\M59537.COE
%HOMEPATH%\MJHPK\H85430.QHL
%HOMEPATH%\MJHPK\D56584.CLW
%HOMEPATH%\MJHPK\I60348.BXO
%HOMEPATH%\MJHPK\Q33204.LKX
%HOMEPATH%\MJHPK\55784.IKU
%HOMEPATH%\MJHPK\F41167.FQJ
%HOMEPATH%\MJHPK\54842.YQF
%HOMEPATH%\MJHPK\B97305.FMP
%HOMEPATH%\MJHPK\L81501.DAR
%HOMEPATH%\MJHPK\Z25295.BCJ
%HOMEPATH%\MJHPK\50516.ULI
%HOMEPATH%\MJHPK\R99777.KTF
%HOMEPATH%\MJHPK\J78823.HVX
%HOMEPATH%\MJHPK\Z9859.TCA
%HOMEPATH%\MJHPK\J64241.VCW
%HOMEPATH%\MJHPK\68413.ODK
%HOMEPATH%\MJHPK\77723.RBI
%HOMEPATH%\MJHPK\76396.ADI
%HOMEPATH%\MJHPK\38956.ORY
%HOMEPATH%\MJHPK\15558.KQV
%HOMEPATH%\MJHPK\Z88940.MPD
%HOMEPATH%\MJHPK\80231.XAP
%HOMEPATH%\MJHPK\71991.ORB
%HOMEPATH%\MJHPK\O42483.FMM
%HOMEPATH%\MJHPK\W69131.LHR
%HOMEPATH%\MJHPK\29567.IDZ
%HOMEPATH%\MJHPK\16412.IFR
%HOMEPATH%\MJHPK\G7656.NYF
%HOMEPATH%\MJHPK\27381.KXH
%HOMEPATH%\MJHPK\59113.HZU
%HOMEPATH%\MJHPK\96032.CXU
%HOMEPATH%\MJHPK\10112.NPM
%HOMEPATH%\MJHPK\P80998.DIO
%HOMEPATH%\MJHPK\98065.YIX
%HOMEPATH%\MJHPK\35479.WXS
%HOMEPATH%\MJHPK\E39922.LKE
%HOMEPATH%\MJHPK\52953.MYO
%HOMEPATH%\MJHPK\42281.UAU
%HOMEPATH%\MJHPK\Q53021.AEX
%HOMEPATH%\MJHPK\J96613.VMA
%HOMEPATH%\MJHPK\9164.TPD
%HOMEPATH%\MJHPK\T76202.DWE
%HOMEPATH%\MJHPK\G73747.CXQ
%HOMEPATH%\MJHPK\87890.BXP
%HOMEPATH%\MJHPK\81457.UAM
%HOMEPATH%\MJHPK\55634.GZB
%HOMEPATH%\MJHPK\R60280.KJE
%HOMEPATH%\MJHPK\L34989.BXR
%HOMEPATH%\MJHPK\13799.YZT
%HOMEPATH%\MJHPK\22448.RUK
%HOMEPATH%\MJHPK\13145.SSH
%HOMEPATH%\MJHPK\I24597.YVK
%HOMEPATH%\MJHPK\T4391.ZSF
%HOMEPATH%\MJHPK\Z76037.EHV
%HOMEPATH%\MJHPK\7840.OZV
%HOMEPATH%\MJHPK\49965.GVC
%HOMEPATH%\MJHPK\C51959.GGS
%HOMEPATH%\MJHPK\23667.IFT
%HOMEPATH%\MJHPK\Q56442.KTW
%HOMEPATH%\MJHPK\Q43937.TNL
%HOMEPATH%\MJHPK\34352.JHV
%HOMEPATH%\MJHPK\87210.EEE
%HOMEPATH%\MJHPK\E55072.IZU
%HOMEPATH%\MJHPK\83598.MIW
%HOMEPATH%\MJHPK\Z78342.VFW
%HOMEPATH%\MJHPK\X75621.ZMY
%HOMEPATH%\MJHPK\Z91241.ESA
%HOMEPATH%\MJHPK\K46077.QMF
%HOMEPATH%\MJHPK\47787.CXY
%HOMEPATH%\MJHPK\87108.HFL
%HOMEPATH%\MJHPK\P82419.GXO
%HOMEPATH%\MJHPK\90406.ZDC
%HOMEPATH%\MJHPK\47600.SES
%HOMEPATH%\MJHPK\T21119.KPK
%HOMEPATH%\MJHPK\P11734.GVD
%HOMEPATH%\MJHPK\92387.YCQ
%HOMEPATH%\MJHPK\B44313.VON
%HOMEPATH%\MJHPK\30457.FOX
%HOMEPATH%\MJHPK\62384.PCZ
%HOMEPATH%\MJHPK\26204.IGH
%HOMEPATH%\MJHPK\23089.FHP
%HOMEPATH%\MJHPK\U56127.JQX
%HOMEPATH%\MJHPK\69502.EFK
%HOMEPATH%\MJHPK\87732.HOL
%HOMEPATH%\MJHPK\47379.XAV
%HOMEPATH%\MJHPK\23068.THX
%HOMEPATH%\MJHPK\4133.LYH
%HOMEPATH%\MJHPK\Q12152.GUA
%HOMEPATH%\MJHPK\J58299.ZXN
%HOMEPATH%\MJHPK\60773.PRX
%HOMEPATH%\MJHPK\E81468.WWO
%HOMEPATH%\MJHPK\64569.XQD
%HOMEPATH%\MJHPK\33071.WQN
%HOMEPATH%\MJHPK\O48866.VGD
%HOMEPATH%\MJHPK\89511.LKP
%HOMEPATH%\MJHPK\O14287.EWF
%HOMEPATH%\MJHPK\68913.FTO
%HOMEPATH%\MJHPK\76074.RDM
%HOMEPATH%\MJHPK\85997.IJO
%HOMEPATH%\MJHPK\V79541.TYM
%HOMEPATH%\MJHPK\82584.DEG
%HOMEPATH%\MJHPK\Y96450.IQA
%HOMEPATH%\MJHPK\58033.POH
%HOMEPATH%\MJHPK\88421.RVB
%HOMEPATH%\MJHPK\33689.AYT
%HOMEPATH%\MJHPK\88226.DPY
%HOMEPATH%\MJHPK\2200.RRB
%HOMEPATH%\MJHPK\38658.CYD
%HOMEPATH%\MJHPK\86761.DXL
%HOMEPATH%\MJHPK\32506.KCJ
%HOMEPATH%\MJHPK\Y1010.WFT
%HOMEPATH%\MJHPK\X42801.CIJ
%HOMEPATH%\MJHPK\12682.VNA
%HOMEPATH%\MJHPK\17468.BZR
%HOMEPATH%\MJHPK\R30966.JMM
%HOMEPATH%\MJHPK\30605.QCN
%HOMEPATH%\MJHPK\93482.PLB
%HOMEPATH%\MJHPK\U70129.VAG
%HOMEPATH%\MJHPK\68557.LBK
%HOMEPATH%\MJHPK\H35091.SZC
%HOMEPATH%\MJHPK\84903.TCY
%HOMEPATH%\MJHPK\40794.GER
%HOMEPATH%\MJHPK\R65441.IBJ
%HOMEPATH%\MJHPK\E32734.PKJ
%HOMEPATH%\MJHPK\T16256.BEI
%HOMEPATH%\MJHPK\95836.LCP
%HOMEPATH%\MJHPK\Q38539.QRR
%HOMEPATH%\MJHPK\J68350.IVK
%HOMEPATH%\MJHPK\R45547.SJK
%HOMEPATH%\MJHPK\52911.OJI
%HOMEPATH%\MJHPK\84374.CFC
%HOMEPATH%\MJHPK\X56248.KSU
%HOMEPATH%\MJHPK\8527.UVD
%HOMEPATH%\MJHPK\D88112.OVJ
%HOMEPATH%\MJHPK\E32875.NQN
%HOMEPATH%\MJHPK\7609.RBB
%HOMEPATH%\MJHPK\N93214.EPV
%HOMEPATH%\MJHPK\15722.TUM
%HOMEPATH%\MJHPK\J14227.STZ
%HOMEPATH%\MJHPK\N68039.UOA
%HOMEPATH%\MJHPK\35023.QYM
%HOMEPATH%\MJHPK\27416.LUD
%HOMEPATH%\MJHPK\67311.ZCZ
%HOMEPATH%\MJHPK\Q59727.QNJ
%HOMEPATH%\MJHPK\25968.GDP
%HOMEPATH%\MJHPK\64681.NKK
%HOMEPATH%\MJHPK\76883.LKN
%HOMEPATH%\MJHPK\setup.vbs
%HOMEPATH%\MJHPK\settings.ini
%HOMEPATH%\MJHPK\S21863.QAT
%HOMEPATH%\MJHPK\91313.WXV
%HOMEPATH%\MJHPK\519233.dat
%HOMEPATH%\MJHPK\937756.VNX
%HOMEPATH%\MJHPK\935754.exe
%HOMEPATH%\MJHPK\83373.dat
%HOMEPATH%\MJHPK\51101.XEO
%HOMEPATH%\MJHPK\G64371.NQM
%HOMEPATH%\MJHPK\R37934.YLC
%HOMEPATH%\MJHPK\R89806.SPM
%HOMEPATH%\MJHPK\8093.YQG
%HOMEPATH%\MJHPK\61786.SXI
%HOMEPATH%\MJHPK\13096.EHA
%HOMEPATH%\MJHPK\S32937.GKD
%HOMEPATH%\MJHPK\L59434.VVC
%HOMEPATH%\MJHPK\76100.IEG
%HOMEPATH%\MJHPK\K72923.ZQO
%HOMEPATH%\MJHPK\Q47976.RYD
%HOMEPATH%\MJHPK\83551.VAW
%HOMEPATH%\MJHPK\14474.CXA
%HOMEPATH%\MJHPK\A90647.ERQ
%HOMEPATH%\MJHPK\77677.MUJ
%HOMEPATH%\MJHPK\X65350.JCT
%HOMEPATH%\MJHPK\W4443.NDV
%HOMEPATH%\MJHPK\32220.FLI
%HOMEPATH%\MJHPK\M65517.WTA
%HOMEPATH%\MJHPK\24336.NEQ
%HOMEPATH%\MJHPK\97933.FDN
%HOMEPATH%\MJHPK\25968.OBU
%HOMEPATH%\MJHPK\66117.FDI
%HOMEPATH%\MJHPK\V46008.NGQ
%HOMEPATH%\MJHPK\30417.ULR
%HOMEPATH%\MJHPK\38124.JPB
%HOMEPATH%\MJHPK\A43861.VMQ
%HOMEPATH%\MJHPK\19958.IAO
%HOMEPATH%\MJHPK\97901.RHT
%HOMEPATH%\MJHPK\52258.KFT
%HOMEPATH%\MJHPK\M66196.GOZ
%HOMEPATH%\MJHPK\W62661.AQK
%HOMEPATH%\MJHPK\1770.XVJ
%HOMEPATH%\MJHPK\59762.CUX
%HOMEPATH%\MJHPK\Y43027.TAZ
%HOMEPATH%\MJHPK\O13679.GHL
%HOMEPATH%\MJHPK\E49277.EZB
%HOMEPATH%\MJHPK\3270.WDW
%HOMEPATH%\MJHPK\U93027.TDA
%HOMEPATH%\MJHPK\55898.TMQ
%HOMEPATH%\MJHPK\X93939.CAL
%HOMEPATH%\MJHPK\64503.MYH
%HOMEPATH%\MJHPK\36755.BEW
%HOMEPATH%\MJHPK\G22688.IXY
%HOMEPATH%\MJHPK\Z64028.ONP
%HOMEPATH%\MJHPK\G24740.JXM
%HOMEPATH%\MJHPK\77383.OIT
%HOMEPATH%\MJHPK\95626.DFC
%HOMEPATH%\MJHPK\B59874.GHO
%HOMEPATH%\MJHPK\54766.HIB
%HOMEPATH%\MJHPK\11240.IDC
%HOMEPATH%\MJHPK\59703.CFZ
%HOMEPATH%\MJHPK\59118.FSG
%HOMEPATH%\MJHPK\G64490.QIV
%HOMEPATH%\MJHPK\U57412.AWA
%HOMEPATH%\MJHPK\27767.SAK
%HOMEPATH%\MJHPK\18246.KAE
%HOMEPATH%\MJHPK\94618.FQB
%HOMEPATH%\MJHPK\M85906.MSZ
%HOMEPATH%\MJHPK\2224.CRM
%HOMEPATH%\MJHPK\22820.WKP
%HOMEPATH%\MJHPK\P66557.CYF
%HOMEPATH%\MJHPK\B49513.LON
%HOMEPATH%\MJHPK\54576.OHR
%HOMEPATH%\MJHPK\92825.RPQ
%HOMEPATH%\MJHPK\V27205.EJB
%HOMEPATH%\MJHPK\6119.OAJ
%HOMEPATH%\MJHPK\63558.LLR
%HOMEPATH%\MJHPK\B49991.BPE
%HOMEPATH%\MJHPK\A61103.SDO
%HOMEPATH%\MJHPK\7721.YYJ
%HOMEPATH%\MJHPK\8551.HCX
%HOMEPATH%\MJHPK\24614.PRV
%HOMEPATH%\MJHPK\W72225.GMV
%HOMEPATH%\MJHPK\P44828.YTQ
%HOMEPATH%\MJHPK\P14904.NLN
%HOMEPATH%\MJHPK\64994.QPR
%HOMEPATH%\MJHPK\91011.MKP
%HOMEPATH%\MJHPK\L1979.GVN
%HOMEPATH%\MJHPK\20770.JOK
%HOMEPATH%\MJHPK\29504.OYS
%HOMEPATH%\MJHPK\G70630.DPR
%HOMEPATH%\MJHPK\Q93885.KIA
%HOMEPATH%\MJHPK\2888.GJO
%HOMEPATH%\MJHPK\57473.XRR
%HOMEPATH%\MJHPK\K44409.UVE
%HOMEPATH%\MJHPK\U15250.VZG
%HOMEPATH%\MJHPK\C62741.PWJ
%HOMEPATH%\MJHPK\80391.OCO
%HOMEPATH%\MJHPK\R23263.GYS
%HOMEPATH%\MJHPK\N40404.PGG
%HOMEPATH%\MJHPK\X36947.VWU
%HOMEPATH%\MJHPK\86784.AGK
%HOMEPATH%\MJHPK\V16037.HPK
%HOMEPATH%\MJHPK\25634.UND
%HOMEPATH%\MJHPK\K67053.MEH
%HOMEPATH%\MJHPK\70304.IJM
%HOMEPATH%\MJHPK\64546.OKH
%HOMEPATH%\MJHPK\E72559.AVG
%HOMEPATH%\MJHPK\G44915.VMN
%HOMEPATH%\MJHPK\Y65722.LYZ
%HOMEPATH%\MJHPK\W6675.MQM
%HOMEPATH%\MJHPK\C31865.JKX
%HOMEPATH%\MJHPK\3522.DMX
%HOMEPATH%\MJHPK\39275.XAX
%HOMEPATH%\MJHPK\G82150.LES
%HOMEPATH%\MJHPK\L19308.OVZ
%HOMEPATH%\MJHPK\W31861.VAC
%HOMEPATH%\MJHPK\V77936.HSZ
%HOMEPATH%\MJHPK\U33827.PVE
%HOMEPATH%\MJHPK\79213.RVZ
%HOMEPATH%\MJHPK\W45727.GOD
%HOMEPATH%\MJHPK\R59413.IYU
%HOMEPATH%\MJHPK\Q44413.INJ
%HOMEPATH%\MJHPK\L2693.JQK
%HOMEPATH%\MJHPK\91700.ZHF
%HOMEPATH%\MJHPK\N5381.PZT
%HOMEPATH%\MJHPK\84166.KSN
%HOMEPATH%\MJHPK\92460.UKT
%HOMEPATH%\MJHPK\A81463.EFC
%HOMEPATH%\MJHPK\22125.DXP
%HOMEPATH%\MJHPK\L94361.TFM
%HOMEPATH%\MJHPK\Q40083.OUX
%HOMEPATH%\MJHPK\X37395.PMD
%HOMEPATH%\MJHPK\40618.KPT
%HOMEPATH%\MJHPK\58896.LEV
%HOMEPATH%\MJHPK\G89649.BRE
%HOMEPATH%\MJHPK\7026.PBU
%HOMEPATH%\MJHPK\F21527.CLQ
%HOMEPATH%\MJHPK\E12093.FUE
%HOMEPATH%\MJHPK\M50036.FPI
%HOMEPATH%\MJHPK\S94890.OLB
%HOMEPATH%\MJHPK\X34599.EGQ
%HOMEPATH%\MJHPK\B27201.LTE
%HOMEPATH%\MJHPK\1906.BNJ
%HOMEPATH%\MJHPK\U87118.HMU
%HOMEPATH%\MJHPK\Z68399.VRJ
%HOMEPATH%\MJHPK\88821.QXC
%HOMEPATH%\MJHPK\L69106.UNH
%HOMEPATH%\MJHPK\21890.AHH
%HOMEPATH%\MJHPK\90461.DHE
%HOMEPATH%\MJHPK\H24120.QPI
%HOMEPATH%\MJHPK\R75992.NFV
%HOMEPATH%\MJHPK\9419.KTF
%HOMEPATH%\MJHPK\X7879.TUE
%HOMEPATH%\MJHPK\52084.YLE
%HOMEPATH%\MJHPK\11687.DUL
%HOMEPATH%\MJHPK\J23761.IHA
%HOMEPATH%\MJHPK\92071.XYT
%HOMEPATH%\MJHPK\90471.XZB
%HOMEPATH%\MJHPK\23202.OPR
%HOMEPATH%\MJHPK\K60575.HDB
%HOMEPATH%\MJHPK\66394.ECL
%HOMEPATH%\MJHPK\Z3401.NZH
%HOMEPATH%\MJHPK\E34035.DDE
%HOMEPATH%\MJHPK\B28213.HDY
%HOMEPATH%\MJHPK\5185.ZKC
%HOMEPATH%\MJHPK\N30926.CWK
%HOMEPATH%\MJHPK\C57423.HYI
%HOMEPATH%\MJHPK\41230.HLJ
%HOMEPATH%\MJHPK\11690.QRJ
%HOMEPATH%\MJHPK\P51917.BMH
%HOMEPATH%\MJHPK\2129.MHN
%HOMEPATH%\MJHPK\97470.ECZ
%HOMEPATH%\MJHPK\74672.TDD
%HOMEPATH%\MJHPK\89268.WDR
%HOMEPATH%\MJHPK\P32417.QCX
%HOMEPATH%\MJHPK\J80335.YXP
%HOMEPATH%\MJHPK\C90733.FQS
%HOMEPATH%\MJHPK\24342.RYM
%HOMEPATH%\MJHPK\59378.AHH
%HOMEPATH%\MJHPK\Y24715.WHB
%HOMEPATH%\MJHPK\L78817.QAB
%HOMEPATH%\MJHPK\E84960.ULO
%HOMEPATH%\MJHPK\92473.RDL
%HOMEPATH%\MJHPK\62802.VZN
%HOMEPATH%\MJHPK\12558.HMV

Удаляет следующие файлы:

%HOMEPATH%\MJHPK\QJHWTGXU.dat

Сетевая активность:

Подключается к:

'fp###eedom.net':80
'20#.#6.232.182':80

TCP:

Запросы HTTP POST:

fp###eedom.net/order.php

UDP:

DNS ASK fp###eedom.net
DNS ASK windowsupdate.microsoft.com

Другое:

Ищет следующие окна:

ClassName: 'SmartSniff' WindowName: '(null)'
ClassName: 'TCPViewClass' WindowName: '(null)'
ClassName: 'Indicator' WindowName: '(null)'
ClassName: 'EDIT' WindowName: '(null)'
ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'tttttttt' WindowName: 'mmmmmmmm'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней