Trojan.DownLoader10.21794

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ODBC32 Policies' = '%APPDATA%\EznJy\ltc.exe'

Вредоносные функции:

Создает и запускает на исполнение:

'%APPDATA%\EznJy\rundll32.exe' -o http://mi##.#ool-x.eu:8337 -O solid870.1:solidjenny1
'%HOMEPATH%\TUPBM\141932.exe' YPVUBMXZ.dat
'%HOMEPATH%\TUPBM\141932.exe' 763009.WCJ
'%APPDATA%\EznJy\rundll32.exe' (загружен из сети Интернет)

Запускает на исполнение:

'%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
'<SYSTEM32>\wscript.exe' "%HOMEPATH%\TUPBM\setup.vbs" 5023

Внедряет код в

следующие системные процессы:

%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

Изменения в файловой системе:

Создает следующие файлы:

%HOMEPATH%\TUPBM\Y21111.ITZ
%HOMEPATH%\TUPBM\W12049.LZD
%HOMEPATH%\TUPBM\82990.YWM
%HOMEPATH%\TUPBM\K91435.MTU
%HOMEPATH%\TUPBM\O78535.OPF
%HOMEPATH%\TUPBM\64195.TSL
%HOMEPATH%\TUPBM\11333.SKU
%HOMEPATH%\TUPBM\34529.KCN
%HOMEPATH%\TUPBM\J96606.LKX
%HOMEPATH%\TUPBM\P67642.GXT
%HOMEPATH%\TUPBM\20029.UNM
%HOMEPATH%\TUPBM\W99814.YIY
%HOMEPATH%\TUPBM\W38974.XFJ
%HOMEPATH%\TUPBM\K49871.LXE
%HOMEPATH%\TUPBM\42767.JBG
%HOMEPATH%\TUPBM\S22001.PDL
%HOMEPATH%\TUPBM\59147.LYI
%HOMEPATH%\TUPBM\H29050.EHG
%HOMEPATH%\TUPBM\Q83973.UOG
%HOMEPATH%\TUPBM\49026.EHA
%HOMEPATH%\TUPBM\52930.GLB
%HOMEPATH%\TUPBM\T26382.JWS
%HOMEPATH%\TUPBM\T79322.KXQ
%HOMEPATH%\TUPBM\O54396.FQZ
%HOMEPATH%\TUPBM\Q99428.PNC
%HOMEPATH%\TUPBM\Z51672.ECN
%HOMEPATH%\TUPBM\C52586.DDZ
%HOMEPATH%\TUPBM\70346.ZML
%HOMEPATH%\TUPBM\59702.HTK
%HOMEPATH%\TUPBM\5342.YKC
%HOMEPATH%\TUPBM\97451.QIB
%HOMEPATH%\TUPBM\Z21580.JDW
%HOMEPATH%\TUPBM\14893.EET
%HOMEPATH%\TUPBM\9825.HHX
%HOMEPATH%\TUPBM\N51009.JTW
%HOMEPATH%\TUPBM\71150.JPJ
%HOMEPATH%\TUPBM\2295.VOS
%HOMEPATH%\TUPBM\40661.VAP
%HOMEPATH%\TUPBM\H1591.JDT
%HOMEPATH%\TUPBM\U38529.UMQ
%HOMEPATH%\TUPBM\G28177.NET
%HOMEPATH%\TUPBM\Z80375.RDP
%HOMEPATH%\TUPBM\67394.QTE
%HOMEPATH%\TUPBM\10433.KHD
%HOMEPATH%\TUPBM\Y78946.LYF
%HOMEPATH%\TUPBM\X14923.JBM
%HOMEPATH%\TUPBM\96809.DQU
%HOMEPATH%\TUPBM\T43983.RSB
%HOMEPATH%\TUPBM\27656.RAT
%HOMEPATH%\TUPBM\T28912.QJU
%HOMEPATH%\TUPBM\76811.WLX
%HOMEPATH%\TUPBM\93908.CZM
%HOMEPATH%\TUPBM\E14904.QKU
%HOMEPATH%\TUPBM\61449.ZPS
%HOMEPATH%\TUPBM\66158.HDV
%HOMEPATH%\TUPBM\Q7243.LRP
%HOMEPATH%\TUPBM\55867.MKO
%HOMEPATH%\TUPBM\34033.DRP
%HOMEPATH%\TUPBM\96844.QSP
%HOMEPATH%\TUPBM\70859.MGI
%HOMEPATH%\TUPBM\F68918.BHX
%HOMEPATH%\TUPBM\52231.GBG
%HOMEPATH%\TUPBM\30414.GHP
%HOMEPATH%\TUPBM\99563.TMY
%HOMEPATH%\TUPBM\L52918.HGX
%HOMEPATH%\TUPBM\Q68020.OYV
%HOMEPATH%\TUPBM\Q40202.QGM
%HOMEPATH%\TUPBM\B79215.VRL
%HOMEPATH%\TUPBM\1473.PWL
%HOMEPATH%\TUPBM\73913.WIO
%HOMEPATH%\TUPBM\9931.XBH
%HOMEPATH%\TUPBM\5407.UWV
%HOMEPATH%\TUPBM\57664.SVH
%HOMEPATH%\TUPBM\Y45566.XYS
%HOMEPATH%\TUPBM\40117.ATW
%HOMEPATH%\TUPBM\Y18192.LAO
%HOMEPATH%\TUPBM\49149.QYJ
%HOMEPATH%\TUPBM\92359.MNB
%HOMEPATH%\TUPBM\71193.SMO
%HOMEPATH%\TUPBM\97987.KEW
%HOMEPATH%\TUPBM\L84193.SEB
%HOMEPATH%\TUPBM\15570.DDU
%HOMEPATH%\TUPBM\80721.QZH
%HOMEPATH%\TUPBM\Y8827.FAJ
%HOMEPATH%\TUPBM\36293.DDB
%HOMEPATH%\TUPBM\E13291.WRX
%HOMEPATH%\TUPBM\77338.ZJW
%HOMEPATH%\TUPBM\66353.NZR
%HOMEPATH%\TUPBM\40485.BQD
%HOMEPATH%\TUPBM\G30853.RPD
%HOMEPATH%\TUPBM\J1153.QQJ
%HOMEPATH%\TUPBM\V53040.BCF
%HOMEPATH%\TUPBM\G24061.RJP
%HOMEPATH%\TUPBM\2815.UXO
%HOMEPATH%\TUPBM\A99357.MXA
%HOMEPATH%\TUPBM\3529.MRC
%HOMEPATH%\TUPBM\54497.XDU
%HOMEPATH%\TUPBM\R87518.WXC
%HOMEPATH%\TUPBM\49369.PWC
%HOMEPATH%\TUPBM\Y71670.IMG
%HOMEPATH%\TUPBM\93265.AOB
%HOMEPATH%\TUPBM\R41864.AXD
%HOMEPATH%\TUPBM\O80191.KZO
%HOMEPATH%\TUPBM\S67951.NAP
%HOMEPATH%\TUPBM\U44836.JHZ
%HOMEPATH%\TUPBM\78422.PFA
%HOMEPATH%\TUPBM\65771.DFD
%HOMEPATH%\TUPBM\L9619.CLC
%HOMEPATH%\TUPBM\A29395.KCL
%HOMEPATH%\TUPBM\F51775.ATB
%HOMEPATH%\TUPBM\Z84778.XFK
%HOMEPATH%\TUPBM\89089.SBY
%HOMEPATH%\TUPBM\H2886.OIE
%HOMEPATH%\TUPBM\34740.WDX
%HOMEPATH%\TUPBM\E44597.JDA
%HOMEPATH%\TUPBM\15739.AWY
%HOMEPATH%\TUPBM\13263.AZB
%HOMEPATH%\TUPBM\K18743.EOJ
%HOMEPATH%\TUPBM\51250.YZG
%HOMEPATH%\TUPBM\U70582.UHE
%HOMEPATH%\TUPBM\F86867.QJM
%HOMEPATH%\TUPBM\40077.VAB
%HOMEPATH%\TUPBM\S48633.OMS
%HOMEPATH%\TUPBM\91741.FXK
%HOMEPATH%\TUPBM\40013.MKK
%HOMEPATH%\TUPBM\D20657.TYT
%HOMEPATH%\TUPBM\55698.HVC
%HOMEPATH%\TUPBM\71054.YXK
%HOMEPATH%\TUPBM\O52027.NRU
%HOMEPATH%\TUPBM\23156.JCZ
%HOMEPATH%\TUPBM\51649.MOD
%HOMEPATH%\TUPBM\79959.QRO
%HOMEPATH%\TUPBM\A68599.HNZ
%HOMEPATH%\TUPBM\D53129.RGQ
%HOMEPATH%\TUPBM\74698.JNF
%HOMEPATH%\TUPBM\80470.IWD
%HOMEPATH%\TUPBM\Y73241.ZFQ
%HOMEPATH%\TUPBM\L79700.UIK
%HOMEPATH%\TUPBM\K86556.WUF
%HOMEPATH%\TUPBM\95712.ZHH
%HOMEPATH%\TUPBM\J43798.QDC
%HOMEPATH%\TUPBM\46940.SYV
%HOMEPATH%\TUPBM\I60092.BEH
%HOMEPATH%\TUPBM\D80304.USA
%HOMEPATH%\TUPBM\68727.MOD
%HOMEPATH%\TUPBM\18585.PFP
%HOMEPATH%\TUPBM\Z70831.LUP
%HOMEPATH%\TUPBM\79576.XQS
%HOMEPATH%\TUPBM\46529.EQB
%HOMEPATH%\TUPBM\Z23056.OKZ
%HOMEPATH%\TUPBM\72364.VQH
%HOMEPATH%\TUPBM\12791.QXS
%HOMEPATH%\TUPBM\V87946.ZFP
%HOMEPATH%\TUPBM\62270.OLH
%HOMEPATH%\TUPBM\37389.ZPX
%HOMEPATH%\TUPBM\33883.WAF
%HOMEPATH%\TUPBM\L87121.OWS
%HOMEPATH%\TUPBM\6130.TVV
%HOMEPATH%\TUPBM\64149.SHL
%HOMEPATH%\TUPBM\H2590.CKP
%HOMEPATH%\TUPBM\61293.IHL
%HOMEPATH%\TUPBM\H58890.LSZ
%HOMEPATH%\TUPBM\51126.QGS
%HOMEPATH%\TUPBM\94200.BUJ
%HOMEPATH%\TUPBM\14134.UYK
%HOMEPATH%\TUPBM\32862.DEP
%HOMEPATH%\TUPBM\Z19184.LPB
%HOMEPATH%\TUPBM\15963.NHA
%HOMEPATH%\TUPBM\F38646.DTA
%HOMEPATH%\TUPBM\10645.XVG
%HOMEPATH%\TUPBM\F15688.AQT
%HOMEPATH%\TUPBM\92498.WFI
%HOMEPATH%\TUPBM\I70403.LVY
%HOMEPATH%\TUPBM\6085.GQJ
%HOMEPATH%\TUPBM\68242.ZPH
%HOMEPATH%\TUPBM\69114.VRF
%HOMEPATH%\TUPBM\H17050.QMP
%HOMEPATH%\TUPBM\30026.FTA
%HOMEPATH%\TUPBM\C43035.ZVD
%HOMEPATH%\TUPBM\31496.WLO
%HOMEPATH%\TUPBM\67638.SBS
%HOMEPATH%\TUPBM\P30371.LDE
%HOMEPATH%\TUPBM\D97978.HEW
%HOMEPATH%\TUPBM\L57094.GZU
%HOMEPATH%\TUPBM\80941.OYW
%HOMEPATH%\TUPBM\25366.FMW
%APPDATA%\EznJy\libcurl-4.dll
%APPDATA%\EznJy\rundll32.exe
%APPDATA%\EznJy\ltc.exe
%APPDATA%\EznJy\pthreadGC2.dll
%HOMEPATH%\TUPBM\K30889.DEI
%HOMEPATH%\TUPBM\R88382.LSN
%HOMEPATH%\TUPBM\YPVUBMXZ.dat
%HOMEPATH%\TUPBM\29538.SIA
%HOMEPATH%\TUPBM\L5254.VZC
%HOMEPATH%\TUPBM\B93778.PNK
%HOMEPATH%\TUPBM\18268.WZP
%HOMEPATH%\TUPBM\E89740.OJA
%HOMEPATH%\TUPBM\56596.ZQQ
%HOMEPATH%\TUPBM\E20825.ZDK
%HOMEPATH%\TUPBM\K46736.NCW
%HOMEPATH%\TUPBM\C56181.DDE
%HOMEPATH%\TUPBM\L79537.MTV
%HOMEPATH%\TUPBM\46842.ZQW
%HOMEPATH%\TUPBM\Y71616.QEA
%HOMEPATH%\TUPBM\32809.JKU
%HOMEPATH%\TUPBM\P98478.APW
%HOMEPATH%\TUPBM\M32662.JHU
%HOMEPATH%\TUPBM\27585.SQT
%HOMEPATH%\TUPBM\I63456.QQW
%HOMEPATH%\TUPBM\B36203.OXF
%HOMEPATH%\TUPBM\V12308.UNE
%HOMEPATH%\TUPBM\X10589.WBA
%HOMEPATH%\TUPBM\60521.ZGE
%HOMEPATH%\TUPBM\B88131.JXR
%HOMEPATH%\TUPBM\60625.GOV
%HOMEPATH%\TUPBM\Q69058.SZG
%HOMEPATH%\TUPBM\62123.JDY
%HOMEPATH%\TUPBM\2622.FSF
%HOMEPATH%\TUPBM\Y69583.AWQ
%HOMEPATH%\TUPBM\T31116.FVR
%HOMEPATH%\TUPBM\O56121.KHD
%HOMEPATH%\TUPBM\R28127.CVC
%HOMEPATH%\TUPBM\U38536.DCF
%HOMEPATH%\TUPBM\U16159.ZFZ
%HOMEPATH%\TUPBM\K70251.LOA
%HOMEPATH%\TUPBM\5304.YNT
%HOMEPATH%\TUPBM\A36898.PGU
%HOMEPATH%\TUPBM\6399.GXI
%HOMEPATH%\TUPBM\W85440.CGY
%HOMEPATH%\TUPBM\84667.OTH
%HOMEPATH%\TUPBM\T84231.WHL
%HOMEPATH%\TUPBM\U24805.FDC
%HOMEPATH%\TUPBM\U62855.FFF
%HOMEPATH%\TUPBM\C93541.DAO
%HOMEPATH%\TUPBM\54963.CCT
%HOMEPATH%\TUPBM\99392.UVW
%HOMEPATH%\TUPBM\Y23455.ZIJ
%HOMEPATH%\TUPBM\45815.KRL
%HOMEPATH%\TUPBM\89332.IMF
%HOMEPATH%\TUPBM\22862.TLY
%HOMEPATH%\TUPBM\91700.NYD
%HOMEPATH%\TUPBM\J76667.YGR
%HOMEPATH%\TUPBM\E49428.GKA
%HOMEPATH%\TUPBM\B9445.HSQ
%HOMEPATH%\TUPBM\U82106.LIY
%HOMEPATH%\TUPBM\12332.VAM
%HOMEPATH%\TUPBM\B55370.DJG
%HOMEPATH%\TUPBM\V70316.EOI
%HOMEPATH%\TUPBM\19691.PSR
%HOMEPATH%\TUPBM\E74233.LVE
%HOMEPATH%\TUPBM\K6438.YGY
%HOMEPATH%\TUPBM\82767.HZF
%HOMEPATH%\TUPBM\24263.GDY
%HOMEPATH%\TUPBM\38663.QZD
%HOMEPATH%\TUPBM\S88572.WJG
%HOMEPATH%\TUPBM\54516.IBL
%HOMEPATH%\TUPBM\88434.BFV
%HOMEPATH%\TUPBM\96595.ODI
%HOMEPATH%\TUPBM\J21709.KOV
%HOMEPATH%\TUPBM\V68757.NEX
%HOMEPATH%\TUPBM\36089.LFJ
%HOMEPATH%\TUPBM\10851.RJE
%HOMEPATH%\TUPBM\45300.QBA
%HOMEPATH%\TUPBM\65746.LGV
%HOMEPATH%\TUPBM\85619.ATB
%HOMEPATH%\TUPBM\H5461.XQS
%HOMEPATH%\TUPBM\26720.DQZ
%HOMEPATH%\TUPBM\27518.PGN
%HOMEPATH%\TUPBM\20938.ILP
%HOMEPATH%\TUPBM\35929.WLG
%HOMEPATH%\TUPBM\65143.HMG
%HOMEPATH%\TUPBM\P39358.NRE
%HOMEPATH%\TUPBM\65537.YWO
%HOMEPATH%\TUPBM\L63610.CSP
%HOMEPATH%\TUPBM\I86048.TFV
%HOMEPATH%\TUPBM\P71659.PVJ
%HOMEPATH%\TUPBM\H19573.HZC
%HOMEPATH%\TUPBM\K53656.GCZ
%HOMEPATH%\TUPBM\F74902.EMF
%HOMEPATH%\TUPBM\59113.UZY
%HOMEPATH%\TUPBM\O33435.BBI
%HOMEPATH%\TUPBM\57628.OKT
%HOMEPATH%\TUPBM\Z12277.GLC
%HOMEPATH%\TUPBM\12979.XTL
%HOMEPATH%\TUPBM\Y17873.XRB
%HOMEPATH%\TUPBM\Y93861.TEH
%HOMEPATH%\TUPBM\41697.GGW
%HOMEPATH%\TUPBM\E45080.LWI
%HOMEPATH%\TUPBM\10388.XRY
%HOMEPATH%\TUPBM\H77909.GQJ
%HOMEPATH%\TUPBM\F49399.SXM
%HOMEPATH%\TUPBM\89714.HUK
%HOMEPATH%\TUPBM\88896.MHM
%HOMEPATH%\TUPBM\R28603.VZP
%HOMEPATH%\TUPBM\N18228.RDC
%HOMEPATH%\TUPBM\S92739.JCA
%HOMEPATH%\TUPBM\X34535.WBL
%HOMEPATH%\TUPBM\V97301.ZSS
%HOMEPATH%\TUPBM\53174.FWJ
%HOMEPATH%\TUPBM\P30104.WHM
%HOMEPATH%\TUPBM\87049.SWH
%HOMEPATH%\TUPBM\K54764.YLJ
%HOMEPATH%\TUPBM\70916.IYQ
%HOMEPATH%\TUPBM\V96087.KAQ
%HOMEPATH%\TUPBM\96478.ETA
%HOMEPATH%\TUPBM\Q80740.CEW
%HOMEPATH%\TUPBM\57043.GUU
%HOMEPATH%\TUPBM\16342.QNB
%HOMEPATH%\TUPBM\L77876.CGX
%HOMEPATH%\TUPBM\B68291.RJC
%HOMEPATH%\TUPBM\B8911.WGB
%HOMEPATH%\TUPBM\66099.VKM
%HOMEPATH%\TUPBM\K31968.FVB
%HOMEPATH%\TUPBM\54224.EBO
%HOMEPATH%\TUPBM\P30309.CQK
%HOMEPATH%\TUPBM\D74228.YAA
%HOMEPATH%\TUPBM\10336.XSF
%HOMEPATH%\TUPBM\N62094.JGY
%HOMEPATH%\TUPBM\B48097.IXI
%HOMEPATH%\TUPBM\33943.ZKR
%HOMEPATH%\TUPBM\4586.NTW
%HOMEPATH%\TUPBM\73625.PNF
%HOMEPATH%\TUPBM\85536.DPC
%HOMEPATH%\TUPBM\P96712.OSL
%HOMEPATH%\TUPBM\V14457.FML
%HOMEPATH%\TUPBM\V46079.PPV
%HOMEPATH%\TUPBM\98234.HEA
%HOMEPATH%\TUPBM\80158.OPK
%HOMEPATH%\TUPBM\39849.HOJ
%HOMEPATH%\TUPBM\86530.LDN
%HOMEPATH%\TUPBM\R95353.PRO
%HOMEPATH%\TUPBM\J77101.BGS
%HOMEPATH%\TUPBM\21398.VTG
%HOMEPATH%\TUPBM\Q91978.JSK
%HOMEPATH%\TUPBM\22082.SLA
%HOMEPATH%\TUPBM\34345.DOS
%HOMEPATH%\TUPBM\J23972.ZVY
%HOMEPATH%\TUPBM\51272.DFL
%HOMEPATH%\TUPBM\J63501.WVS
%HOMEPATH%\TUPBM\55358.LVN
%HOMEPATH%\TUPBM\70544.XJW
%HOMEPATH%\TUPBM\96605.LXF
%HOMEPATH%\TUPBM\10291.NBG
%HOMEPATH%\TUPBM\E41072.AGJ
%HOMEPATH%\TUPBM\X11250.MFE
%HOMEPATH%\TUPBM\W61647.CSS
%HOMEPATH%\TUPBM\19176.QZR
%HOMEPATH%\TUPBM\X17627.WJP
%HOMEPATH%\TUPBM\80359.LKB
%HOMEPATH%\TUPBM\10495.LNR
%HOMEPATH%\TUPBM\N24640.VGQ
%HOMEPATH%\TUPBM\54576.TKQ
%HOMEPATH%\TUPBM\45421.KXZ
%HOMEPATH%\TUPBM\X71225.UKC
%HOMEPATH%\TUPBM\S92969.TPI
%HOMEPATH%\TUPBM\M30493.JYY
%HOMEPATH%\TUPBM\92542.CWZ
%HOMEPATH%\TUPBM\G95865.EJO
%HOMEPATH%\TUPBM\D6982.GSG
%HOMEPATH%\TUPBM\62588.VJV
%HOMEPATH%\TUPBM\74592.GYL
%HOMEPATH%\TUPBM\81095.KRU
%HOMEPATH%\TUPBM\T85475.SJQ
%HOMEPATH%\TUPBM\S99110.GOC
%HOMEPATH%\TUPBM\98498.WBY
%HOMEPATH%\TUPBM\73950.RYP
%HOMEPATH%\TUPBM\J70820.GTX
%HOMEPATH%\TUPBM\S29641.GEZ
%HOMEPATH%\TUPBM\P24902.XHK
%HOMEPATH%\TUPBM\59167.UOQ
%HOMEPATH%\TUPBM\B74266.CNG
%HOMEPATH%\TUPBM\31148.JCW
%HOMEPATH%\TUPBM\setup.vbs
%HOMEPATH%\TUPBM\settings.ini
%HOMEPATH%\TUPBM\D70523.HZH
%HOMEPATH%\TUPBM\27081.RWS
%HOMEPATH%\TUPBM\695530.dat
%HOMEPATH%\TUPBM\763009.WCJ
%HOMEPATH%\TUPBM\141932.exe
%HOMEPATH%\TUPBM\74636.dat
%HOMEPATH%\TUPBM\18651.MCJ
%HOMEPATH%\TUPBM\91625.ISG
%HOMEPATH%\TUPBM\63265.SGD
%HOMEPATH%\TUPBM\H9675.YZZ
%HOMEPATH%\TUPBM\37656.OFO
%HOMEPATH%\TUPBM\N69810.RCL
%HOMEPATH%\TUPBM\G89983.PYG
%HOMEPATH%\TUPBM\A92981.SEF
%HOMEPATH%\TUPBM\50951.ODM
%HOMEPATH%\TUPBM\55963.ZOC
%HOMEPATH%\TUPBM\96645.LQU
%HOMEPATH%\TUPBM\L12115.NHH
%HOMEPATH%\TUPBM\77521.JIL
%HOMEPATH%\TUPBM\37982.WCC
%HOMEPATH%\TUPBM\T6161.MPU
%HOMEPATH%\TUPBM\26016.FLX
%HOMEPATH%\TUPBM\44397.CUI
%HOMEPATH%\TUPBM\36168.HPT
%HOMEPATH%\TUPBM\39074.KLD
%HOMEPATH%\TUPBM\W33780.DMK
%HOMEPATH%\TUPBM\19850.YMY
%HOMEPATH%\TUPBM\17773.JNB
%HOMEPATH%\TUPBM\89947.GEG
%HOMEPATH%\TUPBM\68395.UXZ
%HOMEPATH%\TUPBM\75496.KDQ
%HOMEPATH%\TUPBM\D17251.MVR
%HOMEPATH%\TUPBM\48511.WEV
%HOMEPATH%\TUPBM\H23455.WCV
%HOMEPATH%\TUPBM\P29199.EDG
%HOMEPATH%\TUPBM\Z3145.ZFO
%HOMEPATH%\TUPBM\3545.WVR
%HOMEPATH%\TUPBM\E53711.PKC
%HOMEPATH%\TUPBM\Q82675.JRM
%HOMEPATH%\TUPBM\I73448.KAI
%HOMEPATH%\TUPBM\33689.DMY
%HOMEPATH%\TUPBM\J13131.ETL
%HOMEPATH%\TUPBM\N15719.SLK
%HOMEPATH%\TUPBM\Y8128.QBH
%HOMEPATH%\TUPBM\98443.GPS
%HOMEPATH%\TUPBM\C39547.LEP
%HOMEPATH%\TUPBM\65713.THT
%HOMEPATH%\TUPBM\F60786.QWE
%HOMEPATH%\TUPBM\M85192.HOI
%HOMEPATH%\TUPBM\E28183.GED
%HOMEPATH%\TUPBM\18999.FPW
%HOMEPATH%\TUPBM\34511.HAX
%HOMEPATH%\TUPBM\J19939.MYD
%HOMEPATH%\TUPBM\H83517.KRY
%HOMEPATH%\TUPBM\R46554.ZHU
%HOMEPATH%\TUPBM\X16169.LDD
%HOMEPATH%\TUPBM\H85659.JFX
%HOMEPATH%\TUPBM\42941.KUT
%HOMEPATH%\TUPBM\T33047.FFY
%HOMEPATH%\TUPBM\M81158.KMI
%HOMEPATH%\TUPBM\Y69507.BXB
%HOMEPATH%\TUPBM\78888.ZKV
%HOMEPATH%\TUPBM\E13295.WHL
%HOMEPATH%\TUPBM\J74057.MCO
%HOMEPATH%\TUPBM\9877.LGN
%HOMEPATH%\TUPBM\H75665.EHG
%HOMEPATH%\TUPBM\92246.AOT
%HOMEPATH%\TUPBM\77295.BNI
%HOMEPATH%\TUPBM\J79309.YYV
%HOMEPATH%\TUPBM\89152.MDJ
%HOMEPATH%\TUPBM\58444.NHX
%HOMEPATH%\TUPBM\82267.CTD
%HOMEPATH%\TUPBM\J17269.DGR
%HOMEPATH%\TUPBM\92421.ZQD
%HOMEPATH%\TUPBM\91474.MZY
%HOMEPATH%\TUPBM\53734.MKY
%HOMEPATH%\TUPBM\X95558.KYV
%HOMEPATH%\TUPBM\Z72813.ZMB
%HOMEPATH%\TUPBM\62188.LGO
%HOMEPATH%\TUPBM\72301.EFG
%HOMEPATH%\TUPBM\77650.KIX
%HOMEPATH%\TUPBM\7153.PDX
%HOMEPATH%\TUPBM\86175.LKD
%HOMEPATH%\TUPBM\41461.MTX
%HOMEPATH%\TUPBM\76623.GUM
%HOMEPATH%\TUPBM\17656.OCN
%HOMEPATH%\TUPBM\F8954.EOQ
%HOMEPATH%\TUPBM\V27648.EEK
%HOMEPATH%\TUPBM\Q57967.LSA
%HOMEPATH%\TUPBM\8695.UWY
%HOMEPATH%\TUPBM\S1228.FEU
%HOMEPATH%\TUPBM\35841.TER
%HOMEPATH%\TUPBM\L51472.WQP
%HOMEPATH%\TUPBM\T63866.OXJ
%HOMEPATH%\TUPBM\M90911.SOO
%HOMEPATH%\TUPBM\N92416.SEG
%HOMEPATH%\TUPBM\37906.OVI
%HOMEPATH%\TUPBM\H24794.QSC
%HOMEPATH%\TUPBM\D6866.UTI
%HOMEPATH%\TUPBM\41376.WHO
%HOMEPATH%\TUPBM\G30703.FTJ
%HOMEPATH%\TUPBM\X70506.QOQ
%HOMEPATH%\TUPBM\48692.OGZ
%HOMEPATH%\TUPBM\O65183.WXL
%HOMEPATH%\TUPBM\64113.VFB
%HOMEPATH%\TUPBM\98769.CTL
%HOMEPATH%\TUPBM\75426.RCV
%HOMEPATH%\TUPBM\31749.VMZ
%HOMEPATH%\TUPBM\97398.QJA
%HOMEPATH%\TUPBM\46282.HNT
%HOMEPATH%\TUPBM\27791.YQE
%HOMEPATH%\TUPBM\28981.RUP
%HOMEPATH%\TUPBM\70654.QYC
%HOMEPATH%\TUPBM\37984.DXY
%HOMEPATH%\TUPBM\44963.PNO
%HOMEPATH%\TUPBM\7065.EXM
%HOMEPATH%\TUPBM\66809.VGP
%HOMEPATH%\TUPBM\12043.HQG
%HOMEPATH%\TUPBM\2378.PVO
%HOMEPATH%\TUPBM\61002.IAY
%HOMEPATH%\TUPBM\W16995.YYB
%HOMEPATH%\TUPBM\X80587.DNO
%HOMEPATH%\TUPBM\97398.TWG
%HOMEPATH%\TUPBM\G86207.OUA
%HOMEPATH%\TUPBM\T71855.PHS
%HOMEPATH%\TUPBM\92048.MIX
%HOMEPATH%\TUPBM\84068.XKA
%HOMEPATH%\TUPBM\J40169.XVG
%HOMEPATH%\TUPBM\14043.KVX
%HOMEPATH%\TUPBM\9864.MWV
%HOMEPATH%\TUPBM\84724.FVQ
%HOMEPATH%\TUPBM\V15718.QKC
%HOMEPATH%\TUPBM\21457.SHH
%HOMEPATH%\TUPBM\F14935.UCA
%HOMEPATH%\TUPBM\51546.VCX
%HOMEPATH%\TUPBM\92684.IBQ
%HOMEPATH%\TUPBM\Z23323.NGJ
%HOMEPATH%\TUPBM\C80736.JUD
%HOMEPATH%\TUPBM\51470.IRX
%HOMEPATH%\TUPBM\T39359.EJU
%HOMEPATH%\TUPBM\6739.ISS
%HOMEPATH%\TUPBM\G26117.URE
%HOMEPATH%\TUPBM\A9208.JUJ
%HOMEPATH%\TUPBM\L83004.HLG
%HOMEPATH%\TUPBM\41628.DTZ
%HOMEPATH%\TUPBM\11603.UEA
%HOMEPATH%\TUPBM\Y73555.AOV
%HOMEPATH%\TUPBM\H93450.AQC
%HOMEPATH%\TUPBM\S54560.RIG
%HOMEPATH%\TUPBM\Q27827.CTR
%HOMEPATH%\TUPBM\80328.WMX
%HOMEPATH%\TUPBM\88168.LCE
%HOMEPATH%\TUPBM\27409.OUZ
%HOMEPATH%\TUPBM\53467.BKS
%HOMEPATH%\TUPBM\N51965.ZWO
%HOMEPATH%\TUPBM\46999.DPE
%HOMEPATH%\TUPBM\76638.KEV
%HOMEPATH%\TUPBM\43899.CHA
%HOMEPATH%\TUPBM\52940.ISI
%HOMEPATH%\TUPBM\65610.CWJ
%HOMEPATH%\TUPBM\K60681.ZME
%HOMEPATH%\TUPBM\48714.EIO
%HOMEPATH%\TUPBM\E33672.DHT
%HOMEPATH%\TUPBM\73542.HKJ
%HOMEPATH%\TUPBM\2816.RBY
%HOMEPATH%\TUPBM\L92410.LAP
%HOMEPATH%\TUPBM\53051.ABL
%HOMEPATH%\TUPBM\Z46583.HRR
%HOMEPATH%\TUPBM\K95413.DLE
%HOMEPATH%\TUPBM\A53871.TVI
%HOMEPATH%\TUPBM\T74047.QPY
%HOMEPATH%\TUPBM\16245.LMR
%HOMEPATH%\TUPBM\W41531.EXF
%HOMEPATH%\TUPBM\B57179.OYR
%HOMEPATH%\TUPBM\P97546.IWS
%HOMEPATH%\TUPBM\J40449.FPM
%HOMEPATH%\TUPBM\34340.FIM
%HOMEPATH%\TUPBM\67752.XRC
%HOMEPATH%\TUPBM\H65720.RXW
%HOMEPATH%\TUPBM\71992.VLQ
%HOMEPATH%\TUPBM\34772.AMF
%HOMEPATH%\TUPBM\53943.OOE
%HOMEPATH%\TUPBM\Y33034.QSS
%HOMEPATH%\TUPBM\J4770.TLF
%HOMEPATH%\TUPBM\X90450.HEP
%HOMEPATH%\TUPBM\O26245.JUT
%HOMEPATH%\TUPBM\I77066.CAD
%HOMEPATH%\TUPBM\64583.LEZ
%HOMEPATH%\TUPBM\I64106.NHT
%HOMEPATH%\TUPBM\J26391.NEA
%HOMEPATH%\TUPBM\Z62213.ZFL
%HOMEPATH%\TUPBM\Z55572.ZZW

Присваивает атрибут 'скрытый' для следующих файлов:

%HOMEPATH%\TUPBM\O78535.OPF
%HOMEPATH%\TUPBM\64195.TSL
%HOMEPATH%\TUPBM\11333.SKU
%HOMEPATH%\TUPBM\34529.KCN
%HOMEPATH%\TUPBM\97451.QIB
%HOMEPATH%\TUPBM\70346.ZML
%HOMEPATH%\TUPBM\H29050.EHG
%HOMEPATH%\TUPBM\5342.YKC
%HOMEPATH%\TUPBM\W12049.LZD
%HOMEPATH%\TUPBM\K49871.LXE
%HOMEPATH%\TUPBM\42767.JBG
%HOMEPATH%\TUPBM\S22001.PDL
%HOMEPATH%\TUPBM\59147.LYI
%HOMEPATH%\TUPBM\K91435.MTU
%HOMEPATH%\TUPBM\Y21111.ITZ
%HOMEPATH%\TUPBM\J96606.LKX
%HOMEPATH%\TUPBM\82990.YWM
%HOMEPATH%\TUPBM\59702.HTK
%HOMEPATH%\TUPBM\T79322.KXQ
%HOMEPATH%\TUPBM\O54396.FQZ
%HOMEPATH%\TUPBM\Q99428.PNC
%HOMEPATH%\TUPBM\Z51672.ECN
%HOMEPATH%\TUPBM\51250.YZG
%HOMEPATH%\TUPBM\15739.AWY
%HOMEPATH%\TUPBM\9931.XBH
%HOMEPATH%\TUPBM\K18743.EOJ
%HOMEPATH%\TUPBM\49026.EHA
%HOMEPATH%\TUPBM\Z21580.JDW
%HOMEPATH%\TUPBM\14893.EET
%HOMEPATH%\TUPBM\9825.HHX
%HOMEPATH%\TUPBM\N51009.JTW
%HOMEPATH%\TUPBM\T26382.JWS
%HOMEPATH%\TUPBM\Q83973.UOG
%HOMEPATH%\TUPBM\C52586.DDZ
%HOMEPATH%\TUPBM\52930.GLB
%HOMEPATH%\TUPBM\U38529.UMQ
%HOMEPATH%\TUPBM\G28177.NET
%HOMEPATH%\TUPBM\Z80375.RDP
%HOMEPATH%\TUPBM\67394.QTE
%HOMEPATH%\TUPBM\Q68020.OYV
%HOMEPATH%\TUPBM\30414.GHP
%HOMEPATH%\TUPBM\E14904.QKU
%HOMEPATH%\TUPBM\L52918.HGX
%HOMEPATH%\TUPBM\2295.VOS
%HOMEPATH%\TUPBM\27656.RAT
%HOMEPATH%\TUPBM\T28912.QJU
%HOMEPATH%\TUPBM\76811.WLX
%HOMEPATH%\TUPBM\93908.CZM
%HOMEPATH%\TUPBM\H1591.JDT
%HOMEPATH%\TUPBM\71150.JPJ
%HOMEPATH%\TUPBM\10433.KHD
%HOMEPATH%\TUPBM\40661.VAP
%HOMEPATH%\TUPBM\99563.TMY
%HOMEPATH%\TUPBM\34033.DRP
%HOMEPATH%\TUPBM\96844.QSP
%HOMEPATH%\TUPBM\70859.MGI
%HOMEPATH%\TUPBM\F68918.BHX
%HOMEPATH%\TUPBM\P67642.GXT
%HOMEPATH%\TUPBM\20029.UNM
%HOMEPATH%\TUPBM\W99814.YIY
%HOMEPATH%\TUPBM\W38974.XFJ
%HOMEPATH%\TUPBM\66158.HDV
%HOMEPATH%\TUPBM\Q40202.QGM
%HOMEPATH%\TUPBM\B79215.VRL
%HOMEPATH%\TUPBM\1473.PWL
%HOMEPATH%\TUPBM\73913.WIO
%HOMEPATH%\TUPBM\55867.MKO
%HOMEPATH%\TUPBM\61449.ZPS
%HOMEPATH%\TUPBM\52231.GBG
%HOMEPATH%\TUPBM\Q7243.LRP
%HOMEPATH%\TUPBM\71193.SMO
%HOMEPATH%\TUPBM\Y18192.LAO
%HOMEPATH%\TUPBM\57664.SVH
%HOMEPATH%\TUPBM\92359.MNB
%HOMEPATH%\TUPBM\93265.AOB
%HOMEPATH%\TUPBM\R41864.AXD
%HOMEPATH%\TUPBM\49149.QYJ
%HOMEPATH%\TUPBM\40485.BQD
%HOMEPATH%\TUPBM\5407.UWV
%HOMEPATH%\TUPBM\66353.NZR
%HOMEPATH%\TUPBM\36293.DDB
%HOMEPATH%\TUPBM\15570.DDU
%HOMEPATH%\TUPBM\77338.ZJW
%HOMEPATH%\TUPBM\Y45566.XYS
%HOMEPATH%\TUPBM\40117.ATW
%HOMEPATH%\TUPBM\E13291.WRX
%HOMEPATH%\TUPBM\97987.KEW
%HOMEPATH%\TUPBM\49369.PWC
%HOMEPATH%\TUPBM\54497.XDU
%HOMEPATH%\TUPBM\2815.UXO
%HOMEPATH%\TUPBM\J1153.QQJ
%HOMEPATH%\TUPBM\3529.MRC
%HOMEPATH%\TUPBM\H24794.QSC
%HOMEPATH%\TUPBM\D6866.UTI
%HOMEPATH%\TUPBM\A99357.MXA
%HOMEPATH%\TUPBM\Z12277.GLC
%HOMEPATH%\TUPBM\G30853.RPD
%HOMEPATH%\TUPBM\78422.PFA
%HOMEPATH%\TUPBM\O80191.KZO
%HOMEPATH%\TUPBM\Y71670.IMG
%HOMEPATH%\TUPBM\U44836.JHZ
%HOMEPATH%\TUPBM\V53040.BCF
%HOMEPATH%\TUPBM\G24061.RJP
%HOMEPATH%\TUPBM\S67951.NAP
%HOMEPATH%\TUPBM\R87518.WXC
%HOMEPATH%\TUPBM\34740.WDX
%HOMEPATH%\TUPBM\Z84778.XFK
%HOMEPATH%\TUPBM\L9619.CLC
%HOMEPATH%\TUPBM\H2886.OIE
%HOMEPATH%\TUPBM\80470.IWD
%HOMEPATH%\TUPBM\Y73241.ZFQ
%HOMEPATH%\TUPBM\89089.SBY
%HOMEPATH%\TUPBM\91741.FXK
%HOMEPATH%\TUPBM\65771.DFD
%HOMEPATH%\TUPBM\S48633.OMS
%HOMEPATH%\TUPBM\U70582.UHE
%HOMEPATH%\TUPBM\13263.AZB
%HOMEPATH%\TUPBM\40077.VAB
%HOMEPATH%\TUPBM\A29395.KCL
%HOMEPATH%\TUPBM\F51775.ATB
%HOMEPATH%\TUPBM\F86867.QJM
%HOMEPATH%\TUPBM\E44597.JDA
%HOMEPATH%\TUPBM\D53129.RGQ
%HOMEPATH%\TUPBM\79959.QRO
%HOMEPATH%\TUPBM\O52027.NRU
%HOMEPATH%\TUPBM\D20657.TYT
%HOMEPATH%\TUPBM\51649.MOD
%HOMEPATH%\TUPBM\Y8827.FAJ
%HOMEPATH%\TUPBM\L84193.SEB
%HOMEPATH%\TUPBM\23156.JCZ
%HOMEPATH%\TUPBM\80721.QZH
%HOMEPATH%\TUPBM\40013.MKK
%HOMEPATH%\TUPBM\J43798.QDC
%HOMEPATH%\TUPBM\L79700.UIK
%HOMEPATH%\TUPBM\74698.JNF
%HOMEPATH%\TUPBM\95712.ZHH
%HOMEPATH%\TUPBM\55698.HVC
%HOMEPATH%\TUPBM\71054.YXK
%HOMEPATH%\TUPBM\K86556.WUF
%HOMEPATH%\TUPBM\A68599.HNZ
%HOMEPATH%\TUPBM\X14923.JBM
%HOMEPATH%\TUPBM\79576.XQS
%HOMEPATH%\TUPBM\H2590.CKP
%HOMEPATH%\TUPBM\Z23056.OKZ
%HOMEPATH%\TUPBM\Z70831.LUP
%HOMEPATH%\TUPBM\10645.XVG
%HOMEPATH%\TUPBM\F15688.AQT
%HOMEPATH%\TUPBM\92498.WFI
%HOMEPATH%\TUPBM\I70403.LVY
%HOMEPATH%\TUPBM\46529.EQB
%HOMEPATH%\TUPBM\L87121.OWS
%HOMEPATH%\TUPBM\72364.VQH
%HOMEPATH%\TUPBM\64149.SHL
%HOMEPATH%\TUPBM\33883.WAF
%HOMEPATH%\TUPBM\I60092.BEH
%HOMEPATH%\TUPBM\D80304.USA
%HOMEPATH%\TUPBM\68727.MOD
%HOMEPATH%\TUPBM\18585.PFP
%HOMEPATH%\TUPBM\69114.VRF
%HOMEPATH%\TUPBM\32862.DEP
%HOMEPATH%\TUPBM\X10589.WBA
%HOMEPATH%\TUPBM\15963.NHA
%HOMEPATH%\TUPBM\14134.UYK
%HOMEPATH%\TUPBM\88434.BFV
%HOMEPATH%\TUPBM\96595.ODI
%HOMEPATH%\TUPBM\J21709.KOV
%HOMEPATH%\TUPBM\V68757.NEX
%HOMEPATH%\TUPBM\Z19184.LPB
%HOMEPATH%\TUPBM\68242.ZPH
%HOMEPATH%\TUPBM\F38646.DTA
%HOMEPATH%\TUPBM\H17050.QMP
%HOMEPATH%\TUPBM\6085.GQJ
%HOMEPATH%\TUPBM\61293.IHL
%HOMEPATH%\TUPBM\H58890.LSZ
%HOMEPATH%\TUPBM\51126.QGS
%HOMEPATH%\TUPBM\94200.BUJ
%HOMEPATH%\TUPBM\D97978.HEW
%HOMEPATH%\TUPBM\L5254.VZC
%HOMEPATH%\TUPBM\80941.OYW
%HOMEPATH%\TUPBM\P30371.LDE
%HOMEPATH%\TUPBM\Y71616.QEA
%HOMEPATH%\TUPBM\32809.JKU
%HOMEPATH%\TUPBM\P98478.APW
%HOMEPATH%\TUPBM\M32662.JHU
%HOMEPATH%\TUPBM\L57094.GZU
%HOMEPATH%\TUPBM\R88382.LSN
%HOMEPATH%\TUPBM\25366.FMW
%HOMEPATH%\TUPBM\29538.SIA
%HOMEPATH%\TUPBM\K30889.DEI
%HOMEPATH%\TUPBM\30026.FTA
%HOMEPATH%\TUPBM\C43035.ZVD
%HOMEPATH%\TUPBM\31496.WLO
%HOMEPATH%\TUPBM\67638.SBS
%HOMEPATH%\TUPBM\B36203.OXF
%HOMEPATH%\TUPBM\K46736.NCW
%HOMEPATH%\TUPBM\62270.OLH
%HOMEPATH%\TUPBM\L79537.MTV
%HOMEPATH%\TUPBM\E20825.ZDK
%HOMEPATH%\TUPBM\V87946.ZFP
%HOMEPATH%\TUPBM\6130.TVV
%HOMEPATH%\TUPBM\37389.ZPX
%HOMEPATH%\TUPBM\12791.QXS
%HOMEPATH%\TUPBM\C56181.DDE
%HOMEPATH%\TUPBM\I63456.QQW
%HOMEPATH%\TUPBM\46842.ZQW
%HOMEPATH%\TUPBM\V12308.UNE
%HOMEPATH%\TUPBM\27585.SQT
%HOMEPATH%\TUPBM\B93778.PNK
%HOMEPATH%\TUPBM\18268.WZP
%HOMEPATH%\TUPBM\E89740.OJA
%HOMEPATH%\TUPBM\56596.ZQQ
%HOMEPATH%\TUPBM\62123.JDY
%HOMEPATH%\TUPBM\2622.FSF
%HOMEPATH%\TUPBM\Y69583.AWQ
%HOMEPATH%\TUPBM\T31116.FVR
%HOMEPATH%\TUPBM\E49428.GKA
%HOMEPATH%\TUPBM\22862.TLY
%HOMEPATH%\TUPBM\84667.OTH
%HOMEPATH%\TUPBM\J76667.YGR
%HOMEPATH%\TUPBM\B88131.JXR
%HOMEPATH%\TUPBM\5304.YNT
%HOMEPATH%\TUPBM\A36898.PGU
%HOMEPATH%\TUPBM\6399.GXI
%HOMEPATH%\TUPBM\W85440.CGY
%HOMEPATH%\TUPBM\Q69058.SZG
%HOMEPATH%\TUPBM\60521.ZGE
%HOMEPATH%\TUPBM\O56121.KHD
%HOMEPATH%\TUPBM\60625.GOV
%HOMEPATH%\TUPBM\91700.NYD
%HOMEPATH%\TUPBM\54963.CCT
%HOMEPATH%\TUPBM\99392.UVW
%HOMEPATH%\TUPBM\Y23455.ZIJ
%HOMEPATH%\TUPBM\45815.KRL
%HOMEPATH%\TUPBM\T43983.RSB
%HOMEPATH%\TUPBM\Y78946.LYF
%HOMEPATH%\TUPBM\46940.SYV
%HOMEPATH%\TUPBM\96809.DQU
%HOMEPATH%\TUPBM\U24805.FDC
%HOMEPATH%\TUPBM\B9445.HSQ
%HOMEPATH%\TUPBM\U82106.LIY
%HOMEPATH%\TUPBM\12332.VAM
%HOMEPATH%\TUPBM\B55370.DJG
%HOMEPATH%\TUPBM\C93541.DAO
%HOMEPATH%\TUPBM\T84231.WHL
%HOMEPATH%\TUPBM\89332.IMF
%HOMEPATH%\TUPBM\U62855.FFF
%HOMEPATH%\TUPBM\82767.HZF
%HOMEPATH%\TUPBM\24263.GDY
%HOMEPATH%\TUPBM\38663.QZD
%HOMEPATH%\TUPBM\S88572.WJG
%HOMEPATH%\TUPBM\K53656.GCZ
%HOMEPATH%\TUPBM\I86048.TFV
%HOMEPATH%\TUPBM\85619.ATB
%HOMEPATH%\TUPBM\H19573.HZC
%HOMEPATH%\TUPBM\19691.PSR
%HOMEPATH%\TUPBM\36089.LFJ
%HOMEPATH%\TUPBM\10851.RJE
%HOMEPATH%\TUPBM\45300.QBA
%HOMEPATH%\TUPBM\65746.LGV
%HOMEPATH%\TUPBM\K6438.YGY
%HOMEPATH%\TUPBM\V70316.EOI
%HOMEPATH%\TUPBM\54516.IBL
%HOMEPATH%\TUPBM\E74233.LVE
%HOMEPATH%\TUPBM\P71659.PVJ
%HOMEPATH%\TUPBM\35929.WLG
%HOMEPATH%\TUPBM\65143.HMG
%HOMEPATH%\TUPBM\P39358.NRE
%HOMEPATH%\TUPBM\65537.YWO
%HOMEPATH%\TUPBM\R28127.CVC
%HOMEPATH%\TUPBM\U38536.DCF
%HOMEPATH%\TUPBM\U16159.ZFZ
%HOMEPATH%\TUPBM\K70251.LOA
%HOMEPATH%\TUPBM\26720.DQZ
%HOMEPATH%\TUPBM\F74902.EMF
%HOMEPATH%\TUPBM\59113.UZY
%HOMEPATH%\TUPBM\O33435.BBI
%HOMEPATH%\TUPBM\57628.OKT
%HOMEPATH%\TUPBM\20938.ILP
%HOMEPATH%\TUPBM\H5461.XQS
%HOMEPATH%\TUPBM\L63610.CSP
%HOMEPATH%\TUPBM\27518.PGN
%HOMEPATH%\TUPBM\Y17873.XRB
%HOMEPATH%\TUPBM\H77909.GQJ
%HOMEPATH%\TUPBM\41697.GGW
%HOMEPATH%\TUPBM\12979.XTL
%HOMEPATH%\TUPBM\10388.XRY
%HOMEPATH%\TUPBM\87049.SWH
%HOMEPATH%\TUPBM\F49399.SXM
%HOMEPATH%\TUPBM\E45080.LWI
%HOMEPATH%\TUPBM\Y93861.TEH
%HOMEPATH%\TUPBM\R28603.VZP
%HOMEPATH%\TUPBM\53174.FWJ
%HOMEPATH%\TUPBM\S92739.JCA
%HOMEPATH%\TUPBM\88896.MHM
%HOMEPATH%\TUPBM\V97301.ZSS
%HOMEPATH%\TUPBM\89714.HUK
%HOMEPATH%\TUPBM\P30104.WHM
%HOMEPATH%\TUPBM\X34535.WBL
%HOMEPATH%\TUPBM\K31968.FVB
%HOMEPATH%\TUPBM\70916.IYQ
%HOMEPATH%\TUPBM\16342.QNB
%HOMEPATH%\TUPBM\96478.ETA
%HOMEPATH%\TUPBM\K54764.YLJ
%HOMEPATH%\TUPBM\57043.GUU
%HOMEPATH%\TUPBM\X71225.UKC
%HOMEPATH%\TUPBM\L77876.CGX
%HOMEPATH%\TUPBM\Q80740.CEW
%HOMEPATH%\TUPBM\V96087.KAQ
%HOMEPATH%\TUPBM\66099.VKM
%HOMEPATH%\TUPBM\10336.XSF
%HOMEPATH%\TUPBM\54224.EBO
%HOMEPATH%\TUPBM\B8911.WGB
%HOMEPATH%\TUPBM\D74228.YAA
%HOMEPATH%\TUPBM\B68291.RJC
%HOMEPATH%\TUPBM\N62094.JGY
%HOMEPATH%\TUPBM\P30309.CQK
%HOMEPATH%\TUPBM\33943.ZKR
%HOMEPATH%\TUPBM\V14457.FML
%HOMEPATH%\TUPBM\73625.PNF
%HOMEPATH%\TUPBM\B48097.IXI
%HOMEPATH%\TUPBM\P96712.OSL
%HOMEPATH%\TUPBM\34345.DOS
%HOMEPATH%\TUPBM\V46079.PPV
%HOMEPATH%\TUPBM\85536.DPC
%HOMEPATH%\TUPBM\4586.NTW
%HOMEPATH%\TUPBM\39849.HOJ
%HOMEPATH%\TUPBM\Q91978.JSK
%HOMEPATH%\TUPBM\R95353.PRO
%HOMEPATH%\TUPBM\80158.OPK
%HOMEPATH%\TUPBM\21398.VTG
%HOMEPATH%\TUPBM\98234.HEA
%HOMEPATH%\TUPBM\22082.SLA
%HOMEPATH%\TUPBM\J77101.BGS
%HOMEPATH%\TUPBM\X17627.WJP
%HOMEPATH%\TUPBM\51272.DFL
%HOMEPATH%\TUPBM\10291.NBG
%HOMEPATH%\TUPBM\55358.LVN
%HOMEPATH%\TUPBM\J23972.ZVY
%HOMEPATH%\TUPBM\96605.LXF
%HOMEPATH%\TUPBM\N18228.RDC
%HOMEPATH%\TUPBM\E41072.AGJ
%HOMEPATH%\TUPBM\70544.XJW
%HOMEPATH%\TUPBM\J63501.WVS
%HOMEPATH%\TUPBM\19176.QZR
%HOMEPATH%\TUPBM\54576.TKQ
%HOMEPATH%\TUPBM\80359.LKB
%HOMEPATH%\TUPBM\W61647.CSS
%HOMEPATH%\TUPBM\N24640.VGQ
%HOMEPATH%\TUPBM\X11250.MFE
%HOMEPATH%\TUPBM\45421.KXZ
%HOMEPATH%\TUPBM\10495.LNR
%HOMEPATH%\TUPBM\S92969.TPI
%HOMEPATH%\TUPBM\M30493.JYY
%HOMEPATH%\TUPBM\92542.CWZ
%HOMEPATH%\TUPBM\G95865.EJO
%HOMEPATH%\TUPBM\D6982.GSG
%HOMEPATH%\TUPBM\62588.VJV
%HOMEPATH%\TUPBM\74592.GYL
%HOMEPATH%\TUPBM\81095.KRU
%HOMEPATH%\TUPBM\T85475.SJQ
%HOMEPATH%\TUPBM\S99110.GOC
%HOMEPATH%\TUPBM\98498.WBY
%HOMEPATH%\TUPBM\73950.RYP
%HOMEPATH%\TUPBM\J70820.GTX
%HOMEPATH%\TUPBM\S29641.GEZ
%HOMEPATH%\TUPBM\P24902.XHK
%HOMEPATH%\TUPBM\59167.UOQ
%HOMEPATH%\TUPBM\B74266.CNG
%HOMEPATH%\TUPBM\31148.JCW
%HOMEPATH%\TUPBM\setup.vbs
%HOMEPATH%\TUPBM\settings.ini
%HOMEPATH%\TUPBM\D70523.HZH
%HOMEPATH%\TUPBM\27081.RWS
%HOMEPATH%\TUPBM\695530.dat
%HOMEPATH%\TUPBM\763009.WCJ
%HOMEPATH%\TUPBM\141932.exe
%HOMEPATH%\TUPBM\74636.dat
%HOMEPATH%\TUPBM\18651.MCJ
%HOMEPATH%\TUPBM\91625.ISG
%HOMEPATH%\TUPBM\63265.SGD
%HOMEPATH%\TUPBM\H9675.YZZ
%HOMEPATH%\TUPBM\37656.OFO
%HOMEPATH%\TUPBM\N69810.RCL
%HOMEPATH%\TUPBM\G89983.PYG
%HOMEPATH%\TUPBM\A92981.SEF
%HOMEPATH%\TUPBM\50951.ODM
%HOMEPATH%\TUPBM\55963.ZOC
%HOMEPATH%\TUPBM\96645.LQU
%HOMEPATH%\TUPBM\L12115.NHH
%HOMEPATH%\TUPBM\77521.JIL
%HOMEPATH%\TUPBM\37982.WCC
%HOMEPATH%\TUPBM\T6161.MPU
%HOMEPATH%\TUPBM\26016.FLX
%HOMEPATH%\TUPBM\44397.CUI
%HOMEPATH%\TUPBM\36168.HPT
%HOMEPATH%\TUPBM\39074.KLD
%HOMEPATH%\TUPBM\W33780.DMK
%HOMEPATH%\TUPBM\19850.YMY
%HOMEPATH%\TUPBM\17773.JNB
%HOMEPATH%\TUPBM\89947.GEG
%HOMEPATH%\TUPBM\68395.UXZ
%HOMEPATH%\TUPBM\75496.KDQ
%HOMEPATH%\TUPBM\D17251.MVR
%HOMEPATH%\TUPBM\48511.WEV
%HOMEPATH%\TUPBM\H23455.WCV
%HOMEPATH%\TUPBM\P29199.EDG
%HOMEPATH%\TUPBM\Z3145.ZFO
%HOMEPATH%\TUPBM\3545.WVR
%HOMEPATH%\TUPBM\E53711.PKC
%HOMEPATH%\TUPBM\Q82675.JRM
%HOMEPATH%\TUPBM\I73448.KAI
%HOMEPATH%\TUPBM\33689.DMY
%HOMEPATH%\TUPBM\J13131.ETL
%HOMEPATH%\TUPBM\N15719.SLK
%HOMEPATH%\TUPBM\Y8128.QBH
%HOMEPATH%\TUPBM\98443.GPS
%HOMEPATH%\TUPBM\C39547.LEP
%HOMEPATH%\TUPBM\65713.THT
%HOMEPATH%\TUPBM\F60786.QWE
%HOMEPATH%\TUPBM\M85192.HOI
%HOMEPATH%\TUPBM\E28183.GED
%HOMEPATH%\TUPBM\86530.LDN
%HOMEPATH%\TUPBM\42941.KUT
%HOMEPATH%\TUPBM\T33047.FFY
%HOMEPATH%\TUPBM\34511.HAX
%HOMEPATH%\TUPBM\J19939.MYD
%HOMEPATH%\TUPBM\J79309.YYV
%HOMEPATH%\TUPBM\77650.KIX
%HOMEPATH%\TUPBM\X16169.LDD
%HOMEPATH%\TUPBM\H85659.JFX
%HOMEPATH%\TUPBM\R46554.ZHU
%HOMEPATH%\TUPBM\92246.AOT
%HOMEPATH%\TUPBM\77295.BNI
%HOMEPATH%\TUPBM\Y69507.BXB
%HOMEPATH%\TUPBM\78888.ZKV
%HOMEPATH%\TUPBM\M81158.KMI
%HOMEPATH%\TUPBM\H83517.KRY
%HOMEPATH%\TUPBM\9877.LGN
%HOMEPATH%\TUPBM\H75665.EHG
%HOMEPATH%\TUPBM\7153.PDX
%HOMEPATH%\TUPBM\53734.MKY
%HOMEPATH%\TUPBM\X95558.KYV
%HOMEPATH%\TUPBM\89152.MDJ
%HOMEPATH%\TUPBM\58444.NHX
%HOMEPATH%\TUPBM\X80587.DNO
%HOMEPATH%\TUPBM\K95413.DLE
%HOMEPATH%\TUPBM\92421.ZQD
%HOMEPATH%\TUPBM\91474.MZY
%HOMEPATH%\TUPBM\J17269.DGR
%HOMEPATH%\TUPBM\76623.GUM
%HOMEPATH%\TUPBM\17656.OCN
%HOMEPATH%\TUPBM\62188.LGO
%HOMEPATH%\TUPBM\72301.EFG
%HOMEPATH%\TUPBM\Z72813.ZMB
%HOMEPATH%\TUPBM\82267.CTD
%HOMEPATH%\TUPBM\86175.LKD
%HOMEPATH%\TUPBM\41461.MTX
%HOMEPATH%\TUPBM\L51472.WQP
%HOMEPATH%\TUPBM\T63866.OXJ
%HOMEPATH%\TUPBM\F8954.EOQ
%HOMEPATH%\TUPBM\V27648.EEK
%HOMEPATH%\TUPBM\O65183.WXL
%HOMEPATH%\TUPBM\7065.EXM
%HOMEPATH%\TUPBM\S1228.FEU
%HOMEPATH%\TUPBM\35841.TER
%HOMEPATH%\TUPBM\8695.UWY
%HOMEPATH%\TUPBM\X70506.QOQ
%HOMEPATH%\TUPBM\48692.OGZ
%HOMEPATH%\TUPBM\N92416.SEG
%HOMEPATH%\TUPBM\37906.OVI
%HOMEPATH%\TUPBM\M90911.SOO
%HOMEPATH%\TUPBM\Q57967.LSA
%HOMEPATH%\TUPBM\41376.WHO
%HOMEPATH%\TUPBM\G30703.FTJ
%HOMEPATH%\TUPBM\66809.VGP
%HOMEPATH%\TUPBM\27791.YQE
%HOMEPATH%\TUPBM\28981.RUP
%HOMEPATH%\TUPBM\64113.VFB
%HOMEPATH%\TUPBM\98769.CTL
%HOMEPATH%\TUPBM\E13295.WHL
%HOMEPATH%\TUPBM\J74057.MCO
%HOMEPATH%\TUPBM\97398.QJA
%HOMEPATH%\TUPBM\46282.HNT
%HOMEPATH%\TUPBM\31749.VMZ
%HOMEPATH%\TUPBM\61002.IAY
%HOMEPATH%\TUPBM\W16995.YYB
%HOMEPATH%\TUPBM\37984.DXY
%HOMEPATH%\TUPBM\44963.PNO
%HOMEPATH%\TUPBM\70654.QYC
%HOMEPATH%\TUPBM\75426.RCV
%HOMEPATH%\TUPBM\12043.HQG
%HOMEPATH%\TUPBM\2378.PVO
%HOMEPATH%\TUPBM\G86207.OUA
%HOMEPATH%\TUPBM\14043.KVX
%HOMEPATH%\TUPBM\92048.MIX
%HOMEPATH%\TUPBM\97398.TWG
%HOMEPATH%\TUPBM\J40169.XVG
%HOMEPATH%\TUPBM\T39359.EJU
%HOMEPATH%\TUPBM\9864.MWV
%HOMEPATH%\TUPBM\84068.XKA
%HOMEPATH%\TUPBM\T71855.PHS
%HOMEPATH%\TUPBM\21457.SHH
%HOMEPATH%\TUPBM\C80736.JUD
%HOMEPATH%\TUPBM\51546.VCX
%HOMEPATH%\TUPBM\V15718.QKC
%HOMEPATH%\TUPBM\Z23323.NGJ
%HOMEPATH%\TUPBM\84724.FVQ
%HOMEPATH%\TUPBM\51470.IRX
%HOMEPATH%\TUPBM\92684.IBQ
%HOMEPATH%\TUPBM\88168.LCE
%HOMEPATH%\TUPBM\G26117.URE
%HOMEPATH%\TUPBM\Y73555.AOV
%HOMEPATH%\TUPBM\L83004.HLG
%HOMEPATH%\TUPBM\6739.ISS
%HOMEPATH%\TUPBM\11603.UEA
%HOMEPATH%\TUPBM\18999.FPW
%HOMEPATH%\TUPBM\H93450.AQC
%HOMEPATH%\TUPBM\41628.DTZ
%HOMEPATH%\TUPBM\A9208.JUJ
%HOMEPATH%\TUPBM\80328.WMX
%HOMEPATH%\TUPBM\46999.DPE
%HOMEPATH%\TUPBM\27409.OUZ
%HOMEPATH%\TUPBM\Q27827.CTR
%HOMEPATH%\TUPBM\N51965.ZWO
%HOMEPATH%\TUPBM\S54560.RIG
%HOMEPATH%\TUPBM\76638.KEV
%HOMEPATH%\TUPBM\53467.BKS
%HOMEPATH%\TUPBM\52940.ISI
%HOMEPATH%\TUPBM\73542.HKJ
%HOMEPATH%\TUPBM\K60681.ZME
%HOMEPATH%\TUPBM\43899.CHA
%HOMEPATH%\TUPBM\E33672.DHT
%HOMEPATH%\TUPBM\P97546.IWS
%HOMEPATH%\TUPBM\2816.RBY
%HOMEPATH%\TUPBM\48714.EIO
%HOMEPATH%\TUPBM\65610.CWJ
%HOMEPATH%\TUPBM\Z46583.HRR
%HOMEPATH%\TUPBM\W41531.EXF
%HOMEPATH%\TUPBM\A53871.TVI
%HOMEPATH%\TUPBM\53051.ABL
%HOMEPATH%\TUPBM\16245.LMR
%HOMEPATH%\TUPBM\L92410.LAP
%HOMEPATH%\TUPBM\B57179.OYR
%HOMEPATH%\TUPBM\T74047.QPY
%HOMEPATH%\TUPBM\I77066.CAD
%HOMEPATH%\TUPBM\34340.FIM
%HOMEPATH%\TUPBM\53943.OOE
%HOMEPATH%\TUPBM\H65720.RXW
%HOMEPATH%\TUPBM\J40449.FPM
%HOMEPATH%\TUPBM\34772.AMF
%HOMEPATH%\TUPBM\F14935.UCA
%HOMEPATH%\TUPBM\Y33034.QSS
%HOMEPATH%\TUPBM\71992.VLQ
%HOMEPATH%\TUPBM\67752.XRC
%HOMEPATH%\TUPBM\O26245.JUT
%HOMEPATH%\TUPBM\Z62213.ZFL
%HOMEPATH%\TUPBM\64583.LEZ
%HOMEPATH%\TUPBM\X90450.HEP
%HOMEPATH%\TUPBM\J26391.NEA
%HOMEPATH%\TUPBM\J4770.TLF
%HOMEPATH%\TUPBM\Z55572.ZZW
%HOMEPATH%\TUPBM\I64106.NHT

Удаляет следующие файлы:

%HOMEPATH%\TUPBM\YPVUBMXZ.dat

Сетевая активность:

Подключается к:

'in###ious.pw':80
'wp#d':80

TCP:

Запросы HTTP GET:

in###ious.pw/ltcfiles/libcurl-4.dll
in###ious.pw/ltcfiles/pthreadGC2.dll
wp#d/wpad.dat
in###ious.pw/ltcfiles/minerd.exe

UDP:

DNS ASK in###ious.pw
DNS ASK wp#d

Другое:

Ищет следующие окна:

ClassName: 'Indicator' WindowName: '(null)'
ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'EDIT' WindowName: '(null)'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней