Trojan.DownLoader10.25748

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Adobe Flashplayer Updater' = '%TEMP%\adobeflashplayerguncel.exe'

Вредоносные функции:

Создает и запускает на исполнение:

'%HOMEPATH%\HLGWO\PWMWH.exe' XTUFORZF.dat
'%TEMP%\adobeguncel.exe'
'%TEMP%\RarSFX0\FlashPlayerGuncel.exe'
'%HOMEPATH%\HLGWO\PWMWH.exe' 80018.REY
'%TEMP%\adobeguncel.exe' (загружен из сети Интернет)

Запускает на исполнение:

'%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
'<SYSTEM32>\wscript.exe' "%HOMEPATH%\HLGWO\3562.vbs" 6743

Внедряет код в

следующие системные процессы:

%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

Завершает или пытается завершить

следующие пользовательские процессы:

chrome.exe

Изменения в файловой системе:

Создает следующие файлы:

%HOMEPATH%\HLGWO\70504.NJE
%HOMEPATH%\HLGWO\26128.LVZ
%HOMEPATH%\HLGWO\79727.NYX
%HOMEPATH%\HLGWO\N27438.SSA
%HOMEPATH%\HLGWO\V15184.WMA
%HOMEPATH%\HLGWO\78790.IDQ
%HOMEPATH%\HLGWO\33555.YJC
%HOMEPATH%\HLGWO\9368.XZH
%HOMEPATH%\HLGWO\3854.ZJU
%HOMEPATH%\HLGWO\L7334.RXV
%HOMEPATH%\HLGWO\Q71450.OAL
%HOMEPATH%\HLGWO\6317.YFQ
%HOMEPATH%\HLGWO\6057.FKR
%HOMEPATH%\HLGWO\P2441.STL
%HOMEPATH%\HLGWO\24177.SOM
%HOMEPATH%\HLGWO\81490.NDM
%HOMEPATH%\HLGWO\33221.FRN
%HOMEPATH%\HLGWO\O11715.XAW
%HOMEPATH%\HLGWO\V39096.CQT
%HOMEPATH%\HLGWO\1128.POI
%HOMEPATH%\HLGWO\99528.IJG
%HOMEPATH%\HLGWO\N18643.BOG
%HOMEPATH%\HLGWO\20519.GXT
%HOMEPATH%\HLGWO\79394.DCU
%HOMEPATH%\HLGWO\12732.UGD
%HOMEPATH%\HLGWO\H10476.LKT
%HOMEPATH%\HLGWO\76140.XFL
%HOMEPATH%\HLGWO\J81760.VSN
%HOMEPATH%\HLGWO\R67012.RAA
%HOMEPATH%\HLGWO\64652.JUQ
%HOMEPATH%\HLGWO\82807.GHG
%HOMEPATH%\HLGWO\H22745.PCD
%HOMEPATH%\HLGWO\62956.KNK
%HOMEPATH%\HLGWO\65451.KSY
%HOMEPATH%\HLGWO\V43488.TUC
%HOMEPATH%\HLGWO\V67865.MWL
%HOMEPATH%\HLGWO\13642.SGE
%HOMEPATH%\HLGWO\15887.KYZ
%HOMEPATH%\HLGWO\14460.KVJ
%HOMEPATH%\HLGWO\I58255.PGU
%HOMEPATH%\HLGWO\Q54159.NYY
%HOMEPATH%\HLGWO\U62704.KCP
%HOMEPATH%\HLGWO\D37870.QBP
%HOMEPATH%\HLGWO\T37356.WLP
%HOMEPATH%\HLGWO\99484.SYD
%HOMEPATH%\HLGWO\70447.NSV
%HOMEPATH%\HLGWO\X21783.GYN
%HOMEPATH%\HLGWO\40580.CNB
%HOMEPATH%\HLGWO\32681.FKG
%HOMEPATH%\HLGWO\78725.DKX
%HOMEPATH%\HLGWO\Q96702.JHS
%HOMEPATH%\HLGWO\P87032.RFE
%HOMEPATH%\HLGWO\M38100.QAM
%HOMEPATH%\HLGWO\57422.TJG
%HOMEPATH%\HLGWO\64336.OBK
%HOMEPATH%\HLGWO\Z66456.XNC
%HOMEPATH%\HLGWO\R35984.CTR
%HOMEPATH%\HLGWO\66329.RAE
%HOMEPATH%\HLGWO\33491.GMR
%HOMEPATH%\HLGWO\E73848.NBD
%HOMEPATH%\HLGWO\M2032.RBH
%HOMEPATH%\HLGWO\46533.IAW
%HOMEPATH%\HLGWO\G60961.GKZ
%HOMEPATH%\HLGWO\26114.OGF
%HOMEPATH%\HLGWO\Y92755.XNO
%HOMEPATH%\HLGWO\82499.MHU
%HOMEPATH%\HLGWO\V8420.EGZ
%HOMEPATH%\HLGWO\22789.OMS
%HOMEPATH%\HLGWO\A98625.AER
%HOMEPATH%\HLGWO\H54206.JOU
%HOMEPATH%\HLGWO\D89727.BRK
%HOMEPATH%\HLGWO\I26753.NPG
%HOMEPATH%\HLGWO\99350.KFT
%HOMEPATH%\HLGWO\52905.ELP
%HOMEPATH%\HLGWO\93588.HZG
%HOMEPATH%\HLGWO\12626.ZTW
%HOMEPATH%\HLGWO\C82272.CPL
%HOMEPATH%\HLGWO\11467.YWN
%HOMEPATH%\HLGWO\T48265.BZN
%HOMEPATH%\HLGWO\E91027.PYI
%HOMEPATH%\HLGWO\K69066.WIN
%HOMEPATH%\HLGWO\44697.TTU
%HOMEPATH%\HLGWO\93339.AVZ
%HOMEPATH%\HLGWO\M32807.HNQ
%HOMEPATH%\HLGWO\N47473.DUP
%HOMEPATH%\HLGWO\67490.MPA
%HOMEPATH%\HLGWO\O42130.TIF
%HOMEPATH%\HLGWO\77946.PYY
%HOMEPATH%\HLGWO\T27997.FVE
%HOMEPATH%\HLGWO\4680.JKS
%HOMEPATH%\HLGWO\51408.YIZ
%HOMEPATH%\HLGWO\S12327.XJH
%HOMEPATH%\HLGWO\R18431.RPI
%HOMEPATH%\HLGWO\V18170.PFT
%HOMEPATH%\HLGWO\99612.ROF
%HOMEPATH%\HLGWO\96247.SIN
%HOMEPATH%\HLGWO\46781.JLH
%HOMEPATH%\HLGWO\88122.CAF
%HOMEPATH%\HLGWO\Y50582.OHP
%HOMEPATH%\HLGWO\V47737.MKQ
%HOMEPATH%\HLGWO\7921.LTI
%HOMEPATH%\HLGWO\24319.QDM
%HOMEPATH%\HLGWO\A38544.ZUI
%HOMEPATH%\HLGWO\29436.UVE
%HOMEPATH%\HLGWO\J29103.ZJX
%HOMEPATH%\HLGWO\Q21388.KLN
%HOMEPATH%\HLGWO\28649.JXQ
%HOMEPATH%\HLGWO\Q55854.QAD
%HOMEPATH%\HLGWO\H99642.ZWR
%HOMEPATH%\HLGWO\64732.DQO
%HOMEPATH%\HLGWO\Q22324.THH
%HOMEPATH%\HLGWO\78881.SSN
%HOMEPATH%\HLGWO\C77523.BQY
%HOMEPATH%\HLGWO\Z65782.BOY
%HOMEPATH%\HLGWO\M62088.XSU
%HOMEPATH%\HLGWO\99002.XVH
%HOMEPATH%\HLGWO\G33849.RNJ
%HOMEPATH%\HLGWO\W86393.YGT
%HOMEPATH%\HLGWO\61340.SRI
%HOMEPATH%\HLGWO\6844.UYX
%HOMEPATH%\HLGWO\26653.OZO
%HOMEPATH%\HLGWO\28057.PKK
%HOMEPATH%\HLGWO\35351.MMG
%HOMEPATH%\HLGWO\J59062.VZS
%HOMEPATH%\HLGWO\B10999.WDX
%HOMEPATH%\HLGWO\M81266.NXC
%HOMEPATH%\HLGWO\V14964.SQM
%HOMEPATH%\HLGWO\39627.URS
%HOMEPATH%\HLGWO\63993.SZO
%HOMEPATH%\HLGWO\Q98939.IKF
%HOMEPATH%\HLGWO\8781.AHF
%HOMEPATH%\HLGWO\76740.QLO
%HOMEPATH%\HLGWO\80536.DKG
%HOMEPATH%\HLGWO\27544.CEJ
%HOMEPATH%\HLGWO\T69321.JPY
%HOMEPATH%\HLGWO\82024.TTZ
%HOMEPATH%\HLGWO\38753.BFD
%HOMEPATH%\HLGWO\H54742.BIF
%HOMEPATH%\HLGWO\32275.VCI
%HOMEPATH%\HLGWO\L65857.BSO
%HOMEPATH%\HLGWO\K14333.ZTT
%HOMEPATH%\HLGWO\66417.JJT
%HOMEPATH%\HLGWO\91923.FPC
%HOMEPATH%\HLGWO\J1785.LLX
%HOMEPATH%\HLGWO\P62244.ZSB
%HOMEPATH%\HLGWO\L84646.YPG
%HOMEPATH%\HLGWO\63894.XLA
%HOMEPATH%\HLGWO\B32009.DRM
%HOMEPATH%\HLGWO\C19028.QOG
%HOMEPATH%\HLGWO\16836.YTV
%HOMEPATH%\HLGWO\64132.DZT
%HOMEPATH%\HLGWO\40233.UJV
%HOMEPATH%\HLGWO\D76601.KPP
%HOMEPATH%\HLGWO\U33621.LLY
%HOMEPATH%\HLGWO\22995.ARV
%HOMEPATH%\HLGWO\89395.BLI
%HOMEPATH%\HLGWO\87107.SLV
%HOMEPATH%\HLGWO\X74009.NGR
%HOMEPATH%\HLGWO\Y81466.CBU
%HOMEPATH%\HLGWO\G71630.KFT
%HOMEPATH%\HLGWO\U3136.CFO
%HOMEPATH%\HLGWO\34475.AYB
%HOMEPATH%\HLGWO\74361.VPM
%HOMEPATH%\HLGWO\81931.WMP
%HOMEPATH%\HLGWO\N78250.LTQ
%HOMEPATH%\HLGWO\I35007.NPE
%HOMEPATH%\HLGWO\N80021.RMH
%HOMEPATH%\HLGWO\S27995.TEX
%HOMEPATH%\HLGWO\N50827.XKF
%HOMEPATH%\HLGWO\14111.WSA
%HOMEPATH%\HLGWO\70584.YFA
%HOMEPATH%\HLGWO\76243.FIH
%HOMEPATH%\HLGWO\W48283.VKT
%HOMEPATH%\HLGWO\81906.JBX
%HOMEPATH%\HLGWO\E55667.KLO
%HOMEPATH%\HLGWO\7752.WQJ
%HOMEPATH%\HLGWO\P83611.NVU
%HOMEPATH%\HLGWO\X41650.LKO
%HOMEPATH%\HLGWO\D21041.OFF
%HOMEPATH%\HLGWO\F74047.YKH
%HOMEPATH%\HLGWO\W6516.YGX
%HOMEPATH%\HLGWO\80341.DUB
%HOMEPATH%\HLGWO\B13152.TXX
%HOMEPATH%\HLGWO\N41869.GEU
%HOMEPATH%\HLGWO\Y29908.VCU
%HOMEPATH%\HLGWO\91885.FTY
%HOMEPATH%\HLGWO\40387.KBG
%HOMEPATH%\HLGWO\76123.ZLQ
%HOMEPATH%\HLGWO\U82175.HGQ
%HOMEPATH%\HLGWO\40629.YBA
%HOMEPATH%\HLGWO\O56350.CVR
%HOMEPATH%\HLGWO\R62993.FWV
%HOMEPATH%\HLGWO\Z68894.QZM
%HOMEPATH%\HLGWO\78494.YVE
%TEMP%\Extensions\Preferences
%TEMP%\Extensions\manifest.json
%TEMP%\adobeguncel.exe
%TEMP%\adobeflashplayerguncel.exe
%TEMP%\Extensions\script.js
%TEMP%\Extensions\background.js
%HOMEPATH%\HLGWO\XTUFORZF.dat
%TEMP%\Extensions\jquery-1.9.1.min.js
%TEMP%\Extensions\icon.png
%HOMEPATH%\HLGWO\C56603.LTO
%HOMEPATH%\HLGWO\D25585.PDY
%HOMEPATH%\HLGWO\19723.QIR
%HOMEPATH%\HLGWO\G31630.BXR
%HOMEPATH%\HLGWO\41880.AZZ
%HOMEPATH%\HLGWO\44465.NUJ
%HOMEPATH%\HLGWO\C3481.QWC
%HOMEPATH%\HLGWO\22475.FAY
%HOMEPATH%\HLGWO\J47387.JSW
%HOMEPATH%\HLGWO\68143.QFG
%HOMEPATH%\HLGWO\67801.ZSP
%HOMEPATH%\HLGWO\56125.KFP
%HOMEPATH%\HLGWO\28600.VNV
%HOMEPATH%\HLGWO\76464.CXF
%HOMEPATH%\HLGWO\88610.APC
%HOMEPATH%\HLGWO\90013.XAO
%HOMEPATH%\HLGWO\V76566.IOZ
%HOMEPATH%\HLGWO\10617.RQN
%HOMEPATH%\HLGWO\20160.CYX
%HOMEPATH%\HLGWO\P40406.SAI
%HOMEPATH%\HLGWO\X14681.PCN
%HOMEPATH%\HLGWO\14543.MHA
%HOMEPATH%\HLGWO\90050.HGA
%HOMEPATH%\HLGWO\B47084.FJB
%HOMEPATH%\HLGWO\47985.VMA
%HOMEPATH%\HLGWO\R36249.FPS
%HOMEPATH%\HLGWO\C60852.PGP
%HOMEPATH%\HLGWO\E63986.TBI
%HOMEPATH%\HLGWO\96316.EBD
%HOMEPATH%\HLGWO\E4670.AID
%HOMEPATH%\HLGWO\99375.TRT
%HOMEPATH%\HLGWO\O54058.IRT
%HOMEPATH%\HLGWO\S60410.ZLT
%HOMEPATH%\HLGWO\I88357.ZGS
%HOMEPATH%\HLGWO\28772.KYO
%HOMEPATH%\HLGWO\79120.GQH
%HOMEPATH%\HLGWO\K52901.BYM
%HOMEPATH%\HLGWO\69081.XMC
%HOMEPATH%\HLGWO\25570.SXA
%HOMEPATH%\HLGWO\39839.DQZ
%HOMEPATH%\HLGWO\Q76579.LQD
%HOMEPATH%\HLGWO\81966.UNU
%HOMEPATH%\HLGWO\R20132.BNU
%HOMEPATH%\HLGWO\W12319.NSH
%HOMEPATH%\HLGWO\3721.UYB
%HOMEPATH%\HLGWO\B66758.XHT
%HOMEPATH%\HLGWO\P90674.NBI
%HOMEPATH%\HLGWO\12253.AXF
%HOMEPATH%\HLGWO\Q20106.CWB
%HOMEPATH%\HLGWO\S21475.JFR
%HOMEPATH%\HLGWO\G9784.THD
%HOMEPATH%\HLGWO\M67098.ZLQ
%HOMEPATH%\HLGWO\O79462.JDT
%HOMEPATH%\HLGWO\51422.FEP
%HOMEPATH%\HLGWO\M96159.LJL
%HOMEPATH%\HLGWO\51643.QBD
%HOMEPATH%\HLGWO\40943.WXJ
%HOMEPATH%\HLGWO\C24809.IUB
%HOMEPATH%\HLGWO\58184.QQF
%HOMEPATH%\HLGWO\N31426.NKB
%HOMEPATH%\HLGWO\D11562.AHM
%HOMEPATH%\HLGWO\31842.KSY
%HOMEPATH%\HLGWO\43065.VUV
%HOMEPATH%\HLGWO\93093.SNG
%HOMEPATH%\HLGWO\36581.RLN
%HOMEPATH%\HLGWO\F70395.JSF
%HOMEPATH%\HLGWO\G93398.KYV
%HOMEPATH%\HLGWO\A85860.EFF
%HOMEPATH%\HLGWO\24114.RTK
%HOMEPATH%\HLGWO\61104.OLM
%HOMEPATH%\HLGWO\19881.GZI
%HOMEPATH%\HLGWO\F10508.PRQ
%HOMEPATH%\HLGWO\67696.QWH
%HOMEPATH%\HLGWO\R11251.HUC
%HOMEPATH%\HLGWO\38279.MRP
%HOMEPATH%\HLGWO\68127.QRD
%HOMEPATH%\HLGWO\H65806.JHY
%HOMEPATH%\HLGWO\M47928.TOG
%HOMEPATH%\HLGWO\S30224.ROO
%HOMEPATH%\HLGWO\C99019.DAV
%HOMEPATH%\HLGWO\65337.JXU
%HOMEPATH%\HLGWO\L18313.FZB
%HOMEPATH%\HLGWO\U6114.XHI
%HOMEPATH%\HLGWO\80247.ERU
%HOMEPATH%\HLGWO\T40765.TZJ
%HOMEPATH%\HLGWO\S8595.EIM
%HOMEPATH%\HLGWO\V94994.MKZ
%HOMEPATH%\HLGWO\C65166.GGN
%HOMEPATH%\HLGWO\97876.KXX
%HOMEPATH%\HLGWO\N95527.XCH
%HOMEPATH%\HLGWO\X30269.IAG
%HOMEPATH%\HLGWO\X28886.VDK
%HOMEPATH%\HLGWO\G2728.ONZ
%HOMEPATH%\HLGWO\K98519.EBP
%HOMEPATH%\HLGWO\M39474.BTS
%HOMEPATH%\HLGWO\C65173.JVF
%HOMEPATH%\HLGWO\G73630.SNS
%HOMEPATH%\HLGWO\23235.CMN
%HOMEPATH%\HLGWO\A44736.SSL
%HOMEPATH%\HLGWO\M64751.ALR
%HOMEPATH%\HLGWO\U39235.WYZ
%HOMEPATH%\HLGWO\49380.GEG
%HOMEPATH%\HLGWO\1745.JSE
%HOMEPATH%\HLGWO\G91066.QUV
%HOMEPATH%\HLGWO\A84926.CDX
%HOMEPATH%\HLGWO\39284.URC
%HOMEPATH%\HLGWO\V27697.GQW
%HOMEPATH%\HLGWO\91331.LSF
%HOMEPATH%\HLGWO\39895.MFE
%HOMEPATH%\HLGWO\15409.PCA
%HOMEPATH%\HLGWO\77592.QAI
%HOMEPATH%\HLGWO\P85741.AUQ
%HOMEPATH%\HLGWO\69470.GOZ
%HOMEPATH%\HLGWO\S26728.RSE
%HOMEPATH%\HLGWO\R80663.IPM
%HOMEPATH%\HLGWO\A68286.DJA
%HOMEPATH%\HLGWO\4945.KOG
%HOMEPATH%\HLGWO\40602.HIY
%HOMEPATH%\HLGWO\A58052.EWJ
%HOMEPATH%\HLGWO\W85099.WOM
%HOMEPATH%\HLGWO\36312.MZB
%HOMEPATH%\HLGWO\C30321.QXP
%HOMEPATH%\HLGWO\64382.RPB
%HOMEPATH%\HLGWO\A5272.BAA
%HOMEPATH%\HLGWO\U27887.JHL
%HOMEPATH%\HLGWO\54912.XAH
%HOMEPATH%\HLGWO\X98019.GBQ
%HOMEPATH%\HLGWO\J69803.RRA
%HOMEPATH%\HLGWO\48804.EZM
%HOMEPATH%\HLGWO\U32412.KQQ
%HOMEPATH%\HLGWO\95715.AWY
%HOMEPATH%\HLGWO\Y16105.LGQ
%HOMEPATH%\HLGWO\P69085.ARM
%HOMEPATH%\HLGWO\K30375.NLU
%HOMEPATH%\HLGWO\31238.ZXG
%HOMEPATH%\HLGWO\N51990.OTT
%HOMEPATH%\HLGWO\N32398.XWD
%HOMEPATH%\HLGWO\57791.NTO
%HOMEPATH%\HLGWO\47461.XCZ
%HOMEPATH%\HLGWO\M36188.AAK
%HOMEPATH%\HLGWO\93519.ZMU
%HOMEPATH%\HLGWO\49674.PNW
%HOMEPATH%\HLGWO\72123.KRK
%HOMEPATH%\HLGWO\C1218.KZZ
%HOMEPATH%\HLGWO\Y64196.CXC
%HOMEPATH%\HLGWO\F52189.JAV
%HOMEPATH%\HLGWO\68710.CLV
%HOMEPATH%\HLGWO\F13465.WJR
%HOMEPATH%\HLGWO\84631.XMV
%HOMEPATH%\HLGWO\93710.HQW
%HOMEPATH%\HLGWO\52140.RFU
%HOMEPATH%\HLGWO\K8898.FQC
%HOMEPATH%\HLGWO\2886.DTE
%HOMEPATH%\HLGWO\11729.NZR
%HOMEPATH%\HLGWO\80252.KOV
%HOMEPATH%\HLGWO\M23548.UKZ
%HOMEPATH%\HLGWO\84841.JDN
%HOMEPATH%\HLGWO\F15054.RFF
%HOMEPATH%\HLGWO\Z30050.GIE
%HOMEPATH%\HLGWO\28327.SGA
%HOMEPATH%\HLGWO\10605.PGG
%HOMEPATH%\HLGWO\56729.YUN
%HOMEPATH%\HLGWO\5689.PBX
%HOMEPATH%\HLGWO\57448.SST
%HOMEPATH%\HLGWO\N96625.KSF
%HOMEPATH%\HLGWO\Y68981.SYH
%HOMEPATH%\HLGWO\54580.LRZ
%HOMEPATH%\HLGWO\93501.LTR
%HOMEPATH%\HLGWO\46087.NMA
%HOMEPATH%\HLGWO\8369.YZM
%HOMEPATH%\HLGWO\Q20239.APE
%HOMEPATH%\HLGWO\64163.VCT
%HOMEPATH%\HLGWO\S47659.ZVP
%HOMEPATH%\HLGWO\72285.BEH
%HOMEPATH%\HLGWO\R18288.XWH
%HOMEPATH%\HLGWO\Q95638.OXO
%HOMEPATH%\HLGWO\O79515.LFB
%HOMEPATH%\HLGWO\52389.OHD
%HOMEPATH%\HLGWO\M25671.IKC
%HOMEPATH%\HLGWO\6125.NTJ
%HOMEPATH%\HLGWO\B40281.NUS
%HOMEPATH%\HLGWO\31923.AYZ
%HOMEPATH%\HLGWO\C87558.ZGM
%HOMEPATH%\HLGWO\N48475.PHL
%HOMEPATH%\HLGWO\3562.vbs
%HOMEPATH%\HLGWO\settings.ini
%HOMEPATH%\HLGWO\B11050.TJO
%HOMEPATH%\HLGWO\59183.DCG
%HOMEPATH%\HLGWO\PWMWH.exe
%HOMEPATH%\HLGWO\80018.REY
%TEMP%\RarSFX0\FlashPlayerGuncel.exe
%HOMEPATH%\HLGWO\534848.dat
%HOMEPATH%\HLGWO\382176.dat
%HOMEPATH%\HLGWO\M60135.OSF
%HOMEPATH%\HLGWO\H68478.PBV
%HOMEPATH%\HLGWO\37002.XEQ
%HOMEPATH%\HLGWO\Z50789.GMZ
%HOMEPATH%\HLGWO\P57308.XIY
%HOMEPATH%\HLGWO\O31912.YAF
%HOMEPATH%\HLGWO\J14742.RYW
%HOMEPATH%\HLGWO\57690.HMX
%HOMEPATH%\HLGWO\19489.LBJ
%HOMEPATH%\HLGWO\V38142.JZS
%HOMEPATH%\HLGWO\94727.EFI
%HOMEPATH%\HLGWO\D76698.XQZ
%HOMEPATH%\HLGWO\63914.TMM
%HOMEPATH%\HLGWO\Q84147.CUL
%HOMEPATH%\HLGWO\S95219.VJD
%HOMEPATH%\HLGWO\F44585.SJD
%HOMEPATH%\HLGWO\91902.MGY
%HOMEPATH%\HLGWO\30604.TNC
%HOMEPATH%\HLGWO\30075.OQQ
%HOMEPATH%\HLGWO\I52265.KPU
%HOMEPATH%\HLGWO\89671.VMB
%HOMEPATH%\HLGWO\31046.NSU
%HOMEPATH%\HLGWO\47254.POX
%HOMEPATH%\HLGWO\66172.DUJ
%HOMEPATH%\HLGWO\F67258.GRB
%HOMEPATH%\HLGWO\27561.WMJ
%HOMEPATH%\HLGWO\85371.NBW
%HOMEPATH%\HLGWO\O54750.LXM
%HOMEPATH%\HLGWO\76987.EKX
%HOMEPATH%\HLGWO\27270.PZU
%HOMEPATH%\HLGWO\63099.QYB
%HOMEPATH%\HLGWO\91206.QHX
%HOMEPATH%\HLGWO\A96886.UYG
%HOMEPATH%\HLGWO\Q7923.XWN
%HOMEPATH%\HLGWO\22567.PGR
%HOMEPATH%\HLGWO\X35529.UUS
%HOMEPATH%\HLGWO\62903.OBU
%HOMEPATH%\HLGWO\Q99436.YCW
%HOMEPATH%\HLGWO\H67272.JJB
%HOMEPATH%\HLGWO\90557.CPN
%HOMEPATH%\HLGWO\42691.KVQ
%HOMEPATH%\HLGWO\M15852.CTP
%HOMEPATH%\HLGWO\A95121.MHS
%HOMEPATH%\HLGWO\6916.CJW
%HOMEPATH%\HLGWO\N48876.SGW
%HOMEPATH%\HLGWO\78625.NDI
%HOMEPATH%\HLGWO\L26557.FNG
%HOMEPATH%\HLGWO\A39995.RFD
%HOMEPATH%\HLGWO\15271.VUP
%HOMEPATH%\HLGWO\27425.AWC
%HOMEPATH%\HLGWO\C4235.OWV
%HOMEPATH%\HLGWO\Q47941.PFI
%HOMEPATH%\HLGWO\13231.GRX
%HOMEPATH%\HLGWO\18237.YYH
%HOMEPATH%\HLGWO\F42349.XYF
%HOMEPATH%\HLGWO\43318.TJN
%HOMEPATH%\HLGWO\Z60562.BXL
%HOMEPATH%\HLGWO\15449.GLP
%HOMEPATH%\HLGWO\D12324.CHH
%HOMEPATH%\HLGWO\41955.JLY
%HOMEPATH%\HLGWO\H15462.LWJ
%HOMEPATH%\HLGWO\I95065.WVT
%HOMEPATH%\HLGWO\X7634.CMS
%HOMEPATH%\HLGWO\66855.HZC
%HOMEPATH%\HLGWO\F22291.BDC
%HOMEPATH%\HLGWO\63836.ZTQ
%HOMEPATH%\HLGWO\D36142.DWN
%HOMEPATH%\HLGWO\P25308.GQH
%HOMEPATH%\HLGWO\V59867.MZR
%HOMEPATH%\HLGWO\D69337.GOU
%HOMEPATH%\HLGWO\59284.FRR
%HOMEPATH%\HLGWO\V6546.IUK
%HOMEPATH%\HLGWO\40475.GSV
%HOMEPATH%\HLGWO\T85075.GAG
%HOMEPATH%\HLGWO\66316.AFI
%HOMEPATH%\HLGWO\51662.TVB
%HOMEPATH%\HLGWO\J78628.HHU
%HOMEPATH%\HLGWO\A39291.VXE
%HOMEPATH%\HLGWO\60886.STB
%HOMEPATH%\HLGWO\T97883.OLN
%HOMEPATH%\HLGWO\A52438.JXZ
%HOMEPATH%\HLGWO\66977.KCS
%HOMEPATH%\HLGWO\43307.CGX
%HOMEPATH%\HLGWO\Y77431.SHS
%HOMEPATH%\HLGWO\55351.KTX
%HOMEPATH%\HLGWO\51769.LJF
%HOMEPATH%\HLGWO\M84694.FHB
%HOMEPATH%\HLGWO\R46834.PGR
%HOMEPATH%\HLGWO\S52677.UBD
%HOMEPATH%\HLGWO\8085.NTB
%HOMEPATH%\HLGWO\T95051.FEJ
%HOMEPATH%\HLGWO\95455.DWZ
%HOMEPATH%\HLGWO\U25654.DEC
%HOMEPATH%\HLGWO\U25781.DYQ
%HOMEPATH%\HLGWO\Q11546.IHF
%HOMEPATH%\HLGWO\U65482.VGM
%HOMEPATH%\HLGWO\J68479.SVB
%HOMEPATH%\HLGWO\E29331.CLE
%HOMEPATH%\HLGWO\Q6956.LYI
%HOMEPATH%\HLGWO\56932.KPT
%HOMEPATH%\HLGWO\K30619.RYM
%HOMEPATH%\HLGWO\Y19449.HPS
%HOMEPATH%\HLGWO\Z53234.GIH
%HOMEPATH%\HLGWO\96635.SPT
%HOMEPATH%\HLGWO\96104.YNJ
%HOMEPATH%\HLGWO\6572.JMF
%HOMEPATH%\HLGWO\45682.MBH
%HOMEPATH%\HLGWO\53516.QRL
%HOMEPATH%\HLGWO\H50309.NBX
%HOMEPATH%\HLGWO\51817.NLQ
%HOMEPATH%\HLGWO\47937.GTW
%HOMEPATH%\HLGWO\M12327.MSD
%HOMEPATH%\HLGWO\17258.AKL
%HOMEPATH%\HLGWO\54635.JBI
%HOMEPATH%\HLGWO\90677.TDD
%HOMEPATH%\HLGWO\65942.JZL
%HOMEPATH%\HLGWO\Z72586.RGQ
%HOMEPATH%\HLGWO\40891.OUI
%HOMEPATH%\HLGWO\B45106.XFH
%HOMEPATH%\HLGWO\R78041.OOA
%HOMEPATH%\HLGWO\G22502.FLK
%HOMEPATH%\HLGWO\44920.CPH
%HOMEPATH%\HLGWO\N79346.XCY
%HOMEPATH%\HLGWO\37053.CMQ
%HOMEPATH%\HLGWO\77909.LSI
%HOMEPATH%\HLGWO\11673.CUK
%HOMEPATH%\HLGWO\43050.OYN
%HOMEPATH%\HLGWO\62944.DAJ
%HOMEPATH%\HLGWO\A22136.XOQ
%HOMEPATH%\HLGWO\72462.GAJ
%HOMEPATH%\HLGWO\21512.FRB
%HOMEPATH%\HLGWO\94690.WGW
%HOMEPATH%\HLGWO\Q53955.FRL
%HOMEPATH%\HLGWO\42830.GFO
%HOMEPATH%\HLGWO\13727.RPZ
%HOMEPATH%\HLGWO\78701.VXU
%HOMEPATH%\HLGWO\32551.OSR
%HOMEPATH%\HLGWO\11147.TOF
%HOMEPATH%\HLGWO\83239.SLJ
%HOMEPATH%\HLGWO\84080.BOH
%HOMEPATH%\HLGWO\O89403.NKU
%HOMEPATH%\HLGWO\R50510.FZK
%HOMEPATH%\HLGWO\3651.CJA
%HOMEPATH%\HLGWO\O80729.DAI
%HOMEPATH%\HLGWO\97979.MOI
%HOMEPATH%\HLGWO\49934.FRJ
%HOMEPATH%\HLGWO\57826.OXC
%HOMEPATH%\HLGWO\N11761.UUT
%HOMEPATH%\HLGWO\H72281.YLH
%HOMEPATH%\HLGWO\97494.FLM
%HOMEPATH%\HLGWO\88238.RNC
%HOMEPATH%\HLGWO\H26364.QPA
%HOMEPATH%\HLGWO\L70368.CVS
%HOMEPATH%\HLGWO\36974.GFK
%HOMEPATH%\HLGWO\L97726.IUB
%HOMEPATH%\HLGWO\44781.GUB
%HOMEPATH%\HLGWO\W57046.QQR
%HOMEPATH%\HLGWO\R90179.OJA
%HOMEPATH%\HLGWO\E94283.TPQ
%HOMEPATH%\HLGWO\S37374.RNM
%HOMEPATH%\HLGWO\F81033.BJE
%HOMEPATH%\HLGWO\10437.HTA
%HOMEPATH%\HLGWO\25028.OXQ
%HOMEPATH%\HLGWO\91389.LSU
%HOMEPATH%\HLGWO\82221.XHL
%HOMEPATH%\HLGWO\55238.OAV
%HOMEPATH%\HLGWO\47007.GJC
%HOMEPATH%\HLGWO\50263.MZI
%HOMEPATH%\HLGWO\V92189.WXC
%HOMEPATH%\HLGWO\26813.QSK
%HOMEPATH%\HLGWO\71261.ERH
%HOMEPATH%\HLGWO\B33063.NLA
%HOMEPATH%\HLGWO\42834.LQC
%HOMEPATH%\HLGWO\50556.NYW
%HOMEPATH%\HLGWO\V74709.LEI
%HOMEPATH%\HLGWO\U62174.ETI
%HOMEPATH%\HLGWO\67010.OKY
%HOMEPATH%\HLGWO\M12296.YOC
%HOMEPATH%\HLGWO\93893.BIJ
%HOMEPATH%\HLGWO\R48862.GHO
%HOMEPATH%\HLGWO\W50639.SFP
%HOMEPATH%\HLGWO\V82573.UHM
%HOMEPATH%\HLGWO\M61113.SUX
%HOMEPATH%\HLGWO\48321.RCH
%HOMEPATH%\HLGWO\M29909.FLD
%HOMEPATH%\HLGWO\82359.DJM
%HOMEPATH%\HLGWO\37292.REQ
%HOMEPATH%\HLGWO\19609.PRJ
%HOMEPATH%\HLGWO\S12356.TLE
%HOMEPATH%\HLGWO\Y23118.EJO
%HOMEPATH%\HLGWO\B47193.LVQ
%HOMEPATH%\HLGWO\K13687.SWP
%HOMEPATH%\HLGWO\T22417.PEI
%HOMEPATH%\HLGWO\97517.YKI

Присваивает атрибут 'скрытый' для следующих файлов:

%HOMEPATH%\HLGWO\78790.IDQ
%HOMEPATH%\HLGWO\33555.YJC
%HOMEPATH%\HLGWO\9368.XZH
%HOMEPATH%\HLGWO\3854.ZJU
%HOMEPATH%\HLGWO\64652.JUQ
%HOMEPATH%\HLGWO\R67012.RAA
%HOMEPATH%\HLGWO\H22745.PCD
%HOMEPATH%\HLGWO\82807.GHG
%HOMEPATH%\HLGWO\J81760.VSN
%HOMEPATH%\HLGWO\24177.SOM
%HOMEPATH%\HLGWO\81490.NDM
%HOMEPATH%\HLGWO\33221.FRN
%HOMEPATH%\HLGWO\O11715.XAW
%HOMEPATH%\HLGWO\79727.NYX
%HOMEPATH%\HLGWO\26128.LVZ
%HOMEPATH%\HLGWO\V15184.WMA
%HOMEPATH%\HLGWO\N27438.SSA
%HOMEPATH%\HLGWO\70504.NJE
%HOMEPATH%\HLGWO\79394.DCU
%HOMEPATH%\HLGWO\12732.UGD
%HOMEPATH%\HLGWO\H10476.LKT
%HOMEPATH%\HLGWO\76140.XFL
%HOMEPATH%\HLGWO\52905.ELP
%HOMEPATH%\HLGWO\26653.OZO
%HOMEPATH%\HLGWO\28057.PKK
%HOMEPATH%\HLGWO\35351.MMG
%HOMEPATH%\HLGWO\J59062.VZS
%HOMEPATH%\HLGWO\62956.KNK
%HOMEPATH%\HLGWO\65451.KSY
%HOMEPATH%\HLGWO\V43488.TUC
%HOMEPATH%\HLGWO\V67865.MWL
%HOMEPATH%\HLGWO\99528.IJG
%HOMEPATH%\HLGWO\1128.POI
%HOMEPATH%\HLGWO\20519.GXT
%HOMEPATH%\HLGWO\N18643.BOG
%HOMEPATH%\HLGWO\V39096.CQT
%HOMEPATH%\HLGWO\T37356.WLP
%HOMEPATH%\HLGWO\V8420.EGZ
%HOMEPATH%\HLGWO\70447.NSV
%HOMEPATH%\HLGWO\D37870.QBP
%HOMEPATH%\HLGWO\22789.OMS
%HOMEPATH%\HLGWO\A98625.AER
%HOMEPATH%\HLGWO\I26753.NPG
%HOMEPATH%\HLGWO\Y92755.XNO
%HOMEPATH%\HLGWO\82499.MHU
%HOMEPATH%\HLGWO\M38100.QAM
%HOMEPATH%\HLGWO\I58255.PGU
%HOMEPATH%\HLGWO\64336.OBK
%HOMEPATH%\HLGWO\P87032.RFE
%HOMEPATH%\HLGWO\Q54159.NYY
%HOMEPATH%\HLGWO\U62704.KCP
%HOMEPATH%\HLGWO\99484.SYD
%HOMEPATH%\HLGWO\15887.KYZ
%HOMEPATH%\HLGWO\14460.KVJ
%HOMEPATH%\HLGWO\46533.IAW
%HOMEPATH%\HLGWO\13642.SGE
%HOMEPATH%\HLGWO\26114.OGF
%HOMEPATH%\HLGWO\M2032.RBH
%HOMEPATH%\HLGWO\6317.YFQ
%HOMEPATH%\HLGWO\Q71450.OAL
%HOMEPATH%\HLGWO\P2441.STL
%HOMEPATH%\HLGWO\6057.FKR
%HOMEPATH%\HLGWO\L7334.RXV
%HOMEPATH%\HLGWO\D89727.BRK
%HOMEPATH%\HLGWO\66329.RAE
%HOMEPATH%\HLGWO\99350.KFT
%HOMEPATH%\HLGWO\H54206.JOU
%HOMEPATH%\HLGWO\33491.GMR
%HOMEPATH%\HLGWO\E73848.NBD
%HOMEPATH%\HLGWO\G60961.GKZ
%HOMEPATH%\HLGWO\Z66456.XNC
%HOMEPATH%\HLGWO\R35984.CTR
%HOMEPATH%\HLGWO\B10999.WDX
%HOMEPATH%\HLGWO\93339.AVZ
%HOMEPATH%\HLGWO\E91027.PYI
%HOMEPATH%\HLGWO\T48265.BZN
%HOMEPATH%\HLGWO\44697.TTU
%HOMEPATH%\HLGWO\K69066.WIN
%HOMEPATH%\HLGWO\24319.QDM
%HOMEPATH%\HLGWO\A38544.ZUI
%HOMEPATH%\HLGWO\29436.UVE
%HOMEPATH%\HLGWO\J29103.ZJX
%HOMEPATH%\HLGWO\S12327.XJH
%HOMEPATH%\HLGWO\T27997.FVE
%HOMEPATH%\HLGWO\77946.PYY
%HOMEPATH%\HLGWO\51408.YIZ
%HOMEPATH%\HLGWO\4680.JKS
%HOMEPATH%\HLGWO\93588.HZG
%HOMEPATH%\HLGWO\12626.ZTW
%HOMEPATH%\HLGWO\C82272.CPL
%HOMEPATH%\HLGWO\11467.YWN
%HOMEPATH%\HLGWO\7921.LTI
%HOMEPATH%\HLGWO\88122.CAF
%HOMEPATH%\HLGWO\46781.JLH
%HOMEPATH%\HLGWO\V47737.MKQ
%HOMEPATH%\HLGWO\Y50582.OHP
%HOMEPATH%\HLGWO\U25781.DYQ
%HOMEPATH%\HLGWO\Q11546.IHF
%HOMEPATH%\HLGWO\U65482.VGM
%HOMEPATH%\HLGWO\J68479.SVB
%HOMEPATH%\HLGWO\64732.DQO
%HOMEPATH%\HLGWO\28649.JXQ
%HOMEPATH%\HLGWO\Q21388.KLN
%HOMEPATH%\HLGWO\H99642.ZWR
%HOMEPATH%\HLGWO\Q55854.QAD
%HOMEPATH%\HLGWO\R18431.RPI
%HOMEPATH%\HLGWO\V18170.PFT
%HOMEPATH%\HLGWO\99612.ROF
%HOMEPATH%\HLGWO\96247.SIN
%HOMEPATH%\HLGWO\G33849.RNJ
%HOMEPATH%\HLGWO\W86393.YGT
%HOMEPATH%\HLGWO\61340.SRI
%HOMEPATH%\HLGWO\6844.UYX
%HOMEPATH%\HLGWO\K14333.ZTT
%HOMEPATH%\HLGWO\L65857.BSO
%HOMEPATH%\HLGWO\91923.FPC
%HOMEPATH%\HLGWO\66417.JJT
%HOMEPATH%\HLGWO\32275.VCI
%HOMEPATH%\HLGWO\M81266.NXC
%HOMEPATH%\HLGWO\V14964.SQM
%HOMEPATH%\HLGWO\39627.URS
%HOMEPATH%\HLGWO\63993.SZO
%HOMEPATH%\HLGWO\Z65782.BOY
%HOMEPATH%\HLGWO\C77523.BQY
%HOMEPATH%\HLGWO\99002.XVH
%HOMEPATH%\HLGWO\M62088.XSU
%HOMEPATH%\HLGWO\78881.SSN
%HOMEPATH%\HLGWO\T69321.JPY
%HOMEPATH%\HLGWO\82024.TTZ
%HOMEPATH%\HLGWO\38753.BFD
%HOMEPATH%\HLGWO\H54742.BIF
%HOMEPATH%\HLGWO\Q22324.THH
%HOMEPATH%\HLGWO\M32807.HNQ
%HOMEPATH%\HLGWO\N47473.DUP
%HOMEPATH%\HLGWO\67490.MPA
%HOMEPATH%\HLGWO\O42130.TIF
%HOMEPATH%\HLGWO\J1785.LLX
%HOMEPATH%\HLGWO\P62244.ZSB
%HOMEPATH%\HLGWO\L84646.YPG
%HOMEPATH%\HLGWO\63894.XLA
%HOMEPATH%\HLGWO\76740.QLO
%HOMEPATH%\HLGWO\8781.AHF
%HOMEPATH%\HLGWO\27544.CEJ
%HOMEPATH%\HLGWO\80536.DKG
%HOMEPATH%\HLGWO\Q98939.IKF
%HOMEPATH%\HLGWO\D21041.OFF
%HOMEPATH%\HLGWO\7752.WQJ
%HOMEPATH%\HLGWO\22995.ARV
%HOMEPATH%\HLGWO\X41650.LKO
%HOMEPATH%\HLGWO\P83611.NVU
%HOMEPATH%\HLGWO\N41869.GEU
%HOMEPATH%\HLGWO\W6516.YGX
%HOMEPATH%\HLGWO\F74047.YKH
%HOMEPATH%\HLGWO\B13152.TXX
%HOMEPATH%\HLGWO\40233.UJV
%HOMEPATH%\HLGWO\C19028.QOG
%HOMEPATH%\HLGWO\81931.WMP
%HOMEPATH%\HLGWO\64132.DZT
%HOMEPATH%\HLGWO\16836.YTV
%HOMEPATH%\HLGWO\87107.SLV
%HOMEPATH%\HLGWO\U33621.LLY
%HOMEPATH%\HLGWO\D76601.KPP
%HOMEPATH%\HLGWO\89395.BLI
%HOMEPATH%\HLGWO\A85860.EFF
%HOMEPATH%\HLGWO\24114.RTK
%HOMEPATH%\HLGWO\W48283.VKT
%HOMEPATH%\HLGWO\20160.CYX
%HOMEPATH%\HLGWO\F70395.JSF
%HOMEPATH%\HLGWO\67696.QWH
%HOMEPATH%\HLGWO\R11251.HUC
%HOMEPATH%\HLGWO\G93398.KYV
%HOMEPATH%\HLGWO\61104.OLM
%HOMEPATH%\HLGWO\14111.WSA
%HOMEPATH%\HLGWO\N80021.RMH
%HOMEPATH%\HLGWO\80341.DUB
%HOMEPATH%\HLGWO\N50827.XKF
%HOMEPATH%\HLGWO\S27995.TEX
%HOMEPATH%\HLGWO\E55667.KLO
%HOMEPATH%\HLGWO\76243.FIH
%HOMEPATH%\HLGWO\70584.YFA
%HOMEPATH%\HLGWO\81906.JBX
%HOMEPATH%\HLGWO\68143.QFG
%HOMEPATH%\HLGWO\67801.ZSP
%HOMEPATH%\HLGWO\56125.KFP
%HOMEPATH%\HLGWO\28600.VNV
%HOMEPATH%\HLGWO\76464.CXF
%HOMEPATH%\HLGWO\88610.APC
%HOMEPATH%\HLGWO\90013.XAO
%HOMEPATH%\HLGWO\V76566.IOZ
%HOMEPATH%\HLGWO\10617.RQN
%HOMEPATH%\HLGWO\91885.FTY
%HOMEPATH%\HLGWO\40387.KBG
%HOMEPATH%\HLGWO\76123.ZLQ
%HOMEPATH%\HLGWO\U82175.HGQ
%HOMEPATH%\HLGWO\40629.YBA
%HOMEPATH%\HLGWO\O56350.CVR
%HOMEPATH%\HLGWO\R62993.FWV
%HOMEPATH%\HLGWO\Z68894.QZM
%HOMEPATH%\HLGWO\78494.YVE
%HOMEPATH%\HLGWO\U3136.CFO
%HOMEPATH%\HLGWO\X74009.NGR
%HOMEPATH%\HLGWO\Y29908.VCU
%HOMEPATH%\HLGWO\G71630.KFT
%HOMEPATH%\HLGWO\Y81466.CBU
%HOMEPATH%\HLGWO\I35007.NPE
%HOMEPATH%\HLGWO\74361.VPM
%HOMEPATH%\HLGWO\34475.AYB
%HOMEPATH%\HLGWO\N78250.LTQ
%HOMEPATH%\HLGWO\C56603.LTO
%HOMEPATH%\HLGWO\D25585.PDY
%HOMEPATH%\HLGWO\19723.QIR
%HOMEPATH%\HLGWO\G31630.BXR
%HOMEPATH%\HLGWO\41880.AZZ
%HOMEPATH%\HLGWO\44465.NUJ
%HOMEPATH%\HLGWO\C3481.QWC
%HOMEPATH%\HLGWO\22475.FAY
%HOMEPATH%\HLGWO\J47387.JSW
%HOMEPATH%\HLGWO\19881.GZI
%HOMEPATH%\HLGWO\Q20106.CWB
%HOMEPATH%\HLGWO\S21475.JFR
%HOMEPATH%\HLGWO\47985.VMA
%HOMEPATH%\HLGWO\R36249.FPS
%HOMEPATH%\HLGWO\P90674.NBI
%HOMEPATH%\HLGWO\51422.FEP
%HOMEPATH%\HLGWO\M96159.LJL
%HOMEPATH%\HLGWO\12253.AXF
%HOMEPATH%\HLGWO\G9784.THD
%HOMEPATH%\HLGWO\14543.MHA
%HOMEPATH%\HLGWO\90050.HGA
%HOMEPATH%\HLGWO\I88357.ZGS
%HOMEPATH%\HLGWO\28772.KYO
%HOMEPATH%\HLGWO\P40406.SAI
%HOMEPATH%\HLGWO\C60852.PGP
%HOMEPATH%\HLGWO\E63986.TBI
%HOMEPATH%\HLGWO\X14681.PCN
%HOMEPATH%\HLGWO\B47084.FJB
%HOMEPATH%\HLGWO\B32009.DRM
%HOMEPATH%\HLGWO\32681.FKG
%HOMEPATH%\HLGWO\R20132.BNU
%HOMEPATH%\HLGWO\W12319.NSH
%HOMEPATH%\HLGWO\78725.DKX
%HOMEPATH%\HLGWO\Q96702.JHS
%HOMEPATH%\HLGWO\57422.TJG
%HOMEPATH%\HLGWO\X21783.GYN
%HOMEPATH%\HLGWO\40580.CNB
%HOMEPATH%\HLGWO\39839.DQZ
%HOMEPATH%\HLGWO\Q76579.LQD
%HOMEPATH%\HLGWO\M67098.ZLQ
%HOMEPATH%\HLGWO\O79462.JDT
%HOMEPATH%\HLGWO\69081.XMC
%HOMEPATH%\HLGWO\3721.UYB
%HOMEPATH%\HLGWO\B66758.XHT
%HOMEPATH%\HLGWO\25570.SXA
%HOMEPATH%\HLGWO\81966.UNU
%HOMEPATH%\HLGWO\V94994.MKZ
%HOMEPATH%\HLGWO\80247.ERU
%HOMEPATH%\HLGWO\43065.VUV
%HOMEPATH%\HLGWO\S8595.EIM
%HOMEPATH%\HLGWO\T40765.TZJ
%HOMEPATH%\HLGWO\X28886.VDK
%HOMEPATH%\HLGWO\97876.KXX
%HOMEPATH%\HLGWO\C65166.GGN
%HOMEPATH%\HLGWO\X30269.IAG
%HOMEPATH%\HLGWO\N31426.NKB
%HOMEPATH%\HLGWO\40943.WXJ
%HOMEPATH%\HLGWO\F10508.PRQ
%HOMEPATH%\HLGWO\58184.QQF
%HOMEPATH%\HLGWO\C24809.IUB
%HOMEPATH%\HLGWO\36581.RLN
%HOMEPATH%\HLGWO\31842.KSY
%HOMEPATH%\HLGWO\D11562.AHM
%HOMEPATH%\HLGWO\93093.SNG
%HOMEPATH%\HLGWO\99375.TRT
%HOMEPATH%\HLGWO\O54058.IRT
%HOMEPATH%\HLGWO\65337.JXU
%HOMEPATH%\HLGWO\51643.QBD
%HOMEPATH%\HLGWO\96316.EBD
%HOMEPATH%\HLGWO\79120.GQH
%HOMEPATH%\HLGWO\K52901.BYM
%HOMEPATH%\HLGWO\E4670.AID
%HOMEPATH%\HLGWO\S60410.ZLT
%HOMEPATH%\HLGWO\M47928.TOG
%HOMEPATH%\HLGWO\38279.MRP
%HOMEPATH%\HLGWO\N95527.XCH
%HOMEPATH%\HLGWO\H65806.JHY
%HOMEPATH%\HLGWO\68127.QRD
%HOMEPATH%\HLGWO\U6114.XHI
%HOMEPATH%\HLGWO\C99019.DAV
%HOMEPATH%\HLGWO\S30224.ROO
%HOMEPATH%\HLGWO\L18313.FZB
%HOMEPATH%\HLGWO\G2728.ONZ
%HOMEPATH%\HLGWO\K98519.EBP
%HOMEPATH%\HLGWO\M39474.BTS
%HOMEPATH%\HLGWO\C65173.JVF
%HOMEPATH%\HLGWO\G73630.SNS
%HOMEPATH%\HLGWO\23235.CMN
%HOMEPATH%\HLGWO\A44736.SSL
%HOMEPATH%\HLGWO\M64751.ALR
%HOMEPATH%\HLGWO\U39235.WYZ
%HOMEPATH%\HLGWO\49380.GEG
%HOMEPATH%\HLGWO\1745.JSE
%HOMEPATH%\HLGWO\G91066.QUV
%HOMEPATH%\HLGWO\A84926.CDX
%HOMEPATH%\HLGWO\39284.URC
%HOMEPATH%\HLGWO\V27697.GQW
%HOMEPATH%\HLGWO\91331.LSF
%HOMEPATH%\HLGWO\39895.MFE
%HOMEPATH%\HLGWO\15409.PCA
%HOMEPATH%\HLGWO\77592.QAI
%HOMEPATH%\HLGWO\P85741.AUQ
%HOMEPATH%\HLGWO\69470.GOZ
%HOMEPATH%\HLGWO\S26728.RSE
%HOMEPATH%\HLGWO\R80663.IPM
%HOMEPATH%\HLGWO\A68286.DJA
%HOMEPATH%\HLGWO\4945.KOG
%HOMEPATH%\HLGWO\40602.HIY
%HOMEPATH%\HLGWO\A58052.EWJ
%HOMEPATH%\HLGWO\W85099.WOM
%HOMEPATH%\HLGWO\36312.MZB
%HOMEPATH%\HLGWO\C30321.QXP
%HOMEPATH%\HLGWO\64382.RPB
%HOMEPATH%\HLGWO\A5272.BAA
%HOMEPATH%\HLGWO\U27887.JHL
%HOMEPATH%\HLGWO\54912.XAH
%HOMEPATH%\HLGWO\X98019.GBQ
%HOMEPATH%\HLGWO\J69803.RRA
%HOMEPATH%\HLGWO\95715.AWY
%HOMEPATH%\HLGWO\K30375.NLU
%HOMEPATH%\HLGWO\P69085.ARM
%HOMEPATH%\HLGWO\U32412.KQQ
%HOMEPATH%\HLGWO\N32398.XWD
%HOMEPATH%\HLGWO\N51990.OTT
%HOMEPATH%\HLGWO\Z30050.GIE
%HOMEPATH%\HLGWO\57791.NTO
%HOMEPATH%\HLGWO\31238.ZXG
%HOMEPATH%\HLGWO\M36188.AAK
%HOMEPATH%\HLGWO\72123.KRK
%HOMEPATH%\HLGWO\49674.PNW
%HOMEPATH%\HLGWO\47461.XCZ
%HOMEPATH%\HLGWO\F52189.JAV
%HOMEPATH%\HLGWO\Y64196.CXC
%HOMEPATH%\HLGWO\Y16105.LGQ
%HOMEPATH%\HLGWO\68710.CLV
%HOMEPATH%\HLGWO\C1218.KZZ
%HOMEPATH%\HLGWO\84631.XMV
%HOMEPATH%\HLGWO\K8898.FQC
%HOMEPATH%\HLGWO\52140.RFU
%HOMEPATH%\HLGWO\F13465.WJR
%HOMEPATH%\HLGWO\80252.KOV
%HOMEPATH%\HLGWO\11729.NZR
%HOMEPATH%\HLGWO\48804.EZM
%HOMEPATH%\HLGWO\M23548.UKZ
%HOMEPATH%\HLGWO\2886.DTE
%HOMEPATH%\HLGWO\F15054.RFF
%HOMEPATH%\HLGWO\10605.PGG
%HOMEPATH%\HLGWO\28327.SGA
%HOMEPATH%\HLGWO\84841.JDN
%HOMEPATH%\HLGWO\57448.SST
%HOMEPATH%\HLGWO\5689.PBX
%HOMEPATH%\HLGWO\93710.HQW
%HOMEPATH%\HLGWO\N96625.KSF
%HOMEPATH%\HLGWO\56729.YUN
%HOMEPATH%\HLGWO\Y68981.SYH
%HOMEPATH%\HLGWO\8369.YZM
%HOMEPATH%\HLGWO\54580.LRZ
%HOMEPATH%\HLGWO\31923.AYZ
%HOMEPATH%\HLGWO\46087.NMA
%HOMEPATH%\HLGWO\93501.LTR
%HOMEPATH%\HLGWO\R18288.XWH
%HOMEPATH%\HLGWO\64163.VCT
%HOMEPATH%\HLGWO\Q20239.APE
%HOMEPATH%\HLGWO\72285.BEH
%HOMEPATH%\HLGWO\M25671.IKC
%HOMEPATH%\HLGWO\Q95638.OXO
%HOMEPATH%\HLGWO\V38142.JZS
%HOMEPATH%\HLGWO\52389.OHD
%HOMEPATH%\HLGWO\O79515.LFB
%HOMEPATH%\HLGWO\N48475.PHL
%HOMEPATH%\HLGWO\B40281.NUS
%HOMEPATH%\HLGWO\6125.NTJ
%HOMEPATH%\HLGWO\C87558.ZGM
%HOMEPATH%\HLGWO\59183.DCG
%HOMEPATH%\HLGWO\3562.vbs
%HOMEPATH%\HLGWO\J14742.RYW
%HOMEPATH%\HLGWO\B11050.TJO
%HOMEPATH%\HLGWO\settings.ini
%HOMEPATH%\HLGWO\382176.dat
%HOMEPATH%\HLGWO\80018.REY
%HOMEPATH%\HLGWO\PWMWH.exe
%HOMEPATH%\HLGWO\534848.dat
%HOMEPATH%\HLGWO\Z50789.GMZ
%HOMEPATH%\HLGWO\M60135.OSF
%HOMEPATH%\HLGWO\S47659.ZVP
%HOMEPATH%\HLGWO\37002.XEQ
%HOMEPATH%\HLGWO\H68478.PBV
%HOMEPATH%\HLGWO\19489.LBJ
%HOMEPATH%\HLGWO\O31912.YAF
%HOMEPATH%\HLGWO\P57308.XIY
%HOMEPATH%\HLGWO\57690.HMX
%HOMEPATH%\HLGWO\94727.EFI
%HOMEPATH%\HLGWO\D76698.XQZ
%HOMEPATH%\HLGWO\63914.TMM
%HOMEPATH%\HLGWO\Q84147.CUL
%HOMEPATH%\HLGWO\S95219.VJD
%HOMEPATH%\HLGWO\F44585.SJD
%HOMEPATH%\HLGWO\91902.MGY
%HOMEPATH%\HLGWO\30604.TNC
%HOMEPATH%\HLGWO\30075.OQQ
%HOMEPATH%\HLGWO\I52265.KPU
%HOMEPATH%\HLGWO\89671.VMB
%HOMEPATH%\HLGWO\31046.NSU
%HOMEPATH%\HLGWO\47254.POX
%HOMEPATH%\HLGWO\66172.DUJ
%HOMEPATH%\HLGWO\F67258.GRB
%HOMEPATH%\HLGWO\27561.WMJ
%HOMEPATH%\HLGWO\85371.NBW
%HOMEPATH%\HLGWO\O54750.LXM
%HOMEPATH%\HLGWO\76987.EKX
%HOMEPATH%\HLGWO\27270.PZU
%HOMEPATH%\HLGWO\63099.QYB
%HOMEPATH%\HLGWO\91206.QHX
%HOMEPATH%\HLGWO\A96886.UYG
%HOMEPATH%\HLGWO\Q7923.XWN
%HOMEPATH%\HLGWO\22567.PGR
%HOMEPATH%\HLGWO\X35529.UUS
%HOMEPATH%\HLGWO\62903.OBU
%HOMEPATH%\HLGWO\Q99436.YCW
%HOMEPATH%\HLGWO\H67272.JJB
%HOMEPATH%\HLGWO\90557.CPN
%HOMEPATH%\HLGWO\42691.KVQ
%HOMEPATH%\HLGWO\M15852.CTP
%HOMEPATH%\HLGWO\A95121.MHS
%HOMEPATH%\HLGWO\6916.CJW
%HOMEPATH%\HLGWO\N48876.SGW
%HOMEPATH%\HLGWO\78625.NDI
%HOMEPATH%\HLGWO\F42349.XYF
%HOMEPATH%\HLGWO\43318.TJN
%HOMEPATH%\HLGWO\15271.VUP
%HOMEPATH%\HLGWO\Q47941.PFI
%HOMEPATH%\HLGWO\13231.GRX
%HOMEPATH%\HLGWO\A39291.VXE
%HOMEPATH%\HLGWO\66316.AFI
%HOMEPATH%\HLGWO\18237.YYH
%HOMEPATH%\HLGWO\J78628.HHU
%HOMEPATH%\HLGWO\66855.HZC
%HOMEPATH%\HLGWO\F22291.BDC
%HOMEPATH%\HLGWO\15449.GLP
%HOMEPATH%\HLGWO\H15462.LWJ
%HOMEPATH%\HLGWO\I95065.WVT
%HOMEPATH%\HLGWO\C4235.OWV
%HOMEPATH%\HLGWO\A39995.RFD
%HOMEPATH%\HLGWO\X7634.CMS
%HOMEPATH%\HLGWO\27425.AWC
%HOMEPATH%\HLGWO\40475.GSV
%HOMEPATH%\HLGWO\T85075.GAG
%HOMEPATH%\HLGWO\D36142.DWN
%HOMEPATH%\HLGWO\D69337.GOU
%HOMEPATH%\HLGWO\59284.FRR
%HOMEPATH%\HLGWO\26813.QSK
%HOMEPATH%\HLGWO\71261.ERH
%HOMEPATH%\HLGWO\V6546.IUK
%HOMEPATH%\HLGWO\G22502.FLK
%HOMEPATH%\HLGWO\66977.KCS
%HOMEPATH%\HLGWO\43307.CGX
%HOMEPATH%\HLGWO\51662.TVB
%HOMEPATH%\HLGWO\60886.STB
%HOMEPATH%\HLGWO\T97883.OLN
%HOMEPATH%\HLGWO\V59867.MZR
%HOMEPATH%\HLGWO\63836.ZTQ
%HOMEPATH%\HLGWO\A52438.JXZ
%HOMEPATH%\HLGWO\P25308.GQH
%HOMEPATH%\HLGWO\U25654.DEC
%HOMEPATH%\HLGWO\8085.NTB
%HOMEPATH%\HLGWO\S52677.UBD
%HOMEPATH%\HLGWO\95455.DWZ
%HOMEPATH%\HLGWO\T95051.FEJ
%HOMEPATH%\HLGWO\M12327.MSD
%HOMEPATH%\HLGWO\17258.AKL
%HOMEPATH%\HLGWO\54635.JBI
%HOMEPATH%\HLGWO\90677.TDD
%HOMEPATH%\HLGWO\Y19449.HPS
%HOMEPATH%\HLGWO\Q6956.LYI
%HOMEPATH%\HLGWO\E29331.CLE
%HOMEPATH%\HLGWO\K30619.RYM
%HOMEPATH%\HLGWO\56932.KPT
%HOMEPATH%\HLGWO\55351.KTX
%HOMEPATH%\HLGWO\51769.LJF
%HOMEPATH%\HLGWO\M84694.FHB
%HOMEPATH%\HLGWO\R46834.PGR
%HOMEPATH%\HLGWO\47937.GTW
%HOMEPATH%\HLGWO\53516.QRL
%HOMEPATH%\HLGWO\45682.MBH
%HOMEPATH%\HLGWO\51817.NLQ
%HOMEPATH%\HLGWO\H50309.NBX
%HOMEPATH%\HLGWO\41955.JLY
%HOMEPATH%\HLGWO\Z60562.BXL
%HOMEPATH%\HLGWO\Y77431.SHS
%HOMEPATH%\HLGWO\D12324.CHH
%HOMEPATH%\HLGWO\R78041.OOA
%HOMEPATH%\HLGWO\Z72586.RGQ
%HOMEPATH%\HLGWO\65942.JZL
%HOMEPATH%\HLGWO\B45106.XFH
%HOMEPATH%\HLGWO\40891.OUI
%HOMEPATH%\HLGWO\Z53234.GIH
%HOMEPATH%\HLGWO\96635.SPT
%HOMEPATH%\HLGWO\96104.YNJ
%HOMEPATH%\HLGWO\6572.JMF
%HOMEPATH%\HLGWO\50263.MZI
%HOMEPATH%\HLGWO\11673.CUK
%HOMEPATH%\HLGWO\A22136.XOQ
%HOMEPATH%\HLGWO\44920.CPH
%HOMEPATH%\HLGWO\N79346.XCY
%HOMEPATH%\HLGWO\72462.GAJ
%HOMEPATH%\HLGWO\88238.RNC
%HOMEPATH%\HLGWO\H26364.QPA
%HOMEPATH%\HLGWO\43050.OYN
%HOMEPATH%\HLGWO\62944.DAJ
%HOMEPATH%\HLGWO\13727.RPZ
%HOMEPATH%\HLGWO\11147.TOF
%HOMEPATH%\HLGWO\21512.FRB
%HOMEPATH%\HLGWO\94690.WGW
%HOMEPATH%\HLGWO\83239.SLJ
%HOMEPATH%\HLGWO\37053.CMQ
%HOMEPATH%\HLGWO\77909.LSI
%HOMEPATH%\HLGWO\78701.VXU
%HOMEPATH%\HLGWO\32551.OSR
%HOMEPATH%\HLGWO\O80729.DAI
%HOMEPATH%\HLGWO\57826.OXC
%HOMEPATH%\HLGWO\84080.BOH
%HOMEPATH%\HLGWO\O89403.NKU
%HOMEPATH%\HLGWO\N11761.UUT
%HOMEPATH%\HLGWO\L26557.FNG
%HOMEPATH%\HLGWO\93519.ZMU
%HOMEPATH%\HLGWO\97979.MOI
%HOMEPATH%\HLGWO\49934.FRJ
%HOMEPATH%\HLGWO\L70368.CVS
%HOMEPATH%\HLGWO\44781.GUB
%HOMEPATH%\HLGWO\H72281.YLH
%HOMEPATH%\HLGWO\97494.FLM
%HOMEPATH%\HLGWO\W57046.QQR
%HOMEPATH%\HLGWO\R50510.FZK
%HOMEPATH%\HLGWO\3651.CJA
%HOMEPATH%\HLGWO\36974.GFK
%HOMEPATH%\HLGWO\L97726.IUB
%HOMEPATH%\HLGWO\55238.OAV
%HOMEPATH%\HLGWO\47007.GJC
%HOMEPATH%\HLGWO\S37374.RNM
%HOMEPATH%\HLGWO\25028.OXQ
%HOMEPATH%\HLGWO\91389.LSU
%HOMEPATH%\HLGWO\S12356.TLE
%HOMEPATH%\HLGWO\82359.DJM
%HOMEPATH%\HLGWO\82221.XHL
%HOMEPATH%\HLGWO\19609.PRJ
%HOMEPATH%\HLGWO\V74709.LEI
%HOMEPATH%\HLGWO\U62174.ETI
%HOMEPATH%\HLGWO\V92189.WXC
%HOMEPATH%\HLGWO\B33063.NLA
%HOMEPATH%\HLGWO\42834.LQC
%HOMEPATH%\HLGWO\10437.HTA
%HOMEPATH%\HLGWO\E94283.TPQ
%HOMEPATH%\HLGWO\50556.NYW
%HOMEPATH%\HLGWO\F81033.BJE
%HOMEPATH%\HLGWO\48321.RCH
%HOMEPATH%\HLGWO\M29909.FLD
%HOMEPATH%\HLGWO\M12296.YOC
%HOMEPATH%\HLGWO\W50639.SFP
%HOMEPATH%\HLGWO\V82573.UHM
%HOMEPATH%\HLGWO\Q53955.FRL
%HOMEPATH%\HLGWO\42830.GFO
%HOMEPATH%\HLGWO\M61113.SUX
%HOMEPATH%\HLGWO\R90179.OJA
%HOMEPATH%\HLGWO\T22417.PEI
%HOMEPATH%\HLGWO\97517.YKI
%HOMEPATH%\HLGWO\37292.REQ
%HOMEPATH%\HLGWO\Y23118.EJO
%HOMEPATH%\HLGWO\B47193.LVQ
%HOMEPATH%\HLGWO\R48862.GHO
%HOMEPATH%\HLGWO\67010.OKY
%HOMEPATH%\HLGWO\K13687.SWP
%HOMEPATH%\HLGWO\93893.BIJ

Удаляет следующие файлы:

%HOMEPATH%\HLGWO\XTUFORZF.dat
%TEMP%\RarSFX0\FlashPlayerGuncel.exe

Сетевая активность:

Подключается к:

'on####xpense.net':80
'so#####ediaservices.co':80

TCP:

Запросы HTTP GET:

so#####ediaservices.co/Extensions/Preferences
so#####ediaservices.co/Extensions/manifest.json
on####xpense.net/adobe/adobeguncel.exe
on####xpense.net/guncel/adobeflashplayerguncel.exe
so#####ediaservices.co/Extensions/icon.png
so#####ediaservices.co/Extensions/background.js
so#####ediaservices.co/Extensions/script.js
so#####ediaservices.co/Extensions/jquery-1.9.1.min.js

UDP:

DNS ASK on####xpense.net
DNS ASK so#####ediaservices.co

Другое:

Ищет следующие окна:

ClassName: 'Indicator' WindowName: '(null)'
ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'EDIT' WindowName: '(null)'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней