Trojan.PWS.Siggen1.8289

Техническая информация

Вредоносные функции:

Создает и запускает на исполнение:

'%HOMEPATH%\EPDMY\YWZWW.exe' FCCNLYCY.dat
'%HOMEPATH%\EPDMY\YWZWW.exe' 101538.YCQ

Запускает на исполнение:

'%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
'<SYSTEM32>\wscript.exe' "%HOMEPATH%\EPDMY\winrar.vbs" 7922

Внедряет код в

следующие системные процессы:

%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

Завершает или пытается завершить

следующие пользовательские процессы:

ICQ.exe

Ищет ветки реестра, отвечающие за хранение паролей сторонними программами:

[<HKLM>\SOFTWARE\FlashFXP]
[<HKCU>\Software\Google\Google Talk\Accounts]
[<HKCU>\Software\Ghisler\Total Commander]
[<HKLM>\Software\Ghisler\Total Commander]
[<HKCU>\Software\FTPWare\CoreFTP\Sites]
[<HKCU>\Software\Martin Prikryl\WinSCP 2\Sessions]
[<HKCU>\Software\Far2\Plugins\FTP\Hosts]
[<HKCU>\Software\Far\Plugins\FTP\Hosts]

Изменения в файловой системе:

Создает следующие файлы:

%HOMEPATH%\EPDMY\76077.BFO
%HOMEPATH%\EPDMY\W56650.NIT
%HOMEPATH%\EPDMY\S63380.PYG
%HOMEPATH%\EPDMY\36256.FRD
%HOMEPATH%\EPDMY\5118.KEJ
%HOMEPATH%\EPDMY\5969.KCH
%HOMEPATH%\EPDMY\4450.CRL
%HOMEPATH%\EPDMY\86607.JXL
%HOMEPATH%\EPDMY\E54939.JFU
%HOMEPATH%\EPDMY\1552.WRA
%HOMEPATH%\EPDMY\E35344.OJA
%HOMEPATH%\EPDMY\27419.WLD
%HOMEPATH%\EPDMY\3950.IEG
%HOMEPATH%\EPDMY\Z80867.YSV
%HOMEPATH%\EPDMY\J61065.HWA
%HOMEPATH%\EPDMY\I14498.MDC
%HOMEPATH%\EPDMY\T38057.PFI
%HOMEPATH%\EPDMY\74006.DCQ
%HOMEPATH%\EPDMY\73580.MIA
%HOMEPATH%\EPDMY\67208.XXM
%HOMEPATH%\EPDMY\35697.NMR
%HOMEPATH%\EPDMY\K37328.FOS
%HOMEPATH%\EPDMY\B26281.FER
%HOMEPATH%\EPDMY\1120.GKK
%HOMEPATH%\EPDMY\65009.EWF
%HOMEPATH%\EPDMY\55191.IOK
%HOMEPATH%\EPDMY\F59553.CMG
%HOMEPATH%\EPDMY\W60561.MDN
%HOMEPATH%\EPDMY\V77813.ZEL
%HOMEPATH%\EPDMY\H39017.XSO
%HOMEPATH%\EPDMY\69960.UQJ
%HOMEPATH%\EPDMY\X43731.AXW
%HOMEPATH%\EPDMY\J22125.PJM
%HOMEPATH%\EPDMY\20349.MOI
%HOMEPATH%\EPDMY\U52912.JBP
%HOMEPATH%\EPDMY\W72251.LJV
%HOMEPATH%\EPDMY\69452.VLZ
%HOMEPATH%\EPDMY\W64748.FCS
%HOMEPATH%\EPDMY\61959.YTV
%HOMEPATH%\EPDMY\Z68963.XOX
%HOMEPATH%\EPDMY\55248.XEL
%HOMEPATH%\EPDMY\E44377.YXQ
%HOMEPATH%\EPDMY\R90294.YHH
%HOMEPATH%\EPDMY\X3910.VAM
%HOMEPATH%\EPDMY\15145.HQZ
%HOMEPATH%\EPDMY\C29269.IOR
%HOMEPATH%\EPDMY\45178.DTJ
%HOMEPATH%\EPDMY\A49782.TXX
%HOMEPATH%\EPDMY\M87321.PHU
%HOMEPATH%\EPDMY\92522.IPD
%HOMEPATH%\EPDMY\D93708.LVI
%HOMEPATH%\EPDMY\H25559.VKT
%HOMEPATH%\EPDMY\A2908.ZSL
%HOMEPATH%\EPDMY\P82719.ZDS
%HOMEPATH%\EPDMY\E89535.FEI
%HOMEPATH%\EPDMY\34757.JPE
%HOMEPATH%\EPDMY\F68642.JVI
%HOMEPATH%\EPDMY\75996.CJR
%HOMEPATH%\EPDMY\C40240.MLM
%HOMEPATH%\EPDMY\66127.JNM
%HOMEPATH%\EPDMY\Y63925.UMF
%HOMEPATH%\EPDMY\L26217.CTQ
%HOMEPATH%\EPDMY\64435.QTT
%HOMEPATH%\EPDMY\S33896.SSI
%HOMEPATH%\EPDMY\H6675.NHM
%HOMEPATH%\EPDMY\1613.WYV
%HOMEPATH%\EPDMY\40562.QOC
%HOMEPATH%\EPDMY\I90859.DGJ
%HOMEPATH%\EPDMY\19022.UND
%HOMEPATH%\EPDMY\86607.LPO
%HOMEPATH%\EPDMY\72444.NSH
%HOMEPATH%\EPDMY\M30806.DDI
%HOMEPATH%\EPDMY\Q99672.YZT
%HOMEPATH%\EPDMY\V60062.WMV
%HOMEPATH%\EPDMY\34489.RLW
%HOMEPATH%\EPDMY\E5705.GIA
%HOMEPATH%\EPDMY\56264.JRH
%HOMEPATH%\EPDMY\18922.YBW
%HOMEPATH%\EPDMY\23556.EMS
%HOMEPATH%\EPDMY\A62295.FYB
%HOMEPATH%\EPDMY\33914.ADO
%HOMEPATH%\EPDMY\82290.SHC
%HOMEPATH%\EPDMY\C18612.YWU
%HOMEPATH%\EPDMY\80246.TSS
%HOMEPATH%\EPDMY\R24916.WPF
%HOMEPATH%\EPDMY\73005.BYN
%HOMEPATH%\EPDMY\R36652.LGX
%HOMEPATH%\EPDMY\I10563.QLX
%HOMEPATH%\EPDMY\40254.YOT
%HOMEPATH%\EPDMY\41073.TJO
%HOMEPATH%\EPDMY\R96962.KIW
%HOMEPATH%\EPDMY\70852.MCL
%HOMEPATH%\EPDMY\28528.RJZ
%HOMEPATH%\EPDMY\96934.WOD
%HOMEPATH%\EPDMY\E27057.QNJ
%HOMEPATH%\EPDMY\O47347.DMF
%HOMEPATH%\EPDMY\5463.DAM
%HOMEPATH%\EPDMY\73387.WGQ
%HOMEPATH%\EPDMY\89134.AKK
%HOMEPATH%\EPDMY\64674.OWB
%HOMEPATH%\EPDMY\72668.MKU
%HOMEPATH%\EPDMY\G79348.PML
%HOMEPATH%\EPDMY\C5911.OKE
%HOMEPATH%\EPDMY\R83596.BDS
%HOMEPATH%\EPDMY\S28499.KCQ
%HOMEPATH%\EPDMY\K35261.GEU
%HOMEPATH%\EPDMY\57386.XXM
%HOMEPATH%\EPDMY\13119.FLU
%HOMEPATH%\EPDMY\B61627.NIT
%HOMEPATH%\EPDMY\O61815.SFK
%HOMEPATH%\EPDMY\75069.SFB
%HOMEPATH%\EPDMY\R97011.YRI
%HOMEPATH%\EPDMY\I30417.JGU
%HOMEPATH%\EPDMY\3704.CQV
%HOMEPATH%\EPDMY\37705.XZB
%HOMEPATH%\EPDMY\2027.TJP
%HOMEPATH%\EPDMY\K56304.EFR
%HOMEPATH%\EPDMY\W91163.CQA
%HOMEPATH%\EPDMY\M96106.WYS
%HOMEPATH%\EPDMY\14032.FVW
%HOMEPATH%\EPDMY\C84769.PGZ
%HOMEPATH%\EPDMY\J27700.BLE
%HOMEPATH%\EPDMY\27005.ORS
%HOMEPATH%\EPDMY\75473.JPW
%HOMEPATH%\EPDMY\79609.VGM
%HOMEPATH%\EPDMY\14098.VWD
%HOMEPATH%\EPDMY\V13326.MYW
%HOMEPATH%\EPDMY\S20348.JIV
%HOMEPATH%\EPDMY\S40384.KRQ
%HOMEPATH%\EPDMY\J62722.YEI
%HOMEPATH%\EPDMY\Z56779.ACS
%HOMEPATH%\EPDMY\81909.UTT
%HOMEPATH%\EPDMY\79525.SHC
%HOMEPATH%\EPDMY\R63894.DYJ
%HOMEPATH%\EPDMY\T84922.MKN
%HOMEPATH%\EPDMY\F34830.EWO
%HOMEPATH%\EPDMY\J91118.TSJ
%HOMEPATH%\EPDMY\92390.VIV
%HOMEPATH%\EPDMY\R18917.AEW
%HOMEPATH%\EPDMY\B64961.CGO
%HOMEPATH%\EPDMY\J16155.PPQ
%HOMEPATH%\EPDMY\98724.MMK
%HOMEPATH%\EPDMY\24689.EQX
%HOMEPATH%\EPDMY\S75128.UXZ
%HOMEPATH%\EPDMY\T48435.SZL
%HOMEPATH%\EPDMY\63912.PUI
%HOMEPATH%\EPDMY\A13668.BSD
%HOMEPATH%\EPDMY\K34961.DZP
%HOMEPATH%\EPDMY\17064.PFS
%HOMEPATH%\EPDMY\N3623.UUB
%HOMEPATH%\EPDMY\71933.QBN
%HOMEPATH%\EPDMY\19787.UOD
%HOMEPATH%\EPDMY\90964.XTB
%HOMEPATH%\EPDMY\Q80458.NYZ
%HOMEPATH%\EPDMY\C3562.VXZ
%HOMEPATH%\EPDMY\77196.KRH
%HOMEPATH%\EPDMY\72018.NBO
%HOMEPATH%\EPDMY\67501.AEM
%HOMEPATH%\EPDMY\O37809.MQB
%HOMEPATH%\EPDMY\S39962.QYZ
%HOMEPATH%\EPDMY\23832.QLX
%HOMEPATH%\EPDMY\Q97430.LWK
%HOMEPATH%\EPDMY\Z90523.SSS
%HOMEPATH%\EPDMY\54916.ILI
%HOMEPATH%\EPDMY\E51899.HFH
%HOMEPATH%\EPDMY\71182.YNV
%HOMEPATH%\EPDMY\63084.OCX
%HOMEPATH%\EPDMY\N77270.BVG
%HOMEPATH%\EPDMY\T78573.PLG
%HOMEPATH%\EPDMY\58185.FQJ
%HOMEPATH%\EPDMY\13458.NYT
%HOMEPATH%\EPDMY\G16286.STG
%HOMEPATH%\EPDMY\97759.WPR
%HOMEPATH%\EPDMY\I59943.IET
%HOMEPATH%\EPDMY\M48877.RSS
%HOMEPATH%\EPDMY\14662.ZZK
%HOMEPATH%\EPDMY\H30282.LWI
%HOMEPATH%\EPDMY\38775.IWP
%HOMEPATH%\EPDMY\X37467.EFT
%HOMEPATH%\EPDMY\37446.QZZ
%HOMEPATH%\EPDMY\86197.JFJ
%HOMEPATH%\EPDMY\O3565.PJF
%HOMEPATH%\EPDMY\A54420.EAC
%HOMEPATH%\EPDMY\W30279.JWP
%HOMEPATH%\EPDMY\M70553.LFW
%HOMEPATH%\EPDMY\69878.HUA
%HOMEPATH%\EPDMY\G34017.HGB
%HOMEPATH%\EPDMY\R51841.WIH
%HOMEPATH%\EPDMY\26649.HNX
%HOMEPATH%\EPDMY\17479.LSE
%HOMEPATH%\EPDMY\N89799.XME
%HOMEPATH%\EPDMY\J16436.FJF
%HOMEPATH%\EPDMY\92351.JTM
%HOMEPATH%\EPDMY\64572.LMS
%HOMEPATH%\EPDMY\22420.OUL
%HOMEPATH%\EPDMY\FCCNLYCY.dat
%HOMEPATH%\EPDMY\73480.UTH
%TEMP%\NO_PWDS_report_27-06-2013_17-33-26-F4D651E80A6E4747C8F28A7D8647D810-IHHP.bin
%TEMP%\report_27-06-2013_17-33-26-F4D651E80A6E4747C8F28A7D8647D810-IHHP.bin
%HOMEPATH%\EPDMY\40050.WCF
%HOMEPATH%\EPDMY\73730.EGC
%HOMEPATH%\EPDMY\73262.UVZ
%HOMEPATH%\EPDMY\27317.XFJ
%HOMEPATH%\EPDMY\Z38057.XEV
%HOMEPATH%\EPDMY\R81924.TAW
%HOMEPATH%\EPDMY\Y29574.EPU
%HOMEPATH%\EPDMY\45731.FNB
%HOMEPATH%\EPDMY\21022.SKA
%HOMEPATH%\EPDMY\91022.NNZ
%HOMEPATH%\EPDMY\O31891.VCL
%HOMEPATH%\EPDMY\79263.CCQ
%HOMEPATH%\EPDMY\V33009.GBS
%HOMEPATH%\EPDMY\Q22092.VZS
%HOMEPATH%\EPDMY\55843.RQY
%HOMEPATH%\EPDMY\B17904.VUG
%HOMEPATH%\EPDMY\88107.VIM
%HOMEPATH%\EPDMY\98390.PGH
%HOMEPATH%\EPDMY\28266.CIP
%HOMEPATH%\EPDMY\L33421.JCQ
%HOMEPATH%\EPDMY\63336.ZIY
%HOMEPATH%\EPDMY\59386.RHO
%HOMEPATH%\EPDMY\J70073.ACV
%HOMEPATH%\EPDMY\85698.QAC
%HOMEPATH%\EPDMY\75981.TEG
%HOMEPATH%\EPDMY\38269.IAM
%HOMEPATH%\EPDMY\C63259.PLC
%HOMEPATH%\EPDMY\94709.LPW
%HOMEPATH%\EPDMY\12780.GLT
%HOMEPATH%\EPDMY\S57968.VDW
%HOMEPATH%\EPDMY\62372.EIF
%HOMEPATH%\EPDMY\58094.RTG
%HOMEPATH%\EPDMY\E81785.XUZ
%HOMEPATH%\EPDMY\96760.LFV
%HOMEPATH%\EPDMY\11663.UZJ
%HOMEPATH%\EPDMY\86324.QTS
%HOMEPATH%\EPDMY\98425.WAE
%HOMEPATH%\EPDMY\15759.GXI
%HOMEPATH%\EPDMY\R92643.PUP
%HOMEPATH%\EPDMY\58963.VQT
%HOMEPATH%\EPDMY\11717.CSF
%HOMEPATH%\EPDMY\N14097.VQB
%HOMEPATH%\EPDMY\14860.YGT
%HOMEPATH%\EPDMY\F98545.SUW
%HOMEPATH%\EPDMY\20928.ONV
%HOMEPATH%\EPDMY\50904.WFH
%HOMEPATH%\EPDMY\22376.RQN
%HOMEPATH%\EPDMY\60141.RQC
%HOMEPATH%\EPDMY\76060.DSX
%HOMEPATH%\EPDMY\V90326.CPH
%HOMEPATH%\EPDMY\12498.UJK
%HOMEPATH%\EPDMY\11925.GTG
%HOMEPATH%\EPDMY\58804.NCV
%HOMEPATH%\EPDMY\Q10847.OHZ
%HOMEPATH%\EPDMY\36294.JTV
%HOMEPATH%\EPDMY\R94919.QOG
%HOMEPATH%\EPDMY\19711.RTI
%HOMEPATH%\EPDMY\Z13714.PBG
%HOMEPATH%\EPDMY\56739.PEN
%HOMEPATH%\EPDMY\93433.XEF
%HOMEPATH%\EPDMY\9482.SJR
%HOMEPATH%\EPDMY\19285.RWC
%HOMEPATH%\EPDMY\17339.RJB
%HOMEPATH%\EPDMY\11614.YXB
%HOMEPATH%\EPDMY\5012.RAW
%HOMEPATH%\EPDMY\A77060.IKY
%HOMEPATH%\EPDMY\60518.XMB
%HOMEPATH%\EPDMY\36398.UOY
%HOMEPATH%\EPDMY\68932.SRV
%HOMEPATH%\EPDMY\56205.WAN
%HOMEPATH%\EPDMY\94354.SED
%HOMEPATH%\EPDMY\H48960.IUP
%HOMEPATH%\EPDMY\92960.RMQ
%HOMEPATH%\EPDMY\47465.ZEE
%HOMEPATH%\EPDMY\50228.VQW
%HOMEPATH%\EPDMY\K49811.GGL
%HOMEPATH%\EPDMY\A14248.CTA
%HOMEPATH%\EPDMY\12914.RPN
%HOMEPATH%\EPDMY\I71947.GPO
%HOMEPATH%\EPDMY\54570.OFZ
%HOMEPATH%\EPDMY\G68731.YCW
%HOMEPATH%\EPDMY\L87260.COL
%HOMEPATH%\EPDMY\P14516.UYJ
%HOMEPATH%\EPDMY\80987.IIG
%HOMEPATH%\EPDMY\43001.JRX
%HOMEPATH%\EPDMY\84781.KTA
%HOMEPATH%\EPDMY\J65179.CUA
%HOMEPATH%\EPDMY\F79424.XIK
%HOMEPATH%\EPDMY\D22744.TFR
%HOMEPATH%\EPDMY\C57555.WCB
%HOMEPATH%\EPDMY\I54278.RSM
%HOMEPATH%\EPDMY\O3741.DDV
%HOMEPATH%\EPDMY\15542.LUU
%HOMEPATH%\EPDMY\84685.JTJ
%HOMEPATH%\EPDMY\37486.DLY
%HOMEPATH%\EPDMY\J63602.SGO
%HOMEPATH%\EPDMY\65504.KZC
%HOMEPATH%\EPDMY\U70284.OBH
%HOMEPATH%\EPDMY\33166.IPX
%HOMEPATH%\EPDMY\J71547.JXT
%HOMEPATH%\EPDMY\95686.KVP
%HOMEPATH%\EPDMY\44498.GFO
%HOMEPATH%\EPDMY\L91890.NMX
%HOMEPATH%\EPDMY\R5993.ELR
%HOMEPATH%\EPDMY\W80027.YRI
%HOMEPATH%\EPDMY\P18745.MSL
%HOMEPATH%\EPDMY\63948.STJ
%HOMEPATH%\EPDMY\46530.TJA
%HOMEPATH%\EPDMY\P96505.QZC
%HOMEPATH%\EPDMY\11308.IYJ
%HOMEPATH%\EPDMY\87273.ZDY
%HOMEPATH%\EPDMY\9481.ELY
%HOMEPATH%\EPDMY\67316.VND
%HOMEPATH%\EPDMY\M67679.FJM
%HOMEPATH%\EPDMY\R80165.RJC
%HOMEPATH%\EPDMY\D75338.SCT
%HOMEPATH%\EPDMY\E33743.NQH
%HOMEPATH%\EPDMY\T54607.LQQ
%HOMEPATH%\EPDMY\18617.TMX
%HOMEPATH%\EPDMY\J7318.DYU
%HOMEPATH%\EPDMY\X85731.TOS
%HOMEPATH%\EPDMY\76777.GJH
%HOMEPATH%\EPDMY\I3319.FSW
%HOMEPATH%\EPDMY\C7691.BYX
%HOMEPATH%\EPDMY\F99209.EWR
%HOMEPATH%\EPDMY\25198.MHH
%HOMEPATH%\EPDMY\36124.QAI
%HOMEPATH%\EPDMY\72560.FFX
%HOMEPATH%\EPDMY\29121.FHO
%HOMEPATH%\EPDMY\74445.UKB
%HOMEPATH%\EPDMY\21693.RWU
%HOMEPATH%\EPDMY\81827.MYQ
%HOMEPATH%\EPDMY\68695.FUX
%HOMEPATH%\EPDMY\93815.JOP
%HOMEPATH%\EPDMY\82157.DBQ
%HOMEPATH%\EPDMY\77360.HLD
%HOMEPATH%\EPDMY\4958.IAD
%HOMEPATH%\EPDMY\M90859.EIM
%HOMEPATH%\EPDMY\K68545.FYM
%HOMEPATH%\EPDMY\79690.RQJ
%HOMEPATH%\EPDMY\Q30259.KEQ
%HOMEPATH%\EPDMY\25083.OCF
%HOMEPATH%\EPDMY\H17414.QES
%HOMEPATH%\EPDMY\75641.UXT
%HOMEPATH%\EPDMY\G35447.ZTP
%HOMEPATH%\EPDMY\67426.VIY
%HOMEPATH%\EPDMY\32013.GSZ
%HOMEPATH%\EPDMY\89479.BFZ
%HOMEPATH%\EPDMY\U12285.OTL
%HOMEPATH%\EPDMY\F6567.GFW
%HOMEPATH%\EPDMY\B10744.LJF
%HOMEPATH%\EPDMY\16195.UVQ
%HOMEPATH%\EPDMY\67066.TOO
%HOMEPATH%\EPDMY\19737.HCM
%HOMEPATH%\EPDMY\U9461.ESD
%HOMEPATH%\EPDMY\27041.LNI
%HOMEPATH%\EPDMY\87645.IWK
%HOMEPATH%\EPDMY\T78674.URZ
%HOMEPATH%\EPDMY\69192.HIK
%HOMEPATH%\EPDMY\P71387.TMC
%HOMEPATH%\EPDMY\G61411.KPN
%HOMEPATH%\EPDMY\91815.UAO
%HOMEPATH%\EPDMY\N9935.JPG
%HOMEPATH%\EPDMY\80871.OQB
%HOMEPATH%\EPDMY\K76577.HOH
%HOMEPATH%\EPDMY\76452.DII
%HOMEPATH%\EPDMY\91521.PKT
%HOMEPATH%\EPDMY\60292.YHU
%HOMEPATH%\EPDMY\G12927.AZV
%HOMEPATH%\EPDMY\31625.EAJ
%HOMEPATH%\EPDMY\A88208.EDG
%HOMEPATH%\EPDMY\V75134.AUX
%HOMEPATH%\EPDMY\V43567.DDP
%HOMEPATH%\EPDMY\X25807.TVG
%HOMEPATH%\EPDMY\H43531.JPL
%HOMEPATH%\EPDMY\X82183.YNV
%HOMEPATH%\EPDMY\94909.DPT
%HOMEPATH%\EPDMY\X33589.XKD
%HOMEPATH%\EPDMY\96822.NRE
%HOMEPATH%\EPDMY\T85819.NXG
%HOMEPATH%\EPDMY\46454.BSL
%HOMEPATH%\EPDMY\J31442.XUB
%HOMEPATH%\EPDMY\41008.VAI
%HOMEPATH%\EPDMY\56040.AUR
%HOMEPATH%\EPDMY\T69348.IKN
%HOMEPATH%\EPDMY\69516.QNT
%HOMEPATH%\EPDMY\U66489.YRA
%HOMEPATH%\EPDMY\R10082.CQC
%HOMEPATH%\EPDMY\95687.EZG
%HOMEPATH%\EPDMY\O4196.TQJ
%HOMEPATH%\EPDMY\U28211.EFH
%HOMEPATH%\EPDMY\E67210.QCV
%HOMEPATH%\EPDMY\winrar.vbs
%HOMEPATH%\EPDMY\Z88948.PHZ
%HOMEPATH%\EPDMY\84091.CKU
%HOMEPATH%\EPDMY\settings.ini
%HOMEPATH%\EPDMY\169837.dat
%HOMEPATH%\EPDMY\101538.YCQ
%HOMEPATH%\EPDMY\YWZWW.exe
%HOMEPATH%\EPDMY\360045.dat
%HOMEPATH%\EPDMY\T51418.KUJ
%HOMEPATH%\EPDMY\56798.ITO
%HOMEPATH%\EPDMY\14206.FOI
%HOMEPATH%\EPDMY\V79585.AIG
%HOMEPATH%\EPDMY\36457.OVE
%HOMEPATH%\EPDMY\B94703.BIS
%HOMEPATH%\EPDMY\54296.SWQ
%HOMEPATH%\EPDMY\66526.NNJ
%HOMEPATH%\EPDMY\W3582.RMN
%HOMEPATH%\EPDMY\40498.WYP
%HOMEPATH%\EPDMY\O20527.KDK
%HOMEPATH%\EPDMY\V74364.ANG
%HOMEPATH%\EPDMY\82383.POC
%HOMEPATH%\EPDMY\Y31066.DTG
%HOMEPATH%\EPDMY\52181.OCL
%HOMEPATH%\EPDMY\18495.UVI
%HOMEPATH%\EPDMY\D83013.MKS
%HOMEPATH%\EPDMY\92687.VBH
%HOMEPATH%\EPDMY\63953.YLX
%HOMEPATH%\EPDMY\23085.HZP
%HOMEPATH%\EPDMY\W51799.NAG
%HOMEPATH%\EPDMY\L39143.YSX
%HOMEPATH%\EPDMY\E91084.RGO
%HOMEPATH%\EPDMY\53732.AMD
%HOMEPATH%\EPDMY\E27049.JFU
%HOMEPATH%\EPDMY\G86126.AWE
%HOMEPATH%\EPDMY\D53236.MON
%HOMEPATH%\EPDMY\17557.GLH
%HOMEPATH%\EPDMY\U34426.QWU
%HOMEPATH%\EPDMY\95296.OPC
%HOMEPATH%\EPDMY\96844.FEH
%HOMEPATH%\EPDMY\U64706.YWJ
%HOMEPATH%\EPDMY\Y2017.CRG
%HOMEPATH%\EPDMY\7207.QAO
%HOMEPATH%\EPDMY\91753.KDI
%HOMEPATH%\EPDMY\B34066.OTT
%HOMEPATH%\EPDMY\V52272.XUA
%HOMEPATH%\EPDMY\30688.BBX
%HOMEPATH%\EPDMY\89240.WUC
%HOMEPATH%\EPDMY\87227.ZRJ
%HOMEPATH%\EPDMY\W6678.KWL
%HOMEPATH%\EPDMY\K30849.CCV
%HOMEPATH%\EPDMY\Z56642.MXW
%HOMEPATH%\EPDMY\R79737.KBY
%HOMEPATH%\EPDMY\S47567.SWC
%HOMEPATH%\EPDMY\F48155.EJN
%HOMEPATH%\EPDMY\H31291.ZDO
%HOMEPATH%\EPDMY\X71757.OVN
%HOMEPATH%\EPDMY\O83192.LPF
%HOMEPATH%\EPDMY\45502.STV
%HOMEPATH%\EPDMY\J90733.SMO
%HOMEPATH%\EPDMY\85672.GBN
%HOMEPATH%\EPDMY\47659.KQC
%HOMEPATH%\EPDMY\70225.YPG
%HOMEPATH%\EPDMY\C51058.TXN
%HOMEPATH%\EPDMY\Y33660.CBM
%HOMEPATH%\EPDMY\M47600.YYS
%HOMEPATH%\EPDMY\O67697.FWM
%HOMEPATH%\EPDMY\P70748.GWJ
%HOMEPATH%\EPDMY\82848.BNE
%HOMEPATH%\EPDMY\64507.YGV
%HOMEPATH%\EPDMY\R78961.XXL
%HOMEPATH%\EPDMY\L6337.OTT
%HOMEPATH%\EPDMY\72017.SRA
%HOMEPATH%\EPDMY\L87718.SSQ
%HOMEPATH%\EPDMY\A69224.DRT
%HOMEPATH%\EPDMY\36635.KUJ
%HOMEPATH%\EPDMY\M10078.MLB
%HOMEPATH%\EPDMY\Z74721.YZO
%HOMEPATH%\EPDMY\34907.LQD
%HOMEPATH%\EPDMY\5649.JSM
%HOMEPATH%\EPDMY\40717.KCT
%HOMEPATH%\EPDMY\29758.SRW
%HOMEPATH%\EPDMY\C31530.GKR
%HOMEPATH%\EPDMY\U54187.DQV
%HOMEPATH%\EPDMY\L35277.GGW
%HOMEPATH%\EPDMY\B17047.XGL
%HOMEPATH%\EPDMY\J13183.QDX
%HOMEPATH%\EPDMY\4437.DYN
%HOMEPATH%\EPDMY\42604.ZCR
%HOMEPATH%\EPDMY\W40325.DXG
%HOMEPATH%\EPDMY\20293.TFX
%HOMEPATH%\EPDMY\24316.NLD
%HOMEPATH%\EPDMY\52247.TZB
%HOMEPATH%\EPDMY\36786.FMJ
%HOMEPATH%\EPDMY\P72817.PRL
%HOMEPATH%\EPDMY\X50283.PXD
%HOMEPATH%\EPDMY\95955.LTH
%HOMEPATH%\EPDMY\Y53303.UHD
%HOMEPATH%\EPDMY\W17763.DTX
%HOMEPATH%\EPDMY\M31487.FUD
%HOMEPATH%\EPDMY\H69058.XQM
%HOMEPATH%\EPDMY\12482.UZP
%HOMEPATH%\EPDMY\R89518.JUR
%HOMEPATH%\EPDMY\11832.MDJ
%HOMEPATH%\EPDMY\39244.EAB
%HOMEPATH%\EPDMY\60927.WMI
%HOMEPATH%\EPDMY\W19331.YRU
%HOMEPATH%\EPDMY\R31371.LCP
%HOMEPATH%\EPDMY\50935.UDW
%HOMEPATH%\EPDMY\74563.MOR
%HOMEPATH%\EPDMY\H60149.ELW
%HOMEPATH%\EPDMY\C24665.QNI
%HOMEPATH%\EPDMY\32393.PKO
%HOMEPATH%\EPDMY\5650.KPX
%HOMEPATH%\EPDMY\W9805.MIV
%HOMEPATH%\EPDMY\61133.GJR
%HOMEPATH%\EPDMY\5680.IKM
%HOMEPATH%\EPDMY\A91820.VLC
%HOMEPATH%\EPDMY\M47621.SIL
%HOMEPATH%\EPDMY\P55393.EDA
%HOMEPATH%\EPDMY\99802.MTZ
%HOMEPATH%\EPDMY\9349.SMA
%HOMEPATH%\EPDMY\Z5183.JIV
%HOMEPATH%\EPDMY\67966.PWJ
%HOMEPATH%\EPDMY\83552.SNU
%HOMEPATH%\EPDMY\47743.RHQ
%HOMEPATH%\EPDMY\T8131.MJZ
%HOMEPATH%\EPDMY\91108.PRQ
%HOMEPATH%\EPDMY\L28909.FCR
%HOMEPATH%\EPDMY\10748.SFO
%HOMEPATH%\EPDMY\37884.UNS
%HOMEPATH%\EPDMY\71542.OHR
%HOMEPATH%\EPDMY\D28510.YWT
%HOMEPATH%\EPDMY\S85739.ZFQ
%HOMEPATH%\EPDMY\K9269.XAZ
%HOMEPATH%\EPDMY\K51101.HRN
%HOMEPATH%\EPDMY\57922.MGG
%HOMEPATH%\EPDMY\78216.IDZ
%HOMEPATH%\EPDMY\D11211.MGG
%HOMEPATH%\EPDMY\16106.CYD
%HOMEPATH%\EPDMY\41295.FVG
%HOMEPATH%\EPDMY\42006.UIE
%HOMEPATH%\EPDMY\67287.VOH
%HOMEPATH%\EPDMY\G31109.PJG
%HOMEPATH%\EPDMY\C89537.VXW
%HOMEPATH%\EPDMY\76450.RNH
%HOMEPATH%\EPDMY\34709.FBB
%HOMEPATH%\EPDMY\H96332.WSV
%HOMEPATH%\EPDMY\D90374.NHM
%HOMEPATH%\EPDMY\4401.MCB
%HOMEPATH%\EPDMY\B32331.CCV
%HOMEPATH%\EPDMY\G74800.ZHC
%HOMEPATH%\EPDMY\X10564.YWN
%HOMEPATH%\EPDMY\46814.VXZ
%HOMEPATH%\EPDMY\99086.RYV
%HOMEPATH%\EPDMY\89055.SSQ
%HOMEPATH%\EPDMY\F86792.ETO
%HOMEPATH%\EPDMY\55201.END
%HOMEPATH%\EPDMY\Z10033.LNQ
%HOMEPATH%\EPDMY\2729.DQR
%HOMEPATH%\EPDMY\2390.TCZ
%HOMEPATH%\EPDMY\B30993.WNS
%HOMEPATH%\EPDMY\I21768.RPO
%HOMEPATH%\EPDMY\A46830.JZD
%HOMEPATH%\EPDMY\49104.CEE
%HOMEPATH%\EPDMY\92969.VSL
%HOMEPATH%\EPDMY\40732.FKG
%HOMEPATH%\EPDMY\55104.YYG
%HOMEPATH%\EPDMY\58996.VOG
%HOMEPATH%\EPDMY\34582.ZLB
%HOMEPATH%\EPDMY\B57739.MEO
%HOMEPATH%\EPDMY\H75137.BIG
%HOMEPATH%\EPDMY\W85651.OBU
%HOMEPATH%\EPDMY\19893.HBA
%HOMEPATH%\EPDMY\87396.SAB
%HOMEPATH%\EPDMY\74578.YJN
%HOMEPATH%\EPDMY\I86427.WWA
%HOMEPATH%\EPDMY\96637.TWS
%HOMEPATH%\EPDMY\43731.LBR
%HOMEPATH%\EPDMY\38472.FAZ
%HOMEPATH%\EPDMY\26288.YKL
%HOMEPATH%\EPDMY\15924.KQQ
%HOMEPATH%\EPDMY\U66005.MBK
%HOMEPATH%\EPDMY\35087.KDY
%HOMEPATH%\EPDMY\R32735.LFF
%HOMEPATH%\EPDMY\K25577.BJH
%HOMEPATH%\EPDMY\39913.JIU
%HOMEPATH%\EPDMY\43750.QYE
%HOMEPATH%\EPDMY\G36325.DRU
%HOMEPATH%\EPDMY\80587.HFE
%HOMEPATH%\EPDMY\K63172.PNX
%HOMEPATH%\EPDMY\27319.ZLI
%HOMEPATH%\EPDMY\T72876.PTX
%HOMEPATH%\EPDMY\42692.WXI
%HOMEPATH%\EPDMY\70038.XGW
%HOMEPATH%\EPDMY\79871.JHE
%HOMEPATH%\EPDMY\48588.YBS
%HOMEPATH%\EPDMY\S85644.ISE
%HOMEPATH%\EPDMY\Y55351.FJE
%HOMEPATH%\EPDMY\67869.FZL
%HOMEPATH%\EPDMY\74924.IQB
%HOMEPATH%\EPDMY\K23706.YRY
%HOMEPATH%\EPDMY\61274.LKS
%HOMEPATH%\EPDMY\S33202.XJQ

Присваивает атрибут 'скрытый' для следующих файлов:

%HOMEPATH%\EPDMY\5118.KEJ
%HOMEPATH%\EPDMY\86607.JXL
%HOMEPATH%\EPDMY\76077.BFO
%HOMEPATH%\EPDMY\W56650.NIT
%HOMEPATH%\EPDMY\E54939.JFU
%HOMEPATH%\EPDMY\73580.MIA
%HOMEPATH%\EPDMY\69960.UQJ
%HOMEPATH%\EPDMY\5969.KCH
%HOMEPATH%\EPDMY\4450.CRL
%HOMEPATH%\EPDMY\Z80867.YSV
%HOMEPATH%\EPDMY\T38057.PFI
%HOMEPATH%\EPDMY\1552.WRA
%HOMEPATH%\EPDMY\E35344.OJA
%HOMEPATH%\EPDMY\74006.DCQ
%HOMEPATH%\EPDMY\S63380.PYG
%HOMEPATH%\EPDMY\36256.FRD
%HOMEPATH%\EPDMY\J61065.HWA
%HOMEPATH%\EPDMY\I14498.MDC
%HOMEPATH%\EPDMY\35697.NMR
%HOMEPATH%\EPDMY\1120.GKK
%HOMEPATH%\EPDMY\B26281.FER
%HOMEPATH%\EPDMY\67208.XXM
%HOMEPATH%\EPDMY\F59553.CMG
%HOMEPATH%\EPDMY\55191.IOK
%HOMEPATH%\EPDMY\27005.ORS
%HOMEPATH%\EPDMY\W60561.MDN
%HOMEPATH%\EPDMY\65009.EWF
%HOMEPATH%\EPDMY\H39017.XSO
%HOMEPATH%\EPDMY\J22125.PJM
%HOMEPATH%\EPDMY\X43731.AXW
%HOMEPATH%\EPDMY\V77813.ZEL
%HOMEPATH%\EPDMY\W72251.LJV
%HOMEPATH%\EPDMY\U52912.JBP
%HOMEPATH%\EPDMY\K37328.FOS
%HOMEPATH%\EPDMY\69452.VLZ
%HOMEPATH%\EPDMY\20349.MOI
%HOMEPATH%\EPDMY\3950.IEG
%HOMEPATH%\EPDMY\E44377.YXQ
%HOMEPATH%\EPDMY\15145.HQZ
%HOMEPATH%\EPDMY\W64748.FCS
%HOMEPATH%\EPDMY\61959.YTV
%HOMEPATH%\EPDMY\C29269.IOR
%HOMEPATH%\EPDMY\34757.JPE
%HOMEPATH%\EPDMY\I90859.DGJ
%HOMEPATH%\EPDMY\R90294.YHH
%HOMEPATH%\EPDMY\X3910.VAM
%HOMEPATH%\EPDMY\D93708.LVI
%HOMEPATH%\EPDMY\P82719.ZDS
%HOMEPATH%\EPDMY\45178.DTJ
%HOMEPATH%\EPDMY\A49782.TXX
%HOMEPATH%\EPDMY\E89535.FEI
%HOMEPATH%\EPDMY\Z68963.XOX
%HOMEPATH%\EPDMY\55248.XEL
%HOMEPATH%\EPDMY\H25559.VKT
%HOMEPATH%\EPDMY\A2908.ZSL
%HOMEPATH%\EPDMY\75996.CJR
%HOMEPATH%\EPDMY\Y63925.UMF
%HOMEPATH%\EPDMY\66127.JNM
%HOMEPATH%\EPDMY\F68642.JVI
%HOMEPATH%\EPDMY\S33896.SSI
%HOMEPATH%\EPDMY\64435.QTT
%HOMEPATH%\EPDMY\27419.WLD
%HOMEPATH%\EPDMY\H6675.NHM
%HOMEPATH%\EPDMY\L26217.CTQ
%HOMEPATH%\EPDMY\40562.QOC
%HOMEPATH%\EPDMY\86607.LPO
%HOMEPATH%\EPDMY\19022.UND
%HOMEPATH%\EPDMY\1613.WYV
%HOMEPATH%\EPDMY\Q99672.YZT
%HOMEPATH%\EPDMY\M30806.DDI
%HOMEPATH%\EPDMY\C40240.MLM
%HOMEPATH%\EPDMY\V60062.WMV
%HOMEPATH%\EPDMY\72444.NSH
%HOMEPATH%\EPDMY\75473.JPW
%HOMEPATH%\EPDMY\23556.EMS
%HOMEPATH%\EPDMY\82290.SHC
%HOMEPATH%\EPDMY\34489.RLW
%HOMEPATH%\EPDMY\E5705.GIA
%HOMEPATH%\EPDMY\C18612.YWU
%HOMEPATH%\EPDMY\28528.RJZ
%HOMEPATH%\EPDMY\S28499.KCQ
%HOMEPATH%\EPDMY\A62295.FYB
%HOMEPATH%\EPDMY\33914.ADO
%HOMEPATH%\EPDMY\I10563.QLX
%HOMEPATH%\EPDMY\R96962.KIW
%HOMEPATH%\EPDMY\80246.TSS
%HOMEPATH%\EPDMY\R24916.WPF
%HOMEPATH%\EPDMY\70852.MCL
%HOMEPATH%\EPDMY\56264.JRH
%HOMEPATH%\EPDMY\18922.YBW
%HOMEPATH%\EPDMY\40254.YOT
%HOMEPATH%\EPDMY\41073.TJO
%HOMEPATH%\EPDMY\E27057.QNJ
%HOMEPATH%\EPDMY\73387.WGQ
%HOMEPATH%\EPDMY\5463.DAM
%HOMEPATH%\EPDMY\96934.WOD
%HOMEPATH%\EPDMY\72668.MKU
%HOMEPATH%\EPDMY\64674.OWB
%HOMEPATH%\EPDMY\39244.EAB
%HOMEPATH%\EPDMY\G79348.PML
%HOMEPATH%\EPDMY\89134.AKK
%HOMEPATH%\EPDMY\R83596.BDS
%HOMEPATH%\EPDMY\57386.XXM
%HOMEPATH%\EPDMY\K35261.GEU
%HOMEPATH%\EPDMY\C5911.OKE
%HOMEPATH%\EPDMY\O61815.SFK
%HOMEPATH%\EPDMY\B61627.NIT
%HOMEPATH%\EPDMY\O47347.DMF
%HOMEPATH%\EPDMY\75069.SFB
%HOMEPATH%\EPDMY\13119.FLU
%HOMEPATH%\EPDMY\R36652.LGX
%HOMEPATH%\EPDMY\2027.TJP
%HOMEPATH%\EPDMY\M96106.WYS
%HOMEPATH%\EPDMY\R97011.YRI
%HOMEPATH%\EPDMY\I30417.JGU
%HOMEPATH%\EPDMY\14032.FVW
%HOMEPATH%\EPDMY\J62722.YEI
%HOMEPATH%\EPDMY\98724.MMK
%HOMEPATH%\EPDMY\K56304.EFR
%HOMEPATH%\EPDMY\W91163.CQA
%HOMEPATH%\EPDMY\79609.VGM
%HOMEPATH%\EPDMY\S20348.JIV
%HOMEPATH%\EPDMY\C84769.PGZ
%HOMEPATH%\EPDMY\J27700.BLE
%HOMEPATH%\EPDMY\S40384.KRQ
%HOMEPATH%\EPDMY\3704.CQV
%HOMEPATH%\EPDMY\37705.XZB
%HOMEPATH%\EPDMY\14098.VWD
%HOMEPATH%\EPDMY\V13326.MYW
%HOMEPATH%\EPDMY\81909.UTT
%HOMEPATH%\EPDMY\T84922.MKN
%HOMEPATH%\EPDMY\R63894.DYJ
%HOMEPATH%\EPDMY\Z56779.ACS
%HOMEPATH%\EPDMY\92390.VIV
%HOMEPATH%\EPDMY\J91118.TSJ
%HOMEPATH%\EPDMY\73005.BYN
%HOMEPATH%\EPDMY\R18917.AEW
%HOMEPATH%\EPDMY\F34830.EWO
%HOMEPATH%\EPDMY\J16155.PPQ
%HOMEPATH%\EPDMY\S75128.UXZ
%HOMEPATH%\EPDMY\24689.EQX
%HOMEPATH%\EPDMY\B64961.CGO
%HOMEPATH%\EPDMY\A13668.BSD
%HOMEPATH%\EPDMY\63912.PUI
%HOMEPATH%\EPDMY\79525.SHC
%HOMEPATH%\EPDMY\K34961.DZP
%HOMEPATH%\EPDMY\T48435.SZL
%HOMEPATH%\EPDMY\92522.IPD
%HOMEPATH%\EPDMY\72018.NBO
%HOMEPATH%\EPDMY\67501.AEM
%HOMEPATH%\EPDMY\71933.QBN
%HOMEPATH%\EPDMY\Q80458.NYZ
%HOMEPATH%\EPDMY\C3562.VXZ
%HOMEPATH%\EPDMY\37446.QZZ
%HOMEPATH%\EPDMY\86197.JFJ
%HOMEPATH%\EPDMY\77196.KRH
%HOMEPATH%\EPDMY\N77270.BVG
%HOMEPATH%\EPDMY\71182.YNV
%HOMEPATH%\EPDMY\63084.OCX
%HOMEPATH%\EPDMY\S39962.QYZ
%HOMEPATH%\EPDMY\Z90523.SSS
%HOMEPATH%\EPDMY\54916.ILI
%HOMEPATH%\EPDMY\90964.XTB
%HOMEPATH%\EPDMY\N3623.UUB
%HOMEPATH%\EPDMY\E51899.HFH
%HOMEPATH%\EPDMY\19787.UOD
%HOMEPATH%\EPDMY\97759.WPR
%HOMEPATH%\EPDMY\14662.ZZK
%HOMEPATH%\EPDMY\T78573.PLG
%HOMEPATH%\EPDMY\58185.FQJ
%HOMEPATH%\EPDMY\H30282.LWI
%HOMEPATH%\EPDMY\92960.RMQ
%HOMEPATH%\EPDMY\47465.ZEE
%HOMEPATH%\EPDMY\I59943.IET
%HOMEPATH%\EPDMY\M48877.RSS
%HOMEPATH%\EPDMY\O3565.PJF
%HOMEPATH%\EPDMY\M70553.LFW
%HOMEPATH%\EPDMY\38775.IWP
%HOMEPATH%\EPDMY\X37467.EFT
%HOMEPATH%\EPDMY\69878.HUA
%HOMEPATH%\EPDMY\13458.NYT
%HOMEPATH%\EPDMY\G16286.STG
%HOMEPATH%\EPDMY\A54420.EAC
%HOMEPATH%\EPDMY\W30279.JWP
%HOMEPATH%\EPDMY\O37809.MQB
%HOMEPATH%\EPDMY\64572.LMS
%HOMEPATH%\EPDMY\22420.OUL
%HOMEPATH%\EPDMY\R51841.WIH
%HOMEPATH%\EPDMY\N89799.XME
%HOMEPATH%\EPDMY\J16436.FJF
%HOMEPATH%\EPDMY\98390.PGH
%HOMEPATH%\EPDMY\28266.CIP
%HOMEPATH%\EPDMY\92351.JTM
%HOMEPATH%\EPDMY\R81924.TAW
%HOMEPATH%\EPDMY\27317.XFJ
%HOMEPATH%\EPDMY\Z38057.XEV
%HOMEPATH%\EPDMY\73480.UTH
%HOMEPATH%\EPDMY\40050.WCF
%HOMEPATH%\EPDMY\73730.EGC
%HOMEPATH%\EPDMY\17479.LSE
%HOMEPATH%\EPDMY\G34017.HGB
%HOMEPATH%\EPDMY\73262.UVZ
%HOMEPATH%\EPDMY\26649.HNX
%HOMEPATH%\EPDMY\O31891.VCL
%HOMEPATH%\EPDMY\Q22092.VZS
%HOMEPATH%\EPDMY\Y29574.EPU
%HOMEPATH%\EPDMY\45731.FNB
%HOMEPATH%\EPDMY\55843.RQY
%HOMEPATH%\EPDMY\23832.QLX
%HOMEPATH%\EPDMY\Q97430.LWK
%HOMEPATH%\EPDMY\79263.CCQ
%HOMEPATH%\EPDMY\V33009.GBS
%HOMEPATH%\EPDMY\L33421.JCQ
%HOMEPATH%\EPDMY\J70073.ACV
%HOMEPATH%\EPDMY\B17904.VUG
%HOMEPATH%\EPDMY\88107.VIM
%HOMEPATH%\EPDMY\85698.QAC
%HOMEPATH%\EPDMY\21022.SKA
%HOMEPATH%\EPDMY\91022.NNZ
%HOMEPATH%\EPDMY\63336.ZIY
%HOMEPATH%\EPDMY\59386.RHO
%HOMEPATH%\EPDMY\94354.SED
%HOMEPATH%\EPDMY\58094.RTG
%HOMEPATH%\EPDMY\E81785.XUZ
%HOMEPATH%\EPDMY\38269.IAM
%HOMEPATH%\EPDMY\12780.GLT
%HOMEPATH%\EPDMY\S57968.VDW
%HOMEPATH%\EPDMY\36294.JTV
%HOMEPATH%\EPDMY\R94919.QOG
%HOMEPATH%\EPDMY\62372.EIF
%HOMEPATH%\EPDMY\14860.YGT
%HOMEPATH%\EPDMY\11717.CSF
%HOMEPATH%\EPDMY\N14097.VQB
%HOMEPATH%\EPDMY\11663.UZJ
%HOMEPATH%\EPDMY\15759.GXI
%HOMEPATH%\EPDMY\R92643.PUP
%HOMEPATH%\EPDMY\94709.LPW
%HOMEPATH%\EPDMY\75981.TEG
%HOMEPATH%\EPDMY\58963.VQT
%HOMEPATH%\EPDMY\C63259.PLC
%HOMEPATH%\EPDMY\60141.RQC
%HOMEPATH%\EPDMY\12498.UJK
%HOMEPATH%\EPDMY\F98545.SUW
%HOMEPATH%\EPDMY\20928.ONV
%HOMEPATH%\EPDMY\11925.GTG
%HOMEPATH%\EPDMY\17064.PFS
%HOMEPATH%\EPDMY\M87321.PHU
%HOMEPATH%\EPDMY\76060.DSX
%HOMEPATH%\EPDMY\V90326.CPH
%HOMEPATH%\EPDMY\19711.RTI
%HOMEPATH%\EPDMY\93433.XEF
%HOMEPATH%\EPDMY\58804.NCV
%HOMEPATH%\EPDMY\Q10847.OHZ
%HOMEPATH%\EPDMY\9482.SJR
%HOMEPATH%\EPDMY\50904.WFH
%HOMEPATH%\EPDMY\22376.RQN
%HOMEPATH%\EPDMY\Z13714.PBG
%HOMEPATH%\EPDMY\56739.PEN
%HOMEPATH%\EPDMY\96760.LFV
%HOMEPATH%\EPDMY\68932.SRV
%HOMEPATH%\EPDMY\56205.WAN
%HOMEPATH%\EPDMY\17339.RJB
%HOMEPATH%\EPDMY\A77060.IKY
%HOMEPATH%\EPDMY\60518.XMB
%HOMEPATH%\EPDMY\O3741.DDV
%HOMEPATH%\EPDMY\15542.LUU
%HOMEPATH%\EPDMY\36398.UOY
%HOMEPATH%\EPDMY\54570.OFZ
%HOMEPATH%\EPDMY\12914.RPN
%HOMEPATH%\EPDMY\I71947.GPO
%HOMEPATH%\EPDMY\H48960.IUP
%HOMEPATH%\EPDMY\50228.VQW
%HOMEPATH%\EPDMY\K49811.GGL
%HOMEPATH%\EPDMY\5012.RAW
%HOMEPATH%\EPDMY\19285.RWC
%HOMEPATH%\EPDMY\A14248.CTA
%HOMEPATH%\EPDMY\11614.YXB
%HOMEPATH%\EPDMY\43001.JRX
%HOMEPATH%\EPDMY\F79424.XIK
%HOMEPATH%\EPDMY\G68731.YCW
%HOMEPATH%\EPDMY\L87260.COL
%HOMEPATH%\EPDMY\D22744.TFR
%HOMEPATH%\EPDMY\86324.QTS
%HOMEPATH%\EPDMY\98425.WAE
%HOMEPATH%\EPDMY\84781.KTA
%HOMEPATH%\EPDMY\J65179.CUA
%HOMEPATH%\EPDMY\84685.JTJ
%HOMEPATH%\EPDMY\65504.KZC
%HOMEPATH%\EPDMY\C57555.WCB
%HOMEPATH%\EPDMY\I54278.RSM
%HOMEPATH%\EPDMY\U70284.OBH
%HOMEPATH%\EPDMY\P14516.UYJ
%HOMEPATH%\EPDMY\80987.IIG
%HOMEPATH%\EPDMY\37486.DLY
%HOMEPATH%\EPDMY\J63602.SGO
%HOMEPATH%\EPDMY\60927.WMI
%HOMEPATH%\EPDMY\J71547.JXT
%HOMEPATH%\EPDMY\L91890.NMX
%HOMEPATH%\EPDMY\44498.GFO
%HOMEPATH%\EPDMY\33166.IPX
%HOMEPATH%\EPDMY\P18745.MSL
%HOMEPATH%\EPDMY\W80027.YRI
%HOMEPATH%\EPDMY\E33743.NQH
%HOMEPATH%\EPDMY\63948.STJ
%HOMEPATH%\EPDMY\R5993.ELR
%HOMEPATH%\EPDMY\P96505.QZC
%HOMEPATH%\EPDMY\9481.ELY
%HOMEPATH%\EPDMY\87273.ZDY
%HOMEPATH%\EPDMY\46530.TJA
%HOMEPATH%\EPDMY\R80165.RJC
%HOMEPATH%\EPDMY\M67679.FJM
%HOMEPATH%\EPDMY\95686.KVP
%HOMEPATH%\EPDMY\D75338.SCT
%HOMEPATH%\EPDMY\67316.VND
%HOMEPATH%\EPDMY\T54607.LQQ
%HOMEPATH%\EPDMY\18617.TMX
%HOMEPATH%\EPDMY\J7318.DYU
%HOMEPATH%\EPDMY\X85731.TOS
%HOMEPATH%\EPDMY\76777.GJH
%HOMEPATH%\EPDMY\I3319.FSW
%HOMEPATH%\EPDMY\C7691.BYX
%HOMEPATH%\EPDMY\F99209.EWR
%HOMEPATH%\EPDMY\25198.MHH
%HOMEPATH%\EPDMY\36124.QAI
%HOMEPATH%\EPDMY\72560.FFX
%HOMEPATH%\EPDMY\29121.FHO
%HOMEPATH%\EPDMY\74445.UKB
%HOMEPATH%\EPDMY\21693.RWU
%HOMEPATH%\EPDMY\81827.MYQ
%HOMEPATH%\EPDMY\68695.FUX
%HOMEPATH%\EPDMY\93815.JOP
%HOMEPATH%\EPDMY\82157.DBQ
%HOMEPATH%\EPDMY\11308.IYJ
%HOMEPATH%\EPDMY\4958.IAD
%HOMEPATH%\EPDMY\79690.RQJ
%HOMEPATH%\EPDMY\K68545.FYM
%HOMEPATH%\EPDMY\77360.HLD
%HOMEPATH%\EPDMY\H17414.QES
%HOMEPATH%\EPDMY\25083.OCF
%HOMEPATH%\EPDMY\19737.HCM
%HOMEPATH%\EPDMY\75641.UXT
%HOMEPATH%\EPDMY\Q30259.KEQ
%HOMEPATH%\EPDMY\67426.VIY
%HOMEPATH%\EPDMY\U12285.OTL
%HOMEPATH%\EPDMY\89479.BFZ
%HOMEPATH%\EPDMY\G35447.ZTP
%HOMEPATH%\EPDMY\16195.UVQ
%HOMEPATH%\EPDMY\B10744.LJF
%HOMEPATH%\EPDMY\M90859.EIM
%HOMEPATH%\EPDMY\67066.TOO
%HOMEPATH%\EPDMY\F6567.GFW
%HOMEPATH%\EPDMY\U9461.ESD
%HOMEPATH%\EPDMY\27041.LNI
%HOMEPATH%\EPDMY\87645.IWK
%HOMEPATH%\EPDMY\T78674.URZ
%HOMEPATH%\EPDMY\69192.HIK
%HOMEPATH%\EPDMY\P71387.TMC
%HOMEPATH%\EPDMY\G61411.KPN
%HOMEPATH%\EPDMY\91815.UAO
%HOMEPATH%\EPDMY\N9935.JPG
%HOMEPATH%\EPDMY\80871.OQB
%HOMEPATH%\EPDMY\K76577.HOH
%HOMEPATH%\EPDMY\76452.DII
%HOMEPATH%\EPDMY\91521.PKT
%HOMEPATH%\EPDMY\60292.YHU
%HOMEPATH%\EPDMY\G12927.AZV
%HOMEPATH%\EPDMY\31625.EAJ
%HOMEPATH%\EPDMY\A88208.EDG
%HOMEPATH%\EPDMY\V75134.AUX
%HOMEPATH%\EPDMY\W51799.NAG
%HOMEPATH%\EPDMY\X25807.TVG
%HOMEPATH%\EPDMY\94909.DPT
%HOMEPATH%\EPDMY\X82183.YNV
%HOMEPATH%\EPDMY\V43567.DDP
%HOMEPATH%\EPDMY\T85819.NXG
%HOMEPATH%\EPDMY\96822.NRE
%HOMEPATH%\EPDMY\U28211.EFH
%HOMEPATH%\EPDMY\46454.BSL
%HOMEPATH%\EPDMY\X33589.XKD
%HOMEPATH%\EPDMY\41008.VAI
%HOMEPATH%\EPDMY\69516.QNT
%HOMEPATH%\EPDMY\T69348.IKN
%HOMEPATH%\EPDMY\J31442.XUB
%HOMEPATH%\EPDMY\95687.EZG
%HOMEPATH%\EPDMY\R10082.CQC
%HOMEPATH%\EPDMY\H43531.JPL
%HOMEPATH%\EPDMY\O4196.TQJ
%HOMEPATH%\EPDMY\U66489.YRA
%HOMEPATH%\EPDMY\E67210.QCV
%HOMEPATH%\EPDMY\winrar.vbs
%HOMEPATH%\EPDMY\Z88948.PHZ
%HOMEPATH%\EPDMY\84091.CKU
%HOMEPATH%\EPDMY\settings.ini
%HOMEPATH%\EPDMY\169837.dat
%HOMEPATH%\EPDMY\101538.YCQ
%HOMEPATH%\EPDMY\YWZWW.exe
%HOMEPATH%\EPDMY\360045.dat
%HOMEPATH%\EPDMY\T51418.KUJ
%HOMEPATH%\EPDMY\56798.ITO
%HOMEPATH%\EPDMY\14206.FOI
%HOMEPATH%\EPDMY\V79585.AIG
%HOMEPATH%\EPDMY\36457.OVE
%HOMEPATH%\EPDMY\B94703.BIS
%HOMEPATH%\EPDMY\54296.SWQ
%HOMEPATH%\EPDMY\66526.NNJ
%HOMEPATH%\EPDMY\W3582.RMN
%HOMEPATH%\EPDMY\56040.AUR
%HOMEPATH%\EPDMY\O20527.KDK
%HOMEPATH%\EPDMY\Y31066.DTG
%HOMEPATH%\EPDMY\82383.POC
%HOMEPATH%\EPDMY\40498.WYP
%HOMEPATH%\EPDMY\D83013.MKS
%HOMEPATH%\EPDMY\18495.UVI
%HOMEPATH%\EPDMY\17557.GLH
%HOMEPATH%\EPDMY\92687.VBH
%HOMEPATH%\EPDMY\52181.OCL
%HOMEPATH%\EPDMY\23085.HZP
%HOMEPATH%\EPDMY\E91084.RGO
%HOMEPATH%\EPDMY\L39143.YSX
%HOMEPATH%\EPDMY\63953.YLX
%HOMEPATH%\EPDMY\G86126.AWE
%HOMEPATH%\EPDMY\E27049.JFU
%HOMEPATH%\EPDMY\V74364.ANG
%HOMEPATH%\EPDMY\D53236.MON
%HOMEPATH%\EPDMY\53732.AMD
%HOMEPATH%\EPDMY\U34426.QWU
%HOMEPATH%\EPDMY\95296.OPC
%HOMEPATH%\EPDMY\96844.FEH
%HOMEPATH%\EPDMY\U64706.YWJ
%HOMEPATH%\EPDMY\Y2017.CRG
%HOMEPATH%\EPDMY\7207.QAO
%HOMEPATH%\EPDMY\91753.KDI
%HOMEPATH%\EPDMY\B34066.OTT
%HOMEPATH%\EPDMY\V52272.XUA
%HOMEPATH%\EPDMY\30688.BBX
%HOMEPATH%\EPDMY\89240.WUC
%HOMEPATH%\EPDMY\87227.ZRJ
%HOMEPATH%\EPDMY\W6678.KWL
%HOMEPATH%\EPDMY\K30849.CCV
%HOMEPATH%\EPDMY\Z56642.MXW
%HOMEPATH%\EPDMY\R79737.KBY
%HOMEPATH%\EPDMY\S47567.SWC
%HOMEPATH%\EPDMY\F48155.EJN
%HOMEPATH%\EPDMY\32013.GSZ
%HOMEPATH%\EPDMY\85672.GBN
%HOMEPATH%\EPDMY\C51058.TXN
%HOMEPATH%\EPDMY\X71757.OVN
%HOMEPATH%\EPDMY\O83192.LPF
%HOMEPATH%\EPDMY\Y33660.CBM
%HOMEPATH%\EPDMY\A69224.DRT
%HOMEPATH%\EPDMY\J13183.QDX
%HOMEPATH%\EPDMY\47659.KQC
%HOMEPATH%\EPDMY\70225.YPG
%HOMEPATH%\EPDMY\64507.YGV
%HOMEPATH%\EPDMY\72017.SRA
%HOMEPATH%\EPDMY\M47600.YYS
%HOMEPATH%\EPDMY\O67697.FWM
%HOMEPATH%\EPDMY\L87718.SSQ
%HOMEPATH%\EPDMY\45502.STV
%HOMEPATH%\EPDMY\J90733.SMO
%HOMEPATH%\EPDMY\R78961.XXL
%HOMEPATH%\EPDMY\L6337.OTT
%HOMEPATH%\EPDMY\M10078.MLB
%HOMEPATH%\EPDMY\5649.JSM
%HOMEPATH%\EPDMY\34907.LQD
%HOMEPATH%\EPDMY\36635.KUJ
%HOMEPATH%\EPDMY\C31530.GKR
%HOMEPATH%\EPDMY\29758.SRW
%HOMEPATH%\EPDMY\43731.LBR
%HOMEPATH%\EPDMY\U54187.DQV
%HOMEPATH%\EPDMY\40717.KCT
%HOMEPATH%\EPDMY\B17047.XGL
%HOMEPATH%\EPDMY\42604.ZCR
%HOMEPATH%\EPDMY\4437.DYN
%HOMEPATH%\EPDMY\L35277.GGW
%HOMEPATH%\EPDMY\24316.NLD
%HOMEPATH%\EPDMY\20293.TFX
%HOMEPATH%\EPDMY\Z74721.YZO
%HOMEPATH%\EPDMY\52247.TZB
%HOMEPATH%\EPDMY\W40325.DXG
%HOMEPATH%\EPDMY\82848.BNE
%HOMEPATH%\EPDMY\Y53303.UHD
%HOMEPATH%\EPDMY\H69058.XQM
%HOMEPATH%\EPDMY\36786.FMJ
%HOMEPATH%\EPDMY\P72817.PRL
%HOMEPATH%\EPDMY\12482.UZP
%HOMEPATH%\EPDMY\C24665.QNI
%HOMEPATH%\EPDMY\67966.PWJ
%HOMEPATH%\EPDMY\W17763.DTX
%HOMEPATH%\EPDMY\M31487.FUD
%HOMEPATH%\EPDMY\W19331.YRU
%HOMEPATH%\EPDMY\74563.MOR
%HOMEPATH%\EPDMY\R89518.JUR
%HOMEPATH%\EPDMY\11832.MDJ
%HOMEPATH%\EPDMY\H60149.ELW
%HOMEPATH%\EPDMY\X50283.PXD
%HOMEPATH%\EPDMY\95955.LTH
%HOMEPATH%\EPDMY\R31371.LCP
%HOMEPATH%\EPDMY\50935.UDW
%HOMEPATH%\EPDMY\5650.KPX
%HOMEPATH%\EPDMY\5680.IKM
%HOMEPATH%\EPDMY\61133.GJR
%HOMEPATH%\EPDMY\32393.PKO
%HOMEPATH%\EPDMY\P55393.EDA
%HOMEPATH%\EPDMY\M47621.SIL
%HOMEPATH%\EPDMY\P70748.GWJ
%HOMEPATH%\EPDMY\99802.MTZ
%HOMEPATH%\EPDMY\A91820.VLC
%HOMEPATH%\EPDMY\Z5183.JIV
%HOMEPATH%\EPDMY\47743.RHQ
%HOMEPATH%\EPDMY\83552.SNU
%HOMEPATH%\EPDMY\9349.SMA
%HOMEPATH%\EPDMY\L28909.FCR
%HOMEPATH%\EPDMY\91108.PRQ
%HOMEPATH%\EPDMY\W9805.MIV
%HOMEPATH%\EPDMY\10748.SFO
%HOMEPATH%\EPDMY\T8131.MJZ
%HOMEPATH%\EPDMY\38472.FAZ
%HOMEPATH%\EPDMY\K9269.XAZ
%HOMEPATH%\EPDMY\78216.IDZ
%HOMEPATH%\EPDMY\37884.UNS
%HOMEPATH%\EPDMY\71542.OHR
%HOMEPATH%\EPDMY\D11211.MGG
%HOMEPATH%\EPDMY\D90374.NHM
%HOMEPATH%\EPDMY\2390.TCZ
%HOMEPATH%\EPDMY\K51101.HRN
%HOMEPATH%\EPDMY\57922.MGG
%HOMEPATH%\EPDMY\G31109.PJG
%HOMEPATH%\EPDMY\34709.FBB
%HOMEPATH%\EPDMY\16106.CYD
%HOMEPATH%\EPDMY\41295.FVG
%HOMEPATH%\EPDMY\H96332.WSV
%HOMEPATH%\EPDMY\D28510.YWT
%HOMEPATH%\EPDMY\S85739.ZFQ
%HOMEPATH%\EPDMY\C89537.VXW
%HOMEPATH%\EPDMY\76450.RNH
%HOMEPATH%\EPDMY\B32331.CCV
%HOMEPATH%\EPDMY\46814.VXZ
%HOMEPATH%\EPDMY\X10564.YWN
%HOMEPATH%\EPDMY\4401.MCB
%HOMEPATH%\EPDMY\F86792.ETO
%HOMEPATH%\EPDMY\89055.SSQ
%HOMEPATH%\EPDMY\H31291.ZDO
%HOMEPATH%\EPDMY\55201.END
%HOMEPATH%\EPDMY\99086.RYV
%HOMEPATH%\EPDMY\2729.DQR
%HOMEPATH%\EPDMY\I21768.RPO
%HOMEPATH%\EPDMY\B30993.WNS
%HOMEPATH%\EPDMY\Z10033.LNQ
%HOMEPATH%\EPDMY\92969.VSL
%HOMEPATH%\EPDMY\49104.CEE
%HOMEPATH%\EPDMY\G74800.ZHC
%HOMEPATH%\EPDMY\40732.FKG
%HOMEPATH%\EPDMY\A46830.JZD
%HOMEPATH%\EPDMY\67287.VOH
%HOMEPATH%\EPDMY\H75137.BIG
%HOMEPATH%\EPDMY\87396.SAB
%HOMEPATH%\EPDMY\55104.YYG
%HOMEPATH%\EPDMY\58996.VOG
%HOMEPATH%\EPDMY\74578.YJN
%HOMEPATH%\EPDMY\K25577.BJH
%HOMEPATH%\EPDMY\S85644.ISE
%HOMEPATH%\EPDMY\W85651.OBU
%HOMEPATH%\EPDMY\19893.HBA
%HOMEPATH%\EPDMY\26288.YKL
%HOMEPATH%\EPDMY\35087.KDY
%HOMEPATH%\EPDMY\I86427.WWA
%HOMEPATH%\EPDMY\96637.TWS
%HOMEPATH%\EPDMY\R32735.LFF
%HOMEPATH%\EPDMY\34582.ZLB
%HOMEPATH%\EPDMY\B57739.MEO
%HOMEPATH%\EPDMY\15924.KQQ
%HOMEPATH%\EPDMY\U66005.MBK
%HOMEPATH%\EPDMY\43750.QYE
%HOMEPATH%\EPDMY\K63172.PNX
%HOMEPATH%\EPDMY\80587.HFE
%HOMEPATH%\EPDMY\39913.JIU
%HOMEPATH%\EPDMY\42692.WXI
%HOMEPATH%\EPDMY\T72876.PTX
%HOMEPATH%\EPDMY\42006.UIE
%HOMEPATH%\EPDMY\70038.XGW
%HOMEPATH%\EPDMY\27319.ZLI
%HOMEPATH%\EPDMY\48588.YBS
%HOMEPATH%\EPDMY\67869.FZL
%HOMEPATH%\EPDMY\Y55351.FJE
%HOMEPATH%\EPDMY\79871.JHE
%HOMEPATH%\EPDMY\61274.LKS
%HOMEPATH%\EPDMY\K23706.YRY
%HOMEPATH%\EPDMY\G36325.DRU
%HOMEPATH%\EPDMY\S33202.XJQ
%HOMEPATH%\EPDMY\74924.IQB

Удаляет следующие файлы:

%TEMP%\NO_PWDS_report_27-06-2013_17-33-26-F4D651E80A6E4747C8F28A7D8647D810-IHHP.bin
%HOMEPATH%\EPDMY\FCCNLYCY.dat

Перемещает следующие файлы:

%TEMP%\report_27-06-2013_17-33-26-F4D651E80A6E4747C8F28A7D8647D810-IHHP.bin в %TEMP%\NO_PWDS_report_27-06-2013_17-33-26-F4D651E80A6E4747C8F28A7D8647D810-IHHP.bin

Сетевая активность:

Подключается к:

'pr#####-software.zz.mu':80

TCP:

Запросы HTTP POST:

pr#####-software.zz.mu/php/indexx.php

UDP:

DNS ASK pr#####-software.zz.mu

Другое:

Ищет следующие окна:

ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'EDIT' WindowName: '(null)'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней