Trojan.DownLoader10.27468

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'CWROX' = '%HOMEPATH%\CWROX\start.vbs'

Вредоносные функции:

Создает и запускает на исполнение:

'%HOMEPATH%\CWROX\Autoit3758953.exe' KRRKHVVA.dat
'%HOMEPATH%\CWROX\Autoit3758953.exe' 677273.dat

Запускает на исполнение:

'%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
'<SYSTEM32>\wscript.exe' "%HOMEPATH%\CWROX\run.vbs"

Внедряет код в

следующие системные процессы:

%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

Изменения в файловой системе:

Создает следующие файлы:

%HOMEPATH%\CWROX\M86850.LJM
%HOMEPATH%\CWROX\21834.QIR
%HOMEPATH%\CWROX\L28620.VSL
%HOMEPATH%\CWROX\15677.FRN
%HOMEPATH%\CWROX\83263.NNO
%HOMEPATH%\CWROX\M12950.XLJ
%HOMEPATH%\CWROX\64323.XEB
%HOMEPATH%\CWROX\8180.ZXX
%HOMEPATH%\CWROX\L55354.YVS
%HOMEPATH%\CWROX\D34577.VRI
%HOMEPATH%\CWROX\H62319.QPS
%HOMEPATH%\CWROX\78219.UDT
%HOMEPATH%\CWROX\67446.PEP
%HOMEPATH%\CWROX\R52590.ICG
%HOMEPATH%\CWROX\55952.TIN
%HOMEPATH%\CWROX\U96465.OXP
%HOMEPATH%\CWROX\K41380.USW
%HOMEPATH%\CWROX\F26581.UZD
%HOMEPATH%\CWROX\D66573.YHE
%HOMEPATH%\CWROX\2591.JEE
%HOMEPATH%\CWROX\Q1680.TYU
%HOMEPATH%\CWROX\7328.YDM
%HOMEPATH%\CWROX\H87554.EJG
%HOMEPATH%\CWROX\13095.IAZ
%HOMEPATH%\CWROX\42986.OSS
%HOMEPATH%\CWROX\19066.HKS
%HOMEPATH%\CWROX\73625.FKL
%HOMEPATH%\CWROX\87220.ABJ
%HOMEPATH%\CWROX\50392.PCP
%HOMEPATH%\CWROX\97354.WYO
%HOMEPATH%\CWROX\D27333.PQB
%HOMEPATH%\CWROX\43652.SHG
%HOMEPATH%\CWROX\P27442.DSU
%HOMEPATH%\CWROX\23929.NLZ
%HOMEPATH%\CWROX\27759.JMK
%HOMEPATH%\CWROX\W39499.VEF
%HOMEPATH%\CWROX\78215.PMG
%HOMEPATH%\CWROX\51691.WRB
%HOMEPATH%\CWROX\R31578.BPS
%HOMEPATH%\CWROX\J33376.TPA
%HOMEPATH%\CWROX\D46229.RGU
%HOMEPATH%\CWROX\G37588.MVL
%HOMEPATH%\CWROX\70737.SIT
%HOMEPATH%\CWROX\F37764.QOP
%HOMEPATH%\CWROX\75465.CDK
%HOMEPATH%\CWROX\28612.KNU
%HOMEPATH%\CWROX\37948.CQT
%HOMEPATH%\CWROX\44193.JZP
%HOMEPATH%\CWROX\K15286.UZS
%HOMEPATH%\CWROX\12851.RJJ
%HOMEPATH%\CWROX\4139.ITB
%HOMEPATH%\CWROX\K2629.WCF
%HOMEPATH%\CWROX\85911.YMY
%HOMEPATH%\CWROX\87012.GOH
%HOMEPATH%\CWROX\D84804.SOD
%HOMEPATH%\CWROX\9235.YXD
%HOMEPATH%\CWROX\16926.SCD
%HOMEPATH%\CWROX\2454.TCC
%HOMEPATH%\CWROX\C43917.MGF
%HOMEPATH%\CWROX\50725.UPD
%HOMEPATH%\CWROX\A50681.MGB
%HOMEPATH%\CWROX\I44296.EUN
%HOMEPATH%\CWROX\60348.FDL
%HOMEPATH%\CWROX\93722.WDD
%HOMEPATH%\CWROX\86791.UAT
%HOMEPATH%\CWROX\53880.GKD
%HOMEPATH%\CWROX\R54185.JNN
%HOMEPATH%\CWROX\N40034.KSM
%HOMEPATH%\CWROX\U98505.MCQ
%HOMEPATH%\CWROX\Q60519.JSL
%HOMEPATH%\CWROX\83141.SKX
%HOMEPATH%\CWROX\M13241.LXE
%HOMEPATH%\CWROX\36342.GYH
%HOMEPATH%\CWROX\83610.KNL
%HOMEPATH%\CWROX\Y96951.HYW
%HOMEPATH%\CWROX\28766.TLE
%HOMEPATH%\CWROX\13710.EVD
%HOMEPATH%\CWROX\41529.KYQ
%HOMEPATH%\CWROX\G67877.LLT
%HOMEPATH%\CWROX\K34666.RLA
%HOMEPATH%\CWROX\29342.HQO
%HOMEPATH%\CWROX\J92995.PJG
%HOMEPATH%\CWROX\28991.OTO
%HOMEPATH%\CWROX\S12040.CNT
%HOMEPATH%\CWROX\M93156.OUL
%HOMEPATH%\CWROX\A30631.HOF
%HOMEPATH%\CWROX\W39294.ZLK
%HOMEPATH%\CWROX\54581.CEN
%HOMEPATH%\CWROX\O33338.NOA
%HOMEPATH%\CWROX\25426.CAB
%HOMEPATH%\CWROX\61544.IIY
%HOMEPATH%\CWROX\R26702.ECL
%HOMEPATH%\CWROX\K96994.POG
%HOMEPATH%\CWROX\85941.QDP
%HOMEPATH%\CWROX\21822.KXS
%HOMEPATH%\CWROX\U3601.RCD
%HOMEPATH%\CWROX\M3008.EQB
%HOMEPATH%\CWROX\62585.CPA
%HOMEPATH%\CWROX\Z56972.MVU
%HOMEPATH%\CWROX\14851.IRP
%HOMEPATH%\CWROX\56724.INS
%HOMEPATH%\CWROX\W83680.LDH
%HOMEPATH%\CWROX\T27175.FTO
%HOMEPATH%\CWROX\U68695.QDP
%HOMEPATH%\CWROX\11852.NQJ
%HOMEPATH%\CWROX\T1239.VCD
%HOMEPATH%\CWROX\99765.QRP
%HOMEPATH%\CWROX\62646.SCJ
%HOMEPATH%\CWROX\54235.UWZ
%HOMEPATH%\CWROX\Z40221.YWQ
%HOMEPATH%\CWROX\21582.WEJ
%HOMEPATH%\CWROX\99028.IEH
%HOMEPATH%\CWROX\20752.YOC
%HOMEPATH%\CWROX\E1653.EMB
%HOMEPATH%\CWROX\V2588.PAV
%HOMEPATH%\CWROX\G74223.YOV
%HOMEPATH%\CWROX\P91364.ALG
%HOMEPATH%\CWROX\85498.SGX
%HOMEPATH%\CWROX\R79402.SCC
%HOMEPATH%\CWROX\75217.BPR
%HOMEPATH%\CWROX\Z36362.IVI
%HOMEPATH%\CWROX\83908.ICP
%HOMEPATH%\CWROX\R78404.RKY
%HOMEPATH%\CWROX\D85276.MLT
%HOMEPATH%\CWROX\39792.WBJ
%HOMEPATH%\CWROX\E31435.XOP
%HOMEPATH%\CWROX\L9939.VMI
%HOMEPATH%\CWROX\Z79754.DIA
%HOMEPATH%\CWROX\T77358.TUI
%HOMEPATH%\CWROX\75615.RBC
%HOMEPATH%\CWROX\39698.GHH
%HOMEPATH%\CWROX\65357.FZU
%HOMEPATH%\CWROX\K29067.AQI
%HOMEPATH%\CWROX\O34225.VOL
%HOMEPATH%\CWROX\N71784.AJM
%HOMEPATH%\CWROX\N34376.ATT
%HOMEPATH%\CWROX\F76064.HWS
%HOMEPATH%\CWROX\Z80679.AFD
%HOMEPATH%\CWROX\60582.WFZ
%HOMEPATH%\CWROX\60998.VQM
%HOMEPATH%\CWROX\I96117.OSN
%HOMEPATH%\CWROX\V85248.HBH
%HOMEPATH%\CWROX\11217.ITN
%HOMEPATH%\CWROX\25133.DDZ
%HOMEPATH%\CWROX\T64408.PTC
%HOMEPATH%\CWROX\U5236.ZOL
%HOMEPATH%\CWROX\94000.DQH
%HOMEPATH%\CWROX\65275.NJD
%HOMEPATH%\CWROX\1017.OZE
%HOMEPATH%\CWROX\Q91924.SJC
%HOMEPATH%\CWROX\U44824.EHY
%HOMEPATH%\CWROX\21705.XDI
%HOMEPATH%\CWROX\22021.QYW
%HOMEPATH%\CWROX\8419.DXE
%HOMEPATH%\CWROX\P6592.ZHO
%HOMEPATH%\CWROX\49861.VTT
%HOMEPATH%\CWROX\K73147.PNT
%HOMEPATH%\CWROX\55890.AZX
%HOMEPATH%\CWROX\10600.OWE
%HOMEPATH%\CWROX\G32718.OGT
%HOMEPATH%\CWROX\25261.YJY
%HOMEPATH%\CWROX\E25703.TYS
%HOMEPATH%\CWROX\Y4489.YAY
%HOMEPATH%\CWROX\A30071.GJB
%HOMEPATH%\CWROX\51022.PQM
%HOMEPATH%\CWROX\H25524.XHU
%HOMEPATH%\CWROX\K10940.BAC
%HOMEPATH%\CWROX\75806.CMH
%HOMEPATH%\CWROX\48647.NDT
%HOMEPATH%\CWROX\85610.QAB
%HOMEPATH%\CWROX\G48279.UOR
%HOMEPATH%\CWROX\83169.NGB
%HOMEPATH%\CWROX\Z45295.EAA
%HOMEPATH%\CWROX\A81773.IDL
%HOMEPATH%\CWROX\6293.WHK
%HOMEPATH%\CWROX\46913.IIS
%HOMEPATH%\CWROX\D84418.WTL
%HOMEPATH%\CWROX\X86885.QQC
%HOMEPATH%\CWROX\67167.QXI
%HOMEPATH%\CWROX\80965.UVP
%HOMEPATH%\CWROX\N63143.EVJ
%HOMEPATH%\CWROX\26809.UCZ
%HOMEPATH%\CWROX\Q49792.KVD
%HOMEPATH%\CWROX\19238.JXO
%HOMEPATH%\CWROX\F77135.KOU
%HOMEPATH%\CWROX\42133.JMV
%HOMEPATH%\CWROX\77184.RYW
%HOMEPATH%\CWROX\13234.AVG
%HOMEPATH%\CWROX\63119.EUZ
%HOMEPATH%\CWROX\J64164.LOE
%HOMEPATH%\CWROX\O50839.ACU
%HOMEPATH%\CWROX\69909.RGR
%HOMEPATH%\CWROX\Q64548.FAU
%HOMEPATH%\CWROX\A3523.UPY
%HOMEPATH%\CWROX\89485.IXB
%HOMEPATH%\disable.txt
%HOMEPATH%\CWROX\KRRKHVVA.dat
%HOMEPATH%\CWROX\start.vbs
%HOMEPATH%\CWROX\start.cmd
%HOMEPATH%\CWROX\65331.RAS
%HOMEPATH%\CWROX\26331.MYI
%HOMEPATH%\CWROX\L84606.RAQ
%HOMEPATH%\CWROX\1619.HNP
%HOMEPATH%\CWROX\32038.GWD
%HOMEPATH%\CWROX\A94878.GIJ
%HOMEPATH%\CWROX\R15522.FKV
%HOMEPATH%\CWROX\53105.ORZ
%HOMEPATH%\CWROX\34778.DOR
%HOMEPATH%\CWROX\40013.XBL
%HOMEPATH%\CWROX\H75998.FHL
%HOMEPATH%\CWROX\23695.SME
%HOMEPATH%\CWROX\47357.VYU
%HOMEPATH%\CWROX\B23764.DVB
%HOMEPATH%\CWROX\67998.ORR
%HOMEPATH%\CWROX\63015.CAM
%HOMEPATH%\CWROX\H80680.AAH
%HOMEPATH%\CWROX\11736.DMO
%HOMEPATH%\CWROX\11983.WTN
%HOMEPATH%\CWROX\37387.MNV
%HOMEPATH%\CWROX\61642.UOR
%HOMEPATH%\CWROX\O16232.GTZ
%HOMEPATH%\CWROX\57019.IBM
%HOMEPATH%\CWROX\84560.MVT
%HOMEPATH%\CWROX\21512.QOP
%HOMEPATH%\CWROX\V58105.OLP
%HOMEPATH%\CWROX\M64069.JUT
%HOMEPATH%\CWROX\35937.YTO
%HOMEPATH%\CWROX\O21944.UFU
%HOMEPATH%\CWROX\Y91688.DFK
%HOMEPATH%\CWROX\94818.KHS
%HOMEPATH%\CWROX\79181.OCJ
%HOMEPATH%\CWROX\60246.JJO
%HOMEPATH%\CWROX\Q53278.HTZ
%HOMEPATH%\CWROX\F99055.YLS
%HOMEPATH%\CWROX\B16892.NAH
%HOMEPATH%\CWROX\86665.RSM
%HOMEPATH%\CWROX\39325.WCF
%HOMEPATH%\CWROX\T19450.XWH
%HOMEPATH%\CWROX\F24699.GBF
%HOMEPATH%\CWROX\85803.GMD
%HOMEPATH%\CWROX\95095.WDD
%HOMEPATH%\CWROX\S86469.FEB
%HOMEPATH%\CWROX\27061.PDI
%HOMEPATH%\CWROX\13930.YWZ
%HOMEPATH%\CWROX\87184.UNK
%HOMEPATH%\CWROX\U50348.JTB
%HOMEPATH%\CWROX\S35363.KCJ
%HOMEPATH%\CWROX\K98734.VRQ
%HOMEPATH%\CWROX\E28304.EYR
%HOMEPATH%\CWROX\F41260.EDW
%HOMEPATH%\CWROX\I51656.EEZ
%HOMEPATH%\CWROX\62771.VGV
%HOMEPATH%\CWROX\5733.NHB
%HOMEPATH%\CWROX\1971.TYJ
%HOMEPATH%\CWROX\J20744.JWF
%HOMEPATH%\CWROX\15990.RHP
%HOMEPATH%\CWROX\X97409.GXJ
%HOMEPATH%\CWROX\V60061.CDI
%HOMEPATH%\CWROX\N21055.TYT
%HOMEPATH%\CWROX\M36468.EPX
%HOMEPATH%\CWROX\L62410.VCD
%HOMEPATH%\CWROX\M29112.GJM
%HOMEPATH%\CWROX\83440.ZCM
%HOMEPATH%\CWROX\83923.QXF
%HOMEPATH%\CWROX\2423.KNA
%HOMEPATH%\CWROX\32697.AWU
%HOMEPATH%\CWROX\1652.ZCU
%HOMEPATH%\CWROX\N36958.UZP
%HOMEPATH%\CWROX\41963.AVR
%HOMEPATH%\CWROX\77400.KYH
%HOMEPATH%\CWROX\26263.TUN
%HOMEPATH%\CWROX\J74845.OQC
%HOMEPATH%\CWROX\42045.QXQ
%HOMEPATH%\CWROX\82329.KZY
%HOMEPATH%\CWROX\16032.BDB
%HOMEPATH%\CWROX\F97074.DRH
%HOMEPATH%\CWROX\17947.ZSM
%HOMEPATH%\CWROX\32956.TWW
%HOMEPATH%\CWROX\60174.HOV
%HOMEPATH%\CWROX\E51871.ZUX
%HOMEPATH%\CWROX\21901.JVX
%HOMEPATH%\CWROX\66155.RGQ
%HOMEPATH%\CWROX\17146.ZBB
%HOMEPATH%\CWROX\O13894.CRF
%HOMEPATH%\CWROX\35188.AYE
%HOMEPATH%\CWROX\78433.CNW
%HOMEPATH%\CWROX\E60239.RVM
%HOMEPATH%\CWROX\40628.FQD
%HOMEPATH%\CWROX\H6228.XJA
%HOMEPATH%\CWROX\99914.DUQ
%HOMEPATH%\CWROX\35856.HEK
%HOMEPATH%\CWROX\29440.ZET
%HOMEPATH%\CWROX\20186.THN
%HOMEPATH%\CWROX\S53053.WHO
%HOMEPATH%\CWROX\D15347.CPE
%HOMEPATH%\CWROX\F5897.IQM
%HOMEPATH%\CWROX\2795.MBS
%HOMEPATH%\CWROX\D14814.RIF
%HOMEPATH%\CWROX\D91033.XSW
%HOMEPATH%\CWROX\74048.KZE
%HOMEPATH%\CWROX\58678.NFJ
%HOMEPATH%\CWROX\58581.NYY
%HOMEPATH%\CWROX\B44352.VTM
%HOMEPATH%\CWROX\K8487.TTT
%HOMEPATH%\CWROX\99218.RSF
%HOMEPATH%\CWROX\P40714.WUD
%HOMEPATH%\CWROX\56370.PXX
%HOMEPATH%\CWROX\47360.IFI
%HOMEPATH%\CWROX\27361.PSZ
%HOMEPATH%\CWROX\P15326.BJQ
%HOMEPATH%\CWROX\S56914.UGY
%HOMEPATH%\CWROX\83155.DIL
%HOMEPATH%\CWROX\V75340.IIW
%HOMEPATH%\CWROX\P70919.XMT
%HOMEPATH%\CWROX\F61127.HCL
%HOMEPATH%\CWROX\35992.YVO
%HOMEPATH%\CWROX\I70653.TSA
%HOMEPATH%\CWROX\13551.HEL
%HOMEPATH%\CWROX\P21281.CAM
%HOMEPATH%\CWROX\M67106.DPF
%HOMEPATH%\CWROX\V82871.JJF
%HOMEPATH%\CWROX\Z83969.ANN
%HOMEPATH%\CWROX\L11307.NZN
%HOMEPATH%\CWROX\P99530.VFE
%HOMEPATH%\CWROX\50772.OHM
%HOMEPATH%\CWROX\G53320.MKL
%HOMEPATH%\CWROX\5409.HOG
%HOMEPATH%\CWROX\U61082.HTU
%HOMEPATH%\CWROX\16810.CVJ
%HOMEPATH%\CWROX\N27293.YNP
%HOMEPATH%\CWROX\63113.RLX
%HOMEPATH%\CWROX\74869.GOK
%HOMEPATH%\CWROX\Y42773.GMR
%HOMEPATH%\CWROX\N70870.DIC
%HOMEPATH%\CWROX\X29331.KNR
%HOMEPATH%\CWROX\39166.XJT
%HOMEPATH%\CWROX\58784.FSO
%HOMEPATH%\CWROX\H70626.GQJ
%HOMEPATH%\CWROX\U48976.OKS
%HOMEPATH%\CWROX\80156.BMR
%HOMEPATH%\CWROX\P46242.FFD
%HOMEPATH%\CWROX\91034.BUT
%HOMEPATH%\CWROX\79165.KWJ
%HOMEPATH%\CWROX\35985.AOX
%HOMEPATH%\CWROX\31548.YCI
%HOMEPATH%\CWROX\56002.OWR
%HOMEPATH%\CWROX\8417.QVW
%HOMEPATH%\CWROX\84805.OCR
%HOMEPATH%\CWROX\V86165.XPU
%HOMEPATH%\CWROX\H62158.COO
%HOMEPATH%\CWROX\A51570.URC
%HOMEPATH%\CWROX\Y47106.RDR
%HOMEPATH%\CWROX\X54232.WFV
%HOMEPATH%\CWROX\79423.DDL
%HOMEPATH%\CWROX\54692.YQS
%HOMEPATH%\CWROX\Q70654.XGT
%HOMEPATH%\CWROX\30212.AVL
%HOMEPATH%\CWROX\20134.TER
%HOMEPATH%\CWROX\P51553.SGS
%HOMEPATH%\CWROX\42614.DYR
%HOMEPATH%\CWROX\47226.NUJ
%HOMEPATH%\CWROX\L45018.RKP
%HOMEPATH%\CWROX\5490.CNE
%HOMEPATH%\CWROX\61426.LSW
%HOMEPATH%\CWROX\99732.SAN
%HOMEPATH%\CWROX\A62620.VVT
%HOMEPATH%\CWROX\59755.DAX
%HOMEPATH%\CWROX\E34066.SBN
%HOMEPATH%\CWROX\75526.JYW
%HOMEPATH%\CWROX\V28194.RNN
%HOMEPATH%\CWROX\Y93456.VHX
%HOMEPATH%\CWROX\E4405.MCP
%HOMEPATH%\CWROX\75097.GOF
%HOMEPATH%\CWROX\80361.MNF
%HOMEPATH%\CWROX\Z18459.WKF
%HOMEPATH%\CWROX\T67942.QUB
%HOMEPATH%\CWROX\C31140.BWB
%HOMEPATH%\CWROX\Y10198.VFK
%HOMEPATH%\CWROX\73843.ZXQ
%HOMEPATH%\CWROX\94549.HST
%HOMEPATH%\CWROX\W76619.AGK
%HOMEPATH%\CWROX\C71662.QYD
%HOMEPATH%\CWROX\27873.ZKK
%HOMEPATH%\CWROX\94262.NHC
%HOMEPATH%\CWROX\22680.URY
%HOMEPATH%\CWROX\95093.MXV
%HOMEPATH%\CWROX\Y82141.LSV
%HOMEPATH%\CWROX\92595.SNY
%HOMEPATH%\CWROX\M54001.PGN
%HOMEPATH%\CWROX\61041.WEL
%HOMEPATH%\CWROX\99118.JFF
%HOMEPATH%\CWROX\42428.JHS
%HOMEPATH%\CWROX\25737.HIX
%HOMEPATH%\CWROX\run.vbs
%HOMEPATH%\CWROX\Q67676.JTI
%HOMEPATH%\CWROX\66752.EFP
%HOMEPATH%\CWROX\settings.ini
%HOMEPATH%\CWROX\878552.dat
%HOMEPATH%\CWROX\677273.dat
%HOMEPATH%\CWROX\Autoit3758953.exe
%HOMEPATH%\CWROX\645651.dat
%HOMEPATH%\CWROX\I59128.YBF
%HOMEPATH%\CWROX\68470.CIR
%HOMEPATH%\CWROX\B48637.IIX
%HOMEPATH%\CWROX\73585.IZX
%HOMEPATH%\CWROX\R67744.SIB
%HOMEPATH%\CWROX\59565.KNG
%HOMEPATH%\CWROX\M30371.BCN
%HOMEPATH%\CWROX\B78459.CRF
%HOMEPATH%\CWROX\M65968.WAO
%HOMEPATH%\CWROX\5754.DVK
%HOMEPATH%\CWROX\23354.MPV
%HOMEPATH%\CWROX\X12169.WWZ
%HOMEPATH%\CWROX\O31532.APR
%HOMEPATH%\CWROX\65745.ARA
%HOMEPATH%\CWROX\8140.NYD
%HOMEPATH%\CWROX\Q79312.AGJ
%HOMEPATH%\CWROX\59897.ORN
%HOMEPATH%\CWROX\R27604.HMT
%HOMEPATH%\CWROX\79372.MYP
%HOMEPATH%\CWROX\V24223.JPI
%HOMEPATH%\CWROX\75191.FXS
%HOMEPATH%\CWROX\99368.JKE
%HOMEPATH%\CWROX\1938.WCZ
%HOMEPATH%\CWROX\56378.QQS
%HOMEPATH%\CWROX\Y27440.IGT
%HOMEPATH%\CWROX\Z85694.MHO
%HOMEPATH%\CWROX\W60952.KBC
%HOMEPATH%\CWROX\L46403.ZHE
%HOMEPATH%\CWROX\M34673.YKB
%HOMEPATH%\CWROX\30353.WMO
%HOMEPATH%\CWROX\51630.DWZ
%HOMEPATH%\CWROX\K73086.EDB
%HOMEPATH%\CWROX\K54712.OQR
%HOMEPATH%\CWROX\Z34789.SWA
%HOMEPATH%\CWROX\Q36757.TMO
%HOMEPATH%\CWROX\C59537.OQW
%HOMEPATH%\CWROX\58745.DXS
%HOMEPATH%\CWROX\81508.JWH
%HOMEPATH%\CWROX\29231.YWB
%HOMEPATH%\CWROX\U40647.KAS
%HOMEPATH%\CWROX\Q77392.GKK
%HOMEPATH%\CWROX\Y59272.NPV
%HOMEPATH%\CWROX\8427.QOI
%HOMEPATH%\CWROX\N49542.ULP
%HOMEPATH%\CWROX\5818.RHC
%HOMEPATH%\CWROX\22991.MSE
%HOMEPATH%\CWROX\53975.YSC
%HOMEPATH%\CWROX\79599.KWB
%HOMEPATH%\CWROX\73635.XPL
%HOMEPATH%\CWROX\X69000.YLO
%HOMEPATH%\CWROX\F54507.BYK
%HOMEPATH%\CWROX\R21739.UFT
%HOMEPATH%\CWROX\26995.UUM
%HOMEPATH%\CWROX\I42250.KUX
%HOMEPATH%\CWROX\W14694.AAX
%HOMEPATH%\CWROX\J68158.FMG
%HOMEPATH%\CWROX\I77929.POL
%HOMEPATH%\CWROX\I49769.UTS
%HOMEPATH%\CWROX\25905.GPH
%HOMEPATH%\CWROX\50609.HCN
%HOMEPATH%\CWROX\62841.PDA
%HOMEPATH%\CWROX\E39330.CTP
%HOMEPATH%\CWROX\V30804.TOX
%HOMEPATH%\CWROX\C44323.TTU
%HOMEPATH%\CWROX\I34607.UTF
%HOMEPATH%\CWROX\5080.HBD
%HOMEPATH%\CWROX\D24474.DYL
%HOMEPATH%\CWROX\W35124.LFS
%HOMEPATH%\CWROX\85915.UXQ
%HOMEPATH%\CWROX\22384.IOH
%HOMEPATH%\CWROX\V35593.RLR
%HOMEPATH%\CWROX\80550.CQQ
%HOMEPATH%\CWROX\L90633.XFP
%HOMEPATH%\CWROX\Z63720.LOP
%HOMEPATH%\CWROX\33345.VNA
%HOMEPATH%\CWROX\O28462.LBC
%HOMEPATH%\CWROX\A14148.DRI
%HOMEPATH%\CWROX\31582.VNI
%HOMEPATH%\CWROX\T72095.PGT
%HOMEPATH%\CWROX\78854.OJC
%HOMEPATH%\CWROX\L62299.ZMP
%HOMEPATH%\CWROX\Q99534.CWS
%HOMEPATH%\CWROX\86315.RVR
%HOMEPATH%\CWROX\W28014.FBY
%HOMEPATH%\CWROX\A97612.GQC
%HOMEPATH%\CWROX\P35865.ZSK
%HOMEPATH%\CWROX\5967.VJH
%HOMEPATH%\CWROX\U45446.UAT
%HOMEPATH%\CWROX\94865.SEC
%HOMEPATH%\CWROX\34123.LHN
%HOMEPATH%\CWROX\L55034.YFF
%HOMEPATH%\CWROX\A10488.GBO
%HOMEPATH%\CWROX\E39060.JWD
%HOMEPATH%\CWROX\F20923.LQP
%HOMEPATH%\CWROX\31367.HDF
%HOMEPATH%\CWROX\20681.YMB
%HOMEPATH%\CWROX\D86959.REM
%HOMEPATH%\CWROX\J72015.OOH
%HOMEPATH%\CWROX\A21851.UUR
%HOMEPATH%\CWROX\73533.SXS
%HOMEPATH%\CWROX\41692.NIA
%HOMEPATH%\CWROX\H69914.UJH
%HOMEPATH%\CWROX\H8975.MPO
%HOMEPATH%\CWROX\89309.FRI
%HOMEPATH%\CWROX\17892.NQM
%HOMEPATH%\CWROX\O84505.KUQ
%HOMEPATH%\CWROX\L94928.OSH
%HOMEPATH%\CWROX\S80139.XHR
%HOMEPATH%\CWROX\5618.MMG
%HOMEPATH%\CWROX\34302.IOM
%HOMEPATH%\CWROX\L51078.SZP
%HOMEPATH%\CWROX\A35941.NJU
%HOMEPATH%\CWROX\V37666.DUD
%HOMEPATH%\CWROX\L39367.SDD
%HOMEPATH%\CWROX\41912.HBD
%HOMEPATH%\CWROX\37851.AES
%HOMEPATH%\CWROX\D95257.CZO
%HOMEPATH%\CWROX\67306.GJH
%HOMEPATH%\CWROX\94865.XHP
%HOMEPATH%\CWROX\26875.XVM
%HOMEPATH%\CWROX\43346.ONK
%HOMEPATH%\CWROX\85058.ZMF
%HOMEPATH%\CWROX\67185.IMF
%HOMEPATH%\CWROX\T3022.VTU
%HOMEPATH%\CWROX\J77271.WIK
%HOMEPATH%\CWROX\68962.RBA
%HOMEPATH%\CWROX\46373.CCB
%HOMEPATH%\CWROX\M9781.LDY
%HOMEPATH%\CWROX\J73303.MSM
%HOMEPATH%\CWROX\K55410.QZR
%HOMEPATH%\CWROX\18552.VPV
%HOMEPATH%\CWROX\85162.PJE
%HOMEPATH%\CWROX\W11858.TPB
%HOMEPATH%\CWROX\65682.BTI
%HOMEPATH%\CWROX\91739.VTG
%HOMEPATH%\CWROX\6348.YVR
%HOMEPATH%\CWROX\81836.WHA
%HOMEPATH%\CWROX\83033.OIC
%HOMEPATH%\CWROX\K94705.UVS
%HOMEPATH%\CWROX\G1966.COY
%HOMEPATH%\CWROX\69249.XYK
%HOMEPATH%\CWROX\46834.QHA
%HOMEPATH%\CWROX\M9830.GKV
%HOMEPATH%\CWROX\75931.SWB
%HOMEPATH%\CWROX\C83927.VSJ
%HOMEPATH%\CWROX\G15613.JJO
%HOMEPATH%\CWROX\40559.XDU
%HOMEPATH%\CWROX\32218.IWU
%HOMEPATH%\CWROX\H83629.RQI
%HOMEPATH%\CWROX\75651.KSR
%HOMEPATH%\CWROX\93089.VHF
%HOMEPATH%\CWROX\C16160.XFN
%HOMEPATH%\CWROX\1104.RDR
%HOMEPATH%\CWROX\27304.BJH
%HOMEPATH%\CWROX\72507.BRY
%HOMEPATH%\CWROX\Z1455.SBU
%HOMEPATH%\CWROX\G92142.MCB
%HOMEPATH%\CWROX\D30548.LRD
%HOMEPATH%\CWROX\40510.EMD
%HOMEPATH%\CWROX\25364.OUJ
%HOMEPATH%\CWROX\T10537.GOA
%HOMEPATH%\CWROX\T41351.YHL
%HOMEPATH%\CWROX\93345.OEW
%HOMEPATH%\CWROX\2234.YKC
%HOMEPATH%\CWROX\79292.VBF
%HOMEPATH%\CWROX\Y68037.GAW
%HOMEPATH%\CWROX\G64566.ORU
%HOMEPATH%\CWROX\59712.URQ
%HOMEPATH%\CWROX\M49847.CYT
%HOMEPATH%\CWROX\15581.EWR
%HOMEPATH%\CWROX\W50598.ZRN
%HOMEPATH%\CWROX\70061.KAA
%HOMEPATH%\CWROX\O3198.MPC
%HOMEPATH%\CWROX\31133.PCO
%HOMEPATH%\CWROX\B81137.YJB
%HOMEPATH%\CWROX\56377.KJV
%HOMEPATH%\CWROX\F3273.GGZ
%HOMEPATH%\CWROX\K95330.RXM
%HOMEPATH%\CWROX\V78927.QDM
%HOMEPATH%\CWROX\88554.LFM
%HOMEPATH%\CWROX\89328.TLM
%HOMEPATH%\CWROX\87643.RKC
%HOMEPATH%\CWROX\J93993.SSI
%HOMEPATH%\CWROX\6238.TPN
%HOMEPATH%\CWROX\I5250.YFR
%HOMEPATH%\CWROX\X44343.OJW
%HOMEPATH%\CWROX\56830.QZV
%HOMEPATH%\CWROX\W49897.YCE
%HOMEPATH%\CWROX\86421.JNN
%HOMEPATH%\CWROX\62592.TNO
%HOMEPATH%\CWROX\R92542.SZK
%HOMEPATH%\CWROX\I53321.SAA
%HOMEPATH%\CWROX\77025.PVT
%HOMEPATH%\CWROX\64316.ISB
%HOMEPATH%\CWROX\N89707.GIJ

Присваивает атрибут 'скрытый' для следующих файлов:

%HOMEPATH%\CWROX\8180.ZXX
%HOMEPATH%\CWROX\L55354.YVS
%HOMEPATH%\CWROX\21834.QIR
%HOMEPATH%\CWROX\83263.NNO
%HOMEPATH%\CWROX\M12950.XLJ
%HOMEPATH%\CWROX\D27333.PQB
%HOMEPATH%\CWROX\43652.SHG
%HOMEPATH%\CWROX\64323.XEB
%HOMEPATH%\CWROX\D66573.YHE
%HOMEPATH%\CWROX\K41380.USW
%HOMEPATH%\CWROX\F26581.UZD
%HOMEPATH%\CWROX\H62319.QPS
%HOMEPATH%\CWROX\R52590.ICG
%HOMEPATH%\CWROX\55952.TIN
%HOMEPATH%\CWROX\15677.FRN
%HOMEPATH%\CWROX\M86850.LJM
%HOMEPATH%\CWROX\U96465.OXP
%HOMEPATH%\CWROX\L28620.VSL
%HOMEPATH%\CWROX\50392.PCP
%HOMEPATH%\CWROX\73625.FKL
%HOMEPATH%\CWROX\87220.ABJ
%HOMEPATH%\CWROX\Q1680.TYU
%HOMEPATH%\CWROX\13095.IAZ
%HOMEPATH%\CWROX\42986.OSS
%HOMEPATH%\CWROX\D85276.MLT
%HOMEPATH%\CWROX\39792.WBJ
%HOMEPATH%\CWROX\19066.HKS
%HOMEPATH%\CWROX\Y96951.HYW
%HOMEPATH%\CWROX\W39499.VEF
%HOMEPATH%\CWROX\78215.PMG
%HOMEPATH%\CWROX\97354.WYO
%HOMEPATH%\CWROX\P27442.DSU
%HOMEPATH%\CWROX\23929.NLZ
%HOMEPATH%\CWROX\H87554.EJG
%HOMEPATH%\CWROX\2591.JEE
%HOMEPATH%\CWROX\27759.JMK
%HOMEPATH%\CWROX\7328.YDM
%HOMEPATH%\CWROX\75465.CDK
%HOMEPATH%\CWROX\28612.KNU
%HOMEPATH%\CWROX\R31578.BPS
%HOMEPATH%\CWROX\G37588.MVL
%HOMEPATH%\CWROX\70737.SIT
%HOMEPATH%\CWROX\N40034.KSM
%HOMEPATH%\CWROX\U98505.MCQ
%HOMEPATH%\CWROX\F37764.QOP
%HOMEPATH%\CWROX\9235.YXD
%HOMEPATH%\CWROX\87012.GOH
%HOMEPATH%\CWROX\D84804.SOD
%HOMEPATH%\CWROX\44193.JZP
%HOMEPATH%\CWROX\4139.ITB
%HOMEPATH%\CWROX\K2629.WCF
%HOMEPATH%\CWROX\D46229.RGU
%HOMEPATH%\CWROX\51691.WRB
%HOMEPATH%\CWROX\85911.YMY
%HOMEPATH%\CWROX\J33376.TPA
%HOMEPATH%\CWROX\53880.GKD
%HOMEPATH%\CWROX\93722.WDD
%HOMEPATH%\CWROX\86791.UAT
%HOMEPATH%\CWROX\2454.TCC
%HOMEPATH%\CWROX\A50681.MGB
%HOMEPATH%\CWROX\I44296.EUN
%HOMEPATH%\CWROX\67446.PEP
%HOMEPATH%\CWROX\D34577.VRI
%HOMEPATH%\CWROX\60348.FDL
%HOMEPATH%\CWROX\78219.UDT
%HOMEPATH%\CWROX\36342.GYH
%HOMEPATH%\CWROX\83610.KNL
%HOMEPATH%\CWROX\R54185.JNN
%HOMEPATH%\CWROX\Q60519.JSL
%HOMEPATH%\CWROX\83141.SKX
%HOMEPATH%\CWROX\50725.UPD
%HOMEPATH%\CWROX\16926.SCD
%HOMEPATH%\CWROX\M13241.LXE
%HOMEPATH%\CWROX\C43917.MGF
%HOMEPATH%\CWROX\K34666.RLA
%HOMEPATH%\CWROX\28991.OTO
%HOMEPATH%\CWROX\28766.TLE
%HOMEPATH%\CWROX\13710.EVD
%HOMEPATH%\CWROX\S12040.CNT
%HOMEPATH%\CWROX\85941.QDP
%HOMEPATH%\CWROX\T1239.VCD
%HOMEPATH%\CWROX\29342.HQO
%HOMEPATH%\CWROX\J92995.PJG
%HOMEPATH%\CWROX\O33338.NOA
%HOMEPATH%\CWROX\R26702.ECL
%HOMEPATH%\CWROX\M93156.OUL
%HOMEPATH%\CWROX\A30631.HOF
%HOMEPATH%\CWROX\K96994.POG
%HOMEPATH%\CWROX\41529.KYQ
%HOMEPATH%\CWROX\G67877.LLT
%HOMEPATH%\CWROX\25426.CAB
%HOMEPATH%\CWROX\61544.IIY
%HOMEPATH%\CWROX\99765.QRP
%HOMEPATH%\CWROX\Z56972.MVU
%HOMEPATH%\CWROX\W83680.LDH
%HOMEPATH%\CWROX\21822.KXS
%HOMEPATH%\CWROX\U3601.RCD
%HOMEPATH%\CWROX\T27175.FTO
%HOMEPATH%\CWROX\31367.HDF
%HOMEPATH%\CWROX\20681.YMB
%HOMEPATH%\CWROX\14851.IRP
%HOMEPATH%\CWROX\56724.INS
%HOMEPATH%\CWROX\62646.SCJ
%HOMEPATH%\CWROX\21582.WEJ
%HOMEPATH%\CWROX\U68695.QDP
%HOMEPATH%\CWROX\11852.NQJ
%HOMEPATH%\CWROX\99028.IEH
%HOMEPATH%\CWROX\M3008.EQB
%HOMEPATH%\CWROX\62585.CPA
%HOMEPATH%\CWROX\54235.UWZ
%HOMEPATH%\CWROX\Z40221.YWQ
%HOMEPATH%\CWROX\P91364.ALG
%HOMEPATH%\CWROX\75217.BPR
%HOMEPATH%\CWROX\20752.YOC
%HOMEPATH%\CWROX\E1653.EMB
%HOMEPATH%\CWROX\Z36362.IVI
%HOMEPATH%\CWROX\39698.GHH
%HOMEPATH%\CWROX\11217.ITN
%HOMEPATH%\CWROX\85498.SGX
%HOMEPATH%\CWROX\R79402.SCC
%HOMEPATH%\CWROX\E31435.XOP
%HOMEPATH%\CWROX\T77358.TUI
%HOMEPATH%\CWROX\83908.ICP
%HOMEPATH%\CWROX\R78404.RKY
%HOMEPATH%\CWROX\75615.RBC
%HOMEPATH%\CWROX\V2588.PAV
%HOMEPATH%\CWROX\G74223.YOV
%HOMEPATH%\CWROX\L9939.VMI
%HOMEPATH%\CWROX\Z79754.DIA
%HOMEPATH%\CWROX\25133.DDZ
%HOMEPATH%\CWROX\N34376.ATT
%HOMEPATH%\CWROX\60582.WFZ
%HOMEPATH%\CWROX\65357.FZU
%HOMEPATH%\CWROX\K29067.AQI
%HOMEPATH%\CWROX\60998.VQM
%HOMEPATH%\CWROX\W39294.ZLK
%HOMEPATH%\CWROX\54581.CEN
%HOMEPATH%\CWROX\F76064.HWS
%HOMEPATH%\CWROX\Z80679.AFD
%HOMEPATH%\CWROX\T64408.PTC
%HOMEPATH%\CWROX\65275.NJD
%HOMEPATH%\CWROX\I96117.OSN
%HOMEPATH%\CWROX\V85248.HBH
%HOMEPATH%\CWROX\1017.OZE
%HOMEPATH%\CWROX\O34225.VOL
%HOMEPATH%\CWROX\N71784.AJM
%HOMEPATH%\CWROX\U5236.ZOL
%HOMEPATH%\CWROX\94000.DQH
%HOMEPATH%\CWROX\55890.AZX
%HOMEPATH%\CWROX\P6592.ZHO
%HOMEPATH%\CWROX\8419.DXE
%HOMEPATH%\CWROX\K73147.PNT
%HOMEPATH%\CWROX\49861.VTT
%HOMEPATH%\CWROX\N63143.EVJ
%HOMEPATH%\CWROX\X86885.QQC
%HOMEPATH%\CWROX\75806.CMH
%HOMEPATH%\CWROX\80965.UVP
%HOMEPATH%\CWROX\K10940.BAC
%HOMEPATH%\CWROX\A30071.GJB
%HOMEPATH%\CWROX\Y4489.YAY
%HOMEPATH%\CWROX\H25524.XHU
%HOMEPATH%\CWROX\51022.PQM
%HOMEPATH%\CWROX\Q91924.SJC
%HOMEPATH%\CWROX\U44824.EHY
%HOMEPATH%\CWROX\21705.XDI
%HOMEPATH%\CWROX\22021.QYW
%HOMEPATH%\CWROX\67167.QXI
%HOMEPATH%\CWROX\D84418.WTL
%HOMEPATH%\CWROX\A81773.IDL
%HOMEPATH%\CWROX\Z45295.EAA
%HOMEPATH%\CWROX\46913.IIS
%HOMEPATH%\CWROX\6293.WHK
%HOMEPATH%\CWROX\82329.KZY
%HOMEPATH%\CWROX\26263.TUN
%HOMEPATH%\CWROX\21512.QOP
%HOMEPATH%\CWROX\42045.QXQ
%HOMEPATH%\CWROX\42133.JMV
%HOMEPATH%\CWROX\Q49792.KVD
%HOMEPATH%\CWROX\26809.UCZ
%HOMEPATH%\CWROX\F77135.KOU
%HOMEPATH%\CWROX\19238.JXO
%HOMEPATH%\CWROX\48647.NDT
%HOMEPATH%\CWROX\85610.QAB
%HOMEPATH%\CWROX\G48279.UOR
%HOMEPATH%\CWROX\83169.NGB
%HOMEPATH%\CWROX\89485.IXB
%HOMEPATH%\CWROX\69909.RGR
%HOMEPATH%\CWROX\O50839.ACU
%HOMEPATH%\CWROX\A3523.UPY
%HOMEPATH%\CWROX\Q64548.FAU
%HOMEPATH%\CWROX\11983.WTN
%HOMEPATH%\CWROX\63015.CAM
%HOMEPATH%\CWROX\A94878.GIJ
%HOMEPATH%\CWROX\11736.DMO
%HOMEPATH%\CWROX\32038.GWD
%HOMEPATH%\CWROX\26331.MYI
%HOMEPATH%\CWROX\65331.RAS
%HOMEPATH%\CWROX\1619.HNP
%HOMEPATH%\CWROX\L84606.RAQ
%HOMEPATH%\CWROX\77184.RYW
%HOMEPATH%\CWROX\13234.AVG
%HOMEPATH%\CWROX\63119.EUZ
%HOMEPATH%\CWROX\J64164.LOE
%HOMEPATH%\CWROX\H80680.AAH
%HOMEPATH%\CWROX\67998.ORR
%HOMEPATH%\CWROX\23695.SME
%HOMEPATH%\CWROX\H75998.FHL
%HOMEPATH%\CWROX\B23764.DVB
%HOMEPATH%\CWROX\47357.VYU
%HOMEPATH%\CWROX\10600.OWE
%HOMEPATH%\CWROX\G32718.OGT
%HOMEPATH%\CWROX\25261.YJY
%HOMEPATH%\CWROX\E25703.TYS
%HOMEPATH%\CWROX\84560.MVT
%HOMEPATH%\CWROX\61642.UOR
%HOMEPATH%\CWROX\37387.MNV
%HOMEPATH%\CWROX\57019.IBM
%HOMEPATH%\CWROX\O16232.GTZ
%HOMEPATH%\CWROX\R15522.FKV
%HOMEPATH%\CWROX\53105.ORZ
%HOMEPATH%\CWROX\34778.DOR
%HOMEPATH%\CWROX\40013.XBL
%HOMEPATH%\CWROX\60246.JJO
%HOMEPATH%\CWROX\Q53278.HTZ
%HOMEPATH%\CWROX\M64069.JUT
%HOMEPATH%\CWROX\Y91688.DFK
%HOMEPATH%\CWROX\94818.KHS
%HOMEPATH%\CWROX\J20744.JWF
%HOMEPATH%\CWROX\15990.RHP
%HOMEPATH%\CWROX\79181.OCJ
%HOMEPATH%\CWROX\27061.PDI
%HOMEPATH%\CWROX\95095.WDD
%HOMEPATH%\CWROX\S86469.FEB
%HOMEPATH%\CWROX\B16892.NAH
%HOMEPATH%\CWROX\T19450.XWH
%HOMEPATH%\CWROX\F24699.GBF
%HOMEPATH%\CWROX\O21944.UFU
%HOMEPATH%\CWROX\V58105.OLP
%HOMEPATH%\CWROX\85803.GMD
%HOMEPATH%\CWROX\35937.YTO
%HOMEPATH%\CWROX\5733.NHB
%HOMEPATH%\CWROX\I51656.EEZ
%HOMEPATH%\CWROX\62771.VGV
%HOMEPATH%\CWROX\87184.UNK
%HOMEPATH%\CWROX\K98734.VRQ
%HOMEPATH%\CWROX\E28304.EYR
%HOMEPATH%\CWROX\12851.RJJ
%HOMEPATH%\CWROX\37948.CQT
%HOMEPATH%\CWROX\F41260.EDW
%HOMEPATH%\CWROX\K15286.UZS
%HOMEPATH%\CWROX\M36468.EPX
%HOMEPATH%\CWROX\L62410.VCD
%HOMEPATH%\CWROX\1971.TYJ
%HOMEPATH%\CWROX\X97409.GXJ
%HOMEPATH%\CWROX\V60061.CDI
%HOMEPATH%\CWROX\S35363.KCJ
%HOMEPATH%\CWROX\13930.YWZ
%HOMEPATH%\CWROX\N21055.TYT
%HOMEPATH%\CWROX\U50348.JTB
%HOMEPATH%\CWROX\41963.AVR
%HOMEPATH%\CWROX\77400.KYH
%HOMEPATH%\CWROX\83440.ZCM
%HOMEPATH%\CWROX\32697.AWU
%HOMEPATH%\CWROX\1652.ZCU
%HOMEPATH%\CWROX\29440.ZET
%HOMEPATH%\CWROX\20186.THN
%HOMEPATH%\CWROX\N36958.UZP
%HOMEPATH%\CWROX\E51871.ZUX
%HOMEPATH%\CWROX\32956.TWW
%HOMEPATH%\CWROX\60174.HOV
%HOMEPATH%\CWROX\J74845.OQC
%HOMEPATH%\CWROX\16032.BDB
%HOMEPATH%\CWROX\F97074.DRH
%HOMEPATH%\CWROX\2423.KNA
%HOMEPATH%\CWROX\M29112.GJM
%HOMEPATH%\CWROX\17947.ZSM
%HOMEPATH%\CWROX\83923.QXF
%HOMEPATH%\CWROX\99914.DUQ
%HOMEPATH%\CWROX\40628.FQD
%HOMEPATH%\CWROX\H6228.XJA
%HOMEPATH%\CWROX\66155.RGQ
%HOMEPATH%\CWROX\35188.AYE
%HOMEPATH%\CWROX\78433.CNW
%HOMEPATH%\CWROX\39325.WCF
%HOMEPATH%\CWROX\F99055.YLS
%HOMEPATH%\CWROX\E60239.RVM
%HOMEPATH%\CWROX\86665.RSM
%HOMEPATH%\CWROX\2795.MBS
%HOMEPATH%\CWROX\D14814.RIF
%HOMEPATH%\CWROX\35856.HEK
%HOMEPATH%\CWROX\S53053.WHO
%HOMEPATH%\CWROX\D15347.CPE
%HOMEPATH%\CWROX\O13894.CRF
%HOMEPATH%\CWROX\21901.JVX
%HOMEPATH%\CWROX\F5897.IQM
%HOMEPATH%\CWROX\17146.ZBB
%HOMEPATH%\CWROX\74048.KZE
%HOMEPATH%\CWROX\B44352.VTM
%HOMEPATH%\CWROX\58581.NYY
%HOMEPATH%\CWROX\D91033.XSW
%HOMEPATH%\CWROX\P40714.WUD
%HOMEPATH%\CWROX\99218.RSF
%HOMEPATH%\CWROX\I70653.TSA
%HOMEPATH%\CWROX\56370.PXX
%HOMEPATH%\CWROX\K8487.TTT
%HOMEPATH%\CWROX\27361.PSZ
%HOMEPATH%\CWROX\83155.DIL
%HOMEPATH%\CWROX\S56914.UGY
%HOMEPATH%\CWROX\47360.IFI
%HOMEPATH%\CWROX\F61127.HCL
%HOMEPATH%\CWROX\P70919.XMT
%HOMEPATH%\CWROX\58678.NFJ
%HOMEPATH%\CWROX\35992.YVO
%HOMEPATH%\CWROX\V75340.IIW
%HOMEPATH%\CWROX\16810.CVJ
%HOMEPATH%\CWROX\P21281.CAM
%HOMEPATH%\CWROX\Z83969.ANN
%HOMEPATH%\CWROX\V82871.JJF
%HOMEPATH%\CWROX\13551.HEL
%HOMEPATH%\CWROX\50772.OHM
%HOMEPATH%\CWROX\P99530.VFE
%HOMEPATH%\CWROX\75097.GOF
%HOMEPATH%\CWROX\G53320.MKL
%HOMEPATH%\CWROX\L11307.NZN
%HOMEPATH%\CWROX\U61082.HTU
%HOMEPATH%\CWROX\63113.RLX
%HOMEPATH%\CWROX\N27293.YNP
%HOMEPATH%\CWROX\5409.HOG
%HOMEPATH%\CWROX\N70870.DIC
%HOMEPATH%\CWROX\Y42773.GMR
%HOMEPATH%\CWROX\M67106.DPF
%HOMEPATH%\CWROX\X29331.KNR
%HOMEPATH%\CWROX\74869.GOK
%HOMEPATH%\CWROX\58784.FSO
%HOMEPATH%\CWROX\80156.BMR
%HOMEPATH%\CWROX\U48976.OKS
%HOMEPATH%\CWROX\39166.XJT
%HOMEPATH%\CWROX\79165.KWJ
%HOMEPATH%\CWROX\91034.BUT
%HOMEPATH%\CWROX\79423.DDL
%HOMEPATH%\CWROX\35985.AOX
%HOMEPATH%\CWROX\P46242.FFD
%HOMEPATH%\CWROX\56002.OWR
%HOMEPATH%\CWROX\V86165.XPU
%HOMEPATH%\CWROX\84805.OCR
%HOMEPATH%\CWROX\31548.YCI
%HOMEPATH%\CWROX\Y47106.RDR
%HOMEPATH%\CWROX\A51570.URC
%HOMEPATH%\CWROX\H70626.GQJ
%HOMEPATH%\CWROX\X54232.WFV
%HOMEPATH%\CWROX\H62158.COO
%HOMEPATH%\CWROX\A62620.VVT
%HOMEPATH%\CWROX\Q70654.XGT
%HOMEPATH%\CWROX\P51553.SGS
%HOMEPATH%\CWROX\20134.TER
%HOMEPATH%\CWROX\54692.YQS
%HOMEPATH%\CWROX\L45018.RKP
%HOMEPATH%\CWROX\47226.NUJ
%HOMEPATH%\CWROX\P15326.BJQ
%HOMEPATH%\CWROX\5490.CNE
%HOMEPATH%\CWROX\42614.DYR
%HOMEPATH%\CWROX\99732.SAN
%HOMEPATH%\CWROX\E34066.SBN
%HOMEPATH%\CWROX\59755.DAX
%HOMEPATH%\CWROX\61426.LSW
%HOMEPATH%\CWROX\Y93456.VHX
%HOMEPATH%\CWROX\V28194.RNN
%HOMEPATH%\CWROX\30212.AVL
%HOMEPATH%\CWROX\E4405.MCP
%HOMEPATH%\CWROX\75526.JYW
%HOMEPATH%\CWROX\80361.MNF
%HOMEPATH%\CWROX\Z18459.WKF
%HOMEPATH%\CWROX\T67942.QUB
%HOMEPATH%\CWROX\C31140.BWB
%HOMEPATH%\CWROX\Y10198.VFK
%HOMEPATH%\CWROX\73843.ZXQ
%HOMEPATH%\CWROX\94549.HST
%HOMEPATH%\CWROX\W76619.AGK
%HOMEPATH%\CWROX\C71662.QYD
%HOMEPATH%\CWROX\27873.ZKK
%HOMEPATH%\CWROX\94262.NHC
%HOMEPATH%\CWROX\22680.URY
%HOMEPATH%\CWROX\95093.MXV
%HOMEPATH%\CWROX\Y82141.LSV
%HOMEPATH%\CWROX\92595.SNY
%HOMEPATH%\CWROX\M54001.PGN
%HOMEPATH%\CWROX\61041.WEL
%HOMEPATH%\CWROX\99118.JFF
%HOMEPATH%\CWROX\42428.JHS
%HOMEPATH%\CWROX\25737.HIX
%HOMEPATH%\CWROX\run.vbs
%HOMEPATH%\CWROX\Q67676.JTI
%HOMEPATH%\CWROX\66752.EFP
%HOMEPATH%\CWROX\settings.ini
%HOMEPATH%\CWROX\878552.dat
%HOMEPATH%\CWROX\677273.dat
%HOMEPATH%\CWROX\Autoit3758953.exe
%HOMEPATH%\CWROX\645651.dat
%HOMEPATH%\CWROX\I59128.YBF
%HOMEPATH%\CWROX\68470.CIR
%HOMEPATH%\CWROX\B48637.IIX
%HOMEPATH%\CWROX\73585.IZX
%HOMEPATH%\CWROX\R67744.SIB
%HOMEPATH%\CWROX\59565.KNG
%HOMEPATH%\CWROX\M30371.BCN
%HOMEPATH%\CWROX\B78459.CRF
%HOMEPATH%\CWROX\M65968.WAO
%HOMEPATH%\CWROX\5754.DVK
%HOMEPATH%\CWROX\23354.MPV
%HOMEPATH%\CWROX\X12169.WWZ
%HOMEPATH%\CWROX\O31532.APR
%HOMEPATH%\CWROX\65745.ARA
%HOMEPATH%\CWROX\8140.NYD
%HOMEPATH%\CWROX\Q79312.AGJ
%HOMEPATH%\CWROX\59897.ORN
%HOMEPATH%\CWROX\R27604.HMT
%HOMEPATH%\CWROX\79372.MYP
%HOMEPATH%\CWROX\V24223.JPI
%HOMEPATH%\CWROX\75191.FXS
%HOMEPATH%\CWROX\99368.JKE
%HOMEPATH%\CWROX\1938.WCZ
%HOMEPATH%\CWROX\56378.QQS
%HOMEPATH%\CWROX\Y27440.IGT
%HOMEPATH%\CWROX\Z85694.MHO
%HOMEPATH%\CWROX\W60952.KBC
%HOMEPATH%\CWROX\L46403.ZHE
%HOMEPATH%\CWROX\M34673.YKB
%HOMEPATH%\CWROX\30353.WMO
%HOMEPATH%\CWROX\51630.DWZ
%HOMEPATH%\CWROX\K73086.EDB
%HOMEPATH%\CWROX\K54712.OQR
%HOMEPATH%\CWROX\Z34789.SWA
%HOMEPATH%\CWROX\Q36757.TMO
%HOMEPATH%\CWROX\C59537.OQW
%HOMEPATH%\CWROX\58745.DXS
%HOMEPATH%\CWROX\81508.JWH
%HOMEPATH%\CWROX\29231.YWB
%HOMEPATH%\CWROX\U40647.KAS
%HOMEPATH%\CWROX\Q77392.GKK
%HOMEPATH%\CWROX\Y59272.NPV
%HOMEPATH%\CWROX\8427.QOI
%HOMEPATH%\CWROX\N49542.ULP
%HOMEPATH%\CWROX\5818.RHC
%HOMEPATH%\CWROX\22991.MSE
%HOMEPATH%\CWROX\F54507.BYK
%HOMEPATH%\CWROX\I42250.KUX
%HOMEPATH%\CWROX\53975.YSC
%HOMEPATH%\CWROX\79599.KWB
%HOMEPATH%\CWROX\W14694.AAX
%HOMEPATH%\CWROX\I34607.UTF
%HOMEPATH%\CWROX\A14148.DRI
%HOMEPATH%\CWROX\R21739.UFT
%HOMEPATH%\CWROX\26995.UUM
%HOMEPATH%\CWROX\50609.HCN
%HOMEPATH%\CWROX\V30804.TOX
%HOMEPATH%\CWROX\J68158.FMG
%HOMEPATH%\CWROX\I77929.POL
%HOMEPATH%\CWROX\C44323.TTU
%HOMEPATH%\CWROX\73635.XPL
%HOMEPATH%\CWROX\X69000.YLO
%HOMEPATH%\CWROX\62841.PDA
%HOMEPATH%\CWROX\E39330.CTP
%HOMEPATH%\CWROX\31582.VNI
%HOMEPATH%\CWROX\22384.IOH
%HOMEPATH%\CWROX\L90633.XFP
%HOMEPATH%\CWROX\5080.HBD
%HOMEPATH%\CWROX\D24474.DYL
%HOMEPATH%\CWROX\Z63720.LOP
%HOMEPATH%\CWROX\43346.ONK
%HOMEPATH%\CWROX\15581.EWR
%HOMEPATH%\CWROX\V35593.RLR
%HOMEPATH%\CWROX\80550.CQQ
%HOMEPATH%\CWROX\T72095.PGT
%HOMEPATH%\CWROX\Q99534.CWS
%HOMEPATH%\CWROX\33345.VNA
%HOMEPATH%\CWROX\O28462.LBC
%HOMEPATH%\CWROX\86315.RVR
%HOMEPATH%\CWROX\W35124.LFS
%HOMEPATH%\CWROX\85915.UXQ
%HOMEPATH%\CWROX\78854.OJC
%HOMEPATH%\CWROX\L62299.ZMP
%HOMEPATH%\CWROX\U45446.UAT
%HOMEPATH%\CWROX\L55034.YFF
%HOMEPATH%\CWROX\W28014.FBY
%HOMEPATH%\CWROX\A97612.GQC
%HOMEPATH%\CWROX\A10488.GBO
%HOMEPATH%\CWROX\H69914.UJH
%HOMEPATH%\CWROX\L39367.SDD
%HOMEPATH%\CWROX\94865.SEC
%HOMEPATH%\CWROX\34123.LHN
%HOMEPATH%\CWROX\D86959.REM
%HOMEPATH%\CWROX\73533.SXS
%HOMEPATH%\CWROX\E39060.JWD
%HOMEPATH%\CWROX\F20923.LQP
%HOMEPATH%\CWROX\41692.NIA
%HOMEPATH%\CWROX\P35865.ZSK
%HOMEPATH%\CWROX\5967.VJH
%HOMEPATH%\CWROX\J72015.OOH
%HOMEPATH%\CWROX\A21851.UUR
%HOMEPATH%\CWROX\41912.HBD
%HOMEPATH%\CWROX\L94928.OSH
%HOMEPATH%\CWROX\34302.IOM
%HOMEPATH%\CWROX\H8975.MPO
%HOMEPATH%\CWROX\89309.FRI
%HOMEPATH%\CWROX\L51078.SZP
%HOMEPATH%\CWROX\I49769.UTS
%HOMEPATH%\CWROX\25905.GPH
%HOMEPATH%\CWROX\S80139.XHR
%HOMEPATH%\CWROX\5618.MMG
%HOMEPATH%\CWROX\37851.AES
%HOMEPATH%\CWROX\94865.XHP
%HOMEPATH%\CWROX\A35941.NJU
%HOMEPATH%\CWROX\V37666.DUD
%HOMEPATH%\CWROX\26875.XVM
%HOMEPATH%\CWROX\17892.NQM
%HOMEPATH%\CWROX\O84505.KUQ
%HOMEPATH%\CWROX\D95257.CZO
%HOMEPATH%\CWROX\67306.GJH
%HOMEPATH%\CWROX\67185.IMF
%HOMEPATH%\CWROX\68962.RBA
%HOMEPATH%\CWROX\J77271.WIK
%HOMEPATH%\CWROX\85058.ZMF
%HOMEPATH%\CWROX\J73303.MSM
%HOMEPATH%\CWROX\M9781.LDY
%HOMEPATH%\CWROX\G1966.COY
%HOMEPATH%\CWROX\K55410.QZR
%HOMEPATH%\CWROX\46373.CCB
%HOMEPATH%\CWROX\85162.PJE
%HOMEPATH%\CWROX\91739.VTG
%HOMEPATH%\CWROX\65682.BTI
%HOMEPATH%\CWROX\18552.VPV
%HOMEPATH%\CWROX\83033.OIC
%HOMEPATH%\CWROX\81836.WHA
%HOMEPATH%\CWROX\T3022.VTU
%HOMEPATH%\CWROX\K94705.UVS
%HOMEPATH%\CWROX\6348.YVR
%HOMEPATH%\CWROX\C16160.XFN
%HOMEPATH%\CWROX\46834.QHA
%HOMEPATH%\CWROX\C83927.VSJ
%HOMEPATH%\CWROX\75931.SWB
%HOMEPATH%\CWROX\69249.XYK
%HOMEPATH%\CWROX\32218.IWU
%HOMEPATH%\CWROX\40559.XDU
%HOMEPATH%\CWROX\8417.QVW
%HOMEPATH%\CWROX\H83629.RQI
%HOMEPATH%\CWROX\G15613.JJO
%HOMEPATH%\CWROX\93089.VHF
%HOMEPATH%\CWROX\27304.BJH
%HOMEPATH%\CWROX\1104.RDR
%HOMEPATH%\CWROX\75651.KSR
%HOMEPATH%\CWROX\G92142.MCB
%HOMEPATH%\CWROX\Z1455.SBU
%HOMEPATH%\CWROX\M9830.GKV
%HOMEPATH%\CWROX\D30548.LRD
%HOMEPATH%\CWROX\72507.BRY
%HOMEPATH%\CWROX\25364.OUJ
%HOMEPATH%\CWROX\93345.OEW
%HOMEPATH%\CWROX\T41351.YHL
%HOMEPATH%\CWROX\40510.EMD
%HOMEPATH%\CWROX\Y68037.GAW
%HOMEPATH%\CWROX\79292.VBF
%HOMEPATH%\CWROX\F3273.GGZ
%HOMEPATH%\CWROX\G64566.ORU
%HOMEPATH%\CWROX\2234.YKC
%HOMEPATH%\CWROX\M49847.CYT
%HOMEPATH%\CWROX\70061.KAA
%HOMEPATH%\CWROX\W50598.ZRN
%HOMEPATH%\CWROX\59712.URQ
%HOMEPATH%\CWROX\B81137.YJB
%HOMEPATH%\CWROX\31133.PCO
%HOMEPATH%\CWROX\T10537.GOA
%HOMEPATH%\CWROX\56377.KJV
%HOMEPATH%\CWROX\O3198.MPC
%HOMEPATH%\CWROX\86421.JNN
%HOMEPATH%\CWROX\V78927.QDM
%HOMEPATH%\CWROX\87643.RKC
%HOMEPATH%\CWROX\89328.TLM
%HOMEPATH%\CWROX\K95330.RXM
%HOMEPATH%\CWROX\I5250.YFR
%HOMEPATH%\CWROX\6238.TPN
%HOMEPATH%\CWROX\W11858.TPB
%HOMEPATH%\CWROX\X44343.OJW
%HOMEPATH%\CWROX\J93993.SSI
%HOMEPATH%\CWROX\W49897.YCE
%HOMEPATH%\CWROX\R92542.SZK
%HOMEPATH%\CWROX\62592.TNO
%HOMEPATH%\CWROX\56830.QZV
%HOMEPATH%\CWROX\64316.ISB
%HOMEPATH%\CWROX\77025.PVT
%HOMEPATH%\CWROX\88554.LFM
%HOMEPATH%\CWROX\N89707.GIJ
%HOMEPATH%\CWROX\I53321.SAA

Удаляет следующие файлы:

%HOMEPATH%\CWROX\KRRKHVVA.dat

Сетевая активность:

Подключается к:

'ni###.no-ip.org':1604

UDP:

DNS ASK ni###.no-ip.org

Другое:

Ищет следующие окна:

ClassName: 'Indicator' WindowName: '(null)'
ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'EDIT' WindowName: '(null)'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней