Поддержка
Круглосуточная поддержка

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.PWS.Siggen1.8488

Добавлен в вирусную базу Dr.Web: 2013-10-18

Описание добавлено:

Техническая информация

Для обеспечения автозапуска и распространения:
Модифицирует следующие ключи реестра:
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ODBC64' = '"%CommonProgramFiles%\ODBC640\lqcnmzosz.exe"'
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ODBC64' = '"%CommonProgramFiles%\ODBC640\lqcnmzosz.exe"'
  • [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\rstrui.exe] 'Debugger' = 'lgzo_.exe'
Создает следующие сервисы:
  • [<HKLM>\SYSTEM\ControlSet001\Services\SSDPSRV] 'Start' = '00000002'
Вредоносные функции:
Для затруднения выявления своего присутствия в системе
блокирует отображение:
  • скрытых файлов
Создает и запускает на исполнение:
  • '%HOMEPATH%\HCGTN\VRKEV.exe' CXGLTTLM.dat
  • '%HOMEPATH%\HCGTN\VRKEV.exe' 649956.LTC
Запускает на исполнение:
  • '%WINDIR%\explorer.exe'
  • '%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
  • '<SYSTEM32>\wscript.exe' "%HOMEPATH%\HCGTN\3562.vbs" 7830
Внедряет код в
следующие системные процессы:
  • <SYSTEM32>\cmd.exe
  • <SYSTEM32>\cscript.exe
  • <SYSTEM32>\ctfmon.exe
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
  • %WINDIR%\explorer.exe
большое количество пользовательских процессов.
Ищет ветки реестра, отвечающие за хранение паролей сторонними программами:
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FTP Commander]
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FTP Commander Deluxe]
  • [<HKCU>\Software\FTPWare\CoreFTP\Sites]
  • [<HKCU>\Software\Martin Prikryl\WinSCP 2\Sessions]
Изменяет следующие настройки браузера Windows Internet Explorer:
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '2500' = '00000003'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] '2500' = '00000003'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1] '2500' = '00000003'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '2500' = '00000003'
Изменения в файловой системе:
Создает следующие файлы:
  • %HOMEPATH%\HCGTN\90607.VHW
  • %HOMEPATH%\HCGTN\49827.DLK
  • %HOMEPATH%\HCGTN\P50557.YIL
  • %HOMEPATH%\HCGTN\68124.OZX
  • %HOMEPATH%\HCGTN\6172.YBG
  • %HOMEPATH%\HCGTN\Z16935.KCA
  • %HOMEPATH%\HCGTN\45025.BKC
  • %HOMEPATH%\HCGTN\F70463.MNC
  • %HOMEPATH%\HCGTN\C26382.SKV
  • %HOMEPATH%\HCGTN\26173.MJN
  • %HOMEPATH%\HCGTN\V83591.AQP
  • %HOMEPATH%\HCGTN\H32646.HFS
  • %HOMEPATH%\HCGTN\Y6330.FDM
  • %HOMEPATH%\HCGTN\92464.JIW
  • %HOMEPATH%\HCGTN\23444.XFV
  • %HOMEPATH%\HCGTN\Z97497.XNX
  • %HOMEPATH%\HCGTN\76938.EMB
  • %HOMEPATH%\HCGTN\1957.GZU
  • %HOMEPATH%\HCGTN\E59156.ZDG
  • %HOMEPATH%\HCGTN\N20301.LXY
  • %HOMEPATH%\HCGTN\19053.AXB
  • %HOMEPATH%\HCGTN\18916.YPV
  • %HOMEPATH%\HCGTN\N20348.WGV
  • %HOMEPATH%\HCGTN\A59451.BQT
  • %HOMEPATH%\HCGTN\62987.QFM
  • %HOMEPATH%\HCGTN\X25279.NHQ
  • %HOMEPATH%\HCGTN\Q65824.ZHS
  • %HOMEPATH%\HCGTN\Z60929.CXI
  • %HOMEPATH%\HCGTN\34774.ZVY
  • %HOMEPATH%\HCGTN\83700.SMC
  • %HOMEPATH%\HCGTN\U51147.JML
  • %HOMEPATH%\HCGTN\I14039.BPM
  • %HOMEPATH%\HCGTN\70887.KMR
  • %HOMEPATH%\HCGTN\U22689.NBI
  • %HOMEPATH%\HCGTN\H10908.WIX
  • %HOMEPATH%\HCGTN\M38862.GOM
  • %HOMEPATH%\HCGTN\I65679.IBI
  • %HOMEPATH%\HCGTN\Z10576.IFJ
  • %HOMEPATH%\HCGTN\51560.CCD
  • %HOMEPATH%\HCGTN\73167.LYH
  • %HOMEPATH%\HCGTN\70585.TPK
  • %HOMEPATH%\HCGTN\F45515.GYZ
  • %HOMEPATH%\HCGTN\M43085.DEH
  • %HOMEPATH%\HCGTN\53390.EBH
  • %HOMEPATH%\HCGTN\62109.BIG
  • %HOMEPATH%\HCGTN\65640.IIF
  • %HOMEPATH%\HCGTN\85498.KDT
  • %HOMEPATH%\HCGTN\7941.BLY
  • %HOMEPATH%\HCGTN\69702.QZW
  • %HOMEPATH%\HCGTN\J40385.JXM
  • %HOMEPATH%\HCGTN\39685.JXM
  • %HOMEPATH%\HCGTN\O51470.YFU
  • %HOMEPATH%\HCGTN\81752.BRJ
  • %HOMEPATH%\HCGTN\55611.HNL
  • %HOMEPATH%\HCGTN\D61339.AMY
  • %HOMEPATH%\HCGTN\80080.YUX
  • %HOMEPATH%\HCGTN\41839.ORA
  • %HOMEPATH%\HCGTN\Y54982.KKI
  • %HOMEPATH%\HCGTN\9026.DXY
  • %HOMEPATH%\HCGTN\58824.HVD
  • %HOMEPATH%\HCGTN\95394.GTN
  • %HOMEPATH%\HCGTN\95049.CGD
  • %HOMEPATH%\HCGTN\26916.EHU
  • %HOMEPATH%\HCGTN\Z91616.IZH
  • %HOMEPATH%\HCGTN\11973.CYU
  • %HOMEPATH%\HCGTN\50399.MMS
  • %HOMEPATH%\HCGTN\51628.VYJ
  • %HOMEPATH%\HCGTN\89281.JOQ
  • %HOMEPATH%\HCGTN\61427.CFM
  • %HOMEPATH%\HCGTN\R89544.AZU
  • %HOMEPATH%\HCGTN\I69401.XJR
  • %HOMEPATH%\HCGTN\G24963.EVM
  • %HOMEPATH%\HCGTN\15815.SKK
  • %HOMEPATH%\HCGTN\P86456.HZX
  • %HOMEPATH%\HCGTN\58489.KJR
  • %HOMEPATH%\HCGTN\R21132.PGU
  • %HOMEPATH%\HCGTN\22926.YVT
  • %HOMEPATH%\HCGTN\93704.NJI
  • %HOMEPATH%\HCGTN\66160.YBN
  • %HOMEPATH%\HCGTN\50657.EFE
  • %HOMEPATH%\HCGTN\X55308.HUB
  • %HOMEPATH%\HCGTN\48397.EER
  • %HOMEPATH%\HCGTN\13779.FHI
  • %HOMEPATH%\HCGTN\T17409.PCM
  • %HOMEPATH%\HCGTN\36399.WJQ
  • %HOMEPATH%\HCGTN\I66423.HXC
  • %HOMEPATH%\HCGTN\I39075.TYG
  • %HOMEPATH%\HCGTN\Q77178.WCE
  • %HOMEPATH%\HCGTN\74481.GJK
  • %HOMEPATH%\HCGTN\K12524.OGU
  • %HOMEPATH%\HCGTN\C57487.XUY
  • %HOMEPATH%\HCGTN\97441.LBK
  • %HOMEPATH%\HCGTN\A75844.IVT
  • %HOMEPATH%\HCGTN\U96447.XPY
  • %HOMEPATH%\HCGTN\3404.JVI
  • %HOMEPATH%\HCGTN\H24229.JMS
  • %HOMEPATH%\HCGTN\X18703.FGR
  • %HOMEPATH%\HCGTN\39207.JOA
  • %HOMEPATH%\HCGTN\K45762.VQI
  • %HOMEPATH%\HCGTN\97322.QBP
  • %HOMEPATH%\HCGTN\V46710.ZTJ
  • %HOMEPATH%\HCGTN\47651.WOD
  • %HOMEPATH%\HCGTN\38652.NWU
  • %HOMEPATH%\HCGTN\66528.VTV
  • %HOMEPATH%\HCGTN\42398.PBJ
  • %HOMEPATH%\HCGTN\Z57447.RIW
  • %HOMEPATH%\HCGTN\78543.UGU
  • %HOMEPATH%\HCGTN\P83763.CZG
  • %HOMEPATH%\HCGTN\16233.NIE
  • %HOMEPATH%\HCGTN\S8217.LPD
  • %HOMEPATH%\HCGTN\23333.MKX
  • %HOMEPATH%\HCGTN\79185.IMP
  • %HOMEPATH%\HCGTN\6064.PWP
  • %HOMEPATH%\HCGTN\M32542.INX
  • %HOMEPATH%\HCGTN\60661.VRD
  • %HOMEPATH%\HCGTN\60939.TVZ
  • %HOMEPATH%\HCGTN\A57865.ZDF
  • %HOMEPATH%\HCGTN\6749.CLC
  • %HOMEPATH%\HCGTN\45478.MIM
  • %HOMEPATH%\HCGTN\28931.BIO
  • %HOMEPATH%\HCGTN\F55190.CCZ
  • %HOMEPATH%\HCGTN\Q49398.NTR
  • %HOMEPATH%\HCGTN\Z78954.NRC
  • %HOMEPATH%\HCGTN\V51246.UUI
  • %HOMEPATH%\HCGTN\33635.VLQ
  • %HOMEPATH%\HCGTN\80351.OKT
  • %HOMEPATH%\HCGTN\63848.ALX
  • %HOMEPATH%\HCGTN\41573.OPE
  • %HOMEPATH%\HCGTN\Q40379.IXV
  • %HOMEPATH%\HCGTN\O14392.LQC
  • %HOMEPATH%\HCGTN\62542.RPB
  • %HOMEPATH%\HCGTN\85206.PLF
  • %HOMEPATH%\HCGTN\60902.NAT
  • %HOMEPATH%\HCGTN\Z92891.KCN
  • %HOMEPATH%\HCGTN\F22110.DTZ
  • %HOMEPATH%\HCGTN\79528.EVI
  • %HOMEPATH%\HCGTN\19121.YGB
  • %HOMEPATH%\HCGTN\K58231.WVT
  • %HOMEPATH%\HCGTN\57712.ZHJ
  • %HOMEPATH%\HCGTN\19919.WLA
  • %HOMEPATH%\HCGTN\36478.ZBH
  • %HOMEPATH%\HCGTN\Q14799.OEZ
  • %HOMEPATH%\HCGTN\L61496.UZF
  • %HOMEPATH%\HCGTN\72961.CHH
  • %HOMEPATH%\HCGTN\15988.QSB
  • %HOMEPATH%\HCGTN\N14584.XQY
  • %HOMEPATH%\HCGTN\17803.CKN
  • %HOMEPATH%\HCGTN\43203.PNI
  • %HOMEPATH%\HCGTN\Y99447.ZHF
  • %HOMEPATH%\HCGTN\D72906.WGI
  • %HOMEPATH%\HCGTN\51863.RPL
  • %HOMEPATH%\HCGTN\E97774.HTC
  • %HOMEPATH%\HCGTN\40710.JPP
  • %HOMEPATH%\HCGTN\R16754.GYP
  • %HOMEPATH%\HCGTN\90614.RYH
  • %HOMEPATH%\HCGTN\N83068.KKL
  • %HOMEPATH%\HCGTN\63807.CTL
  • %HOMEPATH%\HCGTN\F92728.VQG
  • %HOMEPATH%\HCGTN\Z83785.MGM
  • %HOMEPATH%\HCGTN\C24693.ARU
  • %HOMEPATH%\HCGTN\B31567.CFF
  • %HOMEPATH%\HCGTN\A74973.TFP
  • %HOMEPATH%\HCGTN\O33510.NNP
  • %HOMEPATH%\HCGTN\S88783.XLY
  • %HOMEPATH%\HCGTN\33290.UFF
  • %HOMEPATH%\HCGTN\L33960.AFP
  • %HOMEPATH%\HCGTN\A70909.PPZ
  • %HOMEPATH%\HCGTN\76112.BVA
  • %HOMEPATH%\HCGTN\R12315.KMW
  • %HOMEPATH%\HCGTN\95593.FDL
  • %HOMEPATH%\HCGTN\CXGLTTLM.dat
  • %HOMEPATH%\HCGTN\92563.DMH
  • %HOMEPATH%\HCGTN\50773.KRI
  • %HOMEPATH%\HCGTN\93345.NIM
  • %HOMEPATH%\HCGTN\R85003.HRZ
  • %HOMEPATH%\HCGTN\35164.WKT
  • %HOMEPATH%\HCGTN\73066.NJE
  • %HOMEPATH%\HCGTN\11208.MKA
  • %HOMEPATH%\HCGTN\G91532.NUR
  • %HOMEPATH%\HCGTN\20278.XCE
  • %HOMEPATH%\HCGTN\61002.IJM
  • %HOMEPATH%\HCGTN\90948.GVS
  • %HOMEPATH%\HCGTN\C85222.PLD
  • %HOMEPATH%\HCGTN\95370.HUV
  • %HOMEPATH%\HCGTN\N13510.WZV
  • %HOMEPATH%\HCGTN\E37115.WMS
  • %HOMEPATH%\HCGTN\31932.ODC
  • %HOMEPATH%\HCGTN\32439.YWY
  • %HOMEPATH%\HCGTN\29952.CWJ
  • %HOMEPATH%\HCGTN\C6072.FVP
  • %HOMEPATH%\HCGTN\89982.ODU
  • %HOMEPATH%\HCGTN\F38643.IQA
  • %HOMEPATH%\HCGTN\K92930.UUO
  • %HOMEPATH%\HCGTN\W6660.YSG
  • %HOMEPATH%\HCGTN\35593.XWT
  • %HOMEPATH%\HCGTN\31079.BSS
  • %HOMEPATH%\HCGTN\79002.NJZ
  • %HOMEPATH%\HCGTN\F65184.GGJ
  • %HOMEPATH%\HCGTN\G6840.PBO
  • %HOMEPATH%\HCGTN\N67466.MAE
  • %HOMEPATH%\HCGTN\54918.ULB
  • %HOMEPATH%\HCGTN\X66080.QHM
  • %HOMEPATH%\HCGTN\3612.VBZ
  • %HOMEPATH%\HCGTN\I30039.WWF
  • %HOMEPATH%\HCGTN\P35855.BGT
  • %HOMEPATH%\HCGTN\72658.RHT
  • %HOMEPATH%\HCGTN\45910.FRN
  • %HOMEPATH%\HCGTN\Q28692.FKM
  • %HOMEPATH%\HCGTN\63548.YFK
  • %HOMEPATH%\HCGTN\26881.TPQ
  • %HOMEPATH%\HCGTN\L55922.QTJ
  • %HOMEPATH%\HCGTN\77928.RMG
  • %HOMEPATH%\HCGTN\R41215.FNE
  • %HOMEPATH%\HCGTN\C77059.GWI
  • %HOMEPATH%\HCGTN\96278.KZM
  • %HOMEPATH%\HCGTN\18038.WGQ
  • %HOMEPATH%\HCGTN\T67936.GLR
  • %HOMEPATH%\HCGTN\P14845.HIR
  • %HOMEPATH%\HCGTN\J55232.KZH
  • %HOMEPATH%\HCGTN\32607.LMO
  • %HOMEPATH%\HCGTN\7856.YWK
  • %HOMEPATH%\HCGTN\W97683.MFP
  • %HOMEPATH%\HCGTN\B83674.QXH
  • %HOMEPATH%\HCGTN\D75031.QZC
  • %HOMEPATH%\HCGTN\53712.TQT
  • %HOMEPATH%\HCGTN\E96471.BUF
  • %HOMEPATH%\HCGTN\56143.FYW
  • %HOMEPATH%\HCGTN\8486.VXG
  • %HOMEPATH%\HCGTN\45244.WBJ
  • %HOMEPATH%\HCGTN\F53241.ANG
  • %HOMEPATH%\HCGTN\J24545.RMA
  • %HOMEPATH%\HCGTN\52246.LJZ
  • %HOMEPATH%\HCGTN\U59469.KEA
  • %HOMEPATH%\HCGTN\86425.USR
  • %HOMEPATH%\HCGTN\O89596.BLG
  • %HOMEPATH%\HCGTN\S92368.DUX
  • %HOMEPATH%\HCGTN\1197.FAY
  • %HOMEPATH%\HCGTN\U57411.YCV
  • %HOMEPATH%\HCGTN\54344.XHT
  • %HOMEPATH%\HCGTN\25299.YEO
  • %HOMEPATH%\HCGTN\83713.AKE
  • %HOMEPATH%\HCGTN\T42885.CRO
  • %HOMEPATH%\HCGTN\65285.ZNQ
  • %HOMEPATH%\HCGTN\75197.VCB
  • %HOMEPATH%\HCGTN\Q66012.NHN
  • %HOMEPATH%\HCGTN\F69218.TMX
  • %HOMEPATH%\HCGTN\Q45548.MFF
  • %HOMEPATH%\HCGTN\S59807.UXD
  • %HOMEPATH%\HCGTN\57273.CBQ
  • %HOMEPATH%\HCGTN\W85539.EOF
  • %HOMEPATH%\HCGTN\45631.AUK
  • %HOMEPATH%\HCGTN\70734.FSM
  • %HOMEPATH%\HCGTN\67930.LZU
  • %HOMEPATH%\HCGTN\J12254.JRT
  • %HOMEPATH%\HCGTN\15760.UDW
  • %HOMEPATH%\HCGTN\61932.XLT
  • %HOMEPATH%\HCGTN\49203.LXZ
  • %HOMEPATH%\HCGTN\O76065.YAK
  • %HOMEPATH%\HCGTN\45910.WWQ
  • %HOMEPATH%\HCGTN\31973.JHP
  • %HOMEPATH%\HCGTN\W68713.FGM
  • %HOMEPATH%\HCGTN\A65675.TEM
  • %HOMEPATH%\HCGTN\H67735.RLB
  • %HOMEPATH%\HCGTN\72963.OVF
  • %HOMEPATH%\HCGTN\92732.MQR
  • %HOMEPATH%\HCGTN\H21434.VCP
  • %HOMEPATH%\HCGTN\67849.ODE
  • %HOMEPATH%\HCGTN\39634.KJN
  • %HOMEPATH%\HCGTN\V23802.XCC
  • %HOMEPATH%\HCGTN\89286.JYZ
  • %HOMEPATH%\HCGTN\R75129.NGV
  • %HOMEPATH%\HCGTN\B30789.XWZ
  • %HOMEPATH%\HCGTN\A16939.LIA
  • %HOMEPATH%\HCGTN\X54488.YBV
  • %HOMEPATH%\HCGTN\B35901.MXF
  • %HOMEPATH%\HCGTN\A98327.DTL
  • %HOMEPATH%\HCGTN\24324.PJN
  • %HOMEPATH%\HCGTN\Z26514.EGI
  • %HOMEPATH%\HCGTN\E52224.USY
  • %HOMEPATH%\HCGTN\Z65763.JDZ
  • %HOMEPATH%\HCGTN\X59454.JJQ
  • %HOMEPATH%\HCGTN\28506.VJL
  • %HOMEPATH%\HCGTN\M25248.MKK
  • %HOMEPATH%\HCGTN\Q22811.YSV
  • %HOMEPATH%\HCGTN\20139.THT
  • %HOMEPATH%\HCGTN\34529.HPR
  • %HOMEPATH%\HCGTN\R76769.BZP
  • %HOMEPATH%\HCGTN\Q91615.VYY
  • %HOMEPATH%\HCGTN\W35367.DYW
  • %HOMEPATH%\HCGTN\53539.DYL
  • %HOMEPATH%\HCGTN\37418.QQA
  • %HOMEPATH%\HCGTN\4353.JTO
  • %HOMEPATH%\HCGTN\N10318.LYF
  • %HOMEPATH%\HCGTN\32224.WTB
  • %HOMEPATH%\HCGTN\54774.SNA
  • %HOMEPATH%\HCGTN\Z71679.KIT
  • %HOMEPATH%\HCGTN\G21568.MWQ
  • %HOMEPATH%\HCGTN\34019.ANJ
  • %HOMEPATH%\HCGTN\Y91978.BDD
  • %HOMEPATH%\HCGTN\15665.PDV
  • %HOMEPATH%\HCGTN\H62962.FOE
  • %HOMEPATH%\HCGTN\20540.YAJ
  • %HOMEPATH%\HCGTN\J72527.NPN
  • %HOMEPATH%\HCGTN\D78411.NRZ
  • %HOMEPATH%\HCGTN\W5762.LHK
  • %HOMEPATH%\HCGTN\R81545.RCE
  • %HOMEPATH%\HCGTN\S74220.AIO
  • %HOMEPATH%\HCGTN\63222.PGY
  • %HOMEPATH%\HCGTN\4428.WLO
  • %HOMEPATH%\HCGTN\T91667.YMC
  • %HOMEPATH%\HCGTN\71868.SYP
  • %HOMEPATH%\HCGTN\S25113.GLX
  • %HOMEPATH%\HCGTN\90537.WTM
  • %HOMEPATH%\HCGTN\Z96900.VLE
  • %HOMEPATH%\HCGTN\Y77967.BRP
  • %HOMEPATH%\HCGTN\Z90513.TYH
  • %HOMEPATH%\HCGTN\Z98314.ETU
  • %HOMEPATH%\HCGTN\E72228.DTM
  • %HOMEPATH%\HCGTN\17321.CUH
  • %HOMEPATH%\HCGTN\98445.WMN
  • %HOMEPATH%\HCGTN\91256.QEE
  • %HOMEPATH%\HCGTN\62434.HBX
  • %HOMEPATH%\HCGTN\33170.DEZ
  • %HOMEPATH%\HCGTN\H89603.DLB
  • %HOMEPATH%\HCGTN\X57731.GOD
  • %HOMEPATH%\HCGTN\4587.FPH
  • %HOMEPATH%\HCGTN\K16194.VPQ
  • %HOMEPATH%\HCGTN\16931.LYW
  • %HOMEPATH%\HCGTN\W54442.IBZ
  • %HOMEPATH%\HCGTN\90662.EPH
  • %HOMEPATH%\HCGTN\Y28463.ZYE
  • %HOMEPATH%\HCGTN\20555.WNB
  • %HOMEPATH%\HCGTN\G30596.RNI
  • %HOMEPATH%\HCGTN\90997.JKJ
  • %HOMEPATH%\HCGTN\Q62383.SDF
  • %HOMEPATH%\HCGTN\J24143.ZKP
  • %HOMEPATH%\HCGTN\settings.ini
  • %HOMEPATH%\HCGTN\3562.vbs
  • %HOMEPATH%\HCGTN\D30568.AJB
  • %HOMEPATH%\HCGTN\VRKEV.exe
  • %HOMEPATH%\HCGTN\649956.LTC
  • %HOMEPATH%\HCGTN\986590.dat
  • %HOMEPATH%\HCGTN\399923.dat
  • %HOMEPATH%\HCGTN\62419.NKY
  • %HOMEPATH%\HCGTN\N40025.JFS
  • %HOMEPATH%\HCGTN\3461.LSF
  • %HOMEPATH%\HCGTN\W67017.KDJ
  • %HOMEPATH%\HCGTN\W10464.CDA
  • %HOMEPATH%\HCGTN\O18032.IYF
  • %HOMEPATH%\HCGTN\S72828.JOG
  • %HOMEPATH%\HCGTN\R50495.BDK
  • %HOMEPATH%\HCGTN\L85489.IBD
  • %HOMEPATH%\HCGTN\Q57545.VGZ
  • %HOMEPATH%\HCGTN\J26543.JTG
  • %HOMEPATH%\HCGTN\S8138.MKP
  • %HOMEPATH%\HCGTN\W23863.RLF
  • %HOMEPATH%\HCGTN\P73903.GTK
  • %HOMEPATH%\HCGTN\57374.WFD
  • %HOMEPATH%\HCGTN\L34784.OFN
  • %HOMEPATH%\HCGTN\96998.IQD
  • %HOMEPATH%\HCGTN\R81917.QNU
  • %HOMEPATH%\HCGTN\99176.DJL
  • %HOMEPATH%\HCGTN\M85743.PCY
  • %HOMEPATH%\HCGTN\59820.SBD
  • %HOMEPATH%\HCGTN\B67917.YAL
  • %HOMEPATH%\HCGTN\C64927.KQV
  • %HOMEPATH%\HCGTN\C50009.HBU
  • %HOMEPATH%\HCGTN\54135.FKB
  • %HOMEPATH%\HCGTN\73266.MOI
  • %HOMEPATH%\HCGTN\X56446.NZV
  • %HOMEPATH%\HCGTN\Q79236.XCE
  • %HOMEPATH%\HCGTN\R53854.NMI
  • %HOMEPATH%\HCGTN\V89189.PSQ
  • %HOMEPATH%\HCGTN\V76230.VOA
  • %HOMEPATH%\HCGTN\71563.YBL
  • %HOMEPATH%\HCGTN\50811.UZW
  • %HOMEPATH%\HCGTN\2598.FPX
  • %HOMEPATH%\HCGTN\Z43181.EZV
  • %HOMEPATH%\HCGTN\6837.RQD
  • %HOMEPATH%\HCGTN\4583.UGB
  • %HOMEPATH%\HCGTN\Q74173.KWO
  • %HOMEPATH%\HCGTN\12472.POC
  • %HOMEPATH%\HCGTN\78315.AXL
  • %HOMEPATH%\HCGTN\12217.REA
  • %HOMEPATH%\HCGTN\F23187.ZFT
  • %HOMEPATH%\HCGTN\M53133.KCR
  • %HOMEPATH%\HCGTN\R43738.SFU
  • %HOMEPATH%\HCGTN\L5321.FUY
  • %HOMEPATH%\HCGTN\G80913.EFM
  • %HOMEPATH%\HCGTN\P99141.NIE
  • %HOMEPATH%\HCGTN\69831.CFH
  • %HOMEPATH%\HCGTN\46145.VFO
  • %HOMEPATH%\HCGTN\D65992.MNU
  • %HOMEPATH%\HCGTN\2658.BAO
  • %HOMEPATH%\HCGTN\98765.IKB
  • %HOMEPATH%\HCGTN\75445.JAU
  • %HOMEPATH%\HCGTN\92787.BFJ
  • %HOMEPATH%\HCGTN\71910.IRV
  • %HOMEPATH%\HCGTN\S28523.SOP
  • %HOMEPATH%\HCGTN\84517.OZR
  • %HOMEPATH%\HCGTN\I98933.QXP
  • %HOMEPATH%\HCGTN\T37376.PFG
  • %HOMEPATH%\HCGTN\94040.AGP
  • %HOMEPATH%\HCGTN\31516.STP
  • %HOMEPATH%\HCGTN\78863.OPZ
  • %HOMEPATH%\HCGTN\65222.VYJ
  • %HOMEPATH%\HCGTN\18925.PHQ
  • %HOMEPATH%\HCGTN\10828.CAZ
  • %HOMEPATH%\HCGTN\V48442.UTN
  • %HOMEPATH%\HCGTN\Z99164.XKF
  • %HOMEPATH%\HCGTN\87279.ZIP
  • %HOMEPATH%\HCGTN\B24114.PXZ
  • %HOMEPATH%\HCGTN\A83467.XJO
  • %HOMEPATH%\HCGTN\R83906.DHL
  • %HOMEPATH%\HCGTN\V92461.DFK
  • %HOMEPATH%\HCGTN\A67479.MRE
  • %HOMEPATH%\HCGTN\95603.EWL
  • %HOMEPATH%\HCGTN\E57652.KNR
  • %HOMEPATH%\HCGTN\T49614.PDU
  • %HOMEPATH%\HCGTN\81681.BOU
  • %HOMEPATH%\HCGTN\S96459.HAE
  • %HOMEPATH%\HCGTN\99906.QJO
  • %HOMEPATH%\HCGTN\38690.EHS
  • %HOMEPATH%\HCGTN\92694.XZE
  • %HOMEPATH%\HCGTN\T31516.CCK
  • %HOMEPATH%\HCGTN\71735.YUK
  • %HOMEPATH%\HCGTN\X71759.QXU
  • %HOMEPATH%\HCGTN\30778.JDW
  • %HOMEPATH%\HCGTN\9954.DUD
  • %HOMEPATH%\HCGTN\83942.VBF
  • %HOMEPATH%\HCGTN\I28220.DFJ
  • %HOMEPATH%\HCGTN\W78397.IPI
  • %HOMEPATH%\HCGTN\B90313.OSQ
  • %HOMEPATH%\HCGTN\C62917.EGA
  • %HOMEPATH%\HCGTN\A85881.WEK
  • %HOMEPATH%\HCGTN\10355.ANH
  • %HOMEPATH%\HCGTN\J95928.CAJ
  • %HOMEPATH%\HCGTN\Z58044.LUU
  • %HOMEPATH%\HCGTN\2690.QAZ
  • %HOMEPATH%\HCGTN\R39603.EQN
  • %HOMEPATH%\HCGTN\67659.OCE
  • %HOMEPATH%\HCGTN\13178.VFI
  • %HOMEPATH%\HCGTN\F70108.KRN
  • %HOMEPATH%\HCGTN\8834.TCI
  • %HOMEPATH%\HCGTN\80975.XMD
  • %HOMEPATH%\HCGTN\32472.FMX
  • %HOMEPATH%\HCGTN\T67123.QFO
  • %HOMEPATH%\HCGTN\95570.ESI
  • %HOMEPATH%\HCGTN\K8723.QXL
  • %HOMEPATH%\HCGTN\J68205.SVX
  • %HOMEPATH%\HCGTN\20281.YXV
  • %HOMEPATH%\HCGTN\61358.WLD
  • %HOMEPATH%\HCGTN\Y74144.IVA
  • %HOMEPATH%\HCGTN\W94443.XVJ
  • %HOMEPATH%\HCGTN\L60619.COF
  • %HOMEPATH%\HCGTN\Q26241.WGA
  • %HOMEPATH%\HCGTN\B62949.WRR
  • %HOMEPATH%\HCGTN\P28859.SWD
  • %HOMEPATH%\HCGTN\X61514.KRR
  • %HOMEPATH%\HCGTN\1700.HCS
  • %HOMEPATH%\HCGTN\P74343.ZTN
  • %HOMEPATH%\HCGTN\94148.SQX
  • %HOMEPATH%\HCGTN\46122.QYM
  • %HOMEPATH%\HCGTN\H22178.NFU
  • %HOMEPATH%\HCGTN\78443.CSM
  • %HOMEPATH%\HCGTN\49149.FCC
  • %HOMEPATH%\HCGTN\E39051.RVJ
  • %HOMEPATH%\HCGTN\74207.PVY
  • %HOMEPATH%\HCGTN\Y91363.TVK
  • %HOMEPATH%\HCGTN\V91089.GAF
  • %HOMEPATH%\HCGTN\6771.DGO
  • %HOMEPATH%\HCGTN\36241.GSD
  • %HOMEPATH%\HCGTN\P73348.DFH
  • %HOMEPATH%\HCGTN\B75541.PSD
  • %HOMEPATH%\HCGTN\53690.POC
  • %HOMEPATH%\HCGTN\38237.IIV
  • %HOMEPATH%\HCGTN\S78262.QYV
  • %HOMEPATH%\HCGTN\H90198.HRO
  • %HOMEPATH%\HCGTN\V48328.RIX
  • %HOMEPATH%\HCGTN\51091.MZG
  • %HOMEPATH%\HCGTN\Y38610.UKC
  • %HOMEPATH%\HCGTN\M68588.DMD
  • %HOMEPATH%\HCGTN\46986.TCZ
  • %HOMEPATH%\HCGTN\U99743.IAG
  • %HOMEPATH%\HCGTN\1755.OMC
  • %HOMEPATH%\HCGTN\12351.HDT
  • %HOMEPATH%\HCGTN\79952.COW
  • %HOMEPATH%\HCGTN\90488.XQU
  • %HOMEPATH%\HCGTN\F97645.JLG
  • %HOMEPATH%\HCGTN\Q98830.AJR
  • %HOMEPATH%\HCGTN\85559.KXX
  • %HOMEPATH%\HCGTN\T56871.CSR
  • %HOMEPATH%\HCGTN\T66558.BLT
  • %HOMEPATH%\HCGTN\H31507.GLD
  • %HOMEPATH%\HCGTN\V22599.YQY
  • %HOMEPATH%\HCGTN\O2416.BES
  • %HOMEPATH%\HCGTN\55264.LNJ
  • %HOMEPATH%\HCGTN\94535.NZN
  • %HOMEPATH%\HCGTN\29934.PVL
  • %HOMEPATH%\HCGTN\2879.CYM
  • %HOMEPATH%\HCGTN\R43492.LHI
  • %HOMEPATH%\HCGTN\X33007.BIR
  • %HOMEPATH%\HCGTN\8255.PNE
  • %HOMEPATH%\HCGTN\54527.WFG
  • %HOMEPATH%\HCGTN\90151.FWM
  • %HOMEPATH%\HCGTN\Z91035.KOA
  • %HOMEPATH%\HCGTN\S10864.YLC
  • %HOMEPATH%\HCGTN\W39666.BPG
  • %HOMEPATH%\HCGTN\76914.MUI
  • %HOMEPATH%\HCGTN\33771.JJA
  • %HOMEPATH%\HCGTN\M45275.IPA
Присваивает атрибут 'скрытый' для следующих файлов:
  • %HOMEPATH%\HCGTN\68124.OZX
  • %HOMEPATH%\HCGTN\90607.VHW
  • %HOMEPATH%\HCGTN\49827.DLK
  • %HOMEPATH%\HCGTN\45025.BKC
  • %HOMEPATH%\HCGTN\Z97497.XNX
  • %HOMEPATH%\HCGTN\6172.YBG
  • %HOMEPATH%\HCGTN\Z16935.KCA
  • %HOMEPATH%\HCGTN\P50557.YIL
  • %HOMEPATH%\HCGTN\H32646.HFS
  • %HOMEPATH%\HCGTN\C26382.SKV
  • %HOMEPATH%\HCGTN\26173.MJN
  • %HOMEPATH%\HCGTN\23444.XFV
  • %HOMEPATH%\HCGTN\F70463.MNC
  • %HOMEPATH%\HCGTN\Y6330.FDM
  • %HOMEPATH%\HCGTN\92464.JIW
  • %HOMEPATH%\HCGTN\Q65824.ZHS
  • %HOMEPATH%\HCGTN\N20301.LXY
  • %HOMEPATH%\HCGTN\76938.EMB
  • %HOMEPATH%\HCGTN\1957.GZU
  • %HOMEPATH%\HCGTN\N20348.WGV
  • %HOMEPATH%\HCGTN\Z91616.IZH
  • %HOMEPATH%\HCGTN\19053.AXB
  • %HOMEPATH%\HCGTN\18916.YPV
  • %HOMEPATH%\HCGTN\E59156.ZDG
  • %HOMEPATH%\HCGTN\Z60929.CXI
  • %HOMEPATH%\HCGTN\62987.QFM
  • %HOMEPATH%\HCGTN\X25279.NHQ
  • %HOMEPATH%\HCGTN\U51147.JML
  • %HOMEPATH%\HCGTN\A59451.BQT
  • %HOMEPATH%\HCGTN\34774.ZVY
  • %HOMEPATH%\HCGTN\83700.SMC
  • %HOMEPATH%\HCGTN\V83591.AQP
  • %HOMEPATH%\HCGTN\M38862.GOM
  • %HOMEPATH%\HCGTN\70887.KMR
  • %HOMEPATH%\HCGTN\U22689.NBI
  • %HOMEPATH%\HCGTN\51560.CCD
  • %HOMEPATH%\HCGTN\7941.BLY
  • %HOMEPATH%\HCGTN\I65679.IBI
  • %HOMEPATH%\HCGTN\Z10576.IFJ
  • %HOMEPATH%\HCGTN\H10908.WIX
  • %HOMEPATH%\HCGTN\53390.EBH
  • %HOMEPATH%\HCGTN\70585.TPK
  • %HOMEPATH%\HCGTN\F45515.GYZ
  • %HOMEPATH%\HCGTN\85498.KDT
  • %HOMEPATH%\HCGTN\73167.LYH
  • %HOMEPATH%\HCGTN\62109.BIG
  • %HOMEPATH%\HCGTN\65640.IIF
  • %HOMEPATH%\HCGTN\9026.DXY
  • %HOMEPATH%\HCGTN\O51470.YFU
  • %HOMEPATH%\HCGTN\69702.QZW
  • %HOMEPATH%\HCGTN\J40385.JXM
  • %HOMEPATH%\HCGTN\D61339.AMY
  • %HOMEPATH%\HCGTN\I14039.BPM
  • %HOMEPATH%\HCGTN\81752.BRJ
  • %HOMEPATH%\HCGTN\55611.HNL
  • %HOMEPATH%\HCGTN\39685.JXM
  • %HOMEPATH%\HCGTN\58824.HVD
  • %HOMEPATH%\HCGTN\41839.ORA
  • %HOMEPATH%\HCGTN\Y54982.KKI
  • %HOMEPATH%\HCGTN\26916.EHU
  • %HOMEPATH%\HCGTN\80080.YUX
  • %HOMEPATH%\HCGTN\95394.GTN
  • %HOMEPATH%\HCGTN\95049.CGD
  • %HOMEPATH%\HCGTN\78543.UGU
  • %HOMEPATH%\HCGTN\89281.JOQ
  • %HOMEPATH%\HCGTN\11973.CYU
  • %HOMEPATH%\HCGTN\50399.MMS
  • %HOMEPATH%\HCGTN\I69401.XJR
  • %HOMEPATH%\HCGTN\50657.EFE
  • %HOMEPATH%\HCGTN\61427.CFM
  • %HOMEPATH%\HCGTN\R89544.AZU
  • %HOMEPATH%\HCGTN\51628.VYJ
  • %HOMEPATH%\HCGTN\R21132.PGU
  • %HOMEPATH%\HCGTN\15815.SKK
  • %HOMEPATH%\HCGTN\P86456.HZX
  • %HOMEPATH%\HCGTN\66160.YBN
  • %HOMEPATH%\HCGTN\G24963.EVM
  • %HOMEPATH%\HCGTN\22926.YVT
  • %HOMEPATH%\HCGTN\93704.NJI
  • %HOMEPATH%\HCGTN\C57487.XUY
  • %HOMEPATH%\HCGTN\T17409.PCM
  • %HOMEPATH%\HCGTN\X55308.HUB
  • %HOMEPATH%\HCGTN\48397.EER
  • %HOMEPATH%\HCGTN\I39075.TYG
  • %HOMEPATH%\HCGTN\61932.XLT
  • %HOMEPATH%\HCGTN\36399.WJQ
  • %HOMEPATH%\HCGTN\I66423.HXC
  • %HOMEPATH%\HCGTN\13779.FHI
  • %HOMEPATH%\HCGTN\97441.LBK
  • %HOMEPATH%\HCGTN\74481.GJK
  • %HOMEPATH%\HCGTN\K12524.OGU
  • %HOMEPATH%\HCGTN\3404.JVI
  • %HOMEPATH%\HCGTN\Q77178.WCE
  • %HOMEPATH%\HCGTN\A75844.IVT
  • %HOMEPATH%\HCGTN\U96447.XPY
  • %HOMEPATH%\HCGTN\58489.KJR
  • %HOMEPATH%\HCGTN\97322.QBP
  • %HOMEPATH%\HCGTN\X18703.FGR
  • %HOMEPATH%\HCGTN\39207.JOA
  • %HOMEPATH%\HCGTN\38652.NWU
  • %HOMEPATH%\HCGTN\79185.IMP
  • %HOMEPATH%\HCGTN\V46710.ZTJ
  • %HOMEPATH%\HCGTN\47651.WOD
  • %HOMEPATH%\HCGTN\K45762.VQI
  • %HOMEPATH%\HCGTN\P83763.CZG
  • %HOMEPATH%\HCGTN\42398.PBJ
  • %HOMEPATH%\HCGTN\Z57447.RIW
  • %HOMEPATH%\HCGTN\23333.MKX
  • %HOMEPATH%\HCGTN\66528.VTV
  • %HOMEPATH%\HCGTN\16233.NIE
  • %HOMEPATH%\HCGTN\S8217.LPD
  • %HOMEPATH%\HCGTN\Z78954.NRC
  • %HOMEPATH%\HCGTN\60939.TVZ
  • %HOMEPATH%\HCGTN\6064.PWP
  • %HOMEPATH%\HCGTN\M32542.INX
  • %HOMEPATH%\HCGTN\45478.MIM
  • %HOMEPATH%\HCGTN\H24229.JMS
  • %HOMEPATH%\HCGTN\A57865.ZDF
  • %HOMEPATH%\HCGTN\6749.CLC
  • %HOMEPATH%\HCGTN\60661.VRD
  • %HOMEPATH%\HCGTN\V51246.UUI
  • %HOMEPATH%\HCGTN\F55190.CCZ
  • %HOMEPATH%\HCGTN\Q49398.NTR
  • %HOMEPATH%\HCGTN\63848.ALX
  • %HOMEPATH%\HCGTN\28931.BIO
  • %HOMEPATH%\HCGTN\33635.VLQ
  • %HOMEPATH%\HCGTN\80351.OKT
  • %HOMEPATH%\HCGTN\M43085.DEH
  • %HOMEPATH%\HCGTN\85206.PLF
  • %HOMEPATH%\HCGTN\Q40379.IXV
  • %HOMEPATH%\HCGTN\O14392.LQC
  • %HOMEPATH%\HCGTN\F22110.DTZ
  • %HOMEPATH%\HCGTN\72961.CHH
  • %HOMEPATH%\HCGTN\60902.NAT
  • %HOMEPATH%\HCGTN\Z92891.KCN
  • %HOMEPATH%\HCGTN\62542.RPB
  • %HOMEPATH%\HCGTN\19919.WLA
  • %HOMEPATH%\HCGTN\19121.YGB
  • %HOMEPATH%\HCGTN\K58231.WVT
  • %HOMEPATH%\HCGTN\L61496.UZF
  • %HOMEPATH%\HCGTN\79528.EVI
  • %HOMEPATH%\HCGTN\36478.ZBH
  • %HOMEPATH%\HCGTN\Q14799.OEZ
  • %HOMEPATH%\HCGTN\90614.RYH
  • %HOMEPATH%\HCGTN\43203.PNI
  • %HOMEPATH%\HCGTN\15988.QSB
  • %HOMEPATH%\HCGTN\N14584.XQY
  • %HOMEPATH%\HCGTN\51863.RPL
  • %HOMEPATH%\HCGTN\F38643.IQA
  • %HOMEPATH%\HCGTN\Y99447.ZHF
  • %HOMEPATH%\HCGTN\D72906.WGI
  • %HOMEPATH%\HCGTN\17803.CKN
  • %HOMEPATH%\HCGTN\N83068.KKL
  • %HOMEPATH%\HCGTN\40710.JPP
  • %HOMEPATH%\HCGTN\R16754.GYP
  • %HOMEPATH%\HCGTN\Z83785.MGM
  • %HOMEPATH%\HCGTN\E97774.HTC
  • %HOMEPATH%\HCGTN\63807.CTL
  • %HOMEPATH%\HCGTN\F92728.VQG
  • %HOMEPATH%\HCGTN\57712.ZHJ
  • %HOMEPATH%\HCGTN\S88783.XLY
  • %HOMEPATH%\HCGTN\B31567.CFF
  • %HOMEPATH%\HCGTN\A74973.TFP
  • %HOMEPATH%\HCGTN\A70909.PPZ
  • %HOMEPATH%\HCGTN\35164.WKT
  • %HOMEPATH%\HCGTN\33290.UFF
  • %HOMEPATH%\HCGTN\L33960.AFP
  • %HOMEPATH%\HCGTN\O33510.NNP
  • %HOMEPATH%\HCGTN\92563.DMH
  • %HOMEPATH%\HCGTN\R12315.KMW
  • %HOMEPATH%\HCGTN\95593.FDL
  • %HOMEPATH%\HCGTN\R85003.HRZ
  • %HOMEPATH%\HCGTN\76112.BVA
  • %HOMEPATH%\HCGTN\50773.KRI
  • %HOMEPATH%\HCGTN\93345.NIM
  • %HOMEPATH%\HCGTN\31932.ODC
  • %HOMEPATH%\HCGTN\20278.XCE
  • %HOMEPATH%\HCGTN\73066.NJE
  • %HOMEPATH%\HCGTN\11208.MKA
  • %HOMEPATH%\HCGTN\C85222.PLD
  • %HOMEPATH%\HCGTN\C24693.ARU
  • %HOMEPATH%\HCGTN\61002.IJM
  • %HOMEPATH%\HCGTN\90948.GVS
  • %HOMEPATH%\HCGTN\G91532.NUR
  • %HOMEPATH%\HCGTN\32439.YWY
  • %HOMEPATH%\HCGTN\N13510.WZV
  • %HOMEPATH%\HCGTN\E37115.WMS
  • %HOMEPATH%\HCGTN\89982.ODU
  • %HOMEPATH%\HCGTN\95370.HUV
  • %HOMEPATH%\HCGTN\29952.CWJ
  • %HOMEPATH%\HCGTN\C6072.FVP
  • %HOMEPATH%\HCGTN\O89596.BLG
  • %HOMEPATH%\HCGTN\31079.BSS
  • %HOMEPATH%\HCGTN\K92930.UUO
  • %HOMEPATH%\HCGTN\W6660.YSG
  • %HOMEPATH%\HCGTN\G6840.PBO
  • %HOMEPATH%\HCGTN\Q28692.FKM
  • %HOMEPATH%\HCGTN\79002.NJZ
  • %HOMEPATH%\HCGTN\F65184.GGJ
  • %HOMEPATH%\HCGTN\35593.XWT
  • %HOMEPATH%\HCGTN\I30039.WWF
  • %HOMEPATH%\HCGTN\54918.ULB
  • %HOMEPATH%\HCGTN\X66080.QHM
  • %HOMEPATH%\HCGTN\45910.FRN
  • %HOMEPATH%\HCGTN\N67466.MAE
  • %HOMEPATH%\HCGTN\P35855.BGT
  • %HOMEPATH%\HCGTN\72658.RHT
  • %HOMEPATH%\HCGTN\J55232.KZH
  • %HOMEPATH%\HCGTN\77928.RMG
  • %HOMEPATH%\HCGTN\63548.YFK
  • %HOMEPATH%\HCGTN\26881.TPQ
  • %HOMEPATH%\HCGTN\96278.KZM
  • %HOMEPATH%\HCGTN\41573.OPE
  • %HOMEPATH%\HCGTN\R41215.FNE
  • %HOMEPATH%\HCGTN\C77059.GWI
  • %HOMEPATH%\HCGTN\L55922.QTJ
  • %HOMEPATH%\HCGTN\32607.LMO
  • %HOMEPATH%\HCGTN\T67936.GLR
  • %HOMEPATH%\HCGTN\P14845.HIR
  • %HOMEPATH%\HCGTN\B83674.QXH
  • %HOMEPATH%\HCGTN\18038.WGQ
  • %HOMEPATH%\HCGTN\7856.YWK
  • %HOMEPATH%\HCGTN\W97683.MFP
  • %HOMEPATH%\HCGTN\3612.VBZ
  • %HOMEPATH%\HCGTN\8486.VXG
  • %HOMEPATH%\HCGTN\53712.TQT
  • %HOMEPATH%\HCGTN\E96471.BUF
  • %HOMEPATH%\HCGTN\J24545.RMA
  • %HOMEPATH%\HCGTN\25299.YEO
  • %HOMEPATH%\HCGTN\45244.WBJ
  • %HOMEPATH%\HCGTN\F53241.ANG
  • %HOMEPATH%\HCGTN\56143.FYW
  • %HOMEPATH%\HCGTN\S92368.DUX
  • %HOMEPATH%\HCGTN\U59469.KEA
  • %HOMEPATH%\HCGTN\86425.USR
  • %HOMEPATH%\HCGTN\54344.XHT
  • %HOMEPATH%\HCGTN\52246.LJZ
  • %HOMEPATH%\HCGTN\1197.FAY
  • %HOMEPATH%\HCGTN\U57411.YCV
  • %HOMEPATH%\HCGTN\45631.AUK
  • %HOMEPATH%\HCGTN\75197.VCB
  • %HOMEPATH%\HCGTN\83713.AKE
  • %HOMEPATH%\HCGTN\T42885.CRO
  • %HOMEPATH%\HCGTN\Q45548.MFF
  • %HOMEPATH%\HCGTN\D75031.QZC
  • %HOMEPATH%\HCGTN\Q66012.NHN
  • %HOMEPATH%\HCGTN\F69218.TMX
  • %HOMEPATH%\HCGTN\65285.ZNQ
  • %HOMEPATH%\HCGTN\70734.FSM
  • %HOMEPATH%\HCGTN\57273.CBQ
  • %HOMEPATH%\HCGTN\W85539.EOF
  • %HOMEPATH%\HCGTN\15760.UDW
  • %HOMEPATH%\HCGTN\S59807.UXD
  • %HOMEPATH%\HCGTN\67930.LZU
  • %HOMEPATH%\HCGTN\J12254.JRT
  • %HOMEPATH%\HCGTN\49203.LXZ
  • %HOMEPATH%\HCGTN\O76065.YAK
  • %HOMEPATH%\HCGTN\45910.WWQ
  • %HOMEPATH%\HCGTN\31973.JHP
  • %HOMEPATH%\HCGTN\W68713.FGM
  • %HOMEPATH%\HCGTN\A65675.TEM
  • %HOMEPATH%\HCGTN\H67735.RLB
  • %HOMEPATH%\HCGTN\72963.OVF
  • %HOMEPATH%\HCGTN\92732.MQR
  • %HOMEPATH%\HCGTN\H21434.VCP
  • %HOMEPATH%\HCGTN\67849.ODE
  • %HOMEPATH%\HCGTN\39634.KJN
  • %HOMEPATH%\HCGTN\V23802.XCC
  • %HOMEPATH%\HCGTN\89286.JYZ
  • %HOMEPATH%\HCGTN\R75129.NGV
  • %HOMEPATH%\HCGTN\B30789.XWZ
  • %HOMEPATH%\HCGTN\A16939.LIA
  • %HOMEPATH%\HCGTN\X54488.YBV
  • %HOMEPATH%\HCGTN\B35901.MXF
  • %HOMEPATH%\HCGTN\A98327.DTL
  • %HOMEPATH%\HCGTN\24324.PJN
  • %HOMEPATH%\HCGTN\Z26514.EGI
  • %HOMEPATH%\HCGTN\E52224.USY
  • %HOMEPATH%\HCGTN\Z65763.JDZ
  • %HOMEPATH%\HCGTN\X59454.JJQ
  • %HOMEPATH%\HCGTN\28506.VJL
  • %HOMEPATH%\HCGTN\M25248.MKK
  • %HOMEPATH%\HCGTN\Q22811.YSV
  • %HOMEPATH%\HCGTN\20139.THT
  • %HOMEPATH%\HCGTN\34529.HPR
  • %HOMEPATH%\HCGTN\R76769.BZP
  • %HOMEPATH%\HCGTN\Q91615.VYY
  • %HOMEPATH%\HCGTN\W35367.DYW
  • %HOMEPATH%\HCGTN\53539.DYL
  • %HOMEPATH%\HCGTN\37418.QQA
  • %HOMEPATH%\HCGTN\4353.JTO
  • %HOMEPATH%\HCGTN\N10318.LYF
  • %HOMEPATH%\HCGTN\32224.WTB
  • %HOMEPATH%\HCGTN\54774.SNA
  • %HOMEPATH%\HCGTN\Z71679.KIT
  • %HOMEPATH%\HCGTN\G21568.MWQ
  • %HOMEPATH%\HCGTN\34019.ANJ
  • %HOMEPATH%\HCGTN\Y91978.BDD
  • %HOMEPATH%\HCGTN\15665.PDV
  • %HOMEPATH%\HCGTN\H62962.FOE
  • %HOMEPATH%\HCGTN\20540.YAJ
  • %HOMEPATH%\HCGTN\J72527.NPN
  • %HOMEPATH%\HCGTN\D78411.NRZ
  • %HOMEPATH%\HCGTN\W5762.LHK
  • %HOMEPATH%\HCGTN\R81545.RCE
  • %HOMEPATH%\HCGTN\S74220.AIO
  • %HOMEPATH%\HCGTN\63222.PGY
  • %HOMEPATH%\HCGTN\4428.WLO
  • %HOMEPATH%\HCGTN\T91667.YMC
  • %HOMEPATH%\HCGTN\71868.SYP
  • %HOMEPATH%\HCGTN\S25113.GLX
  • %HOMEPATH%\HCGTN\90537.WTM
  • %HOMEPATH%\HCGTN\Z96900.VLE
  • %HOMEPATH%\HCGTN\Y77967.BRP
  • %HOMEPATH%\HCGTN\Z90513.TYH
  • %HOMEPATH%\HCGTN\Z98314.ETU
  • %HOMEPATH%\HCGTN\E72228.DTM
  • %HOMEPATH%\HCGTN\17321.CUH
  • %HOMEPATH%\HCGTN\98445.WMN
  • %HOMEPATH%\HCGTN\91256.QEE
  • %HOMEPATH%\HCGTN\62434.HBX
  • %HOMEPATH%\HCGTN\33170.DEZ
  • %HOMEPATH%\HCGTN\H89603.DLB
  • %HOMEPATH%\HCGTN\X57731.GOD
  • %HOMEPATH%\HCGTN\4587.FPH
  • %HOMEPATH%\HCGTN\K16194.VPQ
  • %HOMEPATH%\HCGTN\16931.LYW
  • %HOMEPATH%\HCGTN\W54442.IBZ
  • %HOMEPATH%\HCGTN\90662.EPH
  • %HOMEPATH%\HCGTN\Y28463.ZYE
  • %HOMEPATH%\HCGTN\20555.WNB
  • %HOMEPATH%\HCGTN\G30596.RNI
  • %HOMEPATH%\HCGTN\90997.JKJ
  • %HOMEPATH%\HCGTN\Q62383.SDF
  • %HOMEPATH%\HCGTN\J24143.ZKP
  • %HOMEPATH%\HCGTN\settings.ini
  • %HOMEPATH%\HCGTN\3562.vbs
  • %HOMEPATH%\HCGTN\D30568.AJB
  • %HOMEPATH%\HCGTN\VRKEV.exe
  • %HOMEPATH%\HCGTN\649956.LTC
  • %HOMEPATH%\HCGTN\986590.dat
  • %HOMEPATH%\HCGTN\399923.dat
  • %HOMEPATH%\HCGTN\62419.NKY
  • %HOMEPATH%\HCGTN\N40025.JFS
  • %HOMEPATH%\HCGTN\3461.LSF
  • %HOMEPATH%\HCGTN\W67017.KDJ
  • %HOMEPATH%\HCGTN\W10464.CDA
  • %HOMEPATH%\HCGTN\O18032.IYF
  • %HOMEPATH%\HCGTN\S72828.JOG
  • %HOMEPATH%\HCGTN\R50495.BDK
  • %HOMEPATH%\HCGTN\L85489.IBD
  • %HOMEPATH%\HCGTN\Q57545.VGZ
  • %HOMEPATH%\HCGTN\J26543.JTG
  • %HOMEPATH%\HCGTN\S8138.MKP
  • %HOMEPATH%\HCGTN\W23863.RLF
  • %HOMEPATH%\HCGTN\P73903.GTK
  • %HOMEPATH%\HCGTN\57374.WFD
  • %HOMEPATH%\HCGTN\L34784.OFN
  • %HOMEPATH%\HCGTN\96998.IQD
  • %HOMEPATH%\HCGTN\R81917.QNU
  • %HOMEPATH%\HCGTN\99176.DJL
  • %HOMEPATH%\HCGTN\M85743.PCY
  • %HOMEPATH%\HCGTN\59820.SBD
  • %HOMEPATH%\HCGTN\B67917.YAL
  • %HOMEPATH%\HCGTN\C64927.KQV
  • %HOMEPATH%\HCGTN\C50009.HBU
  • %HOMEPATH%\HCGTN\54135.FKB
  • %HOMEPATH%\HCGTN\73266.MOI
  • %HOMEPATH%\HCGTN\X56446.NZV
  • %HOMEPATH%\HCGTN\Q79236.XCE
  • %HOMEPATH%\HCGTN\R53854.NMI
  • %HOMEPATH%\HCGTN\V89189.PSQ
  • %HOMEPATH%\HCGTN\V76230.VOA
  • %HOMEPATH%\HCGTN\71563.YBL
  • %HOMEPATH%\HCGTN\50811.UZW
  • %HOMEPATH%\HCGTN\2598.FPX
  • %HOMEPATH%\HCGTN\Z43181.EZV
  • %HOMEPATH%\HCGTN\6837.RQD
  • %HOMEPATH%\HCGTN\4583.UGB
  • %HOMEPATH%\HCGTN\Q74173.KWO
  • %HOMEPATH%\HCGTN\12472.POC
  • %HOMEPATH%\HCGTN\78315.AXL
  • %HOMEPATH%\HCGTN\12217.REA
  • %HOMEPATH%\HCGTN\F23187.ZFT
  • %HOMEPATH%\HCGTN\M53133.KCR
  • %HOMEPATH%\HCGTN\R43738.SFU
  • %HOMEPATH%\HCGTN\L5321.FUY
  • %HOMEPATH%\HCGTN\G80913.EFM
  • %HOMEPATH%\HCGTN\P99141.NIE
  • %HOMEPATH%\HCGTN\69831.CFH
  • %HOMEPATH%\HCGTN\46145.VFO
  • %HOMEPATH%\HCGTN\D65992.MNU
  • %HOMEPATH%\HCGTN\2658.BAO
  • %HOMEPATH%\HCGTN\98765.IKB
  • %HOMEPATH%\HCGTN\75445.JAU
  • %HOMEPATH%\HCGTN\92787.BFJ
  • %HOMEPATH%\HCGTN\71910.IRV
  • %HOMEPATH%\HCGTN\S28523.SOP
  • %HOMEPATH%\HCGTN\84517.OZR
  • %HOMEPATH%\HCGTN\I98933.QXP
  • %HOMEPATH%\HCGTN\T37376.PFG
  • %HOMEPATH%\HCGTN\94040.AGP
  • %HOMEPATH%\HCGTN\31516.STP
  • %HOMEPATH%\HCGTN\78863.OPZ
  • %HOMEPATH%\HCGTN\65222.VYJ
  • %HOMEPATH%\HCGTN\18925.PHQ
  • %HOMEPATH%\HCGTN\10828.CAZ
  • %HOMEPATH%\HCGTN\V48442.UTN
  • %HOMEPATH%\HCGTN\Z99164.XKF
  • %HOMEPATH%\HCGTN\87279.ZIP
  • %HOMEPATH%\HCGTN\B24114.PXZ
  • %HOMEPATH%\HCGTN\A83467.XJO
  • %HOMEPATH%\HCGTN\R83906.DHL
  • %HOMEPATH%\HCGTN\V92461.DFK
  • %HOMEPATH%\HCGTN\A67479.MRE
  • %HOMEPATH%\HCGTN\95603.EWL
  • %HOMEPATH%\HCGTN\E57652.KNR
  • %HOMEPATH%\HCGTN\T49614.PDU
  • %HOMEPATH%\HCGTN\81681.BOU
  • %HOMEPATH%\HCGTN\S96459.HAE
  • %HOMEPATH%\HCGTN\99906.QJO
  • %HOMEPATH%\HCGTN\38690.EHS
  • %HOMEPATH%\HCGTN\92694.XZE
  • %HOMEPATH%\HCGTN\T31516.CCK
  • %HOMEPATH%\HCGTN\71735.YUK
  • %HOMEPATH%\HCGTN\X71759.QXU
  • %HOMEPATH%\HCGTN\30778.JDW
  • %HOMEPATH%\HCGTN\9954.DUD
  • %HOMEPATH%\HCGTN\83942.VBF
  • %HOMEPATH%\HCGTN\I28220.DFJ
  • %HOMEPATH%\HCGTN\W78397.IPI
  • %HOMEPATH%\HCGTN\B90313.OSQ
  • %HOMEPATH%\HCGTN\C62917.EGA
  • %HOMEPATH%\HCGTN\A85881.WEK
  • %HOMEPATH%\HCGTN\10355.ANH
  • %HOMEPATH%\HCGTN\J95928.CAJ
  • %HOMEPATH%\HCGTN\Z58044.LUU
  • %HOMEPATH%\HCGTN\2690.QAZ
  • %HOMEPATH%\HCGTN\R39603.EQN
  • %HOMEPATH%\HCGTN\67659.OCE
  • %HOMEPATH%\HCGTN\13178.VFI
  • %HOMEPATH%\HCGTN\F70108.KRN
  • %HOMEPATH%\HCGTN\8834.TCI
  • %HOMEPATH%\HCGTN\80975.XMD
  • %HOMEPATH%\HCGTN\32472.FMX
  • %HOMEPATH%\HCGTN\T67123.QFO
  • %HOMEPATH%\HCGTN\95570.ESI
  • %HOMEPATH%\HCGTN\K8723.QXL
  • %HOMEPATH%\HCGTN\J68205.SVX
  • %HOMEPATH%\HCGTN\20281.YXV
  • %HOMEPATH%\HCGTN\61358.WLD
  • %HOMEPATH%\HCGTN\Y74144.IVA
  • %HOMEPATH%\HCGTN\W94443.XVJ
  • %HOMEPATH%\HCGTN\L60619.COF
  • %HOMEPATH%\HCGTN\Q26241.WGA
  • %HOMEPATH%\HCGTN\B62949.WRR
  • %HOMEPATH%\HCGTN\P28859.SWD
  • %HOMEPATH%\HCGTN\X61514.KRR
  • %HOMEPATH%\HCGTN\1700.HCS
  • %HOMEPATH%\HCGTN\P74343.ZTN
  • %HOMEPATH%\HCGTN\94148.SQX
  • %HOMEPATH%\HCGTN\46122.QYM
  • %HOMEPATH%\HCGTN\H22178.NFU
  • %HOMEPATH%\HCGTN\78443.CSM
  • %HOMEPATH%\HCGTN\49149.FCC
  • %HOMEPATH%\HCGTN\E39051.RVJ
  • %HOMEPATH%\HCGTN\74207.PVY
  • %HOMEPATH%\HCGTN\Y91363.TVK
  • %HOMEPATH%\HCGTN\V91089.GAF
  • %HOMEPATH%\HCGTN\6771.DGO
  • %HOMEPATH%\HCGTN\36241.GSD
  • %HOMEPATH%\HCGTN\P73348.DFH
  • %HOMEPATH%\HCGTN\B75541.PSD
  • %HOMEPATH%\HCGTN\53690.POC
  • %HOMEPATH%\HCGTN\38237.IIV
  • %HOMEPATH%\HCGTN\S78262.QYV
  • %HOMEPATH%\HCGTN\H90198.HRO
  • %HOMEPATH%\HCGTN\V48328.RIX
  • %HOMEPATH%\HCGTN\51091.MZG
  • %HOMEPATH%\HCGTN\Y38610.UKC
  • %HOMEPATH%\HCGTN\M68588.DMD
  • %HOMEPATH%\HCGTN\46986.TCZ
  • %HOMEPATH%\HCGTN\U99743.IAG
  • %HOMEPATH%\HCGTN\1755.OMC
  • %HOMEPATH%\HCGTN\12351.HDT
  • %HOMEPATH%\HCGTN\79952.COW
  • %HOMEPATH%\HCGTN\90488.XQU
  • %HOMEPATH%\HCGTN\F97645.JLG
  • %HOMEPATH%\HCGTN\Q98830.AJR
  • %HOMEPATH%\HCGTN\85559.KXX
  • %HOMEPATH%\HCGTN\T56871.CSR
  • %HOMEPATH%\HCGTN\T66558.BLT
  • %HOMEPATH%\HCGTN\H31507.GLD
  • %HOMEPATH%\HCGTN\V22599.YQY
  • %HOMEPATH%\HCGTN\O2416.BES
  • %HOMEPATH%\HCGTN\55264.LNJ
  • %HOMEPATH%\HCGTN\94535.NZN
  • %HOMEPATH%\HCGTN\29934.PVL
  • %HOMEPATH%\HCGTN\2879.CYM
  • %HOMEPATH%\HCGTN\R43492.LHI
  • %HOMEPATH%\HCGTN\X33007.BIR
  • %HOMEPATH%\HCGTN\8255.PNE
  • %HOMEPATH%\HCGTN\54527.WFG
  • %HOMEPATH%\HCGTN\90151.FWM
  • %HOMEPATH%\HCGTN\Z91035.KOA
  • %HOMEPATH%\HCGTN\S10864.YLC
  • %HOMEPATH%\HCGTN\W39666.BPG
  • %HOMEPATH%\HCGTN\76914.MUI
  • %HOMEPATH%\HCGTN\33771.JJA
  • %HOMEPATH%\HCGTN\M45275.IPA
Удаляет следующие файлы:
  • %HOMEPATH%\HCGTN\CXGLTTLM.dat
Перемещает следующие системные файлы:
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe в %CommonProgramFiles%\ODBC640\lqcnmzosz.exe
Другое:
Ищет следующие окна:
  • ClassName: '' WindowName: ''
  • ClassName: 'Indicator' WindowName: '(null)'
  • ClassName: 'qqqqqqqqqqqqqqqq' WindowName: 'kkkkkkkkkkkkkkkk'
  • ClassName: 'EDIT' WindowName: '(null)'
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке