Техническая информация
Для обеспечения автозапуска и распространения:
Модифицирует следующие ключи реестра:
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Adobe Flashplayer Final' = '%TEMP%\adobeflashplayerguncel.exe'
Вредоносные функции:
Создает и запускает на исполнение:
- '%TEMP%\adobeguncel.exe'
- '%HOMEPATH%\GSEUG\YZHXN.exe' PFMSEYMY.dat
- '%HOMEPATH%\GSEUG\YZHXN.exe' 550863.JOG
- '%TEMP%\adobeguncel.exe' (загружен из сети Интернет)
Запускает на исполнение:
- '%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
- '<SYSTEM32>\wscript.exe' "%HOMEPATH%\GSEUG\3562.vbs" 7914
Внедряет код в
следующие системные процессы:
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
Завершает или пытается завершить
следующие пользовательские процессы:
- chrome.exe
Изменения в файловой системе:
Создает следующие файлы:
- %HOMEPATH%\GSEUG\14777.NKL
- %HOMEPATH%\GSEUG\58103.AEU
- %HOMEPATH%\GSEUG\86125.ZVM
- %HOMEPATH%\GSEUG\B82097.XBO
- %HOMEPATH%\GSEUG\K14924.IQW
- %HOMEPATH%\GSEUG\M89583.SXD
- %HOMEPATH%\GSEUG\76814.TND
- %HOMEPATH%\GSEUG\H64573.PIJ
- %HOMEPATH%\GSEUG\25608.XXU
- %HOMEPATH%\GSEUG\R78159.NJN
- %HOMEPATH%\GSEUG\92458.MSF
- %HOMEPATH%\GSEUG\90949.VKX
- %HOMEPATH%\GSEUG\41991.ZEI
- %HOMEPATH%\GSEUG\P18634.AWR
- %HOMEPATH%\GSEUG\N58500.JQQ
- %HOMEPATH%\GSEUG\P25578.DID
- %HOMEPATH%\GSEUG\C92759.WWD
- %HOMEPATH%\GSEUG\B82442.HMV
- %HOMEPATH%\GSEUG\R81018.NQY
- %HOMEPATH%\GSEUG\69144.UUX
- %HOMEPATH%\GSEUG\57877.VMJ
- %HOMEPATH%\GSEUG\26299.ZZR
- %HOMEPATH%\GSEUG\R86458.BYP
- %HOMEPATH%\GSEUG\I8744.OEL
- %HOMEPATH%\GSEUG\Y88430.TSB
- %HOMEPATH%\GSEUG\J41168.INE
- %HOMEPATH%\GSEUG\62031.AUH
- %HOMEPATH%\GSEUG\43425.BVO
- %HOMEPATH%\GSEUG\Y17419.DLX
- %HOMEPATH%\GSEUG\81059.WIK
- %HOMEPATH%\GSEUG\17417.YCB
- %HOMEPATH%\GSEUG\90991.YKR
- %HOMEPATH%\GSEUG\2978.UXI
- %HOMEPATH%\GSEUG\52059.BCT
- %HOMEPATH%\GSEUG\Z3359.XOA
- %HOMEPATH%\GSEUG\Y22748.HNA
- %HOMEPATH%\GSEUG\6559.BBX
- %HOMEPATH%\GSEUG\43845.XPZ
- %HOMEPATH%\GSEUG\G63409.IQS
- %HOMEPATH%\GSEUG\12775.VZN
- %HOMEPATH%\GSEUG\F22889.FGK
- %HOMEPATH%\GSEUG\K6346.CHL
- %HOMEPATH%\GSEUG\W48079.HZB
- %HOMEPATH%\GSEUG\4157.YXC
- %HOMEPATH%\GSEUG\92684.PNK
- %HOMEPATH%\GSEUG\Y44077.AKU
- %HOMEPATH%\GSEUG\82097.DSJ
- %HOMEPATH%\GSEUG\46247.LYQ
- %HOMEPATH%\GSEUG\77268.JRG
- %HOMEPATH%\GSEUG\44953.YLS
- %HOMEPATH%\GSEUG\3744.ZAT
- %HOMEPATH%\GSEUG\Y76472.HNK
- %HOMEPATH%\GSEUG\J18566.TDR
- %HOMEPATH%\GSEUG\92299.UAE
- %HOMEPATH%\GSEUG\29608.BVY
- %HOMEPATH%\GSEUG\R90274.OUM
- %HOMEPATH%\GSEUG\M61456.ETF
- %HOMEPATH%\GSEUG\A54437.UQX
- %HOMEPATH%\GSEUG\T33729.ELR
- %HOMEPATH%\GSEUG\75663.TLB
- %HOMEPATH%\GSEUG\K22527.OLN
- %HOMEPATH%\GSEUG\O10280.EJL
- %HOMEPATH%\GSEUG\G30540.SZB
- %HOMEPATH%\GSEUG\M78418.OWG
- %HOMEPATH%\GSEUG\L27997.MPU
- %HOMEPATH%\GSEUG\I51191.JTB
- %HOMEPATH%\GSEUG\49508.QDS
- %HOMEPATH%\GSEUG\P33089.JEM
- %HOMEPATH%\GSEUG\H81863.NLC
- %HOMEPATH%\GSEUG\35901.TQL
- %HOMEPATH%\GSEUG\70660.LEM
- %HOMEPATH%\GSEUG\25607.GCE
- %HOMEPATH%\GSEUG\V85624.BQV
- %HOMEPATH%\GSEUG\N10371.XPY
- %HOMEPATH%\GSEUG\X92223.APX
- %HOMEPATH%\GSEUG\W4113.AAC
- %HOMEPATH%\GSEUG\C60958.ESM
- %HOMEPATH%\GSEUG\E54066.AFP
- %HOMEPATH%\GSEUG\H16222.NQI
- %HOMEPATH%\GSEUG\3363.NAP
- %HOMEPATH%\GSEUG\M97513.JLH
- %HOMEPATH%\GSEUG\Y13513.WTC
- %HOMEPATH%\GSEUG\J2397.QNW
- %HOMEPATH%\GSEUG\49567.WMF
- %HOMEPATH%\GSEUG\9754.EPB
- %HOMEPATH%\GSEUG\75250.VPX
- %HOMEPATH%\GSEUG\Z43983.CXX
- %HOMEPATH%\GSEUG\67587.NCQ
- %HOMEPATH%\GSEUG\O67622.HRX
- %HOMEPATH%\GSEUG\K80297.ZJU
- %HOMEPATH%\GSEUG\D95579.NZZ
- %HOMEPATH%\GSEUG\Q74464.RPW
- %HOMEPATH%\GSEUG\19426.YLC
- %HOMEPATH%\GSEUG\U60994.NKP
- %HOMEPATH%\GSEUG\1689.DWG
- %HOMEPATH%\GSEUG\S37323.TTW
- %HOMEPATH%\GSEUG\R44059.ULZ
- %HOMEPATH%\GSEUG\D36858.JVJ
- %HOMEPATH%\GSEUG\Q92316.LYT
- %HOMEPATH%\GSEUG\54617.CLQ
- %HOMEPATH%\GSEUG\29800.LPF
- %HOMEPATH%\GSEUG\70133.VJR
- %HOMEPATH%\GSEUG\33991.JTE
- %HOMEPATH%\GSEUG\22791.JHJ
- %HOMEPATH%\GSEUG\47268.IEM
- %HOMEPATH%\GSEUG\Y54305.REG
- %HOMEPATH%\GSEUG\67075.ZAB
- %HOMEPATH%\GSEUG\96486.TKD
- %HOMEPATH%\GSEUG\47612.OLS
- %HOMEPATH%\GSEUG\I86836.FQL
- %HOMEPATH%\GSEUG\93872.TAH
- %HOMEPATH%\GSEUG\G38001.MGN
- %HOMEPATH%\GSEUG\I63605.UXA
- %HOMEPATH%\GSEUG\K22365.LTX
- %HOMEPATH%\GSEUG\1057.SEF
- %HOMEPATH%\GSEUG\27601.QBW
- %HOMEPATH%\GSEUG\8016.JAY
- %HOMEPATH%\GSEUG\29119.BTX
- %HOMEPATH%\GSEUG\18192.PPG
- %HOMEPATH%\GSEUG\Q47094.LGI
- %HOMEPATH%\GSEUG\V50930.VUC
- %HOMEPATH%\GSEUG\S78013.HQS
- %HOMEPATH%\GSEUG\W59446.MKF
- %HOMEPATH%\GSEUG\C90732.FOA
- %HOMEPATH%\GSEUG\U68922.IUJ
- %HOMEPATH%\GSEUG\M40265.JFW
- %HOMEPATH%\GSEUG\Y85631.YTW
- %HOMEPATH%\GSEUG\23052.EXC
- %HOMEPATH%\GSEUG\44537.CUK
- %HOMEPATH%\GSEUG\62850.PYY
- %HOMEPATH%\GSEUG\79056.FYL
- %HOMEPATH%\GSEUG\Q26058.ILG
- %HOMEPATH%\GSEUG\63796.DCC
- %HOMEPATH%\GSEUG\48382.RKV
- %HOMEPATH%\GSEUG\M22575.EXV
- %HOMEPATH%\GSEUG\W89466.BQU
- %HOMEPATH%\GSEUG\S87543.YAT
- %HOMEPATH%\GSEUG\32949.IWS
- %HOMEPATH%\GSEUG\47168.JWM
- %HOMEPATH%\GSEUG\43660.PEG
- %HOMEPATH%\GSEUG\J99263.RNS
- %HOMEPATH%\GSEUG\97982.NUI
- %HOMEPATH%\GSEUG\2095.YRP
- %HOMEPATH%\GSEUG\B37427.BWP
- %HOMEPATH%\GSEUG\I76625.NHJ
- %HOMEPATH%\GSEUG\H38339.RDC
- %HOMEPATH%\GSEUG\88032.ADL
- %HOMEPATH%\GSEUG\C97094.EBP
- %HOMEPATH%\GSEUG\41299.FEH
- %HOMEPATH%\GSEUG\75598.ADB
- %HOMEPATH%\GSEUG\C15167.LPK
- %HOMEPATH%\GSEUG\W29294.UZD
- %HOMEPATH%\GSEUG\75516.ZOZ
- %HOMEPATH%\GSEUG\16367.CBD
- %HOMEPATH%\GSEUG\E58129.OHZ
- %HOMEPATH%\GSEUG\97957.NRF
- %HOMEPATH%\GSEUG\T37532.DWG
- %HOMEPATH%\GSEUG\M23770.CKS
- %HOMEPATH%\GSEUG\43601.HFL
- %HOMEPATH%\GSEUG\G62533.XHE
- %HOMEPATH%\GSEUG\F58015.GHI
- %HOMEPATH%\GSEUG\S2259.LYK
- %HOMEPATH%\GSEUG\A3830.DLN
- %HOMEPATH%\GSEUG\34292.BKE
- %HOMEPATH%\GSEUG\60896.SAR
- %HOMEPATH%\GSEUG\70945.UUG
- %HOMEPATH%\GSEUG\B73235.SVR
- %HOMEPATH%\GSEUG\PFMSEYMY.dat
- %HOMEPATH%\GSEUG\34716.JOX
- %HOMEPATH%\GSEUG\6247.OSG
- %HOMEPATH%\GSEUG\77679.JTS
- %HOMEPATH%\GSEUG\Q89791.UQN
- %HOMEPATH%\GSEUG\15701.OMC
- %TEMP%\Extensions\Preferences
- %TEMP%\Extensions\manifest.json
- %TEMP%\adobeguncel.exe
- %TEMP%\adobeflashplayerguncel.exe
- %TEMP%\Extensions\icon.png
- %TEMP%\Extensions\background.js
- %TEMP%\Extensions\script.js
- %TEMP%\Extensions\jquery-1.9.1.min.js
- %HOMEPATH%\GSEUG\F16883.UVV
- %HOMEPATH%\GSEUG\D7040.LYC
- %HOMEPATH%\GSEUG\76451.DMR
- %HOMEPATH%\GSEUG\I29771.QDZ
- %HOMEPATH%\GSEUG\I62634.GUF
- %HOMEPATH%\GSEUG\J13892.GAW
- %HOMEPATH%\GSEUG\N21585.NGJ
- %HOMEPATH%\GSEUG\X2453.MDO
- %HOMEPATH%\GSEUG\31734.LVM
- %HOMEPATH%\GSEUG\E84604.FIJ
- %HOMEPATH%\GSEUG\69635.QZL
- %HOMEPATH%\GSEUG\R60921.CZA
- %HOMEPATH%\GSEUG\I1441.FYV
- %HOMEPATH%\GSEUG\V45031.CWP
- %HOMEPATH%\GSEUG\57249.STH
- %HOMEPATH%\GSEUG\28688.WPH
- %HOMEPATH%\GSEUG\95822.WKC
- %HOMEPATH%\GSEUG\81116.HVT
- %HOMEPATH%\GSEUG\E36582.XNG
- %HOMEPATH%\GSEUG\T79505.CXU
- %HOMEPATH%\GSEUG\B37981.ONJ
- %HOMEPATH%\GSEUG\I75262.TYJ
- %HOMEPATH%\GSEUG\16836.GWR
- %HOMEPATH%\GSEUG\20882.TMH
- %HOMEPATH%\GSEUG\D79808.STN
- %HOMEPATH%\GSEUG\23729.KQY
- %HOMEPATH%\GSEUG\40889.RZP
- %HOMEPATH%\GSEUG\66565.JHI
- %HOMEPATH%\GSEUG\84796.AFZ
- %HOMEPATH%\GSEUG\33481.IFQ
- %HOMEPATH%\GSEUG\76858.TYP
- %HOMEPATH%\GSEUG\56321.VWJ
- %HOMEPATH%\GSEUG\G5066.NXS
- %HOMEPATH%\GSEUG\62893.NZR
- %HOMEPATH%\GSEUG\4465.CAS
- %HOMEPATH%\GSEUG\K5027.QGV
- %HOMEPATH%\GSEUG\19580.JQC
- %HOMEPATH%\GSEUG\72938.RVA
- %HOMEPATH%\GSEUG\48442.SII
- %HOMEPATH%\GSEUG\G90679.JAP
- %HOMEPATH%\GSEUG\25031.UCR
- %HOMEPATH%\GSEUG\8124.TNC
- %HOMEPATH%\GSEUG\88903.DXW
- %HOMEPATH%\GSEUG\63117.VVH
- %HOMEPATH%\GSEUG\O29445.VOV
- %HOMEPATH%\GSEUG\10430.DLJ
- %HOMEPATH%\GSEUG\G98693.XOF
- %HOMEPATH%\GSEUG\C1299.GGF
- %HOMEPATH%\GSEUG\93281.LTK
- %HOMEPATH%\GSEUG\32803.TKC
- %HOMEPATH%\GSEUG\N74598.VGG
- %HOMEPATH%\GSEUG\T55296.OWG
- %HOMEPATH%\GSEUG\88970.OPK
- %HOMEPATH%\GSEUG\S70983.RPO
- %HOMEPATH%\GSEUG\I54867.VVK
- %HOMEPATH%\GSEUG\78429.PZL
- %HOMEPATH%\GSEUG\54866.OCU
- %HOMEPATH%\GSEUG\78095.JOQ
- %HOMEPATH%\GSEUG\T66454.YWJ
- %HOMEPATH%\GSEUG\8115.WDO
- %HOMEPATH%\GSEUG\49838.YPK
- %HOMEPATH%\GSEUG\I68402.GZR
- %HOMEPATH%\GSEUG\8575.FYO
- %HOMEPATH%\GSEUG\M56239.SSW
- %HOMEPATH%\GSEUG\S84033.KJR
- %HOMEPATH%\GSEUG\H60702.MUB
- %HOMEPATH%\GSEUG\Y33073.TTO
- %HOMEPATH%\GSEUG\64616.LTU
- %HOMEPATH%\GSEUG\57576.MBZ
- %HOMEPATH%\GSEUG\H88172.EVU
- %HOMEPATH%\GSEUG\V31093.UYI
- %HOMEPATH%\GSEUG\J38773.UQC
- %HOMEPATH%\GSEUG\27097.GKV
- %HOMEPATH%\GSEUG\J63033.EZP
- %HOMEPATH%\GSEUG\84675.QST
- %HOMEPATH%\GSEUG\47694.ROW
- %HOMEPATH%\GSEUG\7468.YEH
- %HOMEPATH%\GSEUG\Q59380.BMY
- %HOMEPATH%\GSEUG\47176.UMW
- %HOMEPATH%\GSEUG\13972.KAA
- %HOMEPATH%\GSEUG\Q43068.QWM
- %HOMEPATH%\GSEUG\60830.KQZ
- %HOMEPATH%\GSEUG\S14073.IBK
- %HOMEPATH%\GSEUG\M92086.NVE
- %HOMEPATH%\GSEUG\34200.AVM
- %HOMEPATH%\GSEUG\78761.JKB
- %HOMEPATH%\GSEUG\1440.KAP
- %HOMEPATH%\GSEUG\33071.JLM
- %HOMEPATH%\GSEUG\N78943.LEO
- %HOMEPATH%\GSEUG\27547.XBH
- %HOMEPATH%\GSEUG\69454.GNH
- %HOMEPATH%\GSEUG\Y22215.GXT
- %HOMEPATH%\GSEUG\S42902.XVV
- %HOMEPATH%\GSEUG\X86619.IXL
- %HOMEPATH%\GSEUG\I8823.CWZ
- %HOMEPATH%\GSEUG\73834.RSN
- %HOMEPATH%\GSEUG\M4193.MRV
- %HOMEPATH%\GSEUG\84231.HXK
- %HOMEPATH%\GSEUG\L84674.LLA
- %HOMEPATH%\GSEUG\M52107.VYG
- %HOMEPATH%\GSEUG\23188.NGZ
- %HOMEPATH%\GSEUG\86889.AKC
- %HOMEPATH%\GSEUG\78124.KHJ
- %HOMEPATH%\GSEUG\F29890.IRJ
- %HOMEPATH%\GSEUG\2329.EYV
- %HOMEPATH%\GSEUG\M72765.CKW
- %HOMEPATH%\GSEUG\T1083.YCS
- %HOMEPATH%\GSEUG\52561.ZIN
- %HOMEPATH%\GSEUG\2072.ZFX
- %HOMEPATH%\GSEUG\Q12147.ROS
- %HOMEPATH%\GSEUG\89983.JGP
- %HOMEPATH%\GSEUG\M98234.VER
- %HOMEPATH%\GSEUG\38196.WLW
- %HOMEPATH%\GSEUG\A37580.CIG
- %HOMEPATH%\GSEUG\D55812.ZGV
- %HOMEPATH%\GSEUG\76479.JAZ
- %HOMEPATH%\GSEUG\45999.TWJ
- %HOMEPATH%\GSEUG\16442.MCO
- %HOMEPATH%\GSEUG\D89026.BVA
- %HOMEPATH%\GSEUG\12938.NXT
- %HOMEPATH%\GSEUG\J2123.DCH
- %HOMEPATH%\GSEUG\T35512.UBO
- %HOMEPATH%\GSEUG\85507.LVR
- %HOMEPATH%\GSEUG\17981.DDV
- %HOMEPATH%\GSEUG\51067.BDC
- %HOMEPATH%\GSEUG\Y46168.AXQ
- %HOMEPATH%\GSEUG\G64787.PTE
- %HOMEPATH%\GSEUG\V35016.VIM
- %HOMEPATH%\GSEUG\50044.TUX
- %HOMEPATH%\GSEUG\56486.CVW
- %HOMEPATH%\GSEUG\60413.JCC
- %HOMEPATH%\GSEUG\31873.KTM
- %HOMEPATH%\GSEUG\69206.CYZ
- %HOMEPATH%\GSEUG\V30875.XJJ
- %HOMEPATH%\GSEUG\W82716.TRI
- %HOMEPATH%\GSEUG\C56147.QDS
- %HOMEPATH%\GSEUG\M95343.GHR
- %HOMEPATH%\GSEUG\H76449.XZG
- %HOMEPATH%\GSEUG\N15454.ITH
- %HOMEPATH%\GSEUG\D99480.DIF
- %HOMEPATH%\GSEUG\Q8369.WVY
- %HOMEPATH%\GSEUG\Z26632.VJD
- %HOMEPATH%\GSEUG\D29692.CZX
- %HOMEPATH%\GSEUG\71068.GYK
- %HOMEPATH%\GSEUG\S98252.WMV
- %HOMEPATH%\GSEUG\X51629.REL
- %HOMEPATH%\GSEUG\R19596.RES
- %HOMEPATH%\GSEUG\36560.IIL
- %HOMEPATH%\GSEUG\W94291.NWY
- %HOMEPATH%\GSEUG\U65302.JDZ
- %HOMEPATH%\GSEUG\1221.CLL
- %HOMEPATH%\GSEUG\T43712.HNQ
- %HOMEPATH%\GSEUG\T45803.TOU
- %HOMEPATH%\GSEUG\T22456.UMQ
- %HOMEPATH%\GSEUG\B18964.VIX
- %HOMEPATH%\GSEUG\J69075.OSA
- %HOMEPATH%\GSEUG\E33150.HTY
- %HOMEPATH%\GSEUG\85947.GKZ
- %HOMEPATH%\GSEUG\83078.WCV
- %HOMEPATH%\GSEUG\E53293.EFS
- %HOMEPATH%\GSEUG\78405.IQG
- %HOMEPATH%\GSEUG\K97686.TRY
- %HOMEPATH%\GSEUG\18587.PEU
- %HOMEPATH%\GSEUG\51348.CIG
- %HOMEPATH%\GSEUG\3562.vbs
- %HOMEPATH%\GSEUG\settings.ini
- %HOMEPATH%\GSEUG\68525.NON
- %HOMEPATH%\GSEUG\89114.WFH
- %HOMEPATH%\GSEUG\292715.dat
- %HOMEPATH%\GSEUG\550863.JOG
- %HOMEPATH%\GSEUG\YZHXN.exe
- %HOMEPATH%\GSEUG\257415.dat
- %HOMEPATH%\GSEUG\B89440.JJM
- %HOMEPATH%\GSEUG\1354.OCM
- %HOMEPATH%\GSEUG\74954.UJY
- %HOMEPATH%\GSEUG\23754.FKI
- %HOMEPATH%\GSEUG\97112.DAY
- %HOMEPATH%\GSEUG\62747.ZXH
- %HOMEPATH%\GSEUG\F77029.FHZ
- %HOMEPATH%\GSEUG\13273.JAV
- %HOMEPATH%\GSEUG\J61696.CDW
- %HOMEPATH%\GSEUG\49847.AKO
- %HOMEPATH%\GSEUG\J77932.WHR
- %HOMEPATH%\GSEUG\I85073.JDO
- %HOMEPATH%\GSEUG\91390.QFD
- %HOMEPATH%\GSEUG\K12406.QPC
- %HOMEPATH%\GSEUG\52584.CUI
- %HOMEPATH%\GSEUG\V37037.JWQ
- %HOMEPATH%\GSEUG\13428.BBF
- %HOMEPATH%\GSEUG\37827.FCG
- %HOMEPATH%\GSEUG\58619.TIE
- %HOMEPATH%\GSEUG\28088.YIP
- %HOMEPATH%\GSEUG\N56969.JFK
- %HOMEPATH%\GSEUG\46389.BGU
- %HOMEPATH%\GSEUG\R44506.HDI
- %HOMEPATH%\GSEUG\D49139.CCT
- %HOMEPATH%\GSEUG\59589.BTM
- %HOMEPATH%\GSEUG\V49093.QOM
- %HOMEPATH%\GSEUG\J50280.WWN
- %HOMEPATH%\GSEUG\36083.GRL
- %HOMEPATH%\GSEUG\A85871.VHJ
- %HOMEPATH%\GSEUG\X18653.AKV
- %HOMEPATH%\GSEUG\U98374.QJE
- %HOMEPATH%\GSEUG\85109.ASX
- %HOMEPATH%\GSEUG\H24839.RFL
- %HOMEPATH%\GSEUG\K56522.VVH
- %HOMEPATH%\GSEUG\A2511.GFF
- %HOMEPATH%\GSEUG\76005.EKC
- %HOMEPATH%\GSEUG\I66835.RXY
- %HOMEPATH%\GSEUG\87966.TDF
- %HOMEPATH%\GSEUG\95317.JIP
- %HOMEPATH%\GSEUG\59457.OII
- %HOMEPATH%\GSEUG\72254.EHU
- %HOMEPATH%\GSEUG\42729.IFU
- %HOMEPATH%\GSEUG\37818.XYX
- %HOMEPATH%\GSEUG\S48504.RFF
- %HOMEPATH%\GSEUG\40276.KOO
- %HOMEPATH%\GSEUG\5021.FKW
- %HOMEPATH%\GSEUG\O3075.ORK
- %HOMEPATH%\GSEUG\65277.CAD
- %HOMEPATH%\GSEUG\12193.NQJ
- %HOMEPATH%\GSEUG\83721.MMV
- %HOMEPATH%\GSEUG\40328.OTE
- %HOMEPATH%\GSEUG\97200.GOB
- %HOMEPATH%\GSEUG\65812.UOR
- %HOMEPATH%\GSEUG\P5200.SMV
- %HOMEPATH%\GSEUG\47710.KUQ
- %HOMEPATH%\GSEUG\G77483.TMY
- %HOMEPATH%\GSEUG\G24487.PEE
- %HOMEPATH%\GSEUG\O83353.FYF
- %HOMEPATH%\GSEUG\44474.AHS
- %HOMEPATH%\GSEUG\37036.DFY
- %HOMEPATH%\GSEUG\X73224.OXA
- %HOMEPATH%\GSEUG\J33725.UIG
- %HOMEPATH%\GSEUG\83171.XLY
- %HOMEPATH%\GSEUG\61088.UHV
- %HOMEPATH%\GSEUG\L92751.TQY
- %HOMEPATH%\GSEUG\H87282.LHR
- %HOMEPATH%\GSEUG\H18813.XCE
- %HOMEPATH%\GSEUG\68641.JWC
- %HOMEPATH%\GSEUG\S27167.FHW
- %HOMEPATH%\GSEUG\D73276.QWG
- %HOMEPATH%\GSEUG\L47128.FVZ
- %HOMEPATH%\GSEUG\K79692.EYL
- %HOMEPATH%\GSEUG\Y6884.RNI
- %HOMEPATH%\GSEUG\41916.TQI
- %HOMEPATH%\GSEUG\30817.UGH
- %HOMEPATH%\GSEUG\32121.RSH
- %HOMEPATH%\GSEUG\26914.CJW
- %HOMEPATH%\GSEUG\32584.JIH
- %HOMEPATH%\GSEUG\G17291.VAO
- %HOMEPATH%\GSEUG\E64522.EXZ
- %HOMEPATH%\GSEUG\P31573.EBG
- %HOMEPATH%\GSEUG\J37508.YYJ
- %HOMEPATH%\GSEUG\G29084.LRA
- %HOMEPATH%\GSEUG\K18173.JLL
- %HOMEPATH%\GSEUG\B13933.AEA
- %HOMEPATH%\GSEUG\40456.GBX
- %HOMEPATH%\GSEUG\L10743.PXT
- %HOMEPATH%\GSEUG\L52049.LII
- %HOMEPATH%\GSEUG\J5274.HDH
- %HOMEPATH%\GSEUG\Q76390.LEY
- %HOMEPATH%\GSEUG\85608.AZS
- %HOMEPATH%\GSEUG\L40057.LQF
- %HOMEPATH%\GSEUG\51173.FBU
- %HOMEPATH%\GSEUG\53749.WYM
- %HOMEPATH%\GSEUG\K95697.BPX
- %HOMEPATH%\GSEUG\O5532.UWX
- %HOMEPATH%\GSEUG\R63750.BHE
- %HOMEPATH%\GSEUG\43254.PGZ
- %HOMEPATH%\GSEUG\41416.MCS
- %HOMEPATH%\GSEUG\O40889.AWL
- %HOMEPATH%\GSEUG\W25133.TLM
- %HOMEPATH%\GSEUG\63952.PFQ
- %HOMEPATH%\GSEUG\24047.OCQ
- %HOMEPATH%\GSEUG\U45015.MBW
- %HOMEPATH%\GSEUG\U11766.XSG
- %HOMEPATH%\GSEUG\67315.YUL
- %HOMEPATH%\GSEUG\23738.DAC
- %HOMEPATH%\GSEUG\Z87055.DGM
- %HOMEPATH%\GSEUG\N26166.BJW
- %HOMEPATH%\GSEUG\25212.QFP
- %HOMEPATH%\GSEUG\T65781.SLO
- %HOMEPATH%\GSEUG\W73137.CPX
- %HOMEPATH%\GSEUG\12714.FFE
- %HOMEPATH%\GSEUG\O81560.ZCH
- %HOMEPATH%\GSEUG\71666.SVO
- %HOMEPATH%\GSEUG\T84423.TZQ
- %HOMEPATH%\GSEUG\50212.FNL
- %HOMEPATH%\GSEUG\36715.YCS
- %HOMEPATH%\GSEUG\94250.TID
- %HOMEPATH%\GSEUG\25761.ZNF
- %HOMEPATH%\GSEUG\34309.USI
- %HOMEPATH%\GSEUG\36083.UCF
- %HOMEPATH%\GSEUG\Y61562.EJS
- %HOMEPATH%\GSEUG\D85565.FWH
- %HOMEPATH%\GSEUG\V92847.WUO
- %HOMEPATH%\GSEUG\M10385.GBN
- %HOMEPATH%\GSEUG\H68466.ONQ
- %HOMEPATH%\GSEUG\E45873.IZP
- %HOMEPATH%\GSEUG\P69937.SKM
- %HOMEPATH%\GSEUG\J42494.JMH
- %HOMEPATH%\GSEUG\D68841.SNQ
- %HOMEPATH%\GSEUG\99850.FBX
- %HOMEPATH%\GSEUG\R92401.HXF
- %HOMEPATH%\GSEUG\70369.WRL
- %HOMEPATH%\GSEUG\D82608.HHL
- %HOMEPATH%\GSEUG\P52958.LVQ
- %HOMEPATH%\GSEUG\N77894.RYD
- %HOMEPATH%\GSEUG\A44280.YLR
- %HOMEPATH%\GSEUG\69045.QRM
- %HOMEPATH%\GSEUG\11580.IQB
- %HOMEPATH%\GSEUG\78477.AMY
- %HOMEPATH%\GSEUG\B93617.VEO
- %HOMEPATH%\GSEUG\K57835.JYC
- %HOMEPATH%\GSEUG\G1092.ENT
- %HOMEPATH%\GSEUG\C49610.KTR
- %HOMEPATH%\GSEUG\W44068.JVI
- %HOMEPATH%\GSEUG\9696.NSN
- %HOMEPATH%\GSEUG\R96699.QCO
- %HOMEPATH%\GSEUG\A80080.BXE
- %HOMEPATH%\GSEUG\67249.HXU
- %HOMEPATH%\GSEUG\N33723.OIS
- %HOMEPATH%\GSEUG\47450.MAJ
- %HOMEPATH%\GSEUG\89254.YBB
- %HOMEPATH%\GSEUG\66594.TQG
- %HOMEPATH%\GSEUG\53699.CAH
- %HOMEPATH%\GSEUG\Y15275.LUD
- %HOMEPATH%\GSEUG\48926.TVC
- %HOMEPATH%\GSEUG\63779.KDA
- %HOMEPATH%\GSEUG\35166.OHX
- %HOMEPATH%\GSEUG\80710.JEM
- %HOMEPATH%\GSEUG\K36643.RUU
- %HOMEPATH%\GSEUG\G70398.KEK
- %HOMEPATH%\GSEUG\S99541.UPX
- %HOMEPATH%\GSEUG\L62801.YQH
- %HOMEPATH%\GSEUG\O15364.UFF
- %HOMEPATH%\GSEUG\E33019.IVH
- %HOMEPATH%\GSEUG\H60701.WUV
- %HOMEPATH%\GSEUG\89624.TYP
- %HOMEPATH%\GSEUG\49952.DBI
- %HOMEPATH%\GSEUG\B32928.EIP
- %HOMEPATH%\GSEUG\Z24464.NHX
- %HOMEPATH%\GSEUG\E71235.ZCR
- %HOMEPATH%\GSEUG\62136.QEL
Присваивает атрибут 'скрытый' для следующих файлов:
- %HOMEPATH%\GSEUG\M89583.SXD
- %HOMEPATH%\GSEUG\62031.AUH
- %HOMEPATH%\GSEUG\H64573.PIJ
- %HOMEPATH%\GSEUG\K14924.IQW
- %HOMEPATH%\GSEUG\J41168.INE
- %HOMEPATH%\GSEUG\17417.YCB
- %HOMEPATH%\GSEUG\43425.BVO
- %HOMEPATH%\GSEUG\Y88430.TSB
- %HOMEPATH%\GSEUG\P18634.AWR
- %HOMEPATH%\GSEUG\86125.ZVM
- %HOMEPATH%\GSEUG\P25578.DID
- %HOMEPATH%\GSEUG\41991.ZEI
- %HOMEPATH%\GSEUG\58103.AEU
- %HOMEPATH%\GSEUG\76814.TND
- %HOMEPATH%\GSEUG\B82097.XBO
- %HOMEPATH%\GSEUG\14777.NKL
- %HOMEPATH%\GSEUG\26299.ZZR
- %HOMEPATH%\GSEUG\I51191.JTB
- %HOMEPATH%\GSEUG\I8744.OEL
- %HOMEPATH%\GSEUG\57877.VMJ
- %HOMEPATH%\GSEUG\96486.TKD
- %HOMEPATH%\GSEUG\47612.OLS
- %HOMEPATH%\GSEUG\I86836.FQL
- %HOMEPATH%\GSEUG\93872.TAH
- %HOMEPATH%\GSEUG\81059.WIK
- %HOMEPATH%\GSEUG\R81018.NQY
- %HOMEPATH%\GSEUG\90991.YKR
- %HOMEPATH%\GSEUG\Y17419.DLX
- %HOMEPATH%\GSEUG\B82442.HMV
- %HOMEPATH%\GSEUG\R86458.BYP
- %HOMEPATH%\GSEUG\69144.UUX
- %HOMEPATH%\GSEUG\C92759.WWD
- %HOMEPATH%\GSEUG\75663.TLB
- %HOMEPATH%\GSEUG\K22527.OLN
- %HOMEPATH%\GSEUG\43845.XPZ
- %HOMEPATH%\GSEUG\G63409.IQS
- %HOMEPATH%\GSEUG\M78418.OWG
- %HOMEPATH%\GSEUG\L27997.MPU
- %HOMEPATH%\GSEUG\A54437.UQX
- %HOMEPATH%\GSEUG\T33729.ELR
- %HOMEPATH%\GSEUG\Y22748.HNA
- %HOMEPATH%\GSEUG\6559.BBX
- %HOMEPATH%\GSEUG\Y44077.AKU
- %HOMEPATH%\GSEUG\82097.DSJ
- %HOMEPATH%\GSEUG\12775.VZN
- %HOMEPATH%\GSEUG\F22889.FGK
- %HOMEPATH%\GSEUG\52059.BCT
- %HOMEPATH%\GSEUG\Z3359.XOA
- %HOMEPATH%\GSEUG\2978.UXI
- %HOMEPATH%\GSEUG\92458.MSF
- %HOMEPATH%\GSEUG\92299.UAE
- %HOMEPATH%\GSEUG\29608.BVY
- %HOMEPATH%\GSEUG\R78159.NJN
- %HOMEPATH%\GSEUG\N58500.JQQ
- %HOMEPATH%\GSEUG\90949.VKX
- %HOMEPATH%\GSEUG\25608.XXU
- %HOMEPATH%\GSEUG\Y76472.HNK
- %HOMEPATH%\GSEUG\J18566.TDR
- %HOMEPATH%\GSEUG\O10280.EJL
- %HOMEPATH%\GSEUG\G30540.SZB
- %HOMEPATH%\GSEUG\R90274.OUM
- %HOMEPATH%\GSEUG\M61456.ETF
- %HOMEPATH%\GSEUG\44953.YLS
- %HOMEPATH%\GSEUG\3744.ZAT
- %HOMEPATH%\GSEUG\K22365.LTX
- %HOMEPATH%\GSEUG\70660.LEM
- %HOMEPATH%\GSEUG\25607.GCE
- %HOMEPATH%\GSEUG\V85624.BQV
- %HOMEPATH%\GSEUG\N10371.XPY
- %HOMEPATH%\GSEUG\D95579.NZZ
- %HOMEPATH%\GSEUG\Q74464.RPW
- %HOMEPATH%\GSEUG\19426.YLC
- %HOMEPATH%\GSEUG\U60994.NKP
- %HOMEPATH%\GSEUG\H16222.NQI
- %HOMEPATH%\GSEUG\3363.NAP
- %HOMEPATH%\GSEUG\M97513.JLH
- %HOMEPATH%\GSEUG\Y13513.WTC
- %HOMEPATH%\GSEUG\49508.QDS
- %HOMEPATH%\GSEUG\P33089.JEM
- %HOMEPATH%\GSEUG\H81863.NLC
- %HOMEPATH%\GSEUG\35901.TQL
- %HOMEPATH%\GSEUG\Z43983.CXX
- %HOMEPATH%\GSEUG\67587.NCQ
- %HOMEPATH%\GSEUG\O67622.HRX
- %HOMEPATH%\GSEUG\K80297.ZJU
- %HOMEPATH%\GSEUG\K18173.JLL
- %HOMEPATH%\GSEUG\B13933.AEA
- %HOMEPATH%\GSEUG\40456.GBX
- %HOMEPATH%\GSEUG\L10743.PXT
- %HOMEPATH%\GSEUG\1689.DWG
- %HOMEPATH%\GSEUG\S37323.TTW
- %HOMEPATH%\GSEUG\R44059.ULZ
- %HOMEPATH%\GSEUG\D36858.JVJ
- %HOMEPATH%\GSEUG\J2397.QNW
- %HOMEPATH%\GSEUG\49567.WMF
- %HOMEPATH%\GSEUG\9754.EPB
- %HOMEPATH%\GSEUG\75250.VPX
- %HOMEPATH%\GSEUG\47268.IEM
- %HOMEPATH%\GSEUG\M40265.JFW
- %HOMEPATH%\GSEUG\67075.ZAB
- %HOMEPATH%\GSEUG\22791.JHJ
- %HOMEPATH%\GSEUG\U68922.IUJ
- %HOMEPATH%\GSEUG\62850.PYY
- %HOMEPATH%\GSEUG\Y85631.YTW
- %HOMEPATH%\GSEUG\C90732.FOA
- %HOMEPATH%\GSEUG\I63605.UXA
- %HOMEPATH%\GSEUG\70133.VJR
- %HOMEPATH%\GSEUG\1057.SEF
- %HOMEPATH%\GSEUG\G38001.MGN
- %HOMEPATH%\GSEUG\29800.LPF
- %HOMEPATH%\GSEUG\Y54305.REG
- %HOMEPATH%\GSEUG\33991.JTE
- %HOMEPATH%\GSEUG\54617.CLQ
- %HOMEPATH%\GSEUG\V50930.VUC
- %HOMEPATH%\GSEUG\Q92316.LYT
- %HOMEPATH%\GSEUG\W59446.MKF
- %HOMEPATH%\GSEUG\Q47094.LGI
- %HOMEPATH%\GSEUG\X92223.APX
- %HOMEPATH%\GSEUG\W4113.AAC
- %HOMEPATH%\GSEUG\C60958.ESM
- %HOMEPATH%\GSEUG\E54066.AFP
- %HOMEPATH%\GSEUG\44537.CUK
- %HOMEPATH%\GSEUG\29119.BTX
- %HOMEPATH%\GSEUG\79056.FYL
- %HOMEPATH%\GSEUG\23052.EXC
- %HOMEPATH%\GSEUG\8016.JAY
- %HOMEPATH%\GSEUG\S78013.HQS
- %HOMEPATH%\GSEUG\18192.PPG
- %HOMEPATH%\GSEUG\27601.QBW
- %HOMEPATH%\GSEUG\T37532.DWG
- %HOMEPATH%\GSEUG\M23770.CKS
- %HOMEPATH%\GSEUG\43601.HFL
- %HOMEPATH%\GSEUG\G62533.XHE
- %HOMEPATH%\GSEUG\F58015.GHI
- %HOMEPATH%\GSEUG\S2259.LYK
- %HOMEPATH%\GSEUG\A3830.DLN
- %HOMEPATH%\GSEUG\34292.BKE
- %HOMEPATH%\GSEUG\63796.DCC
- %HOMEPATH%\GSEUG\48382.RKV
- %HOMEPATH%\GSEUG\M22575.EXV
- %HOMEPATH%\GSEUG\W89466.BQU
- %HOMEPATH%\GSEUG\S87543.YAT
- %HOMEPATH%\GSEUG\32949.IWS
- %HOMEPATH%\GSEUG\47168.JWM
- %HOMEPATH%\GSEUG\43660.PEG
- %HOMEPATH%\GSEUG\I68402.GZR
- %HOMEPATH%\GSEUG\T66454.YWJ
- %HOMEPATH%\GSEUG\95822.WKC
- %HOMEPATH%\GSEUG\49838.YPK
- %HOMEPATH%\GSEUG\H60702.MUB
- %HOMEPATH%\GSEUG\8575.FYO
- %HOMEPATH%\GSEUG\8115.WDO
- %HOMEPATH%\GSEUG\S84033.KJR
- %HOMEPATH%\GSEUG\41299.FEH
- %HOMEPATH%\GSEUG\75598.ADB
- %HOMEPATH%\GSEUG\C15167.LPK
- %HOMEPATH%\GSEUG\W29294.UZD
- %HOMEPATH%\GSEUG\75516.ZOZ
- %HOMEPATH%\GSEUG\16367.CBD
- %HOMEPATH%\GSEUG\E58129.OHZ
- %HOMEPATH%\GSEUG\97957.NRF
- %HOMEPATH%\GSEUG\E84604.FIJ
- %HOMEPATH%\GSEUG\57249.STH
- %HOMEPATH%\GSEUG\R60921.CZA
- %HOMEPATH%\GSEUG\31734.LVM
- %HOMEPATH%\GSEUG\V45031.CWP
- %HOMEPATH%\GSEUG\76451.DMR
- %HOMEPATH%\GSEUG\28688.WPH
- %HOMEPATH%\GSEUG\I1441.FYV
- %HOMEPATH%\GSEUG\B73235.SVR
- %HOMEPATH%\GSEUG\Q89791.UQN
- %HOMEPATH%\GSEUG\34716.JOX
- %HOMEPATH%\GSEUG\70945.UUG
- %HOMEPATH%\GSEUG\77679.JTS
- %HOMEPATH%\GSEUG\69635.QZL
- %HOMEPATH%\GSEUG\15701.OMC
- %HOMEPATH%\GSEUG\6247.OSG
- %HOMEPATH%\GSEUG\J99263.RNS
- %HOMEPATH%\GSEUG\97982.NUI
- %HOMEPATH%\GSEUG\2095.YRP
- %HOMEPATH%\GSEUG\B37427.BWP
- %HOMEPATH%\GSEUG\I76625.NHJ
- %HOMEPATH%\GSEUG\H38339.RDC
- %HOMEPATH%\GSEUG\88032.ADL
- %HOMEPATH%\GSEUG\C97094.EBP
- %HOMEPATH%\GSEUG\D7040.LYC
- %HOMEPATH%\GSEUG\N21585.NGJ
- %HOMEPATH%\GSEUG\I29771.QDZ
- %HOMEPATH%\GSEUG\F16883.UVV
- %HOMEPATH%\GSEUG\J13892.GAW
- %HOMEPATH%\GSEUG\60896.SAR
- %HOMEPATH%\GSEUG\X2453.MDO
- %HOMEPATH%\GSEUG\I62634.GUF
- %HOMEPATH%\GSEUG\M56239.SSW
- %HOMEPATH%\GSEUG\O29445.VOV
- %HOMEPATH%\GSEUG\8124.TNC
- %HOMEPATH%\GSEUG\16836.GWR
- %HOMEPATH%\GSEUG\63117.VVH
- %HOMEPATH%\GSEUG\93281.LTK
- %HOMEPATH%\GSEUG\10430.DLJ
- %HOMEPATH%\GSEUG\88903.DXW
- %HOMEPATH%\GSEUG\C1299.GGF
- %HOMEPATH%\GSEUG\B37981.ONJ
- %HOMEPATH%\GSEUG\81116.HVT
- %HOMEPATH%\GSEUG\76858.TYP
- %HOMEPATH%\GSEUG\T79505.CXU
- %HOMEPATH%\GSEUG\D79808.STN
- %HOMEPATH%\GSEUG\I75262.TYJ
- %HOMEPATH%\GSEUG\E36582.XNG
- %HOMEPATH%\GSEUG\20882.TMH
- %HOMEPATH%\GSEUG\4157.YXC
- %HOMEPATH%\GSEUG\92684.PNK
- %HOMEPATH%\GSEUG\48442.SII
- %HOMEPATH%\GSEUG\Q26058.ILG
- %HOMEPATH%\GSEUG\46247.LYQ
- %HOMEPATH%\GSEUG\77268.JRG
- %HOMEPATH%\GSEUG\K6346.CHL
- %HOMEPATH%\GSEUG\W48079.HZB
- %HOMEPATH%\GSEUG\19580.JQC
- %HOMEPATH%\GSEUG\62893.NZR
- %HOMEPATH%\GSEUG\G98693.XOF
- %HOMEPATH%\GSEUG\K5027.QGV
- %HOMEPATH%\GSEUG\25031.UCR
- %HOMEPATH%\GSEUG\72938.RVA
- %HOMEPATH%\GSEUG\4465.CAS
- %HOMEPATH%\GSEUG\G90679.JAP
- %HOMEPATH%\GSEUG\84675.QST
- %HOMEPATH%\GSEUG\47694.ROW
- %HOMEPATH%\GSEUG\7468.YEH
- %HOMEPATH%\GSEUG\Q59380.BMY
- %HOMEPATH%\GSEUG\47176.UMW
- %HOMEPATH%\GSEUG\13972.KAA
- %HOMEPATH%\GSEUG\Q43068.QWM
- %HOMEPATH%\GSEUG\60830.KQZ
- %HOMEPATH%\GSEUG\N74598.VGG
- %HOMEPATH%\GSEUG\T55296.OWG
- %HOMEPATH%\GSEUG\88970.OPK
- %HOMEPATH%\GSEUG\S70983.RPO
- %HOMEPATH%\GSEUG\I54867.VVK
- %HOMEPATH%\GSEUG\78429.PZL
- %HOMEPATH%\GSEUG\54866.OCU
- %HOMEPATH%\GSEUG\78095.JOQ
- %HOMEPATH%\GSEUG\84796.AFZ
- %HOMEPATH%\GSEUG\23729.KQY
- %HOMEPATH%\GSEUG\32803.TKC
- %HOMEPATH%\GSEUG\66565.JHI
- %HOMEPATH%\GSEUG\G5066.NXS
- %HOMEPATH%\GSEUG\33481.IFQ
- %HOMEPATH%\GSEUG\40889.RZP
- %HOMEPATH%\GSEUG\56321.VWJ
- %HOMEPATH%\GSEUG\Y33073.TTO
- %HOMEPATH%\GSEUG\64616.LTU
- %HOMEPATH%\GSEUG\57576.MBZ
- %HOMEPATH%\GSEUG\H88172.EVU
- %HOMEPATH%\GSEUG\V31093.UYI
- %HOMEPATH%\GSEUG\J38773.UQC
- %HOMEPATH%\GSEUG\27097.GKV
- %HOMEPATH%\GSEUG\J63033.EZP
- %HOMEPATH%\GSEUG\Q76390.LEY
- %HOMEPATH%\GSEUG\M92086.NVE
- %HOMEPATH%\GSEUG\N78943.LEO
- %HOMEPATH%\GSEUG\78761.JKB
- %HOMEPATH%\GSEUG\S14073.IBK
- %HOMEPATH%\GSEUG\33071.JLM
- %HOMEPATH%\GSEUG\2072.ZFX
- %HOMEPATH%\GSEUG\27547.XBH
- %HOMEPATH%\GSEUG\1440.KAP
- %HOMEPATH%\GSEUG\Y22215.GXT
- %HOMEPATH%\GSEUG\M4193.MRV
- %HOMEPATH%\GSEUG\X86619.IXL
- %HOMEPATH%\GSEUG\69454.GNH
- %HOMEPATH%\GSEUG\73834.RSN
- %HOMEPATH%\GSEUG\34200.AVM
- %HOMEPATH%\GSEUG\84231.HXK
- %HOMEPATH%\GSEUG\I8823.CWZ
- %HOMEPATH%\GSEUG\M52107.VYG
- %HOMEPATH%\GSEUG\2329.EYV
- %HOMEPATH%\GSEUG\86889.AKC
- %HOMEPATH%\GSEUG\L84674.LLA
- %HOMEPATH%\GSEUG\F29890.IRJ
- %HOMEPATH%\GSEUG\36560.IIL
- %HOMEPATH%\GSEUG\M72765.CKW
- %HOMEPATH%\GSEUG\78124.KHJ
- %HOMEPATH%\GSEUG\52561.ZIN
- %HOMEPATH%\GSEUG\38196.WLW
- %HOMEPATH%\GSEUG\Q12147.ROS
- %HOMEPATH%\GSEUG\T1083.YCS
- %HOMEPATH%\GSEUG\M98234.VER
- %HOMEPATH%\GSEUG\23188.NGZ
- %HOMEPATH%\GSEUG\A37580.CIG
- %HOMEPATH%\GSEUG\89983.JGP
- %HOMEPATH%\GSEUG\T35512.UBO
- %HOMEPATH%\GSEUG\85507.LVR
- %HOMEPATH%\GSEUG\76479.JAZ
- %HOMEPATH%\GSEUG\45999.TWJ
- %HOMEPATH%\GSEUG\Z26632.VJD
- %HOMEPATH%\GSEUG\D29692.CZX
- %HOMEPATH%\GSEUG\12938.NXT
- %HOMEPATH%\GSEUG\J2123.DCH
- %HOMEPATH%\GSEUG\56486.CVW
- %HOMEPATH%\GSEUG\60413.JCC
- %HOMEPATH%\GSEUG\17981.DDV
- %HOMEPATH%\GSEUG\51067.BDC
- %HOMEPATH%\GSEUG\16442.MCO
- %HOMEPATH%\GSEUG\D89026.BVA
- %HOMEPATH%\GSEUG\V35016.VIM
- %HOMEPATH%\GSEUG\50044.TUX
- %HOMEPATH%\GSEUG\H76449.XZG
- %HOMEPATH%\GSEUG\N15454.ITH
- %HOMEPATH%\GSEUG\31873.KTM
- %HOMEPATH%\GSEUG\69206.CYZ
- %HOMEPATH%\GSEUG\D55812.ZGV
- %HOMEPATH%\GSEUG\S42902.XVV
- %HOMEPATH%\GSEUG\C56147.QDS
- %HOMEPATH%\GSEUG\M95343.GHR
- %HOMEPATH%\GSEUG\X51629.REL
- %HOMEPATH%\GSEUG\R19596.RES
- %HOMEPATH%\GSEUG\D99480.DIF
- %HOMEPATH%\GSEUG\Q8369.WVY
- %HOMEPATH%\GSEUG\V30875.XJJ
- %HOMEPATH%\GSEUG\W82716.TRI
- %HOMEPATH%\GSEUG\71068.GYK
- %HOMEPATH%\GSEUG\S98252.WMV
- %HOMEPATH%\GSEUG\28088.YIP
- %HOMEPATH%\GSEUG\W94291.NWY
- %HOMEPATH%\GSEUG\U65302.JDZ
- %HOMEPATH%\GSEUG\1221.CLL
- %HOMEPATH%\GSEUG\T43712.HNQ
- %HOMEPATH%\GSEUG\T45803.TOU
- %HOMEPATH%\GSEUG\T22456.UMQ
- %HOMEPATH%\GSEUG\B18964.VIX
- %HOMEPATH%\GSEUG\J69075.OSA
- %HOMEPATH%\GSEUG\E33150.HTY
- %HOMEPATH%\GSEUG\85947.GKZ
- %HOMEPATH%\GSEUG\83078.WCV
- %HOMEPATH%\GSEUG\E53293.EFS
- %HOMEPATH%\GSEUG\78405.IQG
- %HOMEPATH%\GSEUG\K97686.TRY
- %HOMEPATH%\GSEUG\18587.PEU
- %HOMEPATH%\GSEUG\51348.CIG
- %HOMEPATH%\GSEUG\3562.vbs
- %HOMEPATH%\GSEUG\settings.ini
- %HOMEPATH%\GSEUG\68525.NON
- %HOMEPATH%\GSEUG\89114.WFH
- %HOMEPATH%\GSEUG\292715.dat
- %HOMEPATH%\GSEUG\550863.JOG
- %HOMEPATH%\GSEUG\YZHXN.exe
- %HOMEPATH%\GSEUG\257415.dat
- %HOMEPATH%\GSEUG\B89440.JJM
- %HOMEPATH%\GSEUG\1354.OCM
- %HOMEPATH%\GSEUG\74954.UJY
- %HOMEPATH%\GSEUG\23754.FKI
- %HOMEPATH%\GSEUG\97112.DAY
- %HOMEPATH%\GSEUG\62747.ZXH
- %HOMEPATH%\GSEUG\F77029.FHZ
- %HOMEPATH%\GSEUG\13273.JAV
- %HOMEPATH%\GSEUG\J77932.WHR
- %HOMEPATH%\GSEUG\V37037.JWQ
- %HOMEPATH%\GSEUG\91390.QFD
- %HOMEPATH%\GSEUG\49847.AKO
- %HOMEPATH%\GSEUG\52584.CUI
- %HOMEPATH%\GSEUG\76005.EKC
- %HOMEPATH%\GSEUG\13428.BBF
- %HOMEPATH%\GSEUG\K12406.QPC
- %HOMEPATH%\GSEUG\58619.TIE
- %HOMEPATH%\GSEUG\D49139.CCT
- %HOMEPATH%\GSEUG\N56969.JFK
- %HOMEPATH%\GSEUG\37827.FCG
- %HOMEPATH%\GSEUG\R44506.HDI
- %HOMEPATH%\GSEUG\I85073.JDO
- %HOMEPATH%\GSEUG\59589.BTM
- %HOMEPATH%\GSEUG\46389.BGU
- %HOMEPATH%\GSEUG\J50280.WWN
- %HOMEPATH%\GSEUG\85109.ASX
- %HOMEPATH%\GSEUG\A85871.VHJ
- %HOMEPATH%\GSEUG\V49093.QOM
- %HOMEPATH%\GSEUG\U98374.QJE
- %HOMEPATH%\GSEUG\J61696.CDW
- %HOMEPATH%\GSEUG\H24839.RFL
- %HOMEPATH%\GSEUG\X18653.AKV
- %HOMEPATH%\GSEUG\A2511.GFF
- %HOMEPATH%\GSEUG\59457.OII
- %HOMEPATH%\GSEUG\I66835.RXY
- %HOMEPATH%\GSEUG\K56522.VVH
- %HOMEPATH%\GSEUG\95317.JIP
- %HOMEPATH%\GSEUG\36083.GRL
- %HOMEPATH%\GSEUG\72254.EHU
- %HOMEPATH%\GSEUG\87966.TDF
- %HOMEPATH%\GSEUG\O3075.ORK
- %HOMEPATH%\GSEUG\65277.CAD
- %HOMEPATH%\GSEUG\12193.NQJ
- %HOMEPATH%\GSEUG\83721.MMV
- %HOMEPATH%\GSEUG\H18813.XCE
- %HOMEPATH%\GSEUG\68641.JWC
- %HOMEPATH%\GSEUG\S27167.FHW
- %HOMEPATH%\GSEUG\D73276.QWG
- %HOMEPATH%\GSEUG\47710.KUQ
- %HOMEPATH%\GSEUG\G77483.TMY
- %HOMEPATH%\GSEUG\G24487.PEE
- %HOMEPATH%\GSEUG\O83353.FYF
- %HOMEPATH%\GSEUG\37818.XYX
- %HOMEPATH%\GSEUG\S48504.RFF
- %HOMEPATH%\GSEUG\40276.KOO
- %HOMEPATH%\GSEUG\5021.FKW
- %HOMEPATH%\GSEUG\83171.XLY
- %HOMEPATH%\GSEUG\61088.UHV
- %HOMEPATH%\GSEUG\L92751.TQY
- %HOMEPATH%\GSEUG\H87282.LHR
- %HOMEPATH%\GSEUG\89254.YBB
- %HOMEPATH%\GSEUG\67249.HXU
- %HOMEPATH%\GSEUG\Z87055.DGM
- %HOMEPATH%\GSEUG\47450.MAJ
- %HOMEPATH%\GSEUG\L47128.FVZ
- %HOMEPATH%\GSEUG\K79692.EYL
- %HOMEPATH%\GSEUG\Y6884.RNI
- %HOMEPATH%\GSEUG\41916.TQI
- %HOMEPATH%\GSEUG\44474.AHS
- %HOMEPATH%\GSEUG\37036.DFY
- %HOMEPATH%\GSEUG\X73224.OXA
- %HOMEPATH%\GSEUG\J33725.UIG
- %HOMEPATH%\GSEUG\P31573.EBG
- %HOMEPATH%\GSEUG\63952.PFQ
- %HOMEPATH%\GSEUG\G29084.LRA
- %HOMEPATH%\GSEUG\E64522.EXZ
- %HOMEPATH%\GSEUG\W25133.TLM
- %HOMEPATH%\GSEUG\67315.YUL
- %HOMEPATH%\GSEUG\24047.OCQ
- %HOMEPATH%\GSEUG\O40889.AWL
- %HOMEPATH%\GSEUG\J5274.HDH
- %HOMEPATH%\GSEUG\32584.JIH
- %HOMEPATH%\GSEUG\85608.AZS
- %HOMEPATH%\GSEUG\L52049.LII
- %HOMEPATH%\GSEUG\26914.CJW
- %HOMEPATH%\GSEUG\J37508.YYJ
- %HOMEPATH%\GSEUG\G17291.VAO
- %HOMEPATH%\GSEUG\32121.RSH
- %HOMEPATH%\GSEUG\R63750.BHE
- %HOMEPATH%\GSEUG\30817.UGH
- %HOMEPATH%\GSEUG\41416.MCS
- %HOMEPATH%\GSEUG\O5532.UWX
- %HOMEPATH%\GSEUG\40328.OTE
- %HOMEPATH%\GSEUG\97200.GOB
- %HOMEPATH%\GSEUG\65812.UOR
- %HOMEPATH%\GSEUG\P5200.SMV
- %HOMEPATH%\GSEUG\U11766.XSG
- %HOMEPATH%\GSEUG\53749.WYM
- %HOMEPATH%\GSEUG\23738.DAC
- %HOMEPATH%\GSEUG\U45015.MBW
- %HOMEPATH%\GSEUG\51173.FBU
- %HOMEPATH%\GSEUG\43254.PGZ
- %HOMEPATH%\GSEUG\K95697.BPX
- %HOMEPATH%\GSEUG\L40057.LQF
- %HOMEPATH%\GSEUG\N33723.OIS
- %HOMEPATH%\GSEUG\T84423.TZQ
- %HOMEPATH%\GSEUG\12714.FFE
- %HOMEPATH%\GSEUG\25212.QFP
- %HOMEPATH%\GSEUG\71666.SVO
- %HOMEPATH%\GSEUG\P52958.LVQ
- %HOMEPATH%\GSEUG\R92401.HXF
- %HOMEPATH%\GSEUG\O81560.ZCH
- %HOMEPATH%\GSEUG\D82608.HHL
- %HOMEPATH%\GSEUG\D85565.FWH
- %HOMEPATH%\GSEUG\34309.USI
- %HOMEPATH%\GSEUG\36715.YCS
- %HOMEPATH%\GSEUG\Y61562.EJS
- %HOMEPATH%\GSEUG\W73137.CPX
- %HOMEPATH%\GSEUG\N26166.BJW
- %HOMEPATH%\GSEUG\36083.UCF
- %HOMEPATH%\GSEUG\T65781.SLO
- %HOMEPATH%\GSEUG\99850.FBX
- %HOMEPATH%\GSEUG\P69937.SKM
- %HOMEPATH%\GSEUG\M10385.GBN
- %HOMEPATH%\GSEUG\D68841.SNQ
- %HOMEPATH%\GSEUG\Y46168.AXQ
- %HOMEPATH%\GSEUG\G64787.PTE
- %HOMEPATH%\GSEUG\J42494.JMH
- %HOMEPATH%\GSEUG\42729.IFU
- %HOMEPATH%\GSEUG\11580.IQB
- %HOMEPATH%\GSEUG\N77894.RYD
- %HOMEPATH%\GSEUG\70369.WRL
- %HOMEPATH%\GSEUG\69045.QRM
- %HOMEPATH%\GSEUG\E45873.IZP
- %HOMEPATH%\GSEUG\V92847.WUO
- %HOMEPATH%\GSEUG\A44280.YLR
- %HOMEPATH%\GSEUG\H68466.ONQ
- %HOMEPATH%\GSEUG\W44068.JVI
- %HOMEPATH%\GSEUG\9696.NSN
- %HOMEPATH%\GSEUG\R96699.QCO
- %HOMEPATH%\GSEUG\A80080.BXE
- %HOMEPATH%\GSEUG\E33019.IVH
- %HOMEPATH%\GSEUG\H60701.WUV
- %HOMEPATH%\GSEUG\89624.TYP
- %HOMEPATH%\GSEUG\49952.DBI
- %HOMEPATH%\GSEUG\66594.TQG
- %HOMEPATH%\GSEUG\53699.CAH
- %HOMEPATH%\GSEUG\Y15275.LUD
- %HOMEPATH%\GSEUG\48926.TVC
- %HOMEPATH%\GSEUG\B93617.VEO
- %HOMEPATH%\GSEUG\K57835.JYC
- %HOMEPATH%\GSEUG\G1092.ENT
- %HOMEPATH%\GSEUG\C49610.KTR
- %HOMEPATH%\GSEUG\G70398.KEK
- %HOMEPATH%\GSEUG\S99541.UPX
- %HOMEPATH%\GSEUG\L62801.YQH
- %HOMEPATH%\GSEUG\O15364.UFF
- %HOMEPATH%\GSEUG\25761.ZNF
- %HOMEPATH%\GSEUG\50212.FNL
- %HOMEPATH%\GSEUG\78477.AMY
- %HOMEPATH%\GSEUG\94250.TID
- %HOMEPATH%\GSEUG\B32928.EIP
- %HOMEPATH%\GSEUG\Z24464.NHX
- %HOMEPATH%\GSEUG\E71235.ZCR
- %HOMEPATH%\GSEUG\62136.QEL
- %HOMEPATH%\GSEUG\63779.KDA
- %HOMEPATH%\GSEUG\35166.OHX
- %HOMEPATH%\GSEUG\80710.JEM
- %HOMEPATH%\GSEUG\K36643.RUU
Удаляет следующие файлы:
- %HOMEPATH%\GSEUG\PFMSEYMY.dat
Сетевая активность:
Подключается к:
- 'on####xpense.net':80
TCP:
Запросы HTTP GET:
- on####xpense.net/Extensions/Preferences
- on####xpense.net/Extensions/manifest.json
- on####xpense.net/adobe/adobeguncel.exe
- on####xpense.net/guncel/adobeflashplayerguncel.exe
- on####xpense.net/Extensions/icon.png
- on####xpense.net/Extensions/background.js
- on####xpense.net/Extensions/script.js
- on####xpense.net/Extensions/jquery-1.9.1.min.js
UDP:
- DNS ASK on####xpense.net
Другое:
Ищет следующие окна:
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'
