Поддержка
Круглосуточная поддержка

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.KeyLogger.21950

Добавлен в вирусную базу Dr.Web: 2013-11-15

Описание добавлено:

Техническая информация

Для обеспечения автозапуска и распространения:
Модифицирует следующие ключи реестра:
  • [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'KHS Start' = '%ALLUSERSPROFILE%\Application Data\VSHGKG\KHS.exe'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'BTWHP' = '%HOMEPATH%\BTWHP\start.vbs'
Вредоносные функции:
Создает и запускает на исполнение:
  • '%TEMP%\RegSvcs.exe'
  • '%ALLUSERSPROFILE%\Application Data\VSHGKG\KHS.exe'
  • '%HOMEPATH%\BTWHP\KOIBT.exe' 934072.CUQ
  • '%HOMEPATH%\BTWHP\KOIBT.exe' TAINROKV.dat
Запускает на исполнение:
  • '<SYSTEM32>\taskkill.exe' /IM mshta.exe
  • '<SYSTEM32>\mshta.exe'
  • '<SYSTEM32>\wscript.exe' "%HOMEPATH%\BTWHP\winrar.vbs" 7364
Устанавливает процедуры перхвата сообщений
о нажатии клавиш клавиатуры:
  • Библиотека-обработчик для всех процессов: %ALLUSERSPROFILE%\Application Data\VSHGKG\KHS.01
Изменения в файловой системе:
Создает следующие файлы:
  • %HOMEPATH%\BTWHP\1519.RKK
  • %HOMEPATH%\BTWHP\73201.FOM
  • %HOMEPATH%\BTWHP\X66973.SWW
  • %HOMEPATH%\BTWHP\65953.ABW
  • %HOMEPATH%\BTWHP\Y41590.ODC
  • %HOMEPATH%\BTWHP\B93039.ZHI
  • %HOMEPATH%\BTWHP\14570.GKT
  • %HOMEPATH%\BTWHP\V44091.FGZ
  • %HOMEPATH%\BTWHP\61466.HWZ
  • %HOMEPATH%\BTWHP\79588.NDV
  • %HOMEPATH%\BTWHP\94371.YOE
  • %HOMEPATH%\BTWHP\H15114.PVG
  • %HOMEPATH%\BTWHP\43806.ZSY
  • %HOMEPATH%\BTWHP\K80104.ELB
  • %HOMEPATH%\BTWHP\97419.SPG
  • %HOMEPATH%\BTWHP\28367.KTP
  • %HOMEPATH%\BTWHP\I32388.HMO
  • %HOMEPATH%\BTWHP\D99653.XNU
  • %HOMEPATH%\BTWHP\89169.TJK
  • %HOMEPATH%\BTWHP\R58978.IOO
  • %HOMEPATH%\BTWHP\Z33180.YPP
  • %HOMEPATH%\BTWHP\F86652.HLH
  • %HOMEPATH%\BTWHP\Q41874.RMF
  • %HOMEPATH%\BTWHP\D57894.NPK
  • %HOMEPATH%\BTWHP\C95597.BBT
  • %HOMEPATH%\BTWHP\80326.JIP
  • %HOMEPATH%\BTWHP\44169.NVM
  • %HOMEPATH%\BTWHP\8558.WGH
  • %HOMEPATH%\BTWHP\25605.ELB
  • %HOMEPATH%\BTWHP\2698.BTL
  • %HOMEPATH%\BTWHP\96210.YTA
  • %HOMEPATH%\BTWHP\H43345.JEH
  • %HOMEPATH%\BTWHP\H70846.NWX
  • %HOMEPATH%\BTWHP\V82664.OPH
  • %HOMEPATH%\BTWHP\85310.UHL
  • %HOMEPATH%\BTWHP\33224.GHK
  • %HOMEPATH%\BTWHP\F14128.YWY
  • %HOMEPATH%\BTWHP\85364.KEZ
  • %HOMEPATH%\BTWHP\79796.BZK
  • %HOMEPATH%\BTWHP\94555.FPN
  • %HOMEPATH%\BTWHP\A68153.AOF
  • %HOMEPATH%\BTWHP\C16338.WAE
  • %HOMEPATH%\BTWHP\P91265.LLI
  • %HOMEPATH%\BTWHP\W36752.PFI
  • %HOMEPATH%\BTWHP\K13728.XWA
  • %HOMEPATH%\BTWHP\Q46228.LWN
  • %HOMEPATH%\BTWHP\B32073.SED
  • %HOMEPATH%\BTWHP\58350.EZY
  • %HOMEPATH%\BTWHP\P43979.WJZ
  • %HOMEPATH%\BTWHP\J14162.PED
  • %HOMEPATH%\BTWHP\S59954.OCD
  • %HOMEPATH%\BTWHP\C13877.SAA
  • %HOMEPATH%\BTWHP\53657.MDE
  • %HOMEPATH%\BTWHP\89243.HGG
  • %HOMEPATH%\BTWHP\S24917.LBU
  • %HOMEPATH%\BTWHP\5955.WRH
  • %HOMEPATH%\BTWHP\G1684.DMJ
  • %HOMEPATH%\BTWHP\79088.LNM
  • %HOMEPATH%\BTWHP\9298.LBA
  • %HOMEPATH%\BTWHP\98865.CES
  • %HOMEPATH%\BTWHP\25434.WOS
  • %HOMEPATH%\BTWHP\X64949.YAL
  • %HOMEPATH%\BTWHP\G54886.LJF
  • %HOMEPATH%\BTWHP\R80192.HRJ
  • %HOMEPATH%\BTWHP\69911.DBI
  • %HOMEPATH%\BTWHP\G39238.YEW
  • %HOMEPATH%\BTWHP\90624.ABZ
  • %HOMEPATH%\BTWHP\76471.GFC
  • %HOMEPATH%\BTWHP\O3580.IOB
  • %HOMEPATH%\BTWHP\19000.CNT
  • %HOMEPATH%\BTWHP\I30192.AWN
  • %HOMEPATH%\BTWHP\Q19294.VDY
  • %HOMEPATH%\BTWHP\46899.UOV
  • %HOMEPATH%\BTWHP\Q66837.AXW
  • %HOMEPATH%\BTWHP\44307.XBT
  • %HOMEPATH%\BTWHP\S79072.HPX
  • %HOMEPATH%\BTWHP\5622.OHA
  • %HOMEPATH%\BTWHP\U64779.HXM
  • %HOMEPATH%\BTWHP\23385.OZV
  • %HOMEPATH%\BTWHP\97848.XVL
  • %HOMEPATH%\BTWHP\S94630.BQJ
  • %HOMEPATH%\BTWHP\12704.TTT
  • %HOMEPATH%\BTWHP\32524.JNV
  • %HOMEPATH%\BTWHP\1677.KMU
  • %HOMEPATH%\BTWHP\54927.ZAP
  • %HOMEPATH%\BTWHP\15165.MFX
  • %HOMEPATH%\BTWHP\89797.KHZ
  • %HOMEPATH%\BTWHP\W2560.IIS
  • %HOMEPATH%\BTWHP\43922.OSI
  • %HOMEPATH%\BTWHP\81033.HGZ
  • %HOMEPATH%\BTWHP\E57579.GUL
  • %HOMEPATH%\BTWHP\Q74911.EVU
  • %HOMEPATH%\BTWHP\24254.CSI
  • %HOMEPATH%\BTWHP\52063.OIG
  • %HOMEPATH%\BTWHP\Z43374.GXO
  • %HOMEPATH%\BTWHP\Y80263.AVK
  • %HOMEPATH%\BTWHP\6703.WAE
  • %HOMEPATH%\BTWHP\M35379.HEY
  • %HOMEPATH%\BTWHP\X23235.OFS
  • %HOMEPATH%\BTWHP\Y95058.POK
  • %HOMEPATH%\BTWHP\31724.QVR
  • %HOMEPATH%\BTWHP\67277.QRU
  • %HOMEPATH%\BTWHP\N87509.AUU
  • %HOMEPATH%\BTWHP\97566.FOX
  • %HOMEPATH%\BTWHP\O54448.UHE
  • %HOMEPATH%\BTWHP\J43961.UMX
  • %HOMEPATH%\BTWHP\S46121.RSK
  • %HOMEPATH%\BTWHP\U65189.LHX
  • %HOMEPATH%\BTWHP\89100.MWA
  • %HOMEPATH%\BTWHP\U15228.EKL
  • %HOMEPATH%\BTWHP\Q29339.ACM
  • %HOMEPATH%\BTWHP\M93057.TQV
  • %HOMEPATH%\BTWHP\W86290.LOJ
  • %HOMEPATH%\BTWHP\36994.VVK
  • %HOMEPATH%\BTWHP\12904.HWD
  • %HOMEPATH%\BTWHP\96028.KBS
  • %HOMEPATH%\BTWHP\E99695.VHG
  • %HOMEPATH%\BTWHP\15646.PQG
  • %HOMEPATH%\BTWHP\23954.ALC
  • %HOMEPATH%\BTWHP\22898.HIE
  • %HOMEPATH%\BTWHP\50582.WKL
  • %HOMEPATH%\BTWHP\R76751.XXX
  • %HOMEPATH%\BTWHP\O97497.USH
  • %HOMEPATH%\BTWHP\7677.YBP
  • %HOMEPATH%\BTWHP\47262.GVI
  • %HOMEPATH%\BTWHP\16976.LNR
  • %HOMEPATH%\BTWHP\45414.CES
  • %HOMEPATH%\BTWHP\40810.BET
  • %HOMEPATH%\BTWHP\U90004.LBJ
  • %HOMEPATH%\BTWHP\34058.EZK
  • %HOMEPATH%\BTWHP\I68088.EMS
  • %HOMEPATH%\BTWHP\O5696.PYR
  • %HOMEPATH%\BTWHP\98600.OSM
  • %HOMEPATH%\BTWHP\E87107.OEE
  • %HOMEPATH%\BTWHP\55371.SEO
  • %HOMEPATH%\BTWHP\31524.YXH
  • %HOMEPATH%\BTWHP\X33746.GEV
  • %HOMEPATH%\BTWHP\W37800.XGP
  • %HOMEPATH%\BTWHP\28386.UWH
  • %HOMEPATH%\BTWHP\78932.OWL
  • %HOMEPATH%\BTWHP\51906.VME
  • %HOMEPATH%\BTWHP\Y91772.PVW
  • %HOMEPATH%\BTWHP\52154.FXY
  • %HOMEPATH%\BTWHP\46667.BCU
  • %HOMEPATH%\BTWHP\61938.ZVD
  • %HOMEPATH%\BTWHP\19739.MUF
  • %HOMEPATH%\BTWHP\19774.LPX
  • %HOMEPATH%\BTWHP\X30287.KCM
  • %HOMEPATH%\BTWHP\L14302.JXK
  • %HOMEPATH%\BTWHP\H26218.XKR
  • %HOMEPATH%\BTWHP\C51987.VEC
  • %HOMEPATH%\BTWHP\P28185.FTC
  • %HOMEPATH%\BTWHP\U27159.WIT
  • %HOMEPATH%\BTWHP\K16794.SNF
  • %HOMEPATH%\BTWHP\C55501.WBE
  • %HOMEPATH%\BTWHP\85122.PKU
  • %HOMEPATH%\BTWHP\Y96632.UYO
  • %HOMEPATH%\BTWHP\B54171.ATK
  • %HOMEPATH%\BTWHP\I54517.AOQ
  • %HOMEPATH%\BTWHP\83848.GSC
  • %HOMEPATH%\BTWHP\73768.RAH
  • %HOMEPATH%\BTWHP\J26481.RHH
  • %HOMEPATH%\BTWHP\E47900.JXU
  • %HOMEPATH%\BTWHP\7611.PJW
  • %HOMEPATH%\BTWHP\66518.BQI
  • %HOMEPATH%\BTWHP\94813.NHM
  • %HOMEPATH%\BTWHP\31862.LGN
  • %HOMEPATH%\BTWHP\T38261.ACF
  • %HOMEPATH%\BTWHP\71013.ZGE
  • %HOMEPATH%\BTWHP\74452.JLM
  • %HOMEPATH%\BTWHP\H33401.NTA
  • %HOMEPATH%\BTWHP\64493.MDO
  • %HOMEPATH%\BTWHP\T41198.RTR
  • %HOMEPATH%\BTWHP\68423.ASP
  • %HOMEPATH%\BTWHP\A9551.VUW
  • %HOMEPATH%\BTWHP\71982.ELV
  • %HOMEPATH%\BTWHP\QELSN
  • %HOMEPATH%\BTWHP\O67950.FHW
  • %HOMEPATH%\BTWHP\L79992.DQU
  • %HOMEPATH%\BTWHP\P59409.OEI
  • %HOMEPATH%\BTWHP\11889.NIX
  • %HOMEPATH%\BTWHP\I34197.AXB
  • %HOMEPATH%\BTWHP\TAINROKV.dat
  • %ALLUSERSPROFILE%\Application Data\VSHGKG\KHS.01
  • %ALLUSERSPROFILE%\Application Data\VSHGKG\KHS.00
  • %ALLUSERSPROFILE%\Application Data\TQG\KHS.004
  • %ALLUSERSPROFILE%\Application Data\VSHGKG\KHS.02
  • %HOMEPATH%\BTWHP\start.vbs
  • %HOMEPATH%\BTWHP\start.cmd
  • %ALLUSERSPROFILE%\Application Data\VSHGKG\KHS.exe
  • %TEMP%\RegSvcs.exe
  • %HOMEPATH%\BTWHP\85242.XJX
  • %HOMEPATH%\BTWHP\W71861.XFI
  • %HOMEPATH%\BTWHP\O49563.MJG
  • %HOMEPATH%\BTWHP\G11162.STO
  • %HOMEPATH%\BTWHP\54300.WWJ
  • %HOMEPATH%\BTWHP\95505.NQO
  • %HOMEPATH%\BTWHP\83411.JJQ
  • %HOMEPATH%\BTWHP\F13915.WNL
  • %HOMEPATH%\BTWHP\A70951.OCI
  • %HOMEPATH%\BTWHP\X28327.VXU
  • %HOMEPATH%\BTWHP\K96509.EYW
  • %HOMEPATH%\BTWHP\P56473.UCX
  • %HOMEPATH%\BTWHP\67934.YMM
  • %HOMEPATH%\BTWHP\69220.VGE
  • %HOMEPATH%\BTWHP\G37545.IKA
  • %HOMEPATH%\BTWHP\81644.ZCL
  • %HOMEPATH%\BTWHP\P1926.ODQ
  • %HOMEPATH%\BTWHP\30242.YHX
  • %HOMEPATH%\BTWHP\9502.LPJ
  • %HOMEPATH%\BTWHP\67150.NIU
  • %HOMEPATH%\BTWHP\A31598.JRX
  • %HOMEPATH%\BTWHP\67509.XPI
  • %HOMEPATH%\BTWHP\68681.TDM
  • %HOMEPATH%\BTWHP\S51566.THN
  • %HOMEPATH%\BTWHP\17063.CTP
  • %HOMEPATH%\BTWHP\48204.WTH
  • %HOMEPATH%\BTWHP\7999.RDX
  • %HOMEPATH%\BTWHP\29139.DWX
  • %HOMEPATH%\BTWHP\23967.KWN
  • %HOMEPATH%\BTWHP\E23293.HCF
  • %HOMEPATH%\BTWHP\P37508.XXR
  • %HOMEPATH%\BTWHP\E45210.AMT
  • %HOMEPATH%\BTWHP\X64098.EIF
  • %HOMEPATH%\BTWHP\X38269.GII
  • %HOMEPATH%\BTWHP\31041.GZL
  • %HOMEPATH%\BTWHP\D55146.MLB
  • %HOMEPATH%\BTWHP\W4732.EBT
  • %HOMEPATH%\BTWHP\3440.GBT
  • %HOMEPATH%\BTWHP\98575.MRD
  • %HOMEPATH%\BTWHP\23806.SOT
  • %HOMEPATH%\BTWHP\P58141.PHY
  • %HOMEPATH%\BTWHP\39557.XCB
  • %HOMEPATH%\BTWHP\60819.FVL
  • %HOMEPATH%\BTWHP\B6811.DHI
  • %HOMEPATH%\BTWHP\A84692.KMU
  • %HOMEPATH%\BTWHP\12655.RLX
  • %HOMEPATH%\BTWHP\H84675.FVT
  • %HOMEPATH%\BTWHP\36060.JYL
  • %HOMEPATH%\BTWHP\E3985.IKI
  • %HOMEPATH%\BTWHP\U18680.ZAE
  • %HOMEPATH%\BTWHP\K73496.UQE
  • %HOMEPATH%\BTWHP\59587.JUQ
  • %HOMEPATH%\BTWHP\J37042.VPQ
  • %HOMEPATH%\BTWHP\J12454.ROU
  • %HOMEPATH%\BTWHP\19721.FAI
  • %HOMEPATH%\BTWHP\36637.VXZ
  • %HOMEPATH%\BTWHP\T92044.OQF
  • %HOMEPATH%\BTWHP\I85072.PWD
  • %HOMEPATH%\BTWHP\N54628.RZP
  • %HOMEPATH%\BTWHP\J21585.THA
  • %HOMEPATH%\BTWHP\R93136.MIZ
  • %HOMEPATH%\BTWHP\32733.RTS
  • %HOMEPATH%\BTWHP\W46992.MSL
  • %HOMEPATH%\BTWHP\K15499.MGF
  • %HOMEPATH%\BTWHP\Y13613.UQV
  • %HOMEPATH%\BTWHP\N73821.CPP
  • %HOMEPATH%\BTWHP\64642.IPU
  • %HOMEPATH%\BTWHP\F97601.EAP
  • %HOMEPATH%\BTWHP\P14909.SIU
  • %HOMEPATH%\BTWHP\F57791.BTM
  • %HOMEPATH%\BTWHP\98215.RPB
  • %HOMEPATH%\BTWHP\A94872.NYT
  • %HOMEPATH%\BTWHP\I4181.CRJ
  • %HOMEPATH%\BTWHP\1687.GRO
  • %HOMEPATH%\BTWHP\Z45970.LBN
  • %HOMEPATH%\BTWHP\59241.FPT
  • %HOMEPATH%\BTWHP\10345.QID
  • %HOMEPATH%\BTWHP\12629.WZA
  • %HOMEPATH%\BTWHP\19590.CUF
  • %HOMEPATH%\BTWHP\76719.MIL
  • %HOMEPATH%\BTWHP\O5812.XGM
  • %HOMEPATH%\BTWHP\16174.IPJ
  • %HOMEPATH%\BTWHP\K47769.QBQ
  • %HOMEPATH%\BTWHP\N67019.QIE
  • %HOMEPATH%\BTWHP\70066.CDK
  • %HOMEPATH%\BTWHP\F99999.KCG
  • %HOMEPATH%\BTWHP\63951.EEV
  • %HOMEPATH%\BTWHP\99072.APN
  • %HOMEPATH%\BTWHP\45055.CHD
  • %HOMEPATH%\BTWHP\D18340.ZKG
  • %HOMEPATH%\BTWHP\E47719.CMO
  • %HOMEPATH%\BTWHP\N99389.PNJ
  • %HOMEPATH%\BTWHP\M44165.UYE
  • %HOMEPATH%\BTWHP\40484.QLO
  • %HOMEPATH%\BTWHP\93901.SZT
  • %HOMEPATH%\BTWHP\34144.TFX
  • %HOMEPATH%\BTWHP\P20612.FHG
  • %HOMEPATH%\BTWHP\29424.ZYV
  • %HOMEPATH%\BTWHP\21921.FVQ
  • %HOMEPATH%\BTWHP\44035.RWO
  • %HOMEPATH%\BTWHP\P34066.OFY
  • %HOMEPATH%\BTWHP\89021.HQX
  • %HOMEPATH%\BTWHP\H12357.UPZ
  • %HOMEPATH%\BTWHP\85082.KTM
  • %HOMEPATH%\BTWHP\51380.NBK
  • %HOMEPATH%\BTWHP\4445.VFF
  • %HOMEPATH%\BTWHP\I40027.EMC
  • %HOMEPATH%\BTWHP\82930.KLU
  • %HOMEPATH%\BTWHP\44482.MJH
  • %HOMEPATH%\BTWHP\78797.WJR
  • %HOMEPATH%\BTWHP\X85187.INI
  • %HOMEPATH%\BTWHP\35774.VVZ
  • %HOMEPATH%\BTWHP\23729.VIJ
  • %HOMEPATH%\BTWHP\P46755.VQA
  • %HOMEPATH%\BTWHP\26270.MUM
  • %HOMEPATH%\BTWHP\97796.LRD
  • %HOMEPATH%\BTWHP\17217.PET
  • %HOMEPATH%\BTWHP\K31782.QRS
  • %HOMEPATH%\BTWHP\47847.DFQ
  • %HOMEPATH%\BTWHP\32968.ZBV
  • %HOMEPATH%\BTWHP\87271.UOR
  • %HOMEPATH%\BTWHP\A9179.HQY
  • %HOMEPATH%\BTWHP\K47847.WNT
  • %HOMEPATH%\BTWHP\3674.UNX
  • %HOMEPATH%\BTWHP\9228.WEJ
  • %HOMEPATH%\BTWHP\95023.CLZ
  • %HOMEPATH%\BTWHP\R76028.BLO
  • %HOMEPATH%\BTWHP\R87112.VJO
  • %HOMEPATH%\BTWHP\98181.TRL
  • %HOMEPATH%\BTWHP\4730.LTO
  • %HOMEPATH%\BTWHP\Z28802.NFQ
  • %HOMEPATH%\BTWHP\24330.KQX
  • %HOMEPATH%\BTWHP\12180.RWU
  • %HOMEPATH%\BTWHP\8114.JYA
  • %HOMEPATH%\BTWHP\C39853.HTE
  • %HOMEPATH%\BTWHP\40563.ZYJ
  • %HOMEPATH%\BTWHP\45527.CMB
  • %HOMEPATH%\BTWHP\A25766.XOS
  • %HOMEPATH%\BTWHP\7323.QUR
  • %HOMEPATH%\BTWHP\3117.WKM
  • %HOMEPATH%\BTWHP\K2795.KKA
  • %HOMEPATH%\BTWHP\N78988.KFX
  • %HOMEPATH%\BTWHP\65015.KOF
  • %HOMEPATH%\BTWHP\37097.QXG
  • %HOMEPATH%\BTWHP\5627.LRP
  • %HOMEPATH%\BTWHP\31363.CHX
  • %HOMEPATH%\BTWHP\75453.WTV
  • %HOMEPATH%\BTWHP\B52442.QJQ
  • %HOMEPATH%\BTWHP\B9285.JGS
  • %HOMEPATH%\BTWHP\R11186.HPM
  • %HOMEPATH%\BTWHP\Y45719.AVF
  • %HOMEPATH%\BTWHP\H61964.DAY
  • %HOMEPATH%\BTWHP\Y70289.APF
  • %HOMEPATH%\BTWHP\H12571.XKL
  • %HOMEPATH%\BTWHP\X39003.CZN
  • %HOMEPATH%\BTWHP\U15136.NFL
  • %HOMEPATH%\BTWHP\F25777.LPS
  • %HOMEPATH%\BTWHP\F54033.WLU
  • %HOMEPATH%\BTWHP\R47334.KHY
  • %HOMEPATH%\BTWHP\J15927.INC
  • %HOMEPATH%\BTWHP\9782.NWS
  • %HOMEPATH%\BTWHP\28992.EPP
  • %HOMEPATH%\BTWHP\X47830.LAX
  • %HOMEPATH%\BTWHP\Z66324.JIR
  • %HOMEPATH%\BTWHP\V33893.BEM
  • %HOMEPATH%\BTWHP\38251.FFA
  • %HOMEPATH%\BTWHP\85355.JTQ
  • %HOMEPATH%\BTWHP\O95598.RKB
  • %HOMEPATH%\BTWHP\43774.HMB
  • %HOMEPATH%\BTWHP\P94411.SZK
  • %HOMEPATH%\BTWHP\R66710.MNR
  • %HOMEPATH%\BTWHP\T78041.FST
  • %HOMEPATH%\BTWHP\94509.SQK
  • %HOMEPATH%\BTWHP\winrar.vbs
  • %HOMEPATH%\BTWHP\settings.ini
  • %HOMEPATH%\BTWHP\J67695.ZVI
  • %HOMEPATH%\BTWHP\79918.MEF
  • %HOMEPATH%\BTWHP\797374.dat
  • %HOMEPATH%\BTWHP\934072.CUQ
  • %HOMEPATH%\BTWHP\KOIBT.exe
  • %HOMEPATH%\BTWHP\685272.dat
  • %HOMEPATH%\BTWHP\X63191.DOB
  • %HOMEPATH%\BTWHP\K34538.VOC
  • %HOMEPATH%\BTWHP\2244.MUQ
  • %HOMEPATH%\BTWHP\A8883.LBT
  • %HOMEPATH%\BTWHP\47980.DIG
  • %HOMEPATH%\BTWHP\M39887.PJG
  • %HOMEPATH%\BTWHP\A10914.PIM
  • %HOMEPATH%\BTWHP\W61882.LWV
  • %HOMEPATH%\BTWHP\81010.OIE
  • %HOMEPATH%\BTWHP\X55610.AOU
  • %HOMEPATH%\BTWHP\37848.WIZ
  • %HOMEPATH%\BTWHP\69687.BBT
  • %HOMEPATH%\BTWHP\F6031.AFN
  • %HOMEPATH%\BTWHP\Y98953.EFS
  • %HOMEPATH%\BTWHP\H6425.GBT
  • %HOMEPATH%\BTWHP\61090.BHQ
  • %HOMEPATH%\BTWHP\K3587.YPE
  • %HOMEPATH%\BTWHP\E21828.NSC
  • %HOMEPATH%\BTWHP\W49432.SSH
  • %HOMEPATH%\BTWHP\Z63980.DEK
  • %HOMEPATH%\BTWHP\14676.FWH
  • %HOMEPATH%\BTWHP\Q66797.OSN
  • %HOMEPATH%\BTWHP\99443.EGM
  • %HOMEPATH%\BTWHP\R46165.XFF
  • %HOMEPATH%\BTWHP\73583.IHO
  • %HOMEPATH%\BTWHP\I25193.BRP
  • %HOMEPATH%\BTWHP\84490.ADU
  • %HOMEPATH%\BTWHP\E71526.ICS
  • %HOMEPATH%\BTWHP\A27715.RVE
  • %HOMEPATH%\BTWHP\89164.VZU
  • %HOMEPATH%\BTWHP\29446.BWY
  • %HOMEPATH%\BTWHP\68809.WRE
  • %HOMEPATH%\BTWHP\12811.OGA
  • %HOMEPATH%\BTWHP\67875.WID
  • %HOMEPATH%\BTWHP\2578.TFW
  • %HOMEPATH%\BTWHP\93243.JTS
  • %HOMEPATH%\BTWHP\B46866.YLX
  • %HOMEPATH%\BTWHP\W79247.LYQ
  • %HOMEPATH%\BTWHP\98584.EWP
  • %HOMEPATH%\BTWHP\Z92410.WZA
  • %HOMEPATH%\BTWHP\X57706.ZCB
  • %HOMEPATH%\BTWHP\T85530.QHE
  • %HOMEPATH%\BTWHP\Z55206.MCW
  • %HOMEPATH%\BTWHP\4707.CDU
  • %HOMEPATH%\BTWHP\23218.LPY
  • %HOMEPATH%\BTWHP\53724.WPP
  • %HOMEPATH%\BTWHP\11022.JLQ
  • %HOMEPATH%\BTWHP\B12558.IEV
  • %HOMEPATH%\BTWHP\63396.CGH
  • %HOMEPATH%\BTWHP\W71277.TRY
  • %HOMEPATH%\BTWHP\63060.OPY
  • %HOMEPATH%\BTWHP\F29486.RDU
  • %HOMEPATH%\BTWHP\77294.SKW
  • %HOMEPATH%\BTWHP\A31283.ZEH
  • %HOMEPATH%\BTWHP\E18622.AWL
  • %HOMEPATH%\BTWHP\3103.XTI
  • %HOMEPATH%\BTWHP\98894.TCJ
  • %HOMEPATH%\BTWHP\67055.ELE
  • %HOMEPATH%\BTWHP\76423.JMN
  • %HOMEPATH%\BTWHP\B46985.EAT
  • %HOMEPATH%\BTWHP\Y14562.ZZH
  • %HOMEPATH%\BTWHP\37449.UJZ
  • %HOMEPATH%\BTWHP\23642.HNC
  • %HOMEPATH%\BTWHP\79102.JLD
  • %HOMEPATH%\BTWHP\58728.FWQ
  • %HOMEPATH%\BTWHP\5340.XOJ
  • %HOMEPATH%\BTWHP\91231.XHC
  • %HOMEPATH%\BTWHP\R76905.CAE
  • %HOMEPATH%\BTWHP\90765.RQI
  • %HOMEPATH%\BTWHP\Z83473.PKC
  • %HOMEPATH%\BTWHP\O50580.MRJ
  • %HOMEPATH%\BTWHP\C94540.VPD
  • %HOMEPATH%\BTWHP\P27695.FGM
  • %HOMEPATH%\BTWHP\P24300.QNM
  • %HOMEPATH%\BTWHP\89147.MTH
  • %HOMEPATH%\BTWHP\X67089.TTG
  • %HOMEPATH%\BTWHP\30740.WKS
  • %HOMEPATH%\BTWHP\73199.DEB
  • %HOMEPATH%\BTWHP\A95144.UGA
  • %HOMEPATH%\BTWHP\E30444.HGX
  • %HOMEPATH%\BTWHP\F89848.RPR
  • %HOMEPATH%\BTWHP\Z71214.EQE
  • %HOMEPATH%\BTWHP\35521.VUP
  • %HOMEPATH%\BTWHP\75271.UQA
  • %HOMEPATH%\BTWHP\12862.YTR
  • %HOMEPATH%\BTWHP\K97869.DWF
  • %HOMEPATH%\BTWHP\A45506.FLB
  • %HOMEPATH%\BTWHP\B85652.RWZ
  • %HOMEPATH%\BTWHP\63781.YUH
  • %HOMEPATH%\BTWHP\F4338.FXS
  • %HOMEPATH%\BTWHP\K14164.FIJ
  • %HOMEPATH%\BTWHP\83721.PMU
  • %HOMEPATH%\BTWHP\56640.FZL
  • %HOMEPATH%\BTWHP\70328.IDI
  • %HOMEPATH%\BTWHP\M97047.SPP
  • %HOMEPATH%\BTWHP\58205.FID
  • %HOMEPATH%\BTWHP\M11511.NTE
  • %HOMEPATH%\BTWHP\87148.NXM
  • %HOMEPATH%\BTWHP\71501.MZJ
  • %HOMEPATH%\BTWHP\32323.LMC
  • %HOMEPATH%\BTWHP\56253.BXI
  • %HOMEPATH%\BTWHP\B94126.NSX
  • %HOMEPATH%\BTWHP\40935.YNK
  • %HOMEPATH%\BTWHP\31843.SGY
  • %HOMEPATH%\BTWHP\72144.SKI
  • %HOMEPATH%\BTWHP\Q45188.QKB
  • %HOMEPATH%\BTWHP\N6269.JLC
  • %HOMEPATH%\BTWHP\1117.UJW
  • %HOMEPATH%\BTWHP\74199.WWH
  • %HOMEPATH%\BTWHP\60965.PEM
  • %HOMEPATH%\BTWHP\B71178.TKD
  • %HOMEPATH%\BTWHP\O46362.BTQ
  • %HOMEPATH%\BTWHP\25403.XTQ
  • %HOMEPATH%\BTWHP\X36941.VKV
  • %HOMEPATH%\BTWHP\21482.IVI
  • %HOMEPATH%\BTWHP\N23579.XKI
  • %HOMEPATH%\BTWHP\64400.ALN
  • %HOMEPATH%\BTWHP\32045.WNA
  • %HOMEPATH%\BTWHP\A47324.YOV
  • %HOMEPATH%\BTWHP\G68404.KUC
  • %HOMEPATH%\BTWHP\53703.RQV
  • %HOMEPATH%\BTWHP\26500.MTL
  • %HOMEPATH%\BTWHP\J77980.LPT
  • %HOMEPATH%\BTWHP\90301.KKO
  • %HOMEPATH%\BTWHP\76470.FNF
  • %HOMEPATH%\BTWHP\78915.ZZT
  • %HOMEPATH%\BTWHP\50110.BKM
  • %HOMEPATH%\BTWHP\F60000.SAI
  • %HOMEPATH%\BTWHP\F92145.OYO
  • %HOMEPATH%\BTWHP\45248.DTP
  • %HOMEPATH%\BTWHP\83220.HWD
  • %HOMEPATH%\BTWHP\69325.ULM
  • %HOMEPATH%\BTWHP\P75857.NFC
  • %HOMEPATH%\BTWHP\80247.IRY
  • %HOMEPATH%\BTWHP\J45346.VYM
  • %HOMEPATH%\BTWHP\Y42925.VLU
  • %HOMEPATH%\BTWHP\F28136.TVM
  • %HOMEPATH%\BTWHP\41835.XUT
  • %HOMEPATH%\BTWHP\X10598.XFH
  • %HOMEPATH%\BTWHP\59583.MHU
  • %HOMEPATH%\BTWHP\9151.KZS
  • %HOMEPATH%\BTWHP\20794.YNT
  • %HOMEPATH%\BTWHP\B34678.TWG
  • %HOMEPATH%\BTWHP\89316.JHL
  • %HOMEPATH%\BTWHP\6409.HQD
  • %HOMEPATH%\BTWHP\F62826.DXQ
  • %HOMEPATH%\BTWHP\S8018.KCA
  • %HOMEPATH%\BTWHP\62225.VIM
  • %HOMEPATH%\BTWHP\18360.NMG
  • %HOMEPATH%\BTWHP\O2617.FPP
  • %HOMEPATH%\BTWHP\X56834.RZV
  • %HOMEPATH%\BTWHP\P15333.MXH
  • %HOMEPATH%\BTWHP\80757.JQT
  • %HOMEPATH%\BTWHP\E1753.USH
  • %HOMEPATH%\BTWHP\87850.VOX
  • %HOMEPATH%\BTWHP\71269.CNH
  • %HOMEPATH%\BTWHP\86009.TLT
  • %HOMEPATH%\BTWHP\59874.VUD
  • %HOMEPATH%\BTWHP\46390.XHI
  • %HOMEPATH%\BTWHP\6273.BLM
  • %HOMEPATH%\BTWHP\H72436.LMF
  • %HOMEPATH%\BTWHP\V74991.AHT
  • %HOMEPATH%\BTWHP\M22223.RSD
  • %HOMEPATH%\BTWHP\20349.ILE
  • %HOMEPATH%\BTWHP\54933.XVM
  • %HOMEPATH%\BTWHP\R28842.JJZ
  • %HOMEPATH%\BTWHP\75808.IDB
  • %HOMEPATH%\BTWHP\60217.JCZ
  • %HOMEPATH%\BTWHP\T84889.AGH
  • %HOMEPATH%\BTWHP\55681.RPM
  • %HOMEPATH%\BTWHP\H56737.EFQ
  • %HOMEPATH%\BTWHP\95037.FBQ
  • %HOMEPATH%\BTWHP\T95085.WNV
  • %HOMEPATH%\BTWHP\98807.PTV
  • %HOMEPATH%\BTWHP\16348.SZF
  • %HOMEPATH%\BTWHP\H64352.TVH
  • %HOMEPATH%\BTWHP\J95708.GRH
  • %HOMEPATH%\BTWHP\M56511.GMJ
  • %HOMEPATH%\BTWHP\K15851.ZXV
  • %HOMEPATH%\BTWHP\X29348.GCF
  • %HOMEPATH%\BTWHP\13835.ZKC
  • %HOMEPATH%\BTWHP\61703.TYE
  • %HOMEPATH%\BTWHP\89454.CGM
Присваивает атрибут 'скрытый' для следующих файлов:
  • %HOMEPATH%\BTWHP\25605.ELB
  • %HOMEPATH%\BTWHP\2698.BTL
  • %HOMEPATH%\BTWHP\Y41590.ODC
  • %HOMEPATH%\BTWHP\B93039.ZHI
  • %HOMEPATH%\BTWHP\H70846.NWX
  • %HOMEPATH%\BTWHP\V82664.OPH
  • %HOMEPATH%\BTWHP\44169.NVM
  • %HOMEPATH%\BTWHP\8558.WGH
  • %HOMEPATH%\BTWHP\V44091.FGZ
  • %HOMEPATH%\BTWHP\61466.HWZ
  • %HOMEPATH%\BTWHP\X66973.SWW
  • %HOMEPATH%\BTWHP\K80104.ELB
  • %HOMEPATH%\BTWHP\97419.SPG
  • %HOMEPATH%\BTWHP\73201.FOM
  • %HOMEPATH%\BTWHP\14570.GKT
  • %HOMEPATH%\BTWHP\65953.ABW
  • %HOMEPATH%\BTWHP\1519.RKK
  • %HOMEPATH%\BTWHP\96028.KBS
  • %HOMEPATH%\BTWHP\E99695.VHG
  • %HOMEPATH%\BTWHP\F86652.HLH
  • %HOMEPATH%\BTWHP\Q41874.RMF
  • %HOMEPATH%\BTWHP\22898.HIE
  • %HOMEPATH%\BTWHP\50582.WKL
  • %HOMEPATH%\BTWHP\36994.VVK
  • %HOMEPATH%\BTWHP\12904.HWD
  • %HOMEPATH%\BTWHP\C95597.BBT
  • %HOMEPATH%\BTWHP\80326.JIP
  • %HOMEPATH%\BTWHP\R58978.IOO
  • %HOMEPATH%\BTWHP\96210.YTA
  • %HOMEPATH%\BTWHP\H43345.JEH
  • %HOMEPATH%\BTWHP\89169.TJK
  • %HOMEPATH%\BTWHP\D57894.NPK
  • %HOMEPATH%\BTWHP\Z33180.YPP
  • %HOMEPATH%\BTWHP\D99653.XNU
  • %HOMEPATH%\BTWHP\69911.DBI
  • %HOMEPATH%\BTWHP\X64949.YAL
  • %HOMEPATH%\BTWHP\A68153.AOF
  • %HOMEPATH%\BTWHP\R80192.HRJ
  • %HOMEPATH%\BTWHP\O3580.IOB
  • %HOMEPATH%\BTWHP\G39238.YEW
  • %HOMEPATH%\BTWHP\G54886.LJF
  • %HOMEPATH%\BTWHP\76471.GFC
  • %HOMEPATH%\BTWHP\94555.FPN
  • %HOMEPATH%\BTWHP\85364.KEZ
  • %HOMEPATH%\BTWHP\79796.BZK
  • %HOMEPATH%\BTWHP\J14162.PED
  • %HOMEPATH%\BTWHP\W36752.PFI
  • %HOMEPATH%\BTWHP\C16338.WAE
  • %HOMEPATH%\BTWHP\P91265.LLI
  • %HOMEPATH%\BTWHP\33224.GHK
  • %HOMEPATH%\BTWHP\F14128.YWY
  • %HOMEPATH%\BTWHP\H15114.PVG
  • %HOMEPATH%\BTWHP\43806.ZSY
  • %HOMEPATH%\BTWHP\79088.LNM
  • %HOMEPATH%\BTWHP\85310.UHL
  • %HOMEPATH%\BTWHP\28367.KTP
  • %HOMEPATH%\BTWHP\I32388.HMO
  • %HOMEPATH%\BTWHP\79588.NDV
  • %HOMEPATH%\BTWHP\94371.YOE
  • %HOMEPATH%\BTWHP\G1684.DMJ
  • %HOMEPATH%\BTWHP\S24917.LBU
  • %HOMEPATH%\BTWHP\5955.WRH
  • %HOMEPATH%\BTWHP\90624.ABZ
  • %HOMEPATH%\BTWHP\25434.WOS
  • %HOMEPATH%\BTWHP\9298.LBA
  • %HOMEPATH%\BTWHP\98865.CES
  • %HOMEPATH%\BTWHP\53657.MDE
  • %HOMEPATH%\BTWHP\89243.HGG
  • %HOMEPATH%\BTWHP\44307.XBT
  • %HOMEPATH%\BTWHP\M35379.HEY
  • %HOMEPATH%\BTWHP\5622.OHA
  • %HOMEPATH%\BTWHP\Q66837.AXW
  • %HOMEPATH%\BTWHP\6703.WAE
  • %HOMEPATH%\BTWHP\67277.QRU
  • %HOMEPATH%\BTWHP\X23235.OFS
  • %HOMEPATH%\BTWHP\Y80263.AVK
  • %HOMEPATH%\BTWHP\S79072.HPX
  • %HOMEPATH%\BTWHP\1677.KMU
  • %HOMEPATH%\BTWHP\U64779.HXM
  • %HOMEPATH%\BTWHP\15165.MFX
  • %HOMEPATH%\BTWHP\32524.JNV
  • %HOMEPATH%\BTWHP\19000.CNT
  • %HOMEPATH%\BTWHP\I30192.AWN
  • %HOMEPATH%\BTWHP\Q19294.VDY
  • %HOMEPATH%\BTWHP\46899.UOV
  • %HOMEPATH%\BTWHP\Q74911.EVU
  • %HOMEPATH%\BTWHP\63951.EEV
  • %HOMEPATH%\BTWHP\52063.OIG
  • %HOMEPATH%\BTWHP\E57579.GUL
  • %HOMEPATH%\BTWHP\F4338.FXS
  • %HOMEPATH%\BTWHP\K14164.FIJ
  • %HOMEPATH%\BTWHP\83721.PMU
  • %HOMEPATH%\BTWHP\56640.FZL
  • %HOMEPATH%\BTWHP\24254.CSI
  • %HOMEPATH%\BTWHP\31724.QVR
  • %HOMEPATH%\BTWHP\Z43374.GXO
  • %HOMEPATH%\BTWHP\N87509.AUU
  • %HOMEPATH%\BTWHP\Y95058.POK
  • %HOMEPATH%\BTWHP\89797.KHZ
  • %HOMEPATH%\BTWHP\W2560.IIS
  • %HOMEPATH%\BTWHP\43922.OSI
  • %HOMEPATH%\BTWHP\81033.HGZ
  • %HOMEPATH%\BTWHP\98600.OSM
  • %HOMEPATH%\BTWHP\E87107.OEE
  • %HOMEPATH%\BTWHP\89100.MWA
  • %HOMEPATH%\BTWHP\U15228.EKL
  • %HOMEPATH%\BTWHP\X33746.GEV
  • %HOMEPATH%\BTWHP\W37800.XGP
  • %HOMEPATH%\BTWHP\I68088.EMS
  • %HOMEPATH%\BTWHP\O5696.PYR
  • %HOMEPATH%\BTWHP\M93057.TQV
  • %HOMEPATH%\BTWHP\W86290.LOJ
  • %HOMEPATH%\BTWHP\S46121.RSK
  • %HOMEPATH%\BTWHP\15646.PQG
  • %HOMEPATH%\BTWHP\23954.ALC
  • %HOMEPATH%\BTWHP\J43961.UMX
  • %HOMEPATH%\BTWHP\Q29339.ACM
  • %HOMEPATH%\BTWHP\U65189.LHX
  • %HOMEPATH%\BTWHP\O54448.UHE
  • %HOMEPATH%\BTWHP\97566.FOX
  • %HOMEPATH%\BTWHP\S94630.BQJ
  • %HOMEPATH%\BTWHP\16976.LNR
  • %HOMEPATH%\BTWHP\45414.CES
  • %HOMEPATH%\BTWHP\97848.XVL
  • %HOMEPATH%\BTWHP\54927.ZAP
  • %HOMEPATH%\BTWHP\12704.TTT
  • %HOMEPATH%\BTWHP\23385.OZV
  • %HOMEPATH%\BTWHP\U90004.LBJ
  • %HOMEPATH%\BTWHP\34058.EZK
  • %HOMEPATH%\BTWHP\7677.YBP
  • %HOMEPATH%\BTWHP\55371.SEO
  • %HOMEPATH%\BTWHP\31524.YXH
  • %HOMEPATH%\BTWHP\O97497.USH
  • %HOMEPATH%\BTWHP\40810.BET
  • %HOMEPATH%\BTWHP\47262.GVI
  • %HOMEPATH%\BTWHP\R76751.XXX
  • %HOMEPATH%\BTWHP\31862.LGN
  • %HOMEPATH%\BTWHP\64493.MDO
  • %HOMEPATH%\BTWHP\71013.ZGE
  • %HOMEPATH%\BTWHP\94813.NHM
  • %HOMEPATH%\BTWHP\H33401.NTA
  • %HOMEPATH%\BTWHP\66518.BQI
  • %HOMEPATH%\BTWHP\T41198.RTR
  • %HOMEPATH%\BTWHP\74452.JLM
  • %HOMEPATH%\BTWHP\T38261.ACF
  • %HOMEPATH%\BTWHP\78932.OWL
  • %HOMEPATH%\BTWHP\51906.VME
  • %HOMEPATH%\BTWHP\Y91772.PVW
  • %HOMEPATH%\BTWHP\52154.FXY
  • %HOMEPATH%\BTWHP\46667.BCU
  • %HOMEPATH%\BTWHP\61938.ZVD
  • %HOMEPATH%\BTWHP\19739.MUF
  • %HOMEPATH%\BTWHP\19774.LPX
  • %HOMEPATH%\BTWHP\W46992.MSL
  • %HOMEPATH%\BTWHP\F97601.EAP
  • %HOMEPATH%\BTWHP\Y13613.UQV
  • %HOMEPATH%\BTWHP\32733.RTS
  • %HOMEPATH%\BTWHP\64642.IPU
  • %HOMEPATH%\BTWHP\R93136.MIZ
  • %HOMEPATH%\BTWHP\P14909.SIU
  • %HOMEPATH%\BTWHP\N73821.CPP
  • %HOMEPATH%\BTWHP\K15499.MGF
  • %HOMEPATH%\BTWHP\Y96632.UYO
  • %HOMEPATH%\BTWHP\B54171.ATK
  • %HOMEPATH%\BTWHP\I54517.AOQ
  • %HOMEPATH%\BTWHP\83848.GSC
  • %HOMEPATH%\BTWHP\73768.RAH
  • %HOMEPATH%\BTWHP\J26481.RHH
  • %HOMEPATH%\BTWHP\E47900.JXU
  • %HOMEPATH%\BTWHP\7611.PJW
  • %HOMEPATH%\BTWHP\81644.ZCL
  • %HOMEPATH%\BTWHP\P1926.ODQ
  • %HOMEPATH%\BTWHP\X28327.VXU
  • %HOMEPATH%\BTWHP\K96509.EYW
  • %HOMEPATH%\BTWHP\A70951.OCI
  • %HOMEPATH%\BTWHP\O49563.MJG
  • %HOMEPATH%\BTWHP\69220.VGE
  • %HOMEPATH%\BTWHP\G37545.IKA
  • %HOMEPATH%\BTWHP\67934.YMM
  • %HOMEPATH%\BTWHP\71982.ELV
  • %HOMEPATH%\BTWHP\11889.NIX
  • %HOMEPATH%\BTWHP\O67950.FHW
  • %HOMEPATH%\BTWHP\A9551.VUW
  • %HOMEPATH%\BTWHP\P59409.OEI
  • %HOMEPATH%\BTWHP\P56473.UCX
  • %HOMEPATH%\BTWHP\I34197.AXB
  • %HOMEPATH%\BTWHP\L79992.DQU
  • %HOMEPATH%\BTWHP\H26218.XKR
  • %HOMEPATH%\BTWHP\C55501.WBE
  • %HOMEPATH%\BTWHP\P28185.FTC
  • %HOMEPATH%\BTWHP\L14302.JXK
  • %HOMEPATH%\BTWHP\K16794.SNF
  • %HOMEPATH%\BTWHP\X30287.KCM
  • %HOMEPATH%\BTWHP\85122.PKU
  • %HOMEPATH%\BTWHP\U27159.WIT
  • %HOMEPATH%\BTWHP\C51987.VEC
  • %HOMEPATH%\BTWHP\W71861.XFI
  • %HOMEPATH%\BTWHP\83411.JJQ
  • %HOMEPATH%\BTWHP\G11162.STO
  • %HOMEPATH%\BTWHP\85242.XJX
  • %HOMEPATH%\BTWHP\95505.NQO
  • %HOMEPATH%\BTWHP\68423.ASP
  • %HOMEPATH%\BTWHP\F13915.WNL
  • %HOMEPATH%\BTWHP\54300.WWJ
  • %HOMEPATH%\BTWHP\B6811.DHI
  • %HOMEPATH%\BTWHP\A84692.KMU
  • %HOMEPATH%\BTWHP\12655.RLX
  • %HOMEPATH%\BTWHP\H84675.FVT
  • %HOMEPATH%\BTWHP\36060.JYL
  • %HOMEPATH%\BTWHP\E3985.IKI
  • %HOMEPATH%\BTWHP\U18680.ZAE
  • %HOMEPATH%\BTWHP\K73496.UQE
  • %HOMEPATH%\BTWHP\68681.TDM
  • %HOMEPATH%\BTWHP\A31598.JRX
  • %HOMEPATH%\BTWHP\30242.YHX
  • %HOMEPATH%\BTWHP\48204.WTH
  • %HOMEPATH%\BTWHP\67150.NIU
  • %HOMEPATH%\BTWHP\17063.CTP
  • %HOMEPATH%\BTWHP\67509.XPI
  • %HOMEPATH%\BTWHP\9502.LPJ
  • %HOMEPATH%\BTWHP\S51566.THN
  • %HOMEPATH%\BTWHP\58350.EZY
  • %HOMEPATH%\BTWHP\K13728.XWA
  • %HOMEPATH%\BTWHP\28386.UWH
  • %HOMEPATH%\BTWHP\B32073.SED
  • %HOMEPATH%\BTWHP\C13877.SAA
  • %HOMEPATH%\BTWHP\P43979.WJZ
  • %HOMEPATH%\BTWHP\Q46228.LWN
  • %HOMEPATH%\BTWHP\S59954.OCD
  • %HOMEPATH%\BTWHP\23806.SOT
  • %HOMEPATH%\BTWHP\3440.GBT
  • %HOMEPATH%\BTWHP\31041.GZL
  • %HOMEPATH%\BTWHP\60819.FVL
  • %HOMEPATH%\BTWHP\W4732.EBT
  • %HOMEPATH%\BTWHP\39557.XCB
  • %HOMEPATH%\BTWHP\98575.MRD
  • %HOMEPATH%\BTWHP\D55146.MLB
  • %HOMEPATH%\BTWHP\P58141.PHY
  • %HOMEPATH%\BTWHP\76719.MIL
  • %HOMEPATH%\BTWHP\70066.CDK
  • %HOMEPATH%\BTWHP\16174.IPJ
  • %HOMEPATH%\BTWHP\19590.CUF
  • %HOMEPATH%\BTWHP\N67019.QIE
  • %HOMEPATH%\BTWHP\12629.WZA
  • %HOMEPATH%\BTWHP\F99999.KCG
  • %HOMEPATH%\BTWHP\K47769.QBQ
  • %HOMEPATH%\BTWHP\O5812.XGM
  • %HOMEPATH%\BTWHP\J37042.VPQ
  • %HOMEPATH%\BTWHP\J12454.ROU
  • %HOMEPATH%\BTWHP\19721.FAI
  • %HOMEPATH%\BTWHP\36637.VXZ
  • %HOMEPATH%\BTWHP\T92044.OQF
  • %HOMEPATH%\BTWHP\I85072.PWD
  • %HOMEPATH%\BTWHP\N54628.RZP
  • %HOMEPATH%\BTWHP\J21585.THA
  • %HOMEPATH%\BTWHP\7999.RDX
  • %HOMEPATH%\BTWHP\29139.DWX
  • %HOMEPATH%\BTWHP\23967.KWN
  • %HOMEPATH%\BTWHP\E23293.HCF
  • %HOMEPATH%\BTWHP\P37508.XXR
  • %HOMEPATH%\BTWHP\E45210.AMT
  • %HOMEPATH%\BTWHP\X64098.EIF
  • %HOMEPATH%\BTWHP\X38269.GII
  • %HOMEPATH%\BTWHP\59587.JUQ
  • %HOMEPATH%\BTWHP\F57791.BTM
  • %HOMEPATH%\BTWHP\98215.RPB
  • %HOMEPATH%\BTWHP\A94872.NYT
  • %HOMEPATH%\BTWHP\I4181.CRJ
  • %HOMEPATH%\BTWHP\1687.GRO
  • %HOMEPATH%\BTWHP\Z45970.LBN
  • %HOMEPATH%\BTWHP\59241.FPT
  • %HOMEPATH%\BTWHP\10345.QID
  • %HOMEPATH%\BTWHP\58205.FID
  • %HOMEPATH%\BTWHP\45055.CHD
  • %HOMEPATH%\BTWHP\40484.QLO
  • %HOMEPATH%\BTWHP\E47719.CMO
  • %HOMEPATH%\BTWHP\99072.APN
  • %HOMEPATH%\BTWHP\M44165.UYE
  • %HOMEPATH%\BTWHP\97796.LRD
  • %HOMEPATH%\BTWHP\93901.SZT
  • %HOMEPATH%\BTWHP\N99389.PNJ
  • %HOMEPATH%\BTWHP\D18340.ZKG
  • %HOMEPATH%\BTWHP\29424.ZYV
  • %HOMEPATH%\BTWHP\H12357.UPZ
  • %HOMEPATH%\BTWHP\44035.RWO
  • %HOMEPATH%\BTWHP\P20612.FHG
  • %HOMEPATH%\BTWHP\89021.HQX
  • %HOMEPATH%\BTWHP\34144.TFX
  • %HOMEPATH%\BTWHP\85082.KTM
  • %HOMEPATH%\BTWHP\P34066.OFY
  • %HOMEPATH%\BTWHP\4445.VFF
  • %HOMEPATH%\BTWHP\X85187.INI
  • %HOMEPATH%\BTWHP\82930.KLU
  • %HOMEPATH%\BTWHP\51380.NBK
  • %HOMEPATH%\BTWHP\78797.WJR
  • %HOMEPATH%\BTWHP\Q66797.OSN
  • %HOMEPATH%\BTWHP\35774.VVZ
  • %HOMEPATH%\BTWHP\44482.MJH
  • %HOMEPATH%\BTWHP\I40027.EMC
  • %HOMEPATH%\BTWHP\26270.MUM
  • %HOMEPATH%\BTWHP\32968.ZBV
  • %HOMEPATH%\BTWHP\17217.PET
  • %HOMEPATH%\BTWHP\P46755.VQA
  • %HOMEPATH%\BTWHP\47847.DFQ
  • %HOMEPATH%\BTWHP\23729.VIJ
  • %HOMEPATH%\BTWHP\87271.UOR
  • %HOMEPATH%\BTWHP\K31782.QRS
  • %HOMEPATH%\BTWHP\98181.TRL
  • %HOMEPATH%\BTWHP\4730.LTO
  • %HOMEPATH%\BTWHP\K47847.WNT
  • %HOMEPATH%\BTWHP\3674.UNX
  • %HOMEPATH%\BTWHP\Y45719.AVF
  • %HOMEPATH%\BTWHP\H61964.DAY
  • %HOMEPATH%\BTWHP\R76028.BLO
  • %HOMEPATH%\BTWHP\R87112.VJO
  • %HOMEPATH%\BTWHP\95023.CLZ
  • %HOMEPATH%\BTWHP\A25766.XOS
  • %HOMEPATH%\BTWHP\7323.QUR
  • %HOMEPATH%\BTWHP\24330.KQX
  • %HOMEPATH%\BTWHP\12180.RWU
  • %HOMEPATH%\BTWHP\Z28802.NFQ
  • %HOMEPATH%\BTWHP\9228.WEJ
  • %HOMEPATH%\BTWHP\40563.ZYJ
  • %HOMEPATH%\BTWHP\45527.CMB
  • %HOMEPATH%\BTWHP\31363.CHX
  • %HOMEPATH%\BTWHP\75453.WTV
  • %HOMEPATH%\BTWHP\3117.WKM
  • %HOMEPATH%\BTWHP\K2795.KKA
  • %HOMEPATH%\BTWHP\A9179.HQY
  • %HOMEPATH%\BTWHP\21921.FVQ
  • %HOMEPATH%\BTWHP\37097.QXG
  • %HOMEPATH%\BTWHP\5627.LRP
  • %HOMEPATH%\BTWHP\65015.KOF
  • %HOMEPATH%\BTWHP\X39003.CZN
  • %HOMEPATH%\BTWHP\U15136.NFL
  • %HOMEPATH%\BTWHP\B9285.JGS
  • %HOMEPATH%\BTWHP\R11186.HPM
  • %HOMEPATH%\BTWHP\B52442.QJQ
  • %HOMEPATH%\BTWHP\N78988.KFX
  • %HOMEPATH%\BTWHP\Y70289.APF
  • %HOMEPATH%\BTWHP\H12571.XKL
  • %HOMEPATH%\BTWHP\F25777.LPS
  • %HOMEPATH%\BTWHP\F54033.WLU
  • %HOMEPATH%\BTWHP\R47334.KHY
  • %HOMEPATH%\BTWHP\J15927.INC
  • %HOMEPATH%\BTWHP\9782.NWS
  • %HOMEPATH%\BTWHP\28992.EPP
  • %HOMEPATH%\BTWHP\X47830.LAX
  • %HOMEPATH%\BTWHP\Z66324.JIR
  • %HOMEPATH%\BTWHP\V33893.BEM
  • %HOMEPATH%\BTWHP\38251.FFA
  • %HOMEPATH%\BTWHP\85355.JTQ
  • %HOMEPATH%\BTWHP\O95598.RKB
  • %HOMEPATH%\BTWHP\43774.HMB
  • %HOMEPATH%\BTWHP\P94411.SZK
  • %HOMEPATH%\BTWHP\R66710.MNR
  • %HOMEPATH%\BTWHP\T78041.FST
  • %HOMEPATH%\BTWHP\94509.SQK
  • %HOMEPATH%\BTWHP\winrar.vbs
  • %HOMEPATH%\BTWHP\settings.ini
  • %HOMEPATH%\BTWHP\J67695.ZVI
  • %HOMEPATH%\BTWHP\79918.MEF
  • %HOMEPATH%\BTWHP\797374.dat
  • %HOMEPATH%\BTWHP\934072.CUQ
  • %HOMEPATH%\BTWHP\KOIBT.exe
  • %HOMEPATH%\BTWHP\685272.dat
  • %HOMEPATH%\BTWHP\X63191.DOB
  • %HOMEPATH%\BTWHP\K34538.VOC
  • %HOMEPATH%\BTWHP\2244.MUQ
  • %HOMEPATH%\BTWHP\A8883.LBT
  • %HOMEPATH%\BTWHP\47980.DIG
  • %HOMEPATH%\BTWHP\M39887.PJG
  • %HOMEPATH%\BTWHP\A10914.PIM
  • %HOMEPATH%\BTWHP\W61882.LWV
  • %HOMEPATH%\BTWHP\81010.OIE
  • %HOMEPATH%\BTWHP\69687.BBT
  • %HOMEPATH%\BTWHP\K3587.YPE
  • %HOMEPATH%\BTWHP\Y98953.EFS
  • %HOMEPATH%\BTWHP\37848.WIZ
  • %HOMEPATH%\BTWHP\61090.BHQ
  • %HOMEPATH%\BTWHP\98584.EWP
  • %HOMEPATH%\BTWHP\E21828.NSC
  • %HOMEPATH%\BTWHP\H6425.GBT
  • %HOMEPATH%\BTWHP\F6031.AFN
  • %HOMEPATH%\BTWHP\14676.FWH
  • %HOMEPATH%\BTWHP\I25193.BRP
  • %HOMEPATH%\BTWHP\99443.EGM
  • %HOMEPATH%\BTWHP\Z63980.DEK
  • %HOMEPATH%\BTWHP\73583.IHO
  • %HOMEPATH%\BTWHP\W49432.SSH
  • %HOMEPATH%\BTWHP\84490.ADU
  • %HOMEPATH%\BTWHP\R46165.XFF
  • %HOMEPATH%\BTWHP\A27715.RVE
  • %HOMEPATH%\BTWHP\67875.WID
  • %HOMEPATH%\BTWHP\29446.BWY
  • %HOMEPATH%\BTWHP\E71526.ICS
  • %HOMEPATH%\BTWHP\12811.OGA
  • %HOMEPATH%\BTWHP\X55610.AOU
  • %HOMEPATH%\BTWHP\2578.TFW
  • %HOMEPATH%\BTWHP\68809.WRE
  • %HOMEPATH%\BTWHP\89164.VZU
  • %HOMEPATH%\BTWHP\W79247.LYQ
  • %HOMEPATH%\BTWHP\Z55206.MCW
  • %HOMEPATH%\BTWHP\Z92410.WZA
  • %HOMEPATH%\BTWHP\B46866.YLX
  • %HOMEPATH%\BTWHP\T85530.QHE
  • %HOMEPATH%\BTWHP\93243.JTS
  • %HOMEPATH%\BTWHP\4707.CDU
  • %HOMEPATH%\BTWHP\X57706.ZCB
  • %HOMEPATH%\BTWHP\W71277.TRY
  • %HOMEPATH%\BTWHP\63060.OPY
  • %HOMEPATH%\BTWHP\F29486.RDU
  • %HOMEPATH%\BTWHP\77294.SKW
  • %HOMEPATH%\BTWHP\C94540.VPD
  • %HOMEPATH%\BTWHP\P27695.FGM
  • %HOMEPATH%\BTWHP\P24300.QNM
  • %HOMEPATH%\BTWHP\89147.MTH
  • %HOMEPATH%\BTWHP\11022.JLQ
  • %HOMEPATH%\BTWHP\76423.JMN
  • %HOMEPATH%\BTWHP\B46985.EAT
  • %HOMEPATH%\BTWHP\Y14562.ZZH
  • %HOMEPATH%\BTWHP\37449.UJZ
  • %HOMEPATH%\BTWHP\63396.CGH
  • %HOMEPATH%\BTWHP\53724.WPP
  • %HOMEPATH%\BTWHP\A31283.ZEH
  • %HOMEPATH%\BTWHP\B12558.IEV
  • %HOMEPATH%\BTWHP\91231.XHC
  • %HOMEPATH%\BTWHP\R76905.CAE
  • %HOMEPATH%\BTWHP\90765.RQI
  • %HOMEPATH%\BTWHP\Z83473.PKC
  • %HOMEPATH%\BTWHP\46390.XHI
  • %HOMEPATH%\BTWHP\6273.BLM
  • %HOMEPATH%\BTWHP\H72436.LMF
  • %HOMEPATH%\BTWHP\V74991.AHT
  • %HOMEPATH%\BTWHP\79102.JLD
  • %HOMEPATH%\BTWHP\X67089.TTG
  • %HOMEPATH%\BTWHP\30740.WKS
  • %HOMEPATH%\BTWHP\73199.DEB
  • %HOMEPATH%\BTWHP\A95144.UGA
  • %HOMEPATH%\BTWHP\5340.XOJ
  • %HOMEPATH%\BTWHP\23642.HNC
  • %HOMEPATH%\BTWHP\O50580.MRJ
  • %HOMEPATH%\BTWHP\58728.FWQ
  • %HOMEPATH%\BTWHP\K97869.DWF
  • %HOMEPATH%\BTWHP\74199.WWH
  • %HOMEPATH%\BTWHP\B85652.RWZ
  • %HOMEPATH%\BTWHP\12862.YTR
  • %HOMEPATH%\BTWHP\1117.UJW
  • %HOMEPATH%\BTWHP\25403.XTQ
  • %HOMEPATH%\BTWHP\60965.PEM
  • %HOMEPATH%\BTWHP\N6269.JLC
  • %HOMEPATH%\BTWHP\A45506.FLB
  • %HOMEPATH%\BTWHP\M97047.SPP
  • %HOMEPATH%\BTWHP\63781.YUH
  • %HOMEPATH%\BTWHP\M11511.NTE
  • %HOMEPATH%\BTWHP\70328.IDI
  • %HOMEPATH%\BTWHP\F89848.RPR
  • %HOMEPATH%\BTWHP\Z71214.EQE
  • %HOMEPATH%\BTWHP\35521.VUP
  • %HOMEPATH%\BTWHP\75271.UQA
  • %HOMEPATH%\BTWHP\40935.YNK
  • %HOMEPATH%\BTWHP\E30444.HGX
  • %HOMEPATH%\BTWHP\72144.SKI
  • %HOMEPATH%\BTWHP\B94126.NSX
  • %HOMEPATH%\BTWHP\E18622.AWL
  • %HOMEPATH%\BTWHP\3103.XTI
  • %HOMEPATH%\BTWHP\98894.TCJ
  • %HOMEPATH%\BTWHP\67055.ELE
  • %HOMEPATH%\BTWHP\31843.SGY
  • %HOMEPATH%\BTWHP\O46362.BTQ
  • %HOMEPATH%\BTWHP\Q45188.QKB
  • %HOMEPATH%\BTWHP\X36941.VKV
  • %HOMEPATH%\BTWHP\B71178.TKD
  • %HOMEPATH%\BTWHP\87148.NXM
  • %HOMEPATH%\BTWHP\71501.MZJ
  • %HOMEPATH%\BTWHP\32323.LMC
  • %HOMEPATH%\BTWHP\56253.BXI
  • %HOMEPATH%\BTWHP\26500.MTL
  • %HOMEPATH%\BTWHP\A47324.YOV
  • %HOMEPATH%\BTWHP\N23579.XKI
  • %HOMEPATH%\BTWHP\53703.RQV
  • %HOMEPATH%\BTWHP\89316.JHL
  • %HOMEPATH%\BTWHP\9151.KZS
  • %HOMEPATH%\BTWHP\G68404.KUC
  • %HOMEPATH%\BTWHP\B34678.TWG
  • %HOMEPATH%\BTWHP\21482.IVI
  • %HOMEPATH%\BTWHP\83220.HWD
  • %HOMEPATH%\BTWHP\F60000.SAI
  • %HOMEPATH%\BTWHP\76470.FNF
  • %HOMEPATH%\BTWHP\45248.DTP
  • %HOMEPATH%\BTWHP\64400.ALN
  • %HOMEPATH%\BTWHP\32045.WNA
  • %HOMEPATH%\BTWHP\F92145.OYO
  • %HOMEPATH%\BTWHP\J77980.LPT
  • %HOMEPATH%\BTWHP\X10598.XFH
  • %HOMEPATH%\BTWHP\Y42925.VLU
  • %HOMEPATH%\BTWHP\P75857.NFC
  • %HOMEPATH%\BTWHP\41835.XUT
  • %HOMEPATH%\BTWHP\8114.JYA
  • %HOMEPATH%\BTWHP\C39853.HTE
  • %HOMEPATH%\BTWHP\F28136.TVM
  • %HOMEPATH%\BTWHP\23218.LPY
  • %HOMEPATH%\BTWHP\69325.ULM
  • %HOMEPATH%\BTWHP\62225.VIM
  • %HOMEPATH%\BTWHP\6409.HQD
  • %HOMEPATH%\BTWHP\20794.YNT
  • %HOMEPATH%\BTWHP\S8018.KCA
  • %HOMEPATH%\BTWHP\80247.IRY
  • %HOMEPATH%\BTWHP\J45346.VYM
  • %HOMEPATH%\BTWHP\F62826.DXQ
  • %HOMEPATH%\BTWHP\59583.MHU
  • %HOMEPATH%\BTWHP\E1753.USH
  • %HOMEPATH%\BTWHP\87850.VOX
  • %HOMEPATH%\BTWHP\71269.CNH
  • %HOMEPATH%\BTWHP\86009.TLT
  • %HOMEPATH%\BTWHP\H64352.TVH
  • %HOMEPATH%\BTWHP\J95708.GRH
  • %HOMEPATH%\BTWHP\M56511.GMJ
  • %HOMEPATH%\BTWHP\K15851.ZXV
  • %HOMEPATH%\BTWHP\X56834.RZV
  • %HOMEPATH%\BTWHP\M22223.RSD
  • %HOMEPATH%\BTWHP\20349.ILE
  • %HOMEPATH%\BTWHP\54933.XVM
  • %HOMEPATH%\BTWHP\R28842.JJZ
  • %HOMEPATH%\BTWHP\80757.JQT
  • %HOMEPATH%\BTWHP\O2617.FPP
  • %HOMEPATH%\BTWHP\59874.VUD
  • %HOMEPATH%\BTWHP\P15333.MXH
  • %HOMEPATH%\BTWHP\H56737.EFQ
  • %HOMEPATH%\BTWHP\95037.FBQ
  • %HOMEPATH%\BTWHP\T95085.WNV
  • %HOMEPATH%\BTWHP\98807.PTV
  • %HOMEPATH%\BTWHP\50110.BKM
  • %HOMEPATH%\BTWHP\90301.KKO
  • %HOMEPATH%\BTWHP\18360.NMG
  • %HOMEPATH%\BTWHP\78915.ZZT
  • %HOMEPATH%\BTWHP\60217.JCZ
  • %HOMEPATH%\BTWHP\X29348.GCF
  • %HOMEPATH%\BTWHP\13835.ZKC
  • %HOMEPATH%\BTWHP\61703.TYE
  • %HOMEPATH%\BTWHP\89454.CGM
  • %HOMEPATH%\BTWHP\55681.RPM
  • %HOMEPATH%\BTWHP\75808.IDB
  • %HOMEPATH%\BTWHP\16348.SZF
  • %HOMEPATH%\BTWHP\T84889.AGH
Удаляет следующие файлы:
  • %HOMEPATH%\BTWHP\TAINROKV.dat
Другое:
Ищет следующие окна:
  • ClassName: '(null)' WindowName: '(null)'
  • ClassName: '(null)' WindowName: 'AKLMW'
  • ClassName: 'EDIT' WindowName: '(null)'
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке