Trojan.PWS.Siggen1.15648

Техническая информация

Вредоносные функции:

Создает и запускает на исполнение:

'%HOMEPATH%\IVXTH\ULERK.exe' MFPNLHBE.dat
'%HOMEPATH%\IVXTH\ULERK.exe' 980761.TBY

Запускает на исполнение:

'%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
'<SYSTEM32>\wscript.exe' "%HOMEPATH%\IVXTH\winrar.vbs" 7080

Внедряет код в

следующие системные процессы:

%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

Завершает или пытается завершить

следующие пользовательские процессы:

ICQ.exe

Ищет ветки реестра, отвечающие за хранение паролей сторонними программами:

[<HKLM>\SOFTWARE\FlashFXP]
[<HKCU>\Software\Google\Google Talk\Accounts]
[<HKCU>\Software\Ghisler\Total Commander]
[<HKLM>\Software\Ghisler\Total Commander]
[<HKCU>\Software\FTPWare\CoreFTP\Sites]
[<HKCU>\Software\Martin Prikryl\WinSCP 2\Sessions]
[<HKCU>\Software\Far2\Plugins\FTP\Hosts]
[<HKCU>\Software\Far\Plugins\FTP\Hosts]

Изменения в файловой системе:

Создает следующие файлы:

%HOMEPATH%\IVXTH\X30443.MWD
%HOMEPATH%\IVXTH\R6394.KTT
%HOMEPATH%\IVXTH\71825.FOF
%HOMEPATH%\IVXTH\Y76017.JWZ
%HOMEPATH%\IVXTH\D14232.DDR
%HOMEPATH%\IVXTH\M74587.PJH
%HOMEPATH%\IVXTH\V46606.SWU
%HOMEPATH%\IVXTH\74838.RRF
%HOMEPATH%\IVXTH\Z70017.WWB
%HOMEPATH%\IVXTH\I62910.EVL
%HOMEPATH%\IVXTH\25573.FTY
%HOMEPATH%\IVXTH\77886.URK
%HOMEPATH%\IVXTH\40130.ITQ
%HOMEPATH%\IVXTH\41967.LLN
%HOMEPATH%\IVXTH\26250.ATU
%HOMEPATH%\IVXTH\H82503.BLM
%HOMEPATH%\IVXTH\Q60707.OBC
%HOMEPATH%\IVXTH\T92081.CQR
%HOMEPATH%\IVXTH\48318.FHU
%HOMEPATH%\IVXTH\O87100.NMC
%HOMEPATH%\IVXTH\K43964.BKZ
%HOMEPATH%\IVXTH\80952.VCN
%HOMEPATH%\IVXTH\51185.XFR
%HOMEPATH%\IVXTH\X60660.KGF
%HOMEPATH%\IVXTH\M72360.GCL
%HOMEPATH%\IVXTH\53667.OXZ
%HOMEPATH%\IVXTH\N8997.ESP
%HOMEPATH%\IVXTH\N2675.UGN
%HOMEPATH%\IVXTH\2153.JFK
%HOMEPATH%\IVXTH\28268.DEJ
%HOMEPATH%\IVXTH\16704.FRL
%HOMEPATH%\IVXTH\7566.UGJ
%HOMEPATH%\IVXTH\75896.EOO
%HOMEPATH%\IVXTH\T11860.KAI
%HOMEPATH%\IVXTH\55578.SIQ
%HOMEPATH%\IVXTH\67132.QUF
%HOMEPATH%\IVXTH\B80691.HUU
%HOMEPATH%\IVXTH\F46675.FYB
%HOMEPATH%\IVXTH\6962.VJB
%HOMEPATH%\IVXTH\89730.NPJ
%HOMEPATH%\IVXTH\64245.TUM
%HOMEPATH%\IVXTH\F61322.JVG
%HOMEPATH%\IVXTH\71911.AGC
%HOMEPATH%\IVXTH\51132.XYI
%HOMEPATH%\IVXTH\I52529.LDK
%HOMEPATH%\IVXTH\50384.UJH
%HOMEPATH%\IVXTH\C53632.NFF
%HOMEPATH%\IVXTH\94717.UZJ
%HOMEPATH%\IVXTH\C10086.PKD
%HOMEPATH%\IVXTH\V28780.QKC
%HOMEPATH%\IVXTH\X99795.MCN
%HOMEPATH%\IVXTH\N59452.UGW
%HOMEPATH%\IVXTH\71382.JAP
%HOMEPATH%\IVXTH\J20769.TTU
%HOMEPATH%\IVXTH\45764.YZP
%HOMEPATH%\IVXTH\S73581.OYS
%HOMEPATH%\IVXTH\O88896.OYP
%HOMEPATH%\IVXTH\54383.VQV
%HOMEPATH%\IVXTH\C64060.QXS
%HOMEPATH%\IVXTH\87321.ACD
%HOMEPATH%\IVXTH\K56794.DPV
%HOMEPATH%\IVXTH\G77534.CIQ
%HOMEPATH%\IVXTH\10578.FJL
%HOMEPATH%\IVXTH\W47124.CKI
%HOMEPATH%\IVXTH\X11231.OXF
%HOMEPATH%\IVXTH\V37984.EZU
%HOMEPATH%\IVXTH\40962.TLC
%HOMEPATH%\IVXTH\P10640.WBY
%HOMEPATH%\IVXTH\C16460.TYH
%HOMEPATH%\IVXTH\F73689.XCY
%HOMEPATH%\IVXTH\40986.RAH
%HOMEPATH%\IVXTH\13175.RWX
%HOMEPATH%\IVXTH\53755.LPA
%HOMEPATH%\IVXTH\B15663.MXX
%HOMEPATH%\IVXTH\90987.MYY
%HOMEPATH%\IVXTH\C69269.HJN
%HOMEPATH%\IVXTH\62642.YMH
%HOMEPATH%\IVXTH\36854.GST
%HOMEPATH%\IVXTH\Y60957.GHC
%HOMEPATH%\IVXTH\I51116.BPV
%HOMEPATH%\IVXTH\93990.VLP
%HOMEPATH%\IVXTH\51993.GUW
%HOMEPATH%\IVXTH\3609.YSS
%HOMEPATH%\IVXTH\D98063.HAS
%HOMEPATH%\IVXTH\74974.VYI
%HOMEPATH%\IVXTH\D92700.JRQ
%HOMEPATH%\IVXTH\B33552.XXO
%HOMEPATH%\IVXTH\41350.XXJ
%HOMEPATH%\IVXTH\76328.BWA
%HOMEPATH%\IVXTH\S27232.CKE
%HOMEPATH%\IVXTH\Z42854.TZN
%HOMEPATH%\IVXTH\X95007.FBE
%HOMEPATH%\IVXTH\I47907.LNU
%HOMEPATH%\IVXTH\90005.TIM
%HOMEPATH%\IVXTH\35655.CHS
%HOMEPATH%\IVXTH\88582.XZT
%HOMEPATH%\IVXTH\U6172.TLZ
%HOMEPATH%\IVXTH\25120.UTC
%HOMEPATH%\IVXTH\U30708.YUV
%HOMEPATH%\IVXTH\B15119.QUJ
%HOMEPATH%\IVXTH\43360.WTJ
%HOMEPATH%\IVXTH\N89833.ICT
%HOMEPATH%\IVXTH\59623.BCZ
%HOMEPATH%\IVXTH\45428.UUE
%HOMEPATH%\IVXTH\19076.QUY
%HOMEPATH%\IVXTH\46561.NNN
%HOMEPATH%\IVXTH\I80648.ZHU
%HOMEPATH%\IVXTH\X77981.MXN
%HOMEPATH%\IVXTH\84652.JAC
%HOMEPATH%\IVXTH\19725.JNA
%HOMEPATH%\IVXTH\82293.IOU
%HOMEPATH%\IVXTH\A30341.LND
%HOMEPATH%\IVXTH\T97671.ETI
%HOMEPATH%\IVXTH\J99870.KHI
%HOMEPATH%\IVXTH\J96423.ONA
%HOMEPATH%\IVXTH\U32270.CDO
%HOMEPATH%\IVXTH\22242.NZK
%HOMEPATH%\IVXTH\29518.FFH
%HOMEPATH%\IVXTH\10001.VBE
%HOMEPATH%\IVXTH\J49376.KPR
%HOMEPATH%\IVXTH\38069.MQS
%HOMEPATH%\IVXTH\B83713.YUK
%HOMEPATH%\IVXTH\U70463.TXM
%HOMEPATH%\IVXTH\10140.FIW
%HOMEPATH%\IVXTH\81618.YAW
%HOMEPATH%\IVXTH\62415.HPR
%HOMEPATH%\IVXTH\91502.SKI
%HOMEPATH%\IVXTH\13528.UJF
%HOMEPATH%\IVXTH\C25731.UWP
%HOMEPATH%\IVXTH\70081.ZJF
%HOMEPATH%\IVXTH\T57102.SQZ
%HOMEPATH%\IVXTH\B44707.GBH
%HOMEPATH%\IVXTH\I61693.EYU
%HOMEPATH%\IVXTH\15071.UOT
%HOMEPATH%\IVXTH\V43066.PIR
%HOMEPATH%\IVXTH\K23846.CUX
%HOMEPATH%\IVXTH\Q92317.QCO
%HOMEPATH%\IVXTH\41886.QKV
%HOMEPATH%\IVXTH\D92841.LXK
%HOMEPATH%\IVXTH\30018.ROH
%HOMEPATH%\IVXTH\17379.UMR
%HOMEPATH%\IVXTH\W35653.XFW
%HOMEPATH%\IVXTH\61490.GGM
%HOMEPATH%\IVXTH\O94546.JQI
%HOMEPATH%\IVXTH\R20781.SVW
%HOMEPATH%\IVXTH\52585.DCV
%HOMEPATH%\IVXTH\26501.TRA
%HOMEPATH%\IVXTH\99322.EVW
%HOMEPATH%\IVXTH\91092.REL
%HOMEPATH%\IVXTH\G32861.FEZ
%HOMEPATH%\IVXTH\Y24063.SJT
%HOMEPATH%\IVXTH\8058.XPX
%HOMEPATH%\IVXTH\R63648.REA
%HOMEPATH%\IVXTH\J23203.KZT
%HOMEPATH%\IVXTH\B45952.UNY
%HOMEPATH%\IVXTH\F54643.EKX
%HOMEPATH%\IVXTH\W33065.TBH
%HOMEPATH%\IVXTH\35883.XVY
%HOMEPATH%\IVXTH\16974.NID
%HOMEPATH%\IVXTH\7453.IKI
%HOMEPATH%\IVXTH\66623.QZK
%HOMEPATH%\IVXTH\I74769.QHO
%HOMEPATH%\IVXTH\I93567.PVF
%HOMEPATH%\IVXTH\A64255.HCP
%HOMEPATH%\IVXTH\T20175.PDC
%HOMEPATH%\IVXTH\51048.CQG
%HOMEPATH%\IVXTH\C67975.XSX
%HOMEPATH%\IVXTH\51998.DWD
%HOMEPATH%\IVXTH\6235.SUN
%HOMEPATH%\IVXTH\78255.EEI
%HOMEPATH%\IVXTH\69421.PEQ
%HOMEPATH%\IVXTH\B83571.NBT
%HOMEPATH%\IVXTH\63924.QLN
%HOMEPATH%\IVXTH\13944.XKX
%HOMEPATH%\IVXTH\50218.NCP
%HOMEPATH%\IVXTH\J23903.BAR
%HOMEPATH%\IVXTH\R49035.IXE
%HOMEPATH%\IVXTH\H16020.NPL
%HOMEPATH%\IVXTH\U49803.YKV
%HOMEPATH%\IVXTH\T66363.BEZ
%HOMEPATH%\IVXTH\68063.UJW
%HOMEPATH%\IVXTH\V34470.RTX
%HOMEPATH%\IVXTH\51543.VPO
%HOMEPATH%\IVXTH\8706.OCA
%HOMEPATH%\IVXTH\8323.AKG
%HOMEPATH%\IVXTH\D57969.XYS
%HOMEPATH%\IVXTH\97774.GSC
%HOMEPATH%\IVXTH\61543.IYZ
%HOMEPATH%\IVXTH\MFPNLHBE.dat
%HOMEPATH%\IVXTH\L66883.SWT
%TEMP%\NO_PWDS_report_23-12-2013_17-03-19-F4D651E80A6E4747C8F28A7D8647D810-EAJC.bin
%TEMP%\report_23-12-2013_17-03-19-F4D651E80A6E4747C8F28A7D8647D810-EAJC.bin
%HOMEPATH%\IVXTH\68103.ERW
%HOMEPATH%\IVXTH\C27172.OES
%HOMEPATH%\IVXTH\79207.YCO
%HOMEPATH%\IVXTH\10223.GJZ
%HOMEPATH%\IVXTH\93523.XBY
%HOMEPATH%\IVXTH\X48715.GOZ
%HOMEPATH%\IVXTH\1747.ZCB
%HOMEPATH%\IVXTH\82745.WQY
%HOMEPATH%\IVXTH\K28399.ZXE
%HOMEPATH%\IVXTH\86247.VLB
%HOMEPATH%\IVXTH\X40495.LPV
%HOMEPATH%\IVXTH\H62243.HRS
%HOMEPATH%\IVXTH\L50262.PPJ
%HOMEPATH%\IVXTH\30176.VFI
%HOMEPATH%\IVXTH\26568.PQS
%HOMEPATH%\IVXTH\N19448.TII
%HOMEPATH%\IVXTH\51817.ZSQ
%HOMEPATH%\IVXTH\N19612.RDK
%HOMEPATH%\IVXTH\P25154.EDP
%HOMEPATH%\IVXTH\K47196.EIA
%HOMEPATH%\IVXTH\Q81778.IJC
%HOMEPATH%\IVXTH\B48523.YXN
%HOMEPATH%\IVXTH\I70364.ADN
%HOMEPATH%\IVXTH\L57018.EVI
%HOMEPATH%\IVXTH\44606.FVP
%HOMEPATH%\IVXTH\X11436.ODW
%HOMEPATH%\IVXTH\B72833.UNW
%HOMEPATH%\IVXTH\F28958.NOD
%HOMEPATH%\IVXTH\J86743.BWW
%HOMEPATH%\IVXTH\15171.ECR
%HOMEPATH%\IVXTH\O56613.BFF
%HOMEPATH%\IVXTH\42491.UAW
%HOMEPATH%\IVXTH\I53485.LVK
%HOMEPATH%\IVXTH\K64183.USK
%HOMEPATH%\IVXTH\X9116.SCN
%HOMEPATH%\IVXTH\W63419.RUP
%HOMEPATH%\IVXTH\V76629.NDX
%HOMEPATH%\IVXTH\74880.IHL
%HOMEPATH%\IVXTH\47500.NGS
%HOMEPATH%\IVXTH\Y20701.LGX
%HOMEPATH%\IVXTH\16618.KKI
%HOMEPATH%\IVXTH\V6788.PUQ
%HOMEPATH%\IVXTH\97953.LIG
%HOMEPATH%\IVXTH\24402.RLI
%HOMEPATH%\IVXTH\75183.HQN
%HOMEPATH%\IVXTH\99026.TCS
%HOMEPATH%\IVXTH\1402.YZL
%HOMEPATH%\IVXTH\8038.CMG
%HOMEPATH%\IVXTH\U92930.WHO
%HOMEPATH%\IVXTH\47944.ATO
%HOMEPATH%\IVXTH\84470.JNC
%HOMEPATH%\IVXTH\H52850.CSN
%HOMEPATH%\IVXTH\U2266.ZJH
%HOMEPATH%\IVXTH\21191.RSA
%HOMEPATH%\IVXTH\P20331.QSJ
%HOMEPATH%\IVXTH\G15331.LNG
%HOMEPATH%\IVXTH\R93867.MDI
%HOMEPATH%\IVXTH\U18987.JRJ
%HOMEPATH%\IVXTH\52214.RXX
%HOMEPATH%\IVXTH\12088.WOV
%HOMEPATH%\IVXTH\7522.CMX
%HOMEPATH%\IVXTH\M5667.RMM
%HOMEPATH%\IVXTH\61490.LRV
%HOMEPATH%\IVXTH\81066.SUQ
%HOMEPATH%\IVXTH\L9404.RSV
%HOMEPATH%\IVXTH\H56487.PIL
%HOMEPATH%\IVXTH\2156.IJU
%HOMEPATH%\IVXTH\5655.QRK
%HOMEPATH%\IVXTH\A99119.OHD
%HOMEPATH%\IVXTH\U84387.EUQ
%HOMEPATH%\IVXTH\P6781.XZW
%HOMEPATH%\IVXTH\D37875.XNS
%HOMEPATH%\IVXTH\98744.OFC
%HOMEPATH%\IVXTH\73733.KUH
%HOMEPATH%\IVXTH\74817.ZJO
%HOMEPATH%\IVXTH\U39576.BEY
%HOMEPATH%\IVXTH\68910.GER
%HOMEPATH%\IVXTH\X34704.IMN
%HOMEPATH%\IVXTH\R59852.YSN
%HOMEPATH%\IVXTH\48933.ILF
%HOMEPATH%\IVXTH\X34601.LFN
%HOMEPATH%\IVXTH\81393.GRH
%HOMEPATH%\IVXTH\I22139.KAH
%HOMEPATH%\IVXTH\35797.BXR
%HOMEPATH%\IVXTH\U23375.YEA
%HOMEPATH%\IVXTH\D47553.BWM
%HOMEPATH%\IVXTH\U81351.CCY
%HOMEPATH%\IVXTH\K65515.SZP
%HOMEPATH%\IVXTH\48235.MHW
%HOMEPATH%\IVXTH\51852.PFM
%HOMEPATH%\IVXTH\59760.RVQ
%HOMEPATH%\IVXTH\P57818.VXW
%HOMEPATH%\IVXTH\I34910.OUL
%HOMEPATH%\IVXTH\12711.LSC
%HOMEPATH%\IVXTH\W7229.SDE
%HOMEPATH%\IVXTH\R99537.DCC
%HOMEPATH%\IVXTH\63234.GUF
%HOMEPATH%\IVXTH\V23964.XJC
%HOMEPATH%\IVXTH\42171.TSG
%HOMEPATH%\IVXTH\84008.YDY
%HOMEPATH%\IVXTH\89615.LME
%HOMEPATH%\IVXTH\57164.EMY
%HOMEPATH%\IVXTH\N1975.EJU
%HOMEPATH%\IVXTH\80862.ZZV
%HOMEPATH%\IVXTH\59494.ELL
%HOMEPATH%\IVXTH\97471.CQU
%HOMEPATH%\IVXTH\Y82881.RAN
%HOMEPATH%\IVXTH\C97489.SBS
%HOMEPATH%\IVXTH\63475.JXA
%HOMEPATH%\IVXTH\D72331.CVV
%HOMEPATH%\IVXTH\K63519.DHS
%HOMEPATH%\IVXTH\L39562.AOV
%HOMEPATH%\IVXTH\O59647.IPD
%HOMEPATH%\IVXTH\3274.JRT
%HOMEPATH%\IVXTH\G44879.MHE
%HOMEPATH%\IVXTH\86913.XAK
%HOMEPATH%\IVXTH\89321.YRA
%HOMEPATH%\IVXTH\52056.KCP
%HOMEPATH%\IVXTH\9903.PRS
%HOMEPATH%\IVXTH\O73850.AYJ
%HOMEPATH%\IVXTH\X73898.DVV
%HOMEPATH%\IVXTH\H9715.RPG
%HOMEPATH%\IVXTH\X12218.GRM
%HOMEPATH%\IVXTH\30853.EPB
%HOMEPATH%\IVXTH\30849.SIX
%HOMEPATH%\IVXTH\J25583.IAD
%HOMEPATH%\IVXTH\Z53921.MNS
%HOMEPATH%\IVXTH\78434.WTX
%HOMEPATH%\IVXTH\F4907.WOC
%HOMEPATH%\IVXTH\5278.BUT
%HOMEPATH%\IVXTH\E79493.LHS
%HOMEPATH%\IVXTH\98419.TCZ
%HOMEPATH%\IVXTH\72682.UWH
%HOMEPATH%\IVXTH\36313.VQN
%HOMEPATH%\IVXTH\J67595.YXE
%HOMEPATH%\IVXTH\H93004.KRY
%HOMEPATH%\IVXTH\95624.AEO
%HOMEPATH%\IVXTH\M97089.WDP
%HOMEPATH%\IVXTH\V1242.BCZ
%HOMEPATH%\IVXTH\V83019.ALP
%HOMEPATH%\IVXTH\14948.ZNQ
%HOMEPATH%\IVXTH\15968.JTV
%HOMEPATH%\IVXTH\47756.WBF
%HOMEPATH%\IVXTH\A97347.GVJ
%HOMEPATH%\IVXTH\I81985.XBA
%HOMEPATH%\IVXTH\E34049.CPD
%HOMEPATH%\IVXTH\3277.WMB
%HOMEPATH%\IVXTH\E55042.BDK
%HOMEPATH%\IVXTH\E25633.ALA
%HOMEPATH%\IVXTH\R49458.LDG
%HOMEPATH%\IVXTH\47896.OZF
%HOMEPATH%\IVXTH\L99782.AWE
%HOMEPATH%\IVXTH\V24470.DXC
%HOMEPATH%\IVXTH\40496.YUG
%HOMEPATH%\IVXTH\73720.LMM
%HOMEPATH%\IVXTH\5629.ZTT
%HOMEPATH%\IVXTH\N26165.FCJ
%HOMEPATH%\IVXTH\91714.OYE
%HOMEPATH%\IVXTH\77386.AUF
%HOMEPATH%\IVXTH\Z20837.DZQ
%HOMEPATH%\IVXTH\H70191.JEG
%HOMEPATH%\IVXTH\99967.JBG
%HOMEPATH%\IVXTH\Y47429.BQO
%HOMEPATH%\IVXTH\D60158.LDJ
%HOMEPATH%\IVXTH\97751.GEN
%HOMEPATH%\IVXTH\42411.ZSQ
%HOMEPATH%\IVXTH\37315.YLS
%HOMEPATH%\IVXTH\U20287.UXC
%HOMEPATH%\IVXTH\84871.TJB
%HOMEPATH%\IVXTH\8481.MFX
%HOMEPATH%\IVXTH\97649.URS
%HOMEPATH%\IVXTH\48101.TWL
%HOMEPATH%\IVXTH\53849.BUA
%HOMEPATH%\IVXTH\S16877.UBU
%HOMEPATH%\IVXTH\G67400.IAG
%HOMEPATH%\IVXTH\63236.OSY
%HOMEPATH%\IVXTH\81928.UDM
%HOMEPATH%\IVXTH\69024.XDR
%HOMEPATH%\IVXTH\N12380.QDW
%HOMEPATH%\IVXTH\H74812.LDI
%HOMEPATH%\IVXTH\91234.LKO
%HOMEPATH%\IVXTH\F75446.OGG
%HOMEPATH%\IVXTH\34598.KMY
%HOMEPATH%\IVXTH\D12228.GNT
%HOMEPATH%\IVXTH\winrar.vbs
%HOMEPATH%\IVXTH\settings.ini
%HOMEPATH%\IVXTH\98445.LES
%HOMEPATH%\IVXTH\R18131.OQN
%HOMEPATH%\IVXTH\171254.dat
%HOMEPATH%\IVXTH\980761.TBY
%HOMEPATH%\IVXTH\ULERK.exe
%HOMEPATH%\IVXTH\300651.dat
%HOMEPATH%\IVXTH\49720.PTU
%HOMEPATH%\IVXTH\Y70580.TTI
%HOMEPATH%\IVXTH\T17397.WGE
%HOMEPATH%\IVXTH\T2602.HKN
%HOMEPATH%\IVXTH\L41310.EWM
%HOMEPATH%\IVXTH\T35212.ITB
%HOMEPATH%\IVXTH\8850.RRK
%HOMEPATH%\IVXTH\V12868.ROO
%HOMEPATH%\IVXTH\S2899.VOS
%HOMEPATH%\IVXTH\J6554.MQY
%HOMEPATH%\IVXTH\A5864.IBZ
%HOMEPATH%\IVXTH\L42747.FRV
%HOMEPATH%\IVXTH\49105.WIM
%HOMEPATH%\IVXTH\F24058.HUC
%HOMEPATH%\IVXTH\7489.FVK
%HOMEPATH%\IVXTH\41781.VPP
%HOMEPATH%\IVXTH\E70666.POW
%HOMEPATH%\IVXTH\92608.MZS
%HOMEPATH%\IVXTH\C93106.KMN
%HOMEPATH%\IVXTH\56416.ZGS
%HOMEPATH%\IVXTH\A45327.FCV
%HOMEPATH%\IVXTH\B28095.SNR
%HOMEPATH%\IVXTH\Z63635.IWD
%HOMEPATH%\IVXTH\C52513.MGP
%HOMEPATH%\IVXTH\I13541.INX
%HOMEPATH%\IVXTH\20938.LLT
%HOMEPATH%\IVXTH\V70615.OJY
%HOMEPATH%\IVXTH\K83854.CDG
%HOMEPATH%\IVXTH\81965.RGB
%HOMEPATH%\IVXTH\D18366.RLP
%HOMEPATH%\IVXTH\M86676.KYY
%HOMEPATH%\IVXTH\H47515.QEJ
%HOMEPATH%\IVXTH\5292.DAT
%HOMEPATH%\IVXTH\21313.ETM
%HOMEPATH%\IVXTH\B19132.MVK
%HOMEPATH%\IVXTH\C39555.LGZ
%HOMEPATH%\IVXTH\K6182.STE
%HOMEPATH%\IVXTH\V58773.KTX
%HOMEPATH%\IVXTH\S87794.LYV
%HOMEPATH%\IVXTH\7784.HGU
%HOMEPATH%\IVXTH\R32147.JAM
%HOMEPATH%\IVXTH\J41969.HRG
%HOMEPATH%\IVXTH\L94580.ZCV
%HOMEPATH%\IVXTH\35001.EYY
%HOMEPATH%\IVXTH\F62478.GPK
%HOMEPATH%\IVXTH\70844.ULW
%HOMEPATH%\IVXTH\7016.EMI
%HOMEPATH%\IVXTH\E85237.TNE
%HOMEPATH%\IVXTH\50653.KCQ
%HOMEPATH%\IVXTH\1541.WXJ
%HOMEPATH%\IVXTH\70283.RHY
%HOMEPATH%\IVXTH\31623.KWC
%HOMEPATH%\IVXTH\A76033.DFN
%HOMEPATH%\IVXTH\49660.UAA
%HOMEPATH%\IVXTH\Q94291.GVI
%HOMEPATH%\IVXTH\46866.FGA
%HOMEPATH%\IVXTH\V16870.SWJ
%HOMEPATH%\IVXTH\30259.AAZ
%HOMEPATH%\IVXTH\56178.ESQ
%HOMEPATH%\IVXTH\64663.YQE
%HOMEPATH%\IVXTH\67379.SNZ
%HOMEPATH%\IVXTH\B62470.QKO
%HOMEPATH%\IVXTH\11951.HFQ
%HOMEPATH%\IVXTH\Q24502.OYP
%HOMEPATH%\IVXTH\E96739.ZJA
%HOMEPATH%\IVXTH\Z84653.FQO
%HOMEPATH%\IVXTH\Y50459.LZB
%HOMEPATH%\IVXTH\90308.FTQ
%HOMEPATH%\IVXTH\W89911.UHM
%HOMEPATH%\IVXTH\24946.ONW
%HOMEPATH%\IVXTH\5671.PWX
%HOMEPATH%\IVXTH\42735.XQJ
%HOMEPATH%\IVXTH\45836.WSP
%HOMEPATH%\IVXTH\K38311.FAP
%HOMEPATH%\IVXTH\K87718.AKE
%HOMEPATH%\IVXTH\60578.TIC
%HOMEPATH%\IVXTH\65466.TMK
%HOMEPATH%\IVXTH\68965.LSK
%HOMEPATH%\IVXTH\33288.GCI
%HOMEPATH%\IVXTH\19969.ULY
%HOMEPATH%\IVXTH\S61699.ZQW
%HOMEPATH%\IVXTH\34672.FTL
%HOMEPATH%\IVXTH\S53250.BOC
%HOMEPATH%\IVXTH\37080.GPJ
%HOMEPATH%\IVXTH\N39637.LUV
%HOMEPATH%\IVXTH\J98318.HLH
%HOMEPATH%\IVXTH\G28085.MIQ
%HOMEPATH%\IVXTH\49731.KNZ
%HOMEPATH%\IVXTH\41051.LGB
%HOMEPATH%\IVXTH\80589.RDX
%HOMEPATH%\IVXTH\8133.SDF
%HOMEPATH%\IVXTH\20137.CYW
%HOMEPATH%\IVXTH\71435.GQL
%HOMEPATH%\IVXTH\Q88438.ROF
%HOMEPATH%\IVXTH\A24303.NSA
%HOMEPATH%\IVXTH\34261.BDV
%HOMEPATH%\IVXTH\53634.RKV
%HOMEPATH%\IVXTH\41673.NNL
%HOMEPATH%\IVXTH\T19557.KHX
%HOMEPATH%\IVXTH\88391.QPU
%HOMEPATH%\IVXTH\W11538.FNY
%HOMEPATH%\IVXTH\52518.TGV
%HOMEPATH%\IVXTH\C91963.LSG
%HOMEPATH%\IVXTH\T52308.KTK
%HOMEPATH%\IVXTH\U68361.LTS
%HOMEPATH%\IVXTH\O61255.TOB
%HOMEPATH%\IVXTH\D62775.EWQ
%HOMEPATH%\IVXTH\6469.CWG
%HOMEPATH%\IVXTH\W62731.KFS
%HOMEPATH%\IVXTH\H51528.QEP
%HOMEPATH%\IVXTH\E35800.RZA
%HOMEPATH%\IVXTH\A27559.FSU
%HOMEPATH%\IVXTH\Z78885.REL
%HOMEPATH%\IVXTH\F55245.TSX
%HOMEPATH%\IVXTH\E39854.EXX
%HOMEPATH%\IVXTH\4876.DUR
%HOMEPATH%\IVXTH\B90120.TYP
%HOMEPATH%\IVXTH\C93719.RNW
%HOMEPATH%\IVXTH\96341.FSB
%HOMEPATH%\IVXTH\67724.ETU
%HOMEPATH%\IVXTH\W7642.STN
%HOMEPATH%\IVXTH\R43296.GGM
%HOMEPATH%\IVXTH\1486.HBB
%HOMEPATH%\IVXTH\73369.AID
%HOMEPATH%\IVXTH\S96819.VSU
%HOMEPATH%\IVXTH\C19993.RDK
%HOMEPATH%\IVXTH\U96629.BXD
%HOMEPATH%\IVXTH\F1666.IVI
%HOMEPATH%\IVXTH\34539.NDM
%HOMEPATH%\IVXTH\85747.VXC
%HOMEPATH%\IVXTH\X7164.SVZ
%HOMEPATH%\IVXTH\H46812.UOY
%HOMEPATH%\IVXTH\47972.FUP
%HOMEPATH%\IVXTH\F53396.JLZ
%HOMEPATH%\IVXTH\Y67592.AAA
%HOMEPATH%\IVXTH\59660.DYJ
%HOMEPATH%\IVXTH\H87232.KOD
%HOMEPATH%\IVXTH\G92411.WSC
%HOMEPATH%\IVXTH\B61510.WHI
%HOMEPATH%\IVXTH\40682.DED
%HOMEPATH%\IVXTH\71194.TUA
%HOMEPATH%\IVXTH\24371.LOI
%HOMEPATH%\IVXTH\W27261.JHJ
%HOMEPATH%\IVXTH\40836.TCI
%HOMEPATH%\IVXTH\7244.PFR
%HOMEPATH%\IVXTH\75014.PQD
%HOMEPATH%\IVXTH\D55505.ZRQ
%HOMEPATH%\IVXTH\V41623.REB
%HOMEPATH%\IVXTH\S81140.YAE
%HOMEPATH%\IVXTH\X84046.HMQ
%HOMEPATH%\IVXTH\37196.YJC
%HOMEPATH%\IVXTH\L13421.OQI
%HOMEPATH%\IVXTH\B79347.NLN
%HOMEPATH%\IVXTH\8333.CBB
%HOMEPATH%\IVXTH\69601.XVA
%HOMEPATH%\IVXTH\37341.HBC
%HOMEPATH%\IVXTH\B7027.CZL
%HOMEPATH%\IVXTH\L14287.DET
%HOMEPATH%\IVXTH\7410.JTM
%HOMEPATH%\IVXTH\91486.MUT
%HOMEPATH%\IVXTH\Y26231.CTS
%HOMEPATH%\IVXTH\D44332.FAV
%HOMEPATH%\IVXTH\P45944.NLM
%HOMEPATH%\IVXTH\8817.BBH
%HOMEPATH%\IVXTH\E72600.XIG
%HOMEPATH%\IVXTH\J12151.LCL
%HOMEPATH%\IVXTH\6596.DOH
%HOMEPATH%\IVXTH\57869.HDG
%HOMEPATH%\IVXTH\R77294.WNK
%HOMEPATH%\IVXTH\60497.EPI
%HOMEPATH%\IVXTH\T54111.HGE
%HOMEPATH%\IVXTH\G38798.DKS
%HOMEPATH%\IVXTH\D95622.ZTV
%HOMEPATH%\IVXTH\Y96105.NPR
%HOMEPATH%\IVXTH\C64969.TTK
%HOMEPATH%\IVXTH\97363.WPV
%HOMEPATH%\IVXTH\78600.PBK
%HOMEPATH%\IVXTH\V91676.ISG
%HOMEPATH%\IVXTH\K64420.XBC
%HOMEPATH%\IVXTH\K13669.FQA
%HOMEPATH%\IVXTH\D98649.TEO
%HOMEPATH%\IVXTH\20086.MGF
%HOMEPATH%\IVXTH\23574.DJI
%HOMEPATH%\IVXTH\69320.BLO
%HOMEPATH%\IVXTH\86722.HFJ
%HOMEPATH%\IVXTH\1133.BFR
%HOMEPATH%\IVXTH\65147.DBN
%HOMEPATH%\IVXTH\55930.FOT

Присваивает атрибут 'скрытый' для следующих файлов:

%HOMEPATH%\IVXTH\V46606.SWU
%HOMEPATH%\IVXTH\74838.RRF
%HOMEPATH%\IVXTH\X30443.MWD
%HOMEPATH%\IVXTH\R6394.KTT
%HOMEPATH%\IVXTH\T92081.CQR
%HOMEPATH%\IVXTH\28268.DEJ
%HOMEPATH%\IVXTH\D14232.DDR
%HOMEPATH%\IVXTH\M74587.PJH
%HOMEPATH%\IVXTH\Y76017.JWZ
%HOMEPATH%\IVXTH\H82503.BLM
%HOMEPATH%\IVXTH\Q60707.OBC
%HOMEPATH%\IVXTH\I62910.EVL
%HOMEPATH%\IVXTH\25573.FTY
%HOMEPATH%\IVXTH\Z70017.WWB
%HOMEPATH%\IVXTH\71825.FOF
%HOMEPATH%\IVXTH\41967.LLN
%HOMEPATH%\IVXTH\26250.ATU
%HOMEPATH%\IVXTH\16704.FRL
%HOMEPATH%\IVXTH\M72360.GCL
%HOMEPATH%\IVXTH\53667.OXZ
%HOMEPATH%\IVXTH\48318.FHU
%HOMEPATH%\IVXTH\O87100.NMC
%HOMEPATH%\IVXTH\13175.RWX
%HOMEPATH%\IVXTH\J49376.KPR
%HOMEPATH%\IVXTH\51185.XFR
%HOMEPATH%\IVXTH\X60660.KGF
%HOMEPATH%\IVXTH\80952.VCN
%HOMEPATH%\IVXTH\T11860.KAI
%HOMEPATH%\IVXTH\55578.SIQ
%HOMEPATH%\IVXTH\N2675.UGN
%HOMEPATH%\IVXTH\2153.JFK
%HOMEPATH%\IVXTH\N8997.ESP
%HOMEPATH%\IVXTH\K43964.BKZ
%HOMEPATH%\IVXTH\7566.UGJ
%HOMEPATH%\IVXTH\75896.EOO
%HOMEPATH%\IVXTH\40130.ITQ
%HOMEPATH%\IVXTH\71911.AGC
%HOMEPATH%\IVXTH\51132.XYI
%HOMEPATH%\IVXTH\B80691.HUU
%HOMEPATH%\IVXTH\F46675.FYB
%HOMEPATH%\IVXTH\J20769.TTU
%HOMEPATH%\IVXTH\V37984.EZU
%HOMEPATH%\IVXTH\64245.TUM
%HOMEPATH%\IVXTH\F61322.JVG
%HOMEPATH%\IVXTH\89730.NPJ
%HOMEPATH%\IVXTH\N59452.UGW
%HOMEPATH%\IVXTH\71382.JAP
%HOMEPATH%\IVXTH\50384.UJH
%HOMEPATH%\IVXTH\C53632.NFF
%HOMEPATH%\IVXTH\I52529.LDK
%HOMEPATH%\IVXTH\6962.VJB
%HOMEPATH%\IVXTH\V28780.QKC
%HOMEPATH%\IVXTH\X99795.MCN
%HOMEPATH%\IVXTH\40962.TLC
%HOMEPATH%\IVXTH\K56794.DPV
%HOMEPATH%\IVXTH\G77534.CIQ
%HOMEPATH%\IVXTH\45764.YZP
%HOMEPATH%\IVXTH\S73581.OYS
%HOMEPATH%\IVXTH\67132.QUF
%HOMEPATH%\IVXTH\77886.URK
%HOMEPATH%\IVXTH\C64060.QXS
%HOMEPATH%\IVXTH\87321.ACD
%HOMEPATH%\IVXTH\54383.VQV
%HOMEPATH%\IVXTH\F73689.XCY
%HOMEPATH%\IVXTH\40986.RAH
%HOMEPATH%\IVXTH\W47124.CKI
%HOMEPATH%\IVXTH\X11231.OXF
%HOMEPATH%\IVXTH\10578.FJL
%HOMEPATH%\IVXTH\O88896.OYP
%HOMEPATH%\IVXTH\P10640.WBY
%HOMEPATH%\IVXTH\C16460.TYH
%HOMEPATH%\IVXTH\B15663.MXX
%HOMEPATH%\IVXTH\Y60957.GHC
%HOMEPATH%\IVXTH\C69269.HJN
%HOMEPATH%\IVXTH\53755.LPA
%HOMEPATH%\IVXTH\36854.GST
%HOMEPATH%\IVXTH\S27232.CKE
%HOMEPATH%\IVXTH\I51116.BPV
%HOMEPATH%\IVXTH\62642.YMH
%HOMEPATH%\IVXTH\90987.MYY
%HOMEPATH%\IVXTH\3609.YSS
%HOMEPATH%\IVXTH\41350.XXJ
%HOMEPATH%\IVXTH\74974.VYI
%HOMEPATH%\IVXTH\51993.GUW
%HOMEPATH%\IVXTH\B33552.XXO
%HOMEPATH%\IVXTH\93990.VLP
%HOMEPATH%\IVXTH\76328.BWA
%HOMEPATH%\IVXTH\D92700.JRQ
%HOMEPATH%\IVXTH\N89833.ICT
%HOMEPATH%\IVXTH\X95007.FBE
%HOMEPATH%\IVXTH\U6172.TLZ
%HOMEPATH%\IVXTH\90005.TIM
%HOMEPATH%\IVXTH\Z42854.TZN
%HOMEPATH%\IVXTH\88582.XZT
%HOMEPATH%\IVXTH\71435.GQL
%HOMEPATH%\IVXTH\25120.UTC
%HOMEPATH%\IVXTH\35655.CHS
%HOMEPATH%\IVXTH\I47907.LNU
%HOMEPATH%\IVXTH\43360.WTJ
%HOMEPATH%\IVXTH\46561.NNN
%HOMEPATH%\IVXTH\59623.BCZ
%HOMEPATH%\IVXTH\B15119.QUJ
%HOMEPATH%\IVXTH\19076.QUY
%HOMEPATH%\IVXTH\U30708.YUV
%HOMEPATH%\IVXTH\I80648.ZHU
%HOMEPATH%\IVXTH\45428.UUE
%HOMEPATH%\IVXTH\D98063.HAS
%HOMEPATH%\IVXTH\19725.JNA
%HOMEPATH%\IVXTH\J96423.ONA
%HOMEPATH%\IVXTH\A30341.LND
%HOMEPATH%\IVXTH\84652.JAC
%HOMEPATH%\IVXTH\J99870.KHI
%HOMEPATH%\IVXTH\62415.HPR
%HOMEPATH%\IVXTH\U32270.CDO
%HOMEPATH%\IVXTH\T97671.ETI
%HOMEPATH%\IVXTH\82293.IOU
%HOMEPATH%\IVXTH\10001.VBE
%HOMEPATH%\IVXTH\10140.FIW
%HOMEPATH%\IVXTH\38069.MQS
%HOMEPATH%\IVXTH\29518.FFH
%HOMEPATH%\IVXTH\U70463.TXM
%HOMEPATH%\IVXTH\22242.NZK
%HOMEPATH%\IVXTH\81618.YAW
%HOMEPATH%\IVXTH\B83713.YUK
%HOMEPATH%\IVXTH\41886.QKV
%HOMEPATH%\IVXTH\13528.UJF
%HOMEPATH%\IVXTH\I61693.EYU
%HOMEPATH%\IVXTH\70081.ZJF
%HOMEPATH%\IVXTH\91502.SKI
%HOMEPATH%\IVXTH\B44707.GBH
%HOMEPATH%\IVXTH\X77981.MXN
%HOMEPATH%\IVXTH\15071.UOT
%HOMEPATH%\IVXTH\T57102.SQZ
%HOMEPATH%\IVXTH\C25731.UWP
%HOMEPATH%\IVXTH\Q92317.QCO
%HOMEPATH%\IVXTH\W35653.XFW
%HOMEPATH%\IVXTH\D92841.LXK
%HOMEPATH%\IVXTH\K23846.CUX
%HOMEPATH%\IVXTH\17379.UMR
%HOMEPATH%\IVXTH\V43066.PIR
%HOMEPATH%\IVXTH\61490.GGM
%HOMEPATH%\IVXTH\30018.ROH
%HOMEPATH%\IVXTH\Y24063.SJT
%HOMEPATH%\IVXTH\99322.EVW
%HOMEPATH%\IVXTH\R20781.SVW
%HOMEPATH%\IVXTH\G32861.FEZ
%HOMEPATH%\IVXTH\63924.QLN
%HOMEPATH%\IVXTH\13944.XKX
%HOMEPATH%\IVXTH\91092.REL
%HOMEPATH%\IVXTH\66623.QZK
%HOMEPATH%\IVXTH\O94546.JQI
%HOMEPATH%\IVXTH\7453.IKI
%HOMEPATH%\IVXTH\W33065.TBH
%HOMEPATH%\IVXTH\J23203.KZT
%HOMEPATH%\IVXTH\16974.NID
%HOMEPATH%\IVXTH\52585.DCV
%HOMEPATH%\IVXTH\26501.TRA
%HOMEPATH%\IVXTH\35883.XVY
%HOMEPATH%\IVXTH\8058.XPX
%HOMEPATH%\IVXTH\69421.PEQ
%HOMEPATH%\IVXTH\6235.SUN
%HOMEPATH%\IVXTH\51048.CQG
%HOMEPATH%\IVXTH\I93567.PVF
%HOMEPATH%\IVXTH\51998.DWD
%HOMEPATH%\IVXTH\P6781.XZW
%HOMEPATH%\IVXTH\D37875.XNS
%HOMEPATH%\IVXTH\C67975.XSX
%HOMEPATH%\IVXTH\I70364.ADN
%HOMEPATH%\IVXTH\I74769.QHO
%HOMEPATH%\IVXTH\H16020.NPL
%HOMEPATH%\IVXTH\50218.NCP
%HOMEPATH%\IVXTH\B83571.NBT
%HOMEPATH%\IVXTH\R49035.IXE
%HOMEPATH%\IVXTH\A64255.HCP
%HOMEPATH%\IVXTH\T20175.PDC
%HOMEPATH%\IVXTH\J23903.BAR
%HOMEPATH%\IVXTH\78255.EEI
%HOMEPATH%\IVXTH\R63648.REA
%HOMEPATH%\IVXTH\97774.GSC
%HOMEPATH%\IVXTH\8706.OCA
%HOMEPATH%\IVXTH\68063.UJW
%HOMEPATH%\IVXTH\D57969.XYS
%HOMEPATH%\IVXTH\51817.ZSQ
%HOMEPATH%\IVXTH\N19612.RDK
%HOMEPATH%\IVXTH\8323.AKG
%HOMEPATH%\IVXTH\93523.XBY
%HOMEPATH%\IVXTH\T66363.BEZ
%HOMEPATH%\IVXTH\10223.GJZ
%HOMEPATH%\IVXTH\68103.ERW
%HOMEPATH%\IVXTH\L66883.SWT
%HOMEPATH%\IVXTH\79207.YCO
%HOMEPATH%\IVXTH\V34470.RTX
%HOMEPATH%\IVXTH\51543.VPO
%HOMEPATH%\IVXTH\C27172.OES
%HOMEPATH%\IVXTH\61543.IYZ
%HOMEPATH%\IVXTH\26568.PQS
%HOMEPATH%\IVXTH\L50262.PPJ
%HOMEPATH%\IVXTH\86247.VLB
%HOMEPATH%\IVXTH\1747.ZCB
%HOMEPATH%\IVXTH\H62243.HRS
%HOMEPATH%\IVXTH\B45952.UNY
%HOMEPATH%\IVXTH\F54643.EKX
%HOMEPATH%\IVXTH\X40495.LPV
%HOMEPATH%\IVXTH\U49803.YKV
%HOMEPATH%\IVXTH\X48715.GOZ
%HOMEPATH%\IVXTH\B48523.YXN
%HOMEPATH%\IVXTH\P25154.EDP
%HOMEPATH%\IVXTH\N19448.TII
%HOMEPATH%\IVXTH\Q81778.IJC
%HOMEPATH%\IVXTH\82745.WQY
%HOMEPATH%\IVXTH\K28399.ZXE
%HOMEPATH%\IVXTH\K47196.EIA
%HOMEPATH%\IVXTH\30176.VFI
%HOMEPATH%\IVXTH\15171.ECR
%HOMEPATH%\IVXTH\O56613.BFF
%HOMEPATH%\IVXTH\L57018.EVI
%HOMEPATH%\IVXTH\44606.FVP
%HOMEPATH%\IVXTH\16618.KKI
%HOMEPATH%\IVXTH\U2266.ZJH
%HOMEPATH%\IVXTH\F28958.NOD
%HOMEPATH%\IVXTH\J86743.BWW
%HOMEPATH%\IVXTH\B72833.UNW
%HOMEPATH%\IVXTH\47500.NGS
%HOMEPATH%\IVXTH\Y20701.LGX
%HOMEPATH%\IVXTH\I53485.LVK
%HOMEPATH%\IVXTH\K64183.USK
%HOMEPATH%\IVXTH\42491.UAW
%HOMEPATH%\IVXTH\X11436.ODW
%HOMEPATH%\IVXTH\V76629.NDX
%HOMEPATH%\IVXTH\74880.IHL
%HOMEPATH%\IVXTH\21191.RSA
%HOMEPATH%\IVXTH\8038.CMG
%HOMEPATH%\IVXTH\U92930.WHO
%HOMEPATH%\IVXTH\V6788.PUQ
%HOMEPATH%\IVXTH\97953.LIG
%HOMEPATH%\IVXTH\94717.UZJ
%HOMEPATH%\IVXTH\C10086.PKD
%HOMEPATH%\IVXTH\99026.TCS
%HOMEPATH%\IVXTH\1402.YZL
%HOMEPATH%\IVXTH\75183.HQN
%HOMEPATH%\IVXTH\R93867.MDI
%HOMEPATH%\IVXTH\U18987.JRJ
%HOMEPATH%\IVXTH\84470.JNC
%HOMEPATH%\IVXTH\H52850.CSN
%HOMEPATH%\IVXTH\47944.ATO
%HOMEPATH%\IVXTH\24402.RLI
%HOMEPATH%\IVXTH\P20331.QSJ
%HOMEPATH%\IVXTH\G15331.LNG
%HOMEPATH%\IVXTH\W63419.RUP
%HOMEPATH%\IVXTH\H56487.PIL
%HOMEPATH%\IVXTH\2156.IJU
%HOMEPATH%\IVXTH\12088.WOV
%HOMEPATH%\IVXTH\7522.CMX
%HOMEPATH%\IVXTH\68910.GER
%HOMEPATH%\IVXTH\48235.MHW
%HOMEPATH%\IVXTH\81066.SUQ
%HOMEPATH%\IVXTH\L9404.RSV
%HOMEPATH%\IVXTH\61490.LRV
%HOMEPATH%\IVXTH\74817.ZJO
%HOMEPATH%\IVXTH\U39576.BEY
%HOMEPATH%\IVXTH\A99119.OHD
%HOMEPATH%\IVXTH\U84387.EUQ
%HOMEPATH%\IVXTH\5655.QRK
%HOMEPATH%\IVXTH\M5667.RMM
%HOMEPATH%\IVXTH\98744.OFC
%HOMEPATH%\IVXTH\73733.KUH
%HOMEPATH%\IVXTH\51852.PFM
%HOMEPATH%\IVXTH\35797.BXR
%HOMEPATH%\IVXTH\U23375.YEA
%HOMEPATH%\IVXTH\X34704.IMN
%HOMEPATH%\IVXTH\R59852.YSN
%HOMEPATH%\IVXTH\52214.RXX
%HOMEPATH%\IVXTH\X9116.SCN
%HOMEPATH%\IVXTH\81393.GRH
%HOMEPATH%\IVXTH\I22139.KAH
%HOMEPATH%\IVXTH\X34601.LFN
%HOMEPATH%\IVXTH\I34910.OUL
%HOMEPATH%\IVXTH\12711.LSC
%HOMEPATH%\IVXTH\U81351.CCY
%HOMEPATH%\IVXTH\K65515.SZP
%HOMEPATH%\IVXTH\D47553.BWM
%HOMEPATH%\IVXTH\48933.ILF
%HOMEPATH%\IVXTH\59760.RVQ
%HOMEPATH%\IVXTH\P57818.VXW
%HOMEPATH%\IVXTH\Q88438.ROF
%HOMEPATH%\IVXTH\R99537.DCC
%HOMEPATH%\IVXTH\89615.LME
%HOMEPATH%\IVXTH\V23964.XJC
%HOMEPATH%\IVXTH\W7229.SDE
%HOMEPATH%\IVXTH\84008.YDY
%HOMEPATH%\IVXTH\L39562.AOV
%HOMEPATH%\IVXTH\57164.EMY
%HOMEPATH%\IVXTH\42171.TSG
%HOMEPATH%\IVXTH\63234.GUF
%HOMEPATH%\IVXTH\59494.ELL
%HOMEPATH%\IVXTH\D72331.CVV
%HOMEPATH%\IVXTH\Y82881.RAN
%HOMEPATH%\IVXTH\80862.ZZV
%HOMEPATH%\IVXTH\63475.JXA
%HOMEPATH%\IVXTH\N1975.EJU
%HOMEPATH%\IVXTH\K63519.DHS
%HOMEPATH%\IVXTH\C97489.SBS
%HOMEPATH%\IVXTH\30853.EPB
%HOMEPATH%\IVXTH\3274.JRT
%HOMEPATH%\IVXTH\9903.PRS
%HOMEPATH%\IVXTH\86913.XAK
%HOMEPATH%\IVXTH\O59647.IPD
%HOMEPATH%\IVXTH\52056.KCP
%HOMEPATH%\IVXTH\42411.ZSQ
%HOMEPATH%\IVXTH\O73850.AYJ
%HOMEPATH%\IVXTH\89321.YRA
%HOMEPATH%\IVXTH\G44879.MHE
%HOMEPATH%\IVXTH\X12218.GRM
%HOMEPATH%\IVXTH\78434.WTX
%HOMEPATH%\IVXTH\30849.SIX
%HOMEPATH%\IVXTH\H9715.RPG
%HOMEPATH%\IVXTH\Z53921.MNS
%HOMEPATH%\IVXTH\X73898.DVV
%HOMEPATH%\IVXTH\F4907.WOC
%HOMEPATH%\IVXTH\J25583.IAD
%HOMEPATH%\IVXTH\97471.CQU
%HOMEPATH%\IVXTH\98419.TCZ
%HOMEPATH%\IVXTH\95624.AEO
%HOMEPATH%\IVXTH\36313.VQN
%HOMEPATH%\IVXTH\E79493.LHS
%HOMEPATH%\IVXTH\H93004.KRY
%HOMEPATH%\IVXTH\E55042.BDK
%HOMEPATH%\IVXTH\M97089.WDP
%HOMEPATH%\IVXTH\J67595.YXE
%HOMEPATH%\IVXTH\72682.UWH
%HOMEPATH%\IVXTH\14948.ZNQ
%HOMEPATH%\IVXTH\E34049.CPD
%HOMEPATH%\IVXTH\47756.WBF
%HOMEPATH%\IVXTH\V83019.ALP
%HOMEPATH%\IVXTH\I81985.XBA
%HOMEPATH%\IVXTH\V1242.BCZ
%HOMEPATH%\IVXTH\3277.WMB
%HOMEPATH%\IVXTH\A97347.GVJ
%HOMEPATH%\IVXTH\Z20837.DZQ
%HOMEPATH%\IVXTH\R49458.LDG
%HOMEPATH%\IVXTH\73720.LMM
%HOMEPATH%\IVXTH\L99782.AWE
%HOMEPATH%\IVXTH\E25633.ALA
%HOMEPATH%\IVXTH\40496.YUG
%HOMEPATH%\IVXTH\5278.BUT
%HOMEPATH%\IVXTH\5629.ZTT
%HOMEPATH%\IVXTH\V24470.DXC
%HOMEPATH%\IVXTH\47896.OZF
%HOMEPATH%\IVXTH\77386.AUF
%HOMEPATH%\IVXTH\D60158.LDJ
%HOMEPATH%\IVXTH\H70191.JEG
%HOMEPATH%\IVXTH\91714.OYE
%HOMEPATH%\IVXTH\Y47429.BQO
%HOMEPATH%\IVXTH\N26165.FCJ
%HOMEPATH%\IVXTH\97751.GEN
%HOMEPATH%\IVXTH\99967.JBG
%HOMEPATH%\IVXTH\37315.YLS
%HOMEPATH%\IVXTH\U20287.UXC
%HOMEPATH%\IVXTH\84871.TJB
%HOMEPATH%\IVXTH\8481.MFX
%HOMEPATH%\IVXTH\97649.URS
%HOMEPATH%\IVXTH\48101.TWL
%HOMEPATH%\IVXTH\53849.BUA
%HOMEPATH%\IVXTH\S16877.UBU
%HOMEPATH%\IVXTH\G67400.IAG
%HOMEPATH%\IVXTH\63236.OSY
%HOMEPATH%\IVXTH\81928.UDM
%HOMEPATH%\IVXTH\69024.XDR
%HOMEPATH%\IVXTH\N12380.QDW
%HOMEPATH%\IVXTH\H74812.LDI
%HOMEPATH%\IVXTH\91234.LKO
%HOMEPATH%\IVXTH\F75446.OGG
%HOMEPATH%\IVXTH\34598.KMY
%HOMEPATH%\IVXTH\D12228.GNT
%HOMEPATH%\IVXTH\winrar.vbs
%HOMEPATH%\IVXTH\settings.ini
%HOMEPATH%\IVXTH\98445.LES
%HOMEPATH%\IVXTH\R18131.OQN
%HOMEPATH%\IVXTH\171254.dat
%HOMEPATH%\IVXTH\980761.TBY
%HOMEPATH%\IVXTH\ULERK.exe
%HOMEPATH%\IVXTH\300651.dat
%HOMEPATH%\IVXTH\49720.PTU
%HOMEPATH%\IVXTH\Y70580.TTI
%HOMEPATH%\IVXTH\T17397.WGE
%HOMEPATH%\IVXTH\T2602.HKN
%HOMEPATH%\IVXTH\L41310.EWM
%HOMEPATH%\IVXTH\T35212.ITB
%HOMEPATH%\IVXTH\8850.RRK
%HOMEPATH%\IVXTH\V12868.ROO
%HOMEPATH%\IVXTH\S2899.VOS
%HOMEPATH%\IVXTH\J6554.MQY
%HOMEPATH%\IVXTH\A5864.IBZ
%HOMEPATH%\IVXTH\L42747.FRV
%HOMEPATH%\IVXTH\49105.WIM
%HOMEPATH%\IVXTH\F24058.HUC
%HOMEPATH%\IVXTH\7489.FVK
%HOMEPATH%\IVXTH\41781.VPP
%HOMEPATH%\IVXTH\E70666.POW
%HOMEPATH%\IVXTH\92608.MZS
%HOMEPATH%\IVXTH\C93106.KMN
%HOMEPATH%\IVXTH\56416.ZGS
%HOMEPATH%\IVXTH\A45327.FCV
%HOMEPATH%\IVXTH\B28095.SNR
%HOMEPATH%\IVXTH\Z63635.IWD
%HOMEPATH%\IVXTH\C52513.MGP
%HOMEPATH%\IVXTH\I13541.INX
%HOMEPATH%\IVXTH\20938.LLT
%HOMEPATH%\IVXTH\V70615.OJY
%HOMEPATH%\IVXTH\K83854.CDG
%HOMEPATH%\IVXTH\81965.RGB
%HOMEPATH%\IVXTH\D18366.RLP
%HOMEPATH%\IVXTH\M86676.KYY
%HOMEPATH%\IVXTH\H47515.QEJ
%HOMEPATH%\IVXTH\5292.DAT
%HOMEPATH%\IVXTH\21313.ETM
%HOMEPATH%\IVXTH\B19132.MVK
%HOMEPATH%\IVXTH\C39555.LGZ
%HOMEPATH%\IVXTH\K6182.STE
%HOMEPATH%\IVXTH\V58773.KTX
%HOMEPATH%\IVXTH\S87794.LYV
%HOMEPATH%\IVXTH\7784.HGU
%HOMEPATH%\IVXTH\R32147.JAM
%HOMEPATH%\IVXTH\J41969.HRG
%HOMEPATH%\IVXTH\L94580.ZCV
%HOMEPATH%\IVXTH\35001.EYY
%HOMEPATH%\IVXTH\F62478.GPK
%HOMEPATH%\IVXTH\31623.KWC
%HOMEPATH%\IVXTH\A76033.DFN
%HOMEPATH%\IVXTH\70844.ULW
%HOMEPATH%\IVXTH\7016.EMI
%HOMEPATH%\IVXTH\11951.HFQ
%HOMEPATH%\IVXTH\K87718.AKE
%HOMEPATH%\IVXTH\1541.WXJ
%HOMEPATH%\IVXTH\70283.RHY
%HOMEPATH%\IVXTH\50653.KCQ
%HOMEPATH%\IVXTH\67379.SNZ
%HOMEPATH%\IVXTH\B62470.QKO
%HOMEPATH%\IVXTH\Q94291.GVI
%HOMEPATH%\IVXTH\46866.FGA
%HOMEPATH%\IVXTH\49660.UAA
%HOMEPATH%\IVXTH\E85237.TNE
%HOMEPATH%\IVXTH\56178.ESQ
%HOMEPATH%\IVXTH\64663.YQE
%HOMEPATH%\IVXTH\60578.TIC
%HOMEPATH%\IVXTH\24946.ONW
%HOMEPATH%\IVXTH\5671.PWX
%HOMEPATH%\IVXTH\Q24502.OYP
%HOMEPATH%\IVXTH\E96739.ZJA
%HOMEPATH%\IVXTH\B90120.TYP
%HOMEPATH%\IVXTH\E72600.XIG
%HOMEPATH%\IVXTH\90308.FTQ
%HOMEPATH%\IVXTH\W89911.UHM
%HOMEPATH%\IVXTH\Y50459.LZB
%HOMEPATH%\IVXTH\33288.GCI
%HOMEPATH%\IVXTH\19969.ULY
%HOMEPATH%\IVXTH\45836.WSP
%HOMEPATH%\IVXTH\K38311.FAP
%HOMEPATH%\IVXTH\42735.XQJ
%HOMEPATH%\IVXTH\Z84653.FQO
%HOMEPATH%\IVXTH\65466.TMK
%HOMEPATH%\IVXTH\68965.LSK
%HOMEPATH%\IVXTH\30259.AAZ
%HOMEPATH%\IVXTH\49731.KNZ
%HOMEPATH%\IVXTH\41051.LGB
%HOMEPATH%\IVXTH\34672.FTL
%HOMEPATH%\IVXTH\S53250.BOC
%HOMEPATH%\IVXTH\T19557.KHX
%HOMEPATH%\IVXTH\E35800.RZA
%HOMEPATH%\IVXTH\J98318.HLH
%HOMEPATH%\IVXTH\G28085.MIQ
%HOMEPATH%\IVXTH\N39637.LUV
%HOMEPATH%\IVXTH\53634.RKV
%HOMEPATH%\IVXTH\41673.NNL
%HOMEPATH%\IVXTH\8133.SDF
%HOMEPATH%\IVXTH\20137.CYW
%HOMEPATH%\IVXTH\80589.RDX
%HOMEPATH%\IVXTH\37080.GPJ
%HOMEPATH%\IVXTH\A24303.NSA
%HOMEPATH%\IVXTH\34261.BDV
%HOMEPATH%\IVXTH\A27559.FSU
%HOMEPATH%\IVXTH\O61255.TOB
%HOMEPATH%\IVXTH\D62775.EWQ
%HOMEPATH%\IVXTH\88391.QPU
%HOMEPATH%\IVXTH\W11538.FNY
%HOMEPATH%\IVXTH\S61699.ZQW
%HOMEPATH%\IVXTH\V16870.SWJ
%HOMEPATH%\IVXTH\T52308.KTK
%HOMEPATH%\IVXTH\U68361.LTS
%HOMEPATH%\IVXTH\C91963.LSG
%HOMEPATH%\IVXTH\E39854.EXX
%HOMEPATH%\IVXTH\4876.DUR
%HOMEPATH%\IVXTH\W62731.KFS
%HOMEPATH%\IVXTH\H51528.QEP
%HOMEPATH%\IVXTH\6469.CWG
%HOMEPATH%\IVXTH\52518.TGV
%HOMEPATH%\IVXTH\Z78885.REL
%HOMEPATH%\IVXTH\F55245.TSX
%HOMEPATH%\IVXTH\96341.FSB
%HOMEPATH%\IVXTH\73369.AID
%HOMEPATH%\IVXTH\W7642.STN
%HOMEPATH%\IVXTH\C93719.RNW
%HOMEPATH%\IVXTH\1486.HBB
%HOMEPATH%\IVXTH\Y67592.AAA
%HOMEPATH%\IVXTH\S96819.VSU
%HOMEPATH%\IVXTH\R43296.GGM
%HOMEPATH%\IVXTH\67724.ETU
%HOMEPATH%\IVXTH\F1666.IVI
%HOMEPATH%\IVXTH\47972.FUP
%HOMEPATH%\IVXTH\85747.VXC
%HOMEPATH%\IVXTH\U96629.BXD
%HOMEPATH%\IVXTH\H46812.UOY
%HOMEPATH%\IVXTH\C19993.RDK
%HOMEPATH%\IVXTH\F53396.JLZ
%HOMEPATH%\IVXTH\X7164.SVZ
%HOMEPATH%\IVXTH\D55505.ZRQ
%HOMEPATH%\IVXTH\H87232.KOD
%HOMEPATH%\IVXTH\24371.LOI
%HOMEPATH%\IVXTH\B61510.WHI
%HOMEPATH%\IVXTH\59660.DYJ
%HOMEPATH%\IVXTH\71194.TUA
%HOMEPATH%\IVXTH\15968.JTV
%HOMEPATH%\IVXTH\W27261.JHJ
%HOMEPATH%\IVXTH\40682.DED
%HOMEPATH%\IVXTH\G92411.WSC
%HOMEPATH%\IVXTH\75014.PQD
%HOMEPATH%\IVXTH\37196.YJC
%HOMEPATH%\IVXTH\V41623.REB
%HOMEPATH%\IVXTH\7244.PFR
%HOMEPATH%\IVXTH\X84046.HMQ
%HOMEPATH%\IVXTH\40836.TCI
%HOMEPATH%\IVXTH\L13421.OQI
%HOMEPATH%\IVXTH\S81140.YAE
%HOMEPATH%\IVXTH\34539.NDM
%HOMEPATH%\IVXTH\69601.XVA
%HOMEPATH%\IVXTH\91486.MUT
%HOMEPATH%\IVXTH\B7027.CZL
%HOMEPATH%\IVXTH\8333.CBB
%HOMEPATH%\IVXTH\7410.JTM
%HOMEPATH%\IVXTH\T54111.HGE
%HOMEPATH%\IVXTH\Y26231.CTS
%HOMEPATH%\IVXTH\L14287.DET
%HOMEPATH%\IVXTH\37341.HBC
%HOMEPATH%\IVXTH\8817.BBH
%HOMEPATH%\IVXTH\R77294.WNK
%HOMEPATH%\IVXTH\J12151.LCL
%HOMEPATH%\IVXTH\P45944.NLM
%HOMEPATH%\IVXTH\57869.HDG
%HOMEPATH%\IVXTH\D44332.FAV
%HOMEPATH%\IVXTH\60497.EPI
%HOMEPATH%\IVXTH\6596.DOH
%HOMEPATH%\IVXTH\23574.DJI
%HOMEPATH%\IVXTH\D95622.ZTV
%HOMEPATH%\IVXTH\V91676.ISG
%HOMEPATH%\IVXTH\C64969.TTK
%HOMEPATH%\IVXTH\G38798.DKS
%HOMEPATH%\IVXTH\78600.PBK
%HOMEPATH%\IVXTH\B79347.NLN
%HOMEPATH%\IVXTH\K64420.XBC
%HOMEPATH%\IVXTH\97363.WPV
%HOMEPATH%\IVXTH\Y96105.NPR
%HOMEPATH%\IVXTH\20086.MGF
%HOMEPATH%\IVXTH\65147.DBN
%HOMEPATH%\IVXTH\69320.BLO
%HOMEPATH%\IVXTH\D98649.TEO
%HOMEPATH%\IVXTH\1133.BFR
%HOMEPATH%\IVXTH\K13669.FQA
%HOMEPATH%\IVXTH\55930.FOT
%HOMEPATH%\IVXTH\86722.HFJ

Удаляет следующие файлы:

%TEMP%\NO_PWDS_report_23-12-2013_17-03-19-F4D651E80A6E4747C8F28A7D8647D810-EAJC.bin
%HOMEPATH%\IVXTH\MFPNLHBE.dat

Перемещает следующие файлы:

%TEMP%\report_23-12-2013_17-03-19-F4D651E80A6E4747C8F28A7D8647D810-EAJC.bin в %TEMP%\NO_PWDS_report_23-12-2013_17-03-19-F4D651E80A6E4747C8F28A7D8647D810-EAJC.bin

Сетевая активность:

Подключается к:

'pr#####-software.zz.mu':80

TCP:

Запросы HTTP POST:

pr#####-software.zz.mu/php/indexx.php

UDP:

DNS ASK pr#####-software.zz.mu

Другое:

Ищет следующие окна:

ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'EDIT' WindowName: '(null)'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней