Trojan.PWS.Siggen1.28594

Техническая информация

Вредоносные функции:

Создает и запускает на исполнение:

'%HOMEPATH%\LHQWD\WJZME.exe' FCPYMCDI.dat
'%HOMEPATH%\LHQWD\WJZME.exe' 471016.WZB

Запускает на исполнение:

'%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
'<SYSTEM32>\wscript.exe' "%HOMEPATH%\LHQWD\3562.vbs" 6127

Внедряет код в

следующие системные процессы:

%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

Завершает или пытается завершить

следующие пользовательские процессы:

ICQ.exe

Ищет ветки реестра, отвечающие за хранение паролей сторонними программами:

[<HKLM>\SOFTWARE\FlashFXP]
[<HKCU>\Software\Google\Google Talk\Accounts]
[<HKCU>\Software\Ghisler\Total Commander]
[<HKLM>\Software\Ghisler\Total Commander]
[<HKCU>\Software\FTPWare\CoreFTP\Sites]
[<HKCU>\Software\Martin Prikryl\WinSCP 2\Sessions]
[<HKCU>\Software\Far2\Plugins\FTP\Hosts]
[<HKCU>\Software\Far\Plugins\FTP\Hosts]

Ищет следующие окна с целью

обнаружения утилит для анализа:

ClassName: 'PROCMON_WINDOW_CLASS' WindowName: '(null)'

обнаружения различных программ и игр:

ClassName: 'gdkWindowToplevel' WindowName: 'The Wireshark Network Analyzer'

Изменения в файловой системе:

Создает следующие файлы:

%HOMEPATH%\LHQWD\Q70899.HIR
%HOMEPATH%\LHQWD\19886.YQE
%HOMEPATH%\LHQWD\A88918.ZMD
%HOMEPATH%\LHQWD\Z16400.AIZ
%HOMEPATH%\LHQWD\52076.HFQ
%HOMEPATH%\LHQWD\V7147.AKA
%HOMEPATH%\LHQWD\Z83376.LFJ
%HOMEPATH%\LHQWD\38762.NDZ
%HOMEPATH%\LHQWD\K25650.SBK
%HOMEPATH%\LHQWD\P55707.AIP
%HOMEPATH%\LHQWD\69184.GWI
%HOMEPATH%\LHQWD\R53382.DDX
%HOMEPATH%\LHQWD\9554.ZSL
%HOMEPATH%\LHQWD\11429.SDK
%HOMEPATH%\LHQWD\I86999.KBR
%HOMEPATH%\LHQWD\E63918.MJL
%HOMEPATH%\LHQWD\U78695.YKG
%HOMEPATH%\LHQWD\76590.QRG
%HOMEPATH%\LHQWD\70725.NJT
%HOMEPATH%\LHQWD\G55848.MIN
%HOMEPATH%\LHQWD\M3478.QZG
%HOMEPATH%\LHQWD\T65145.RYQ
%HOMEPATH%\LHQWD\56483.DIU
%HOMEPATH%\LHQWD\I10098.YXR
%HOMEPATH%\LHQWD\35213.ZZG
%HOMEPATH%\LHQWD\68234.NDD
%HOMEPATH%\LHQWD\62398.BYY
%HOMEPATH%\LHQWD\O32341.CZC
%HOMEPATH%\LHQWD\S28966.QME
%HOMEPATH%\LHQWD\F93819.XYS
%HOMEPATH%\LHQWD\S46987.RCA
%HOMEPATH%\LHQWD\31570.CQB
%HOMEPATH%\LHQWD\47808.WZH
%HOMEPATH%\LHQWD\R93781.RQQ
%HOMEPATH%\LHQWD\67252.SUN
%HOMEPATH%\LHQWD\72159.ZTV
%HOMEPATH%\LHQWD\Y40691.EGH
%HOMEPATH%\LHQWD\61530.NDU
%HOMEPATH%\LHQWD\U68295.YVB
%HOMEPATH%\LHQWD\12302.YJC
%HOMEPATH%\LHQWD\J76897.LFF
%HOMEPATH%\LHQWD\17449.PGH
%HOMEPATH%\LHQWD\L39396.PEB
%HOMEPATH%\LHQWD\10233.PKR
%HOMEPATH%\LHQWD\V65078.FGT
%HOMEPATH%\LHQWD\2796.OCO
%HOMEPATH%\LHQWD\44587.VKC
%HOMEPATH%\LHQWD\22578.IYK
%HOMEPATH%\LHQWD\56667.OOY
%HOMEPATH%\LHQWD\81688.LSS
%HOMEPATH%\LHQWD\F8061.ALX
%HOMEPATH%\LHQWD\Y46608.UQT
%HOMEPATH%\LHQWD\21196.WWV
%HOMEPATH%\LHQWD\T33730.PNQ
%HOMEPATH%\LHQWD\N79726.OOC
%HOMEPATH%\LHQWD\6490.JPZ
%HOMEPATH%\LHQWD\92239.FBW
%HOMEPATH%\LHQWD\V51957.TPI
%HOMEPATH%\LHQWD\J77883.HPD
%HOMEPATH%\LHQWD\F27847.PWI
%HOMEPATH%\LHQWD\42530.PEK
%HOMEPATH%\LHQWD\11115.VLW
%HOMEPATH%\LHQWD\B47618.NSB
%HOMEPATH%\LHQWD\J55101.BTA
%HOMEPATH%\LHQWD\68977.YGO
%HOMEPATH%\LHQWD\5973.UFZ
%HOMEPATH%\LHQWD\5303.CVE
%HOMEPATH%\LHQWD\Z60097.NGJ
%HOMEPATH%\LHQWD\T21279.YGM
%HOMEPATH%\LHQWD\H65189.JKW
%HOMEPATH%\LHQWD\U38336.YQD
%HOMEPATH%\LHQWD\84557.LQJ
%HOMEPATH%\LHQWD\57543.UKB
%HOMEPATH%\LHQWD\75634.ASR
%HOMEPATH%\LHQWD\70958.KBC
%HOMEPATH%\LHQWD\31391.EJW
%HOMEPATH%\LHQWD\G51834.AMF
%HOMEPATH%\LHQWD\N54643.HXN
%HOMEPATH%\LHQWD\12456.VYR
%HOMEPATH%\LHQWD\A8906.JZY
%HOMEPATH%\LHQWD\K53129.NCZ
%HOMEPATH%\LHQWD\Q91845.ZAM
%HOMEPATH%\LHQWD\8842.TCJ
%HOMEPATH%\LHQWD\C65121.VOT
%HOMEPATH%\LHQWD\95705.ORW
%HOMEPATH%\LHQWD\L10066.HOP
%HOMEPATH%\LHQWD\H91553.YAN
%HOMEPATH%\LHQWD\31073.TSZ
%HOMEPATH%\LHQWD\E30407.UWQ
%HOMEPATH%\LHQWD\60013.DDV
%HOMEPATH%\LHQWD\28683.DEP
%HOMEPATH%\LHQWD\T58069.ENU
%HOMEPATH%\LHQWD\W71821.WNS
%HOMEPATH%\LHQWD\I89672.RCV
%HOMEPATH%\LHQWD\F21356.ANZ
%HOMEPATH%\LHQWD\84361.HCP
%HOMEPATH%\LHQWD\P56524.MPI
%HOMEPATH%\LHQWD\P19135.IKB
%HOMEPATH%\LHQWD\24670.OHQ
%HOMEPATH%\LHQWD\11412.EXR
%HOMEPATH%\LHQWD\G33748.JIP
%HOMEPATH%\LHQWD\O66784.WQO
%HOMEPATH%\LHQWD\45776.PMS
%HOMEPATH%\LHQWD\68927.JOD
%HOMEPATH%\LHQWD\S70548.ZSR
%HOMEPATH%\LHQWD\I12812.PAG
%HOMEPATH%\LHQWD\J52480.MVQ
%HOMEPATH%\LHQWD\79261.SDN
%HOMEPATH%\LHQWD\C7534.BDD
%HOMEPATH%\LHQWD\39779.EXK
%HOMEPATH%\LHQWD\I78052.DCQ
%HOMEPATH%\LHQWD\C92521.LHQ
%HOMEPATH%\LHQWD\M45055.PHC
%HOMEPATH%\LHQWD\33715.SXW
%HOMEPATH%\LHQWD\77860.UWS
%HOMEPATH%\LHQWD\42430.WRD
%HOMEPATH%\LHQWD\5799.RHR
%HOMEPATH%\LHQWD\57053.SBE
%HOMEPATH%\LHQWD\N52030.PWG
%HOMEPATH%\LHQWD\Y70282.YGI
%HOMEPATH%\LHQWD\72230.ILS
%HOMEPATH%\LHQWD\40543.FYX
%HOMEPATH%\LHQWD\C88177.ECH
%HOMEPATH%\LHQWD\I45545.UQE
%HOMEPATH%\LHQWD\Q47230.UGF
%HOMEPATH%\LHQWD\37031.WFQ
%HOMEPATH%\LHQWD\82202.IND
%HOMEPATH%\LHQWD\34443.LQL
%HOMEPATH%\LHQWD\W6124.DKD
%HOMEPATH%\LHQWD\78865.OZZ
%HOMEPATH%\LHQWD\A72807.NAA
%HOMEPATH%\LHQWD\66636.APG
%HOMEPATH%\LHQWD\39629.BHY
%HOMEPATH%\LHQWD\23191.LII
%HOMEPATH%\LHQWD\61099.YUI
%HOMEPATH%\LHQWD\72227.IHW
%HOMEPATH%\LHQWD\Q36957.GHL
%HOMEPATH%\LHQWD\G91025.GEF
%HOMEPATH%\LHQWD\M91702.DUV
%HOMEPATH%\LHQWD\C29359.PEQ
%HOMEPATH%\LHQWD\89454.HUO
%HOMEPATH%\LHQWD\11320.NUO
%HOMEPATH%\LHQWD\F23228.RIK
%HOMEPATH%\LHQWD\94496.YDQ
%HOMEPATH%\LHQWD\N49176.LEH
%HOMEPATH%\LHQWD\54786.DQL
%HOMEPATH%\LHQWD\A22429.FVD
%HOMEPATH%\LHQWD\C44274.ZXB
%HOMEPATH%\LHQWD\O90701.LSL
%HOMEPATH%\LHQWD\73936.GRY
%HOMEPATH%\LHQWD\46995.JCB
%HOMEPATH%\LHQWD\8285.QIP
%HOMEPATH%\LHQWD\89843.XSG
%HOMEPATH%\LHQWD\U62409.JTD
%HOMEPATH%\LHQWD\M58091.XMI
%HOMEPATH%\LHQWD\P12877.EXL
%HOMEPATH%\LHQWD\Q50970.EFZ
%HOMEPATH%\LHQWD\60457.XRZ
%HOMEPATH%\LHQWD\64975.BGX
%HOMEPATH%\LHQWD\B24540.UHX
%HOMEPATH%\LHQWD\92334.UQZ
%HOMEPATH%\LHQWD\P96004.VPM
%HOMEPATH%\LHQWD\23336.RYC
%HOMEPATH%\LHQWD\85644.HOT
%HOMEPATH%\LHQWD\Y22872.SZQ
%HOMEPATH%\LHQWD\J45482.RXU
%HOMEPATH%\LHQWD\M34452.DBP
%HOMEPATH%\LHQWD\83515.VDO
%HOMEPATH%\LHQWD\76819.LFX
%HOMEPATH%\LHQWD\L74136.QXQ
%HOMEPATH%\LHQWD\24820.KRB
%HOMEPATH%\LHQWD\22693.JVZ
%HOMEPATH%\LHQWD\75191.DUT
%HOMEPATH%\LHQWD\J2310.BXY
%HOMEPATH%\LHQWD\91165.TIY
%HOMEPATH%\LHQWD\X88977.AUT
%HOMEPATH%\LHQWD\C76275.ZTZ
%HOMEPATH%\LHQWD\32299.FKS
%HOMEPATH%\LHQWD\4902.DBZ
%HOMEPATH%\LHQWD\P26259.KVZ
%TEMP%\report_22-04-2014_16-12-41-F4D651E80A6E4747C8F28A7D8647D810-JKDH.bin
%HOMEPATH%\LHQWD\FCPYMCDI.dat
%TEMP%\NO_PWDS_report_22-04-2014_16-12-41-F4D651E80A6E4747C8F28A7D8647D810-JKDH.bin
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\whatismyip.akamai[1]
%HOMEPATH%\LHQWD\98082.YRJ
%HOMEPATH%\LHQWD\U94925.JDI
%HOMEPATH%\LHQWD\C2089.VIQ
%HOMEPATH%\LHQWD\V46680.EKC
%HOMEPATH%\LHQWD\K46269.RGL
%HOMEPATH%\LHQWD\U6075.RCF
%HOMEPATH%\LHQWD\26013.FAN
%HOMEPATH%\LHQWD\27824.ISW
%HOMEPATH%\LHQWD\D4736.IAN
%HOMEPATH%\LHQWD\H13507.SHY
%HOMEPATH%\LHQWD\U12674.XCO
%HOMEPATH%\LHQWD\10697.BQF
%HOMEPATH%\LHQWD\F58817.CIF
%HOMEPATH%\LHQWD\1542.MRN
%HOMEPATH%\LHQWD\11705.YIS
%HOMEPATH%\LHQWD\58814.DFV
%HOMEPATH%\LHQWD\B51308.WEI
%HOMEPATH%\LHQWD\22585.FGH
%HOMEPATH%\LHQWD\W20888.OLX
%HOMEPATH%\LHQWD\O21962.QZK
%HOMEPATH%\LHQWD\P26837.WIP
%HOMEPATH%\LHQWD\O84705.IYK
%HOMEPATH%\LHQWD\Q58367.HAK
%HOMEPATH%\LHQWD\W99880.XGT
%HOMEPATH%\LHQWD\28155.ZLU
%HOMEPATH%\LHQWD\41037.NDB
%HOMEPATH%\LHQWD\Y53019.XMR
%HOMEPATH%\LHQWD\L35196.TLH
%HOMEPATH%\LHQWD\A58460.VZZ
%HOMEPATH%\LHQWD\A73047.JQU
%HOMEPATH%\LHQWD\H68734.MTV
%HOMEPATH%\LHQWD\22371.QAZ
%HOMEPATH%\LHQWD\11957.VNW
%HOMEPATH%\LHQWD\68413.UGD
%HOMEPATH%\LHQWD\82396.AVL
%HOMEPATH%\LHQWD\M57525.KIQ
%HOMEPATH%\LHQWD\V66015.QBC
%HOMEPATH%\LHQWD\42062.CJZ
%HOMEPATH%\LHQWD\93758.WEV
%HOMEPATH%\LHQWD\R74360.QVZ
%HOMEPATH%\LHQWD\X20497.QOE
%HOMEPATH%\LHQWD\94364.EVE
%HOMEPATH%\LHQWD\39437.IFN
%HOMEPATH%\LHQWD\19743.DDZ
%HOMEPATH%\LHQWD\26129.VYU
%HOMEPATH%\LHQWD\62817.JUS
%HOMEPATH%\LHQWD\X16736.CMG
%HOMEPATH%\LHQWD\83502.BEF
%HOMEPATH%\LHQWD\Q15628.TBJ
%HOMEPATH%\LHQWD\97166.DNC
%HOMEPATH%\LHQWD\68782.MDI
%HOMEPATH%\LHQWD\83983.GAU
%HOMEPATH%\LHQWD\27443.FDI
%HOMEPATH%\LHQWD\A51268.TOL
%HOMEPATH%\LHQWD\H77439.IAY
%HOMEPATH%\LHQWD\23123.BEO
%HOMEPATH%\LHQWD\22444.TDD
%HOMEPATH%\LHQWD\49252.BTQ
%HOMEPATH%\LHQWD\P98958.KSH
%HOMEPATH%\LHQWD\63462.RJG
%HOMEPATH%\LHQWD\25198.XIP
%HOMEPATH%\LHQWD\50080.FKM
%HOMEPATH%\LHQWD\F59599.NJV
%HOMEPATH%\LHQWD\6040.FSV
%HOMEPATH%\LHQWD\Y97504.PEX
%HOMEPATH%\LHQWD\Q3722.BBA
%HOMEPATH%\LHQWD\B60019.SGR
%HOMEPATH%\LHQWD\59847.SOC
%HOMEPATH%\LHQWD\50463.PVX
%HOMEPATH%\LHQWD\93540.QWI
%HOMEPATH%\LHQWD\60634.LJX
%HOMEPATH%\LHQWD\52874.LQD
%HOMEPATH%\LHQWD\T91676.FJK
%HOMEPATH%\LHQWD\48850.KSD
%HOMEPATH%\LHQWD\N70365.THA
%HOMEPATH%\LHQWD\8837.JSH
%HOMEPATH%\LHQWD\Q4581.QYO
%HOMEPATH%\LHQWD\99853.OOQ
%HOMEPATH%\LHQWD\R3354.XAY
%HOMEPATH%\LHQWD\81671.EQX
%HOMEPATH%\LHQWD\P93031.UMP
%HOMEPATH%\LHQWD\56669.DTS
%HOMEPATH%\LHQWD\89028.HYY
%HOMEPATH%\LHQWD\40919.XTK
%HOMEPATH%\LHQWD\39204.BOS
%HOMEPATH%\LHQWD\O54192.HFZ
%HOMEPATH%\LHQWD\51426.SNY
%HOMEPATH%\LHQWD\V10067.KAW
%HOMEPATH%\LHQWD\N1382.DVN
%HOMEPATH%\LHQWD\L6195.YAL
%HOMEPATH%\LHQWD\J29988.ZRY
%HOMEPATH%\LHQWD\85746.YRS
%HOMEPATH%\LHQWD\91525.GMV
%HOMEPATH%\LHQWD\D13510.JKB
%HOMEPATH%\LHQWD\61759.YAQ
%HOMEPATH%\LHQWD\74137.AAE
%HOMEPATH%\LHQWD\Z97863.DFW
%HOMEPATH%\LHQWD\J83798.ZVI
%HOMEPATH%\LHQWD\D92955.VLN
%HOMEPATH%\LHQWD\57821.ZWK
%HOMEPATH%\LHQWD\85574.CJT
%HOMEPATH%\LHQWD\O64301.BBQ
%HOMEPATH%\LHQWD\V62291.GRD
%HOMEPATH%\LHQWD\T23405.HVK
%HOMEPATH%\LHQWD\A73903.AUD
%HOMEPATH%\LHQWD\A44427.RJX
%HOMEPATH%\LHQWD\J14984.AKM
%HOMEPATH%\LHQWD\43621.ZIN
%HOMEPATH%\LHQWD\B30072.EDF
%HOMEPATH%\LHQWD\L41520.ILN
%HOMEPATH%\LHQWD\V24303.WDM
%HOMEPATH%\LHQWD\L62799.VRB
%HOMEPATH%\LHQWD\49199.JEO
%HOMEPATH%\LHQWD\81369.SHL
%HOMEPATH%\LHQWD\Z24907.CMG
%HOMEPATH%\LHQWD\60844.FPI
%HOMEPATH%\LHQWD\C82349.XDI
%HOMEPATH%\LHQWD\23133.GAU
%HOMEPATH%\LHQWD\53001.DFG
%HOMEPATH%\LHQWD\S98602.YFN
%HOMEPATH%\LHQWD\54248.JHY
%HOMEPATH%\LHQWD\64118.FUO
%HOMEPATH%\LHQWD\58433.HCT
%HOMEPATH%\LHQWD\O20136.ZCA
%HOMEPATH%\LHQWD\X34232.FIL
%HOMEPATH%\LHQWD\55224.IUJ
%HOMEPATH%\LHQWD\78368.WOR
%HOMEPATH%\LHQWD\43413.YMX
%HOMEPATH%\LHQWD\S96819.WBO
%HOMEPATH%\LHQWD\52622.BPX
%HOMEPATH%\LHQWD\T95455.RQH
%HOMEPATH%\LHQWD\78822.PCJ
%HOMEPATH%\LHQWD\C41887.ENT
%HOMEPATH%\LHQWD\Y17129.UBB
%HOMEPATH%\LHQWD\35044.OQP
%HOMEPATH%\LHQWD\74335.GIU
%HOMEPATH%\LHQWD\I31857.OZH
%HOMEPATH%\LHQWD\U51732.CIA
%HOMEPATH%\LHQWD\K45856.NBL
%HOMEPATH%\LHQWD\I85447.ERG
%HOMEPATH%\LHQWD\31328.WBX
%HOMEPATH%\LHQWD\Z47001.KEL
%HOMEPATH%\LHQWD\98655.CVK
%HOMEPATH%\LHQWD\48612.JZO
%HOMEPATH%\LHQWD\83546.FQH
%HOMEPATH%\LHQWD\48199.XXB
%HOMEPATH%\LHQWD\Z91928.RIH
%HOMEPATH%\LHQWD\17127.XYJ
%HOMEPATH%\LHQWD\33264.UBC
%HOMEPATH%\LHQWD\56119.HCV
%HOMEPATH%\LHQWD\65295.AOV
%HOMEPATH%\LHQWD\B36436.JJT
%HOMEPATH%\LHQWD\13378.HKG
%HOMEPATH%\LHQWD\C71747.AIB
%HOMEPATH%\LHQWD\A21465.LZJ
%HOMEPATH%\LHQWD\90970.ZEL
%HOMEPATH%\LHQWD\C57971.ONP
%HOMEPATH%\LHQWD\4326.YMX
%HOMEPATH%\LHQWD\M12517.OHQ
%HOMEPATH%\LHQWD\S79926.AVG
%HOMEPATH%\LHQWD\P2596.ZOT
%HOMEPATH%\LHQWD\13526.SCO
%HOMEPATH%\LHQWD\35965.VAD
%HOMEPATH%\LHQWD\89925.RHV
%HOMEPATH%\LHQWD\H94888.DMF
%HOMEPATH%\LHQWD\G80744.OZV
%HOMEPATH%\LHQWD\T81099.HVS
%HOMEPATH%\LHQWD\U70418.VZA
%HOMEPATH%\LHQWD\S69075.NXC
%HOMEPATH%\LHQWD\33194.FNY
%HOMEPATH%\LHQWD\R85812.BRX
%HOMEPATH%\LHQWD\20197.FDY
%HOMEPATH%\LHQWD\R6082.KAO
%HOMEPATH%\LHQWD\13204.OAL
%HOMEPATH%\LHQWD\H54837.CIA
%HOMEPATH%\LHQWD\39283.VOU
%HOMEPATH%\LHQWD\87962.MFP
%HOMEPATH%\LHQWD\3562.vbs
%HOMEPATH%\LHQWD\settings.ini
%HOMEPATH%\LHQWD\S32218.SOO
%HOMEPATH%\LHQWD\26268.LAG
%HOMEPATH%\LHQWD\141000.dat
%HOMEPATH%\LHQWD\471016.WZB
%HOMEPATH%\LHQWD\WJZME.exe
%HOMEPATH%\LHQWD\59170.dat
%HOMEPATH%\LHQWD\83351.WYW
%HOMEPATH%\LHQWD\38920.JMG
%HOMEPATH%\LHQWD\46241.VPZ
%HOMEPATH%\LHQWD\39102.FYY
%HOMEPATH%\LHQWD\56370.UAQ
%HOMEPATH%\LHQWD\I31688.EIQ
%HOMEPATH%\LHQWD\T73764.LCH
%HOMEPATH%\LHQWD\2194.YML
%HOMEPATH%\LHQWD\B31185.MCZ
%HOMEPATH%\LHQWD\68107.NDF
%HOMEPATH%\LHQWD\T27567.JPA
%HOMEPATH%\LHQWD\56942.JRM
%HOMEPATH%\LHQWD\85915.QRE
%HOMEPATH%\LHQWD\J7816.DRY
%HOMEPATH%\LHQWD\62239.IEY
%HOMEPATH%\LHQWD\95756.MUW
%HOMEPATH%\LHQWD\66614.XAY
%HOMEPATH%\LHQWD\G1767.PRF
%HOMEPATH%\LHQWD\M54400.CAU
%HOMEPATH%\LHQWD\K65058.UBI
%HOMEPATH%\LHQWD\41994.IRW
%HOMEPATH%\LHQWD\Q73466.BNH
%HOMEPATH%\LHQWD\E80196.AAP
%HOMEPATH%\LHQWD\O9136.GSI
%HOMEPATH%\LHQWD\Z22504.CBA
%HOMEPATH%\LHQWD\M83831.BDT
%HOMEPATH%\LHQWD\D11415.KBX
%HOMEPATH%\LHQWD\R60600.KTT
%HOMEPATH%\LHQWD\11948.IDQ
%HOMEPATH%\LHQWD\85144.QBI
%HOMEPATH%\LHQWD\F58296.TNI
%HOMEPATH%\LHQWD\26137.VEJ
%HOMEPATH%\LHQWD\75860.HIN
%HOMEPATH%\LHQWD\29905.HOW
%HOMEPATH%\LHQWD\O88312.MMA
%HOMEPATH%\LHQWD\29887.GMN
%HOMEPATH%\LHQWD\I5105.BGJ
%HOMEPATH%\LHQWD\Q10341.GUA
%HOMEPATH%\LHQWD\S65283.IIS
%HOMEPATH%\LHQWD\Z62660.QQL
%HOMEPATH%\LHQWD\82122.ACO
%HOMEPATH%\LHQWD\Z64546.HPX
%HOMEPATH%\LHQWD\Z88602.IFR
%HOMEPATH%\LHQWD\F78727.XCF
%HOMEPATH%\LHQWD\44888.ZLM
%HOMEPATH%\LHQWD\12952.QCV
%HOMEPATH%\LHQWD\93447.UQE
%HOMEPATH%\LHQWD\6597.YUS
%HOMEPATH%\LHQWD\96543.QSE
%HOMEPATH%\LHQWD\J67423.YBX
%HOMEPATH%\LHQWD\92659.RVW
%HOMEPATH%\LHQWD\74838.HZI
%HOMEPATH%\LHQWD\B54250.MKI
%HOMEPATH%\LHQWD\81671.KWP
%HOMEPATH%\LHQWD\76835.VTN
%HOMEPATH%\LHQWD\87033.EFU
%HOMEPATH%\LHQWD\B97372.PZS
%HOMEPATH%\LHQWD\36403.LML
%HOMEPATH%\LHQWD\70506.FHU
%HOMEPATH%\LHQWD\29737.KHY
%HOMEPATH%\LHQWD\77537.WRZ
%HOMEPATH%\LHQWD\J6134.BCO
%HOMEPATH%\LHQWD\81754.PQI
%HOMEPATH%\LHQWD\O28568.SNG
%HOMEPATH%\LHQWD\Z37803.PTV
%HOMEPATH%\LHQWD\68508.REN
%HOMEPATH%\LHQWD\70780.RSS
%HOMEPATH%\LHQWD\3130.PJK
%HOMEPATH%\LHQWD\M70128.IHV
%HOMEPATH%\LHQWD\92936.SGG
%HOMEPATH%\LHQWD\30138.RRY
%HOMEPATH%\LHQWD\B8518.MAO
%HOMEPATH%\LHQWD\M95705.LGW
%HOMEPATH%\LHQWD\X88934.IOJ
%HOMEPATH%\LHQWD\98195.STY
%HOMEPATH%\LHQWD\2813.UAJ
%HOMEPATH%\LHQWD\A98332.YTT
%HOMEPATH%\LHQWD\X9530.ZKK
%HOMEPATH%\LHQWD\Y53657.HSG
%HOMEPATH%\LHQWD\B54228.VYU
%HOMEPATH%\LHQWD\G96773.CDM
%HOMEPATH%\LHQWD\59477.TIS
%HOMEPATH%\LHQWD\O28877.VRK
%HOMEPATH%\LHQWD\N53641.LQV
%HOMEPATH%\LHQWD\T30719.ZIW
%HOMEPATH%\LHQWD\62811.SAE
%HOMEPATH%\LHQWD\87368.LHM
%HOMEPATH%\LHQWD\Z26874.PBM
%HOMEPATH%\LHQWD\I32153.PZK
%HOMEPATH%\LHQWD\18636.GIU
%HOMEPATH%\LHQWD\Q75084.PUU
%HOMEPATH%\LHQWD\52369.GYF
%HOMEPATH%\LHQWD\U59262.PKK
%HOMEPATH%\LHQWD\83991.ARJ
%HOMEPATH%\LHQWD\H15909.STL
%HOMEPATH%\LHQWD\B62744.GAI
%HOMEPATH%\LHQWD\Q14451.LNA
%HOMEPATH%\LHQWD\3801.DSF
%HOMEPATH%\LHQWD\45212.EMJ
%HOMEPATH%\LHQWD\P12046.ZLH
%HOMEPATH%\LHQWD\X14846.PIC
%HOMEPATH%\LHQWD\81850.ESU
%HOMEPATH%\LHQWD\P8443.BCE
%HOMEPATH%\LHQWD\O10042.HKU
%HOMEPATH%\LHQWD\50355.UZH
%HOMEPATH%\LHQWD\98478.IKB
%HOMEPATH%\LHQWD\34650.DAF
%HOMEPATH%\LHQWD\P16784.UGJ
%HOMEPATH%\LHQWD\46887.KIE
%HOMEPATH%\LHQWD\J89153.AUR
%HOMEPATH%\LHQWD\32749.BDI
%HOMEPATH%\LHQWD\78484.CTD
%HOMEPATH%\LHQWD\A44839.QNL
%HOMEPATH%\LHQWD\50199.MCM
%HOMEPATH%\LHQWD\13771.WSC
%HOMEPATH%\LHQWD\18626.BKL
%HOMEPATH%\LHQWD\11237.BYH
%HOMEPATH%\LHQWD\Q14484.MLQ
%HOMEPATH%\LHQWD\M90861.GOD
%HOMEPATH%\LHQWD\46598.LPX
%HOMEPATH%\LHQWD\C84823.TRF
%HOMEPATH%\LHQWD\1653.JMT
%HOMEPATH%\LHQWD\M27349.POW
%HOMEPATH%\LHQWD\F41975.GFP
%HOMEPATH%\LHQWD\50005.VLS
%HOMEPATH%\LHQWD\K74817.DTE
%HOMEPATH%\LHQWD\28987.UHW
%HOMEPATH%\LHQWD\Z83931.JCF
%HOMEPATH%\LHQWD\6702.KDK
%HOMEPATH%\LHQWD\44775.CWS
%HOMEPATH%\LHQWD\X74552.LYI
%HOMEPATH%\LHQWD\T37583.LBD
%HOMEPATH%\LHQWD\98031.FOW
%HOMEPATH%\LHQWD\M59810.XLI
%HOMEPATH%\LHQWD\N38633.FRM
%HOMEPATH%\LHQWD\J65346.ZYX
%HOMEPATH%\LHQWD\V54155.TDE
%HOMEPATH%\LHQWD\A6732.ZAK
%HOMEPATH%\LHQWD\R51312.PMY
%HOMEPATH%\LHQWD\U89145.BHR
%HOMEPATH%\LHQWD\49289.AYN
%HOMEPATH%\LHQWD\7286.HPT
%HOMEPATH%\LHQWD\S75220.IWD
%HOMEPATH%\LHQWD\15773.QZE
%HOMEPATH%\LHQWD\C10082.SMI
%HOMEPATH%\LHQWD\K55638.HFC
%HOMEPATH%\LHQWD\W60688.QQH
%HOMEPATH%\LHQWD\91086.FTO
%HOMEPATH%\LHQWD\93580.CEZ
%HOMEPATH%\LHQWD\30439.RDN
%HOMEPATH%\LHQWD\22096.DEG
%HOMEPATH%\LHQWD\45340.DUI
%HOMEPATH%\LHQWD\X37688.YTU
%HOMEPATH%\LHQWD\V20060.XIF
%HOMEPATH%\LHQWD\D81285.JLV
%HOMEPATH%\LHQWD\P87563.IHN
%HOMEPATH%\LHQWD\99523.DCH
%HOMEPATH%\LHQWD\F33261.FRI
%HOMEPATH%\LHQWD\Q17260.WTW
%HOMEPATH%\LHQWD\67720.AME
%HOMEPATH%\LHQWD\62018.BIV
%HOMEPATH%\LHQWD\A62366.SMH
%HOMEPATH%\LHQWD\66158.XNT
%HOMEPATH%\LHQWD\R47481.ILL
%HOMEPATH%\LHQWD\D33928.XCL
%HOMEPATH%\LHQWD\24202.UKH
%HOMEPATH%\LHQWD\I28063.JPH
%HOMEPATH%\LHQWD\N82145.OSE
%HOMEPATH%\LHQWD\12260.CLI
%HOMEPATH%\LHQWD\M8169.DAE
%HOMEPATH%\LHQWD\94739.WKS
%HOMEPATH%\LHQWD\M61235.MRH
%HOMEPATH%\LHQWD\A99926.IEI
%HOMEPATH%\LHQWD\D59874.JDG
%HOMEPATH%\LHQWD\39474.CJH
%HOMEPATH%\LHQWD\74085.BLP
%HOMEPATH%\LHQWD\48182.WIG
%HOMEPATH%\LHQWD\37916.JFK
%HOMEPATH%\LHQWD\U60434.PQO
%HOMEPATH%\LHQWD\67767.OES

Присваивает атрибут 'скрытый' для следующих файлов:

%HOMEPATH%\LHQWD\38762.NDZ
%HOMEPATH%\LHQWD\52076.HFQ
%HOMEPATH%\LHQWD\19886.YQE
%HOMEPATH%\LHQWD\Z83376.LFJ
%HOMEPATH%\LHQWD\F93819.XYS
%HOMEPATH%\LHQWD\62398.BYY
%HOMEPATH%\LHQWD\V7147.AKA
%HOMEPATH%\LHQWD\S28966.QME
%HOMEPATH%\LHQWD\Q70899.HIR
%HOMEPATH%\LHQWD\U78695.YKG
%HOMEPATH%\LHQWD\11429.SDK
%HOMEPATH%\LHQWD\69184.GWI
%HOMEPATH%\LHQWD\E63918.MJL
%HOMEPATH%\LHQWD\A88918.ZMD
%HOMEPATH%\LHQWD\Z16400.AIZ
%HOMEPATH%\LHQWD\I86999.KBR
%HOMEPATH%\LHQWD\K25650.SBK
%HOMEPATH%\LHQWD\35213.ZZG
%HOMEPATH%\LHQWD\T65145.RYQ
%HOMEPATH%\LHQWD\70725.NJT
%HOMEPATH%\LHQWD\I10098.YXR
%HOMEPATH%\LHQWD\77860.UWS
%HOMEPATH%\LHQWD\42430.WRD
%HOMEPATH%\LHQWD\56483.DIU
%HOMEPATH%\LHQWD\T21279.YGM
%HOMEPATH%\LHQWD\76590.QRG
%HOMEPATH%\LHQWD\R93781.RQQ
%HOMEPATH%\LHQWD\S46987.RCA
%HOMEPATH%\LHQWD\O32341.CZC
%HOMEPATH%\LHQWD\47808.WZH
%HOMEPATH%\LHQWD\G55848.MIN
%HOMEPATH%\LHQWD\M3478.QZG
%HOMEPATH%\LHQWD\31570.CQB
%HOMEPATH%\LHQWD\68234.NDD
%HOMEPATH%\LHQWD\17449.PGH
%HOMEPATH%\LHQWD\U68295.YVB
%HOMEPATH%\LHQWD\72159.ZTV
%HOMEPATH%\LHQWD\J76897.LFF
%HOMEPATH%\LHQWD\J55101.BTA
%HOMEPATH%\LHQWD\42530.PEK
%HOMEPATH%\LHQWD\12302.YJC
%HOMEPATH%\LHQWD\B47618.NSB
%HOMEPATH%\LHQWD\67252.SUN
%HOMEPATH%\LHQWD\F8061.ALX
%HOMEPATH%\LHQWD\22578.IYK
%HOMEPATH%\LHQWD\V65078.FGT
%HOMEPATH%\LHQWD\81688.LSS
%HOMEPATH%\LHQWD\Y40691.EGH
%HOMEPATH%\LHQWD\61530.NDU
%HOMEPATH%\LHQWD\56667.OOY
%HOMEPATH%\LHQWD\L39396.PEB
%HOMEPATH%\LHQWD\J77883.HPD
%HOMEPATH%\LHQWD\6490.JPZ
%HOMEPATH%\LHQWD\21196.WWV
%HOMEPATH%\LHQWD\V51957.TPI
%HOMEPATH%\LHQWD\9554.ZSL
%HOMEPATH%\LHQWD\P55707.AIP
%HOMEPATH%\LHQWD\92239.FBW
%HOMEPATH%\LHQWD\R53382.DDX
%HOMEPATH%\LHQWD\Y46608.UQT
%HOMEPATH%\LHQWD\Z60097.NGJ
%HOMEPATH%\LHQWD\68977.YGO
%HOMEPATH%\LHQWD\11115.VLW
%HOMEPATH%\LHQWD\5303.CVE
%HOMEPATH%\LHQWD\T33730.PNQ
%HOMEPATH%\LHQWD\N79726.OOC
%HOMEPATH%\LHQWD\5973.UFZ
%HOMEPATH%\LHQWD\F27847.PWI
%HOMEPATH%\LHQWD\31391.EJW
%HOMEPATH%\LHQWD\G51834.AMF
%HOMEPATH%\LHQWD\H65189.JKW
%HOMEPATH%\LHQWD\U38336.YQD
%HOMEPATH%\LHQWD\P19135.IKB
%HOMEPATH%\LHQWD\24670.OHQ
%HOMEPATH%\LHQWD\75634.ASR
%HOMEPATH%\LHQWD\70958.KBC
%HOMEPATH%\LHQWD\57543.UKB
%HOMEPATH%\LHQWD\95705.ORW
%HOMEPATH%\LHQWD\L10066.HOP
%HOMEPATH%\LHQWD\12456.VYR
%HOMEPATH%\LHQWD\A8906.JZY
%HOMEPATH%\LHQWD\N54643.HXN
%HOMEPATH%\LHQWD\84557.LQJ
%HOMEPATH%\LHQWD\8842.TCJ
%HOMEPATH%\LHQWD\C65121.VOT
%HOMEPATH%\LHQWD\W71821.WNS
%HOMEPATH%\LHQWD\I89672.RCV
%HOMEPATH%\LHQWD\H91553.YAN
%HOMEPATH%\LHQWD\31073.TSZ
%HOMEPATH%\LHQWD\J29988.ZRY
%HOMEPATH%\LHQWD\I32153.PZK
%HOMEPATH%\LHQWD\28683.DEP
%HOMEPATH%\LHQWD\T58069.ENU
%HOMEPATH%\LHQWD\60013.DDV
%HOMEPATH%\LHQWD\O66784.WQO
%HOMEPATH%\LHQWD\45776.PMS
%HOMEPATH%\LHQWD\84361.HCP
%HOMEPATH%\LHQWD\P56524.MPI
%HOMEPATH%\LHQWD\F21356.ANZ
%HOMEPATH%\LHQWD\E30407.UWQ
%HOMEPATH%\LHQWD\11412.EXR
%HOMEPATH%\LHQWD\G33748.JIP
%HOMEPATH%\LHQWD\39779.EXK
%HOMEPATH%\LHQWD\I78052.DCQ
%HOMEPATH%\LHQWD\68927.JOD
%HOMEPATH%\LHQWD\S70548.ZSR
%HOMEPATH%\LHQWD\66636.APG
%HOMEPATH%\LHQWD\39629.BHY
%HOMEPATH%\LHQWD\79261.SDN
%HOMEPATH%\LHQWD\C7534.BDD
%HOMEPATH%\LHQWD\J52480.MVQ
%HOMEPATH%\LHQWD\N52030.PWG
%HOMEPATH%\LHQWD\Y70282.YGI
%HOMEPATH%\LHQWD\M45055.PHC
%HOMEPATH%\LHQWD\33715.SXW
%HOMEPATH%\LHQWD\C92521.LHQ
%HOMEPATH%\LHQWD\I12812.PAG
%HOMEPATH%\LHQWD\5799.RHR
%HOMEPATH%\LHQWD\57053.SBE
%HOMEPATH%\LHQWD\82202.IND
%HOMEPATH%\LHQWD\34443.LQL
%HOMEPATH%\LHQWD\72230.ILS
%HOMEPATH%\LHQWD\40543.FYX
%HOMEPATH%\LHQWD\K53129.NCZ
%HOMEPATH%\LHQWD\Q91845.ZAM
%HOMEPATH%\LHQWD\Q47230.UGF
%HOMEPATH%\LHQWD\37031.WFQ
%HOMEPATH%\LHQWD\I45545.UQE
%HOMEPATH%\LHQWD\72227.IHW
%HOMEPATH%\LHQWD\Q36957.GHL
%HOMEPATH%\LHQWD\78865.OZZ
%HOMEPATH%\LHQWD\A72807.NAA
%HOMEPATH%\LHQWD\W6124.DKD
%HOMEPATH%\LHQWD\C88177.ECH
%HOMEPATH%\LHQWD\23191.LII
%HOMEPATH%\LHQWD\61099.YUI
%HOMEPATH%\LHQWD\11320.NUO
%HOMEPATH%\LHQWD\F23228.RIK
%HOMEPATH%\LHQWD\94496.YDQ
%HOMEPATH%\LHQWD\N49176.LEH
%HOMEPATH%\LHQWD\85644.HOT
%HOMEPATH%\LHQWD\Y22872.SZQ
%HOMEPATH%\LHQWD\J45482.RXU
%HOMEPATH%\LHQWD\M34452.DBP
%HOMEPATH%\LHQWD\M91702.DUV
%HOMEPATH%\LHQWD\46995.JCB
%HOMEPATH%\LHQWD\8285.QIP
%HOMEPATH%\LHQWD\89843.XSG
%HOMEPATH%\LHQWD\U62409.JTD
%HOMEPATH%\LHQWD\89454.HUO
%HOMEPATH%\LHQWD\G91025.GEF
%HOMEPATH%\LHQWD\54786.DQL
%HOMEPATH%\LHQWD\C29359.PEQ
%HOMEPATH%\LHQWD\64975.BGX
%HOMEPATH%\LHQWD\B24540.UHX
%HOMEPATH%\LHQWD\92334.UQZ
%HOMEPATH%\LHQWD\P96004.VPM
%HOMEPATH%\LHQWD\50463.PVX
%HOMEPATH%\LHQWD\Q3722.BBA
%HOMEPATH%\LHQWD\O84705.IYK
%HOMEPATH%\LHQWD\59847.SOC
%HOMEPATH%\LHQWD\P12877.EXL
%HOMEPATH%\LHQWD\83515.VDO
%HOMEPATH%\LHQWD\76819.LFX
%HOMEPATH%\LHQWD\L74136.QXQ
%HOMEPATH%\LHQWD\24820.KRB
%HOMEPATH%\LHQWD\60457.XRZ
%HOMEPATH%\LHQWD\M58091.XMI
%HOMEPATH%\LHQWD\23336.RYC
%HOMEPATH%\LHQWD\Q50970.EFZ
%HOMEPATH%\LHQWD\X88977.AUT
%HOMEPATH%\LHQWD\C76275.ZTZ
%HOMEPATH%\LHQWD\32299.FKS
%HOMEPATH%\LHQWD\4902.DBZ
%HOMEPATH%\LHQWD\1542.MRN
%HOMEPATH%\LHQWD\11705.YIS
%HOMEPATH%\LHQWD\58814.DFV
%HOMEPATH%\LHQWD\B51308.WEI
%HOMEPATH%\LHQWD\75191.DUT
%HOMEPATH%\LHQWD\98082.YRJ
%HOMEPATH%\LHQWD\U94925.JDI
%HOMEPATH%\LHQWD\C2089.VIQ
%HOMEPATH%\LHQWD\V46680.EKC
%HOMEPATH%\LHQWD\91165.TIY
%HOMEPATH%\LHQWD\22693.JVZ
%HOMEPATH%\LHQWD\P26259.KVZ
%HOMEPATH%\LHQWD\J2310.BXY
%HOMEPATH%\LHQWD\D4736.IAN
%HOMEPATH%\LHQWD\H13507.SHY
%HOMEPATH%\LHQWD\U12674.XCO
%HOMEPATH%\LHQWD\10697.BQF
%HOMEPATH%\LHQWD\A22429.FVD
%HOMEPATH%\LHQWD\C44274.ZXB
%HOMEPATH%\LHQWD\O90701.LSL
%HOMEPATH%\LHQWD\73936.GRY
%HOMEPATH%\LHQWD\U6075.RCF
%HOMEPATH%\LHQWD\22585.FGH
%HOMEPATH%\LHQWD\W20888.OLX
%HOMEPATH%\LHQWD\O21962.QZK
%HOMEPATH%\LHQWD\P26837.WIP
%HOMEPATH%\LHQWD\27824.ISW
%HOMEPATH%\LHQWD\K46269.RGL
%HOMEPATH%\LHQWD\F58817.CIF
%HOMEPATH%\LHQWD\26013.FAN
%HOMEPATH%\LHQWD\A73047.JQU
%HOMEPATH%\LHQWD\Y53019.XMR
%HOMEPATH%\LHQWD\W99880.XGT
%HOMEPATH%\LHQWD\A58460.VZZ
%HOMEPATH%\LHQWD\83983.GAU
%HOMEPATH%\LHQWD\Q15628.TBJ
%HOMEPATH%\LHQWD\L35196.TLH
%HOMEPATH%\LHQWD\68782.MDI
%HOMEPATH%\LHQWD\Q58367.HAK
%HOMEPATH%\LHQWD\93758.WEV
%HOMEPATH%\LHQWD\M57525.KIQ
%HOMEPATH%\LHQWD\11957.VNW
%HOMEPATH%\LHQWD\42062.CJZ
%HOMEPATH%\LHQWD\28155.ZLU
%HOMEPATH%\LHQWD\41037.NDB
%HOMEPATH%\LHQWD\V66015.QBC
%HOMEPATH%\LHQWD\H68734.MTV
%HOMEPATH%\LHQWD\X16736.CMG
%HOMEPATH%\LHQWD\19743.DDZ
%HOMEPATH%\LHQWD\X20497.QOE
%HOMEPATH%\LHQWD\62817.JUS
%HOMEPATH%\LHQWD\44587.VKC
%HOMEPATH%\LHQWD\10233.PKR
%HOMEPATH%\LHQWD\26129.VYU
%HOMEPATH%\LHQWD\2796.OCO
%HOMEPATH%\LHQWD\R74360.QVZ
%HOMEPATH%\LHQWD\23123.BEO
%HOMEPATH%\LHQWD\27443.FDI
%HOMEPATH%\LHQWD\97166.DNC
%HOMEPATH%\LHQWD\H77439.IAY
%HOMEPATH%\LHQWD\94364.EVE
%HOMEPATH%\LHQWD\39437.IFN
%HOMEPATH%\LHQWD\A51268.TOL
%HOMEPATH%\LHQWD\83502.BEF
%HOMEPATH%\LHQWD\6040.FSV
%HOMEPATH%\LHQWD\25198.XIP
%HOMEPATH%\LHQWD\49252.BTQ
%HOMEPATH%\LHQWD\F59599.NJV
%HOMEPATH%\LHQWD\O54192.HFZ
%HOMEPATH%\LHQWD\89028.HYY
%HOMEPATH%\LHQWD\50080.FKM
%HOMEPATH%\LHQWD\39204.BOS
%HOMEPATH%\LHQWD\22444.TDD
%HOMEPATH%\LHQWD\T91676.FJK
%HOMEPATH%\LHQWD\93540.QWI
%HOMEPATH%\LHQWD\B60019.SGR
%HOMEPATH%\LHQWD\52874.LQD
%HOMEPATH%\LHQWD\P98958.KSH
%HOMEPATH%\LHQWD\63462.RJG
%HOMEPATH%\LHQWD\60634.LJX
%HOMEPATH%\LHQWD\Y97504.PEX
%HOMEPATH%\LHQWD\P93031.UMP
%HOMEPATH%\LHQWD\99853.OOQ
%HOMEPATH%\LHQWD\N70365.THA
%HOMEPATH%\LHQWD\81671.EQX
%HOMEPATH%\LHQWD\82396.AVL
%HOMEPATH%\LHQWD\22371.QAZ
%HOMEPATH%\LHQWD\R3354.XAY
%HOMEPATH%\LHQWD\68413.UGD
%HOMEPATH%\LHQWD\48850.KSD
%HOMEPATH%\LHQWD\L6195.YAL
%HOMEPATH%\LHQWD\51426.SNY
%HOMEPATH%\LHQWD\40919.XTK
%HOMEPATH%\LHQWD\N1382.DVN
%HOMEPATH%\LHQWD\8837.JSH
%HOMEPATH%\LHQWD\Q4581.QYO
%HOMEPATH%\LHQWD\V10067.KAW
%HOMEPATH%\LHQWD\56669.DTS
%HOMEPATH%\LHQWD\18636.GIU
%HOMEPATH%\LHQWD\91525.GMV
%HOMEPATH%\LHQWD\J83798.ZVI
%HOMEPATH%\LHQWD\61759.YAQ
%HOMEPATH%\LHQWD\85746.YRS
%HOMEPATH%\LHQWD\Z97863.DFW
%HOMEPATH%\LHQWD\S98602.YFN
%HOMEPATH%\LHQWD\D92955.VLN
%HOMEPATH%\LHQWD\74137.AAE
%HOMEPATH%\LHQWD\D13510.JKB
%HOMEPATH%\LHQWD\O64301.BBQ
%HOMEPATH%\LHQWD\J14984.AKM
%HOMEPATH%\LHQWD\T23405.HVK
%HOMEPATH%\LHQWD\85574.CJT
%HOMEPATH%\LHQWD\A44427.RJX
%HOMEPATH%\LHQWD\57821.ZWK
%HOMEPATH%\LHQWD\43621.ZIN
%HOMEPATH%\LHQWD\A73903.AUD
%HOMEPATH%\LHQWD\L41520.ILN
%HOMEPATH%\LHQWD\Z24907.CMG
%HOMEPATH%\LHQWD\L62799.VRB
%HOMEPATH%\LHQWD\B30072.EDF
%HOMEPATH%\LHQWD\81369.SHL
%HOMEPATH%\LHQWD\S79926.AVG
%HOMEPATH%\LHQWD\60844.FPI
%HOMEPATH%\LHQWD\49199.JEO
%HOMEPATH%\LHQWD\V24303.WDM
%HOMEPATH%\LHQWD\53001.DFG
%HOMEPATH%\LHQWD\O20136.ZCA
%HOMEPATH%\LHQWD\54248.JHY
%HOMEPATH%\LHQWD\23133.GAU
%HOMEPATH%\LHQWD\58433.HCT
%HOMEPATH%\LHQWD\C82349.XDI
%HOMEPATH%\LHQWD\X34232.FIL
%HOMEPATH%\LHQWD\64118.FUO
%HOMEPATH%\LHQWD\78368.WOR
%HOMEPATH%\LHQWD\78822.PCJ
%HOMEPATH%\LHQWD\S96819.WBO
%HOMEPATH%\LHQWD\55224.IUJ
%HOMEPATH%\LHQWD\T95455.RQH
%HOMEPATH%\LHQWD\C71747.AIB
%HOMEPATH%\LHQWD\C41887.ENT
%HOMEPATH%\LHQWD\52622.BPX
%HOMEPATH%\LHQWD\43413.YMX
%HOMEPATH%\LHQWD\74335.GIU
%HOMEPATH%\LHQWD\31328.WBX
%HOMEPATH%\LHQWD\U51732.CIA
%HOMEPATH%\LHQWD\35044.OQP
%HOMEPATH%\LHQWD\I85447.ERG
%HOMEPATH%\LHQWD\Y17129.UBB
%HOMEPATH%\LHQWD\Z47001.KEL
%HOMEPATH%\LHQWD\K45856.NBL
%HOMEPATH%\LHQWD\48612.JZO
%HOMEPATH%\LHQWD\33264.UBC
%HOMEPATH%\LHQWD\48199.XXB
%HOMEPATH%\LHQWD\98655.CVK
%HOMEPATH%\LHQWD\17127.XYJ
%HOMEPATH%\LHQWD\V62291.GRD
%HOMEPATH%\LHQWD\56119.HCV
%HOMEPATH%\LHQWD\Z91928.RIH
%HOMEPATH%\LHQWD\83546.FQH
%HOMEPATH%\LHQWD\13378.HKG
%HOMEPATH%\LHQWD\4326.YMX
%HOMEPATH%\LHQWD\A21465.LZJ
%HOMEPATH%\LHQWD\B36436.JJT
%HOMEPATH%\LHQWD\C57971.ONP
%HOMEPATH%\LHQWD\65295.AOV
%HOMEPATH%\LHQWD\M12517.OHQ
%HOMEPATH%\LHQWD\90970.ZEL
%HOMEPATH%\LHQWD\P2596.ZOT
%HOMEPATH%\LHQWD\13526.SCO
%HOMEPATH%\LHQWD\35965.VAD
%HOMEPATH%\LHQWD\89925.RHV
%HOMEPATH%\LHQWD\H94888.DMF
%HOMEPATH%\LHQWD\G80744.OZV
%HOMEPATH%\LHQWD\T81099.HVS
%HOMEPATH%\LHQWD\U70418.VZA
%HOMEPATH%\LHQWD\S69075.NXC
%HOMEPATH%\LHQWD\33194.FNY
%HOMEPATH%\LHQWD\R85812.BRX
%HOMEPATH%\LHQWD\20197.FDY
%HOMEPATH%\LHQWD\R6082.KAO
%HOMEPATH%\LHQWD\13204.OAL
%HOMEPATH%\LHQWD\H54837.CIA
%HOMEPATH%\LHQWD\39283.VOU
%HOMEPATH%\LHQWD\87962.MFP
%HOMEPATH%\LHQWD\3562.vbs
%HOMEPATH%\LHQWD\settings.ini
%HOMEPATH%\LHQWD\S32218.SOO
%HOMEPATH%\LHQWD\26268.LAG
%HOMEPATH%\LHQWD\141000.dat
%HOMEPATH%\LHQWD\471016.WZB
%HOMEPATH%\LHQWD\WJZME.exe
%HOMEPATH%\LHQWD\59170.dat
%HOMEPATH%\LHQWD\83351.WYW
%HOMEPATH%\LHQWD\38920.JMG
%HOMEPATH%\LHQWD\46241.VPZ
%HOMEPATH%\LHQWD\39102.FYY
%HOMEPATH%\LHQWD\56370.UAQ
%HOMEPATH%\LHQWD\I31688.EIQ
%HOMEPATH%\LHQWD\T73764.LCH
%HOMEPATH%\LHQWD\2194.YML
%HOMEPATH%\LHQWD\B31185.MCZ
%HOMEPATH%\LHQWD\68107.NDF
%HOMEPATH%\LHQWD\T27567.JPA
%HOMEPATH%\LHQWD\56942.JRM
%HOMEPATH%\LHQWD\85915.QRE
%HOMEPATH%\LHQWD\J7816.DRY
%HOMEPATH%\LHQWD\62239.IEY
%HOMEPATH%\LHQWD\95756.MUW
%HOMEPATH%\LHQWD\66614.XAY
%HOMEPATH%\LHQWD\G1767.PRF
%HOMEPATH%\LHQWD\M54400.CAU
%HOMEPATH%\LHQWD\K65058.UBI
%HOMEPATH%\LHQWD\41994.IRW
%HOMEPATH%\LHQWD\Q73466.BNH
%HOMEPATH%\LHQWD\E80196.AAP
%HOMEPATH%\LHQWD\O9136.GSI
%HOMEPATH%\LHQWD\Z22504.CBA
%HOMEPATH%\LHQWD\M83831.BDT
%HOMEPATH%\LHQWD\D11415.KBX
%HOMEPATH%\LHQWD\R60600.KTT
%HOMEPATH%\LHQWD\11948.IDQ
%HOMEPATH%\LHQWD\85144.QBI
%HOMEPATH%\LHQWD\F58296.TNI
%HOMEPATH%\LHQWD\26137.VEJ
%HOMEPATH%\LHQWD\75860.HIN
%HOMEPATH%\LHQWD\29905.HOW
%HOMEPATH%\LHQWD\O88312.MMA
%HOMEPATH%\LHQWD\29887.GMN
%HOMEPATH%\LHQWD\I5105.BGJ
%HOMEPATH%\LHQWD\Q10341.GUA
%HOMEPATH%\LHQWD\S65283.IIS
%HOMEPATH%\LHQWD\Z62660.QQL
%HOMEPATH%\LHQWD\82122.ACO
%HOMEPATH%\LHQWD\Z64546.HPX
%HOMEPATH%\LHQWD\Z88602.IFR
%HOMEPATH%\LHQWD\J67423.YBX
%HOMEPATH%\LHQWD\92659.RVW
%HOMEPATH%\LHQWD\F78727.XCF
%HOMEPATH%\LHQWD\44888.ZLM
%HOMEPATH%\LHQWD\B8518.MAO
%HOMEPATH%\LHQWD\M95705.LGW
%HOMEPATH%\LHQWD\6597.YUS
%HOMEPATH%\LHQWD\96543.QSE
%HOMEPATH%\LHQWD\93447.UQE
%HOMEPATH%\LHQWD\70506.FHU
%HOMEPATH%\LHQWD\29737.KHY
%HOMEPATH%\LHQWD\B54250.MKI
%HOMEPATH%\LHQWD\81671.KWP
%HOMEPATH%\LHQWD\74838.HZI
%HOMEPATH%\LHQWD\12952.QCV
%HOMEPATH%\LHQWD\B97372.PZS
%HOMEPATH%\LHQWD\36403.LML
%HOMEPATH%\LHQWD\70780.RSS
%HOMEPATH%\LHQWD\3130.PJK
%HOMEPATH%\LHQWD\77537.WRZ
%HOMEPATH%\LHQWD\J6134.BCO
%HOMEPATH%\LHQWD\78484.CTD
%HOMEPATH%\LHQWD\F33261.FRI
%HOMEPATH%\LHQWD\Z37803.PTV
%HOMEPATH%\LHQWD\68508.REN
%HOMEPATH%\LHQWD\O28568.SNG
%HOMEPATH%\LHQWD\2813.UAJ
%HOMEPATH%\LHQWD\A98332.YTT
%HOMEPATH%\LHQWD\92936.SGG
%HOMEPATH%\LHQWD\30138.RRY
%HOMEPATH%\LHQWD\M70128.IHV
%HOMEPATH%\LHQWD\81754.PQI
%HOMEPATH%\LHQWD\X88934.IOJ
%HOMEPATH%\LHQWD\98195.STY
%HOMEPATH%\LHQWD\N53641.LQV
%HOMEPATH%\LHQWD\T30719.ZIW
%HOMEPATH%\LHQWD\X9530.ZKK
%HOMEPATH%\LHQWD\Y53657.HSG
%HOMEPATH%\LHQWD\98478.IKB
%HOMEPATH%\LHQWD\34650.DAF
%HOMEPATH%\LHQWD\59477.TIS
%HOMEPATH%\LHQWD\O28877.VRK
%HOMEPATH%\LHQWD\G96773.CDM
%HOMEPATH%\LHQWD\U59262.PKK
%HOMEPATH%\LHQWD\83991.ARJ
%HOMEPATH%\LHQWD\87368.LHM
%HOMEPATH%\LHQWD\Z26874.PBM
%HOMEPATH%\LHQWD\62811.SAE
%HOMEPATH%\LHQWD\B54228.VYU
%HOMEPATH%\LHQWD\Q75084.PUU
%HOMEPATH%\LHQWD\52369.GYF
%HOMEPATH%\LHQWD\X14846.PIC
%HOMEPATH%\LHQWD\81850.ESU
%HOMEPATH%\LHQWD\H15909.STL
%HOMEPATH%\LHQWD\B62744.GAI
%HOMEPATH%\LHQWD\76835.VTN
%HOMEPATH%\LHQWD\87033.EFU
%HOMEPATH%\LHQWD\45212.EMJ
%HOMEPATH%\LHQWD\P12046.ZLH
%HOMEPATH%\LHQWD\3801.DSF
%HOMEPATH%\LHQWD\J89153.AUR
%HOMEPATH%\LHQWD\32749.BDI
%HOMEPATH%\LHQWD\O10042.HKU
%HOMEPATH%\LHQWD\50355.UZH
%HOMEPATH%\LHQWD\P8443.BCE
%HOMEPATH%\LHQWD\Q14451.LNA
%HOMEPATH%\LHQWD\P16784.UGJ
%HOMEPATH%\LHQWD\46887.KIE
%HOMEPATH%\LHQWD\50199.MCM
%HOMEPATH%\LHQWD\M90861.GOD
%HOMEPATH%\LHQWD\18626.BKL
%HOMEPATH%\LHQWD\A44839.QNL
%HOMEPATH%\LHQWD\Q14484.MLQ
%HOMEPATH%\LHQWD\49289.AYN
%HOMEPATH%\LHQWD\46598.LPX
%HOMEPATH%\LHQWD\11237.BYH
%HOMEPATH%\LHQWD\13771.WSC
%HOMEPATH%\LHQWD\M27349.POW
%HOMEPATH%\LHQWD\Z83931.JCF
%HOMEPATH%\LHQWD\50005.VLS
%HOMEPATH%\LHQWD\1653.JMT
%HOMEPATH%\LHQWD\28987.UHW
%HOMEPATH%\LHQWD\C84823.TRF
%HOMEPATH%\LHQWD\6702.KDK
%HOMEPATH%\LHQWD\K74817.DTE
%HOMEPATH%\LHQWD\X74552.LYI
%HOMEPATH%\LHQWD\J65346.ZYX
%HOMEPATH%\LHQWD\98031.FOW
%HOMEPATH%\LHQWD\44775.CWS
%HOMEPATH%\LHQWD\N38633.FRM
%HOMEPATH%\LHQWD\I31857.OZH
%HOMEPATH%\LHQWD\V54155.TDE
%HOMEPATH%\LHQWD\M59810.XLI
%HOMEPATH%\LHQWD\T37583.LBD
%HOMEPATH%\LHQWD\U89145.BHR
%HOMEPATH%\LHQWD\C10082.SMI
%HOMEPATH%\LHQWD\7286.HPT
%HOMEPATH%\LHQWD\R51312.PMY
%HOMEPATH%\LHQWD\15773.QZE
%HOMEPATH%\LHQWD\A6732.ZAK
%HOMEPATH%\LHQWD\K55638.HFC
%HOMEPATH%\LHQWD\S75220.IWD
%HOMEPATH%\LHQWD\91086.FTO
%HOMEPATH%\LHQWD\X37688.YTU
%HOMEPATH%\LHQWD\30439.RDN
%HOMEPATH%\LHQWD\W60688.QQH
%HOMEPATH%\LHQWD\45340.DUI
%HOMEPATH%\LHQWD\39474.CJH
%HOMEPATH%\LHQWD\V20060.XIF
%HOMEPATH%\LHQWD\22096.DEG
%HOMEPATH%\LHQWD\93580.CEZ
%HOMEPATH%\LHQWD\99523.DCH
%HOMEPATH%\LHQWD\A62366.SMH
%HOMEPATH%\LHQWD\Q17260.WTW
%HOMEPATH%\LHQWD\P87563.IHN
%HOMEPATH%\LHQWD\62018.BIV
%HOMEPATH%\LHQWD\D81285.JLV
%HOMEPATH%\LHQWD\66158.XNT
%HOMEPATH%\LHQWD\67720.AME
%HOMEPATH%\LHQWD\D33928.XCL
%HOMEPATH%\LHQWD\M8169.DAE
%HOMEPATH%\LHQWD\I28063.JPH
%HOMEPATH%\LHQWD\R47481.ILL
%HOMEPATH%\LHQWD\12260.CLI
%HOMEPATH%\LHQWD\F41975.GFP
%HOMEPATH%\LHQWD\94739.WKS
%HOMEPATH%\LHQWD\N82145.OSE
%HOMEPATH%\LHQWD\24202.UKH
%HOMEPATH%\LHQWD\D59874.JDG
%HOMEPATH%\LHQWD\U60434.PQO
%HOMEPATH%\LHQWD\74085.BLP
%HOMEPATH%\LHQWD\A99926.IEI
%HOMEPATH%\LHQWD\37916.JFK
%HOMEPATH%\LHQWD\M61235.MRH
%HOMEPATH%\LHQWD\67767.OES
%HOMEPATH%\LHQWD\48182.WIG

Удаляет следующие файлы:

%TEMP%\NO_PWDS_report_22-04-2014_16-12-41-F4D651E80A6E4747C8F28A7D8647D810-JKDH.bin
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\whatismyip.akamai[1]
%HOMEPATH%\LHQWD\FCPYMCDI.dat

Перемещает следующие файлы:

%TEMP%\report_22-04-2014_16-12-41-F4D651E80A6E4747C8F28A7D8647D810-JKDH.bin в %TEMP%\NO_PWDS_report_22-04-2014_16-12-41-F4D651E80A6E4747C8F28A7D8647D810-JKDH.bin

Сетевая активность:

Подключается к:

'94.##0.191.201':25
'wh#####yip.akamai.com':80

TCP:

Запросы HTTP GET:

wh#####yip.akamai.com/

UDP:

DNS ASK sm##.mail.ru
DNS ASK wh#####yip.akamai.com

Другое:

Ищет следующие окна:

ClassName: 'PROCEXPL' WindowName: '(null)'
ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'EDIT' WindowName: '(null)'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней