Trojan.MulDrop5.43222

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Gc61103U62427' = '%HOMEPATH%\Mb24913Q84419\.exe.exe'

Вредоносные функции:

Для затруднения выявления своего присутствия в системе

блокирует запуск следующих системных утилит:

Диспетчера задач (Taskmgr)

Создает и запускает на исполнение:

'%HOMEPATH%\Mb24913Q84419\.exe.exe'

Изменения в файловой системе:

Создает следующие файлы:

%HOMEPATH%\Mb24913Q84419\C22527Y97357.JJA
%HOMEPATH%\Mb24913Q84419\G67751Q16797.ODP
%HOMEPATH%\Mb24913Q84419\T56749P86900.MUZ
%HOMEPATH%\Mb24913Q84419\92483.MUL
%HOMEPATH%\Mb24913Q84419\I55916X15104.PVF
%HOMEPATH%\Mb24913Q84419\24480.IRE
%HOMEPATH%\Mb24913Q84419\W86469K12657.JTJ
%HOMEPATH%\Mb24913Q84419\S73372E1500.WCP
%HOMEPATH%\Mb24913Q84419\35757.YQF
%HOMEPATH%\Mb24913Q84419\78659.PXM
%HOMEPATH%\Mb24913Q84419\16809.YDK
%HOMEPATH%\Mb24913Q84419\34218.TXQ
%HOMEPATH%\Mb24913Q84419\V34456O28465.IQR
%HOMEPATH%\Mb24913Q84419\52638.GES
%HOMEPATH%\Mb24913Q84419\N2770S5328.QLZ
%HOMEPATH%\Mb24913Q84419\B9642P63254.EYK
%HOMEPATH%\Mb24913Q84419\29980.UEW
%HOMEPATH%\Mb24913Q84419\20759.STJ
%HOMEPATH%\Mb24913Q84419\N33195C11115.DHF
%HOMEPATH%\Mb24913Q84419\50773.ZBU
%HOMEPATH%\Mb24913Q84419\S6214D95187.OHD
%HOMEPATH%\Mb24913Q84419\90047.KPX
%HOMEPATH%\Mb24913Q84419\V43531D27600.GZK
%HOMEPATH%\Mb24913Q84419\C13231I46255.WOM
%HOMEPATH%\Mb24913Q84419\B40022H6178.KMR
%HOMEPATH%\Mb24913Q84419\63808.MCD
%HOMEPATH%\Mb24913Q84419\72275.ERJ
%HOMEPATH%\Mb24913Q84419\A52824M76467.LMG
%HOMEPATH%\Mb24913Q84419\Q10769W74550.DOK
%HOMEPATH%\Mb24913Q84419\E32070L72122.ZDX
%HOMEPATH%\Mb24913Q84419\Q84755C33471.CJP
%HOMEPATH%\Mb24913Q84419\68762.AIO
%HOMEPATH%\Mb24913Q84419\66522.FXU
%HOMEPATH%\Mb24913Q84419\91519.XYW
%HOMEPATH%\Mb24913Q84419\89613.KYA
%HOMEPATH%\Mb24913Q84419\N80939I32931.XPC
%HOMEPATH%\Mb24913Q84419\37260.PPG
%HOMEPATH%\Mb24913Q84419\86725.LLI
%HOMEPATH%\Mb24913Q84419\82504.GXC
%HOMEPATH%\Mb24913Q84419\W86912X17682.PLN
%HOMEPATH%\Mb24913Q84419\14554.PSQ
%HOMEPATH%\Mb24913Q84419\B60754S7833.GNN
%HOMEPATH%\Mb24913Q84419\92782.GYY
%HOMEPATH%\Mb24913Q84419\50899.HDP
%HOMEPATH%\Mb24913Q84419\82635.UPA
%HOMEPATH%\Mb24913Q84419\R98271U36286.USU
%HOMEPATH%\Mb24913Q84419\68398.PUX
%HOMEPATH%\Mb24913Q84419\85360.VIZ
%HOMEPATH%\Mb24913Q84419\80480.FFO
%HOMEPATH%\Mb24913Q84419\R25609X39472.FPT
%HOMEPATH%\Mb24913Q84419\B62039P56282.JAS
%HOMEPATH%\Mb24913Q84419\34982.NIS
%HOMEPATH%\Mb24913Q84419\14797.DHO
%HOMEPATH%\Mb24913Q84419\85165.JTS
%HOMEPATH%\Mb24913Q84419\P46836M73077.XOR
%HOMEPATH%\Mb24913Q84419\39959.TMS
%HOMEPATH%\Mb24913Q84419\I77631F83191.BKK
%HOMEPATH%\Mb24913Q84419\Z56597H29107.EGQ
%HOMEPATH%\Mb24913Q84419\K42719P94760.GUQ
%HOMEPATH%\Mb24913Q84419\56028.KYD
%HOMEPATH%\Mb24913Q84419\91438.TCE
%HOMEPATH%\Mb24913Q84419\11270.NML
%HOMEPATH%\Mb24913Q84419\T65284H46658.ICX
%HOMEPATH%\Mb24913Q84419\A27782E62638.MSJ
%HOMEPATH%\Mb24913Q84419\X59608L41688.SYI
%HOMEPATH%\Mb24913Q84419\S17002S16330.HPT
%HOMEPATH%\Mb24913Q84419\S8838W1628.RIJ
%HOMEPATH%\Mb24913Q84419\67765.EIK
%HOMEPATH%\Mb24913Q84419\50032.KXL
%HOMEPATH%\Mb24913Q84419\P17507B5176.FXH
%HOMEPATH%\Mb24913Q84419\33809.DAB
%HOMEPATH%\Mb24913Q84419\49242.YJO
%HOMEPATH%\Mb24913Q84419\E59587W36366.VJB
%HOMEPATH%\Mb24913Q84419\87475.PLO
%HOMEPATH%\Mb24913Q84419\93278.YJN
%HOMEPATH%\Mb24913Q84419\55624.UMR
%HOMEPATH%\Mb24913Q84419\31984.CIJ
%HOMEPATH%\Mb24913Q84419\F68862J83211.BJA
%HOMEPATH%\Mb24913Q84419\32785.KDZ
%HOMEPATH%\Mb24913Q84419\26991.VCE
%HOMEPATH%\Mb24913Q84419\99200.ZEI
%HOMEPATH%\Mb24913Q84419\S49318W10210.ASB
%HOMEPATH%\Mb24913Q84419\41871.AHA
%HOMEPATH%\Mb24913Q84419\97948.HVL
%HOMEPATH%\Mb24913Q84419\O14303Q13913.COC
%HOMEPATH%\Mb24913Q84419\16433.WNN
%HOMEPATH%\Mb24913Q84419\90399.NZC
%HOMEPATH%\Mb24913Q84419\51228.QAD
%HOMEPATH%\Mb24913Q84419\8423.WDZ
%HOMEPATH%\Mb24913Q84419\D29375D21978.RSO
%HOMEPATH%\Mb24913Q84419\66911.XYT
%HOMEPATH%\Mb24913Q84419\V48974W12651.VKD
%HOMEPATH%\Mb24913Q84419\26960.JMU
%HOMEPATH%\Mb24913Q84419\29661.QSU
%HOMEPATH%\Mb24913Q84419\95215.TLC
%HOMEPATH%\Mb24913Q84419\13365.BVP
%HOMEPATH%\Mb24913Q84419\40257.FBZ
%HOMEPATH%\Mb24913Q84419\T70214M4563.YNA
%HOMEPATH%\Mb24913Q84419\L86305V81695.ARR
%HOMEPATH%\Mb24913Q84419\33741.UPY
%HOMEPATH%\Mb24913Q84419\M96875A99189.WVD
%HOMEPATH%\Mb24913Q84419\69957.YCJ
%HOMEPATH%\Mb24913Q84419\U33856A76740.OPG
%HOMEPATH%\Mb24913Q84419\39556.IQN
%HOMEPATH%\Mb24913Q84419\66688.WGW
%HOMEPATH%\Mb24913Q84419\A34786H57671.RYP
%HOMEPATH%\Mb24913Q84419\O11430V72718.OYZ
%HOMEPATH%\Mb24913Q84419\C39456D18626.PPS
%HOMEPATH%\Mb24913Q84419\92182.CFQ
%HOMEPATH%\Mb24913Q84419\44767.XWO
%HOMEPATH%\Mb24913Q84419\C56604E25581.BZY
%HOMEPATH%\Mb24913Q84419\3630.NBI
%HOMEPATH%\Mb24913Q84419\N67375C35469.XKZ
%HOMEPATH%\Mb24913Q84419\Y63795S15300.PSA
%HOMEPATH%\Mb24913Q84419\S6531J89188.CWM
%HOMEPATH%\Mb24913Q84419\78407.DQI
%HOMEPATH%\Mb24913Q84419\29753.XLJ
%HOMEPATH%\Mb24913Q84419\29026.JUW
%HOMEPATH%\Mb24913Q84419\J58229Q30439.UBR
%HOMEPATH%\Mb24913Q84419\Q73383J84420.YVN
%HOMEPATH%\Mb24913Q84419\21737.LAH
%HOMEPATH%\Mb24913Q84419\12404.TZE
%HOMEPATH%\Mb24913Q84419\C28421X80419.QKI
%HOMEPATH%\Mb24913Q84419\18489.LRB
%HOMEPATH%\Mb24913Q84419\20021.CJR
%HOMEPATH%\Mb24913Q84419\H91425N87088.TGH
%HOMEPATH%\Mb24913Q84419\Y36735Y48404.BAJ
%HOMEPATH%\Mb24913Q84419\72855.GJO
%HOMEPATH%\Mb24913Q84419\73313.LER
%HOMEPATH%\Mb24913Q84419\92659.ADJ
%HOMEPATH%\Mb24913Q84419\P95422K47331.ZMQ
%HOMEPATH%\Mb24913Q84419\39080.ZBT
%HOMEPATH%\Mb24913Q84419\44931.SKN
%HOMEPATH%\Mb24913Q84419\96346.JAC
%HOMEPATH%\Mb24913Q84419\N27050N87256.UDC
%HOMEPATH%\Mb24913Q84419\23343.CBN
%HOMEPATH%\Mb24913Q84419\U73022X61149.HLD
%HOMEPATH%\Mb24913Q84419\9872.GPP
%HOMEPATH%\Mb24913Q84419\U78648V33646.MRR
%HOMEPATH%\Mb24913Q84419\D57997U88445.RZT
%HOMEPATH%\Mb24913Q84419\43458.BLP
%HOMEPATH%\Mb24913Q84419\90016.WPM
%HOMEPATH%\Mb24913Q84419\W31840G87018.QCV
%HOMEPATH%\Mb24913Q84419\31466.DKA
%HOMEPATH%\Mb24913Q84419\71370.ZOT
%HOMEPATH%\Mb24913Q84419\29215.SOS
%HOMEPATH%\Mb24913Q84419\U12656F64303.JGP
%HOMEPATH%\Mb24913Q84419\N35453X45511.GOZ
%HOMEPATH%\Mb24913Q84419\58888.KHQ
%HOMEPATH%\Mb24913Q84419\O48066L62364.RCF
%HOMEPATH%\Mb24913Q84419\F89711Z67887.BIE
%HOMEPATH%\Mb24913Q84419\60270.HTE
%HOMEPATH%\Mb24913Q84419\37038.OGR
%HOMEPATH%\Mb24913Q84419\50210.HGA
%HOMEPATH%\Mb24913Q84419\P64455O49252.WST
%HOMEPATH%\Mb24913Q84419\11283.OIJ
%HOMEPATH%\Mb24913Q84419\99437.BYX
%HOMEPATH%\Mb24913Q84419\J63050Y70851.SLQ
%HOMEPATH%\Mb24913Q84419\Y35400W84318.HPX
%HOMEPATH%\Mb24913Q84419\O22703T99929.GXS
%HOMEPATH%\Mb24913Q84419\V67918Q54323.VJE
%HOMEPATH%\Mb24913Q84419\Y18681D72912.MUT
%HOMEPATH%\Mb24913Q84419\96082.TXU
%HOMEPATH%\Mb24913Q84419\C15787P75575.PNK
%HOMEPATH%\Mb24913Q84419\19671.RFE
%HOMEPATH%\Mb24913Q84419\74951.JTX
%HOMEPATH%\Mb24913Q84419\V73719W27457.UMC
%HOMEPATH%\Mb24913Q84419\M85126A82930.EJO
%HOMEPATH%\Ky65879P61963.txt
%TEMP%\aut1.tmp
%HOMEPATH%\Tb71562G95790.PW9
C:\EXE~1.EXE
%HOMEPATH%\Mb24913Q84419\7754.JNB
%HOMEPATH%\Mb24913Q84419\G42519M74826.HHN
%HOMEPATH%\Mb24913Q84419\IW.VQR
%HOMEPATH%\Mb24913Q84419\41291.CCJ
%HOMEPATH%\Mb24913Q84419\25089.MVY
%HOMEPATH%\Mb24913Q84419\48645.VLL
%HOMEPATH%\Mb24913Q84419\72288.DKY
%HOMEPATH%\Mb24913Q84419\I83954V50359.REC
%HOMEPATH%\Mb24913Q84419\32278.BHM
%HOMEPATH%\Mb24913Q84419\29012.PRD
%HOMEPATH%\Mb24913Q84419\H61099R16245.CEG
%HOMEPATH%\Mb24913Q84419\65852.BVI
%HOMEPATH%\Mb24913Q84419\17422.NZK
%HOMEPATH%\Mb24913Q84419\C14568Z11009.JQB
%HOMEPATH%\Mb24913Q84419\X80604E13583.SQD
%HOMEPATH%\Mb24913Q84419\80280.TWO
%HOMEPATH%\Mb24913Q84419\15900.ESE
%HOMEPATH%\Mb24913Q84419\J48772V82245.IWJ
%HOMEPATH%\Mb24913Q84419\44601.UQA
%HOMEPATH%\Mb24913Q84419\Z54830Q81374.EHA
%HOMEPATH%\Mb24913Q84419\G99006M94264.WHA
%HOMEPATH%\Mb24913Q84419\I8259F19883.PJX
%HOMEPATH%\Mb24913Q84419\51928.DYZ
%HOMEPATH%\Mb24913Q84419\Z76705M29203.VVG
%HOMEPATH%\Mb24913Q84419\8579.PJP
%HOMEPATH%\Mb24913Q84419\Z53384N59948.TBW
%HOMEPATH%\Mb24913Q84419\27555.ZEU
%HOMEPATH%\Mb24913Q84419\N77397X74813.JQP
%HOMEPATH%\Mb24913Q84419\A97569M91809.TKN
%HOMEPATH%\Mb24913Q84419\P54616F95589.SVW
%HOMEPATH%\Mb24913Q84419\8083.IOS
%HOMEPATH%\Mb24913Q84419\37709.SVJ
%HOMEPATH%\Mb24913Q84419\21772.HKL
%HOMEPATH%\Mb24913Q84419\20304.EPF
%HOMEPATH%\Mb24913Q84419\58972.NJX
%HOMEPATH%\Mb24913Q84419\82877.VZX
%HOMEPATH%\Mb24913Q84419\53069.LTV
%HOMEPATH%\Mb24913Q84419\11843.ODF
%HOMEPATH%\Mb24913Q84419\I16937G99808.EHR
%HOMEPATH%\Mb24913Q84419\70336.HMM
%HOMEPATH%\Mb24913Q84419\D94027M70337.LTV
%HOMEPATH%\Mb24913Q84419\U19094D51163.WOE
%HOMEPATH%\Mb24913Q84419\N97283K51794.JIM
%HOMEPATH%\Mb24913Q84419\68834.OMG
%HOMEPATH%\Mb24913Q84419\I85766X96577.OZG
%HOMEPATH%\Mb24913Q84419\71260.KCC
%HOMEPATH%\Mb24913Q84419\W77586H1723.JKA
%HOMEPATH%\Mb24913Q84419\R47737U20391.XDB
%HOMEPATH%\Mb24913Q84419\41459.QLR
%HOMEPATH%\Mb24913Q84419\73055.AOO
%HOMEPATH%\Mb24913Q84419\59629.UYM
%HOMEPATH%\Mb24913Q84419\A23534F20891.AGK
%HOMEPATH%\Mb24913Q84419\6090.OHL
%HOMEPATH%\Mb24913Q84419\E70602P80604.SWX
%HOMEPATH%\Mb24913Q84419\6158.HAR
%HOMEPATH%\Mb24913Q84419\R18646I31260.MYV
%HOMEPATH%\Mb24913Q84419\I88347S23162.IVO
%HOMEPATH%\Mb24913Q84419\23556.VIA
%HOMEPATH%\Mb24913Q84419\3737.YVL
%HOMEPATH%\Mb24913Q84419\B51727O57045.YBP
%HOMEPATH%\Mb24913Q84419\38256.FEY
%HOMEPATH%\Mb24913Q84419\69343.SGX
%HOMEPATH%\Mb24913Q84419\S80628K80745.WQV
%HOMEPATH%\Mb24913Q84419\W20704B43199.NFS
%HOMEPATH%\Mb24913Q84419\T23683X92474.CLY
%HOMEPATH%\Mb24913Q84419\C27112U56555.SOL
%HOMEPATH%\Mb24913Q84419\S79029U25079.FTL
%HOMEPATH%\Mb24913Q84419\5395.NYC
%HOMEPATH%\Mb24913Q84419\45758.ETL
%HOMEPATH%\Mb24913Q84419\83707.HRV
%HOMEPATH%\Mb24913Q84419\O57028X65495.GZA
%HOMEPATH%\Mb24913Q84419\20480.BXR
%HOMEPATH%\Mb24913Q84419\O86074A96087.INS
%HOMEPATH%\Mb24913Q84419\23873.OGT
%HOMEPATH%\Mb24913Q84419\M84956X66568.TZC
%HOMEPATH%\Mb24913Q84419\46071.XYA
%HOMEPATH%\Mb24913Q84419\3128.WLQ
%HOMEPATH%\Mb24913Q84419\38041.EOR
%HOMEPATH%\Mb24913Q84419\38410.SAK
%HOMEPATH%\Mb24913Q84419\32791.QOB
%HOMEPATH%\Mb24913Q84419\X86253L68548.AQE
%HOMEPATH%\Mb24913Q84419\98206.MNO
%HOMEPATH%\Mb24913Q84419\Q92257T58844.ESQ
%HOMEPATH%\Mb24913Q84419\U46781Y62250.BJX
%HOMEPATH%\Mb24913Q84419\28261.NLN
%HOMEPATH%\Mb24913Q84419\L4990G60183.OOA
%HOMEPATH%\Mb24913Q84419\81528.QHB
%HOMEPATH%\Mb24913Q84419\10457.UNA
%HOMEPATH%\Mb24913Q84419\93513.MFO
%HOMEPATH%\Mb24913Q84419\F35194P95246.MKC
%HOMEPATH%\Mb24913Q84419\I8442F65909.XAM
%HOMEPATH%\Mb24913Q84419\57524.ITZ
%HOMEPATH%\Mb24913Q84419\V68987B38326.VHQ
%HOMEPATH%\Mb24913Q84419\22995.VRY
%HOMEPATH%\Mb24913Q84419\S77375I88282.GAW
%HOMEPATH%\Mb24913Q84419\G38071G63832.UDC
%HOMEPATH%\Mb24913Q84419\Z62107C61457.IJA
%HOMEPATH%\Mb24913Q84419\Z72246A50992.CON
%HOMEPATH%\Mb24913Q84419\Y41234R1763.ZCT
%HOMEPATH%\Mb24913Q84419\25877.HYV
%HOMEPATH%\Mb24913Q84419\1447.XFW
%HOMEPATH%\Mb24913Q84419\X35307I48132.DLP
%HOMEPATH%\Mb24913Q84419\18993.WMZ
%HOMEPATH%\Mb24913Q84419\Y78416D69034.MTS
%HOMEPATH%\Mb24913Q84419\73027.TQM
%HOMEPATH%\Mb24913Q84419\80557.WKD
%HOMEPATH%\Mb24913Q84419\J22244Z95037.JUK
%HOMEPATH%\Mb24913Q84419\55635.YCC
%HOMEPATH%\Mb24913Q84419\56810.OTQ
%HOMEPATH%\Mb24913Q84419\A69691G43468.VKS
%HOMEPATH%\Mb24913Q84419\K60812Z73622.ACJ
%HOMEPATH%\Mb24913Q84419\71055.XEM
%HOMEPATH%\Mb24913Q84419\11597.PMZ
%HOMEPATH%\Mb24913Q84419\88915.FCP
%HOMEPATH%\Mb24913Q84419\B16545B84596.SYI
%HOMEPATH%\Mb24913Q84419\3316.EDO
%HOMEPATH%\Mb24913Q84419\Y24976K14838.IGF
%HOMEPATH%\Mb24913Q84419\A57653Z47970.JXT
%HOMEPATH%\Mb24913Q84419\57810.YLH
%HOMEPATH%\Mb24913Q84419\W64233I18266.QLK
%HOMEPATH%\Mb24913Q84419\23955.AKA
%HOMEPATH%\Mb24913Q84419\83395.AAU
%HOMEPATH%\Mb24913Q84419\16109.XNW
%HOMEPATH%\Mb24913Q84419\61775.ABS
%HOMEPATH%\Mb24913Q84419\34521.VIP
%HOMEPATH%\Mb24913Q84419\J56327Y12852.UCU
%HOMEPATH%\Mb24913Q84419\79491.LSP
%HOMEPATH%\Mb24913Q84419\3762.DOP
%HOMEPATH%\Mb24913Q84419\H20191X49133.REE
%HOMEPATH%\Mb24913Q84419\V69760C90869.EAM
%HOMEPATH%\Mb24913Q84419\71620.PVQ
%HOMEPATH%\Mb24913Q84419\51717.OZZ
%HOMEPATH%\Mb24913Q84419\42794.GKO
%HOMEPATH%\Mb24913Q84419\D74813U75843.ODP
%HOMEPATH%\Mb24913Q84419\G82520D33655.FOV
%HOMEPATH%\Mb24913Q84419\N92588S53222.YAS
%HOMEPATH%\Mb24913Q84419\O34688X20301.VQT
%HOMEPATH%\Mb24913Q84419\X91969V15501.ROW
%HOMEPATH%\Mb24913Q84419\16878.EWP
%HOMEPATH%\Mb24913Q84419\72885.AYG
%HOMEPATH%\Mb24913Q84419\A38484A21942.VPN
%HOMEPATH%\Mb24913Q84419\E43052Q41436.CPI
%HOMEPATH%\Mb24913Q84419\Q25710W18900.GUG
%HOMEPATH%\Mb24913Q84419\26733.JCL
%HOMEPATH%\Mb24913Q84419\56341.HNV
%HOMEPATH%\Mb24913Q84419\70963.LNU
%HOMEPATH%\Mb24913Q84419\Q22290U88158.QSQ
%HOMEPATH%\Mb24913Q84419\P26906L33348.AFX
%HOMEPATH%\Mb24913Q84419\P78605M22340.KBZ
%HOMEPATH%\Mb24913Q84419\52857.XBW
%HOMEPATH%\Mb24913Q84419\E47592Q74777.QUN
%HOMEPATH%\Mb24913Q84419\I38727V62365.SEB
%HOMEPATH%\Mb24913Q84419\W7805U29222.LDA
%HOMEPATH%\Mb24913Q84419\H71665M51147.FEZ
%HOMEPATH%\Mb24913Q84419\95349.OIZ
%HOMEPATH%\Mb24913Q84419\I25062R74371.PMH
%HOMEPATH%\Mb24913Q84419\R30871L96466.MCV
%HOMEPATH%\Mb24913Q84419\X19646T93070.LJN
%HOMEPATH%\Mb24913Q84419\C54577J19968.FBQ
%HOMEPATH%\Mb24913Q84419\50669.FQT
%HOMEPATH%\Mb24913Q84419\K42740J78820.KCX
%HOMEPATH%\Mb24913Q84419\65593.KOS
%HOMEPATH%\Mb24913Q84419\69382.NZD
%HOMEPATH%\Mb24913Q84419\65390.BUQ
%HOMEPATH%\Mb24913Q84419\P1619S55863.RCE
%HOMEPATH%\Mb24913Q84419\50048.UIM
%HOMEPATH%\Mb24913Q84419\48740.HPL
%HOMEPATH%\Mb24913Q84419\O97647H51335.GYZ
%HOMEPATH%\Mb24913Q84419\.exe.exe
%HOMEPATH%\Mb24913Q84419\74862.JDS
%HOMEPATH%\Mb24913Q84419\14600.SVK
%HOMEPATH%\Mb24913Q84419\T57896S4684.RRX
%HOMEPATH%\Mb24913Q84419\53829.OJT
%HOMEPATH%\Mb24913Q84419\14706.QFT
%HOMEPATH%\Mb24913Q84419\P84995S46526.PCQ
%HOMEPATH%\Mb24913Q84419\V81308O90487.RWC
%HOMEPATH%\Mb24913Q84419\30000.TKT
%HOMEPATH%\Mb24913Q84419\71544.NAK
%HOMEPATH%\Mb24913Q84419\80509.PXF
%HOMEPATH%\Mb24913Q84419\X60324O65149.ABD
%HOMEPATH%\Mb24913Q84419\50371.PPC
%HOMEPATH%\Mb24913Q84419\U68140C26584.YBA
%HOMEPATH%\Mb24913Q84419\10634.DVK
%HOMEPATH%\Mb24913Q84419\79118.ICM
%HOMEPATH%\Mb24913Q84419\I29539Z43758.STH
%HOMEPATH%\Mb24913Q84419\98252.HIK
%HOMEPATH%\Mb24913Q84419\M66091X26595.JVG
%HOMEPATH%\Mb24913Q84419\K65842R18138.IUW
%HOMEPATH%\Mb24913Q84419\R89662D43788.KQC
%HOMEPATH%\Mb24913Q84419\O11273B98575.POM
%HOMEPATH%\Mb24913Q84419\H54315O5368.XEX
%HOMEPATH%\Mb24913Q84419\Q6887D96989.IGJ
%HOMEPATH%\Mb24913Q84419\23476.BIV
%HOMEPATH%\Mb24913Q84419\38033.RPG
%HOMEPATH%\Mb24913Q84419\B22147L27698.ETG
%HOMEPATH%\Mb24913Q84419\Q47479G46219.BEG
%HOMEPATH%\Mb24913Q84419\66760.FOJ
%HOMEPATH%\Mb24913Q84419\48464.QWY
%HOMEPATH%\Mb24913Q84419\S29479T89591.OLY
%HOMEPATH%\Mb24913Q84419\20216.UND
%HOMEPATH%\Mb24913Q84419\95645.IMM
%HOMEPATH%\Mb24913Q84419\T51691U81486.XMY
%HOMEPATH%\Mb24913Q84419\R99372M49897.RLA
%HOMEPATH%\Mb24913Q84419\O17561L77467.LRP
%HOMEPATH%\Mb24913Q84419\K92085R23432.WXO
%HOMEPATH%\Mb24913Q84419\99257.AHJ
%HOMEPATH%\Mb24913Q84419\Z50309Z21090.SPP
%HOMEPATH%\Mb24913Q84419\F64031L10939.QUJ
%HOMEPATH%\Mb24913Q84419\J43244L88985.RCN
%HOMEPATH%\Mb24913Q84419\K27778M44556.FLD
%HOMEPATH%\Mb24913Q84419\P16976Z40969.HAI
%HOMEPATH%\Mb24913Q84419\89531.ZYZ
%HOMEPATH%\Mb24913Q84419\54122.MKQ
%HOMEPATH%\Mb24913Q84419\N50863Z31259.WNG
%HOMEPATH%\Mb24913Q84419\52138.AWD
%HOMEPATH%\Mb24913Q84419\82861.MUW
%HOMEPATH%\Mb24913Q84419\62458.THT
%HOMEPATH%\Mb24913Q84419\X60110Y34797.WMO
%HOMEPATH%\Mb24913Q84419\23301.AKP
%HOMEPATH%\Mb24913Q84419\17827.KFK
%HOMEPATH%\Mb24913Q84419\75414.WAM
%HOMEPATH%\Mb24913Q84419\P27163L45994.NXO
%HOMEPATH%\Mb24913Q84419\39242.GON
%HOMEPATH%\Mb24913Q84419\9447.PAA
%HOMEPATH%\Mb24913Q84419\V52694X4531.KNL
%HOMEPATH%\Mb24913Q84419\20832.RTG
%HOMEPATH%\Mb24913Q84419\47228.GEO
%HOMEPATH%\Mb24913Q84419\Z31954Q39320.NTX
%HOMEPATH%\Mb24913Q84419\D65667B64900.WCS
%HOMEPATH%\Mb24913Q84419\29263.KAJ
%HOMEPATH%\Mb24913Q84419\99528.ZPK
%HOMEPATH%\Mb24913Q84419\68671.WDB
%HOMEPATH%\Mb24913Q84419\F48351Q97279.BMZ
%HOMEPATH%\Mb24913Q84419\M1808W8720.DPW
%HOMEPATH%\Mb24913Q84419\K38549N82704.EHV
%HOMEPATH%\Mb24913Q84419\D42562Y43024.ZRN
%HOMEPATH%\Mb24913Q84419\C61608A6731.CFV
%HOMEPATH%\Mb24913Q84419\P61277U34762.AZG
%HOMEPATH%\Mb24913Q84419\N20668W27947.CEF
%HOMEPATH%\Mb24913Q84419\92592.ZFF
%HOMEPATH%\Mb24913Q84419\88641.PBO
%HOMEPATH%\Mb24913Q84419\12306.UXK
%HOMEPATH%\Mb24913Q84419\D83116Z92784.XZX
%HOMEPATH%\Mb24913Q84419\63225.KTQ
%HOMEPATH%\Mb24913Q84419\94254.SYE
%HOMEPATH%\Mb24913Q84419\37188.EQW
%HOMEPATH%\Mb24913Q84419\32700.UXA
%HOMEPATH%\Mb24913Q84419\31285.ZAD
%HOMEPATH%\Mb24913Q84419\67841.KSO
%HOMEPATH%\Mb24913Q84419\H53354E51973.FIP
%HOMEPATH%\Mb24913Q84419\48527.HEY
%HOMEPATH%\Mb24913Q84419\58078.RMT
%HOMEPATH%\Mb24913Q84419\L84774J86050.DGD
%HOMEPATH%\Mb24913Q84419\52785.FUB
%HOMEPATH%\Mb24913Q84419\72111.GCM
%HOMEPATH%\Mb24913Q84419\V70302I33560.OTY
%HOMEPATH%\Mb24913Q84419\P77849H7812.NXU
%HOMEPATH%\Mb24913Q84419\U77690R76785.JRE
%HOMEPATH%\Mb24913Q84419\E71000H92761.QIH
%HOMEPATH%\Mb24913Q84419\R41031Q81820.IKJ
%HOMEPATH%\Mb24913Q84419\N71242U42827.ZNY
%HOMEPATH%\Mb24913Q84419\35697.HUF
%HOMEPATH%\Mb24913Q84419\76762.KPS
%HOMEPATH%\Mb24913Q84419\70150.QMO
%HOMEPATH%\Mb24913Q84419\79239.AKV
%HOMEPATH%\Mb24913Q84419\73716.JDF
%HOMEPATH%\Mb24913Q84419\13191.XBX
%HOMEPATH%\Mb24913Q84419\Z7263F98334.EPN
%HOMEPATH%\Mb24913Q84419\28972.UBK
%HOMEPATH%\Mb24913Q84419\P75233E50610.DJO
%HOMEPATH%\Mb24913Q84419\K80247L5859.IJS
%HOMEPATH%\Mb24913Q84419\88240.LKP
%HOMEPATH%\Mb24913Q84419\56942.GUO
%HOMEPATH%\Mb24913Q84419\Y12200Y89153.JBY
%HOMEPATH%\Mb24913Q84419\74598.EXX
%HOMEPATH%\Mb24913Q84419\R68171Y62678.IUE
%HOMEPATH%\Mb24913Q84419\F75170A8337.POP
%HOMEPATH%\Mb24913Q84419\1880.LUO
%HOMEPATH%\Mb24913Q84419\93772.LHX
%HOMEPATH%\Mb24913Q84419\72528.QQY
%HOMEPATH%\Mb24913Q84419\42090.PJE
%HOMEPATH%\Mb24913Q84419\53924.EKX
%HOMEPATH%\Mb24913Q84419\58688.FRZ
%HOMEPATH%\Mb24913Q84419\38999.ETE
%HOMEPATH%\Mb24913Q84419\A83171R69649.XGC
%HOMEPATH%\Mb24913Q84419\92714.PKM
%HOMEPATH%\Mb24913Q84419\79325.XTO
%HOMEPATH%\Mb24913Q84419\19172.BOR
%HOMEPATH%\Mb24913Q84419\F67647K51939.HZV
%HOMEPATH%\Mb24913Q84419\26320.SRZ
%HOMEPATH%\Mb24913Q84419\V14845M79191.ZJV
%HOMEPATH%\Mb24913Q84419\B96265M38345.XAV
%HOMEPATH%\Mb24913Q84419\M37853M96031.LVX
%HOMEPATH%\Mb24913Q84419\G66275T43352.ROB
%HOMEPATH%\Mb24913Q84419\67320.SFV
%HOMEPATH%\Mb24913Q84419\P86271T96364.JLS
%HOMEPATH%\Mb24913Q84419\3547.SNT
%HOMEPATH%\Mb24913Q84419\82728.TDF
%HOMEPATH%\Mb24913Q84419\U82358F94885.KCH
%HOMEPATH%\Mb24913Q84419\53787.DZO
%HOMEPATH%\Mb24913Q84419\A82269Z96289.FOP
%HOMEPATH%\Mb24913Q84419\A71101C17754.BKK
%HOMEPATH%\Mb24913Q84419\W97467N32371.CJW
%HOMEPATH%\Mb24913Q84419\59927.APG
%HOMEPATH%\Mb24913Q84419\4818.FDX
%HOMEPATH%\Mb24913Q84419\67764.GFO
%HOMEPATH%\Mb24913Q84419\27438.KMP
%HOMEPATH%\Mb24913Q84419\H19764M33376.ZVS
%HOMEPATH%\Mb24913Q84419\60137.BPB
%HOMEPATH%\Mb24913Q84419\25448.FAO
%HOMEPATH%\Mb24913Q84419\48266.NTK
%HOMEPATH%\Mb24913Q84419\J27905Y78709.OPH
%HOMEPATH%\Mb24913Q84419\19991.SNQ
%HOMEPATH%\Mb24913Q84419\35966.CEV
%HOMEPATH%\Mb24913Q84419\53893.QDL
%HOMEPATH%\Mb24913Q84419\V59696F66194.DPZ
%HOMEPATH%\Mb24913Q84419\90812.JGS
%HOMEPATH%\Mb24913Q84419\F88719P21091.YCW
%HOMEPATH%\Mb24913Q84419\72058.GZW
%HOMEPATH%\Mb24913Q84419\Y10467H39548.LSV
%HOMEPATH%\Mb24913Q84419\33679.IFD
%HOMEPATH%\Mb24913Q84419\63736.EOI
%HOMEPATH%\Mb24913Q84419\G8049J82457.RFX
%HOMEPATH%\Mb24913Q84419\78684.EAJ
%HOMEPATH%\Mb24913Q84419\C44199I46076.TXD
%HOMEPATH%\Mb24913Q84419\82448.LPU
%HOMEPATH%\Mb24913Q84419\90600.DLF
%HOMEPATH%\Mb24913Q84419\43860.QUR
%HOMEPATH%\Mb24913Q84419\34265.WLI
%HOMEPATH%\Mb24913Q84419\49889.PAY
%HOMEPATH%\Mb24913Q84419\4880.PAT
%HOMEPATH%\Mb24913Q84419\72879.MOP
%HOMEPATH%\Mb24913Q84419\14415.KZL
%HOMEPATH%\Mb24913Q84419\Q31669N16719.CVU
%HOMEPATH%\Mb24913Q84419\F16343R47829.JPB
%HOMEPATH%\Mb24913Q84419\G22076B35719.BTG
%HOMEPATH%\Mb24913Q84419\I77935U71590.JYG
%HOMEPATH%\Mb24913Q84419\Q78408Y76427.DBQ
%HOMEPATH%\Mb24913Q84419\33327.BYZ

Присваивает атрибут 'скрытый' для следующих файлов:

%HOMEPATH%\Tb71562G95790.PW9
%HOMEPATH%\Ky65879P61963.txt

Удаляет следующие файлы:

%TEMP%\aut1.tmp

Другое:

Ищет следующие окна:

ClassName: 'Indicator' WindowName: ''
ClassName: 'Shell_TrayWnd' WindowName: ''
ClassName: 'EDIT' WindowName: ''

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней