Поддержка
Круглосуточная поддержка

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.PWS.Siggen1.54572

Добавлен в вирусную базу Dr.Web: 2016-07-12

Описание добавлено:

Техническая информация

Для обеспечения автозапуска и распространения:
Модифицирует следующие ключи реестра:
  • [<HKLM>\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command] '' = '"<LS_APPDATA>\eat.exe" -a "%ProgramFiles%\Internet Explorer\iexplore.exe"'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '1825717854' = '<LS_APPDATA>\eat.exe'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ctfmon.exe' = '<SYSTEM32>\ctfmon.exe'
Вредоносные функции:
Для обхода брандмауэра удаляет или модифицирует следующие ключи реестра:
  • [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] 'EnableFirewall' = '00000000'
  • [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] 'DoNotAllowExceptions' = '00000000'
  • [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] 'DisableNotifications' = '00000001'
  • [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'EnableFirewall' = '00000000'
  • [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'DoNotAllowExceptions' = '00000000'
  • [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'DisableNotifications' = '00000001'
Для затруднения выявления своего присутствия в системе
блокирует запуск следующих системных утилит:
  • Обновления системы (Windows Update)
блокирует:
  • Центр обеспечения безопасности (Security Center)
Создает и запускает на исполнение:
  • '%TEMP%\cEt6g.exe' (загружен из сети Интернет)
Запускает на исполнение:
  • '%TEMP%\cEt6g.exe'
  • '<LS_APPDATA>\eat.exe' -gav <Полный путь к вирусу>
Ищет ветки реестра, отвечающие за хранение паролей сторонними программами:
  • [<HKCU>\Software\VanDyke\SecureFX]
  • [<HKCU>\Software\FTPWare\COREFTP\Sites]
  • [<HKCU>\Software\Cryer\WebSitePublisher]
  • [<HKLM>\Software\NCH Software\ClassicFTP\FTPAccounts]
  • [<HKCU>\Software\ExpanDrive\Sessions]
  • [<HKCU>\Software\CoffeeCup Software\Internet\Profiles]
  • [<HKCU>\Software\BPFTP]
  • [<HKCU>\Software\BulletProof Software\BulletProof FTP Client\Options]
  • [<HKCU>\Software\TurboFTP]
  • [<HKCU>\Software\Sota\FFFTP\Options]
  • [<HKCU>\Software\Sota\FFFTP]
  • [<HKCU>\Software\NCH Software\ClassicFTP\FTPAccounts]
  • [<HKLM>\Software\Martin Prikryl]
  • [<HKCU>\Software\Martin Prikryl]
  • [<HKCU>\Software\South River Technologies\WebDrive\Connections]
  • [<HKCU>\Software\Microsoft\Internet Explorer\IntelliForms\Storage2]
  • [<HKLM>\Software\South River Technologies\WebDrive\Connections]
  • [<HKLM>\Software\SoftX.org\FTPClient\Sites]
  • [<HKLM>\SOFTWARE\NCH Software\Fling\Accounts]
  • [<HKCU>\SOFTWARE\NCH Software\Fling\Accounts]
  • [<HKCU>\Software\FTPClient\Sites]
  • [<HKCU>\Software\SoftX.org\FTPClient\Sites]
  • [<HKLM>\Software\FTPClient\Sites]
  • [<HKCU>\Software\GlobalSCAPE\CuteFTP 6 Professional\QCToolbar]
  • [<HKCU>\Software\GlobalSCAPE\CuteFTP 6 Home\QCToolbar]
  • [<HKCU>\Software\GlobalSCAPE\CuteFTP 7 Home\QCToolbar]
  • [<HKCU>\Software\GlobalSCAPE\CuteFTP 8 Home\QCToolbar]
  • [<HKCU>\Software\GlobalSCAPE\CuteFTP 7 Professional\QCToolbar]
  • [<HKLM>\Software\Ghisler\Total Commander]
  • [<HKCU>\Software\Far2\SavedDialogHistory\FTPHost]
  • [<HKCU>\Software\Far\SavedDialogHistory\FTPHost]
  • [<HKCU>\Software\Ghisler\Windows Commander]
  • [<HKLM>\Software\Ghisler\Windows Commander]
  • [<HKCU>\Software\Ghisler\Total Commander]
  • [<HKCU>\Software\GlobalSCAPE\CuteFTP 8 Professional\QCToolbar]
  • [<HKLM>\Software\FileZilla Client]
  • [<HKLM>\Software\FileZilla]
  • [<HKCU>\Software\BPFTP\Bullet Proof FTP\Main]
  • [<HKCU>\Software\BPFTP\Bullet Proof FTP\Options]
  • [<HKCU>\Software\BulletProof Software\BulletProof FTP Client\Main]
  • [<HKCU>\Software\FileZilla Client]
  • [<HKCU>\Software\FlashFXP]
  • [<HKCU>\Software\FlashFXP\3]
  • [<HKLM>\Software\FlashFXP\3]
  • [<HKCU>\Software\FileZilla]
  • [<HKLM>\Software\FlashFXP]
Изменения в файловой системе:
Создает следующие файлы:
  • %TEMP%\aek2F6.tmp
  • %TEMP%\aek2F7.tmp
  • %TEMP%\cEt6g.exe
  • %TEMP%\aek2F5.tmp
  • %TEMP%\aek2F8.tmp
  • %TEMP%\aek2FB.tmp
  • %TEMP%\aek2FC.tmp
  • %TEMP%\aek2F9.tmp
  • %TEMP%\aek2FA.tmp
  • %TEMP%\aek2EE.tmp
  • %TEMP%\aek2EF.tmp
  • %TEMP%\aek2EC.tmp
  • %TEMP%\aek2ED.tmp
  • %TEMP%\aek2F0.tmp
  • %TEMP%\aek2F3.tmp
  • %TEMP%\aek2F4.tmp
  • %TEMP%\aek2F1.tmp
  • %TEMP%\aek2F2.tmp
  • %TEMP%\aek308.tmp
  • %TEMP%\aek309.tmp
  • %TEMP%\aek306.tmp
  • %TEMP%\aek307.tmp
  • %TEMP%\aek30A.tmp
  • %TEMP%\aek30D.tmp
  • %TEMP%\aek30E.tmp
  • %TEMP%\aek30B.tmp
  • %TEMP%\aek30C.tmp
  • %TEMP%\aek2FF.tmp
  • %TEMP%\aek300.tmp
  • %TEMP%\aek2FD.tmp
  • %TEMP%\aek2FE.tmp
  • %TEMP%\aek301.tmp
  • %TEMP%\aek304.tmp
  • %TEMP%\aek305.tmp
  • %TEMP%\aek302.tmp
  • %TEMP%\aek303.tmp
  • %TEMP%\aek2D3.tmp
  • %TEMP%\aek2D4.tmp
  • %TEMP%\aek2D1.tmp
  • %TEMP%\aek2D2.tmp
  • %TEMP%\aek2D5.tmp
  • %TEMP%\aek2D8.tmp
  • %TEMP%\aek2D9.tmp
  • %TEMP%\aek2D6.tmp
  • %TEMP%\aek2D7.tmp
  • %TEMP%\aek2CA.tmp
  • %TEMP%\aek2CB.tmp
  • %TEMP%\aek2C8.tmp
  • %TEMP%\aek2C9.tmp
  • %TEMP%\aek2CC.tmp
  • %TEMP%\aek2CF.tmp
  • %TEMP%\aek2D0.tmp
  • %TEMP%\aek2CD.tmp
  • %TEMP%\aek2CE.tmp
  • %TEMP%\aek2E5.tmp
  • %TEMP%\aek2E6.tmp
  • %TEMP%\aek2E3.tmp
  • %TEMP%\aek2E4.tmp
  • %TEMP%\aek2E7.tmp
  • %TEMP%\aek2EA.tmp
  • %TEMP%\aek2EB.tmp
  • %TEMP%\aek2E8.tmp
  • %TEMP%\aek2E9.tmp
  • %TEMP%\aek2DC.tmp
  • %TEMP%\aek2DD.tmp
  • %TEMP%\aek2DA.tmp
  • %TEMP%\aek2DB.tmp
  • %TEMP%\aek2DE.tmp
  • %TEMP%\aek2E1.tmp
  • %TEMP%\aek2E2.tmp
  • %TEMP%\aek2DF.tmp
  • %TEMP%\aek2E0.tmp
  • %TEMP%\aek30F.tmp
  • %TEMP%\aek33F.tmp
  • %TEMP%\aek340.tmp
  • %TEMP%\aek33D.tmp
  • %TEMP%\aek33E.tmp
  • %TEMP%\aek341.tmp
  • %TEMP%\aek344.tmp
  • %TEMP%\aek345.tmp
  • %TEMP%\aek342.tmp
  • %TEMP%\aek343.tmp
  • %TEMP%\aek336.tmp
  • %TEMP%\aek337.tmp
  • %TEMP%\aek334.tmp
  • %TEMP%\aek335.tmp
  • %TEMP%\aek338.tmp
  • %TEMP%\aek33B.tmp
  • %TEMP%\aek33C.tmp
  • %TEMP%\aek339.tmp
  • %TEMP%\aek33A.tmp
  • %TEMP%\aek351.tmp
  • %TEMP%\aek352.tmp
  • %TEMP%\aek34F.tmp
  • %TEMP%\aek350.tmp
  • %TEMP%\aek353.tmp
  • %TEMP%\aek356.tmp
  • %TEMP%\aek357.tmp
  • %TEMP%\aek354.tmp
  • %TEMP%\aek355.tmp
  • %TEMP%\aek348.tmp
  • %TEMP%\aek349.tmp
  • %TEMP%\aek346.tmp
  • %TEMP%\aek347.tmp
  • %TEMP%\aek34A.tmp
  • %TEMP%\aek34D.tmp
  • %TEMP%\aek34E.tmp
  • %TEMP%\aek34B.tmp
  • %TEMP%\aek34C.tmp
  • %TEMP%\aek31B.tmp
  • %TEMP%\aek31C.tmp
  • %TEMP%\aek319.tmp
  • %TEMP%\aek31A.tmp
  • %TEMP%\aek31D.tmp
  • %TEMP%\aek320.tmp
  • %TEMP%\aek321.tmp
  • %TEMP%\aek31E.tmp
  • %TEMP%\aek31F.tmp
  • %TEMP%\aek312.tmp
  • %TEMP%\aek313.tmp
  • %TEMP%\aek310.tmp
  • %TEMP%\aek311.tmp
  • %TEMP%\aek314.tmp
  • %TEMP%\aek317.tmp
  • %TEMP%\aek318.tmp
  • %TEMP%\aek315.tmp
  • %TEMP%\aek316.tmp
  • %TEMP%\aek32D.tmp
  • %TEMP%\aek32E.tmp
  • %TEMP%\aek32B.tmp
  • %TEMP%\aek32C.tmp
  • %TEMP%\aek32F.tmp
  • %TEMP%\aek332.tmp
  • %TEMP%\aek333.tmp
  • %TEMP%\aek330.tmp
  • %TEMP%\aek331.tmp
  • %TEMP%\aek324.tmp
  • %TEMP%\aek325.tmp
  • %TEMP%\aek322.tmp
  • %TEMP%\aek323.tmp
  • %TEMP%\aek326.tmp
  • %TEMP%\aek329.tmp
  • %TEMP%\aek32A.tmp
  • %TEMP%\aek327.tmp
  • %TEMP%\aek328.tmp
  • %TEMP%\aek2C7.tmp
  • %TEMP%\aek265.tmp
  • %TEMP%\aek266.tmp
  • %TEMP%\aek263.tmp
  • %TEMP%\aek264.tmp
  • %TEMP%\aek267.tmp
  • %TEMP%\aek26A.tmp
  • %TEMP%\aek26B.tmp
  • %TEMP%\aek268.tmp
  • %TEMP%\aek269.tmp
  • %TEMP%\aek25C.tmp
  • %TEMP%\aek25D.tmp
  • %TEMP%\aek25A.tmp
  • %TEMP%\aek25B.tmp
  • %TEMP%\aek25E.tmp
  • %TEMP%\aek261.tmp
  • %TEMP%\aek262.tmp
  • %TEMP%\aek25F.tmp
  • %TEMP%\aek260.tmp
  • %TEMP%\aek277.tmp
  • %TEMP%\aek278.tmp
  • %TEMP%\aek275.tmp
  • %TEMP%\aek276.tmp
  • %TEMP%\aek279.tmp
  • %TEMP%\aek27C.tmp
  • %TEMP%\aek27D.tmp
  • %TEMP%\aek27A.tmp
  • %TEMP%\aek27B.tmp
  • %TEMP%\aek26E.tmp
  • %TEMP%\aek26F.tmp
  • %TEMP%\aek26C.tmp
  • %TEMP%\aek26D.tmp
  • %TEMP%\aek270.tmp
  • %TEMP%\aek273.tmp
  • %TEMP%\aek274.tmp
  • %TEMP%\aek271.tmp
  • %TEMP%\aek272.tmp
  • <LS_APPDATA>\srrp.exe
  • %TEMP%\aek245.tmp
  • %TEMP%\aek244.tmp
  • %HOMEPATH%\Templates\wfau.exe
  • %ALLUSERSPROFILE%\Application Data\csce.exe
  • %TEMP%\aek247.tmp
  • %TEMP%\aek248.tmp
  • %TEMP%\aek246.tmp
  • %TEMP%\dars.exe
  • %HOMEPATH%\Templates\gper.exe
  • <LS_APPDATA>\ceta.exe
  • %TEMP%\rswq.exe
  • %TEMP%\aek240.tmp
  • %TEMP%\aek241.tmp
  • %TEMP%\oehw.exe
  • %TEMP%\aek243.tmp
  • %ALLUSERSPROFILE%\Application Data\iafu.exe
  • %TEMP%\aek242.tmp
  • %TEMP%\aek253.tmp
  • %TEMP%\aek254.tmp
  • %TEMP%\aek251.tmp
  • %TEMP%\aek252.tmp
  • %TEMP%\aek255.tmp
  • %TEMP%\aek258.tmp
  • %TEMP%\aek259.tmp
  • %TEMP%\aek256.tmp
  • %TEMP%\aek257.tmp
  • %TEMP%\aek24A.tmp
  • %TEMP%\aek24B.tmp
  • %HOMEPATH%\Templates\dtow.exe
  • %TEMP%\aek249.tmp
  • %TEMP%\aek24C.tmp
  • %TEMP%\aek24F.tmp
  • %TEMP%\aek250.tmp
  • %TEMP%\aek24D.tmp
  • %TEMP%\aek24E.tmp
  • %TEMP%\aek27E.tmp
  • %TEMP%\aek2AE.tmp
  • %TEMP%\aek2AF.tmp
  • %TEMP%\aek2AC.tmp
  • %TEMP%\aek2AD.tmp
  • %TEMP%\aek2B0.tmp
  • %TEMP%\aek2B3.tmp
  • %TEMP%\aek2B4.tmp
  • %TEMP%\aek2B1.tmp
  • %TEMP%\aek2B2.tmp
  • %TEMP%\aek2A5.tmp
  • %TEMP%\aek2A6.tmp
  • %TEMP%\aek2A3.tmp
  • %TEMP%\aek2A4.tmp
  • %TEMP%\aek2A7.tmp
  • %TEMP%\aek2AA.tmp
  • %TEMP%\aek2AB.tmp
  • %TEMP%\aek2A8.tmp
  • %TEMP%\aek2A9.tmp
  • %TEMP%\aek2C0.tmp
  • %TEMP%\aek2C1.tmp
  • %TEMP%\aek2BE.tmp
  • %TEMP%\aek2BF.tmp
  • %TEMP%\aek2C2.tmp
  • %TEMP%\aek2C5.tmp
  • %TEMP%\aek2C6.tmp
  • %TEMP%\aek2C3.tmp
  • %TEMP%\aek2C4.tmp
  • %TEMP%\aek2B7.tmp
  • %TEMP%\aek2B8.tmp
  • %TEMP%\aek2B5.tmp
  • %TEMP%\aek2B6.tmp
  • %TEMP%\aek2B9.tmp
  • %TEMP%\aek2BC.tmp
  • %TEMP%\aek2BD.tmp
  • %TEMP%\aek2BA.tmp
  • %TEMP%\aek2BB.tmp
  • %TEMP%\aek28A.tmp
  • %TEMP%\aek28B.tmp
  • %TEMP%\aek288.tmp
  • %TEMP%\aek289.tmp
  • %TEMP%\aek28C.tmp
  • %TEMP%\aek28F.tmp
  • %TEMP%\aek290.tmp
  • %TEMP%\aek28D.tmp
  • %TEMP%\aek28E.tmp
  • %TEMP%\aek281.tmp
  • %TEMP%\aek282.tmp
  • %TEMP%\aek27F.tmp
  • %TEMP%\aek280.tmp
  • %TEMP%\aek283.tmp
  • %TEMP%\aek286.tmp
  • %TEMP%\aek287.tmp
  • %TEMP%\aek284.tmp
  • %TEMP%\aek285.tmp
  • %TEMP%\aek29C.tmp
  • %TEMP%\aek29D.tmp
  • %TEMP%\aek29A.tmp
  • %TEMP%\aek29B.tmp
  • %TEMP%\aek29E.tmp
  • %TEMP%\aek2A1.tmp
  • %TEMP%\aek2A2.tmp
  • %TEMP%\aek29F.tmp
  • %TEMP%\aek2A0.tmp
  • %TEMP%\aek293.tmp
  • %TEMP%\aek294.tmp
  • %TEMP%\aek291.tmp
  • %TEMP%\aek292.tmp
  • %TEMP%\aek295.tmp
  • %TEMP%\aek298.tmp
  • %TEMP%\aek299.tmp
  • %TEMP%\aek296.tmp
  • %TEMP%\aek297.tmp
  • %TEMP%\aek419.tmp
  • %TEMP%\aek41A.tmp
  • %TEMP%\aek417.tmp
  • %TEMP%\aek418.tmp
  • %TEMP%\aek41B.tmp
  • %TEMP%\aek41E.tmp
  • %TEMP%\aek41F.tmp
  • %TEMP%\aek41C.tmp
  • %TEMP%\aek41D.tmp
  • %TEMP%\aek410.tmp
  • %TEMP%\aek411.tmp
  • %TEMP%\aek40E.tmp
  • %TEMP%\aek40F.tmp
  • %TEMP%\aek412.tmp
  • %TEMP%\aek415.tmp
  • %TEMP%\aek416.tmp
  • %TEMP%\aek413.tmp
  • %TEMP%\aek414.tmp
  • %TEMP%\aek42B.tmp
  • %TEMP%\aek42C.tmp
  • %TEMP%\aek429.tmp
  • %TEMP%\aek42A.tmp
  • %TEMP%\aek42D.tmp
  • %TEMP%\aek430.tmp
  • %TEMP%\aek431.tmp
  • %TEMP%\aek42E.tmp
  • %TEMP%\aek42F.tmp
  • %TEMP%\aek422.tmp
  • %TEMP%\aek423.tmp
  • %TEMP%\aek420.tmp
  • %TEMP%\aek421.tmp
  • %TEMP%\aek424.tmp
  • %TEMP%\aek427.tmp
  • %TEMP%\aek428.tmp
  • %TEMP%\aek425.tmp
  • %TEMP%\aek426.tmp
  • %TEMP%\aek3F5.tmp
  • %TEMP%\aek3F6.tmp
  • %TEMP%\aek3F3.tmp
  • %TEMP%\aek3F4.tmp
  • %TEMP%\aek3F7.tmp
  • %TEMP%\aek3FA.tmp
  • %TEMP%\aek3FB.tmp
  • %TEMP%\aek3F8.tmp
  • %TEMP%\aek3F9.tmp
  • %TEMP%\aek3EC.tmp
  • %TEMP%\aek3ED.tmp
  • %TEMP%\aek3EA.tmp
  • %TEMP%\aek3EB.tmp
  • %TEMP%\aek3EE.tmp
  • %TEMP%\aek3F1.tmp
  • %TEMP%\aek3F2.tmp
  • %TEMP%\aek3EF.tmp
  • %TEMP%\aek3F0.tmp
  • %TEMP%\aek407.tmp
  • %TEMP%\aek408.tmp
  • %TEMP%\aek405.tmp
  • %TEMP%\aek406.tmp
  • %TEMP%\aek409.tmp
  • %TEMP%\aek40C.tmp
  • %TEMP%\aek40D.tmp
  • %TEMP%\aek40A.tmp
  • %TEMP%\aek40B.tmp
  • %TEMP%\aek3FE.tmp
  • %TEMP%\aek3FF.tmp
  • %TEMP%\aek3FC.tmp
  • %TEMP%\aek3FD.tmp
  • %TEMP%\aek400.tmp
  • %TEMP%\aek403.tmp
  • %TEMP%\aek404.tmp
  • %TEMP%\aek401.tmp
  • %TEMP%\aek402.tmp
  • %TEMP%\aek432.tmp
  • %TEMP%\aek462.tmp
  • %TEMP%\aek463.tmp
  • %TEMP%\aek460.tmp
  • %TEMP%\aek461.tmp
  • %TEMP%\aek464.tmp
  • %TEMP%\aek467.tmp
  • %TEMP%\aek468.tmp
  • %TEMP%\aek465.tmp
  • %TEMP%\aek466.tmp
  • %TEMP%\aek459.tmp
  • %TEMP%\aek45A.tmp
  • %TEMP%\aek457.tmp
  • %TEMP%\aek458.tmp
  • %TEMP%\aek45B.tmp
  • %TEMP%\aek45E.tmp
  • %TEMP%\aek45F.tmp
  • %TEMP%\aek45C.tmp
  • %TEMP%\aek45D.tmp
  • %TEMP%\aek474.tmp
  • %TEMP%\aek475.tmp
  • %TEMP%\aek472.tmp
  • %TEMP%\aek473.tmp
  • %TEMP%\aek476.tmp
  • %TEMP%\gi1ijxbw5348lw64v3b17mpcvb0pa336b32478n082ld
  • %HOMEPATH%\Templates\gi1ijxbw5348lw64v3b17mpcvb0pa336b32478n082ld
  • <LS_APPDATA>\gi1ijxbw5348lw64v3b17mpcvb0pa336b32478n082ld
  • %ALLUSERSPROFILE%\Application Data\gi1ijxbw5348lw64v3b17mpcvb0pa336b32478n082ld
  • %TEMP%\aek46B.tmp
  • %TEMP%\aek46C.tmp
  • %TEMP%\aek469.tmp
  • %TEMP%\aek46A.tmp
  • %TEMP%\aek46D.tmp
  • %TEMP%\aek470.tmp
  • %TEMP%\aek471.tmp
  • %TEMP%\aek46E.tmp
  • %TEMP%\aek46F.tmp
  • %TEMP%\aek43E.tmp
  • %TEMP%\aek43F.tmp
  • %TEMP%\aek43C.tmp
  • %TEMP%\aek43D.tmp
  • %TEMP%\aek440.tmp
  • %TEMP%\aek443.tmp
  • %TEMP%\aek444.tmp
  • %TEMP%\aek441.tmp
  • %TEMP%\aek442.tmp
  • %TEMP%\aek435.tmp
  • %TEMP%\aek436.tmp
  • %TEMP%\aek433.tmp
  • %TEMP%\aek434.tmp
  • %TEMP%\aek437.tmp
  • %TEMP%\aek43A.tmp
  • %TEMP%\aek43B.tmp
  • %TEMP%\aek438.tmp
  • %TEMP%\aek439.tmp
  • %TEMP%\aek450.tmp
  • %TEMP%\aek451.tmp
  • %TEMP%\aek44E.tmp
  • %TEMP%\aek44F.tmp
  • %TEMP%\aek452.tmp
  • %TEMP%\aek455.tmp
  • %TEMP%\aek456.tmp
  • %TEMP%\aek453.tmp
  • %TEMP%\aek454.tmp
  • %TEMP%\aek447.tmp
  • %TEMP%\aek448.tmp
  • %TEMP%\aek445.tmp
  • %TEMP%\aek446.tmp
  • %TEMP%\aek449.tmp
  • %TEMP%\aek44C.tmp
  • %TEMP%\aek44D.tmp
  • %TEMP%\aek44A.tmp
  • %TEMP%\aek44B.tmp
  • %TEMP%\aek3E9.tmp
  • %TEMP%\aek387.tmp
  • %TEMP%\aek388.tmp
  • %TEMP%\aek385.tmp
  • %TEMP%\aek386.tmp
  • %TEMP%\aek389.tmp
  • %TEMP%\aek38C.tmp
  • %TEMP%\aek38D.tmp
  • %TEMP%\aek38A.tmp
  • %TEMP%\aek38B.tmp
  • %TEMP%\aek37E.tmp
  • %TEMP%\aek37F.tmp
  • %TEMP%\aek37C.tmp
  • %TEMP%\aek37D.tmp
  • %TEMP%\aek380.tmp
  • %TEMP%\aek383.tmp
  • %TEMP%\aek384.tmp
  • %TEMP%\aek381.tmp
  • %TEMP%\aek382.tmp
  • %TEMP%\aek399.tmp
  • %TEMP%\aek39A.tmp
  • %TEMP%\aek397.tmp
  • %TEMP%\aek398.tmp
  • %TEMP%\aek39B.tmp
  • %TEMP%\aek39E.tmp
  • %TEMP%\aek39F.tmp
  • %TEMP%\aek39C.tmp
  • %TEMP%\aek39D.tmp
  • %TEMP%\aek390.tmp
  • %TEMP%\aek391.tmp
  • %TEMP%\aek38E.tmp
  • %TEMP%\aek38F.tmp
  • %TEMP%\aek392.tmp
  • %TEMP%\aek395.tmp
  • %TEMP%\aek396.tmp
  • %TEMP%\aek393.tmp
  • %TEMP%\aek394.tmp
  • %TEMP%\aek363.tmp
  • %TEMP%\aek364.tmp
  • %TEMP%\aek361.tmp
  • %TEMP%\aek362.tmp
  • %TEMP%\aek365.tmp
  • %TEMP%\aek368.tmp
  • %TEMP%\aek369.tmp
  • %TEMP%\aek366.tmp
  • %TEMP%\aek367.tmp
  • %TEMP%\aek35A.tmp
  • %TEMP%\aek35B.tmp
  • %TEMP%\aek358.tmp
  • %TEMP%\aek359.tmp
  • %TEMP%\aek35C.tmp
  • %TEMP%\aek35F.tmp
  • %TEMP%\aek360.tmp
  • %TEMP%\aek35D.tmp
  • %TEMP%\aek35E.tmp
  • %TEMP%\aek375.tmp
  • %TEMP%\aek376.tmp
  • %TEMP%\aek373.tmp
  • %TEMP%\aek374.tmp
  • %TEMP%\aek377.tmp
  • %TEMP%\aek37A.tmp
  • %TEMP%\aek37B.tmp
  • %TEMP%\aek378.tmp
  • %TEMP%\aek379.tmp
  • %TEMP%\aek36C.tmp
  • %TEMP%\aek36D.tmp
  • %TEMP%\aek36A.tmp
  • %TEMP%\aek36B.tmp
  • %TEMP%\aek36E.tmp
  • %TEMP%\aek371.tmp
  • %TEMP%\aek372.tmp
  • %TEMP%\aek36F.tmp
  • %TEMP%\aek370.tmp
  • %TEMP%\aek3A0.tmp
  • %TEMP%\aek3D0.tmp
  • %TEMP%\aek3D1.tmp
  • %TEMP%\aek3CE.tmp
  • %TEMP%\aek3CF.tmp
  • %TEMP%\aek3D2.tmp
  • %TEMP%\aek3D5.tmp
  • %TEMP%\aek3D6.tmp
  • %TEMP%\aek3D3.tmp
  • %TEMP%\aek3D4.tmp
  • %TEMP%\aek3C7.tmp
  • %TEMP%\aek3C8.tmp
  • %TEMP%\aek3C5.tmp
  • %TEMP%\aek3C6.tmp
  • %TEMP%\aek3C9.tmp
  • %TEMP%\aek3CC.tmp
  • %TEMP%\aek3CD.tmp
  • %TEMP%\aek3CA.tmp
  • %TEMP%\aek3CB.tmp
  • %TEMP%\aek3E2.tmp
  • %TEMP%\aek3E3.tmp
  • %TEMP%\aek3E0.tmp
  • %TEMP%\aek3E1.tmp
  • %TEMP%\aek3E4.tmp
  • %TEMP%\aek3E7.tmp
  • %TEMP%\aek3E8.tmp
  • %TEMP%\aek3E5.tmp
  • %TEMP%\aek3E6.tmp
  • %TEMP%\aek3D9.tmp
  • %TEMP%\aek3DA.tmp
  • %TEMP%\aek3D7.tmp
  • %TEMP%\aek3D8.tmp
  • %TEMP%\aek3DB.tmp
  • %TEMP%\aek3DE.tmp
  • %TEMP%\aek3DF.tmp
  • %TEMP%\aek3DC.tmp
  • %TEMP%\aek3DD.tmp
  • %TEMP%\aek3AC.tmp
  • %TEMP%\aek3AD.tmp
  • %TEMP%\aek3AA.tmp
  • %TEMP%\aek3AB.tmp
  • %TEMP%\aek3AE.tmp
  • %TEMP%\aek3B1.tmp
  • %TEMP%\aek3B2.tmp
  • %TEMP%\aek3AF.tmp
  • %TEMP%\aek3B0.tmp
  • %TEMP%\aek3A3.tmp
  • %TEMP%\aek3A4.tmp
  • %TEMP%\aek3A1.tmp
  • %TEMP%\aek3A2.tmp
  • %TEMP%\aek3A5.tmp
  • %TEMP%\aek3A8.tmp
  • %TEMP%\aek3A9.tmp
  • %TEMP%\aek3A6.tmp
  • %TEMP%\aek3A7.tmp
  • %TEMP%\aek3BE.tmp
  • %TEMP%\aek3BF.tmp
  • %TEMP%\aek3BC.tmp
  • %TEMP%\aek3BD.tmp
  • %TEMP%\aek3C0.tmp
  • %TEMP%\aek3C3.tmp
  • %TEMP%\aek3C4.tmp
  • %TEMP%\aek3C1.tmp
  • %TEMP%\aek3C2.tmp
  • %TEMP%\aek3B5.tmp
  • %TEMP%\aek3B6.tmp
  • %TEMP%\aek3B3.tmp
  • %TEMP%\aek3B4.tmp
  • %TEMP%\aek3B7.tmp
  • %TEMP%\aek3BA.tmp
  • %TEMP%\aek3BB.tmp
  • %TEMP%\aek3B8.tmp
  • %TEMP%\aek3B9.tmp
  • %TEMP%\aekC2.tmp
  • %TEMP%\aekC3.tmp
  • %TEMP%\aekC0.tmp
  • %TEMP%\aekC1.tmp
  • %TEMP%\aekC4.tmp
  • %TEMP%\aekC7.tmp
  • %TEMP%\aekC8.tmp
  • %TEMP%\aekC5.tmp
  • %TEMP%\aekC6.tmp
  • %TEMP%\aekB9.tmp
  • %TEMP%\aekBA.tmp
  • %TEMP%\aekB7.tmp
  • %TEMP%\aekB8.tmp
  • %TEMP%\aekBB.tmp
  • %TEMP%\aekBE.tmp
  • %TEMP%\aekBF.tmp
  • %TEMP%\aekBC.tmp
  • %TEMP%\aekBD.tmp
  • %TEMP%\aekD4.tmp
  • %TEMP%\aekD5.tmp
  • %TEMP%\aekD2.tmp
  • %TEMP%\aekD3.tmp
  • %TEMP%\aekD6.tmp
  • %TEMP%\aekD9.tmp
  • %TEMP%\aekDA.tmp
  • %TEMP%\aekD7.tmp
  • %TEMP%\aekD8.tmp
  • %TEMP%\aekCB.tmp
  • %TEMP%\aekCC.tmp
  • %TEMP%\aekC9.tmp
  • %TEMP%\aekCA.tmp
  • %TEMP%\aekCD.tmp
  • %TEMP%\aekD0.tmp
  • %TEMP%\aekD1.tmp
  • %TEMP%\aekCE.tmp
  • %TEMP%\aekCF.tmp
  • %TEMP%\aek9E.tmp
  • %TEMP%\aek9F.tmp
  • %TEMP%\aek9C.tmp
  • %TEMP%\aek9D.tmp
  • %TEMP%\aekA0.tmp
  • %TEMP%\aekA3.tmp
  • %TEMP%\aekA4.tmp
  • %TEMP%\aekA1.tmp
  • %TEMP%\aekA2.tmp
  • %TEMP%\aek95.tmp
  • %TEMP%\aek96.tmp
  • %TEMP%\aek93.tmp
  • %TEMP%\aek94.tmp
  • %TEMP%\aek97.tmp
  • %TEMP%\aek9A.tmp
  • %TEMP%\aek9B.tmp
  • %TEMP%\aek98.tmp
  • %TEMP%\aek99.tmp
  • %TEMP%\aekB0.tmp
  • %TEMP%\aekB1.tmp
  • %TEMP%\aekAE.tmp
  • %TEMP%\aekAF.tmp
  • %TEMP%\aekB2.tmp
  • %TEMP%\aekB5.tmp
  • %TEMP%\aekB6.tmp
  • %TEMP%\aekB3.tmp
  • %TEMP%\aekB4.tmp
  • %TEMP%\aekA7.tmp
  • %TEMP%\aekA8.tmp
  • %TEMP%\aekA5.tmp
  • %TEMP%\aekA6.tmp
  • %TEMP%\aekA9.tmp
  • %TEMP%\aekAC.tmp
  • %TEMP%\aekAD.tmp
  • %TEMP%\aekAA.tmp
  • %TEMP%\aekAB.tmp
  • %TEMP%\aekDB.tmp
  • %TEMP%\aek10B.tmp
  • %TEMP%\aek10C.tmp
  • %TEMP%\aek109.tmp
  • %TEMP%\aek10A.tmp
  • %TEMP%\aek10D.tmp
  • %TEMP%\aek110.tmp
  • %TEMP%\aek111.tmp
  • %TEMP%\aek10E.tmp
  • %TEMP%\aek10F.tmp
  • %TEMP%\aek102.tmp
  • %TEMP%\aek103.tmp
  • %TEMP%\aek100.tmp
  • %TEMP%\aek101.tmp
  • %TEMP%\aek104.tmp
  • %TEMP%\aek107.tmp
  • %TEMP%\aek108.tmp
  • %TEMP%\aek105.tmp
  • %TEMP%\aek106.tmp
  • %TEMP%\aek11D.tmp
  • %TEMP%\aek11E.tmp
  • %TEMP%\aek11B.tmp
  • %TEMP%\aek11C.tmp
  • %TEMP%\aek11F.tmp
  • %TEMP%\aek122.tmp
  • %TEMP%\aek123.tmp
  • %TEMP%\aek120.tmp
  • %TEMP%\aek121.tmp
  • %TEMP%\aek114.tmp
  • %TEMP%\aek115.tmp
  • %TEMP%\aek112.tmp
  • %TEMP%\aek113.tmp
  • %TEMP%\aek116.tmp
  • %TEMP%\aek119.tmp
  • %TEMP%\aek11A.tmp
  • %TEMP%\aek117.tmp
  • %TEMP%\aek118.tmp
  • %TEMP%\aekE7.tmp
  • %TEMP%\aekE8.tmp
  • %TEMP%\aekE5.tmp
  • %TEMP%\aekE6.tmp
  • %TEMP%\aekE9.tmp
  • %TEMP%\aekEC.tmp
  • %TEMP%\aekED.tmp
  • %TEMP%\aekEA.tmp
  • %TEMP%\aekEB.tmp
  • %TEMP%\aekDE.tmp
  • %TEMP%\aekDF.tmp
  • %TEMP%\aekDC.tmp
  • %TEMP%\aekDD.tmp
  • %TEMP%\aekE0.tmp
  • %TEMP%\aekE3.tmp
  • %TEMP%\aekE4.tmp
  • %TEMP%\aekE1.tmp
  • %TEMP%\aekE2.tmp
  • %TEMP%\aekF9.tmp
  • %TEMP%\aekFA.tmp
  • %TEMP%\aekF7.tmp
  • %TEMP%\aekF8.tmp
  • %TEMP%\aekFB.tmp
  • %TEMP%\aekFE.tmp
  • %TEMP%\aekFF.tmp
  • %TEMP%\aekFC.tmp
  • %TEMP%\aekFD.tmp
  • %TEMP%\aekF0.tmp
  • %TEMP%\aekF1.tmp
  • %TEMP%\aekEE.tmp
  • %TEMP%\aekEF.tmp
  • %TEMP%\aekF2.tmp
  • %TEMP%\aekF5.tmp
  • %TEMP%\aekF6.tmp
  • %TEMP%\aekF3.tmp
  • %TEMP%\aekF4.tmp
  • %TEMP%\aek92.tmp
  • %TEMP%\aek30.tmp
  • %TEMP%\aek31.tmp
  • %TEMP%\aek2E.tmp
  • %TEMP%\aek2F.tmp
  • %TEMP%\aek32.tmp
  • %TEMP%\aek35.tmp
  • %TEMP%\aek36.tmp
  • %TEMP%\aek33.tmp
  • %TEMP%\aek34.tmp
  • %TEMP%\aek27.tmp
  • %TEMP%\aek28.tmp
  • %TEMP%\aek25.tmp
  • %TEMP%\aek26.tmp
  • %TEMP%\aek29.tmp
  • %TEMP%\aek2C.tmp
  • %TEMP%\aek2D.tmp
  • %TEMP%\aek2A.tmp
  • %TEMP%\aek2B.tmp
  • %TEMP%\aek42.tmp
  • %TEMP%\aek43.tmp
  • %TEMP%\aek40.tmp
  • %TEMP%\aek41.tmp
  • %TEMP%\aek44.tmp
  • %TEMP%\aek47.tmp
  • %TEMP%\aek48.tmp
  • %TEMP%\aek45.tmp
  • %TEMP%\aek46.tmp
  • %TEMP%\aek39.tmp
  • %TEMP%\aek3A.tmp
  • %TEMP%\aek37.tmp
  • %TEMP%\aek38.tmp
  • %TEMP%\aek3B.tmp
  • %TEMP%\aek3E.tmp
  • %TEMP%\aek3F.tmp
  • %TEMP%\aek3C.tmp
  • %TEMP%\aek3D.tmp
  • %TEMP%\aekC.tmp
  • %TEMP%\aekD.tmp
  • %TEMP%\aekA.tmp
  • %TEMP%\aekB.tmp
  • %TEMP%\aekE.tmp
  • %TEMP%\aek11.tmp
  • %TEMP%\aek12.tmp
  • %TEMP%\aekF.tmp
  • %TEMP%\aek10.tmp
  • %TEMP%\aek3.tmp
  • %TEMP%\aek4.tmp
  • %TEMP%\aek1.tmp
  • %TEMP%\aek2.tmp
  • %TEMP%\aek5.tmp
  • %TEMP%\aek8.tmp
  • %TEMP%\aek9.tmp
  • %TEMP%\aek6.tmp
  • %TEMP%\aek7.tmp
  • %TEMP%\aek1E.tmp
  • %TEMP%\aek1F.tmp
  • %TEMP%\aek1C.tmp
  • %TEMP%\aek1D.tmp
  • %TEMP%\aek20.tmp
  • %TEMP%\aek23.tmp
  • %TEMP%\aek24.tmp
  • %TEMP%\aek21.tmp
  • %TEMP%\aek22.tmp
  • %TEMP%\aek15.tmp
  • %TEMP%\aek16.tmp
  • %TEMP%\aek13.tmp
  • %TEMP%\aek14.tmp
  • %TEMP%\aek17.tmp
  • %TEMP%\aek1A.tmp
  • %TEMP%\aek1B.tmp
  • %TEMP%\aek18.tmp
  • %TEMP%\aek19.tmp
  • %TEMP%\aek49.tmp
  • %TEMP%\aek79.tmp
  • %TEMP%\aek7A.tmp
  • %TEMP%\aek77.tmp
  • %TEMP%\aek78.tmp
  • %TEMP%\aek7B.tmp
  • %TEMP%\aek7E.tmp
  • %TEMP%\aek7F.tmp
  • %TEMP%\aek7C.tmp
  • %TEMP%\aek7D.tmp
  • %TEMP%\aek70.tmp
  • %TEMP%\aek71.tmp
  • %TEMP%\aek6E.tmp
  • %TEMP%\aek6F.tmp
  • %TEMP%\aek72.tmp
  • %TEMP%\aek75.tmp
  • %TEMP%\aek76.tmp
  • %TEMP%\aek73.tmp
  • %TEMP%\aek74.tmp
  • %TEMP%\aek8B.tmp
  • %TEMP%\aek8C.tmp
  • %TEMP%\aek89.tmp
  • %TEMP%\aek8A.tmp
  • %TEMP%\aek8D.tmp
  • %TEMP%\aek90.tmp
  • %TEMP%\aek91.tmp
  • %TEMP%\aek8E.tmp
  • %TEMP%\aek8F.tmp
  • %TEMP%\aek82.tmp
  • %TEMP%\aek83.tmp
  • %TEMP%\aek80.tmp
  • %TEMP%\aek81.tmp
  • %TEMP%\aek84.tmp
  • %TEMP%\aek87.tmp
  • %TEMP%\aek88.tmp
  • %TEMP%\aek85.tmp
  • %TEMP%\aek86.tmp
  • %TEMP%\aek55.tmp
  • %TEMP%\aek56.tmp
  • %TEMP%\aek53.tmp
  • %TEMP%\aek54.tmp
  • %TEMP%\aek57.tmp
  • %TEMP%\aek5A.tmp
  • %TEMP%\aek5B.tmp
  • %TEMP%\aek58.tmp
  • %TEMP%\aek59.tmp
  • %TEMP%\aek4C.tmp
  • %TEMP%\aek4D.tmp
  • %TEMP%\aek4A.tmp
  • %TEMP%\aek4B.tmp
  • %TEMP%\aek4E.tmp
  • %TEMP%\aek51.tmp
  • %TEMP%\aek52.tmp
  • %TEMP%\aek4F.tmp
  • %TEMP%\aek50.tmp
  • %TEMP%\aek67.tmp
  • %TEMP%\aek68.tmp
  • %TEMP%\aek65.tmp
  • %TEMP%\aek66.tmp
  • %TEMP%\aek69.tmp
  • %TEMP%\aek6C.tmp
  • %TEMP%\aek6D.tmp
  • %TEMP%\aek6A.tmp
  • %TEMP%\aek6B.tmp
  • %TEMP%\aek5E.tmp
  • %TEMP%\aek5F.tmp
  • %TEMP%\aek5C.tmp
  • %TEMP%\aek5D.tmp
  • %TEMP%\aek60.tmp
  • %TEMP%\aek63.tmp
  • %TEMP%\aek64.tmp
  • %TEMP%\aek61.tmp
  • %TEMP%\aek62.tmp
  • %TEMP%\aek1E5.tmp
  • %TEMP%\aek1E6.tmp
  • %TEMP%\aek1E3.tmp
  • %TEMP%\aek1E4.tmp
  • %TEMP%\aek1E7.tmp
  • %TEMP%\aek1EA.tmp
  • %TEMP%\aek1EB.tmp
  • %TEMP%\aek1E8.tmp
  • %TEMP%\aek1E9.tmp
  • %TEMP%\aek1DC.tmp
  • %TEMP%\aek1DD.tmp
  • %TEMP%\aek1DA.tmp
  • %TEMP%\aek1DB.tmp
  • %TEMP%\aek1DE.tmp
  • %TEMP%\aek1E1.tmp
  • %TEMP%\aek1E2.tmp
  • %TEMP%\aek1DF.tmp
  • %TEMP%\aek1E0.tmp
  • %TEMP%\aek1F7.tmp
  • %TEMP%\aek1F8.tmp
  • %TEMP%\aek1F5.tmp
  • %TEMP%\aek1F6.tmp
  • %TEMP%\aek1F9.tmp
  • %TEMP%\aek1FC.tmp
  • %TEMP%\aek1FD.tmp
  • %TEMP%\aek1FA.tmp
  • %TEMP%\aek1FB.tmp
  • %TEMP%\aek1EE.tmp
  • %TEMP%\aek1EF.tmp
  • %TEMP%\aek1EC.tmp
  • %TEMP%\aek1ED.tmp
  • %TEMP%\aek1F0.tmp
  • %TEMP%\aek1F3.tmp
  • %TEMP%\aek1F4.tmp
  • %TEMP%\aek1F1.tmp
  • %TEMP%\aek1F2.tmp
  • %TEMP%\aek1C1.tmp
  • %TEMP%\aek1C2.tmp
  • %TEMP%\aek1BF.tmp
  • %TEMP%\aek1C0.tmp
  • %TEMP%\aek1C3.tmp
  • %TEMP%\aek1C6.tmp
  • %TEMP%\aek1C7.tmp
  • %TEMP%\aek1C4.tmp
  • %TEMP%\aek1C5.tmp
  • %TEMP%\aek1B8.tmp
  • %TEMP%\aek1B9.tmp
  • %TEMP%\aek1B6.tmp
  • %TEMP%\aek1B7.tmp
  • %TEMP%\aek1BA.tmp
  • %TEMP%\aek1BD.tmp
  • %TEMP%\aek1BE.tmp
  • %TEMP%\aek1BB.tmp
  • %TEMP%\aek1BC.tmp
  • %TEMP%\aek1D3.tmp
  • %TEMP%\aek1D4.tmp
  • %TEMP%\aek1D1.tmp
  • %TEMP%\aek1D2.tmp
  • %TEMP%\aek1D5.tmp
  • %TEMP%\aek1D8.tmp
  • %TEMP%\aek1D9.tmp
  • %TEMP%\aek1D6.tmp
  • %TEMP%\aek1D7.tmp
  • %TEMP%\aek1CA.tmp
  • %TEMP%\aek1CB.tmp
  • %TEMP%\aek1C8.tmp
  • %TEMP%\aek1C9.tmp
  • %TEMP%\aek1CC.tmp
  • %TEMP%\aek1CF.tmp
  • %TEMP%\aek1D0.tmp
  • %TEMP%\aek1CD.tmp
  • %TEMP%\aek1CE.tmp
  • %TEMP%\aek1FE.tmp
  • %TEMP%\aek22E.tmp
  • %TEMP%\aek22F.tmp
  • %TEMP%\aek22C.tmp
  • %TEMP%\aek22D.tmp
  • %TEMP%\aek230.tmp
  • %TEMP%\aek233.tmp
  • %TEMP%\aek234.tmp
  • %TEMP%\aek231.tmp
  • %TEMP%\aek232.tmp
  • %TEMP%\aek225.tmp
  • %TEMP%\aek226.tmp
  • %TEMP%\aek223.tmp
  • %TEMP%\aek224.tmp
  • %TEMP%\aek227.tmp
  • %TEMP%\aek22A.tmp
  • %TEMP%\aek22B.tmp
  • %TEMP%\aek228.tmp
  • %TEMP%\aek229.tmp
  • %TEMP%\dnsd.exe
  • %HOMEPATH%\Templates\lldf.exe
  • %ALLUSERSPROFILE%\Application Data\tffx.exe
  • %TEMP%\aek23C.tmp
  • <LS_APPDATA>\wwdg.exe
  • %ALLUSERSPROFILE%\Application Data\gnfr.exe
  • %TEMP%\aek23F.tmp
  • %TEMP%\aek23D.tmp
  • %TEMP%\aek23E.tmp
  • %TEMP%\aek237.tmp
  • %TEMP%\aek238.tmp
  • %TEMP%\aek235.tmp
  • %TEMP%\aek236.tmp
  • %TEMP%\aek239.tmp
  • <LS_APPDATA>\eat.exe
  • <LS_APPDATA>\hypt.exe
  • %TEMP%\aek23A.tmp
  • %TEMP%\aek23B.tmp
  • %TEMP%\aek20A.tmp
  • %TEMP%\aek20B.tmp
  • %TEMP%\aek208.tmp
  • %TEMP%\aek209.tmp
  • %TEMP%\aek20C.tmp
  • %TEMP%\aek20F.tmp
  • %TEMP%\aek210.tmp
  • %TEMP%\aek20D.tmp
  • %TEMP%\aek20E.tmp
  • %TEMP%\aek201.tmp
  • %TEMP%\aek202.tmp
  • %TEMP%\aek1FF.tmp
  • %TEMP%\aek200.tmp
  • %TEMP%\aek203.tmp
  • %TEMP%\aek206.tmp
  • %TEMP%\aek207.tmp
  • %TEMP%\aek204.tmp
  • %TEMP%\aek205.tmp
  • %TEMP%\aek21C.tmp
  • %TEMP%\aek21D.tmp
  • %TEMP%\aek21A.tmp
  • %TEMP%\aek21B.tmp
  • %TEMP%\aek21E.tmp
  • %TEMP%\aek221.tmp
  • %TEMP%\aek222.tmp
  • %TEMP%\aek21F.tmp
  • %TEMP%\aek220.tmp
  • %TEMP%\aek213.tmp
  • %TEMP%\aek214.tmp
  • %TEMP%\aek211.tmp
  • %TEMP%\aek212.tmp
  • %TEMP%\aek215.tmp
  • %TEMP%\aek218.tmp
  • %TEMP%\aek219.tmp
  • %TEMP%\aek216.tmp
  • %TEMP%\aek217.tmp
  • %TEMP%\aek1B5.tmp
  • %TEMP%\aek153.tmp
  • %TEMP%\aek154.tmp
  • %TEMP%\aek151.tmp
  • %TEMP%\aek152.tmp
  • %TEMP%\aek155.tmp
  • %TEMP%\aek158.tmp
  • %TEMP%\aek159.tmp
  • %TEMP%\aek156.tmp
  • %TEMP%\aek157.tmp
  • %TEMP%\aek14A.tmp
  • %TEMP%\aek14B.tmp
  • %TEMP%\aek148.tmp
  • %TEMP%\aek149.tmp
  • %TEMP%\aek14C.tmp
  • %TEMP%\aek14F.tmp
  • %TEMP%\aek150.tmp
  • %TEMP%\aek14D.tmp
  • %TEMP%\aek14E.tmp
  • %TEMP%\aek165.tmp
  • %TEMP%\aek166.tmp
  • %TEMP%\aek163.tmp
  • %TEMP%\aek164.tmp
  • %TEMP%\aek167.tmp
  • %TEMP%\aek16A.tmp
  • %TEMP%\aek16B.tmp
  • %TEMP%\aek168.tmp
  • %TEMP%\aek169.tmp
  • %TEMP%\aek15C.tmp
  • %TEMP%\aek15D.tmp
  • %TEMP%\aek15A.tmp
  • %TEMP%\aek15B.tmp
  • %TEMP%\aek15E.tmp
  • %TEMP%\aek161.tmp
  • %TEMP%\aek162.tmp
  • %TEMP%\aek15F.tmp
  • %TEMP%\aek160.tmp
  • %TEMP%\aek12F.tmp
  • %TEMP%\aek130.tmp
  • %TEMP%\aek12D.tmp
  • %TEMP%\aek12E.tmp
  • %TEMP%\aek131.tmp
  • %TEMP%\aek134.tmp
  • %TEMP%\aek135.tmp
  • %TEMP%\aek132.tmp
  • %TEMP%\aek133.tmp
  • %TEMP%\aek126.tmp
  • %TEMP%\aek127.tmp
  • %TEMP%\aek124.tmp
  • %TEMP%\aek125.tmp
  • %TEMP%\aek128.tmp
  • %TEMP%\aek12B.tmp
  • %TEMP%\aek12C.tmp
  • %TEMP%\aek129.tmp
  • %TEMP%\aek12A.tmp
  • %TEMP%\aek141.tmp
  • %TEMP%\aek142.tmp
  • %TEMP%\aek13F.tmp
  • %TEMP%\aek140.tmp
  • %TEMP%\aek143.tmp
  • %TEMP%\aek146.tmp
  • %TEMP%\aek147.tmp
  • %TEMP%\aek144.tmp
  • %TEMP%\aek145.tmp
  • %TEMP%\aek138.tmp
  • %TEMP%\aek139.tmp
  • %TEMP%\aek136.tmp
  • %TEMP%\aek137.tmp
  • %TEMP%\aek13A.tmp
  • %TEMP%\aek13D.tmp
  • %TEMP%\aek13E.tmp
  • %TEMP%\aek13B.tmp
  • %TEMP%\aek13C.tmp
  • %TEMP%\aek16C.tmp
  • %TEMP%\aek19C.tmp
  • %TEMP%\aek19D.tmp
  • %TEMP%\aek19A.tmp
  • %TEMP%\aek19B.tmp
  • %TEMP%\aek19E.tmp
  • %TEMP%\aek1A1.tmp
  • %TEMP%\aek1A2.tmp
  • %TEMP%\aek19F.tmp
  • %TEMP%\aek1A0.tmp
  • %TEMP%\aek193.tmp
  • %TEMP%\aek194.tmp
  • %TEMP%\aek191.tmp
  • %TEMP%\aek192.tmp
  • %TEMP%\aek195.tmp
  • %TEMP%\aek198.tmp
  • %TEMP%\aek199.tmp
  • %TEMP%\aek196.tmp
  • %TEMP%\aek197.tmp
  • %TEMP%\aek1AE.tmp
  • %TEMP%\aek1AF.tmp
  • %TEMP%\aek1AC.tmp
  • %TEMP%\aek1AD.tmp
  • %TEMP%\aek1B0.tmp
  • %TEMP%\aek1B3.tmp
  • %TEMP%\aek1B4.tmp
  • %TEMP%\aek1B1.tmp
  • %TEMP%\aek1B2.tmp
  • %TEMP%\aek1A5.tmp
  • %TEMP%\aek1A6.tmp
  • %TEMP%\aek1A3.tmp
  • %TEMP%\aek1A4.tmp
  • %TEMP%\aek1A7.tmp
  • %TEMP%\aek1AA.tmp
  • %TEMP%\aek1AB.tmp
  • %TEMP%\aek1A8.tmp
  • %TEMP%\aek1A9.tmp
  • %TEMP%\aek178.tmp
  • %TEMP%\aek179.tmp
  • %TEMP%\aek176.tmp
  • %TEMP%\aek177.tmp
  • %TEMP%\aek17A.tmp
  • %TEMP%\aek17D.tmp
  • %TEMP%\aek17E.tmp
  • %TEMP%\aek17B.tmp
  • %TEMP%\aek17C.tmp
  • %TEMP%\aek16F.tmp
  • %TEMP%\aek170.tmp
  • %TEMP%\aek16D.tmp
  • %TEMP%\aek16E.tmp
  • %TEMP%\aek171.tmp
  • %TEMP%\aek174.tmp
  • %TEMP%\aek175.tmp
  • %TEMP%\aek172.tmp
  • %TEMP%\aek173.tmp
  • %TEMP%\aek18A.tmp
  • %TEMP%\aek18B.tmp
  • %TEMP%\aek188.tmp
  • %TEMP%\aek189.tmp
  • %TEMP%\aek18C.tmp
  • %TEMP%\aek18F.tmp
  • %TEMP%\aek190.tmp
  • %TEMP%\aek18D.tmp
  • %TEMP%\aek18E.tmp
  • %TEMP%\aek181.tmp
  • %TEMP%\aek182.tmp
  • %TEMP%\aek17F.tmp
  • %TEMP%\aek180.tmp
  • %TEMP%\aek183.tmp
  • %TEMP%\aek186.tmp
  • %TEMP%\aek187.tmp
  • %TEMP%\aek184.tmp
  • %TEMP%\aek185.tmp
Удаляет следующие файлы:
  • %TEMP%\aek2FA.tmp
  • %TEMP%\aek2FB.tmp
  • %TEMP%\aek2F8.tmp
  • %TEMP%\aek2F9.tmp
  • %TEMP%\aek2FE.tmp
  • %TEMP%\aek2FF.tmp
  • %TEMP%\aek2FC.tmp
  • %TEMP%\aek2FD.tmp
  • %TEMP%\aek2F7.tmp
  • %TEMP%\aek2F1.tmp
  • %TEMP%\aek2F2.tmp
  • %TEMP%\aek2EF.tmp
  • %TEMP%\aek2F0.tmp
  • %TEMP%\aek2F5.tmp
  • %TEMP%\aek2F6.tmp
  • %TEMP%\aek2F3.tmp
  • %TEMP%\aek2F4.tmp
  • %TEMP%\aek300.tmp
  • %TEMP%\aek30C.tmp
  • %TEMP%\aek30D.tmp
  • %TEMP%\aek30A.tmp
  • %TEMP%\aek30B.tmp
  • %TEMP%\aek310.tmp
  • %TEMP%\aek311.tmp
  • %TEMP%\aek30E.tmp
  • %TEMP%\aek30F.tmp
  • %TEMP%\aek309.tmp
  • %TEMP%\aek303.tmp
  • %TEMP%\aek304.tmp
  • %TEMP%\aek301.tmp
  • %TEMP%\aek302.tmp
  • %TEMP%\aek307.tmp
  • %TEMP%\aek308.tmp
  • %TEMP%\aek305.tmp
  • %TEMP%\aek306.tmp
  • %TEMP%\aek2EE.tmp
  • %TEMP%\aek2D6.tmp
  • %TEMP%\aek2D7.tmp
  • %TEMP%\aek2D4.tmp
  • %TEMP%\aek2D5.tmp
  • %TEMP%\aek2DA.tmp
  • %TEMP%\aek2DB.tmp
  • %TEMP%\aek2D8.tmp
  • %TEMP%\aek2D9.tmp
  • %TEMP%\aek2D3.tmp
  • %TEMP%\aek2CD.tmp
  • %TEMP%\aek2CE.tmp
  • %TEMP%\aek2CB.tmp
  • %TEMP%\aek2CC.tmp
  • %TEMP%\aek2D1.tmp
  • %TEMP%\aek2D2.tmp
  • %TEMP%\aek2CF.tmp
  • %TEMP%\aek2D0.tmp
  • %TEMP%\aek2DC.tmp
  • %TEMP%\aek2E8.tmp
  • %TEMP%\aek2E9.tmp
  • %TEMP%\aek2E6.tmp
  • %TEMP%\aek2E7.tmp
  • %TEMP%\aek2EC.tmp
  • %TEMP%\aek2ED.tmp
  • %TEMP%\aek2EA.tmp
  • %TEMP%\aek2EB.tmp
  • %TEMP%\aek2E5.tmp
  • %TEMP%\aek2DF.tmp
  • %TEMP%\aek2E0.tmp
  • %TEMP%\aek2DD.tmp
  • %TEMP%\aek2DE.tmp
  • %TEMP%\aek2E3.tmp
  • %TEMP%\aek2E4.tmp
  • %TEMP%\aek2E1.tmp
  • %TEMP%\aek2E2.tmp
  • %TEMP%\aek341.tmp
  • %TEMP%\aek342.tmp
  • %TEMP%\aek33F.tmp
  • %TEMP%\aek340.tmp
  • %TEMP%\aek345.tmp
  • %TEMP%\aek346.tmp
  • %TEMP%\aek343.tmp
  • %TEMP%\aek344.tmp
  • %TEMP%\aek33E.tmp
  • %TEMP%\aek338.tmp
  • %TEMP%\aek339.tmp
  • %TEMP%\aek336.tmp
  • %TEMP%\aek337.tmp
  • %TEMP%\aek33C.tmp
  • %TEMP%\aek33D.tmp
  • %TEMP%\aek33A.tmp
  • %TEMP%\aek33B.tmp
  • %TEMP%\aek347.tmp
  • %TEMP%\aek353.tmp
  • %TEMP%\aek354.tmp
  • %TEMP%\aek351.tmp
  • %TEMP%\aek352.tmp
  • %TEMP%\aek357.tmp
  • %TEMP%\aek358.tmp
  • %TEMP%\aek355.tmp
  • %TEMP%\aek356.tmp
  • %TEMP%\aek350.tmp
  • %TEMP%\aek34A.tmp
  • %TEMP%\aek34B.tmp
  • %TEMP%\aek348.tmp
  • %TEMP%\aek349.tmp
  • %TEMP%\aek34E.tmp
  • %TEMP%\aek34F.tmp
  • %TEMP%\aek34C.tmp
  • %TEMP%\aek34D.tmp
  • %TEMP%\aek335.tmp
  • %TEMP%\aek31D.tmp
  • %TEMP%\aek31E.tmp
  • %TEMP%\aek31B.tmp
  • %TEMP%\aek31C.tmp
  • %TEMP%\aek321.tmp
  • %TEMP%\aek322.tmp
  • %TEMP%\aek31F.tmp
  • %TEMP%\aek320.tmp
  • %TEMP%\aek31A.tmp
  • %TEMP%\aek314.tmp
  • %TEMP%\aek315.tmp
  • %TEMP%\aek312.tmp
  • %TEMP%\aek313.tmp
  • %TEMP%\aek318.tmp
  • %TEMP%\aek319.tmp
  • %TEMP%\aek316.tmp
  • %TEMP%\aek317.tmp
  • %TEMP%\aek323.tmp
  • %TEMP%\aek32F.tmp
  • %TEMP%\aek330.tmp
  • %TEMP%\aek32D.tmp
  • %TEMP%\aek32E.tmp
  • %TEMP%\aek333.tmp
  • %TEMP%\aek334.tmp
  • %TEMP%\aek331.tmp
  • %TEMP%\aek332.tmp
  • %TEMP%\aek32C.tmp
  • %TEMP%\aek326.tmp
  • %TEMP%\aek327.tmp
  • %TEMP%\aek324.tmp
  • %TEMP%\aek325.tmp
  • %TEMP%\aek32A.tmp
  • %TEMP%\aek32B.tmp
  • %TEMP%\aek328.tmp
  • %TEMP%\aek329.tmp
  • %TEMP%\aek2CA.tmp
  • %TEMP%\aek26B.tmp
  • %TEMP%\aek26C.tmp
  • %TEMP%\aek269.tmp
  • %TEMP%\aek26A.tmp
  • %TEMP%\aek26F.tmp
  • %TEMP%\aek270.tmp
  • %TEMP%\aek26D.tmp
  • %TEMP%\aek26E.tmp
  • %TEMP%\aek268.tmp
  • %TEMP%\aek262.tmp
  • %TEMP%\aek263.tmp
  • %TEMP%\aek260.tmp
  • %TEMP%\aek261.tmp
  • %TEMP%\aek266.tmp
  • %TEMP%\aek267.tmp
  • %TEMP%\aek264.tmp
  • %TEMP%\aek265.tmp
  • %TEMP%\aek271.tmp
  • %TEMP%\aek27D.tmp
  • %TEMP%\aek27E.tmp
  • %TEMP%\aek27B.tmp
  • %TEMP%\aek27C.tmp
  • %TEMP%\aek281.tmp
  • %TEMP%\aek282.tmp
  • %TEMP%\aek27F.tmp
  • %TEMP%\aek280.tmp
  • %TEMP%\aek27A.tmp
  • %TEMP%\aek274.tmp
  • %TEMP%\aek275.tmp
  • %TEMP%\aek272.tmp
  • %TEMP%\aek273.tmp
  • %TEMP%\aek278.tmp
  • %TEMP%\aek279.tmp
  • %TEMP%\aek276.tmp
  • %TEMP%\aek277.tmp
  • %TEMP%\aek25F.tmp
  • %TEMP%\aek247.tmp
  • %TEMP%\aek248.tmp
  • %TEMP%\aek245.tmp
  • %TEMP%\aek246.tmp
  • %TEMP%\aek24B.tmp
  • %TEMP%\aek24C.tmp
  • %TEMP%\aek249.tmp
  • %TEMP%\aek24A.tmp
  • %TEMP%\aek244.tmp
  • %TEMP%\aek23E.tmp
  • %TEMP%\aek23F.tmp
  • %TEMP%\aek23C.tmp
  • %TEMP%\aek23D.tmp
  • %TEMP%\aek242.tmp
  • %TEMP%\aek243.tmp
  • %TEMP%\aek240.tmp
  • %TEMP%\aek241.tmp
  • %TEMP%\aek24D.tmp
  • %TEMP%\aek259.tmp
  • %TEMP%\aek25A.tmp
  • %TEMP%\aek257.tmp
  • %TEMP%\aek258.tmp
  • %TEMP%\aek25D.tmp
  • %TEMP%\aek25E.tmp
  • %TEMP%\aek25B.tmp
  • %TEMP%\aek25C.tmp
  • %TEMP%\aek256.tmp
  • %TEMP%\aek250.tmp
  • %TEMP%\aek251.tmp
  • %TEMP%\aek24E.tmp
  • %TEMP%\aek24F.tmp
  • %TEMP%\aek254.tmp
  • %TEMP%\aek255.tmp
  • %TEMP%\aek252.tmp
  • %TEMP%\aek253.tmp
  • %TEMP%\aek2B2.tmp
  • %TEMP%\aek2B3.tmp
  • %TEMP%\aek2B0.tmp
  • %TEMP%\aek2B1.tmp
  • %TEMP%\aek2B6.tmp
  • %TEMP%\aek2B7.tmp
  • %TEMP%\aek2B4.tmp
  • %TEMP%\aek2B5.tmp
  • %TEMP%\aek2AF.tmp
  • %TEMP%\aek2A9.tmp
  • %TEMP%\aek2AA.tmp
  • %TEMP%\aek2A7.tmp
  • %TEMP%\aek2A8.tmp
  • %TEMP%\aek2AD.tmp
  • %TEMP%\aek2AE.tmp
  • %TEMP%\aek2AB.tmp
  • %TEMP%\aek2AC.tmp
  • %TEMP%\aek2B8.tmp
  • %TEMP%\aek2C4.tmp
  • %TEMP%\aek2C5.tmp
  • %TEMP%\aek2C2.tmp
  • %TEMP%\aek2C3.tmp
  • %TEMP%\aek2C8.tmp
  • %TEMP%\aek2C9.tmp
  • %TEMP%\aek2C6.tmp
  • %TEMP%\aek2C7.tmp
  • %TEMP%\aek2C1.tmp
  • %TEMP%\aek2BB.tmp
  • %TEMP%\aek2BC.tmp
  • %TEMP%\aek2B9.tmp
  • %TEMP%\aek2BA.tmp
  • %TEMP%\aek2BF.tmp
  • %TEMP%\aek2C0.tmp
  • %TEMP%\aek2BD.tmp
  • %TEMP%\aek2BE.tmp
  • %TEMP%\aek2A6.tmp
  • %TEMP%\aek28E.tmp
  • %TEMP%\aek28F.tmp
  • %TEMP%\aek28C.tmp
  • %TEMP%\aek28D.tmp
  • %TEMP%\aek292.tmp
  • %TEMP%\aek293.tmp
  • %TEMP%\aek290.tmp
  • %TEMP%\aek291.tmp
  • %TEMP%\aek28B.tmp
  • %TEMP%\aek285.tmp
  • %TEMP%\aek286.tmp
  • %TEMP%\aek283.tmp
  • %TEMP%\aek284.tmp
  • %TEMP%\aek289.tmp
  • %TEMP%\aek28A.tmp
  • %TEMP%\aek287.tmp
  • %TEMP%\aek288.tmp
  • %TEMP%\aek294.tmp
  • %TEMP%\aek2A0.tmp
  • %TEMP%\aek2A1.tmp
  • %TEMP%\aek29E.tmp
  • %TEMP%\aek29F.tmp
  • %TEMP%\aek2A4.tmp
  • %TEMP%\aek2A5.tmp
  • %TEMP%\aek2A2.tmp
  • %TEMP%\aek2A3.tmp
  • %TEMP%\aek29D.tmp
  • %TEMP%\aek297.tmp
  • %TEMP%\aek298.tmp
  • %TEMP%\aek295.tmp
  • %TEMP%\aek296.tmp
  • %TEMP%\aek29B.tmp
  • %TEMP%\aek29C.tmp
  • %TEMP%\aek299.tmp
  • %TEMP%\aek29A.tmp
  • %TEMP%\aek359.tmp
  • %TEMP%\aek418.tmp
  • %TEMP%\aek419.tmp
  • %TEMP%\aek416.tmp
  • %TEMP%\aek417.tmp
  • %TEMP%\aek41C.tmp
  • %TEMP%\aek41D.tmp
  • %TEMP%\aek41A.tmp
  • %TEMP%\aek41B.tmp
  • %TEMP%\aek415.tmp
  • %TEMP%\aek40F.tmp
  • %TEMP%\aek410.tmp
  • %TEMP%\aek40D.tmp
  • %TEMP%\aek40E.tmp
  • %TEMP%\aek413.tmp
  • %TEMP%\aek414.tmp
  • %TEMP%\aek411.tmp
  • %TEMP%\aek412.tmp
  • %TEMP%\aek41E.tmp
  • %TEMP%\aek42A.tmp
  • %TEMP%\aek42B.tmp
  • %TEMP%\aek428.tmp
  • %TEMP%\aek429.tmp
  • %TEMP%\aek42E.tmp
  • %TEMP%\aek42F.tmp
  • %TEMP%\aek42C.tmp
  • %TEMP%\aek42D.tmp
  • %TEMP%\aek427.tmp
  • %TEMP%\aek421.tmp
  • %TEMP%\aek422.tmp
  • %TEMP%\aek41F.tmp
  • %TEMP%\aek420.tmp
  • %TEMP%\aek425.tmp
  • %TEMP%\aek426.tmp
  • %TEMP%\aek423.tmp
  • %TEMP%\aek424.tmp
  • %TEMP%\aek40C.tmp
  • %TEMP%\aek3F4.tmp
  • %TEMP%\aek3F5.tmp
  • %TEMP%\aek3F2.tmp
  • %TEMP%\aek3F3.tmp
  • %TEMP%\aek3F8.tmp
  • %TEMP%\aek3F9.tmp
  • %TEMP%\aek3F6.tmp
  • %TEMP%\aek3F7.tmp
  • %TEMP%\aek3F1.tmp
  • %TEMP%\aek3EB.tmp
  • %TEMP%\aek3EC.tmp
  • %TEMP%\aek3E9.tmp
  • %TEMP%\aek3EA.tmp
  • %TEMP%\aek3EF.tmp
  • %TEMP%\aek3F0.tmp
  • %TEMP%\aek3ED.tmp
  • %TEMP%\aek3EE.tmp
  • %TEMP%\aek3FA.tmp
  • %TEMP%\aek406.tmp
  • %TEMP%\aek407.tmp
  • %TEMP%\aek404.tmp
  • %TEMP%\aek405.tmp
  • %TEMP%\aek40A.tmp
  • %TEMP%\aek40B.tmp
  • %TEMP%\aek408.tmp
  • %TEMP%\aek409.tmp
  • %TEMP%\aek403.tmp
  • %TEMP%\aek3FD.tmp
  • %TEMP%\aek3FE.tmp
  • %TEMP%\aek3FB.tmp
  • %TEMP%\aek3FC.tmp
  • %TEMP%\aek401.tmp
  • %TEMP%\aek402.tmp
  • %TEMP%\aek3FF.tmp
  • %TEMP%\aek400.tmp
  • %TEMP%\aek45F.tmp
  • %TEMP%\aek460.tmp
  • %TEMP%\aek45D.tmp
  • %TEMP%\aek45E.tmp
  • %TEMP%\aek463.tmp
  • %TEMP%\aek464.tmp
  • %TEMP%\aek461.tmp
  • %TEMP%\aek462.tmp
  • %TEMP%\aek45C.tmp
  • %TEMP%\aek456.tmp
  • %TEMP%\aek457.tmp
  • %TEMP%\aek454.tmp
  • %TEMP%\aek455.tmp
  • %TEMP%\aek45A.tmp
  • %TEMP%\aek45B.tmp
  • %TEMP%\aek458.tmp
  • %TEMP%\aek459.tmp
  • %TEMP%\aek465.tmp
  • %TEMP%\aek471.tmp
  • %TEMP%\aek472.tmp
  • %TEMP%\aek46F.tmp
  • %TEMP%\aek470.tmp
  • %TEMP%\aek475.tmp
  • %TEMP%\aek476.tmp
  • %TEMP%\aek473.tmp
  • %TEMP%\aek474.tmp
  • %TEMP%\aek46E.tmp
  • %TEMP%\aek468.tmp
  • %TEMP%\aek469.tmp
  • %TEMP%\aek466.tmp
  • %TEMP%\aek467.tmp
  • %TEMP%\aek46C.tmp
  • %TEMP%\aek46D.tmp
  • %TEMP%\aek46A.tmp
  • %TEMP%\aek46B.tmp
  • %TEMP%\aek453.tmp
  • %TEMP%\aek43B.tmp
  • %TEMP%\aek43C.tmp
  • %TEMP%\aek439.tmp
  • %TEMP%\aek43A.tmp
  • %TEMP%\aek43F.tmp
  • %TEMP%\aek440.tmp
  • %TEMP%\aek43D.tmp
  • %TEMP%\aek43E.tmp
  • %TEMP%\aek438.tmp
  • %TEMP%\aek432.tmp
  • %TEMP%\aek433.tmp
  • %TEMP%\aek430.tmp
  • %TEMP%\aek431.tmp
  • %TEMP%\aek436.tmp
  • %TEMP%\aek437.tmp
  • %TEMP%\aek434.tmp
  • %TEMP%\aek435.tmp
  • %TEMP%\aek441.tmp
  • %TEMP%\aek44D.tmp
  • %TEMP%\aek44E.tmp
  • %TEMP%\aek44B.tmp
  • %TEMP%\aek44C.tmp
  • %TEMP%\aek451.tmp
  • %TEMP%\aek452.tmp
  • %TEMP%\aek44F.tmp
  • %TEMP%\aek450.tmp
  • %TEMP%\aek44A.tmp
  • %TEMP%\aek444.tmp
  • %TEMP%\aek445.tmp
  • %TEMP%\aek442.tmp
  • %TEMP%\aek443.tmp
  • %TEMP%\aek448.tmp
  • %TEMP%\aek449.tmp
  • %TEMP%\aek446.tmp
  • %TEMP%\aek447.tmp
  • %TEMP%\aek3E8.tmp
  • %TEMP%\aek389.tmp
  • %TEMP%\aek38A.tmp
  • %TEMP%\aek387.tmp
  • %TEMP%\aek388.tmp
  • %TEMP%\aek38D.tmp
  • %TEMP%\aek38E.tmp
  • %TEMP%\aek38B.tmp
  • %TEMP%\aek38C.tmp
  • %TEMP%\aek386.tmp
  • %TEMP%\aek380.tmp
  • %TEMP%\aek381.tmp
  • %TEMP%\aek37E.tmp
  • %TEMP%\aek37F.tmp
  • %TEMP%\aek384.tmp
  • %TEMP%\aek385.tmp
  • %TEMP%\aek382.tmp
  • %TEMP%\aek383.tmp
  • %TEMP%\aek38F.tmp
  • %TEMP%\aek39B.tmp
  • %TEMP%\aek39C.tmp
  • %TEMP%\aek399.tmp
  • %TEMP%\aek39A.tmp
  • %TEMP%\aek39F.tmp
  • %TEMP%\aek3A0.tmp
  • %TEMP%\aek39D.tmp
  • %TEMP%\aek39E.tmp
  • %TEMP%\aek398.tmp
  • %TEMP%\aek392.tmp
  • %TEMP%\aek393.tmp
  • %TEMP%\aek390.tmp
  • %TEMP%\aek391.tmp
  • %TEMP%\aek396.tmp
  • %TEMP%\aek397.tmp
  • %TEMP%\aek394.tmp
  • %TEMP%\aek395.tmp
  • %TEMP%\aek37D.tmp
  • %TEMP%\aek365.tmp
  • %TEMP%\aek366.tmp
  • %TEMP%\aek363.tmp
  • %TEMP%\aek364.tmp
  • %TEMP%\aek369.tmp
  • %TEMP%\aek36A.tmp
  • %TEMP%\aek367.tmp
  • %TEMP%\aek368.tmp
  • %TEMP%\aek362.tmp
  • %TEMP%\aek35C.tmp
  • %TEMP%\aek35D.tmp
  • %TEMP%\aek35A.tmp
  • %TEMP%\aek35B.tmp
  • %TEMP%\aek360.tmp
  • %TEMP%\aek361.tmp
  • %TEMP%\aek35E.tmp
  • %TEMP%\aek35F.tmp
  • %TEMP%\aek36B.tmp
  • %TEMP%\aek377.tmp
  • %TEMP%\aek378.tmp
  • %TEMP%\aek375.tmp
  • %TEMP%\aek376.tmp
  • %TEMP%\aek37B.tmp
  • %TEMP%\aek37C.tmp
  • %TEMP%\aek379.tmp
  • %TEMP%\aek37A.tmp
  • %TEMP%\aek374.tmp
  • %TEMP%\aek36E.tmp
  • %TEMP%\aek36F.tmp
  • %TEMP%\aek36C.tmp
  • %TEMP%\aek36D.tmp
  • %TEMP%\aek372.tmp
  • %TEMP%\aek373.tmp
  • %TEMP%\aek370.tmp
  • %TEMP%\aek371.tmp
  • %TEMP%\aek3D0.tmp
  • %TEMP%\aek3D1.tmp
  • %TEMP%\aek3CE.tmp
  • %TEMP%\aek3CF.tmp
  • %TEMP%\aek3D4.tmp
  • %TEMP%\aek3D5.tmp
  • %TEMP%\aek3D2.tmp
  • %TEMP%\aek3D3.tmp
  • %TEMP%\aek3CD.tmp
  • %TEMP%\aek3C7.tmp
  • %TEMP%\aek3C8.tmp
  • %TEMP%\aek3C5.tmp
  • %TEMP%\aek3C6.tmp
  • %TEMP%\aek3CB.tmp
  • %TEMP%\aek3CC.tmp
  • %TEMP%\aek3C9.tmp
  • %TEMP%\aek3CA.tmp
  • %TEMP%\aek3D6.tmp
  • %TEMP%\aek3E2.tmp
  • %TEMP%\aek3E3.tmp
  • %TEMP%\aek3E0.tmp
  • %TEMP%\aek3E1.tmp
  • %TEMP%\aek3E6.tmp
  • %TEMP%\aek3E7.tmp
  • %TEMP%\aek3E4.tmp
  • %TEMP%\aek3E5.tmp
  • %TEMP%\aek3DF.tmp
  • %TEMP%\aek3D9.tmp
  • %TEMP%\aek3DA.tmp
  • %TEMP%\aek3D7.tmp
  • %TEMP%\aek3D8.tmp
  • %TEMP%\aek3DD.tmp
  • %TEMP%\aek3DE.tmp
  • %TEMP%\aek3DB.tmp
  • %TEMP%\aek3DC.tmp
  • %TEMP%\aek3C4.tmp
  • %TEMP%\aek3AC.tmp
  • %TEMP%\aek3AD.tmp
  • %TEMP%\aek3AA.tmp
  • %TEMP%\aek3AB.tmp
  • %TEMP%\aek3B0.tmp
  • %TEMP%\aek3B1.tmp
  • %TEMP%\aek3AE.tmp
  • %TEMP%\aek3AF.tmp
  • %TEMP%\aek3A9.tmp
  • %TEMP%\aek3A3.tmp
  • %TEMP%\aek3A4.tmp
  • %TEMP%\aek3A1.tmp
  • %TEMP%\aek3A2.tmp
  • %TEMP%\aek3A7.tmp
  • %TEMP%\aek3A8.tmp
  • %TEMP%\aek3A5.tmp
  • %TEMP%\aek3A6.tmp
  • %TEMP%\aek3B2.tmp
  • %TEMP%\aek3BE.tmp
  • %TEMP%\aek3BF.tmp
  • %TEMP%\aek3BC.tmp
  • %TEMP%\aek3BD.tmp
  • %TEMP%\aek3C2.tmp
  • %TEMP%\aek3C3.tmp
  • %TEMP%\aek3C0.tmp
  • %TEMP%\aek3C1.tmp
  • %TEMP%\aek3BB.tmp
  • %TEMP%\aek3B5.tmp
  • %TEMP%\aek3B6.tmp
  • %TEMP%\aek3B3.tmp
  • %TEMP%\aek3B4.tmp
  • %TEMP%\aek3B9.tmp
  • %TEMP%\aek3BA.tmp
  • %TEMP%\aek3B7.tmp
  • %TEMP%\aek3B8.tmp
  • %TEMP%\aekBF.tmp
  • %TEMP%\aekC0.tmp
  • %TEMP%\aekBD.tmp
  • %TEMP%\aekBE.tmp
  • %TEMP%\aekC3.tmp
  • %TEMP%\aekC4.tmp
  • %TEMP%\aekC1.tmp
  • %TEMP%\aekC2.tmp
  • %TEMP%\aekBC.tmp
  • %TEMP%\aekB6.tmp
  • %TEMP%\aekB7.tmp
  • %TEMP%\aekB4.tmp
  • %TEMP%\aekB5.tmp
  • %TEMP%\aekBA.tmp
  • %TEMP%\aekBB.tmp
  • %TEMP%\aekB8.tmp
  • %TEMP%\aekB9.tmp
  • %TEMP%\aekC5.tmp
  • %TEMP%\aekD1.tmp
  • %TEMP%\aekD2.tmp
  • %TEMP%\aekCF.tmp
  • %TEMP%\aekD0.tmp
  • %TEMP%\aekD5.tmp
  • %TEMP%\aekD6.tmp
  • %TEMP%\aekD3.tmp
  • %TEMP%\aekD4.tmp
  • %TEMP%\aekCE.tmp
  • %TEMP%\aekC8.tmp
  • %TEMP%\aekC9.tmp
  • %TEMP%\aekC6.tmp
  • %TEMP%\aekC7.tmp
  • %TEMP%\aekCC.tmp
  • %TEMP%\aekCD.tmp
  • %TEMP%\aekCA.tmp
  • %TEMP%\aekCB.tmp
  • %TEMP%\aekB3.tmp
  • %TEMP%\aek9B.tmp
  • %TEMP%\aek9C.tmp
  • %TEMP%\aek99.tmp
  • %TEMP%\aek9A.tmp
  • %TEMP%\aek9F.tmp
  • %TEMP%\aekA0.tmp
  • %TEMP%\aek9D.tmp
  • %TEMP%\aek9E.tmp
  • %TEMP%\aek98.tmp
  • %TEMP%\aek92.tmp
  • %TEMP%\aek93.tmp
  • %TEMP%\aek90.tmp
  • %TEMP%\aek91.tmp
  • %TEMP%\aek96.tmp
  • %TEMP%\aek97.tmp
  • %TEMP%\aek94.tmp
  • %TEMP%\aek95.tmp
  • %TEMP%\aekA1.tmp
  • %TEMP%\aekAD.tmp
  • %TEMP%\aekAE.tmp
  • %TEMP%\aekAB.tmp
  • %TEMP%\aekAC.tmp
  • %TEMP%\aekB1.tmp
  • %TEMP%\aekB2.tmp
  • %TEMP%\aekAF.tmp
  • %TEMP%\aekB0.tmp
  • %TEMP%\aekAA.tmp
  • %TEMP%\aekA4.tmp
  • %TEMP%\aekA5.tmp
  • %TEMP%\aekA2.tmp
  • %TEMP%\aekA3.tmp
  • %TEMP%\aekA8.tmp
  • %TEMP%\aekA9.tmp
  • %TEMP%\aekA6.tmp
  • %TEMP%\aekA7.tmp
  • %TEMP%\aek106.tmp
  • %TEMP%\aek107.tmp
  • %TEMP%\aek104.tmp
  • %TEMP%\aek105.tmp
  • %TEMP%\aek10A.tmp
  • %TEMP%\aek10B.tmp
  • %TEMP%\aek108.tmp
  • %TEMP%\aek109.tmp
  • %TEMP%\aek103.tmp
  • %TEMP%\aekFD.tmp
  • %TEMP%\aekFE.tmp
  • %TEMP%\aekFB.tmp
  • %TEMP%\aekFC.tmp
  • %TEMP%\aek101.tmp
  • %TEMP%\aek102.tmp
  • %TEMP%\aekFF.tmp
  • %TEMP%\aek100.tmp
  • %TEMP%\aek10C.tmp
  • %TEMP%\aek118.tmp
  • %TEMP%\aek119.tmp
  • %TEMP%\aek116.tmp
  • %TEMP%\aek117.tmp
  • %TEMP%\aek11C.tmp
  • %TEMP%\aek11D.tmp
  • %TEMP%\aek11A.tmp
  • %TEMP%\aek11B.tmp
  • %TEMP%\aek115.tmp
  • %TEMP%\aek10F.tmp
  • %TEMP%\aek110.tmp
  • %TEMP%\aek10D.tmp
  • %TEMP%\aek10E.tmp
  • %TEMP%\aek113.tmp
  • %TEMP%\aek114.tmp
  • %TEMP%\aek111.tmp
  • %TEMP%\aek112.tmp
  • %TEMP%\aekFA.tmp
  • %TEMP%\aekE2.tmp
  • %TEMP%\aekE3.tmp
  • %TEMP%\aekE0.tmp
  • %TEMP%\aekE1.tmp
  • %TEMP%\aekE6.tmp
  • %TEMP%\aekE7.tmp
  • %TEMP%\aekE4.tmp
  • %TEMP%\aekE5.tmp
  • %TEMP%\aekDF.tmp
  • %TEMP%\aekD9.tmp
  • %TEMP%\aekDA.tmp
  • %TEMP%\aekD7.tmp
  • %TEMP%\aekD8.tmp
  • %TEMP%\aekDD.tmp
  • %TEMP%\aekDE.tmp
  • %TEMP%\aekDB.tmp
  • %TEMP%\aekDC.tmp
  • %TEMP%\aekE8.tmp
  • %TEMP%\aekF4.tmp
  • %TEMP%\aekF5.tmp
  • %TEMP%\aekF2.tmp
  • %TEMP%\aekF3.tmp
  • %TEMP%\aekF8.tmp
  • %TEMP%\aekF9.tmp
  • %TEMP%\aekF6.tmp
  • %TEMP%\aekF7.tmp
  • %TEMP%\aekF1.tmp
  • %TEMP%\aekEB.tmp
  • %TEMP%\aekEC.tmp
  • %TEMP%\aekE9.tmp
  • %TEMP%\aekEA.tmp
  • %TEMP%\aekEF.tmp
  • %TEMP%\aekF0.tmp
  • %TEMP%\aekED.tmp
  • %TEMP%\aekEE.tmp
  • %TEMP%\aek8F.tmp
  • %TEMP%\aek30.tmp
  • %TEMP%\aek31.tmp
  • %TEMP%\aek2E.tmp
  • %TEMP%\aek2F.tmp
  • %TEMP%\aek34.tmp
  • %TEMP%\aek35.tmp
  • %TEMP%\aek32.tmp
  • %TEMP%\aek33.tmp
  • %TEMP%\aek2D.tmp
  • %TEMP%\aek27.tmp
  • %TEMP%\aek28.tmp
  • %TEMP%\aek25.tmp
  • %TEMP%\aek26.tmp
  • %TEMP%\aek2B.tmp
  • %TEMP%\aek2C.tmp
  • %TEMP%\aek29.tmp
  • %TEMP%\aek2A.tmp
  • %TEMP%\aek36.tmp
  • %TEMP%\aek42.tmp
  • %TEMP%\aek43.tmp
  • %TEMP%\aek40.tmp
  • %TEMP%\aek41.tmp
  • %TEMP%\aek46.tmp
  • %TEMP%\aek47.tmp
  • %TEMP%\aek44.tmp
  • %TEMP%\aek45.tmp
  • %TEMP%\aek3F.tmp
  • %TEMP%\aek39.tmp
  • %TEMP%\aek3A.tmp
  • %TEMP%\aek37.tmp
  • %TEMP%\aek38.tmp
  • %TEMP%\aek3D.tmp
  • %TEMP%\aek3E.tmp
  • %TEMP%\aek3B.tmp
  • %TEMP%\aek3C.tmp
  • %TEMP%\aek24.tmp
  • %TEMP%\aekC.tmp
  • %TEMP%\aekD.tmp
  • %TEMP%\aekA.tmp
  • %TEMP%\aekB.tmp
  • %TEMP%\aek10.tmp
  • %TEMP%\aek11.tmp
  • %TEMP%\aekE.tmp
  • %TEMP%\aekF.tmp
  • %TEMP%\aek9.tmp
  • %TEMP%\aek3.tmp
  • %TEMP%\aek4.tmp
  • %TEMP%\aek1.tmp
  • %TEMP%\aek2.tmp
  • %TEMP%\aek7.tmp
  • %TEMP%\aek8.tmp
  • %TEMP%\aek5.tmp
  • %TEMP%\aek6.tmp
  • %TEMP%\aek12.tmp
  • %TEMP%\aek1E.tmp
  • %TEMP%\aek1F.tmp
  • %TEMP%\aek1C.tmp
  • %TEMP%\aek1D.tmp
  • %TEMP%\aek22.tmp
  • %TEMP%\aek23.tmp
  • %TEMP%\aek20.tmp
  • %TEMP%\aek21.tmp
  • %TEMP%\aek1B.tmp
  • %TEMP%\aek15.tmp
  • %TEMP%\aek16.tmp
  • %TEMP%\aek13.tmp
  • %TEMP%\aek14.tmp
  • %TEMP%\aek19.tmp
  • %TEMP%\aek1A.tmp
  • %TEMP%\aek17.tmp
  • %TEMP%\aek18.tmp
  • %TEMP%\aek77.tmp
  • %TEMP%\aek78.tmp
  • %TEMP%\aek75.tmp
  • %TEMP%\aek76.tmp
  • %TEMP%\aek7B.tmp
  • %TEMP%\aek7C.tmp
  • %TEMP%\aek79.tmp
  • %TEMP%\aek7A.tmp
  • %TEMP%\aek74.tmp
  • %TEMP%\aek6E.tmp
  • %TEMP%\aek6F.tmp
  • %TEMP%\aek6C.tmp
  • %TEMP%\aek6D.tmp
  • %TEMP%\aek72.tmp
  • %TEMP%\aek73.tmp
  • %TEMP%\aek70.tmp
  • %TEMP%\aek71.tmp
  • %TEMP%\aek7D.tmp
  • %TEMP%\aek89.tmp
  • %TEMP%\aek8A.tmp
  • %TEMP%\aek87.tmp
  • %TEMP%\aek88.tmp
  • %TEMP%\aek8D.tmp
  • %TEMP%\aek8E.tmp
  • %TEMP%\aek8B.tmp
  • %TEMP%\aek8C.tmp
  • %TEMP%\aek86.tmp
  • %TEMP%\aek80.tmp
  • %TEMP%\aek81.tmp
  • %TEMP%\aek7E.tmp
  • %TEMP%\aek7F.tmp
  • %TEMP%\aek84.tmp
  • %TEMP%\aek85.tmp
  • %TEMP%\aek82.tmp
  • %TEMP%\aek83.tmp
  • %TEMP%\aek6B.tmp
  • %TEMP%\aek53.tmp
  • %TEMP%\aek54.tmp
  • %TEMP%\aek51.tmp
  • %TEMP%\aek52.tmp
  • %TEMP%\aek57.tmp
  • %TEMP%\aek58.tmp
  • %TEMP%\aek55.tmp
  • %TEMP%\aek56.tmp
  • %TEMP%\aek50.tmp
  • %TEMP%\aek4A.tmp
  • %TEMP%\aek4B.tmp
  • %TEMP%\aek48.tmp
  • %TEMP%\aek49.tmp
  • %TEMP%\aek4E.tmp
  • %TEMP%\aek4F.tmp
  • %TEMP%\aek4C.tmp
  • %TEMP%\aek4D.tmp
  • %TEMP%\aek59.tmp
  • %TEMP%\aek65.tmp
  • %TEMP%\aek66.tmp
  • %TEMP%\aek63.tmp
  • %TEMP%\aek64.tmp
  • %TEMP%\aek69.tmp
  • %TEMP%\aek6A.tmp
  • %TEMP%\aek67.tmp
  • %TEMP%\aek68.tmp
  • %TEMP%\aek62.tmp
  • %TEMP%\aek5C.tmp
  • %TEMP%\aek5D.tmp
  • %TEMP%\aek5A.tmp
  • %TEMP%\aek5B.tmp
  • %TEMP%\aek60.tmp
  • %TEMP%\aek61.tmp
  • %TEMP%\aek5E.tmp
  • %TEMP%\aek5F.tmp
  • %TEMP%\aek11E.tmp
  • %TEMP%\aek1DD.tmp
  • %TEMP%\aek1DE.tmp
  • %TEMP%\aek1DB.tmp
  • %TEMP%\aek1DC.tmp
  • %TEMP%\aek1E1.tmp
  • %TEMP%\aek1E2.tmp
  • %TEMP%\aek1DF.tmp
  • %TEMP%\aek1E0.tmp
  • %TEMP%\aek1DA.tmp
  • %TEMP%\aek1D4.tmp
  • %TEMP%\aek1D5.tmp
  • %TEMP%\aek1D2.tmp
  • %TEMP%\aek1D3.tmp
  • %TEMP%\aek1D8.tmp
  • %TEMP%\aek1D9.tmp
  • %TEMP%\aek1D6.tmp
  • %TEMP%\aek1D7.tmp
  • %TEMP%\aek1E3.tmp
  • %TEMP%\aek1EF.tmp
  • %TEMP%\aek1F0.tmp
  • %TEMP%\aek1ED.tmp
  • %TEMP%\aek1EE.tmp
  • %TEMP%\aek1F3.tmp
  • %TEMP%\aek1F4.tmp
  • %TEMP%\aek1F1.tmp
  • %TEMP%\aek1F2.tmp
  • %TEMP%\aek1EC.tmp
  • %TEMP%\aek1E6.tmp
  • %TEMP%\aek1E7.tmp
  • %TEMP%\aek1E4.tmp
  • %TEMP%\aek1E5.tmp
  • %TEMP%\aek1EA.tmp
  • %TEMP%\aek1EB.tmp
  • %TEMP%\aek1E8.tmp
  • %TEMP%\aek1E9.tmp
  • %TEMP%\aek1D1.tmp
  • %TEMP%\aek1B9.tmp
  • %TEMP%\aek1BA.tmp
  • %TEMP%\aek1B7.tmp
  • %TEMP%\aek1B8.tmp
  • %TEMP%\aek1BD.tmp
  • %TEMP%\aek1BE.tmp
  • %TEMP%\aek1BB.tmp
  • %TEMP%\aek1BC.tmp
  • %TEMP%\aek1B6.tmp
  • %TEMP%\aek1B0.tmp
  • %TEMP%\aek1B1.tmp
  • %TEMP%\aek1AE.tmp
  • %TEMP%\aek1AF.tmp
  • %TEMP%\aek1B4.tmp
  • %TEMP%\aek1B5.tmp
  • %TEMP%\aek1B2.tmp
  • %TEMP%\aek1B3.tmp
  • %TEMP%\aek1BF.tmp
  • %TEMP%\aek1CB.tmp
  • %TEMP%\aek1CC.tmp
  • %TEMP%\aek1C9.tmp
  • %TEMP%\aek1CA.tmp
  • %TEMP%\aek1CF.tmp
  • %TEMP%\aek1D0.tmp
  • %TEMP%\aek1CD.tmp
  • %TEMP%\aek1CE.tmp
  • %TEMP%\aek1C8.tmp
  • %TEMP%\aek1C2.tmp
  • %TEMP%\aek1C3.tmp
  • %TEMP%\aek1C0.tmp
  • %TEMP%\aek1C1.tmp
  • %TEMP%\aek1C6.tmp
  • %TEMP%\aek1C7.tmp
  • %TEMP%\aek1C4.tmp
  • %TEMP%\aek1C5.tmp
  • %TEMP%\aek224.tmp
  • %TEMP%\aek225.tmp
  • %TEMP%\aek222.tmp
  • %TEMP%\aek223.tmp
  • %TEMP%\aek228.tmp
  • %TEMP%\aek229.tmp
  • %TEMP%\aek226.tmp
  • %TEMP%\aek227.tmp
  • %TEMP%\aek221.tmp
  • %TEMP%\aek21B.tmp
  • %TEMP%\aek21C.tmp
  • %TEMP%\aek219.tmp
  • %TEMP%\aek21A.tmp
  • %TEMP%\aek21F.tmp
  • %TEMP%\aek220.tmp
  • %TEMP%\aek21D.tmp
  • %TEMP%\aek21E.tmp
  • %TEMP%\aek22A.tmp
  • %TEMP%\aek236.tmp
  • %TEMP%\aek237.tmp
  • %TEMP%\aek234.tmp
  • %TEMP%\aek235.tmp
  • %TEMP%\aek23A.tmp
  • %TEMP%\aek23B.tmp
  • %TEMP%\aek238.tmp
  • %TEMP%\aek239.tmp
  • %TEMP%\aek233.tmp
  • %TEMP%\aek22D.tmp
  • %TEMP%\aek22E.tmp
  • %TEMP%\aek22B.tmp
  • %TEMP%\aek22C.tmp
  • %TEMP%\aek231.tmp
  • %TEMP%\aek232.tmp
  • %TEMP%\aek22F.tmp
  • %TEMP%\aek230.tmp
  • %TEMP%\aek218.tmp
  • %TEMP%\aek200.tmp
  • %TEMP%\aek201.tmp
  • %TEMP%\aek1FE.tmp
  • %TEMP%\aek1FF.tmp
  • %TEMP%\aek204.tmp
  • %TEMP%\aek205.tmp
  • %TEMP%\aek202.tmp
  • %TEMP%\aek203.tmp
  • %TEMP%\aek1FD.tmp
  • %TEMP%\aek1F7.tmp
  • %TEMP%\aek1F8.tmp
  • %TEMP%\aek1F5.tmp
  • %TEMP%\aek1F6.tmp
  • %TEMP%\aek1FB.tmp
  • %TEMP%\aek1FC.tmp
  • %TEMP%\aek1F9.tmp
  • %TEMP%\aek1FA.tmp
  • %TEMP%\aek206.tmp
  • %TEMP%\aek212.tmp
  • %TEMP%\aek213.tmp
  • %TEMP%\aek210.tmp
  • %TEMP%\aek211.tmp
  • %TEMP%\aek216.tmp
  • %TEMP%\aek217.tmp
  • %TEMP%\aek214.tmp
  • %TEMP%\aek215.tmp
  • %TEMP%\aek20F.tmp
  • %TEMP%\aek209.tmp
  • %TEMP%\aek20A.tmp
  • %TEMP%\aek207.tmp
  • %TEMP%\aek208.tmp
  • %TEMP%\aek20D.tmp
  • %TEMP%\aek20E.tmp
  • %TEMP%\aek20B.tmp
  • %TEMP%\aek20C.tmp
  • %TEMP%\aek1AD.tmp
  • %TEMP%\aek14E.tmp
  • %TEMP%\aek14F.tmp
  • %TEMP%\aek14C.tmp
  • %TEMP%\aek14D.tmp
  • %TEMP%\aek152.tmp
  • %TEMP%\aek153.tmp
  • %TEMP%\aek150.tmp
  • %TEMP%\aek151.tmp
  • %TEMP%\aek14B.tmp
  • %TEMP%\aek145.tmp
  • %TEMP%\aek146.tmp
  • %TEMP%\aek143.tmp
  • %TEMP%\aek144.tmp
  • %TEMP%\aek149.tmp
  • %TEMP%\aek14A.tmp
  • %TEMP%\aek147.tmp
  • %TEMP%\aek148.tmp
  • %TEMP%\aek154.tmp
  • %TEMP%\aek160.tmp
  • %TEMP%\aek161.tmp
  • %TEMP%\aek15E.tmp
  • %TEMP%\aek15F.tmp
  • %TEMP%\aek164.tmp
  • %TEMP%\aek165.tmp
  • %TEMP%\aek162.tmp
  • %TEMP%\aek163.tmp
  • %TEMP%\aek15D.tmp
  • %TEMP%\aek157.tmp
  • %TEMP%\aek158.tmp
  • %TEMP%\aek155.tmp
  • %TEMP%\aek156.tmp
  • %TEMP%\aek15B.tmp
  • %TEMP%\aek15C.tmp
  • %TEMP%\aek159.tmp
  • %TEMP%\aek15A.tmp
  • %TEMP%\aek142.tmp
  • %TEMP%\aek12A.tmp
  • %TEMP%\aek12B.tmp
  • %TEMP%\aek128.tmp
  • %TEMP%\aek129.tmp
  • %TEMP%\aek12E.tmp
  • %TEMP%\aek12F.tmp
  • %TEMP%\aek12C.tmp
  • %TEMP%\aek12D.tmp
  • %TEMP%\aek127.tmp
  • %TEMP%\aek121.tmp
  • %TEMP%\aek122.tmp
  • %TEMP%\aek11F.tmp
  • %TEMP%\aek120.tmp
  • %TEMP%\aek125.tmp
  • %TEMP%\aek126.tmp
  • %TEMP%\aek123.tmp
  • %TEMP%\aek124.tmp
  • %TEMP%\aek130.tmp
  • %TEMP%\aek13C.tmp
  • %TEMP%\aek13D.tmp
  • %TEMP%\aek13A.tmp
  • %TEMP%\aek13B.tmp
  • %TEMP%\aek140.tmp
  • %TEMP%\aek141.tmp
  • %TEMP%\aek13E.tmp
  • %TEMP%\aek13F.tmp
  • %TEMP%\aek139.tmp
  • %TEMP%\aek133.tmp
  • %TEMP%\aek134.tmp
  • %TEMP%\aek131.tmp
  • %TEMP%\aek132.tmp
  • %TEMP%\aek137.tmp
  • %TEMP%\aek138.tmp
  • %TEMP%\aek135.tmp
  • %TEMP%\aek136.tmp
  • %TEMP%\aek195.tmp
  • %TEMP%\aek196.tmp
  • %TEMP%\aek193.tmp
  • %TEMP%\aek194.tmp
  • %TEMP%\aek199.tmp
  • %TEMP%\aek19A.tmp
  • %TEMP%\aek197.tmp
  • %TEMP%\aek198.tmp
  • %TEMP%\aek192.tmp
  • %TEMP%\aek18C.tmp
  • %TEMP%\aek18D.tmp
  • %TEMP%\aek18A.tmp
  • %TEMP%\aek18B.tmp
  • %TEMP%\aek190.tmp
  • %TEMP%\aek191.tmp
  • %TEMP%\aek18E.tmp
  • %TEMP%\aek18F.tmp
  • %TEMP%\aek19B.tmp
  • %TEMP%\aek1A7.tmp
  • %TEMP%\aek1A8.tmp
  • %TEMP%\aek1A5.tmp
  • %TEMP%\aek1A6.tmp
  • %TEMP%\aek1AB.tmp
  • %TEMP%\aek1AC.tmp
  • %TEMP%\aek1A9.tmp
  • %TEMP%\aek1AA.tmp
  • %TEMP%\aek1A4.tmp
  • %TEMP%\aek19E.tmp
  • %TEMP%\aek19F.tmp
  • %TEMP%\aek19C.tmp
  • %TEMP%\aek19D.tmp
  • %TEMP%\aek1A2.tmp
  • %TEMP%\aek1A3.tmp
  • %TEMP%\aek1A0.tmp
  • %TEMP%\aek1A1.tmp
  • %TEMP%\aek189.tmp
  • %TEMP%\aek171.tmp
  • %TEMP%\aek172.tmp
  • %TEMP%\aek16F.tmp
  • %TEMP%\aek170.tmp
  • %TEMP%\aek175.tmp
  • %TEMP%\aek176.tmp
  • %TEMP%\aek173.tmp
  • %TEMP%\aek174.tmp
  • %TEMP%\aek16E.tmp
  • %TEMP%\aek168.tmp
  • %TEMP%\aek169.tmp
  • %TEMP%\aek166.tmp
  • %TEMP%\aek167.tmp
  • %TEMP%\aek16C.tmp
  • %TEMP%\aek16D.tmp
  • %TEMP%\aek16A.tmp
  • %TEMP%\aek16B.tmp
  • %TEMP%\aek177.tmp
  • %TEMP%\aek183.tmp
  • %TEMP%\aek184.tmp
  • %TEMP%\aek181.tmp
  • %TEMP%\aek182.tmp
  • %TEMP%\aek187.tmp
  • %TEMP%\aek188.tmp
  • %TEMP%\aek185.tmp
  • %TEMP%\aek186.tmp
  • %TEMP%\aek180.tmp
  • %TEMP%\aek17A.tmp
  • %TEMP%\aek17B.tmp
  • %TEMP%\aek178.tmp
  • %TEMP%\aek179.tmp
  • %TEMP%\aek17E.tmp
  • %TEMP%\aek17F.tmp
  • %TEMP%\aek17C.tmp
  • %TEMP%\aek17D.tmp
Самоудаляется.
Сетевая активность:
Подключается к:
  • 'ma####cybefosu.com':80
  • 'ba####qaguhit.com':80
  • '20#.#6.232.182':80
  • 'su###agil.com':80
  • 'ci###uwabos.com':80
  • 'gi####fopupygy.com':80
  • 'ko####lepehavy.com':80
  • 'me####pulafod.com':80
  • 'qu###ewyqa.com':80
  • 'bi###ebij.com':80
  • 'ma####vadorode.com':80
  • 'xy####nihyfo.com':80
  • 'ne###ezyjih.com':80
  • 'xy####talomu.com':80
  • 'ma####noralibu.com':80
  • 'xy###yquk.com':80
  • 'za####dixahok.com':80
  • 'qa###alomo.com':80
  • 'wu####lyhura.com':80
  • 'to####lymavi.com':80
  • 'ry###amogo.com':80
  • 'zy####dojusoko.com':80
  • 'hy###ucugi.com':80
  • 'nu####jilamipu.com':80
  • 'vu####hevixaf.com':80
  • 'qa####pojewiv.com':80
  • 'vo####dacyfyki.com':80
  • 'zo###ymiz.com':80
  • 'se####wytuzek.com':80
  • 'dy###owid.com':80
  • 'ge####reeh0st.com':80
  • 'vi###oxis.com':80
  • 'lo###ejav.com':80
  • 'bo####lawiqo.com':80
  • 'so###urepu.com':80
  • 'di####mydupi.com':80
  • 'vu###uzuxil.com':80
  • 'he####bufusoz.com':80
  • 'ko###inamu.com':80
  • 'wu####litezum.com':80
  • 'ce####zugyky.com':80
  • 'wu###omovom.com':80
  • 'xe####kawuhady.com':80
  • 'so###yzev.com':80
  • 'ro###ymici.com':80
  • 'ly####fotoqy.com':80
TCP:
Запросы HTTP GET:
  • http://he####bufusoz.com/1013000412
  • http://wu####litezum.com/1013000412
  • http://ko###inamu.com/1013000412
  • http://di####mydupi.com/1013000412
  • http://ro###ymici.com/1013000412
  • http://ce####zugyky.com/1013000412
  • http://vu###uzuxil.com/1013000412
  • http://me####pulafod.com/1013000412
  • http://gi####fopupygy.com/1013000412
  • http://ba####qaguhit.com/1013000412
  • http://ma####cybefosu.com/1013000412
  • http://bi###ebij.com/1013000412
  • http://ko####lepehavy.com/1013000412
  • http://qu###ewyqa.com/1013000412
  • http://ma####vadorode.com/1013000412
  • http://ly####fotoqy.com/1013000412
  • http://lo###ejav.com/1013000412
  • http://se####wytuzek.com/1013000412
  • http://vu####hevixaf.com/1013000412
  • http://bo####lawiqo.com/1013000412
  • http://ge####reeh0st.com/setup2.exe
  • http://dy###owid.com/1013000412
  • http://vi###oxis.com/1013000412
  • http://nu####jilamipu.com/1013000412
  • http://xe####kawuhady.com/1013000412
  • http://wu###omovom.com/1013000412
  • http://so###yzev.com/1013000412
  • http://so###urepu.com/1013000412
  • http://qa####pojewiv.com/1013000412
  • http://zo###ymiz.com/1013000412
  • http://vo####dacyfyki.com/1013000412
UDP:
  • DNS ASK xy####talomu.com
  • DNS ASK qa###alomo.com
  • DNS ASK zy####dojusoko.com
  • DNS ASK ne###ezyjih.com
  • DNS ASK xy###yquk.com
  • DNS ASK za####dixahok.com
  • DNS ASK ma####noralibu.com
  • DNS ASK hy###ucugi.com
  • DNS ASK su###agil.com
  • DNS ASK ci###uwabos.com
  • DNS ASK microsoft.com
  • DNS ASK xy####nihyfo.com
  • DNS ASK ry###amogo.com
  • DNS ASK wu####lyhura.com
  • DNS ASK to####lymavi.com
  • DNS ASK xe####wunikyle.com
  • DNS ASK pe###ukos.com
  • DNS ASK ny####wafyfa.com
  • DNS ASK xa###iwehiw.com
  • DNS ASK ku###idewar.com
  • DNS ASK zy####movyxy.com
  • DNS ASK wu###osux.com
  • DNS ASK va###uzozuq.com
  • DNS ASK to###uwace.com
  • DNS ASK di####jubeka.com
  • DNS ASK pu####pageta.com
  • DNS ASK lo####hosywaw.com
  • DNS ASK co###irebu.com
  • DNS ASK zo####kimewut.com
  • DNS ASK le####bunosu.com
  • DNS ASK dy####gymasasu.com
  • DNS ASK vo####dacyfyki.com
  • DNS ASK zo###ymiz.com
  • DNS ASK qa####pojewiv.com
  • DNS ASK so###urepu.com
  • DNS ASK so###yzev.com
  • DNS ASK wu###omovom.com
  • DNS ASK xe####kawuhady.com
  • DNS ASK nu####jilamipu.com
  • DNS ASK vi###oxis.com
  • DNS ASK dy###owid.com
  • DNS ASK ge####reeh0st.com
  • DNS ASK bo####lawiqo.com
  • DNS ASK vu####hevixaf.com
  • DNS ASK se####wytuzek.com
  • DNS ASK lo###ejav.com
  • DNS ASK ly####fotoqy.com
  • DNS ASK ma####vadorode.com
  • DNS ASK qu###ewyqa.com
  • DNS ASK ko####lepehavy.com
  • DNS ASK bi###ebij.com
  • DNS ASK ma####cybefosu.com
  • DNS ASK ba####qaguhit.com
  • DNS ASK gi####fopupygy.com
  • DNS ASK me####pulafod.com
  • DNS ASK vu###uzuxil.com
  • DNS ASK ce####zugyky.com
  • DNS ASK ro###ymici.com
  • DNS ASK di####mydupi.com
  • DNS ASK ko###inamu.com
  • DNS ASK wu####litezum.com
  • DNS ASK he####bufusoz.com
Другое:
Ищет следующие окна:
  • ClassName: 'msascui_class' WindowName: ''
  • ClassName: 'Indicator' WindowName: ''

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке