Trojan.Inject4.64820

Technical Information

Malicious functions

Launches a large number of processes

Modifies file system

Creates the following files

%HOMEPATH%\my documents\my videos\desktop.ini
C:\Documents\user\locals~1\temp\nsv3.tmp\ns77.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns78.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns79.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns7a.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns7b.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns7c.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns7d.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns7e.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns75.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns76.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns7f.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns82.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns83.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns84.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns85.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns86.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns87.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns88.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns89.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns80.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns81.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns8b.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns8a.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns72.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns60.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns61.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns62.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns63.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns64.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns65.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns66.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns73.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns5e.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns74.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns67.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns6b.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns6c.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns6d.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns6e.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns6f.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns70.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns71.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns68.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns69.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns6a.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns2b.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns8c.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa7.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa9.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsaa.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsab.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsac.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsad.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsae.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsaf.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa6.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb0.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa8.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb2.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb4.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb5.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb6.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb7.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb8.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb9.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsba.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb1.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa5.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb3.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa4.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa3.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns8e.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns90.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns91.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns92.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns93.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns94.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns95.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns96.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns97.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns98.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns8f.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns99.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns9b.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns9c.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns9d.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns9e.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns9f.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa0.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa1.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa2.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns5d.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns9a.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns5f.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns5c.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns5b.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns5a.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns18.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns19.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns1a.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns1b.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns1c.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns1d.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns1e.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns15.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns13.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns17.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\system.dll
C:\Documents\user\locals~1\temp\nsv3.tmp\ns22.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns23.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns24.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns25.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns26.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns27.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns28.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns1f.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns20.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns21.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns14.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns12.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns29.tmp
%HOMEPATH%\templates\todimensionel\preferentialist\porthetria\cooeys.pot
%HOMEPATH%\templates\todimensionel\preferentialist\porthetria\waukrife\tartrylic\polissoir.ula
%HOMEPATH%\templates\todimensionel\preferentialist\porthetria\outhit\opdrive89.str
%HOMEPATH%\templates\todimensionel\preferentialist\porthetria\outhit\stammers.txt
%HOMEPATH%\templates\todimensionel\preferentialist\porthetria\standardopskrifter.par
C:\Documents\user\locals~1\temp\nsv3.tmp\nsexec.dll
C:\Documents\user\locals~1\temp\nsv3.tmp\ns4.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns5.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns6.tmp
%HOMEPATH%\templates\todimensionel\preferentialist\porthetria\neutrino.fon
C:\Documents\user\locals~1\temp\nsv3.tmp\ns7.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns9.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsc.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsd.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nse.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsf.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns10.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns11.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns8.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsbb.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns8d.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns2a.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns2e.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns48.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns49.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns4a.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns4b.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns4c.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns4d.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns4e.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns45.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns4f.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns47.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns51.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns53.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns54.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns55.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns56.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns57.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns58.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns59.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns50.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns16.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns52.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns46.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns44.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns43.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns2f.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns30.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns31.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns32.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns33.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns34.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns35.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns36.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns2d.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns37.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns39.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns3a.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns3b.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns3c.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns3d.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns3e.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns3f.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns40.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns41.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns38.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns42.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns2c.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsbc.tmp

Deletes the following files

C:\Documents\user\locals~1\temp\nsv3.tmp\ns4.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns7a.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns7b.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns7c.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns7d.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns7e.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns7f.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns80.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns81.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns82.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns83.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns84.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns85.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns86.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns87.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns88.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns89.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns8a.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns8b.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns8c.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns79.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns61.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns78.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns76.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns63.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns64.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns65.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns66.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns67.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns68.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns69.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns6a.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns6b.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns6c.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns6d.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns6e.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns6f.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns70.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns71.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns72.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns73.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns74.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns75.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns77.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns62.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns8d.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns91.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa8.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa9.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsaa.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsab.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsac.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsad.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsae.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsaf.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns3d.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb0.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb2.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb3.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb4.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb5.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb6.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb7.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb8.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb9.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa6.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa7.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns8f.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns8e.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa3.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns92.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns93.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns94.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns95.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns96.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns97.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns98.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns99.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns9a.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns9b.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns9c.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns9d.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns9e.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns9f.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa0.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa1.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa2.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa4.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns90.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa5.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns60.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns5f.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns5e.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns1d.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns1e.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns1f.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns20.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns21.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns22.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns23.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns24.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns25.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns26.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns27.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns28.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns29.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns2a.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns2b.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns2c.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns2d.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns2e.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns1b.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns2f.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns1a.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns18.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns5.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns6.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns7.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns8.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns9.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsa.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsc.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsd.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nse.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsf.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns10.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns11.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns12.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns13.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns14.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns15.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns16.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns17.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns19.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns30.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns1c.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns31.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns4b.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns4d.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns4e.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns4f.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns50.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns51.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns52.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns53.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns54.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns55.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns56.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns57.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns58.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns59.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns5a.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns5b.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns5c.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns5d.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns4a.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns48.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns4c.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns49.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns47.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns32.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns34.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns35.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns36.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns37.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns38.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns39.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns3a.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns3b.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsba.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsb1.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns3c.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns3f.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns40.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns41.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns42.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns43.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns44.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns45.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns46.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns33.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\ns3e.tmp
C:\Documents\user\locals~1\temp\nsv3.tmp\nsbb.tmp

Miscellaneous

Searches for the following windows

ClassName: '#32770' WindowName: ''
ClassName: 'SysListView32' WindowName: ''

Creates and executes the following

'C:\Documents\user\locals~1\temp\nsv3.tmp\ns4.tmp' cmd /c set /a "0x9E^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns63.tmp' cmd /c set /a "0x84^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns64.tmp' cmd /c set /a "0x88^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns65.tmp' cmd /c set /a "0xAE^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns66.tmp' cmd /c set /a "0x93^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns67.tmp' cmd /c set /a "0xC3^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns68.tmp' cmd /c set /a "0x82^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns69.tmp' cmd /c set /a "0xCB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns6a.tmp' cmd /c set /a "0xC6^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns50.tmp' cmd /c set /a "0xAE^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns6b.tmp' cmd /c set /a "0xDA^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns6d.tmp' cmd /c set /a "0xCB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns6e.tmp' cmd /c set /a "0x82^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns6f.tmp' cmd /c set /a "0xCB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns70.tmp' cmd /c set /a "0xDB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns71.tmp' cmd /c set /a "0xC7^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns72.tmp' cmd /c set /a "0x82^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns73.tmp' cmd /c set /a "0xCB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns74.tmp' cmd /c set /a "0xD8^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns75.tmp' cmd /c set /a "0xDB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns9f.tmp' cmd /c set /a "0x80^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns6c.tmp' cmd /c set /a "0xC7^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns76.tmp' cmd /c set /a "0xDD^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns78.tmp' cmd /c set /a "0xDB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns7c.tmp' cmd /c set /a "0xC7^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns7d.tmp' cmd /c set /a "0xCB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns62.tmp' cmd /c set /a "0x87^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns7e.tmp' cmd /c set /a "0x82^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns61.tmp' cmd /c set /a "0x87^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns5f.tmp' cmd /c set /a "0x87^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns44.tmp' cmd /c set /a "0xDB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns45.tmp' cmd /c set /a "0x93^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns46.tmp' cmd /c set /a "0xDA^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns47.tmp' cmd /c set /a "0xDB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns48.tmp' cmd /c set /a "0xDB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns49.tmp' cmd /c set /a "0xC2^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns4a.tmp' cmd /c set /a "0x82^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns4b.tmp' cmd /c set /a "0xC5^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns4c.tmp' cmd /c set /a "0x99^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns4d.tmp' cmd /c set /a "0xDE^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns4e.tmp' cmd /c set /a "0x92^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns4f.tmp' cmd /c set /a "0xA0^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns79.tmp' cmd /c set /a "0xD8^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns77.tmp' cmd /c set /a "0xDE^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns51.tmp' cmd /c set /a "0xB9^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns7a.tmp' cmd /c set /a "0xDD^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns53.tmp' cmd /c set /a "0xAE^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa6.tmp' cmd /c set /a "0xCB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns56.tmp' cmd /c set /a "0xD9^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns57.tmp' cmd /c set /a "0xD1^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns58.tmp' cmd /c set /a "0xD1^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns59.tmp' cmd /c set /a "0xBD^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns5a.tmp' cmd /c set /a "0x82^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns5b.tmp' cmd /c set /a "0x99^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns5c.tmp' cmd /c set /a "0x9F^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns5d.tmp' cmd /c set /a "0x9E^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns55.tmp' cmd /c set /a "0xD8^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsbc.tmp' cmd /c set /a "0x88^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns5e.tmp' cmd /c set /a "0x8A^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa4.tmp' cmd /c set /a "0xDE^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa3.tmp' cmd /c set /a "0x99^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa2.tmp' cmd /c set /a "0xCB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa0.tmp' cmd /c set /a "0xC3^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns81.tmp' cmd /c set /a "0x93^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns7f.tmp' cmd /c set /a "0xCB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns43.tmp' cmd /c set /a "0xCB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns54.tmp' cmd /c set /a "0xA7^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa5.tmp' cmd /c set /a "0xC7^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb0.tmp' cmd /c set /a "0x82^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa7.tmp' cmd /c set /a "0x82^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa9.tmp' cmd /c set /a "0xD8^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsaa.tmp' cmd /c set /a "0xDA^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsab.tmp' cmd /c set /a "0xD2^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsac.tmp' cmd /c set /a "0xDB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsad.tmp' cmd /c set /a "0xCB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsae.tmp' cmd /c set /a "0xC7^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsaf.tmp' cmd /c set /a "0xCB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb1.tmp' cmd /c set /a "0xCB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb2.tmp' cmd /c set /a "0xDB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns7b.tmp' cmd /c set /a "0xD3^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb3.tmp' cmd /c set /a "0xC2^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb5.tmp' cmd /c set /a "0xC5^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb6.tmp' cmd /c set /a "0x99^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb7.tmp' cmd /c set /a "0xDC^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb8.tmp' cmd /c set /a "0x92^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb9.tmp' cmd /c set /a "0x86^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsba.tmp' cmd /c set /a "0x98^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsbb.tmp' cmd /c set /a "0x9D^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns52.tmp' cmd /c set /a "0xA5^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa8.tmp' cmd /c set /a "0xCB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb4.tmp' cmd /c set /a "0x82^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns80.tmp' cmd /c set /a "0xDB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa1.tmp' cmd /c set /a "0x82^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns9d.tmp' cmd /c set /a "0x8E^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns84.tmp' cmd /c set /a "0xDB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns85.tmp' cmd /c set /a "0xDB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns86.tmp' cmd /c set /a "0xC7^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns87.tmp' cmd /c set /a "0xCB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns88.tmp' cmd /c set /a "0x82^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns89.tmp' cmd /c set /a "0xCB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns8a.tmp' cmd /c set /a "0xDD^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns8b.tmp' cmd /c set /a "0xDF^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns8c.tmp' cmd /c set /a "0xC2^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns8d.tmp' cmd /c set /a "0x9B^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns8e.tmp' cmd /c set /a "0xC5^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns8f.tmp' cmd /c set /a "0x99^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns90.tmp' cmd /c set /a "0xDF^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns91.tmp' cmd /c set /a "0x92^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns92.tmp' cmd /c set /a "0x86^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns93.tmp' cmd /c set /a "0x98^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns94.tmp' cmd /c set /a "0x9D^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns95.tmp' cmd /c set /a "0x88^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns97.tmp' cmd /c set /a "0x9F^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns96.tmp' cmd /c set /a "0x99^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns98.tmp' cmd /c set /a "0xD1^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns33.tmp' cmd /c set /a "0x99^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns99.tmp' cmd /c set /a "0xD1^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns38.tmp' cmd /c set /a "0x82^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns9a.tmp' cmd /c set /a "0xB4^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns9b.tmp' cmd /c set /a "0x87^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns9c.tmp' cmd /c set /a "0x98^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns9e.tmp' cmd /c set /a "0x8E^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns42.tmp' cmd /c set /a "0x82^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns60.tmp' cmd /c set /a "0xAA^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns41.tmp' cmd /c set /a "0xCB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns14.tmp' cmd /c set /a "0x84^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nse.tmp' cmd /c set /a "0x84^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns2c.tmp' cmd /c set /a "0x84^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns13.tmp' cmd /c set /a "0x8F^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns2e.tmp' cmd /c set /a "0x8E^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns12.tmp' cmd /c set /a "0x85^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns2f.tmp' cmd /c set /a "0x85^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns30.tmp' cmd /c set /a "0xC3^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns31.tmp' cmd /c set /a "0x86^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns10.tmp' cmd /c set /a "0xBC^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns32.tmp' cmd /c set /a "0xCB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsf.tmp' cmd /c set /a "0x9C^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns2d.tmp' cmd /c set /a "0x9B^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns34.tmp' cmd /c set /a "0xDF^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns83.tmp' cmd /c set /a "0xDB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsc.tmp' cmd /c set /a "0xB8^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns2b.tmp' cmd /c set /a "0xB4^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns15.tmp' cmd /c set /a "0x9C^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns2a.tmp' cmd /c set /a "0xD1^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns16.tmp' cmd /c set /a "0xC3^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns1f.tmp' cmd /c set /a "0x86^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns1d.tmp' cmd /c set /a "0xC2^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns20.tmp' cmd /c set /a "0x98^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns82.tmp' cmd /c set /a "0xD8^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns1c.tmp' cmd /c set /a "0xDB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns1b.tmp' cmd /c set /a "0x82^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns23.tmp' cmd /c set /a "0x99^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns36.tmp' cmd /c set /a "0xCB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns1a.tmp' cmd /c set /a "0xC7^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns25.tmp' cmd /c set /a "0xC5^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns19.tmp' cmd /c set /a "0xDC^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns26.tmp' cmd /c set /a "0x8F^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns18.tmp' cmd /c set /a "0x99^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns27.tmp' cmd /c set /a "0x87^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns35.tmp' cmd /c set /a "0xC7^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsd.tmp' cmd /c set /a "0x83^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns17.tmp' cmd /c set /a "0x82^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns21.tmp' cmd /c set /a "0x9D^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns29.tmp' cmd /c set /a "0xD1^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns11.tmp' cmd /c set /a "0x82^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns28.tmp' cmd /c set /a "0x87^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns40.tmp' cmd /c set /a "0xC7^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns5.tmp' cmd /c set /a "0x98^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns3f.tmp' cmd /c set /a "0xDB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns6.tmp' cmd /c set /a "0x8E^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns3e.tmp' cmd /c set /a "0xDB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns7.tmp' cmd /c set /a "0x99^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns3d.tmp' cmd /c set /a "0xDB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns3c.tmp' cmd /c set /a "0xD3^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns8.tmp' cmd /c set /a "0xD8^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns9.tmp' cmd /c set /a "0xD9^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns3b.tmp' cmd /c set /a "0x93^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns24.tmp' cmd /c set /a "0x9F^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb.tmp' cmd /c set /a "0xD1^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns37.tmp' cmd /c set /a "0xCB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns22.tmp' cmd /c set /a "0x88^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns39.tmp' cmd /c set /a "0xCB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa.tmp' cmd /c set /a "0xD1^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns3a.tmp' cmd /c set /a "0xDB^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns1e.tmp' cmd /c set /a "0x92^235"
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns9.tmp' cmd /c set /a "0xD9^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns19.tmp' cmd /c set /a "0xDC^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns91.tmp' cmd /c set /a "0x92^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsd.tmp' cmd /c set /a "0x83^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb7.tmp' cmd /c set /a "0xDC^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns90.tmp' cmd /c set /a "0xDF^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsad.tmp' cmd /c set /a "0xCB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns95.tmp' cmd /c set /a "0x88^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns92.tmp' cmd /c set /a "0x86^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa9.tmp' cmd /c set /a "0xD8^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns93.tmp' cmd /c set /a "0x98^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb6.tmp' cmd /c set /a "0x99^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns94.tmp' cmd /c set /a "0x9D^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns18.tmp' cmd /c set /a "0x99^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa.tmp' cmd /c set /a "0xD1^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb8.tmp' cmd /c set /a "0x92^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns8f.tmp' cmd /c set /a "0x99^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns17.tmp' cmd /c set /a "0x82^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns6.tmp' cmd /c set /a "0x8E^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns75.tmp' cmd /c set /a "0xDB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns8a.tmp' cmd /c set /a "0xDD^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns1d.tmp' cmd /c set /a "0xC2^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb.tmp' cmd /c set /a "0xD1^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns1c.tmp' cmd /c set /a "0xDB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns8b.tmp' cmd /c set /a "0xDF^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsc.tmp' cmd /c set /a "0xB8^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns8c.tmp' cmd /c set /a "0xC2^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns1b.tmp' cmd /c set /a "0x82^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb9.tmp' cmd /c set /a "0x86^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns8d.tmp' cmd /c set /a "0x9B^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns5.tmp' cmd /c set /a "0x98^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsbb.tmp' cmd /c set /a "0x9D^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns8e.tmp' cmd /c set /a "0xC5^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns1a.tmp' cmd /c set /a "0xC7^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb5.tmp' cmd /c set /a "0xC5^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns96.tmp' cmd /c set /a "0x99^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns16.tmp' cmd /c set /a "0xC3^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns97.tmp' cmd /c set /a "0x9F^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa7.tmp' cmd /c set /a "0x82^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa0.tmp' cmd /c set /a "0xC3^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns4.tmp' cmd /c set /a "0x9E^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns89.tmp' cmd /c set /a "0xCB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsaa.tmp' cmd /c set /a "0xDA^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns34.tmp' cmd /c set /a "0xDF^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsac.tmp' cmd /c set /a "0xDB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns88.tmp' cmd /c set /a "0x82^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa2.tmp' cmd /c set /a "0xCB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa3.tmp' cmd /c set /a "0x99^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nse.tmp' cmd /c set /a "0x84^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsae.tmp' cmd /c set /a "0xC7^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa4.tmp' cmd /c set /a "0xDE^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsf.tmp' cmd /c set /a "0x9C^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsaf.tmp' cmd /c set /a "0xCB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa5.tmp' cmd /c set /a "0xC7^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa1.tmp' cmd /c set /a "0x82^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns10.tmp' cmd /c set /a "0xBC^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb1.tmp' cmd /c set /a "0xCB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns9e.tmp' cmd /c set /a "0x8E^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns7.tmp' cmd /c set /a "0x99^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb4.tmp' cmd /c set /a "0x82^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns98.tmp' cmd /c set /a "0xD1^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns15.tmp' cmd /c set /a "0x9C^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa8.tmp' cmd /c set /a "0xCB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns99.tmp' cmd /c set /a "0xD1^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsba.tmp' cmd /c set /a "0x98^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns9f.tmp' cmd /c set /a "0x80^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns12.tmp' cmd /c set /a "0x85^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns9a.tmp' cmd /c set /a "0xB4^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns14.tmp' cmd /c set /a "0x84^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns8.tmp' cmd /c set /a "0xD8^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns9c.tmp' cmd /c set /a "0x98^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns13.tmp' cmd /c set /a "0x8F^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns9d.tmp' cmd /c set /a "0x8E^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb2.tmp' cmd /c set /a "0xDB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb3.tmp' cmd /c set /a "0xC2^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsab.tmp' cmd /c set /a "0xD2^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns22.tmp' cmd /c set /a "0x88^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns1e.tmp' cmd /c set /a "0x92^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns11.tmp' cmd /c set /a "0x82^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns54.tmp' cmd /c set /a "0xA7^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns55.tmp' cmd /c set /a "0xD8^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns56.tmp' cmd /c set /a "0xD9^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns36.tmp' cmd /c set /a "0xCB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns57.tmp' cmd /c set /a "0xD1^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns58.tmp' cmd /c set /a "0xD1^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns35.tmp' cmd /c set /a "0xC7^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns59.tmp' cmd /c set /a "0xBD^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns5a.tmp' cmd /c set /a "0x82^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns9b.tmp' cmd /c set /a "0x87^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns37.tmp' cmd /c set /a "0xCB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns53.tmp' cmd /c set /a "0xAE^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns68.tmp' cmd /c set /a "0x82^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns5c.tmp' cmd /c set /a "0x9F^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns5e.tmp' cmd /c set /a "0x8A^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns32.tmp' cmd /c set /a "0xCB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns5f.tmp' cmd /c set /a "0x87^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns60.tmp' cmd /c set /a "0xAA^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns31.tmp' cmd /c set /a "0x86^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns61.tmp' cmd /c set /a "0x87^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns62.tmp' cmd /c set /a "0x87^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns5b.tmp' cmd /c set /a "0x99^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns48.tmp' cmd /c set /a "0xDB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns38.tmp' cmd /c set /a "0x82^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns51.tmp' cmd /c set /a "0xB9^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns42.tmp' cmd /c set /a "0x82^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns40.tmp' cmd /c set /a "0xC7^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns43.tmp' cmd /c set /a "0xCB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns44.tmp' cmd /c set /a "0xDB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns3f.tmp' cmd /c set /a "0xDB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns45.tmp' cmd /c set /a "0x93^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns46.tmp' cmd /c set /a "0xDA^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns3e.tmp' cmd /c set /a "0xDB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns79.tmp' cmd /c set /a "0xD8^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns47.tmp' cmd /c set /a "0xDB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns5d.tmp' cmd /c set /a "0x9E^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns3d.tmp' cmd /c set /a "0xDB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsa6.tmp' cmd /c set /a "0xCB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns3a.tmp' cmd /c set /a "0xDB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns3c.tmp' cmd /c set /a "0xD3^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns4b.tmp' cmd /c set /a "0xC5^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns4c.tmp' cmd /c set /a "0x99^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns3b.tmp' cmd /c set /a "0x93^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns4a.tmp' cmd /c set /a "0x82^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns4d.tmp' cmd /c set /a "0xDE^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns4e.tmp' cmd /c set /a "0x92^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns52.tmp' cmd /c set /a "0xA5^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns4f.tmp' cmd /c set /a "0xA0^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns39.tmp' cmd /c set /a "0xCB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns30.tmp' cmd /c set /a "0xC3^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns63.tmp' cmd /c set /a "0x84^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns2f.tmp' cmd /c set /a "0x85^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns77.tmp' cmd /c set /a "0xDE^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns78.tmp' cmd /c set /a "0xDB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns25.tmp' cmd /c set /a "0xC5^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns49.tmp' cmd /c set /a "0xC2^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns50.tmp' cmd /c set /a "0xAE^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns64.tmp' cmd /c set /a "0x88^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsb0.tmp' cmd /c set /a "0x82^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns7a.tmp' cmd /c set /a "0xDD^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns7b.tmp' cmd /c set /a "0xD3^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns7d.tmp' cmd /c set /a "0xCB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns7e.tmp' cmd /c set /a "0x82^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns41.tmp' cmd /c set /a "0xCB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns7f.tmp' cmd /c set /a "0xCB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns80.tmp' cmd /c set /a "0xDB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns21.tmp' cmd /c set /a "0x9D^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns81.tmp' cmd /c set /a "0x93^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns24.tmp' cmd /c set /a "0x9F^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns82.tmp' cmd /c set /a "0xD8^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns83.tmp' cmd /c set /a "0xDB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns84.tmp' cmd /c set /a "0xDB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns1f.tmp' cmd /c set /a "0x86^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns85.tmp' cmd /c set /a "0xDB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns86.tmp' cmd /c set /a "0xC7^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns26.tmp' cmd /c set /a "0x8F^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns87.tmp' cmd /c set /a "0xCB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns76.tmp' cmd /c set /a "0xDD^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns27.tmp' cmd /c set /a "0x87^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns20.tmp' cmd /c set /a "0x98^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns23.tmp' cmd /c set /a "0x99^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns7c.tmp' cmd /c set /a "0xC7^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns65.tmp' cmd /c set /a "0xAE^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns66.tmp' cmd /c set /a "0x93^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns2d.tmp' cmd /c set /a "0x9B^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns69.tmp' cmd /c set /a "0xCB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns6a.tmp' cmd /c set /a "0xC6^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns2c.tmp' cmd /c set /a "0x84^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns6b.tmp' cmd /c set /a "0xDA^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns6c.tmp' cmd /c set /a "0xC7^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns2b.tmp' cmd /c set /a "0xB4^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns6d.tmp' cmd /c set /a "0xCB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns6e.tmp' cmd /c set /a "0x82^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns74.tmp' cmd /c set /a "0xD8^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns2a.tmp' cmd /c set /a "0xD1^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns70.tmp' cmd /c set /a "0xDB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns29.tmp' cmd /c set /a "0xD1^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns71.tmp' cmd /c set /a "0xC7^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns72.tmp' cmd /c set /a "0x82^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns28.tmp' cmd /c set /a "0x87^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns73.tmp' cmd /c set /a "0xCB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns33.tmp' cmd /c set /a "0x99^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns67.tmp' cmd /c set /a "0xC3^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns2e.tmp' cmd /c set /a "0x8E^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\ns6f.tmp' cmd /c set /a "0xCB^235"' (with hidden window)
'C:\Documents\user\locals~1\temp\nsv3.tmp\nsbc.tmp' cmd /c set /a "0x88^235"' (with hidden window)

Executes the following

'<SYSTEM32>\cmd.exe' /c set /a "0x9E^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xC5^235"
'<SYSTEM32>\cmd.exe' /c set /a "0x87^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xB4^235"
'<SYSTEM32>\cmd.exe' /c set /a "0x9B^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xCB^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xDF^235"
'<SYSTEM32>\cmd.exe' /c set /a "0x93^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xD3^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xDA^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xA0^235"
'<SYSTEM32>\cmd.exe' /c set /a "0x80^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xAE^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xB9^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xA5^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xA7^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xBD^235"
'<SYSTEM32>\cmd.exe' /c set /a "0x8A^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xAA^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xC6^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xDD^235"
'<SYSTEM32>\cmd.exe' /c set /a "0x9F^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xDE^235"
'<SYSTEM32>\cmd.exe' /c set /a "0x88^235"
'<SYSTEM32>\cmd.exe' /c set /a "0x9C^235"
'<SYSTEM32>\cmd.exe' /c set /a "0x98^235"
'<SYSTEM32>\cmd.exe' /c set /a "0x8E^235"
'<SYSTEM32>\cmd.exe' /c set /a "0x99^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xD8^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xD9^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xD1^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xB8^235"
'<SYSTEM32>\cmd.exe' /c set /a "0x83^235"
'<SYSTEM32>\cmd.exe' /c set /a "0x84^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xBC^235"
'<SYSTEM32>\cmd.exe' /c set /a "0x86^235"
'<SYSTEM32>\cmd.exe' /c set /a "0x82^235"
'<SYSTEM32>\cmd.exe' /c set /a "0x85^235"
'<SYSTEM32>\cmd.exe' /c set /a "0x8F^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xC3^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xDC^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xC7^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xDB^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xC2^235"
'<SYSTEM32>\cmd.exe' /c set /a "0x92^235"
'<SYSTEM32>\cmd.exe' /c set /a "0x9D^235"
'<SYSTEM32>\cmd.exe' /c set /a "0xD2^235"

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial