Bibliothèque
Ma bibliothèque

+ Ajouter à la bibliothèque

Contacter-nous !
Support 24/24 | Rules regarding submitting

Nous téléphoner

0 825 300 230

Forum

Vos requêtes

  • Toutes : -
  • Non clôturées : -
  • Dernière : le -

Nous téléphoner

0 825 300 230

Profil

Trojan.PWS.Siggen1.28595

Added to the Dr.Web virus database: 2014-07-12

Virus description added:

Technical Information

Malicious functions:
Creates and executes the following:
  • '%HOMEPATH%\DNIOR\TXJAP.exe' SUWDQWYV.dat
  • '%HOMEPATH%\DNIOR\TXJAP.exe' 951609.QKE
Executes the following:
  • '%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
  • '<SYSTEM32>\wscript.exe' "%HOMEPATH%\DNIOR\3562.vbs" 7240
Injects code into
the following system processes:
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
Terminates or attempts to terminate
the following user processes:
  • ICQ.exe
Searches for registry branches where third party applications store passwords:
  • [<HKLM>\SOFTWARE\FlashFXP]
  • [<HKCU>\Software\Google\Google Talk\Accounts]
  • [<HKCU>\Software\Ghisler\Total Commander]
  • [<HKLM>\Software\Ghisler\Total Commander]
  • [<HKCU>\Software\FTPWare\CoreFTP\Sites]
  • [<HKCU>\Software\Martin Prikryl\WinSCP 2\Sessions]
  • [<HKCU>\Software\Far2\Plugins\FTP\Hosts]
  • [<HKCU>\Software\Far\Plugins\FTP\Hosts]
Searches for windows to
detect analytical utilities:
  • ClassName: 'PROCMON_WINDOW_CLASS' WindowName: '(null)'
detect programs and games:
  • ClassName: 'gdkWindowToplevel' WindowName: 'The Wireshark Network Analyzer'
Modifies file system :
Creates the following files:
  • %HOMEPATH%\DNIOR\47453.QMI
  • %HOMEPATH%\DNIOR\98423.GRE
  • %HOMEPATH%\DNIOR\K81559.YSU
  • %HOMEPATH%\DNIOR\29396.EFB
  • %HOMEPATH%\DNIOR\D5314.EBZ
  • %HOMEPATH%\DNIOR\58547.EJE
  • %HOMEPATH%\DNIOR\O38575.EYJ
  • %HOMEPATH%\DNIOR\S16632.VQR
  • %HOMEPATH%\DNIOR\I81453.COQ
  • %HOMEPATH%\DNIOR\5044.FQH
  • %HOMEPATH%\DNIOR\E62544.HAT
  • %HOMEPATH%\DNIOR\16351.BUT
  • %HOMEPATH%\DNIOR\O23527.XNE
  • %HOMEPATH%\DNIOR\C21495.KIE
  • %HOMEPATH%\DNIOR\A1696.FTL
  • %HOMEPATH%\DNIOR\V93723.NCI
  • %HOMEPATH%\DNIOR\63806.NBT
  • %HOMEPATH%\DNIOR\20026.NES
  • %HOMEPATH%\DNIOR\75077.SLG
  • %HOMEPATH%\DNIOR\Q88380.JYP
  • %HOMEPATH%\DNIOR\E51110.JQW
  • %HOMEPATH%\DNIOR\8491.VWE
  • %HOMEPATH%\DNIOR\97150.DAL
  • %HOMEPATH%\DNIOR\G71234.YLR
  • %HOMEPATH%\DNIOR\77909.TKR
  • %HOMEPATH%\DNIOR\52587.LCY
  • %HOMEPATH%\DNIOR\M23432.XEV
  • %HOMEPATH%\DNIOR\A46482.JYS
  • %HOMEPATH%\DNIOR\J15322.ACH
  • %HOMEPATH%\DNIOR\35326.FUF
  • %HOMEPATH%\DNIOR\U51157.UNE
  • %HOMEPATH%\DNIOR\18323.BTT
  • %HOMEPATH%\DNIOR\C54736.PPN
  • %HOMEPATH%\DNIOR\S32176.DPQ
  • %HOMEPATH%\DNIOR\43348.PHU
  • %HOMEPATH%\DNIOR\65671.INA
  • %HOMEPATH%\DNIOR\38199.ZMP
  • %HOMEPATH%\DNIOR\W73122.JCT
  • %HOMEPATH%\DNIOR\B63516.BHR
  • %HOMEPATH%\DNIOR\45666.MCC
  • %HOMEPATH%\DNIOR\B97942.MZA
  • %HOMEPATH%\DNIOR\77667.PQM
  • %HOMEPATH%\DNIOR\X68865.ZDE
  • %HOMEPATH%\DNIOR\41470.CDZ
  • %HOMEPATH%\DNIOR\A25580.IHL
  • %HOMEPATH%\DNIOR\W79098.GCR
  • %HOMEPATH%\DNIOR\J88516.QKV
  • %HOMEPATH%\DNIOR\S26837.SFC
  • %HOMEPATH%\DNIOR\67047.XON
  • %HOMEPATH%\DNIOR\92978.IUV
  • %HOMEPATH%\DNIOR\26627.UVP
  • %HOMEPATH%\DNIOR\36416.OUV
  • %HOMEPATH%\DNIOR\14311.YBK
  • %HOMEPATH%\DNIOR\30324.REA
  • %HOMEPATH%\DNIOR\A72032.IZF
  • %HOMEPATH%\DNIOR\Z3645.JOB
  • %HOMEPATH%\DNIOR\79028.IFS
  • %HOMEPATH%\DNIOR\71229.AES
  • %HOMEPATH%\DNIOR\1777.GIH
  • %HOMEPATH%\DNIOR\65643.XEF
  • %HOMEPATH%\DNIOR\Y80894.GCG
  • %HOMEPATH%\DNIOR\Z44580.EEP
  • %HOMEPATH%\DNIOR\L70445.GVD
  • %HOMEPATH%\DNIOR\W16123.TNL
  • %HOMEPATH%\DNIOR\49310.SUY
  • %HOMEPATH%\DNIOR\5204.QWE
  • %HOMEPATH%\DNIOR\98076.SYI
  • %HOMEPATH%\DNIOR\F39848.SFF
  • %HOMEPATH%\DNIOR\47121.YET
  • %HOMEPATH%\DNIOR\31291.ZFJ
  • %HOMEPATH%\DNIOR\D36524.GKT
  • %HOMEPATH%\DNIOR\40702.ZEQ
  • %HOMEPATH%\DNIOR\B17722.UGX
  • %HOMEPATH%\DNIOR\43484.FGY
  • %HOMEPATH%\DNIOR\N44509.YNB
  • %HOMEPATH%\DNIOR\96805.MAS
  • %HOMEPATH%\DNIOR\21800.JZH
  • %HOMEPATH%\DNIOR\X41619.IYR
  • %HOMEPATH%\DNIOR\81774.SUX
  • %HOMEPATH%\DNIOR\90428.EYP
  • %HOMEPATH%\DNIOR\R25871.VTB
  • %HOMEPATH%\DNIOR\97033.XAL
  • %HOMEPATH%\DNIOR\P86258.TSA
  • %HOMEPATH%\DNIOR\K41443.QUV
  • %HOMEPATH%\DNIOR\80028.EVV
  • %HOMEPATH%\DNIOR\H7419.QCO
  • %HOMEPATH%\DNIOR\52956.KCF
  • %HOMEPATH%\DNIOR\45243.GPC
  • %HOMEPATH%\DNIOR\73886.UOC
  • %HOMEPATH%\DNIOR\H76919.JDT
  • %HOMEPATH%\DNIOR\53308.PCH
  • %HOMEPATH%\DNIOR\99493.APT
  • %HOMEPATH%\DNIOR\P45043.YVI
  • %HOMEPATH%\DNIOR\13847.ZMZ
  • %HOMEPATH%\DNIOR\V41461.PSS
  • %HOMEPATH%\DNIOR\W22928.NNA
  • %HOMEPATH%\DNIOR\R36145.KTJ
  • %HOMEPATH%\DNIOR\71764.JVQ
  • %HOMEPATH%\DNIOR\21644.QBB
  • %HOMEPATH%\DNIOR\K82741.BIJ
  • %HOMEPATH%\DNIOR\E58095.QDX
  • %HOMEPATH%\DNIOR\87475.LFE
  • %HOMEPATH%\DNIOR\2753.XJF
  • %HOMEPATH%\DNIOR\L86660.NDX
  • %HOMEPATH%\DNIOR\K92274.MEM
  • %HOMEPATH%\DNIOR\43699.XDC
  • %HOMEPATH%\DNIOR\15447.PJQ
  • %HOMEPATH%\DNIOR\71501.NFW
  • %HOMEPATH%\DNIOR\85691.CSK
  • %HOMEPATH%\DNIOR\H68307.GBB
  • %HOMEPATH%\DNIOR\14253.GMO
  • %HOMEPATH%\DNIOR\46192.WTG
  • %HOMEPATH%\DNIOR\A52851.WCC
  • %HOMEPATH%\DNIOR\51029.VPD
  • %HOMEPATH%\DNIOR\72571.XLP
  • %HOMEPATH%\DNIOR\56749.TGB
  • %HOMEPATH%\DNIOR\U89298.JGU
  • %HOMEPATH%\DNIOR\72747.TNH
  • %HOMEPATH%\DNIOR\W15631.BMG
  • %HOMEPATH%\DNIOR\1907.VMM
  • %HOMEPATH%\DNIOR\S54036.JIL
  • %HOMEPATH%\DNIOR\I89026.OMV
  • %HOMEPATH%\DNIOR\91598.MDW
  • %HOMEPATH%\DNIOR\38560.IYJ
  • %HOMEPATH%\DNIOR\X3137.THZ
  • %HOMEPATH%\DNIOR\66591.HZZ
  • %HOMEPATH%\DNIOR\E48034.GNM
  • %HOMEPATH%\DNIOR\F30146.RHU
  • %HOMEPATH%\DNIOR\27274.YWM
  • %HOMEPATH%\DNIOR\F11148.ICG
  • %HOMEPATH%\DNIOR\R71280.LJL
  • %HOMEPATH%\DNIOR\83097.TTJ
  • %HOMEPATH%\DNIOR\11984.BTG
  • %HOMEPATH%\DNIOR\M99725.HGF
  • %HOMEPATH%\DNIOR\W82720.VXG
  • %HOMEPATH%\DNIOR\F54449.JVL
  • %HOMEPATH%\DNIOR\J99874.QDE
  • %HOMEPATH%\DNIOR\69393.OWQ
  • %HOMEPATH%\DNIOR\11638.VJJ
  • %HOMEPATH%\DNIOR\77453.FNW
  • %HOMEPATH%\DNIOR\50871.ZRZ
  • %HOMEPATH%\DNIOR\A63525.UGB
  • %HOMEPATH%\DNIOR\E12118.RVY
  • %HOMEPATH%\DNIOR\E46510.ZFS
  • %HOMEPATH%\DNIOR\P30577.DXI
  • %HOMEPATH%\DNIOR\A74473.BQY
  • %HOMEPATH%\DNIOR\E55046.ENJ
  • %HOMEPATH%\DNIOR\I47493.XOE
  • %HOMEPATH%\DNIOR\V2355.EGH
  • %HOMEPATH%\DNIOR\74181.LAP
  • %HOMEPATH%\DNIOR\78259.OFM
  • %HOMEPATH%\DNIOR\10342.PMN
  • %HOMEPATH%\DNIOR\87333.KBP
  • %HOMEPATH%\DNIOR\S83765.ERV
  • %HOMEPATH%\DNIOR\83725.NNX
  • %HOMEPATH%\DNIOR\29162.NZC
  • %HOMEPATH%\DNIOR\80254.FPX
  • %HOMEPATH%\DNIOR\64074.MYP
  • %HOMEPATH%\DNIOR\82893.IUS
  • %HOMEPATH%\DNIOR\A1910.FBV
  • %HOMEPATH%\DNIOR\63927.XJT
  • %HOMEPATH%\DNIOR\H68101.YSA
  • %HOMEPATH%\DNIOR\H9263.ZPN
  • %HOMEPATH%\DNIOR\P48225.HYM
  • %HOMEPATH%\DNIOR\43233.COZ
  • %HOMEPATH%\DNIOR\9855.PSM
  • %HOMEPATH%\DNIOR\3629.FGR
  • %HOMEPATH%\DNIOR\N31464.UOB
  • %HOMEPATH%\DNIOR\47795.LQP
  • %HOMEPATH%\DNIOR\L94961.WGB
  • %HOMEPATH%\DNIOR\O75578.LQD
  • %HOMEPATH%\DNIOR\68221.XRZ
  • %HOMEPATH%\DNIOR\97458.HPQ
  • %HOMEPATH%\DNIOR\U81350.JJH
  • %HOMEPATH%\DNIOR\56768.JDD
  • %HOMEPATH%\DNIOR\T68549.XVZ
  • %HOMEPATH%\DNIOR\76664.AOZ
  • %HOMEPATH%\DNIOR\L9117.XVF
  • %HOMEPATH%\DNIOR\98700.NJP
  • %HOMEPATH%\DNIOR\56449.VWE
  • %HOMEPATH%\DNIOR\Q4951.LBT
  • %TEMP%\report_05-06-2014_02-18-05-F4D651E80A6E4747C8F28A7D8647D810-FGNK.bin
  • %HOMEPATH%\DNIOR\SUWDQWYV.dat
  • %TEMP%\NO_PWDS_report_05-06-2014_02-18-05-F4D651E80A6E4747C8F28A7D8647D810-FGNK.bin
  • %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\whatismyip.akamai[1]
  • %HOMEPATH%\DNIOR\44123.HUD
  • %HOMEPATH%\DNIOR\J80083.VWG
  • %HOMEPATH%\DNIOR\99107.QHF
  • %HOMEPATH%\DNIOR\80032.LIH
  • %HOMEPATH%\DNIOR\40490.BOI
  • %HOMEPATH%\DNIOR\P37893.XJB
  • %HOMEPATH%\DNIOR\30243.MFD
  • %HOMEPATH%\DNIOR\40188.DQS
  • %HOMEPATH%\DNIOR\T53395.GUF
  • %HOMEPATH%\DNIOR\S93748.PSA
  • %HOMEPATH%\DNIOR\R86469.CTZ
  • %HOMEPATH%\DNIOR\22528.MMN
  • %HOMEPATH%\DNIOR\E12768.KJZ
  • %HOMEPATH%\DNIOR\J26275.FIT
  • %HOMEPATH%\DNIOR\79501.ZCA
  • %HOMEPATH%\DNIOR\C29410.QCP
  • %HOMEPATH%\DNIOR\C88291.YVW
  • %HOMEPATH%\DNIOR\35485.SYC
  • %HOMEPATH%\DNIOR\U61490.TXE
  • %HOMEPATH%\DNIOR\69457.NTW
  • %HOMEPATH%\DNIOR\36844.HBU
  • %HOMEPATH%\DNIOR\H92982.YYX
  • %HOMEPATH%\DNIOR\Z69678.WGT
  • %HOMEPATH%\DNIOR\P2163.TZQ
  • %HOMEPATH%\DNIOR\Z75867.LKL
  • %HOMEPATH%\DNIOR\N5887.WIB
  • %HOMEPATH%\DNIOR\89040.PLO
  • %HOMEPATH%\DNIOR\52401.YVN
  • %HOMEPATH%\DNIOR\Y52160.VSX
  • %HOMEPATH%\DNIOR\77228.EPY
  • %HOMEPATH%\DNIOR\J95677.BAK
  • %HOMEPATH%\DNIOR\R31735.CVJ
  • %HOMEPATH%\DNIOR\K82289.OBV
  • %HOMEPATH%\DNIOR\72326.LUM
  • %HOMEPATH%\DNIOR\1158.ZFO
  • %HOMEPATH%\DNIOR\Z22700.PVC
  • %HOMEPATH%\DNIOR\18631.HGC
  • %HOMEPATH%\DNIOR\40916.AHF
  • %HOMEPATH%\DNIOR\J48877.FMC
  • %HOMEPATH%\DNIOR\22180.WIF
  • %HOMEPATH%\DNIOR\T45135.HGL
  • %HOMEPATH%\DNIOR\19358.PBR
  • %HOMEPATH%\DNIOR\98487.JXO
  • %HOMEPATH%\DNIOR\87603.SWR
  • %HOMEPATH%\DNIOR\7863.YPS
  • %HOMEPATH%\DNIOR\28539.LFI
  • %HOMEPATH%\DNIOR\Z62093.UGQ
  • %HOMEPATH%\DNIOR\90864.HUC
  • %HOMEPATH%\DNIOR\B53830.HGO
  • %HOMEPATH%\DNIOR\37681.BGK
  • %HOMEPATH%\DNIOR\89356.ECU
  • %HOMEPATH%\DNIOR\95331.RFE
  • %HOMEPATH%\DNIOR\O20562.CKR
  • %HOMEPATH%\DNIOR\S42496.HZB
  • %HOMEPATH%\DNIOR\69248.EAT
  • %HOMEPATH%\DNIOR\U61367.CIL
  • %HOMEPATH%\DNIOR\19268.IJA
  • %HOMEPATH%\DNIOR\61281.QTG
  • %HOMEPATH%\DNIOR\93342.PPZ
  • %HOMEPATH%\DNIOR\75372.BAT
  • %HOMEPATH%\DNIOR\29688.PHA
  • %HOMEPATH%\DNIOR\C86484.IEY
  • %HOMEPATH%\DNIOR\W90191.OSP
  • %HOMEPATH%\DNIOR\41270.LBC
  • %HOMEPATH%\DNIOR\82661.TAQ
  • %HOMEPATH%\DNIOR\91549.OCH
  • %HOMEPATH%\DNIOR\K37006.DQN
  • %HOMEPATH%\DNIOR\Q45200.WVG
  • %HOMEPATH%\DNIOR\78021.RYG
  • %HOMEPATH%\DNIOR\D91241.AXR
  • %HOMEPATH%\DNIOR\V57692.GBJ
  • %HOMEPATH%\DNIOR\J82148.SUL
  • %HOMEPATH%\DNIOR\75115.ZRE
  • %HOMEPATH%\DNIOR\29901.CMW
  • %HOMEPATH%\DNIOR\X10407.IMF
  • %HOMEPATH%\DNIOR\O65008.IOR
  • %HOMEPATH%\DNIOR\H31761.EBV
  • %HOMEPATH%\DNIOR\69905.YCV
  • %HOMEPATH%\DNIOR\I61457.HBO
  • %HOMEPATH%\DNIOR\X25129.DDD
  • %HOMEPATH%\DNIOR\A56460.MSQ
  • %HOMEPATH%\DNIOR\65178.NYL
  • %HOMEPATH%\DNIOR\31560.OKG
  • %HOMEPATH%\DNIOR\B64314.WQU
  • %HOMEPATH%\DNIOR\22841.NNH
  • %HOMEPATH%\DNIOR\21821.RNR
  • %HOMEPATH%\DNIOR\35731.FZA
  • %HOMEPATH%\DNIOR\P30239.OEV
  • %HOMEPATH%\DNIOR\15300.FLC
  • %HOMEPATH%\DNIOR\46615.CZI
  • %HOMEPATH%\DNIOR\16286.OVC
  • %HOMEPATH%\DNIOR\86694.IYE
  • %HOMEPATH%\DNIOR\84755.TIJ
  • %HOMEPATH%\DNIOR\98867.KLP
  • %HOMEPATH%\DNIOR\W42770.PJV
  • %HOMEPATH%\DNIOR\49346.VSU
  • %HOMEPATH%\DNIOR\18534.QMY
  • %HOMEPATH%\DNIOR\R97188.RVC
  • %HOMEPATH%\DNIOR\G45417.PZO
  • %HOMEPATH%\DNIOR\40245.MOZ
  • %HOMEPATH%\DNIOR\A17861.UWV
  • %HOMEPATH%\DNIOR\41493.YAT
  • %HOMEPATH%\DNIOR\S37877.TYV
  • %HOMEPATH%\DNIOR\73217.JZI
  • %HOMEPATH%\DNIOR\Y49120.UES
  • %HOMEPATH%\DNIOR\28523.ZVE
  • %HOMEPATH%\DNIOR\89601.RRC
  • %HOMEPATH%\DNIOR\50061.SVF
  • %HOMEPATH%\DNIOR\T9886.XNC
  • %HOMEPATH%\DNIOR\15728.JRB
  • %HOMEPATH%\DNIOR\Z95869.JUH
  • %HOMEPATH%\DNIOR\63469.SGL
  • %HOMEPATH%\DNIOR\K68500.XZD
  • %HOMEPATH%\DNIOR\K14551.VON
  • %HOMEPATH%\DNIOR\C91840.HRV
  • %HOMEPATH%\DNIOR\78248.JVG
  • %HOMEPATH%\DNIOR\O47027.OWH
  • %HOMEPATH%\DNIOR\76391.KQF
  • %HOMEPATH%\DNIOR\76188.LMJ
  • %HOMEPATH%\DNIOR\U4142.SVC
  • %HOMEPATH%\DNIOR\61765.VSV
  • %HOMEPATH%\DNIOR\G98245.TGG
  • %HOMEPATH%\DNIOR\39122.VTS
  • %HOMEPATH%\DNIOR\5830.CMC
  • %HOMEPATH%\DNIOR\23352.JPF
  • %HOMEPATH%\DNIOR\L93874.SKD
  • %HOMEPATH%\DNIOR\O50159.YSC
  • %HOMEPATH%\DNIOR\8522.KZV
  • %HOMEPATH%\DNIOR\40631.VEP
  • %HOMEPATH%\DNIOR\B42923.ZMA
  • %HOMEPATH%\DNIOR\J82576.GYX
  • %HOMEPATH%\DNIOR\37683.ZVZ
  • %HOMEPATH%\DNIOR\13290.QPO
  • %HOMEPATH%\DNIOR\F19619.TIM
  • %HOMEPATH%\DNIOR\J7549.XOP
  • %HOMEPATH%\DNIOR\98411.BMZ
  • %HOMEPATH%\DNIOR\S65840.BSC
  • %HOMEPATH%\DNIOR\96869.MDV
  • %HOMEPATH%\DNIOR\85455.LMV
  • %HOMEPATH%\DNIOR\67410.HVR
  • %HOMEPATH%\DNIOR\19374.ADK
  • %HOMEPATH%\DNIOR\G22004.QPP
  • %HOMEPATH%\DNIOR\54527.YPQ
  • %HOMEPATH%\DNIOR\W11134.BIF
  • %HOMEPATH%\DNIOR\60294.XNS
  • %HOMEPATH%\DNIOR\R62977.COU
  • %HOMEPATH%\DNIOR\5299.UEZ
  • %HOMEPATH%\DNIOR\77671.GNF
  • %HOMEPATH%\DNIOR\1948.ATR
  • %HOMEPATH%\DNIOR\51559.CNF
  • %HOMEPATH%\DNIOR\67915.EYH
  • %HOMEPATH%\DNIOR\87245.NAW
  • %HOMEPATH%\DNIOR\V56550.VTL
  • %HOMEPATH%\DNIOR\57060.DBV
  • %HOMEPATH%\DNIOR\R81708.XLZ
  • %HOMEPATH%\DNIOR\77102.XMK
  • %HOMEPATH%\DNIOR\A38857.OGP
  • %HOMEPATH%\DNIOR\J92107.OXP
  • %HOMEPATH%\DNIOR\L86029.BBO
  • %HOMEPATH%\DNIOR\39398.HMT
  • %HOMEPATH%\DNIOR\L88620.YUS
  • %HOMEPATH%\DNIOR\96686.QRV
  • %HOMEPATH%\DNIOR\28227.BZH
  • %HOMEPATH%\DNIOR\24915.ROE
  • %HOMEPATH%\DNIOR\67177.SGR
  • %HOMEPATH%\DNIOR\14319.WDY
  • %HOMEPATH%\DNIOR\15752.XNM
  • %HOMEPATH%\DNIOR\13600.UCL
  • %HOMEPATH%\DNIOR\96566.UST
  • %HOMEPATH%\DNIOR\56590.IUM
  • %HOMEPATH%\DNIOR\22642.ZRX
  • %HOMEPATH%\DNIOR\E72706.LQF
  • %HOMEPATH%\DNIOR\44539.UPP
  • %HOMEPATH%\DNIOR\85528.VKU
  • %HOMEPATH%\DNIOR\3050.LYA
  • %HOMEPATH%\DNIOR\K85125.GLG
  • %HOMEPATH%\DNIOR\S16031.BJN
  • %HOMEPATH%\DNIOR\3562.vbs
  • %HOMEPATH%\DNIOR\settings.ini
  • %HOMEPATH%\DNIOR\27820.NCH
  • %HOMEPATH%\DNIOR\L21742.JPH
  • %HOMEPATH%\DNIOR\102127.dat
  • %HOMEPATH%\DNIOR\951609.QKE
  • %HOMEPATH%\DNIOR\TXJAP.exe
  • %HOMEPATH%\DNIOR\510186.dat
  • %HOMEPATH%\DNIOR\86974.QIN
  • %HOMEPATH%\DNIOR\39212.YTU
  • %HOMEPATH%\DNIOR\P66538.STV
  • %HOMEPATH%\DNIOR\49418.XAJ
  • %HOMEPATH%\DNIOR\51417.WCD
  • %HOMEPATH%\DNIOR\41673.LMJ
  • %HOMEPATH%\DNIOR\95574.TFX
  • %HOMEPATH%\DNIOR\6770.GPS
  • %HOMEPATH%\DNIOR\C27464.CSV
  • %HOMEPATH%\DNIOR\L78182.RWN
  • %HOMEPATH%\DNIOR\97354.HIU
  • %HOMEPATH%\DNIOR\86510.XNF
  • %HOMEPATH%\DNIOR\94677.JIM
  • %HOMEPATH%\DNIOR\60820.XAR
  • %HOMEPATH%\DNIOR\65728.DNT
  • %HOMEPATH%\DNIOR\F70104.MKF
  • %HOMEPATH%\DNIOR\59515.KOE
  • %HOMEPATH%\DNIOR\D65448.DUR
  • %HOMEPATH%\DNIOR\Z37824.FPJ
  • %HOMEPATH%\DNIOR\3514.IKU
  • %HOMEPATH%\DNIOR\R66590.MPR
  • %HOMEPATH%\DNIOR\U45918.MCK
  • %HOMEPATH%\DNIOR\H79987.MJZ
  • %HOMEPATH%\DNIOR\36025.FBT
  • %HOMEPATH%\DNIOR\37682.XRO
  • %HOMEPATH%\DNIOR\N56691.KSV
  • %HOMEPATH%\DNIOR\V47749.HOF
  • %HOMEPATH%\DNIOR\66662.QQW
  • %HOMEPATH%\DNIOR\E42205.LHR
  • %HOMEPATH%\DNIOR\95971.JDU
  • %HOMEPATH%\DNIOR\E32609.AAN
  • %HOMEPATH%\DNIOR\71131.IAM
  • %HOMEPATH%\DNIOR\38338.YDJ
  • %HOMEPATH%\DNIOR\96534.KOQ
  • %HOMEPATH%\DNIOR\Z56859.NVS
  • %HOMEPATH%\DNIOR\X5642.FML
  • %HOMEPATH%\DNIOR\Y73240.LBQ
  • %HOMEPATH%\DNIOR\45712.PQP
  • %HOMEPATH%\DNIOR\27513.SZD
  • %HOMEPATH%\DNIOR\E17149.OEO
  • %HOMEPATH%\DNIOR\B91532.YLQ
  • %HOMEPATH%\DNIOR\V59250.SPE
  • %HOMEPATH%\DNIOR\K31582.VXK
  • %HOMEPATH%\DNIOR\54523.YSO
  • %HOMEPATH%\DNIOR\B27373.EQK
  • %HOMEPATH%\DNIOR\G54870.COB
  • %HOMEPATH%\DNIOR\39650.YGN
  • %HOMEPATH%\DNIOR\78215.AXN
  • %HOMEPATH%\DNIOR\W12534.WXX
  • %HOMEPATH%\DNIOR\O95590.XQQ
  • %HOMEPATH%\DNIOR\49488.TRN
  • %HOMEPATH%\DNIOR\13692.QUX
  • %HOMEPATH%\DNIOR\R94422.PSA
  • %HOMEPATH%\DNIOR\F36807.LJJ
  • %HOMEPATH%\DNIOR\G56567.VRA
  • %HOMEPATH%\DNIOR\75604.VSN
  • %HOMEPATH%\DNIOR\J30344.IOJ
  • %HOMEPATH%\DNIOR\D87239.JQK
  • %HOMEPATH%\DNIOR\G73815.NSN
  • %HOMEPATH%\DNIOR\99824.YSM
  • %HOMEPATH%\DNIOR\17324.IRK
  • %HOMEPATH%\DNIOR\57676.KLI
  • %HOMEPATH%\DNIOR\55723.RXX
  • %HOMEPATH%\DNIOR\D34707.CIV
  • %HOMEPATH%\DNIOR\46312.DTN
  • %HOMEPATH%\DNIOR\V13115.HWF
  • %HOMEPATH%\DNIOR\53346.DLK
  • %HOMEPATH%\DNIOR\Q38759.AVG
  • %HOMEPATH%\DNIOR\15132.XRF
  • %HOMEPATH%\DNIOR\J84780.CET
  • %HOMEPATH%\DNIOR\71377.NIE
  • %HOMEPATH%\DNIOR\31116.VNJ
  • %HOMEPATH%\DNIOR\90990.GQR
  • %HOMEPATH%\DNIOR\H6107.NHI
  • %HOMEPATH%\DNIOR\J31201.DIR
  • %HOMEPATH%\DNIOR\17949.PYZ
  • %HOMEPATH%\DNIOR\54265.WSG
  • %HOMEPATH%\DNIOR\92434.MRH
  • %HOMEPATH%\DNIOR\P40625.ONH
  • %HOMEPATH%\DNIOR\18189.FOZ
  • %HOMEPATH%\DNIOR\K6884.BLM
  • %HOMEPATH%\DNIOR\49684.EUW
  • %HOMEPATH%\DNIOR\A69269.LMH
  • %HOMEPATH%\DNIOR\F23390.CXV
  • %HOMEPATH%\DNIOR\80547.BEX
  • %HOMEPATH%\DNIOR\25476.ASY
  • %HOMEPATH%\DNIOR\H23765.ILY
  • %HOMEPATH%\DNIOR\U14840.DZM
  • %HOMEPATH%\DNIOR\E88470.MSL
  • %HOMEPATH%\DNIOR\L77085.QTF
  • %HOMEPATH%\DNIOR\84900.DHJ
  • %HOMEPATH%\DNIOR\L87525.HVB
  • %HOMEPATH%\DNIOR\O52431.JRX
  • %HOMEPATH%\DNIOR\96189.ZEO
  • %HOMEPATH%\DNIOR\16734.BST
  • %HOMEPATH%\DNIOR\11735.TNH
  • %HOMEPATH%\DNIOR\O19592.PBB
  • %HOMEPATH%\DNIOR\B56496.TET
  • %HOMEPATH%\DNIOR\A15846.QAX
  • %HOMEPATH%\DNIOR\24699.XSJ
  • %HOMEPATH%\DNIOR\58860.FSK
  • %HOMEPATH%\DNIOR\48454.LAC
  • %HOMEPATH%\DNIOR\30601.GQJ
  • %HOMEPATH%\DNIOR\43210.ELU
  • %HOMEPATH%\DNIOR\L76200.HLU
  • %HOMEPATH%\DNIOR\E50766.QGQ
  • %HOMEPATH%\DNIOR\R36969.SQI
  • %HOMEPATH%\DNIOR\57997.YCB
  • %HOMEPATH%\DNIOR\T86711.XYY
  • %HOMEPATH%\DNIOR\F91210.PSH
  • %HOMEPATH%\DNIOR\91520.JZX
  • %HOMEPATH%\DNIOR\93063.QDS
  • %HOMEPATH%\DNIOR\H4047.KQI
  • %HOMEPATH%\DNIOR\26114.CWY
  • %HOMEPATH%\DNIOR\B65883.LWV
  • %HOMEPATH%\DNIOR\84952.OJD
  • %HOMEPATH%\DNIOR\47293.DUE
  • %HOMEPATH%\DNIOR\74704.BNY
  • %HOMEPATH%\DNIOR\V14620.EKZ
  • %HOMEPATH%\DNIOR\M30688.GPK
  • %HOMEPATH%\DNIOR\97836.NBX
  • %HOMEPATH%\DNIOR\74574.CDG
  • %HOMEPATH%\DNIOR\X80159.MKW
  • %HOMEPATH%\DNIOR\J91924.UYG
  • %HOMEPATH%\DNIOR\38068.FUW
  • %HOMEPATH%\DNIOR\H87120.FUU
  • %HOMEPATH%\DNIOR\V87183.GTZ
  • %HOMEPATH%\DNIOR\39773.RFI
  • %HOMEPATH%\DNIOR\K38057.LLX
  • %HOMEPATH%\DNIOR\I43579.BVX
  • %HOMEPATH%\DNIOR\S1579.XUE
  • %HOMEPATH%\DNIOR\K28697.AGH
  • %HOMEPATH%\DNIOR\32624.PIG
  • %HOMEPATH%\DNIOR\85009.OGA
  • %HOMEPATH%\DNIOR\P43155.HWX
  • %HOMEPATH%\DNIOR\45645.WCU
  • %HOMEPATH%\DNIOR\F48025.PHT
  • %HOMEPATH%\DNIOR\51956.VTE
  • %HOMEPATH%\DNIOR\J43944.OXC
  • %HOMEPATH%\DNIOR\44910.EVX
  • %HOMEPATH%\DNIOR\71537.TBG
  • %HOMEPATH%\DNIOR\T79542.ECY
  • %HOMEPATH%\DNIOR\A68619.FFM
  • %HOMEPATH%\DNIOR\68391.OXU
  • %HOMEPATH%\DNIOR\M97430.MCD
  • %HOMEPATH%\DNIOR\64635.IPX
  • %HOMEPATH%\DNIOR\H89390.VPP
  • %HOMEPATH%\DNIOR\P19583.QVG
  • %HOMEPATH%\DNIOR\G8202.TMB
  • %HOMEPATH%\DNIOR\U1516.EVS
  • %HOMEPATH%\DNIOR\41324.CQJ
  • %HOMEPATH%\DNIOR\P65911.XNG
  • %HOMEPATH%\DNIOR\I49441.ZOY
  • %HOMEPATH%\DNIOR\C10781.QWF
  • %HOMEPATH%\DNIOR\86539.WGW
  • %HOMEPATH%\DNIOR\70939.XSM
  • %HOMEPATH%\DNIOR\76017.GMZ
  • %HOMEPATH%\DNIOR\Z21840.WTR
  • %HOMEPATH%\DNIOR\D40533.PNE
  • %HOMEPATH%\DNIOR\20213.XSF
  • %HOMEPATH%\DNIOR\22654.QHH
  • %HOMEPATH%\DNIOR\T32659.YWQ
  • %HOMEPATH%\DNIOR\U68555.YNG
  • %HOMEPATH%\DNIOR\19399.IIE
  • %HOMEPATH%\DNIOR\A64536.NUZ
  • %HOMEPATH%\DNIOR\76717.ONJ
  • %HOMEPATH%\DNIOR\22735.AUW
  • %HOMEPATH%\DNIOR\H68445.DBP
  • %HOMEPATH%\DNIOR\70729.KGA
  • %HOMEPATH%\DNIOR\Q75915.IEX
  • %HOMEPATH%\DNIOR\25085.JED
  • %HOMEPATH%\DNIOR\25180.LTY
  • %HOMEPATH%\DNIOR\B53147.BQC
  • %HOMEPATH%\DNIOR\D8841.MGZ
  • %HOMEPATH%\DNIOR\24509.DLA
  • %HOMEPATH%\DNIOR\40474.LHQ
  • %HOMEPATH%\DNIOR\V46926.HHI
  • %HOMEPATH%\DNIOR\51261.EGQ
  • %HOMEPATH%\DNIOR\A72409.ELW
  • %HOMEPATH%\DNIOR\O25872.JUB
  • %HOMEPATH%\DNIOR\84244.SMB
Sets the 'hidden' attribute to the following files:
  • %HOMEPATH%\DNIOR\S16632.VQR
  • %HOMEPATH%\DNIOR\D5314.EBZ
  • %HOMEPATH%\DNIOR\98423.GRE
  • %HOMEPATH%\DNIOR\O38575.EYJ
  • %HOMEPATH%\DNIOR\35326.FUF
  • %HOMEPATH%\DNIOR\M23432.XEV
  • %HOMEPATH%\DNIOR\58547.EJE
  • %HOMEPATH%\DNIOR\J15322.ACH
  • %HOMEPATH%\DNIOR\47453.QMI
  • %HOMEPATH%\DNIOR\63806.NBT
  • %HOMEPATH%\DNIOR\C21495.KIE
  • %HOMEPATH%\DNIOR\E62544.HAT
  • %HOMEPATH%\DNIOR\V93723.NCI
  • %HOMEPATH%\DNIOR\K81559.YSU
  • %HOMEPATH%\DNIOR\29396.EFB
  • %HOMEPATH%\DNIOR\A1696.FTL
  • %HOMEPATH%\DNIOR\I81453.COQ
  • %HOMEPATH%\DNIOR\77909.TKR
  • %HOMEPATH%\DNIOR\8491.VWE
  • %HOMEPATH%\DNIOR\75077.SLG
  • %HOMEPATH%\DNIOR\G71234.YLR
  • %HOMEPATH%\DNIOR\72571.XLP
  • %HOMEPATH%\DNIOR\56749.TGB
  • %HOMEPATH%\DNIOR\97150.DAL
  • %HOMEPATH%\DNIOR\47121.YET
  • %HOMEPATH%\DNIOR\20026.NES
  • %HOMEPATH%\DNIOR\S32176.DPQ
  • %HOMEPATH%\DNIOR\U51157.UNE
  • %HOMEPATH%\DNIOR\A46482.JYS
  • %HOMEPATH%\DNIOR\C54736.PPN
  • %HOMEPATH%\DNIOR\Q88380.JYP
  • %HOMEPATH%\DNIOR\E51110.JQW
  • %HOMEPATH%\DNIOR\18323.BTT
  • %HOMEPATH%\DNIOR\52587.LCY
  • %HOMEPATH%\DNIOR\77667.PQM
  • %HOMEPATH%\DNIOR\B63516.BHR
  • %HOMEPATH%\DNIOR\65671.INA
  • %HOMEPATH%\DNIOR\B97942.MZA
  • %HOMEPATH%\DNIOR\W16123.TNL
  • %HOMEPATH%\DNIOR\Y80894.GCG
  • %HOMEPATH%\DNIOR\45666.MCC
  • %HOMEPATH%\DNIOR\L70445.GVD
  • %HOMEPATH%\DNIOR\43348.PHU
  • %HOMEPATH%\DNIOR\26627.UVP
  • %HOMEPATH%\DNIOR\S26837.SFC
  • %HOMEPATH%\DNIOR\A25580.IHL
  • %HOMEPATH%\DNIOR\92978.IUV
  • %HOMEPATH%\DNIOR\38199.ZMP
  • %HOMEPATH%\DNIOR\W73122.JCT
  • %HOMEPATH%\DNIOR\67047.XON
  • %HOMEPATH%\DNIOR\X68865.ZDE
  • %HOMEPATH%\DNIOR\1777.GIH
  • %HOMEPATH%\DNIOR\Z3645.JOB
  • %HOMEPATH%\DNIOR\14311.YBK
  • %HOMEPATH%\DNIOR\71229.AES
  • %HOMEPATH%\DNIOR\O23527.XNE
  • %HOMEPATH%\DNIOR\5044.FQH
  • %HOMEPATH%\DNIOR\79028.IFS
  • %HOMEPATH%\DNIOR\16351.BUT
  • %HOMEPATH%\DNIOR\36416.OUV
  • %HOMEPATH%\DNIOR\F39848.SFF
  • %HOMEPATH%\DNIOR\49310.SUY
  • %HOMEPATH%\DNIOR\Z44580.EEP
  • %HOMEPATH%\DNIOR\98076.SYI
  • %HOMEPATH%\DNIOR\30324.REA
  • %HOMEPATH%\DNIOR\A72032.IZF
  • %HOMEPATH%\DNIOR\5204.QWE
  • %HOMEPATH%\DNIOR\65643.XEF
  • %HOMEPATH%\DNIOR\96805.MAS
  • %HOMEPATH%\DNIOR\21800.JZH
  • %HOMEPATH%\DNIOR\31291.ZFJ
  • %HOMEPATH%\DNIOR\D36524.GKT
  • %HOMEPATH%\DNIOR\71764.JVQ
  • %HOMEPATH%\DNIOR\21644.QBB
  • %HOMEPATH%\DNIOR\43484.FGY
  • %HOMEPATH%\DNIOR\N44509.YNB
  • %HOMEPATH%\DNIOR\B17722.UGX
  • %HOMEPATH%\DNIOR\80028.EVV
  • %HOMEPATH%\DNIOR\H7419.QCO
  • %HOMEPATH%\DNIOR\81774.SUX
  • %HOMEPATH%\DNIOR\90428.EYP
  • %HOMEPATH%\DNIOR\X41619.IYR
  • %HOMEPATH%\DNIOR\40702.ZEQ
  • %HOMEPATH%\DNIOR\P86258.TSA
  • %HOMEPATH%\DNIOR\K41443.QUV
  • %HOMEPATH%\DNIOR\P45043.YVI
  • %HOMEPATH%\DNIOR\13847.ZMZ
  • %HOMEPATH%\DNIOR\52956.KCF
  • %HOMEPATH%\DNIOR\45243.GPC
  • %HOMEPATH%\DNIOR\16286.OVC
  • %HOMEPATH%\DNIOR\L77085.QTF
  • %HOMEPATH%\DNIOR\53308.PCH
  • %HOMEPATH%\DNIOR\99493.APT
  • %HOMEPATH%\DNIOR\H76919.JDT
  • %HOMEPATH%\DNIOR\87475.LFE
  • %HOMEPATH%\DNIOR\2753.XJF
  • %HOMEPATH%\DNIOR\W22928.NNA
  • %HOMEPATH%\DNIOR\R36145.KTJ
  • %HOMEPATH%\DNIOR\V41461.PSS
  • %HOMEPATH%\DNIOR\73886.UOC
  • %HOMEPATH%\DNIOR\K82741.BIJ
  • %HOMEPATH%\DNIOR\E58095.QDX
  • %HOMEPATH%\DNIOR\H68307.GBB
  • %HOMEPATH%\DNIOR\14253.GMO
  • %HOMEPATH%\DNIOR\L86660.NDX
  • %HOMEPATH%\DNIOR\K92274.MEM
  • %HOMEPATH%\DNIOR\83097.TTJ
  • %HOMEPATH%\DNIOR\11984.BTG
  • %HOMEPATH%\DNIOR\71501.NFW
  • %HOMEPATH%\DNIOR\85691.CSK
  • %HOMEPATH%\DNIOR\15447.PJQ
  • %HOMEPATH%\DNIOR\W15631.BMG
  • %HOMEPATH%\DNIOR\1907.VMM
  • %HOMEPATH%\DNIOR\A52851.WCC
  • %HOMEPATH%\DNIOR\51029.VPD
  • %HOMEPATH%\DNIOR\46192.WTG
  • %HOMEPATH%\DNIOR\43699.XDC
  • %HOMEPATH%\DNIOR\U89298.JGU
  • %HOMEPATH%\DNIOR\72747.TNH
  • %HOMEPATH%\DNIOR\E48034.GNM
  • %HOMEPATH%\DNIOR\F30146.RHU
  • %HOMEPATH%\DNIOR\S54036.JIL
  • %HOMEPATH%\DNIOR\I89026.OMV
  • %HOMEPATH%\DNIOR\R25871.VTB
  • %HOMEPATH%\DNIOR\97033.XAL
  • %HOMEPATH%\DNIOR\X3137.THZ
  • %HOMEPATH%\DNIOR\66591.HZZ
  • %HOMEPATH%\DNIOR\38560.IYJ
  • %HOMEPATH%\DNIOR\F54449.JVL
  • %HOMEPATH%\DNIOR\J99874.QDE
  • %HOMEPATH%\DNIOR\F11148.ICG
  • %HOMEPATH%\DNIOR\R71280.LJL
  • %HOMEPATH%\DNIOR\27274.YWM
  • %HOMEPATH%\DNIOR\91598.MDW
  • %HOMEPATH%\DNIOR\M99725.HGF
  • %HOMEPATH%\DNIOR\W82720.VXG
  • %HOMEPATH%\DNIOR\41470.CDZ
  • %HOMEPATH%\DNIOR\E12118.RVY
  • %HOMEPATH%\DNIOR\E46510.ZFS
  • %HOMEPATH%\DNIOR\P30577.DXI
  • %HOMEPATH%\DNIOR\A74473.BQY
  • %HOMEPATH%\DNIOR\43233.COZ
  • %HOMEPATH%\DNIOR\9855.PSM
  • %HOMEPATH%\DNIOR\3629.FGR
  • %HOMEPATH%\DNIOR\N31464.UOB
  • %HOMEPATH%\DNIOR\77453.FNW
  • %HOMEPATH%\DNIOR\10342.PMN
  • %HOMEPATH%\DNIOR\87333.KBP
  • %HOMEPATH%\DNIOR\S83765.ERV
  • %HOMEPATH%\DNIOR\83725.NNX
  • %HOMEPATH%\DNIOR\A63525.UGB
  • %HOMEPATH%\DNIOR\11638.VJJ
  • %HOMEPATH%\DNIOR\E55046.ENJ
  • %HOMEPATH%\DNIOR\50871.ZRZ
  • %HOMEPATH%\DNIOR\A1910.FBV
  • %HOMEPATH%\DNIOR\63927.XJT
  • %HOMEPATH%\DNIOR\H68101.YSA
  • %HOMEPATH%\DNIOR\H9263.ZPN
  • %HOMEPATH%\DNIOR\78021.RYG
  • %HOMEPATH%\DNIOR\91549.OCH
  • %HOMEPATH%\DNIOR\H92982.YYX
  • %HOMEPATH%\DNIOR\Q45200.WVG
  • %HOMEPATH%\DNIOR\80254.FPX
  • %HOMEPATH%\DNIOR\47795.LQP
  • %HOMEPATH%\DNIOR\L94961.WGB
  • %HOMEPATH%\DNIOR\O75578.LQD
  • %HOMEPATH%\DNIOR\68221.XRZ
  • %HOMEPATH%\DNIOR\82893.IUS
  • %HOMEPATH%\DNIOR\29162.NZC
  • %HOMEPATH%\DNIOR\P48225.HYM
  • %HOMEPATH%\DNIOR\64074.MYP
  • %HOMEPATH%\DNIOR\76664.AOZ
  • %HOMEPATH%\DNIOR\L9117.XVF
  • %HOMEPATH%\DNIOR\98700.NJP
  • %HOMEPATH%\DNIOR\56449.VWE
  • %HOMEPATH%\DNIOR\J26275.FIT
  • %HOMEPATH%\DNIOR\79501.ZCA
  • %HOMEPATH%\DNIOR\C29410.QCP
  • %HOMEPATH%\DNIOR\C88291.YVW
  • %HOMEPATH%\DNIOR\U81350.JJH
  • %HOMEPATH%\DNIOR\44123.HUD
  • %HOMEPATH%\DNIOR\J80083.VWG
  • %HOMEPATH%\DNIOR\99107.QHF
  • %HOMEPATH%\DNIOR\80032.LIH
  • %HOMEPATH%\DNIOR\T68549.XVZ
  • %HOMEPATH%\DNIOR\97458.HPQ
  • %HOMEPATH%\DNIOR\Q4951.LBT
  • %HOMEPATH%\DNIOR\56768.JDD
  • %HOMEPATH%\DNIOR\T53395.GUF
  • %HOMEPATH%\DNIOR\S93748.PSA
  • %HOMEPATH%\DNIOR\R86469.CTZ
  • %HOMEPATH%\DNIOR\22528.MMN
  • %HOMEPATH%\DNIOR\I47493.XOE
  • %HOMEPATH%\DNIOR\V2355.EGH
  • %HOMEPATH%\DNIOR\74181.LAP
  • %HOMEPATH%\DNIOR\78259.OFM
  • %HOMEPATH%\DNIOR\P37893.XJB
  • %HOMEPATH%\DNIOR\35485.SYC
  • %HOMEPATH%\DNIOR\U61490.TXE
  • %HOMEPATH%\DNIOR\69457.NTW
  • %HOMEPATH%\DNIOR\36844.HBU
  • %HOMEPATH%\DNIOR\40188.DQS
  • %HOMEPATH%\DNIOR\40490.BOI
  • %HOMEPATH%\DNIOR\E12768.KJZ
  • %HOMEPATH%\DNIOR\30243.MFD
  • %HOMEPATH%\DNIOR\77228.EPY
  • %HOMEPATH%\DNIOR\89040.PLO
  • %HOMEPATH%\DNIOR\P2163.TZQ
  • %HOMEPATH%\DNIOR\Y52160.VSX
  • %HOMEPATH%\DNIOR\95331.RFE
  • %HOMEPATH%\DNIOR\B53830.HGO
  • %HOMEPATH%\DNIOR\52401.YVN
  • %HOMEPATH%\DNIOR\89356.ECU
  • %HOMEPATH%\DNIOR\Z69678.WGT
  • %HOMEPATH%\DNIOR\J48877.FMC
  • %HOMEPATH%\DNIOR\Z22700.PVC
  • %HOMEPATH%\DNIOR\K82289.OBV
  • %HOMEPATH%\DNIOR\40916.AHF
  • %HOMEPATH%\DNIOR\Z75867.LKL
  • %HOMEPATH%\DNIOR\N5887.WIB
  • %HOMEPATH%\DNIOR\18631.HGC
  • %HOMEPATH%\DNIOR\J95677.BAK
  • %HOMEPATH%\DNIOR\Z62093.UGQ
  • %HOMEPATH%\DNIOR\87603.SWR
  • %HOMEPATH%\DNIOR\T45135.HGL
  • %HOMEPATH%\DNIOR\28539.LFI
  • %HOMEPATH%\DNIOR\W79098.GCR
  • %HOMEPATH%\DNIOR\J88516.QKV
  • %HOMEPATH%\DNIOR\7863.YPS
  • %HOMEPATH%\DNIOR\69393.OWQ
  • %HOMEPATH%\DNIOR\22180.WIF
  • %HOMEPATH%\DNIOR\U61367.CIL
  • %HOMEPATH%\DNIOR\O20562.CKR
  • %HOMEPATH%\DNIOR\37681.BGK
  • %HOMEPATH%\DNIOR\69248.EAT
  • %HOMEPATH%\DNIOR\19358.PBR
  • %HOMEPATH%\DNIOR\98487.JXO
  • %HOMEPATH%\DNIOR\S42496.HZB
  • %HOMEPATH%\DNIOR\90864.HUC
  • %HOMEPATH%\DNIOR\41270.LBC
  • %HOMEPATH%\DNIOR\29688.PHA
  • %HOMEPATH%\DNIOR\61281.QTG
  • %HOMEPATH%\DNIOR\W90191.OSP
  • %HOMEPATH%\DNIOR\21821.RNR
  • %HOMEPATH%\DNIOR\31560.OKG
  • %HOMEPATH%\DNIOR\C86484.IEY
  • %HOMEPATH%\DNIOR\22841.NNH
  • %HOMEPATH%\DNIOR\19268.IJA
  • %HOMEPATH%\DNIOR\75115.ZRE
  • %HOMEPATH%\DNIOR\D91241.AXR
  • %HOMEPATH%\DNIOR\K37006.DQN
  • %HOMEPATH%\DNIOR\J82148.SUL
  • %HOMEPATH%\DNIOR\93342.PPZ
  • %HOMEPATH%\DNIOR\75372.BAT
  • %HOMEPATH%\DNIOR\V57692.GBJ
  • %HOMEPATH%\DNIOR\82661.TAQ
  • %HOMEPATH%\DNIOR\A56460.MSQ
  • %HOMEPATH%\DNIOR\69905.YCV
  • %HOMEPATH%\DNIOR\X10407.IMF
  • %HOMEPATH%\DNIOR\X25129.DDD
  • %HOMEPATH%\DNIOR\1158.ZFO
  • %HOMEPATH%\DNIOR\R31735.CVJ
  • %HOMEPATH%\DNIOR\I61457.HBO
  • %HOMEPATH%\DNIOR\72326.LUM
  • %HOMEPATH%\DNIOR\29901.CMW
  • %HOMEPATH%\DNIOR\46615.CZI
  • %HOMEPATH%\DNIOR\35731.FZA
  • %HOMEPATH%\DNIOR\B64314.WQU
  • %HOMEPATH%\DNIOR\15300.FLC
  • %HOMEPATH%\DNIOR\O65008.IOR
  • %HOMEPATH%\DNIOR\H31761.EBV
  • %HOMEPATH%\DNIOR\P30239.OEV
  • %HOMEPATH%\DNIOR\65178.NYL
  • %HOMEPATH%\DNIOR\84900.DHJ
  • %HOMEPATH%\DNIOR\84755.TIJ
  • %HOMEPATH%\DNIOR\R97188.RVC
  • %HOMEPATH%\DNIOR\W42770.PJV
  • %HOMEPATH%\DNIOR\86694.IYE
  • %HOMEPATH%\DNIOR\18534.QMY
  • %HOMEPATH%\DNIOR\U4142.SVC
  • %HOMEPATH%\DNIOR\G45417.PZO
  • %HOMEPATH%\DNIOR\49346.VSU
  • %HOMEPATH%\DNIOR\98867.KLP
  • %HOMEPATH%\DNIOR\41493.YAT
  • %HOMEPATH%\DNIOR\89601.RRC
  • %HOMEPATH%\DNIOR\73217.JZI
  • %HOMEPATH%\DNIOR\A17861.UWV
  • %HOMEPATH%\DNIOR\28523.ZVE
  • %HOMEPATH%\DNIOR\40245.MOZ
  • %HOMEPATH%\DNIOR\50061.SVF
  • %HOMEPATH%\DNIOR\Y49120.UES
  • %HOMEPATH%\DNIOR\15728.JRB
  • %HOMEPATH%\DNIOR\C91840.HRV
  • %HOMEPATH%\DNIOR\63469.SGL
  • %HOMEPATH%\DNIOR\T9886.XNC
  • %HOMEPATH%\DNIOR\K14551.VON
  • %HOMEPATH%\DNIOR\39398.HMT
  • %HOMEPATH%\DNIOR\78248.JVG
  • %HOMEPATH%\DNIOR\K68500.XZD
  • %HOMEPATH%\DNIOR\Z95869.JUH
  • %HOMEPATH%\DNIOR\76188.LMJ
  • %HOMEPATH%\DNIOR\5830.CMC
  • %HOMEPATH%\DNIOR\61765.VSV
  • %HOMEPATH%\DNIOR\76391.KQF
  • %HOMEPATH%\DNIOR\39122.VTS
  • %HOMEPATH%\DNIOR\O47027.OWH
  • %HOMEPATH%\DNIOR\23352.JPF
  • %HOMEPATH%\DNIOR\G98245.TGG
  • %HOMEPATH%\DNIOR\O50159.YSC
  • %HOMEPATH%\DNIOR\37683.ZVZ
  • %HOMEPATH%\DNIOR\40631.VEP
  • %HOMEPATH%\DNIOR\L93874.SKD
  • %HOMEPATH%\DNIOR\J82576.GYX
  • %HOMEPATH%\DNIOR\57060.DBV
  • %HOMEPATH%\DNIOR\13290.QPO
  • %HOMEPATH%\DNIOR\B42923.ZMA
  • %HOMEPATH%\DNIOR\8522.KZV
  • %HOMEPATH%\DNIOR\98411.BMZ
  • %HOMEPATH%\DNIOR\19374.ADK
  • %HOMEPATH%\DNIOR\96869.MDV
  • %HOMEPATH%\DNIOR\J7549.XOP
  • %HOMEPATH%\DNIOR\67410.HVR
  • %HOMEPATH%\DNIOR\F19619.TIM
  • %HOMEPATH%\DNIOR\G22004.QPP
  • %HOMEPATH%\DNIOR\85455.LMV
  • %HOMEPATH%\DNIOR\W11134.BIF
  • %HOMEPATH%\DNIOR\1948.ATR
  • %HOMEPATH%\DNIOR\R62977.COU
  • %HOMEPATH%\DNIOR\54527.YPQ
  • %HOMEPATH%\DNIOR\77671.GNF
  • %HOMEPATH%\DNIOR\S37877.TYV
  • %HOMEPATH%\DNIOR\51559.CNF
  • %HOMEPATH%\DNIOR\5299.UEZ
  • %HOMEPATH%\DNIOR\60294.XNS
  • %HOMEPATH%\DNIOR\V56550.VTL
  • %HOMEPATH%\DNIOR\J92107.OXP
  • %HOMEPATH%\DNIOR\R81708.XLZ
  • %HOMEPATH%\DNIOR\87245.NAW
  • %HOMEPATH%\DNIOR\A38857.OGP
  • %HOMEPATH%\DNIOR\67915.EYH
  • %HOMEPATH%\DNIOR\L86029.BBO
  • %HOMEPATH%\DNIOR\77102.XMK
  • %HOMEPATH%\DNIOR\L88620.YUS
  • %HOMEPATH%\DNIOR\96686.QRV
  • %HOMEPATH%\DNIOR\28227.BZH
  • %HOMEPATH%\DNIOR\24915.ROE
  • %HOMEPATH%\DNIOR\67177.SGR
  • %HOMEPATH%\DNIOR\14319.WDY
  • %HOMEPATH%\DNIOR\15752.XNM
  • %HOMEPATH%\DNIOR\13600.UCL
  • %HOMEPATH%\DNIOR\96566.UST
  • %HOMEPATH%\DNIOR\56590.IUM
  • %HOMEPATH%\DNIOR\22642.ZRX
  • %HOMEPATH%\DNIOR\E72706.LQF
  • %HOMEPATH%\DNIOR\44539.UPP
  • %HOMEPATH%\DNIOR\85528.VKU
  • %HOMEPATH%\DNIOR\3050.LYA
  • %HOMEPATH%\DNIOR\K85125.GLG
  • %HOMEPATH%\DNIOR\S16031.BJN
  • %HOMEPATH%\DNIOR\3562.vbs
  • %HOMEPATH%\DNIOR\settings.ini
  • %HOMEPATH%\DNIOR\27820.NCH
  • %HOMEPATH%\DNIOR\L21742.JPH
  • %HOMEPATH%\DNIOR\102127.dat
  • %HOMEPATH%\DNIOR\951609.QKE
  • %HOMEPATH%\DNIOR\TXJAP.exe
  • %HOMEPATH%\DNIOR\510186.dat
  • %HOMEPATH%\DNIOR\86974.QIN
  • %HOMEPATH%\DNIOR\39212.YTU
  • %HOMEPATH%\DNIOR\P66538.STV
  • %HOMEPATH%\DNIOR\49418.XAJ
  • %HOMEPATH%\DNIOR\51417.WCD
  • %HOMEPATH%\DNIOR\41673.LMJ
  • %HOMEPATH%\DNIOR\95574.TFX
  • %HOMEPATH%\DNIOR\6770.GPS
  • %HOMEPATH%\DNIOR\C27464.CSV
  • %HOMEPATH%\DNIOR\L78182.RWN
  • %HOMEPATH%\DNIOR\97354.HIU
  • %HOMEPATH%\DNIOR\86510.XNF
  • %HOMEPATH%\DNIOR\94677.JIM
  • %HOMEPATH%\DNIOR\60820.XAR
  • %HOMEPATH%\DNIOR\65728.DNT
  • %HOMEPATH%\DNIOR\F70104.MKF
  • %HOMEPATH%\DNIOR\59515.KOE
  • %HOMEPATH%\DNIOR\D65448.DUR
  • %HOMEPATH%\DNIOR\Z37824.FPJ
  • %HOMEPATH%\DNIOR\3514.IKU
  • %HOMEPATH%\DNIOR\R66590.MPR
  • %HOMEPATH%\DNIOR\U45918.MCK
  • %HOMEPATH%\DNIOR\H79987.MJZ
  • %HOMEPATH%\DNIOR\36025.FBT
  • %HOMEPATH%\DNIOR\37682.XRO
  • %HOMEPATH%\DNIOR\N56691.KSV
  • %HOMEPATH%\DNIOR\V47749.HOF
  • %HOMEPATH%\DNIOR\66662.QQW
  • %HOMEPATH%\DNIOR\E42205.LHR
  • %HOMEPATH%\DNIOR\95971.JDU
  • %HOMEPATH%\DNIOR\E32609.AAN
  • %HOMEPATH%\DNIOR\71131.IAM
  • %HOMEPATH%\DNIOR\38338.YDJ
  • %HOMEPATH%\DNIOR\96534.KOQ
  • %HOMEPATH%\DNIOR\Z56859.NVS
  • %HOMEPATH%\DNIOR\X5642.FML
  • %HOMEPATH%\DNIOR\Y73240.LBQ
  • %HOMEPATH%\DNIOR\45712.PQP
  • %HOMEPATH%\DNIOR\27513.SZD
  • %HOMEPATH%\DNIOR\E17149.OEO
  • %HOMEPATH%\DNIOR\B91532.YLQ
  • %HOMEPATH%\DNIOR\V59250.SPE
  • %HOMEPATH%\DNIOR\K31582.VXK
  • %HOMEPATH%\DNIOR\S65840.BSC
  • %HOMEPATH%\DNIOR\49488.TRN
  • %HOMEPATH%\DNIOR\13692.QUX
  • %HOMEPATH%\DNIOR\B27373.EQK
  • %HOMEPATH%\DNIOR\G54870.COB
  • %HOMEPATH%\DNIOR\90990.GQR
  • %HOMEPATH%\DNIOR\H6107.NHI
  • %HOMEPATH%\DNIOR\W12534.WXX
  • %HOMEPATH%\DNIOR\O95590.XQQ
  • %HOMEPATH%\DNIOR\78215.AXN
  • %HOMEPATH%\DNIOR\99824.YSM
  • %HOMEPATH%\DNIOR\17324.IRK
  • %HOMEPATH%\DNIOR\F36807.LJJ
  • %HOMEPATH%\DNIOR\G56567.VRA
  • %HOMEPATH%\DNIOR\R94422.PSA
  • %HOMEPATH%\DNIOR\39650.YGN
  • %HOMEPATH%\DNIOR\D87239.JQK
  • %HOMEPATH%\DNIOR\G73815.NSN
  • %HOMEPATH%\DNIOR\Q38759.AVG
  • %HOMEPATH%\DNIOR\15132.XRF
  • %HOMEPATH%\DNIOR\57676.KLI
  • %HOMEPATH%\DNIOR\55723.RXX
  • %HOMEPATH%\DNIOR\H4047.KQI
  • %HOMEPATH%\DNIOR\D40533.PNE
  • %HOMEPATH%\DNIOR\V13115.HWF
  • %HOMEPATH%\DNIOR\53346.DLK
  • %HOMEPATH%\DNIOR\46312.DTN
  • %HOMEPATH%\DNIOR\54265.WSG
  • %HOMEPATH%\DNIOR\92434.MRH
  • %HOMEPATH%\DNIOR\71377.NIE
  • %HOMEPATH%\DNIOR\31116.VNJ
  • %HOMEPATH%\DNIOR\J84780.CET
  • %HOMEPATH%\DNIOR\D34707.CIV
  • %HOMEPATH%\DNIOR\J31201.DIR
  • %HOMEPATH%\DNIOR\17949.PYZ
  • %HOMEPATH%\DNIOR\80547.BEX
  • %HOMEPATH%\DNIOR\25476.ASY
  • %HOMEPATH%\DNIOR\P40625.ONH
  • %HOMEPATH%\DNIOR\18189.FOZ
  • %HOMEPATH%\DNIOR\R36969.SQI
  • %HOMEPATH%\DNIOR\57997.YCB
  • %HOMEPATH%\DNIOR\A69269.LMH
  • %HOMEPATH%\DNIOR\F23390.CXV
  • %HOMEPATH%\DNIOR\49684.EUW
  • %HOMEPATH%\DNIOR\96189.ZEO
  • %HOMEPATH%\DNIOR\16734.BST
  • %HOMEPATH%\DNIOR\U14840.DZM
  • %HOMEPATH%\DNIOR\E88470.MSL
  • %HOMEPATH%\DNIOR\H23765.ILY
  • %HOMEPATH%\DNIOR\K6884.BLM
  • %HOMEPATH%\DNIOR\L87525.HVB
  • %HOMEPATH%\DNIOR\O52431.JRX
  • %HOMEPATH%\DNIOR\48454.LAC
  • %HOMEPATH%\DNIOR\30601.GQJ
  • %HOMEPATH%\DNIOR\11735.TNH
  • %HOMEPATH%\DNIOR\O19592.PBB
  • %HOMEPATH%\DNIOR\75604.VSN
  • %HOMEPATH%\DNIOR\J30344.IOJ
  • %HOMEPATH%\DNIOR\24699.XSJ
  • %HOMEPATH%\DNIOR\58860.FSK
  • %HOMEPATH%\DNIOR\A15846.QAX
  • %HOMEPATH%\DNIOR\91520.JZX
  • %HOMEPATH%\DNIOR\93063.QDS
  • %HOMEPATH%\DNIOR\L76200.HLU
  • %HOMEPATH%\DNIOR\E50766.QGQ
  • %HOMEPATH%\DNIOR\43210.ELU
  • %HOMEPATH%\DNIOR\B56496.TET
  • %HOMEPATH%\DNIOR\T86711.XYY
  • %HOMEPATH%\DNIOR\F91210.PSH
  • %HOMEPATH%\DNIOR\B65883.LWV
  • %HOMEPATH%\DNIOR\M30688.GPK
  • %HOMEPATH%\DNIOR\47293.DUE
  • %HOMEPATH%\DNIOR\26114.CWY
  • %HOMEPATH%\DNIOR\V14620.EKZ
  • %HOMEPATH%\DNIOR\T79542.ECY
  • %HOMEPATH%\DNIOR\97836.NBX
  • %HOMEPATH%\DNIOR\74704.BNY
  • %HOMEPATH%\DNIOR\84952.OJD
  • %HOMEPATH%\DNIOR\J91924.UYG
  • %HOMEPATH%\DNIOR\K38057.LLX
  • %HOMEPATH%\DNIOR\H87120.FUU
  • %HOMEPATH%\DNIOR\X80159.MKW
  • %HOMEPATH%\DNIOR\39773.RFI
  • %HOMEPATH%\DNIOR\74574.CDG
  • %HOMEPATH%\DNIOR\I43579.BVX
  • %HOMEPATH%\DNIOR\V87183.GTZ
  • %HOMEPATH%\DNIOR\K28697.AGH
  • %HOMEPATH%\DNIOR\F48025.PHT
  • %HOMEPATH%\DNIOR\85009.OGA
  • %HOMEPATH%\DNIOR\S1579.XUE
  • %HOMEPATH%\DNIOR\45645.WCU
  • %HOMEPATH%\DNIOR\54523.YSO
  • %HOMEPATH%\DNIOR\51956.VTE
  • %HOMEPATH%\DNIOR\P43155.HWX
  • %HOMEPATH%\DNIOR\32624.PIG
  • %HOMEPATH%\DNIOR\71537.TBG
  • %HOMEPATH%\DNIOR\64635.IPX
  • %HOMEPATH%\DNIOR\A68619.FFM
  • %HOMEPATH%\DNIOR\44910.EVX
  • %HOMEPATH%\DNIOR\M97430.MCD
  • %HOMEPATH%\DNIOR\J43944.OXC
  • %HOMEPATH%\DNIOR\H89390.VPP
  • %HOMEPATH%\DNIOR\68391.OXU
  • %HOMEPATH%\DNIOR\G8202.TMB
  • %HOMEPATH%\DNIOR\C10781.QWF
  • %HOMEPATH%\DNIOR\41324.CQJ
  • %HOMEPATH%\DNIOR\P19583.QVG
  • %HOMEPATH%\DNIOR\I49441.ZOY
  • %HOMEPATH%\DNIOR\40474.LHQ
  • %HOMEPATH%\DNIOR\86539.WGW
  • %HOMEPATH%\DNIOR\P65911.XNG
  • %HOMEPATH%\DNIOR\U1516.EVS
  • %HOMEPATH%\DNIOR\Z21840.WTR
  • %HOMEPATH%\DNIOR\U68555.YNG
  • %HOMEPATH%\DNIOR\20213.XSF
  • %HOMEPATH%\DNIOR\76017.GMZ
  • %HOMEPATH%\DNIOR\T32659.YWQ
  • %HOMEPATH%\DNIOR\70939.XSM
  • %HOMEPATH%\DNIOR\19399.IIE
  • %HOMEPATH%\DNIOR\22654.QHH
  • %HOMEPATH%\DNIOR\76717.ONJ
  • %HOMEPATH%\DNIOR\25085.JED
  • %HOMEPATH%\DNIOR\H68445.DBP
  • %HOMEPATH%\DNIOR\A64536.NUZ
  • %HOMEPATH%\DNIOR\Q75915.IEX
  • %HOMEPATH%\DNIOR\38068.FUW
  • %HOMEPATH%\DNIOR\25180.LTY
  • %HOMEPATH%\DNIOR\70729.KGA
  • %HOMEPATH%\DNIOR\22735.AUW
  • %HOMEPATH%\DNIOR\24509.DLA
  • %HOMEPATH%\DNIOR\O25872.JUB
  • %HOMEPATH%\DNIOR\V46926.HHI
  • %HOMEPATH%\DNIOR\D8841.MGZ
  • %HOMEPATH%\DNIOR\A72409.ELW
  • %HOMEPATH%\DNIOR\B53147.BQC
  • %HOMEPATH%\DNIOR\84244.SMB
  • %HOMEPATH%\DNIOR\51261.EGQ
Deletes the following files:
  • %TEMP%\NO_PWDS_report_05-06-2014_02-18-05-F4D651E80A6E4747C8F28A7D8647D810-FGNK.bin
  • %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\whatismyip.akamai[1]
  • %HOMEPATH%\DNIOR\SUWDQWYV.dat
Moves the following files:
  • from %TEMP%\report_05-06-2014_02-18-05-F4D651E80A6E4747C8F28A7D8647D810-FGNK.bin to %TEMP%\NO_PWDS_report_05-06-2014_02-18-05-F4D651E80A6E4747C8F28A7D8647D810-FGNK.bin
Network activity:
Connects to:
  • '94.##0.191.201':25
  • 'wh#####yip.akamai.com':80
TCP:
HTTP GET requests:
  • wh#####yip.akamai.com/
UDP:
  • DNS ASK sm##.mail.ru
  • DNS ASK wh#####yip.akamai.com
Miscellaneous:
Searches for the following windows:
  • ClassName: 'PROCEXPL' WindowName: '(null)'
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'
  • ClassName: 'EDIT' WindowName: '(null)'

Recommandations pour le traitement

  1. Si le système d'exploitation peut être démarré (en mode normal ou en mode sans échec), téléchargez Dr.Web Security Space et lancez un scan complet de votre ordinateur et de tous les supports amovibles que vous utilisez. En savoir plus sur Dr.Web Security Space.
  2. Si le démarrage du système d'exploitation est impossible, veuillez modifier les paramètres du BIOS de votre ordinateur pour démarrer votre ordinateur via CD/DVD ou clé USB. Téléchargez l'image du disque de secours de restauration du système Dr.Web® LiveDisk ou l'utilitaire pour enregistrer Dr.Web® LiveDisk sur une clé USB, puis préparez la clé USB appropriée. Démarrez l'ordinateur à l'aide de cette clé et lancez le scan complet et le traitement des menaces détectées.

Veuillez lancer le scan complet du système à l'aide de Dr.Web Antivirus pour Mac OS.

Veuillez lancer le scan complet de toutes les partitions du disque à l'aide de Dr.Web Antivirus pour Linux.

  1. Si votre appareil mobile fonctionne correctement, veuillez télécharger et installer sur votre appareil mobile Dr.Web pour Android. Lancez un scan complet et suivez les recommandations sur la neutralisation des menaces détectées.
  2. Si l'appareil mobile est bloqué par le Trojan de la famille Android.Locker (un message sur la violation grave de la loi ou la demande d'une rançon est affiché sur l'écran de l'appareil mobile), procédez comme suit:
    • démarrez votre Smartphone ou votre tablette en mode sans échec (si vous ne savez pas comment faire, consultez la documentation de l'appareil mobile ou contactez le fabricant) ;
    • puis téléchargez et installez sur votre appareil mobile Dr.Web pour Android et lancez un scan complet puis suivez les recommandations sur la neutralisation des menaces détectées ;
    • Débranchez votre appareil et rebranchez-le.

En savoir plus sur Dr.Web pour Android