Trojan.PWS.Siggen1.28595

Technical Information

Malicious functions:

Creates and executes the following:

'%HOMEPATH%\DNIOR\TXJAP.exe' SUWDQWYV.dat
'%HOMEPATH%\DNIOR\TXJAP.exe' 951609.QKE

Executes the following:

'%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
'<SYSTEM32>\wscript.exe' "%HOMEPATH%\DNIOR\3562.vbs" 7240

Injects code into

the following system processes:

%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

Terminates or attempts to terminate

the following user processes:

ICQ.exe

Searches for registry branches where third party applications store passwords:

[<HKLM>\SOFTWARE\FlashFXP]
[<HKCU>\Software\Google\Google Talk\Accounts]
[<HKCU>\Software\Ghisler\Total Commander]
[<HKLM>\Software\Ghisler\Total Commander]
[<HKCU>\Software\FTPWare\CoreFTP\Sites]
[<HKCU>\Software\Martin Prikryl\WinSCP 2\Sessions]
[<HKCU>\Software\Far2\Plugins\FTP\Hosts]
[<HKCU>\Software\Far\Plugins\FTP\Hosts]

Searches for windows to

detect analytical utilities:

ClassName: 'PROCMON_WINDOW_CLASS' WindowName: '(null)'

detect programs and games:

ClassName: 'gdkWindowToplevel' WindowName: 'The Wireshark Network Analyzer'

Modifies file system :

Creates the following files:

%HOMEPATH%\DNIOR\47453.QMI
%HOMEPATH%\DNIOR\98423.GRE
%HOMEPATH%\DNIOR\K81559.YSU
%HOMEPATH%\DNIOR\29396.EFB
%HOMEPATH%\DNIOR\D5314.EBZ
%HOMEPATH%\DNIOR\58547.EJE
%HOMEPATH%\DNIOR\O38575.EYJ
%HOMEPATH%\DNIOR\S16632.VQR
%HOMEPATH%\DNIOR\I81453.COQ
%HOMEPATH%\DNIOR\5044.FQH
%HOMEPATH%\DNIOR\E62544.HAT
%HOMEPATH%\DNIOR\16351.BUT
%HOMEPATH%\DNIOR\O23527.XNE
%HOMEPATH%\DNIOR\C21495.KIE
%HOMEPATH%\DNIOR\A1696.FTL
%HOMEPATH%\DNIOR\V93723.NCI
%HOMEPATH%\DNIOR\63806.NBT
%HOMEPATH%\DNIOR\20026.NES
%HOMEPATH%\DNIOR\75077.SLG
%HOMEPATH%\DNIOR\Q88380.JYP
%HOMEPATH%\DNIOR\E51110.JQW
%HOMEPATH%\DNIOR\8491.VWE
%HOMEPATH%\DNIOR\97150.DAL
%HOMEPATH%\DNIOR\G71234.YLR
%HOMEPATH%\DNIOR\77909.TKR
%HOMEPATH%\DNIOR\52587.LCY
%HOMEPATH%\DNIOR\M23432.XEV
%HOMEPATH%\DNIOR\A46482.JYS
%HOMEPATH%\DNIOR\J15322.ACH
%HOMEPATH%\DNIOR\35326.FUF
%HOMEPATH%\DNIOR\U51157.UNE
%HOMEPATH%\DNIOR\18323.BTT
%HOMEPATH%\DNIOR\C54736.PPN
%HOMEPATH%\DNIOR\S32176.DPQ
%HOMEPATH%\DNIOR\43348.PHU
%HOMEPATH%\DNIOR\65671.INA
%HOMEPATH%\DNIOR\38199.ZMP
%HOMEPATH%\DNIOR\W73122.JCT
%HOMEPATH%\DNIOR\B63516.BHR
%HOMEPATH%\DNIOR\45666.MCC
%HOMEPATH%\DNIOR\B97942.MZA
%HOMEPATH%\DNIOR\77667.PQM
%HOMEPATH%\DNIOR\X68865.ZDE
%HOMEPATH%\DNIOR\41470.CDZ
%HOMEPATH%\DNIOR\A25580.IHL
%HOMEPATH%\DNIOR\W79098.GCR
%HOMEPATH%\DNIOR\J88516.QKV
%HOMEPATH%\DNIOR\S26837.SFC
%HOMEPATH%\DNIOR\67047.XON
%HOMEPATH%\DNIOR\92978.IUV
%HOMEPATH%\DNIOR\26627.UVP
%HOMEPATH%\DNIOR\36416.OUV
%HOMEPATH%\DNIOR\14311.YBK
%HOMEPATH%\DNIOR\30324.REA
%HOMEPATH%\DNIOR\A72032.IZF
%HOMEPATH%\DNIOR\Z3645.JOB
%HOMEPATH%\DNIOR\79028.IFS
%HOMEPATH%\DNIOR\71229.AES
%HOMEPATH%\DNIOR\1777.GIH
%HOMEPATH%\DNIOR\65643.XEF
%HOMEPATH%\DNIOR\Y80894.GCG
%HOMEPATH%\DNIOR\Z44580.EEP
%HOMEPATH%\DNIOR\L70445.GVD
%HOMEPATH%\DNIOR\W16123.TNL
%HOMEPATH%\DNIOR\49310.SUY
%HOMEPATH%\DNIOR\5204.QWE
%HOMEPATH%\DNIOR\98076.SYI
%HOMEPATH%\DNIOR\F39848.SFF
%HOMEPATH%\DNIOR\47121.YET
%HOMEPATH%\DNIOR\31291.ZFJ
%HOMEPATH%\DNIOR\D36524.GKT
%HOMEPATH%\DNIOR\40702.ZEQ
%HOMEPATH%\DNIOR\B17722.UGX
%HOMEPATH%\DNIOR\43484.FGY
%HOMEPATH%\DNIOR\N44509.YNB
%HOMEPATH%\DNIOR\96805.MAS
%HOMEPATH%\DNIOR\21800.JZH
%HOMEPATH%\DNIOR\X41619.IYR
%HOMEPATH%\DNIOR\81774.SUX
%HOMEPATH%\DNIOR\90428.EYP
%HOMEPATH%\DNIOR\R25871.VTB
%HOMEPATH%\DNIOR\97033.XAL
%HOMEPATH%\DNIOR\P86258.TSA
%HOMEPATH%\DNIOR\K41443.QUV
%HOMEPATH%\DNIOR\80028.EVV
%HOMEPATH%\DNIOR\H7419.QCO
%HOMEPATH%\DNIOR\52956.KCF
%HOMEPATH%\DNIOR\45243.GPC
%HOMEPATH%\DNIOR\73886.UOC
%HOMEPATH%\DNIOR\H76919.JDT
%HOMEPATH%\DNIOR\53308.PCH
%HOMEPATH%\DNIOR\99493.APT
%HOMEPATH%\DNIOR\P45043.YVI
%HOMEPATH%\DNIOR\13847.ZMZ
%HOMEPATH%\DNIOR\V41461.PSS
%HOMEPATH%\DNIOR\W22928.NNA
%HOMEPATH%\DNIOR\R36145.KTJ
%HOMEPATH%\DNIOR\71764.JVQ
%HOMEPATH%\DNIOR\21644.QBB
%HOMEPATH%\DNIOR\K82741.BIJ
%HOMEPATH%\DNIOR\E58095.QDX
%HOMEPATH%\DNIOR\87475.LFE
%HOMEPATH%\DNIOR\2753.XJF
%HOMEPATH%\DNIOR\L86660.NDX
%HOMEPATH%\DNIOR\K92274.MEM
%HOMEPATH%\DNIOR\43699.XDC
%HOMEPATH%\DNIOR\15447.PJQ
%HOMEPATH%\DNIOR\71501.NFW
%HOMEPATH%\DNIOR\85691.CSK
%HOMEPATH%\DNIOR\H68307.GBB
%HOMEPATH%\DNIOR\14253.GMO
%HOMEPATH%\DNIOR\46192.WTG
%HOMEPATH%\DNIOR\A52851.WCC
%HOMEPATH%\DNIOR\51029.VPD
%HOMEPATH%\DNIOR\72571.XLP
%HOMEPATH%\DNIOR\56749.TGB
%HOMEPATH%\DNIOR\U89298.JGU
%HOMEPATH%\DNIOR\72747.TNH
%HOMEPATH%\DNIOR\W15631.BMG
%HOMEPATH%\DNIOR\1907.VMM
%HOMEPATH%\DNIOR\S54036.JIL
%HOMEPATH%\DNIOR\I89026.OMV
%HOMEPATH%\DNIOR\91598.MDW
%HOMEPATH%\DNIOR\38560.IYJ
%HOMEPATH%\DNIOR\X3137.THZ
%HOMEPATH%\DNIOR\66591.HZZ
%HOMEPATH%\DNIOR\E48034.GNM
%HOMEPATH%\DNIOR\F30146.RHU
%HOMEPATH%\DNIOR\27274.YWM
%HOMEPATH%\DNIOR\F11148.ICG
%HOMEPATH%\DNIOR\R71280.LJL
%HOMEPATH%\DNIOR\83097.TTJ
%HOMEPATH%\DNIOR\11984.BTG
%HOMEPATH%\DNIOR\M99725.HGF
%HOMEPATH%\DNIOR\W82720.VXG
%HOMEPATH%\DNIOR\F54449.JVL
%HOMEPATH%\DNIOR\J99874.QDE
%HOMEPATH%\DNIOR\69393.OWQ
%HOMEPATH%\DNIOR\11638.VJJ
%HOMEPATH%\DNIOR\77453.FNW
%HOMEPATH%\DNIOR\50871.ZRZ
%HOMEPATH%\DNIOR\A63525.UGB
%HOMEPATH%\DNIOR\E12118.RVY
%HOMEPATH%\DNIOR\E46510.ZFS
%HOMEPATH%\DNIOR\P30577.DXI
%HOMEPATH%\DNIOR\A74473.BQY
%HOMEPATH%\DNIOR\E55046.ENJ
%HOMEPATH%\DNIOR\I47493.XOE
%HOMEPATH%\DNIOR\V2355.EGH
%HOMEPATH%\DNIOR\74181.LAP
%HOMEPATH%\DNIOR\78259.OFM
%HOMEPATH%\DNIOR\10342.PMN
%HOMEPATH%\DNIOR\87333.KBP
%HOMEPATH%\DNIOR\S83765.ERV
%HOMEPATH%\DNIOR\83725.NNX
%HOMEPATH%\DNIOR\29162.NZC
%HOMEPATH%\DNIOR\80254.FPX
%HOMEPATH%\DNIOR\64074.MYP
%HOMEPATH%\DNIOR\82893.IUS
%HOMEPATH%\DNIOR\A1910.FBV
%HOMEPATH%\DNIOR\63927.XJT
%HOMEPATH%\DNIOR\H68101.YSA
%HOMEPATH%\DNIOR\H9263.ZPN
%HOMEPATH%\DNIOR\P48225.HYM
%HOMEPATH%\DNIOR\43233.COZ
%HOMEPATH%\DNIOR\9855.PSM
%HOMEPATH%\DNIOR\3629.FGR
%HOMEPATH%\DNIOR\N31464.UOB
%HOMEPATH%\DNIOR\47795.LQP
%HOMEPATH%\DNIOR\L94961.WGB
%HOMEPATH%\DNIOR\O75578.LQD
%HOMEPATH%\DNIOR\68221.XRZ
%HOMEPATH%\DNIOR\97458.HPQ
%HOMEPATH%\DNIOR\U81350.JJH
%HOMEPATH%\DNIOR\56768.JDD
%HOMEPATH%\DNIOR\T68549.XVZ
%HOMEPATH%\DNIOR\76664.AOZ
%HOMEPATH%\DNIOR\L9117.XVF
%HOMEPATH%\DNIOR\98700.NJP
%HOMEPATH%\DNIOR\56449.VWE
%HOMEPATH%\DNIOR\Q4951.LBT
%TEMP%\report_05-06-2014_02-18-05-F4D651E80A6E4747C8F28A7D8647D810-FGNK.bin
%HOMEPATH%\DNIOR\SUWDQWYV.dat
%TEMP%\NO_PWDS_report_05-06-2014_02-18-05-F4D651E80A6E4747C8F28A7D8647D810-FGNK.bin
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\whatismyip.akamai[1]
%HOMEPATH%\DNIOR\44123.HUD
%HOMEPATH%\DNIOR\J80083.VWG
%HOMEPATH%\DNIOR\99107.QHF
%HOMEPATH%\DNIOR\80032.LIH
%HOMEPATH%\DNIOR\40490.BOI
%HOMEPATH%\DNIOR\P37893.XJB
%HOMEPATH%\DNIOR\30243.MFD
%HOMEPATH%\DNIOR\40188.DQS
%HOMEPATH%\DNIOR\T53395.GUF
%HOMEPATH%\DNIOR\S93748.PSA
%HOMEPATH%\DNIOR\R86469.CTZ
%HOMEPATH%\DNIOR\22528.MMN
%HOMEPATH%\DNIOR\E12768.KJZ
%HOMEPATH%\DNIOR\J26275.FIT
%HOMEPATH%\DNIOR\79501.ZCA
%HOMEPATH%\DNIOR\C29410.QCP
%HOMEPATH%\DNIOR\C88291.YVW
%HOMEPATH%\DNIOR\35485.SYC
%HOMEPATH%\DNIOR\U61490.TXE
%HOMEPATH%\DNIOR\69457.NTW
%HOMEPATH%\DNIOR\36844.HBU
%HOMEPATH%\DNIOR\H92982.YYX
%HOMEPATH%\DNIOR\Z69678.WGT
%HOMEPATH%\DNIOR\P2163.TZQ
%HOMEPATH%\DNIOR\Z75867.LKL
%HOMEPATH%\DNIOR\N5887.WIB
%HOMEPATH%\DNIOR\89040.PLO
%HOMEPATH%\DNIOR\52401.YVN
%HOMEPATH%\DNIOR\Y52160.VSX
%HOMEPATH%\DNIOR\77228.EPY
%HOMEPATH%\DNIOR\J95677.BAK
%HOMEPATH%\DNIOR\R31735.CVJ
%HOMEPATH%\DNIOR\K82289.OBV
%HOMEPATH%\DNIOR\72326.LUM
%HOMEPATH%\DNIOR\1158.ZFO
%HOMEPATH%\DNIOR\Z22700.PVC
%HOMEPATH%\DNIOR\18631.HGC
%HOMEPATH%\DNIOR\40916.AHF
%HOMEPATH%\DNIOR\J48877.FMC
%HOMEPATH%\DNIOR\22180.WIF
%HOMEPATH%\DNIOR\T45135.HGL
%HOMEPATH%\DNIOR\19358.PBR
%HOMEPATH%\DNIOR\98487.JXO
%HOMEPATH%\DNIOR\87603.SWR
%HOMEPATH%\DNIOR\7863.YPS
%HOMEPATH%\DNIOR\28539.LFI
%HOMEPATH%\DNIOR\Z62093.UGQ
%HOMEPATH%\DNIOR\90864.HUC
%HOMEPATH%\DNIOR\B53830.HGO
%HOMEPATH%\DNIOR\37681.BGK
%HOMEPATH%\DNIOR\89356.ECU
%HOMEPATH%\DNIOR\95331.RFE
%HOMEPATH%\DNIOR\O20562.CKR
%HOMEPATH%\DNIOR\S42496.HZB
%HOMEPATH%\DNIOR\69248.EAT
%HOMEPATH%\DNIOR\U61367.CIL
%HOMEPATH%\DNIOR\19268.IJA
%HOMEPATH%\DNIOR\61281.QTG
%HOMEPATH%\DNIOR\93342.PPZ
%HOMEPATH%\DNIOR\75372.BAT
%HOMEPATH%\DNIOR\29688.PHA
%HOMEPATH%\DNIOR\C86484.IEY
%HOMEPATH%\DNIOR\W90191.OSP
%HOMEPATH%\DNIOR\41270.LBC
%HOMEPATH%\DNIOR\82661.TAQ
%HOMEPATH%\DNIOR\91549.OCH
%HOMEPATH%\DNIOR\K37006.DQN
%HOMEPATH%\DNIOR\Q45200.WVG
%HOMEPATH%\DNIOR\78021.RYG
%HOMEPATH%\DNIOR\D91241.AXR
%HOMEPATH%\DNIOR\V57692.GBJ
%HOMEPATH%\DNIOR\J82148.SUL
%HOMEPATH%\DNIOR\75115.ZRE
%HOMEPATH%\DNIOR\29901.CMW
%HOMEPATH%\DNIOR\X10407.IMF
%HOMEPATH%\DNIOR\O65008.IOR
%HOMEPATH%\DNIOR\H31761.EBV
%HOMEPATH%\DNIOR\69905.YCV
%HOMEPATH%\DNIOR\I61457.HBO
%HOMEPATH%\DNIOR\X25129.DDD
%HOMEPATH%\DNIOR\A56460.MSQ
%HOMEPATH%\DNIOR\65178.NYL
%HOMEPATH%\DNIOR\31560.OKG
%HOMEPATH%\DNIOR\B64314.WQU
%HOMEPATH%\DNIOR\22841.NNH
%HOMEPATH%\DNIOR\21821.RNR
%HOMEPATH%\DNIOR\35731.FZA
%HOMEPATH%\DNIOR\P30239.OEV
%HOMEPATH%\DNIOR\15300.FLC
%HOMEPATH%\DNIOR\46615.CZI
%HOMEPATH%\DNIOR\16286.OVC
%HOMEPATH%\DNIOR\86694.IYE
%HOMEPATH%\DNIOR\84755.TIJ
%HOMEPATH%\DNIOR\98867.KLP
%HOMEPATH%\DNIOR\W42770.PJV
%HOMEPATH%\DNIOR\49346.VSU
%HOMEPATH%\DNIOR\18534.QMY
%HOMEPATH%\DNIOR\R97188.RVC
%HOMEPATH%\DNIOR\G45417.PZO
%HOMEPATH%\DNIOR\40245.MOZ
%HOMEPATH%\DNIOR\A17861.UWV
%HOMEPATH%\DNIOR\41493.YAT
%HOMEPATH%\DNIOR\S37877.TYV
%HOMEPATH%\DNIOR\73217.JZI
%HOMEPATH%\DNIOR\Y49120.UES
%HOMEPATH%\DNIOR\28523.ZVE
%HOMEPATH%\DNIOR\89601.RRC
%HOMEPATH%\DNIOR\50061.SVF
%HOMEPATH%\DNIOR\T9886.XNC
%HOMEPATH%\DNIOR\15728.JRB
%HOMEPATH%\DNIOR\Z95869.JUH
%HOMEPATH%\DNIOR\63469.SGL
%HOMEPATH%\DNIOR\K68500.XZD
%HOMEPATH%\DNIOR\K14551.VON
%HOMEPATH%\DNIOR\C91840.HRV
%HOMEPATH%\DNIOR\78248.JVG
%HOMEPATH%\DNIOR\O47027.OWH
%HOMEPATH%\DNIOR\76391.KQF
%HOMEPATH%\DNIOR\76188.LMJ
%HOMEPATH%\DNIOR\U4142.SVC
%HOMEPATH%\DNIOR\61765.VSV
%HOMEPATH%\DNIOR\G98245.TGG
%HOMEPATH%\DNIOR\39122.VTS
%HOMEPATH%\DNIOR\5830.CMC
%HOMEPATH%\DNIOR\23352.JPF
%HOMEPATH%\DNIOR\L93874.SKD
%HOMEPATH%\DNIOR\O50159.YSC
%HOMEPATH%\DNIOR\8522.KZV
%HOMEPATH%\DNIOR\40631.VEP
%HOMEPATH%\DNIOR\B42923.ZMA
%HOMEPATH%\DNIOR\J82576.GYX
%HOMEPATH%\DNIOR\37683.ZVZ
%HOMEPATH%\DNIOR\13290.QPO
%HOMEPATH%\DNIOR\F19619.TIM
%HOMEPATH%\DNIOR\J7549.XOP
%HOMEPATH%\DNIOR\98411.BMZ
%HOMEPATH%\DNIOR\S65840.BSC
%HOMEPATH%\DNIOR\96869.MDV
%HOMEPATH%\DNIOR\85455.LMV
%HOMEPATH%\DNIOR\67410.HVR
%HOMEPATH%\DNIOR\19374.ADK
%HOMEPATH%\DNIOR\G22004.QPP
%HOMEPATH%\DNIOR\54527.YPQ
%HOMEPATH%\DNIOR\W11134.BIF
%HOMEPATH%\DNIOR\60294.XNS
%HOMEPATH%\DNIOR\R62977.COU
%HOMEPATH%\DNIOR\5299.UEZ
%HOMEPATH%\DNIOR\77671.GNF
%HOMEPATH%\DNIOR\1948.ATR
%HOMEPATH%\DNIOR\51559.CNF
%HOMEPATH%\DNIOR\67915.EYH
%HOMEPATH%\DNIOR\87245.NAW
%HOMEPATH%\DNIOR\V56550.VTL
%HOMEPATH%\DNIOR\57060.DBV
%HOMEPATH%\DNIOR\R81708.XLZ
%HOMEPATH%\DNIOR\77102.XMK
%HOMEPATH%\DNIOR\A38857.OGP
%HOMEPATH%\DNIOR\J92107.OXP
%HOMEPATH%\DNIOR\L86029.BBO
%HOMEPATH%\DNIOR\39398.HMT
%HOMEPATH%\DNIOR\L88620.YUS
%HOMEPATH%\DNIOR\96686.QRV
%HOMEPATH%\DNIOR\28227.BZH
%HOMEPATH%\DNIOR\24915.ROE
%HOMEPATH%\DNIOR\67177.SGR
%HOMEPATH%\DNIOR\14319.WDY
%HOMEPATH%\DNIOR\15752.XNM
%HOMEPATH%\DNIOR\13600.UCL
%HOMEPATH%\DNIOR\96566.UST
%HOMEPATH%\DNIOR\56590.IUM
%HOMEPATH%\DNIOR\22642.ZRX
%HOMEPATH%\DNIOR\E72706.LQF
%HOMEPATH%\DNIOR\44539.UPP
%HOMEPATH%\DNIOR\85528.VKU
%HOMEPATH%\DNIOR\3050.LYA
%HOMEPATH%\DNIOR\K85125.GLG
%HOMEPATH%\DNIOR\S16031.BJN
%HOMEPATH%\DNIOR\3562.vbs
%HOMEPATH%\DNIOR\settings.ini
%HOMEPATH%\DNIOR\27820.NCH
%HOMEPATH%\DNIOR\L21742.JPH
%HOMEPATH%\DNIOR\102127.dat
%HOMEPATH%\DNIOR\951609.QKE
%HOMEPATH%\DNIOR\TXJAP.exe
%HOMEPATH%\DNIOR\510186.dat
%HOMEPATH%\DNIOR\86974.QIN
%HOMEPATH%\DNIOR\39212.YTU
%HOMEPATH%\DNIOR\P66538.STV
%HOMEPATH%\DNIOR\49418.XAJ
%HOMEPATH%\DNIOR\51417.WCD
%HOMEPATH%\DNIOR\41673.LMJ
%HOMEPATH%\DNIOR\95574.TFX
%HOMEPATH%\DNIOR\6770.GPS
%HOMEPATH%\DNIOR\C27464.CSV
%HOMEPATH%\DNIOR\L78182.RWN
%HOMEPATH%\DNIOR\97354.HIU
%HOMEPATH%\DNIOR\86510.XNF
%HOMEPATH%\DNIOR\94677.JIM
%HOMEPATH%\DNIOR\60820.XAR
%HOMEPATH%\DNIOR\65728.DNT
%HOMEPATH%\DNIOR\F70104.MKF
%HOMEPATH%\DNIOR\59515.KOE
%HOMEPATH%\DNIOR\D65448.DUR
%HOMEPATH%\DNIOR\Z37824.FPJ
%HOMEPATH%\DNIOR\3514.IKU
%HOMEPATH%\DNIOR\R66590.MPR
%HOMEPATH%\DNIOR\U45918.MCK
%HOMEPATH%\DNIOR\H79987.MJZ
%HOMEPATH%\DNIOR\36025.FBT
%HOMEPATH%\DNIOR\37682.XRO
%HOMEPATH%\DNIOR\N56691.KSV
%HOMEPATH%\DNIOR\V47749.HOF
%HOMEPATH%\DNIOR\66662.QQW
%HOMEPATH%\DNIOR\E42205.LHR
%HOMEPATH%\DNIOR\95971.JDU
%HOMEPATH%\DNIOR\E32609.AAN
%HOMEPATH%\DNIOR\71131.IAM
%HOMEPATH%\DNIOR\38338.YDJ
%HOMEPATH%\DNIOR\96534.KOQ
%HOMEPATH%\DNIOR\Z56859.NVS
%HOMEPATH%\DNIOR\X5642.FML
%HOMEPATH%\DNIOR\Y73240.LBQ
%HOMEPATH%\DNIOR\45712.PQP
%HOMEPATH%\DNIOR\27513.SZD
%HOMEPATH%\DNIOR\E17149.OEO
%HOMEPATH%\DNIOR\B91532.YLQ
%HOMEPATH%\DNIOR\V59250.SPE
%HOMEPATH%\DNIOR\K31582.VXK
%HOMEPATH%\DNIOR\54523.YSO
%HOMEPATH%\DNIOR\B27373.EQK
%HOMEPATH%\DNIOR\G54870.COB
%HOMEPATH%\DNIOR\39650.YGN
%HOMEPATH%\DNIOR\78215.AXN
%HOMEPATH%\DNIOR\W12534.WXX
%HOMEPATH%\DNIOR\O95590.XQQ
%HOMEPATH%\DNIOR\49488.TRN
%HOMEPATH%\DNIOR\13692.QUX
%HOMEPATH%\DNIOR\R94422.PSA
%HOMEPATH%\DNIOR\F36807.LJJ
%HOMEPATH%\DNIOR\G56567.VRA
%HOMEPATH%\DNIOR\75604.VSN
%HOMEPATH%\DNIOR\J30344.IOJ
%HOMEPATH%\DNIOR\D87239.JQK
%HOMEPATH%\DNIOR\G73815.NSN
%HOMEPATH%\DNIOR\99824.YSM
%HOMEPATH%\DNIOR\17324.IRK
%HOMEPATH%\DNIOR\57676.KLI
%HOMEPATH%\DNIOR\55723.RXX
%HOMEPATH%\DNIOR\D34707.CIV
%HOMEPATH%\DNIOR\46312.DTN
%HOMEPATH%\DNIOR\V13115.HWF
%HOMEPATH%\DNIOR\53346.DLK
%HOMEPATH%\DNIOR\Q38759.AVG
%HOMEPATH%\DNIOR\15132.XRF
%HOMEPATH%\DNIOR\J84780.CET
%HOMEPATH%\DNIOR\71377.NIE
%HOMEPATH%\DNIOR\31116.VNJ
%HOMEPATH%\DNIOR\90990.GQR
%HOMEPATH%\DNIOR\H6107.NHI
%HOMEPATH%\DNIOR\J31201.DIR
%HOMEPATH%\DNIOR\17949.PYZ
%HOMEPATH%\DNIOR\54265.WSG
%HOMEPATH%\DNIOR\92434.MRH
%HOMEPATH%\DNIOR\P40625.ONH
%HOMEPATH%\DNIOR\18189.FOZ
%HOMEPATH%\DNIOR\K6884.BLM
%HOMEPATH%\DNIOR\49684.EUW
%HOMEPATH%\DNIOR\A69269.LMH
%HOMEPATH%\DNIOR\F23390.CXV
%HOMEPATH%\DNIOR\80547.BEX
%HOMEPATH%\DNIOR\25476.ASY
%HOMEPATH%\DNIOR\H23765.ILY
%HOMEPATH%\DNIOR\U14840.DZM
%HOMEPATH%\DNIOR\E88470.MSL
%HOMEPATH%\DNIOR\L77085.QTF
%HOMEPATH%\DNIOR\84900.DHJ
%HOMEPATH%\DNIOR\L87525.HVB
%HOMEPATH%\DNIOR\O52431.JRX
%HOMEPATH%\DNIOR\96189.ZEO
%HOMEPATH%\DNIOR\16734.BST
%HOMEPATH%\DNIOR\11735.TNH
%HOMEPATH%\DNIOR\O19592.PBB
%HOMEPATH%\DNIOR\B56496.TET
%HOMEPATH%\DNIOR\A15846.QAX
%HOMEPATH%\DNIOR\24699.XSJ
%HOMEPATH%\DNIOR\58860.FSK
%HOMEPATH%\DNIOR\48454.LAC
%HOMEPATH%\DNIOR\30601.GQJ
%HOMEPATH%\DNIOR\43210.ELU
%HOMEPATH%\DNIOR\L76200.HLU
%HOMEPATH%\DNIOR\E50766.QGQ
%HOMEPATH%\DNIOR\R36969.SQI
%HOMEPATH%\DNIOR\57997.YCB
%HOMEPATH%\DNIOR\T86711.XYY
%HOMEPATH%\DNIOR\F91210.PSH
%HOMEPATH%\DNIOR\91520.JZX
%HOMEPATH%\DNIOR\93063.QDS
%HOMEPATH%\DNIOR\H4047.KQI
%HOMEPATH%\DNIOR\26114.CWY
%HOMEPATH%\DNIOR\B65883.LWV
%HOMEPATH%\DNIOR\84952.OJD
%HOMEPATH%\DNIOR\47293.DUE
%HOMEPATH%\DNIOR\74704.BNY
%HOMEPATH%\DNIOR\V14620.EKZ
%HOMEPATH%\DNIOR\M30688.GPK
%HOMEPATH%\DNIOR\97836.NBX
%HOMEPATH%\DNIOR\74574.CDG
%HOMEPATH%\DNIOR\X80159.MKW
%HOMEPATH%\DNIOR\J91924.UYG
%HOMEPATH%\DNIOR\38068.FUW
%HOMEPATH%\DNIOR\H87120.FUU
%HOMEPATH%\DNIOR\V87183.GTZ
%HOMEPATH%\DNIOR\39773.RFI
%HOMEPATH%\DNIOR\K38057.LLX
%HOMEPATH%\DNIOR\I43579.BVX
%HOMEPATH%\DNIOR\S1579.XUE
%HOMEPATH%\DNIOR\K28697.AGH
%HOMEPATH%\DNIOR\32624.PIG
%HOMEPATH%\DNIOR\85009.OGA
%HOMEPATH%\DNIOR\P43155.HWX
%HOMEPATH%\DNIOR\45645.WCU
%HOMEPATH%\DNIOR\F48025.PHT
%HOMEPATH%\DNIOR\51956.VTE
%HOMEPATH%\DNIOR\J43944.OXC
%HOMEPATH%\DNIOR\44910.EVX
%HOMEPATH%\DNIOR\71537.TBG
%HOMEPATH%\DNIOR\T79542.ECY
%HOMEPATH%\DNIOR\A68619.FFM
%HOMEPATH%\DNIOR\68391.OXU
%HOMEPATH%\DNIOR\M97430.MCD
%HOMEPATH%\DNIOR\64635.IPX
%HOMEPATH%\DNIOR\H89390.VPP
%HOMEPATH%\DNIOR\P19583.QVG
%HOMEPATH%\DNIOR\G8202.TMB
%HOMEPATH%\DNIOR\U1516.EVS
%HOMEPATH%\DNIOR\41324.CQJ
%HOMEPATH%\DNIOR\P65911.XNG
%HOMEPATH%\DNIOR\I49441.ZOY
%HOMEPATH%\DNIOR\C10781.QWF
%HOMEPATH%\DNIOR\86539.WGW
%HOMEPATH%\DNIOR\70939.XSM
%HOMEPATH%\DNIOR\76017.GMZ
%HOMEPATH%\DNIOR\Z21840.WTR
%HOMEPATH%\DNIOR\D40533.PNE
%HOMEPATH%\DNIOR\20213.XSF
%HOMEPATH%\DNIOR\22654.QHH
%HOMEPATH%\DNIOR\T32659.YWQ
%HOMEPATH%\DNIOR\U68555.YNG
%HOMEPATH%\DNIOR\19399.IIE
%HOMEPATH%\DNIOR\A64536.NUZ
%HOMEPATH%\DNIOR\76717.ONJ
%HOMEPATH%\DNIOR\22735.AUW
%HOMEPATH%\DNIOR\H68445.DBP
%HOMEPATH%\DNIOR\70729.KGA
%HOMEPATH%\DNIOR\Q75915.IEX
%HOMEPATH%\DNIOR\25085.JED
%HOMEPATH%\DNIOR\25180.LTY
%HOMEPATH%\DNIOR\B53147.BQC
%HOMEPATH%\DNIOR\D8841.MGZ
%HOMEPATH%\DNIOR\24509.DLA
%HOMEPATH%\DNIOR\40474.LHQ
%HOMEPATH%\DNIOR\V46926.HHI
%HOMEPATH%\DNIOR\51261.EGQ
%HOMEPATH%\DNIOR\A72409.ELW
%HOMEPATH%\DNIOR\O25872.JUB
%HOMEPATH%\DNIOR\84244.SMB

Sets the 'hidden' attribute to the following files:

%HOMEPATH%\DNIOR\S16632.VQR
%HOMEPATH%\DNIOR\D5314.EBZ
%HOMEPATH%\DNIOR\98423.GRE
%HOMEPATH%\DNIOR\O38575.EYJ
%HOMEPATH%\DNIOR\35326.FUF
%HOMEPATH%\DNIOR\M23432.XEV
%HOMEPATH%\DNIOR\58547.EJE
%HOMEPATH%\DNIOR\J15322.ACH
%HOMEPATH%\DNIOR\47453.QMI
%HOMEPATH%\DNIOR\63806.NBT
%HOMEPATH%\DNIOR\C21495.KIE
%HOMEPATH%\DNIOR\E62544.HAT
%HOMEPATH%\DNIOR\V93723.NCI
%HOMEPATH%\DNIOR\K81559.YSU
%HOMEPATH%\DNIOR\29396.EFB
%HOMEPATH%\DNIOR\A1696.FTL
%HOMEPATH%\DNIOR\I81453.COQ
%HOMEPATH%\DNIOR\77909.TKR
%HOMEPATH%\DNIOR\8491.VWE
%HOMEPATH%\DNIOR\75077.SLG
%HOMEPATH%\DNIOR\G71234.YLR
%HOMEPATH%\DNIOR\72571.XLP
%HOMEPATH%\DNIOR\56749.TGB
%HOMEPATH%\DNIOR\97150.DAL
%HOMEPATH%\DNIOR\47121.YET
%HOMEPATH%\DNIOR\20026.NES
%HOMEPATH%\DNIOR\S32176.DPQ
%HOMEPATH%\DNIOR\U51157.UNE
%HOMEPATH%\DNIOR\A46482.JYS
%HOMEPATH%\DNIOR\C54736.PPN
%HOMEPATH%\DNIOR\Q88380.JYP
%HOMEPATH%\DNIOR\E51110.JQW
%HOMEPATH%\DNIOR\18323.BTT
%HOMEPATH%\DNIOR\52587.LCY
%HOMEPATH%\DNIOR\77667.PQM
%HOMEPATH%\DNIOR\B63516.BHR
%HOMEPATH%\DNIOR\65671.INA
%HOMEPATH%\DNIOR\B97942.MZA
%HOMEPATH%\DNIOR\W16123.TNL
%HOMEPATH%\DNIOR\Y80894.GCG
%HOMEPATH%\DNIOR\45666.MCC
%HOMEPATH%\DNIOR\L70445.GVD
%HOMEPATH%\DNIOR\43348.PHU
%HOMEPATH%\DNIOR\26627.UVP
%HOMEPATH%\DNIOR\S26837.SFC
%HOMEPATH%\DNIOR\A25580.IHL
%HOMEPATH%\DNIOR\92978.IUV
%HOMEPATH%\DNIOR\38199.ZMP
%HOMEPATH%\DNIOR\W73122.JCT
%HOMEPATH%\DNIOR\67047.XON
%HOMEPATH%\DNIOR\X68865.ZDE
%HOMEPATH%\DNIOR\1777.GIH
%HOMEPATH%\DNIOR\Z3645.JOB
%HOMEPATH%\DNIOR\14311.YBK
%HOMEPATH%\DNIOR\71229.AES
%HOMEPATH%\DNIOR\O23527.XNE
%HOMEPATH%\DNIOR\5044.FQH
%HOMEPATH%\DNIOR\79028.IFS
%HOMEPATH%\DNIOR\16351.BUT
%HOMEPATH%\DNIOR\36416.OUV
%HOMEPATH%\DNIOR\F39848.SFF
%HOMEPATH%\DNIOR\49310.SUY
%HOMEPATH%\DNIOR\Z44580.EEP
%HOMEPATH%\DNIOR\98076.SYI
%HOMEPATH%\DNIOR\30324.REA
%HOMEPATH%\DNIOR\A72032.IZF
%HOMEPATH%\DNIOR\5204.QWE
%HOMEPATH%\DNIOR\65643.XEF
%HOMEPATH%\DNIOR\96805.MAS
%HOMEPATH%\DNIOR\21800.JZH
%HOMEPATH%\DNIOR\31291.ZFJ
%HOMEPATH%\DNIOR\D36524.GKT
%HOMEPATH%\DNIOR\71764.JVQ
%HOMEPATH%\DNIOR\21644.QBB
%HOMEPATH%\DNIOR\43484.FGY
%HOMEPATH%\DNIOR\N44509.YNB
%HOMEPATH%\DNIOR\B17722.UGX
%HOMEPATH%\DNIOR\80028.EVV
%HOMEPATH%\DNIOR\H7419.QCO
%HOMEPATH%\DNIOR\81774.SUX
%HOMEPATH%\DNIOR\90428.EYP
%HOMEPATH%\DNIOR\X41619.IYR
%HOMEPATH%\DNIOR\40702.ZEQ
%HOMEPATH%\DNIOR\P86258.TSA
%HOMEPATH%\DNIOR\K41443.QUV
%HOMEPATH%\DNIOR\P45043.YVI
%HOMEPATH%\DNIOR\13847.ZMZ
%HOMEPATH%\DNIOR\52956.KCF
%HOMEPATH%\DNIOR\45243.GPC
%HOMEPATH%\DNIOR\16286.OVC
%HOMEPATH%\DNIOR\L77085.QTF
%HOMEPATH%\DNIOR\53308.PCH
%HOMEPATH%\DNIOR\99493.APT
%HOMEPATH%\DNIOR\H76919.JDT
%HOMEPATH%\DNIOR\87475.LFE
%HOMEPATH%\DNIOR\2753.XJF
%HOMEPATH%\DNIOR\W22928.NNA
%HOMEPATH%\DNIOR\R36145.KTJ
%HOMEPATH%\DNIOR\V41461.PSS
%HOMEPATH%\DNIOR\73886.UOC
%HOMEPATH%\DNIOR\K82741.BIJ
%HOMEPATH%\DNIOR\E58095.QDX
%HOMEPATH%\DNIOR\H68307.GBB
%HOMEPATH%\DNIOR\14253.GMO
%HOMEPATH%\DNIOR\L86660.NDX
%HOMEPATH%\DNIOR\K92274.MEM
%HOMEPATH%\DNIOR\83097.TTJ
%HOMEPATH%\DNIOR\11984.BTG
%HOMEPATH%\DNIOR\71501.NFW
%HOMEPATH%\DNIOR\85691.CSK
%HOMEPATH%\DNIOR\15447.PJQ
%HOMEPATH%\DNIOR\W15631.BMG
%HOMEPATH%\DNIOR\1907.VMM
%HOMEPATH%\DNIOR\A52851.WCC
%HOMEPATH%\DNIOR\51029.VPD
%HOMEPATH%\DNIOR\46192.WTG
%HOMEPATH%\DNIOR\43699.XDC
%HOMEPATH%\DNIOR\U89298.JGU
%HOMEPATH%\DNIOR\72747.TNH
%HOMEPATH%\DNIOR\E48034.GNM
%HOMEPATH%\DNIOR\F30146.RHU
%HOMEPATH%\DNIOR\S54036.JIL
%HOMEPATH%\DNIOR\I89026.OMV
%HOMEPATH%\DNIOR\R25871.VTB
%HOMEPATH%\DNIOR\97033.XAL
%HOMEPATH%\DNIOR\X3137.THZ
%HOMEPATH%\DNIOR\66591.HZZ
%HOMEPATH%\DNIOR\38560.IYJ
%HOMEPATH%\DNIOR\F54449.JVL
%HOMEPATH%\DNIOR\J99874.QDE
%HOMEPATH%\DNIOR\F11148.ICG
%HOMEPATH%\DNIOR\R71280.LJL
%HOMEPATH%\DNIOR\27274.YWM
%HOMEPATH%\DNIOR\91598.MDW
%HOMEPATH%\DNIOR\M99725.HGF
%HOMEPATH%\DNIOR\W82720.VXG
%HOMEPATH%\DNIOR\41470.CDZ
%HOMEPATH%\DNIOR\E12118.RVY
%HOMEPATH%\DNIOR\E46510.ZFS
%HOMEPATH%\DNIOR\P30577.DXI
%HOMEPATH%\DNIOR\A74473.BQY
%HOMEPATH%\DNIOR\43233.COZ
%HOMEPATH%\DNIOR\9855.PSM
%HOMEPATH%\DNIOR\3629.FGR
%HOMEPATH%\DNIOR\N31464.UOB
%HOMEPATH%\DNIOR\77453.FNW
%HOMEPATH%\DNIOR\10342.PMN
%HOMEPATH%\DNIOR\87333.KBP
%HOMEPATH%\DNIOR\S83765.ERV
%HOMEPATH%\DNIOR\83725.NNX
%HOMEPATH%\DNIOR\A63525.UGB
%HOMEPATH%\DNIOR\11638.VJJ
%HOMEPATH%\DNIOR\E55046.ENJ
%HOMEPATH%\DNIOR\50871.ZRZ
%HOMEPATH%\DNIOR\A1910.FBV
%HOMEPATH%\DNIOR\63927.XJT
%HOMEPATH%\DNIOR\H68101.YSA
%HOMEPATH%\DNIOR\H9263.ZPN
%HOMEPATH%\DNIOR\78021.RYG
%HOMEPATH%\DNIOR\91549.OCH
%HOMEPATH%\DNIOR\H92982.YYX
%HOMEPATH%\DNIOR\Q45200.WVG
%HOMEPATH%\DNIOR\80254.FPX
%HOMEPATH%\DNIOR\47795.LQP
%HOMEPATH%\DNIOR\L94961.WGB
%HOMEPATH%\DNIOR\O75578.LQD
%HOMEPATH%\DNIOR\68221.XRZ
%HOMEPATH%\DNIOR\82893.IUS
%HOMEPATH%\DNIOR\29162.NZC
%HOMEPATH%\DNIOR\P48225.HYM
%HOMEPATH%\DNIOR\64074.MYP
%HOMEPATH%\DNIOR\76664.AOZ
%HOMEPATH%\DNIOR\L9117.XVF
%HOMEPATH%\DNIOR\98700.NJP
%HOMEPATH%\DNIOR\56449.VWE
%HOMEPATH%\DNIOR\J26275.FIT
%HOMEPATH%\DNIOR\79501.ZCA
%HOMEPATH%\DNIOR\C29410.QCP
%HOMEPATH%\DNIOR\C88291.YVW
%HOMEPATH%\DNIOR\U81350.JJH
%HOMEPATH%\DNIOR\44123.HUD
%HOMEPATH%\DNIOR\J80083.VWG
%HOMEPATH%\DNIOR\99107.QHF
%HOMEPATH%\DNIOR\80032.LIH
%HOMEPATH%\DNIOR\T68549.XVZ
%HOMEPATH%\DNIOR\97458.HPQ
%HOMEPATH%\DNIOR\Q4951.LBT
%HOMEPATH%\DNIOR\56768.JDD
%HOMEPATH%\DNIOR\T53395.GUF
%HOMEPATH%\DNIOR\S93748.PSA
%HOMEPATH%\DNIOR\R86469.CTZ
%HOMEPATH%\DNIOR\22528.MMN
%HOMEPATH%\DNIOR\I47493.XOE
%HOMEPATH%\DNIOR\V2355.EGH
%HOMEPATH%\DNIOR\74181.LAP
%HOMEPATH%\DNIOR\78259.OFM
%HOMEPATH%\DNIOR\P37893.XJB
%HOMEPATH%\DNIOR\35485.SYC
%HOMEPATH%\DNIOR\U61490.TXE
%HOMEPATH%\DNIOR\69457.NTW
%HOMEPATH%\DNIOR\36844.HBU
%HOMEPATH%\DNIOR\40188.DQS
%HOMEPATH%\DNIOR\40490.BOI
%HOMEPATH%\DNIOR\E12768.KJZ
%HOMEPATH%\DNIOR\30243.MFD
%HOMEPATH%\DNIOR\77228.EPY
%HOMEPATH%\DNIOR\89040.PLO
%HOMEPATH%\DNIOR\P2163.TZQ
%HOMEPATH%\DNIOR\Y52160.VSX
%HOMEPATH%\DNIOR\95331.RFE
%HOMEPATH%\DNIOR\B53830.HGO
%HOMEPATH%\DNIOR\52401.YVN
%HOMEPATH%\DNIOR\89356.ECU
%HOMEPATH%\DNIOR\Z69678.WGT
%HOMEPATH%\DNIOR\J48877.FMC
%HOMEPATH%\DNIOR\Z22700.PVC
%HOMEPATH%\DNIOR\K82289.OBV
%HOMEPATH%\DNIOR\40916.AHF
%HOMEPATH%\DNIOR\Z75867.LKL
%HOMEPATH%\DNIOR\N5887.WIB
%HOMEPATH%\DNIOR\18631.HGC
%HOMEPATH%\DNIOR\J95677.BAK
%HOMEPATH%\DNIOR\Z62093.UGQ
%HOMEPATH%\DNIOR\87603.SWR
%HOMEPATH%\DNIOR\T45135.HGL
%HOMEPATH%\DNIOR\28539.LFI
%HOMEPATH%\DNIOR\W79098.GCR
%HOMEPATH%\DNIOR\J88516.QKV
%HOMEPATH%\DNIOR\7863.YPS
%HOMEPATH%\DNIOR\69393.OWQ
%HOMEPATH%\DNIOR\22180.WIF
%HOMEPATH%\DNIOR\U61367.CIL
%HOMEPATH%\DNIOR\O20562.CKR
%HOMEPATH%\DNIOR\37681.BGK
%HOMEPATH%\DNIOR\69248.EAT
%HOMEPATH%\DNIOR\19358.PBR
%HOMEPATH%\DNIOR\98487.JXO
%HOMEPATH%\DNIOR\S42496.HZB
%HOMEPATH%\DNIOR\90864.HUC
%HOMEPATH%\DNIOR\41270.LBC
%HOMEPATH%\DNIOR\29688.PHA
%HOMEPATH%\DNIOR\61281.QTG
%HOMEPATH%\DNIOR\W90191.OSP
%HOMEPATH%\DNIOR\21821.RNR
%HOMEPATH%\DNIOR\31560.OKG
%HOMEPATH%\DNIOR\C86484.IEY
%HOMEPATH%\DNIOR\22841.NNH
%HOMEPATH%\DNIOR\19268.IJA
%HOMEPATH%\DNIOR\75115.ZRE
%HOMEPATH%\DNIOR\D91241.AXR
%HOMEPATH%\DNIOR\K37006.DQN
%HOMEPATH%\DNIOR\J82148.SUL
%HOMEPATH%\DNIOR\93342.PPZ
%HOMEPATH%\DNIOR\75372.BAT
%HOMEPATH%\DNIOR\V57692.GBJ
%HOMEPATH%\DNIOR\82661.TAQ
%HOMEPATH%\DNIOR\A56460.MSQ
%HOMEPATH%\DNIOR\69905.YCV
%HOMEPATH%\DNIOR\X10407.IMF
%HOMEPATH%\DNIOR\X25129.DDD
%HOMEPATH%\DNIOR\1158.ZFO
%HOMEPATH%\DNIOR\R31735.CVJ
%HOMEPATH%\DNIOR\I61457.HBO
%HOMEPATH%\DNIOR\72326.LUM
%HOMEPATH%\DNIOR\29901.CMW
%HOMEPATH%\DNIOR\46615.CZI
%HOMEPATH%\DNIOR\35731.FZA
%HOMEPATH%\DNIOR\B64314.WQU
%HOMEPATH%\DNIOR\15300.FLC
%HOMEPATH%\DNIOR\O65008.IOR
%HOMEPATH%\DNIOR\H31761.EBV
%HOMEPATH%\DNIOR\P30239.OEV
%HOMEPATH%\DNIOR\65178.NYL
%HOMEPATH%\DNIOR\84900.DHJ
%HOMEPATH%\DNIOR\84755.TIJ
%HOMEPATH%\DNIOR\R97188.RVC
%HOMEPATH%\DNIOR\W42770.PJV
%HOMEPATH%\DNIOR\86694.IYE
%HOMEPATH%\DNIOR\18534.QMY
%HOMEPATH%\DNIOR\U4142.SVC
%HOMEPATH%\DNIOR\G45417.PZO
%HOMEPATH%\DNIOR\49346.VSU
%HOMEPATH%\DNIOR\98867.KLP
%HOMEPATH%\DNIOR\41493.YAT
%HOMEPATH%\DNIOR\89601.RRC
%HOMEPATH%\DNIOR\73217.JZI
%HOMEPATH%\DNIOR\A17861.UWV
%HOMEPATH%\DNIOR\28523.ZVE
%HOMEPATH%\DNIOR\40245.MOZ
%HOMEPATH%\DNIOR\50061.SVF
%HOMEPATH%\DNIOR\Y49120.UES
%HOMEPATH%\DNIOR\15728.JRB
%HOMEPATH%\DNIOR\C91840.HRV
%HOMEPATH%\DNIOR\63469.SGL
%HOMEPATH%\DNIOR\T9886.XNC
%HOMEPATH%\DNIOR\K14551.VON
%HOMEPATH%\DNIOR\39398.HMT
%HOMEPATH%\DNIOR\78248.JVG
%HOMEPATH%\DNIOR\K68500.XZD
%HOMEPATH%\DNIOR\Z95869.JUH
%HOMEPATH%\DNIOR\76188.LMJ
%HOMEPATH%\DNIOR\5830.CMC
%HOMEPATH%\DNIOR\61765.VSV
%HOMEPATH%\DNIOR\76391.KQF
%HOMEPATH%\DNIOR\39122.VTS
%HOMEPATH%\DNIOR\O47027.OWH
%HOMEPATH%\DNIOR\23352.JPF
%HOMEPATH%\DNIOR\G98245.TGG
%HOMEPATH%\DNIOR\O50159.YSC
%HOMEPATH%\DNIOR\37683.ZVZ
%HOMEPATH%\DNIOR\40631.VEP
%HOMEPATH%\DNIOR\L93874.SKD
%HOMEPATH%\DNIOR\J82576.GYX
%HOMEPATH%\DNIOR\57060.DBV
%HOMEPATH%\DNIOR\13290.QPO
%HOMEPATH%\DNIOR\B42923.ZMA
%HOMEPATH%\DNIOR\8522.KZV
%HOMEPATH%\DNIOR\98411.BMZ
%HOMEPATH%\DNIOR\19374.ADK
%HOMEPATH%\DNIOR\96869.MDV
%HOMEPATH%\DNIOR\J7549.XOP
%HOMEPATH%\DNIOR\67410.HVR
%HOMEPATH%\DNIOR\F19619.TIM
%HOMEPATH%\DNIOR\G22004.QPP
%HOMEPATH%\DNIOR\85455.LMV
%HOMEPATH%\DNIOR\W11134.BIF
%HOMEPATH%\DNIOR\1948.ATR
%HOMEPATH%\DNIOR\R62977.COU
%HOMEPATH%\DNIOR\54527.YPQ
%HOMEPATH%\DNIOR\77671.GNF
%HOMEPATH%\DNIOR\S37877.TYV
%HOMEPATH%\DNIOR\51559.CNF
%HOMEPATH%\DNIOR\5299.UEZ
%HOMEPATH%\DNIOR\60294.XNS
%HOMEPATH%\DNIOR\V56550.VTL
%HOMEPATH%\DNIOR\J92107.OXP
%HOMEPATH%\DNIOR\R81708.XLZ
%HOMEPATH%\DNIOR\87245.NAW
%HOMEPATH%\DNIOR\A38857.OGP
%HOMEPATH%\DNIOR\67915.EYH
%HOMEPATH%\DNIOR\L86029.BBO
%HOMEPATH%\DNIOR\77102.XMK
%HOMEPATH%\DNIOR\L88620.YUS
%HOMEPATH%\DNIOR\96686.QRV
%HOMEPATH%\DNIOR\28227.BZH
%HOMEPATH%\DNIOR\24915.ROE
%HOMEPATH%\DNIOR\67177.SGR
%HOMEPATH%\DNIOR\14319.WDY
%HOMEPATH%\DNIOR\15752.XNM
%HOMEPATH%\DNIOR\13600.UCL
%HOMEPATH%\DNIOR\96566.UST
%HOMEPATH%\DNIOR\56590.IUM
%HOMEPATH%\DNIOR\22642.ZRX
%HOMEPATH%\DNIOR\E72706.LQF
%HOMEPATH%\DNIOR\44539.UPP
%HOMEPATH%\DNIOR\85528.VKU
%HOMEPATH%\DNIOR\3050.LYA
%HOMEPATH%\DNIOR\K85125.GLG
%HOMEPATH%\DNIOR\S16031.BJN
%HOMEPATH%\DNIOR\3562.vbs
%HOMEPATH%\DNIOR\settings.ini
%HOMEPATH%\DNIOR\27820.NCH
%HOMEPATH%\DNIOR\L21742.JPH
%HOMEPATH%\DNIOR\102127.dat
%HOMEPATH%\DNIOR\951609.QKE
%HOMEPATH%\DNIOR\TXJAP.exe
%HOMEPATH%\DNIOR\510186.dat
%HOMEPATH%\DNIOR\86974.QIN
%HOMEPATH%\DNIOR\39212.YTU
%HOMEPATH%\DNIOR\P66538.STV
%HOMEPATH%\DNIOR\49418.XAJ
%HOMEPATH%\DNIOR\51417.WCD
%HOMEPATH%\DNIOR\41673.LMJ
%HOMEPATH%\DNIOR\95574.TFX
%HOMEPATH%\DNIOR\6770.GPS
%HOMEPATH%\DNIOR\C27464.CSV
%HOMEPATH%\DNIOR\L78182.RWN
%HOMEPATH%\DNIOR\97354.HIU
%HOMEPATH%\DNIOR\86510.XNF
%HOMEPATH%\DNIOR\94677.JIM
%HOMEPATH%\DNIOR\60820.XAR
%HOMEPATH%\DNIOR\65728.DNT
%HOMEPATH%\DNIOR\F70104.MKF
%HOMEPATH%\DNIOR\59515.KOE
%HOMEPATH%\DNIOR\D65448.DUR
%HOMEPATH%\DNIOR\Z37824.FPJ
%HOMEPATH%\DNIOR\3514.IKU
%HOMEPATH%\DNIOR\R66590.MPR
%HOMEPATH%\DNIOR\U45918.MCK
%HOMEPATH%\DNIOR\H79987.MJZ
%HOMEPATH%\DNIOR\36025.FBT
%HOMEPATH%\DNIOR\37682.XRO
%HOMEPATH%\DNIOR\N56691.KSV
%HOMEPATH%\DNIOR\V47749.HOF
%HOMEPATH%\DNIOR\66662.QQW
%HOMEPATH%\DNIOR\E42205.LHR
%HOMEPATH%\DNIOR\95971.JDU
%HOMEPATH%\DNIOR\E32609.AAN
%HOMEPATH%\DNIOR\71131.IAM
%HOMEPATH%\DNIOR\38338.YDJ
%HOMEPATH%\DNIOR\96534.KOQ
%HOMEPATH%\DNIOR\Z56859.NVS
%HOMEPATH%\DNIOR\X5642.FML
%HOMEPATH%\DNIOR\Y73240.LBQ
%HOMEPATH%\DNIOR\45712.PQP
%HOMEPATH%\DNIOR\27513.SZD
%HOMEPATH%\DNIOR\E17149.OEO
%HOMEPATH%\DNIOR\B91532.YLQ
%HOMEPATH%\DNIOR\V59250.SPE
%HOMEPATH%\DNIOR\K31582.VXK
%HOMEPATH%\DNIOR\S65840.BSC
%HOMEPATH%\DNIOR\49488.TRN
%HOMEPATH%\DNIOR\13692.QUX
%HOMEPATH%\DNIOR\B27373.EQK
%HOMEPATH%\DNIOR\G54870.COB
%HOMEPATH%\DNIOR\90990.GQR
%HOMEPATH%\DNIOR\H6107.NHI
%HOMEPATH%\DNIOR\W12534.WXX
%HOMEPATH%\DNIOR\O95590.XQQ
%HOMEPATH%\DNIOR\78215.AXN
%HOMEPATH%\DNIOR\99824.YSM
%HOMEPATH%\DNIOR\17324.IRK
%HOMEPATH%\DNIOR\F36807.LJJ
%HOMEPATH%\DNIOR\G56567.VRA
%HOMEPATH%\DNIOR\R94422.PSA
%HOMEPATH%\DNIOR\39650.YGN
%HOMEPATH%\DNIOR\D87239.JQK
%HOMEPATH%\DNIOR\G73815.NSN
%HOMEPATH%\DNIOR\Q38759.AVG
%HOMEPATH%\DNIOR\15132.XRF
%HOMEPATH%\DNIOR\57676.KLI
%HOMEPATH%\DNIOR\55723.RXX
%HOMEPATH%\DNIOR\H4047.KQI
%HOMEPATH%\DNIOR\D40533.PNE
%HOMEPATH%\DNIOR\V13115.HWF
%HOMEPATH%\DNIOR\53346.DLK
%HOMEPATH%\DNIOR\46312.DTN
%HOMEPATH%\DNIOR\54265.WSG
%HOMEPATH%\DNIOR\92434.MRH
%HOMEPATH%\DNIOR\71377.NIE
%HOMEPATH%\DNIOR\31116.VNJ
%HOMEPATH%\DNIOR\J84780.CET
%HOMEPATH%\DNIOR\D34707.CIV
%HOMEPATH%\DNIOR\J31201.DIR
%HOMEPATH%\DNIOR\17949.PYZ
%HOMEPATH%\DNIOR\80547.BEX
%HOMEPATH%\DNIOR\25476.ASY
%HOMEPATH%\DNIOR\P40625.ONH
%HOMEPATH%\DNIOR\18189.FOZ
%HOMEPATH%\DNIOR\R36969.SQI
%HOMEPATH%\DNIOR\57997.YCB
%HOMEPATH%\DNIOR\A69269.LMH
%HOMEPATH%\DNIOR\F23390.CXV
%HOMEPATH%\DNIOR\49684.EUW
%HOMEPATH%\DNIOR\96189.ZEO
%HOMEPATH%\DNIOR\16734.BST
%HOMEPATH%\DNIOR\U14840.DZM
%HOMEPATH%\DNIOR\E88470.MSL
%HOMEPATH%\DNIOR\H23765.ILY
%HOMEPATH%\DNIOR\K6884.BLM
%HOMEPATH%\DNIOR\L87525.HVB
%HOMEPATH%\DNIOR\O52431.JRX
%HOMEPATH%\DNIOR\48454.LAC
%HOMEPATH%\DNIOR\30601.GQJ
%HOMEPATH%\DNIOR\11735.TNH
%HOMEPATH%\DNIOR\O19592.PBB
%HOMEPATH%\DNIOR\75604.VSN
%HOMEPATH%\DNIOR\J30344.IOJ
%HOMEPATH%\DNIOR\24699.XSJ
%HOMEPATH%\DNIOR\58860.FSK
%HOMEPATH%\DNIOR\A15846.QAX
%HOMEPATH%\DNIOR\91520.JZX
%HOMEPATH%\DNIOR\93063.QDS
%HOMEPATH%\DNIOR\L76200.HLU
%HOMEPATH%\DNIOR\E50766.QGQ
%HOMEPATH%\DNIOR\43210.ELU
%HOMEPATH%\DNIOR\B56496.TET
%HOMEPATH%\DNIOR\T86711.XYY
%HOMEPATH%\DNIOR\F91210.PSH
%HOMEPATH%\DNIOR\B65883.LWV
%HOMEPATH%\DNIOR\M30688.GPK
%HOMEPATH%\DNIOR\47293.DUE
%HOMEPATH%\DNIOR\26114.CWY
%HOMEPATH%\DNIOR\V14620.EKZ
%HOMEPATH%\DNIOR\T79542.ECY
%HOMEPATH%\DNIOR\97836.NBX
%HOMEPATH%\DNIOR\74704.BNY
%HOMEPATH%\DNIOR\84952.OJD
%HOMEPATH%\DNIOR\J91924.UYG
%HOMEPATH%\DNIOR\K38057.LLX
%HOMEPATH%\DNIOR\H87120.FUU
%HOMEPATH%\DNIOR\X80159.MKW
%HOMEPATH%\DNIOR\39773.RFI
%HOMEPATH%\DNIOR\74574.CDG
%HOMEPATH%\DNIOR\I43579.BVX
%HOMEPATH%\DNIOR\V87183.GTZ
%HOMEPATH%\DNIOR\K28697.AGH
%HOMEPATH%\DNIOR\F48025.PHT
%HOMEPATH%\DNIOR\85009.OGA
%HOMEPATH%\DNIOR\S1579.XUE
%HOMEPATH%\DNIOR\45645.WCU
%HOMEPATH%\DNIOR\54523.YSO
%HOMEPATH%\DNIOR\51956.VTE
%HOMEPATH%\DNIOR\P43155.HWX
%HOMEPATH%\DNIOR\32624.PIG
%HOMEPATH%\DNIOR\71537.TBG
%HOMEPATH%\DNIOR\64635.IPX
%HOMEPATH%\DNIOR\A68619.FFM
%HOMEPATH%\DNIOR\44910.EVX
%HOMEPATH%\DNIOR\M97430.MCD
%HOMEPATH%\DNIOR\J43944.OXC
%HOMEPATH%\DNIOR\H89390.VPP
%HOMEPATH%\DNIOR\68391.OXU
%HOMEPATH%\DNIOR\G8202.TMB
%HOMEPATH%\DNIOR\C10781.QWF
%HOMEPATH%\DNIOR\41324.CQJ
%HOMEPATH%\DNIOR\P19583.QVG
%HOMEPATH%\DNIOR\I49441.ZOY
%HOMEPATH%\DNIOR\40474.LHQ
%HOMEPATH%\DNIOR\86539.WGW
%HOMEPATH%\DNIOR\P65911.XNG
%HOMEPATH%\DNIOR\U1516.EVS
%HOMEPATH%\DNIOR\Z21840.WTR
%HOMEPATH%\DNIOR\U68555.YNG
%HOMEPATH%\DNIOR\20213.XSF
%HOMEPATH%\DNIOR\76017.GMZ
%HOMEPATH%\DNIOR\T32659.YWQ
%HOMEPATH%\DNIOR\70939.XSM
%HOMEPATH%\DNIOR\19399.IIE
%HOMEPATH%\DNIOR\22654.QHH
%HOMEPATH%\DNIOR\76717.ONJ
%HOMEPATH%\DNIOR\25085.JED
%HOMEPATH%\DNIOR\H68445.DBP
%HOMEPATH%\DNIOR\A64536.NUZ
%HOMEPATH%\DNIOR\Q75915.IEX
%HOMEPATH%\DNIOR\38068.FUW
%HOMEPATH%\DNIOR\25180.LTY
%HOMEPATH%\DNIOR\70729.KGA
%HOMEPATH%\DNIOR\22735.AUW
%HOMEPATH%\DNIOR\24509.DLA
%HOMEPATH%\DNIOR\O25872.JUB
%HOMEPATH%\DNIOR\V46926.HHI
%HOMEPATH%\DNIOR\D8841.MGZ
%HOMEPATH%\DNIOR\A72409.ELW
%HOMEPATH%\DNIOR\B53147.BQC
%HOMEPATH%\DNIOR\84244.SMB
%HOMEPATH%\DNIOR\51261.EGQ

Deletes the following files:

%TEMP%\NO_PWDS_report_05-06-2014_02-18-05-F4D651E80A6E4747C8F28A7D8647D810-FGNK.bin
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\whatismyip.akamai[1]
%HOMEPATH%\DNIOR\SUWDQWYV.dat

Moves the following files:

from %TEMP%\report_05-06-2014_02-18-05-F4D651E80A6E4747C8F28A7D8647D810-FGNK.bin to %TEMP%\NO_PWDS_report_05-06-2014_02-18-05-F4D651E80A6E4747C8F28A7D8647D810-FGNK.bin

Network activity:

Connects to:

'94.##0.191.201':25
'wh#####yip.akamai.com':80

TCP:

HTTP GET requests:

wh#####yip.akamai.com/

UDP:

DNS ASK sm##.mail.ru
DNS ASK wh#####yip.akamai.com

Miscellaneous:

Searches for the following windows:

ClassName: 'PROCEXPL' WindowName: '(null)'
ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'EDIT' WindowName: '(null)'

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial