BackDoor.Bifrost.10864

Technical Information

Modifies file system

Creates the following files

<Current directory>\file.exe
%WINDIR%\syswow64\blrigg.exe
%WINDIR%\syswow64\ripkne.exe
%WINDIR%\syswow64\zfbalu.exe
%WINDIR%\syswow64\jldaqz.exe
%WINDIR%\syswow64\btezbs.exe
%WINDIR%\syswow64\evwuxl.exe
%WINDIR%\syswow64\jajyee.exe
%WINDIR%\syswow64\hegwjd.exe
%WINDIR%\syswow64\zwsqeg.exe
%WINDIR%\syswow64\expivj.exe
%WINDIR%\syswow64\ongdls.exe
%WINDIR%\syswow64\rsxavt.exe
%WINDIR%\syswow64\kzokbs.exe
%WINDIR%\syswow64\mqdcnu.exe
%WINDIR%\syswow64\zowhih.exe
%WINDIR%\syswow64\bbpitl.exe
%WINDIR%\syswow64\uxeqys.exe
%WINDIR%\syswow64\xwmdup.exe
%WINDIR%\syswow64\zrnqjv.exe
%WINDIR%\syswow64\uetiql.exe
%WINDIR%\syswow64\wgnmrk.exe
%WINDIR%\syswow64\sqqrve.exe
%WINDIR%\syswow64\wqrxdn.exe
%WINDIR%\syswow64\tabric.exe
%WINDIR%\syswow64\ezgcmi.exe
%WINDIR%\syswow64\ogteih.exe
%WINDIR%\syswow64\ylkdez.exe
%WINDIR%\syswow64\icpddv.exe
%WINDIR%\syswow64\sjrdiz.exe
%WINDIR%\syswow64\ltvfcc.exe
%WINDIR%\syswow64\gdxfvo.exe
%WINDIR%\syswow64\bqukqf.exe
%WINDIR%\syswow64\nomjht.exe
%WINDIR%\syswow64\bjubid.exe
%WINDIR%\syswow64\qcgyew.exe
%WINDIR%\syswow64\qxvgjd.exe
%WINDIR%\syswow64\dsdybn.exe
%WINDIR%\syswow64\yfikwd.exe
%WINDIR%\syswow64\ldbpzr.exe
%WINDIR%\syswow64\enektu.exe
%WINDIR%\syswow64\alahvh.exe
%WINDIR%\syswow64\wnvdqj.exe
%WINDIR%\syswow64\jloitw.exe
%WINDIR%\syswow64\ysdyfp.exe
%WINDIR%\syswow64\winjyn.exe
%WINDIR%\syswow64\rvsvtv.exe
%WINDIR%\syswow64\miqiwm.exe
%WINDIR%\syswow64\zgjfra.exe
%WINDIR%\syswow64\watxqi.exe
%WINDIR%\syswow64\hyshfg.exe
%WINDIR%\syswow64\nehwzm.exe
%WINDIR%\syswow64\mvnzfn.exe
%WINDIR%\syswow64\hqqouj.exe
%WINDIR%\syswow64\vppjjc.exe
%WINDIR%\syswow64\nzself.exe
%WINDIR%\syswow64\yixxuk.exe
%WINDIR%\syswow64\dauznx.exe
%WINDIR%\syswow64\lajcor.exe
%WINDIR%\syswow64\beheup.exe
%WINDIR%\syswow64\iihlyo.exe
%WINDIR%\syswow64\gjsqpk.exe
%WINDIR%\syswow64\edmnzs.exe
%WINDIR%\syswow64\gusasm.exe
%WINDIR%\syswow64\aqxezi.exe
%WINDIR%\syswow64\dvdfji.exe
%WINDIR%\syswow64\brdspu.exe
%WINDIR%\syswow64\bbtion.exe
%WINDIR%\syswow64\txiqlu.exe
%WINDIR%\syswow64\qrunwd.exe
%WINDIR%\syswow64\orfsgs.exe
%WINDIR%\syswow64\ybtena.exe
%WINDIR%\syswow64\mspjcf.exe
%WINDIR%\syswow64\eoerhn.exe
%WINDIR%\syswow64\usbjmy.exe
%TEMP%\tmp.exe
%WINDIR%\syswow64\qascse.exe
%WINDIR%\syswow64\kxkpvg.exe
%WINDIR%\syswow64\dlcasp.exe
%WINDIR%\syswow64\sqlnqh.exe
%WINDIR%\syswow64\mzolxu.exe
%WINDIR%\syswow64\xcfxzu.exe
%WINDIR%\syswow64\coxink.exe
%WINDIR%\syswow64\mjocok.exe
%WINDIR%\syswow64\spjmor.exe
%WINDIR%\syswow64\aajcsq.exe
%WINDIR%\syswow64\cgnhcn.exe
%WINDIR%\syswow64\ebgurt.exe
%WINDIR%\syswow64\hmzlqu.exe
%WINDIR%\syswow64\nufrbf.exe
%WINDIR%\syswow64\mfhyqp.exe
%WINDIR%\syswow64\ugearb.exe
%WINDIR%\syswow64\kjeqda.exe
%WINDIR%\syswow64\szpkkv.exe
%WINDIR%\syswow64\cugfmd.exe
%WINDIR%\syswow64\hdfcpo.exe
%WINDIR%\syswow64\kqjpym.exe
%WINDIR%\syswow64\srgrzy.exe
%WINDIR%\syswow64\xwbbzf.exe
%WINDIR%\syswow64\fpqijm.exe
%WINDIR%\syswow64\fhrtyj.exe
%WINDIR%\syswow64\izhlkl.exe
%WINDIR%\syswow64\nlqvqb.exe
%WINDIR%\syswow64\xyelhn.exe
%WINDIR%\syswow64\qoztsi.exe

Sets the 'hidden' attribute to the following files

%TEMP%\tmp.exe
%WINDIR%\syswow64\tabric.exe
%WINDIR%\syswow64\ongdls.exe
%WINDIR%\syswow64\blrigg.exe
%WINDIR%\syswow64\ripkne.exe
%WINDIR%\syswow64\zfbalu.exe
%WINDIR%\syswow64\jldaqz.exe
%WINDIR%\syswow64\btezbs.exe
%WINDIR%\syswow64\evwuxl.exe
%WINDIR%\syswow64\jajyee.exe
%WINDIR%\syswow64\hegwjd.exe
%WINDIR%\syswow64\sqqrve.exe
%WINDIR%\syswow64\zwsqeg.exe
%WINDIR%\syswow64\rsxavt.exe
%WINDIR%\syswow64\wqrxdn.exe
%WINDIR%\syswow64\kzokbs.exe
%WINDIR%\syswow64\mqdcnu.exe
%WINDIR%\syswow64\zowhih.exe
%WINDIR%\syswow64\bbpitl.exe
%WINDIR%\syswow64\uxeqys.exe
%WINDIR%\syswow64\xwmdup.exe
%WINDIR%\syswow64\zrnqjv.exe
%WINDIR%\syswow64\uetiql.exe
%WINDIR%\syswow64\expivj.exe
%WINDIR%\syswow64\wgnmrk.exe
%WINDIR%\syswow64\ezgcmi.exe
%WINDIR%\syswow64\yfikwd.exe
%WINDIR%\syswow64\ylkdez.exe
%WINDIR%\syswow64\icpddv.exe
%WINDIR%\syswow64\sjrdiz.exe
%WINDIR%\syswow64\ltvfcc.exe
%WINDIR%\syswow64\gdxfvo.exe
%WINDIR%\syswow64\bqukqf.exe
%WINDIR%\syswow64\nomjht.exe
%WINDIR%\syswow64\bjubid.exe
%WINDIR%\syswow64\qcgyew.exe
%WINDIR%\syswow64\qxvgjd.exe
%WINDIR%\syswow64\watxqi.exe
%WINDIR%\syswow64\ogteih.exe
%WINDIR%\syswow64\ldbpzr.exe
%WINDIR%\syswow64\enektu.exe
%WINDIR%\syswow64\alahvh.exe
%WINDIR%\syswow64\wnvdqj.exe
%WINDIR%\syswow64\jloitw.exe
%WINDIR%\syswow64\ysdyfp.exe
%WINDIR%\syswow64\winjyn.exe
%WINDIR%\syswow64\rvsvtv.exe
%WINDIR%\syswow64\miqiwm.exe
%WINDIR%\syswow64\zgjfra.exe
%WINDIR%\syswow64\dsdybn.exe
%WINDIR%\syswow64\hyshfg.exe
%WINDIR%\syswow64\mvnzfn.exe
%WINDIR%\syswow64\xyelhn.exe
%WINDIR%\syswow64\vppjjc.exe
%WINDIR%\syswow64\nzself.exe
%WINDIR%\syswow64\yixxuk.exe
%WINDIR%\syswow64\dauznx.exe
%WINDIR%\syswow64\lajcor.exe
%WINDIR%\syswow64\beheup.exe
%WINDIR%\syswow64\iihlyo.exe
%WINDIR%\syswow64\gjsqpk.exe
%WINDIR%\syswow64\edmnzs.exe
%WINDIR%\syswow64\kxkpvg.exe
%WINDIR%\syswow64\gusasm.exe
%WINDIR%\syswow64\qascse.exe
%WINDIR%\syswow64\brdspu.exe
%WINDIR%\syswow64\bbtion.exe
%WINDIR%\syswow64\txiqlu.exe
%WINDIR%\syswow64\qrunwd.exe
%WINDIR%\syswow64\orfsgs.exe
%WINDIR%\syswow64\ybtena.exe
%WINDIR%\syswow64\mspjcf.exe
%WINDIR%\syswow64\eoerhn.exe
%WINDIR%\syswow64\usbjmy.exe
%WINDIR%\syswow64\dvdfji.exe
%WINDIR%\syswow64\dlcasp.exe
%WINDIR%\syswow64\aqxezi.exe
%WINDIR%\syswow64\sqlnqh.exe
%WINDIR%\syswow64\hqqouj.exe
%WINDIR%\syswow64\mfhyqp.exe
%WINDIR%\syswow64\mzolxu.exe
%WINDIR%\syswow64\xcfxzu.exe
%WINDIR%\syswow64\coxink.exe
%WINDIR%\syswow64\mjocok.exe
%WINDIR%\syswow64\spjmor.exe
%WINDIR%\syswow64\aajcsq.exe
%WINDIR%\syswow64\cgnhcn.exe
%WINDIR%\syswow64\ebgurt.exe
%WINDIR%\syswow64\hmzlqu.exe
%WINDIR%\syswow64\nufrbf.exe
%WINDIR%\syswow64\ugearb.exe
%WINDIR%\syswow64\nlqvqb.exe
%WINDIR%\syswow64\kjeqda.exe
%WINDIR%\syswow64\szpkkv.exe
%WINDIR%\syswow64\cugfmd.exe
%WINDIR%\syswow64\hdfcpo.exe
%WINDIR%\syswow64\kqjpym.exe
%WINDIR%\syswow64\srgrzy.exe
%WINDIR%\syswow64\xwbbzf.exe
%WINDIR%\syswow64\fpqijm.exe
%WINDIR%\syswow64\fhrtyj.exe
%WINDIR%\syswow64\izhlkl.exe
%WINDIR%\syswow64\nehwzm.exe
%WINDIR%\syswow64\qoztsi.exe

Deletes the following files

<Current directory>\file.exe

Miscellaneous

Creates and executes the following

'%TEMP%\tmp.exe'
'%WINDIR%\syswow64\jloitw.exe' 752 "%WINDIR%\SysWOW64\ysdyfp.exe"
'%WINDIR%\syswow64\dsdybn.exe' 776 "%WINDIR%\SysWOW64\yfikwd.exe"
'%WINDIR%\syswow64\wgnmrk.exe' 628 "%WINDIR%\SysWOW64\sqqrve.exe"
'%WINDIR%\syswow64\sqqrve.exe' 624 "%WINDIR%\SysWOW64\hyshfg.exe"
'%WINDIR%\syswow64\qxvgjd.exe' 780 "%WINDIR%\SysWOW64\dsdybn.exe"
'%WINDIR%\syswow64\hyshfg.exe' 620 "%WINDIR%\SysWOW64\mvnzfn.exe"
'%WINDIR%\syswow64\mvnzfn.exe' 616 "%WINDIR%\SysWOW64\xyelhn.exe"
'%WINDIR%\syswow64\qcgyew.exe' 784 "%WINDIR%\SysWOW64\qxvgjd.exe"
'%WINDIR%\syswow64\xyelhn.exe' 612 "%WINDIR%\SysWOW64\hqqouj.exe"
'%WINDIR%\syswow64\hqqouj.exe' 608 "%WINDIR%\SysWOW64\mzolxu.exe"
'%WINDIR%\syswow64\mzolxu.exe' 604 "%WINDIR%\SysWOW64\xcfxzu.exe"
'%WINDIR%\syswow64\xcfxzu.exe' 600 "%WINDIR%\SysWOW64\coxink.exe"
'%WINDIR%\syswow64\nomjht.exe' 792 "%WINDIR%\SysWOW64\bjubid.exe"
'%WINDIR%\syswow64\coxink.exe' 596 "%WINDIR%\SysWOW64\mjocok.exe"
'%WINDIR%\syswow64\uetiql.exe' 632 "%WINDIR%\SysWOW64\wgnmrk.exe"
'%WINDIR%\syswow64\mjocok.exe' 592 "%WINDIR%\SysWOW64\spjmor.exe"
'%WINDIR%\syswow64\spjmor.exe' 588 "%WINDIR%\SysWOW64\aajcsq.exe"
'%WINDIR%\syswow64\aajcsq.exe' 584 "%WINDIR%\SysWOW64\cgnhcn.exe"
'%WINDIR%\syswow64\gdxfvo.exe' 800 "%WINDIR%\SysWOW64\bqukqf.exe"
'%WINDIR%\syswow64\cgnhcn.exe' 580 "%WINDIR%\SysWOW64\ebgurt.exe"
'%WINDIR%\syswow64\ebgurt.exe' 576 "%WINDIR%\SysWOW64\hmzlqu.exe"
'%WINDIR%\syswow64\ltvfcc.exe' 804 "%WINDIR%\SysWOW64\gdxfvo.exe"
'%WINDIR%\syswow64\hmzlqu.exe' 572 "%WINDIR%\SysWOW64\nufrbf.exe"
'%WINDIR%\syswow64\ogteih.exe' 724 "%WINDIR%\SysWOW64\ezgcmi.exe"
'%WINDIR%\syswow64\bjubid.exe' 788 "%WINDIR%\SysWOW64\qcgyew.exe"
'%WINDIR%\syswow64\mfhyqp.exe' 564 "%WINDIR%\SysWOW64\ugearb.exe"
'%WINDIR%\syswow64\tabric.exe' 716 "%WINDIR%\SysWOW64\ongdls.exe"
'%WINDIR%\syswow64\kjeqda.exe' 556 "%WINDIR%\SysWOW64\szpkkv.exe"
'%WINDIR%\syswow64\szpkkv.exe' 552 "%WINDIR%\SysWOW64\cugfmd.exe"
'%WINDIR%\syswow64\ugearb.exe' 560 "%WINDIR%\SysWOW64\kjeqda.exe"
'%WINDIR%\syswow64\bqukqf.exe' 796 "%WINDIR%\SysWOW64\nomjht.exe"
'%WINDIR%\syswow64\ylkdez.exe' 816 "%WINDIR%\SysWOW64\icpddv.exe"
'%WINDIR%\syswow64\zrnqjv.exe' 636 "%WINDIR%\SysWOW64\uetiql.exe"
'%WINDIR%\syswow64\xwmdup.exe' 640 "%WINDIR%\SysWOW64\zrnqjv.exe"
'%WINDIR%\syswow64\ezgcmi.exe' 720 "%WINDIR%\SysWOW64\tabric.exe"
'%WINDIR%\syswow64\icpddv.exe' 812 "%WINDIR%\SysWOW64\sjrdiz.exe"
'%WINDIR%\syswow64\zgjfra.exe' 732 "%WINDIR%\SysWOW64\watxqi.exe"
'%WINDIR%\syswow64\zfbalu.exe' 700 "%WINDIR%\SysWOW64\jldaqz.exe"
'%WINDIR%\syswow64\ongdls.exe' 712 "%WINDIR%\SysWOW64\blrigg.exe"
'%WINDIR%\syswow64\miqiwm.exe' 736 "%WINDIR%\SysWOW64\zgjfra.exe"
'%WINDIR%\syswow64\blrigg.exe' 708 "%WINDIR%\SysWOW64\ripkne.exe"
'%WINDIR%\syswow64\ripkne.exe' 704 "%WINDIR%\SysWOW64\zfbalu.exe"
'%WINDIR%\syswow64\rvsvtv.exe' 740 "%WINDIR%\SysWOW64\miqiwm.exe"
'%WINDIR%\syswow64\jldaqz.exe' 696 "%WINDIR%\SysWOW64\btezbs.exe"
'%WINDIR%\syswow64\winjyn.exe' 744 "%WINDIR%\SysWOW64\rvsvtv.exe"
'%WINDIR%\syswow64\evwuxl.exe' 688 "%WINDIR%\SysWOW64\jajyee.exe"
'%WINDIR%\syswow64\ysdyfp.exe' 748 "%WINDIR%\SysWOW64\winjyn.exe"
'%WINDIR%\syswow64\sjrdiz.exe' 808 "%WINDIR%\SysWOW64\ltvfcc.exe"
'%WINDIR%\syswow64\yfikwd.exe' 772 "%WINDIR%\SysWOW64\ldbpzr.exe"
'%WINDIR%\syswow64\jajyee.exe' 684 "%WINDIR%\SysWOW64\hegwjd.exe"
'%WINDIR%\syswow64\qrunwd.exe' 436 "%WINDIR%\SysWOW64\orfsgs.exe"
'%WINDIR%\syswow64\btezbs.exe' 692 "%WINDIR%\SysWOW64\evwuxl.exe"
'%WINDIR%\syswow64\expivj.exe' 672 "%WINDIR%\SysWOW64\rsxavt.exe"
'%WINDIR%\syswow64\wnvdqj.exe' 756 "%WINDIR%\SysWOW64\jloitw.exe"
'%WINDIR%\syswow64\rsxavt.exe' 668 "%WINDIR%\SysWOW64\wqrxdn.exe"
'%WINDIR%\syswow64\wqrxdn.exe' 664 "%WINDIR%\SysWOW64\kzokbs.exe"
'%WINDIR%\syswow64\alahvh.exe' 760 "%WINDIR%\SysWOW64\wnvdqj.exe"
'%WINDIR%\syswow64\kzokbs.exe' 660 "%WINDIR%\SysWOW64\mqdcnu.exe"
'%WINDIR%\syswow64\mqdcnu.exe' 656 "%WINDIR%\SysWOW64\zowhih.exe"
'%WINDIR%\syswow64\enektu.exe' 764 "%WINDIR%\SysWOW64\alahvh.exe"
'%WINDIR%\syswow64\zowhih.exe' 652 "%WINDIR%\SysWOW64\bbpitl.exe"
'%WINDIR%\syswow64\bbpitl.exe' 648 "%WINDIR%\SysWOW64\uxeqys.exe"
'%WINDIR%\syswow64\ldbpzr.exe' 768 "%WINDIR%\SysWOW64\enektu.exe"
'%WINDIR%\syswow64\uxeqys.exe' 644 "%WINDIR%\SysWOW64\xwmdup.exe"
'%WINDIR%\syswow64\hegwjd.exe' 680 "%WINDIR%\SysWOW64\zwsqeg.exe"
'%WINDIR%\syswow64\nufrbf.exe' 568 "%WINDIR%\SysWOW64\mfhyqp.exe"
'%WINDIR%\syswow64\hdfcpo.exe' 544 "%WINDIR%\SysWOW64\kqjpym.exe"
'%WINDIR%\syswow64\vppjjc.exe' 496 "%WINDIR%\SysWOW64\nzself.exe"
'%WINDIR%\syswow64\nzself.exe' 492 "%WINDIR%\SysWOW64\yixxuk.exe"
'%WINDIR%\syswow64\yixxuk.exe' 488 "%WINDIR%\SysWOW64\dauznx.exe"
'%WINDIR%\syswow64\dauznx.exe' 484 "%WINDIR%\SysWOW64\lajcor.exe"
'%WINDIR%\syswow64\lajcor.exe' 480 "%WINDIR%\SysWOW64\beheup.exe"
'%WINDIR%\syswow64\beheup.exe' 476 "%WINDIR%\SysWOW64\iihlyo.exe"
'%WINDIR%\syswow64\iihlyo.exe' 472 "%WINDIR%\SysWOW64\gjsqpk.exe"
'%WINDIR%\syswow64\zwsqeg.exe' 676 "%WINDIR%\SysWOW64\expivj.exe"
'%WINDIR%\syswow64\gjsqpk.exe' 468 "%WINDIR%\SysWOW64\edmnzs.exe"
'%WINDIR%\syswow64\edmnzs.exe' 464 "%WINDIR%\SysWOW64\gusasm.exe"
'%WINDIR%\syswow64\cugfmd.exe' 548 "%WINDIR%\SysWOW64\hdfcpo.exe"
'%WINDIR%\syswow64\dvdfji.exe' 456 "%WINDIR%\SysWOW64\qascse.exe"
'%WINDIR%\syswow64\qascse.exe' 452 "%WINDIR%\SysWOW64\brdspu.exe"
'%WINDIR%\syswow64\gusasm.exe' 460 "%WINDIR%\SysWOW64\dvdfji.exe"
'%WINDIR%\syswow64\brdspu.exe' 448 "%WINDIR%\SysWOW64\bbtion.exe"
'%WINDIR%\syswow64\bbtion.exe' 444 "%WINDIR%\SysWOW64\txiqlu.exe"
'%WINDIR%\syswow64\txiqlu.exe' 440 "%WINDIR%\SysWOW64\qrunwd.exe"
'%WINDIR%\syswow64\orfsgs.exe' 432 "%WINDIR%\SysWOW64\ybtena.exe"
'%WINDIR%\syswow64\ybtena.exe' 428 "%WINDIR%\SysWOW64\mspjcf.exe"
'%WINDIR%\syswow64\eoerhn.exe' 420 "%WINDIR%\SysWOW64\usbjmy.exe"
'%WINDIR%\syswow64\usbjmy.exe' 416 "%TEMP%\tmp.exe"
'%WINDIR%\syswow64\aqxezi.exe' 500 "%WINDIR%\SysWOW64\vppjjc.exe"
'%WINDIR%\syswow64\kxkpvg.exe' 504 "%WINDIR%\SysWOW64\aqxezi.exe"
'%WINDIR%\syswow64\watxqi.exe' 728 "%WINDIR%\SysWOW64\ogteih.exe"
'%WINDIR%\syswow64\mspjcf.exe' 424 "%WINDIR%\SysWOW64\eoerhn.exe"
'%WINDIR%\syswow64\dlcasp.exe' 508 "%WINDIR%\SysWOW64\kxkpvg.exe"
'%WINDIR%\syswow64\fpqijm.exe' 528 "%WINDIR%\SysWOW64\fhrtyj.exe"
'%WINDIR%\syswow64\nlqvqb.exe' 516 "%WINDIR%\SysWOW64\sqlnqh.exe"
'%WINDIR%\syswow64\xwbbzf.exe' 532 "%WINDIR%\SysWOW64\fpqijm.exe"
'%WINDIR%\syswow64\izhlkl.exe' 520 "%WINDIR%\SysWOW64\nlqvqb.exe"
'%WINDIR%\syswow64\sqlnqh.exe' 512 "%WINDIR%\SysWOW64\dlcasp.exe"
'%WINDIR%\syswow64\qoztsi.exe' 824 "%WINDIR%\SysWOW64\nehwzm.exe"
'%WINDIR%\syswow64\kqjpym.exe' 540 "%WINDIR%\SysWOW64\srgrzy.exe"
'%WINDIR%\syswow64\fhrtyj.exe' 524 "%WINDIR%\SysWOW64\izhlkl.exe"
'%WINDIR%\syswow64\nehwzm.exe' 820 "%WINDIR%\SysWOW64\ylkdez.exe"
'%WINDIR%\syswow64\srgrzy.exe' 536 "%WINDIR%\SysWOW64\xwbbzf.exe"
'%WINDIR%\syswow64\veokpw.exe' 908 "%WINDIR%\SysWOW64\vlpkbh.exe"' (with hidden window)
'%WINDIR%\syswow64\snzdfh.exe' 920 "%WINDIR%\SysWOW64\kjxpno.exe"' (with hidden window)
'%WINDIR%\syswow64\rvsvtv.exe' 740 "%WINDIR%\SysWOW64\miqiwm.exe"' (with hidden window)
'%WINDIR%\syswow64\xlekki.exe' 924 "%WINDIR%\SysWOW64\snzdfh.exe"' (with hidden window)
'%WINDIR%\syswow64\fyamfu.exe' 848 "%WINDIR%\SysWOW64\xmqmwo.exe"' (with hidden window)
'%WINDIR%\syswow64\vlpkbh.exe' 904 "%WINDIR%\SysWOW64\kqortn.exe"' (with hidden window)
'%WINDIR%\syswow64\ysdyfp.exe' 748 "%WINDIR%\SysWOW64\winjyn.exe"' (with hidden window)
'%WINDIR%\syswow64\sjrdiz.exe' 808 "%WINDIR%\SysWOW64\ltvfcc.exe"' (with hidden window)
'%WINDIR%\syswow64\dfmked.exe' 912 "%WINDIR%\SysWOW64\veokpw.exe"' (with hidden window)
'%WINDIR%\syswow64\jloitw.exe' 752 "%WINDIR%\SysWOW64\ysdyfp.exe"' (with hidden window)
'%WINDIR%\syswow64\miqiwm.exe' 736 "%WINDIR%\SysWOW64\zgjfra.exe"' (with hidden window)
'%WINDIR%\syswow64\nehwzm.exe' 820 "%WINDIR%\SysWOW64\ylkdez.exe"' (with hidden window)
'%WINDIR%\syswow64\qoztsi.exe' 824 "%WINDIR%\SysWOW64\nehwzm.exe"' (with hidden window)
'%WINDIR%\syswow64\kjxpno.exe' 916 "%WINDIR%\SysWOW64\dfmked.exe"' (with hidden window)
'%WINDIR%\syswow64\cqxsek.exe' 928 "%WINDIR%\SysWOW64\xlekki.exe"' (with hidden window)
'%WINDIR%\syswow64\ltvfcc.exe' 804 "%WINDIR%\SysWOW64\gdxfvo.exe"' (with hidden window)
'%WINDIR%\syswow64\qcgyew.exe' 784 "%WINDIR%\SysWOW64\qxvgjd.exe"' (with hidden window)
'%WINDIR%\syswow64\mlqdle.exe' 932 "%WINDIR%\SysWOW64\cqxsek.exe"' (with hidden window)
'%WINDIR%\syswow64\zgjfra.exe' 732 "%WINDIR%\SysWOW64\watxqi.exe"' (with hidden window)
'%WINDIR%\syswow64\rvggck.exe' 936 "%WINDIR%\SysWOW64\mlqdle.exe"' (with hidden window)
'%WINDIR%\syswow64\cblyew.exe' 940 "%WINDIR%\SysWOW64\rvggck.exe"' (with hidden window)
'%WINDIR%\syswow64\watxqi.exe' 728 "%WINDIR%\SysWOW64\ogteih.exe"' (with hidden window)
'%WINDIR%\syswow64\winjyn.exe' 744 "%WINDIR%\SysWOW64\rvsvtv.exe"' (with hidden window)
'%WINDIR%\syswow64\kqortn.exe' 900 "%WINDIR%\SysWOW64\cpprng.exe"' (with hidden window)
'%WINDIR%\syswow64\cpprng.exe' 896 "%WINDIR%\SysWOW64\sqduuh.exe"' (with hidden window)
'%WINDIR%\syswow64\nomjht.exe' 792 "%WINDIR%\SysWOW64\bjubid.exe"' (with hidden window)
'%WINDIR%\syswow64\bjubid.exe' 788 "%WINDIR%\SysWOW64\qcgyew.exe"' (with hidden window)
'%WINDIR%\syswow64\fnyrwc.exe' 852 "%WINDIR%\SysWOW64\fyamfu.exe"' (with hidden window)
'%WINDIR%\syswow64\pyohdn.exe' 860 "%WINDIR%\SysWOW64\kogmni.exe"' (with hidden window)
'%WINDIR%\syswow64\xmqmwo.exe' 844 "%WINDIR%\SysWOW64\nncjgd.exe"' (with hidden window)
'%WINDIR%\syswow64\ogteih.exe' 724 "%WINDIR%\SysWOW64\ezgcmi.exe"' (with hidden window)
'%WINDIR%\syswow64\nncjgd.exe' 840 "%WINDIR%\SysWOW64\ldktoh.exe"' (with hidden window)
'%WINDIR%\syswow64\xwbbzf.exe' 532 "%WINDIR%\SysWOW64\fpqijm.exe"' (with hidden window)
'%WINDIR%\syswow64\izhlkl.exe' 520 "%WINDIR%\SysWOW64\nlqvqb.exe"' (with hidden window)
'%WINDIR%\syswow64\kogmni.exe' 856 "%WINDIR%\SysWOW64\fnyrwc.exe"' (with hidden window)
'%WINDIR%\syswow64\enektu.exe' 764 "%WINDIR%\SysWOW64\alahvh.exe"' (with hidden window)
'%WINDIR%\syswow64\qmqqrs.exe' 832 "%WINDIR%\SysWOW64\tnrebz.exe"' (with hidden window)
'%WINDIR%\syswow64\frhmaz.exe' 884 "%WINDIR%\SysWOW64\xnxzrg.exe"' (with hidden window)
'%WINDIR%\syswow64\gdxfvo.exe' 800 "%WINDIR%\SysWOW64\bqukqf.exe"' (with hidden window)
'%WINDIR%\syswow64\ldbpzr.exe' 768 "%WINDIR%\SysWOW64\enektu.exe"' (with hidden window)
'%WINDIR%\syswow64\xnxzrg.exe' 880 "%WINDIR%\SysWOW64\yryljo.exe"' (with hidden window)
'%WINDIR%\syswow64\yfikwd.exe' 772 "%WINDIR%\SysWOW64\ldbpzr.exe"' (with hidden window)
'%WINDIR%\syswow64\ldktoh.exe' 836 "%WINDIR%\SysWOW64\qmqqrs.exe"' (with hidden window)
'%WINDIR%\syswow64\qqzkuh.exe' 872 "%WINDIR%\SysWOW64\fgknqr.exe"' (with hidden window)
'%WINDIR%\syswow64\dsdybn.exe' 776 "%WINDIR%\SysWOW64\yfikwd.exe"' (with hidden window)
'%WINDIR%\syswow64\fgknqr.exe' 868 "%WINDIR%\SysWOW64\nkkuti.exe"' (with hidden window)
'%WINDIR%\syswow64\bqukqf.exe' 796 "%WINDIR%\SysWOW64\nomjht.exe"' (with hidden window)
'%WINDIR%\syswow64\nkkuti.exe' 864 "%WINDIR%\SysWOW64\pyohdn.exe"' (with hidden window)
'%WINDIR%\syswow64\qxvgjd.exe' 780 "%WINDIR%\SysWOW64\dsdybn.exe"' (with hidden window)
'%WINDIR%\syswow64\nsgmpg.exe' 888 "%WINDIR%\SysWOW64\frhmaz.exe"' (with hidden window)
'%WINDIR%\syswow64\alahvh.exe' 760 "%WINDIR%\SysWOW64\wnvdqj.exe"' (with hidden window)
'%WINDIR%\syswow64\tnrebz.exe' 828 "%WINDIR%\SysWOW64\qoztsi.exe"' (with hidden window)
'%WINDIR%\syswow64\wnvdqj.exe' 756 "%WINDIR%\SysWOW64\jloitw.exe"' (with hidden window)
'%WINDIR%\syswow64\yryljo.exe' 876 "%WINDIR%\SysWOW64\qqzkuh.exe"' (with hidden window)
'%WINDIR%\syswow64\bbpitl.exe' 648 "%WINDIR%\SysWOW64\uxeqys.exe"' (with hidden window)
'%WINDIR%\syswow64\ezgcmi.exe' 720 "%WINDIR%\SysWOW64\tabric.exe"' (with hidden window)
'%WINDIR%\syswow64\nzself.exe' 492 "%WINDIR%\SysWOW64\yixxuk.exe"' (with hidden window)
'%WINDIR%\syswow64\vppjjc.exe' 496 "%WINDIR%\SysWOW64\nzself.exe"' (with hidden window)
'%WINDIR%\syswow64\aqxezi.exe' 500 "%WINDIR%\SysWOW64\vppjjc.exe"' (with hidden window)
'%WINDIR%\syswow64\kxkpvg.exe' 504 "%WINDIR%\SysWOW64\aqxezi.exe"' (with hidden window)
'%WINDIR%\syswow64\dlcasp.exe' 508 "%WINDIR%\SysWOW64\kxkpvg.exe"' (with hidden window)
'%WINDIR%\syswow64\sqlnqh.exe' 512 "%WINDIR%\SysWOW64\dlcasp.exe"' (with hidden window)
'%WINDIR%\syswow64\nlqvqb.exe' 516 "%WINDIR%\SysWOW64\sqlnqh.exe"' (with hidden window)
'%WINDIR%\syswow64\yixxuk.exe' 488 "%WINDIR%\SysWOW64\dauznx.exe"' (with hidden window)
'%WINDIR%\syswow64\sqduuh.exe' 892 "%WINDIR%\SysWOW64\nsgmpg.exe"' (with hidden window)
'%WINDIR%\syswow64\fpqijm.exe' 528 "%WINDIR%\SysWOW64\fhrtyj.exe"' (with hidden window)
'%WINDIR%\syswow64\kjeqda.exe' 556 "%WINDIR%\SysWOW64\szpkkv.exe"' (with hidden window)
'%WINDIR%\syswow64\srgrzy.exe' 536 "%WINDIR%\SysWOW64\xwbbzf.exe"' (with hidden window)
'%WINDIR%\syswow64\hdfcpo.exe' 544 "%WINDIR%\SysWOW64\kqjpym.exe"' (with hidden window)
'%WINDIR%\syswow64\rsxavt.exe' 668 "%WINDIR%\SysWOW64\wqrxdn.exe"' (with hidden window)
'%WINDIR%\syswow64\cugfmd.exe' 548 "%WINDIR%\SysWOW64\hdfcpo.exe"' (with hidden window)
'%WINDIR%\syswow64\szpkkv.exe' 552 "%WINDIR%\SysWOW64\cugfmd.exe"' (with hidden window)
'%WINDIR%\syswow64\fhrtyj.exe' 524 "%WINDIR%\SysWOW64\izhlkl.exe"' (with hidden window)
'%WINDIR%\syswow64\dauznx.exe' 484 "%WINDIR%\SysWOW64\lajcor.exe"' (with hidden window)
'%WINDIR%\syswow64\beheup.exe' 476 "%WINDIR%\SysWOW64\iihlyo.exe"' (with hidden window)
'%TEMP%\tmp.exe' ' (with hidden window)
'%WINDIR%\syswow64\usbjmy.exe' 416 "%TEMP%\tmp.exe"' (with hidden window)
'%WINDIR%\syswow64\eoerhn.exe' 420 "%WINDIR%\SysWOW64\usbjmy.exe"' (with hidden window)
'%WINDIR%\syswow64\mspjcf.exe' 424 "%WINDIR%\SysWOW64\eoerhn.exe"' (with hidden window)
'%WINDIR%\syswow64\ybtena.exe' 428 "%WINDIR%\SysWOW64\mspjcf.exe"' (with hidden window)
'%WINDIR%\syswow64\orfsgs.exe' 432 "%WINDIR%\SysWOW64\ybtena.exe"' (with hidden window)
'%WINDIR%\syswow64\qrunwd.exe' 436 "%WINDIR%\SysWOW64\orfsgs.exe"' (with hidden window)
'%WINDIR%\syswow64\lajcor.exe' 480 "%WINDIR%\SysWOW64\beheup.exe"' (with hidden window)
'%WINDIR%\syswow64\ylkdez.exe' 816 "%WINDIR%\SysWOW64\icpddv.exe"' (with hidden window)
'%WINDIR%\syswow64\bbtion.exe' 444 "%WINDIR%\SysWOW64\txiqlu.exe"' (with hidden window)
'%WINDIR%\syswow64\kzokbs.exe' 660 "%WINDIR%\SysWOW64\mqdcnu.exe"' (with hidden window)
'%WINDIR%\syswow64\brdspu.exe' 448 "%WINDIR%\SysWOW64\bbtion.exe"' (with hidden window)
'%WINDIR%\syswow64\wqrxdn.exe' 664 "%WINDIR%\SysWOW64\kzokbs.exe"' (with hidden window)
'%WINDIR%\syswow64\mqdcnu.exe' 656 "%WINDIR%\SysWOW64\zowhih.exe"' (with hidden window)
'%WINDIR%\syswow64\mfhyqp.exe' 564 "%WINDIR%\SysWOW64\ugearb.exe"' (with hidden window)
'%WINDIR%\syswow64\ugearb.exe' 560 "%WINDIR%\SysWOW64\kjeqda.exe"' (with hidden window)
'%WINDIR%\syswow64\nufrbf.exe' 568 "%WINDIR%\SysWOW64\mfhyqp.exe"' (with hidden window)
'%WINDIR%\syswow64\iihlyo.exe' 472 "%WINDIR%\SysWOW64\gjsqpk.exe"' (with hidden window)
'%WINDIR%\syswow64\edmnzs.exe' 464 "%WINDIR%\SysWOW64\gusasm.exe"' (with hidden window)
'%WINDIR%\syswow64\qascse.exe' 452 "%WINDIR%\SysWOW64\brdspu.exe"' (with hidden window)
'%WINDIR%\syswow64\dvdfji.exe' 456 "%WINDIR%\SysWOW64\qascse.exe"' (with hidden window)
'%WINDIR%\syswow64\gusasm.exe' 460 "%WINDIR%\SysWOW64\dvdfji.exe"' (with hidden window)
'%WINDIR%\syswow64\gjsqpk.exe' 468 "%WINDIR%\SysWOW64\edmnzs.exe"' (with hidden window)
'%WINDIR%\syswow64\txiqlu.exe' 440 "%WINDIR%\SysWOW64\qrunwd.exe"' (with hidden window)
'%WINDIR%\syswow64\expivj.exe' 672 "%WINDIR%\SysWOW64\rsxavt.exe"' (with hidden window)
'%WINDIR%\syswow64\hqqouj.exe' 608 "%WINDIR%\SysWOW64\mzolxu.exe"' (with hidden window)
'%WINDIR%\syswow64\hegwjd.exe' 680 "%WINDIR%\SysWOW64\zwsqeg.exe"' (with hidden window)
'%WINDIR%\syswow64\ebgurt.exe' 576 "%WINDIR%\SysWOW64\hmzlqu.exe"' (with hidden window)
'%WINDIR%\syswow64\zowhih.exe' 652 "%WINDIR%\SysWOW64\bbpitl.exe"' (with hidden window)
'%WINDIR%\syswow64\jajyee.exe' 684 "%WINDIR%\SysWOW64\hegwjd.exe"' (with hidden window)
'%WINDIR%\syswow64\btezbs.exe' 692 "%WINDIR%\SysWOW64\evwuxl.exe"' (with hidden window)
'%WINDIR%\syswow64\jldaqz.exe' 696 "%WINDIR%\SysWOW64\btezbs.exe"' (with hidden window)
'%WINDIR%\syswow64\zfbalu.exe' 700 "%WINDIR%\SysWOW64\jldaqz.exe"' (with hidden window)
'%WINDIR%\syswow64\ripkne.exe' 704 "%WINDIR%\SysWOW64\zfbalu.exe"' (with hidden window)
'%WINDIR%\syswow64\blrigg.exe' 708 "%WINDIR%\SysWOW64\ripkne.exe"' (with hidden window)
'%WINDIR%\syswow64\ongdls.exe' 712 "%WINDIR%\SysWOW64\blrigg.exe"' (with hidden window)
'%WINDIR%\syswow64\tabric.exe' 716 "%WINDIR%\SysWOW64\ongdls.exe"' (with hidden window)
'%WINDIR%\syswow64\evwuxl.exe' 688 "%WINDIR%\SysWOW64\jajyee.exe"' (with hidden window)
'%WINDIR%\syswow64\kfvdvh.exe' 944 "%WINDIR%\SysWOW64\cblyew.exe"' (with hidden window)
'%WINDIR%\syswow64\uxeqys.exe' 644 "%WINDIR%\SysWOW64\xwmdup.exe"' (with hidden window)
'%WINDIR%\syswow64\xwmdup.exe' 640 "%WINDIR%\SysWOW64\zrnqjv.exe"' (with hidden window)
'%WINDIR%\syswow64\hmzlqu.exe' 572 "%WINDIR%\SysWOW64\nufrbf.exe"' (with hidden window)
'%WINDIR%\syswow64\cgnhcn.exe' 580 "%WINDIR%\SysWOW64\ebgurt.exe"' (with hidden window)
'%WINDIR%\syswow64\zwsqeg.exe' 676 "%WINDIR%\SysWOW64\expivj.exe"' (with hidden window)
'%WINDIR%\syswow64\kqjpym.exe' 540 "%WINDIR%\SysWOW64\srgrzy.exe"' (with hidden window)
'%WINDIR%\syswow64\zrnqjv.exe' 636 "%WINDIR%\SysWOW64\uetiql.exe"' (with hidden window)
'%WINDIR%\syswow64\uetiql.exe' 632 "%WINDIR%\SysWOW64\wgnmrk.exe"' (with hidden window)
'%WINDIR%\syswow64\wgnmrk.exe' 628 "%WINDIR%\SysWOW64\sqqrve.exe"' (with hidden window)
'%WINDIR%\syswow64\sqqrve.exe' 624 "%WINDIR%\SysWOW64\hyshfg.exe"' (with hidden window)
'%WINDIR%\syswow64\hyshfg.exe' 620 "%WINDIR%\SysWOW64\mvnzfn.exe"' (with hidden window)
'%WINDIR%\syswow64\icpddv.exe' 812 "%WINDIR%\SysWOW64\sjrdiz.exe"' (with hidden window)
'%WINDIR%\syswow64\mvnzfn.exe' 616 "%WINDIR%\SysWOW64\xyelhn.exe"' (with hidden window)
'%WINDIR%\syswow64\mzolxu.exe' 604 "%WINDIR%\SysWOW64\xcfxzu.exe"' (with hidden window)
'%WINDIR%\syswow64\xcfxzu.exe' 600 "%WINDIR%\SysWOW64\coxink.exe"' (with hidden window)
'%WINDIR%\syswow64\coxink.exe' 596 "%WINDIR%\SysWOW64\mjocok.exe"' (with hidden window)
'%WINDIR%\syswow64\mjocok.exe' 592 "%WINDIR%\SysWOW64\spjmor.exe"' (with hidden window)
'%WINDIR%\syswow64\spjmor.exe' 588 "%WINDIR%\SysWOW64\aajcsq.exe"' (with hidden window)
'%WINDIR%\syswow64\aajcsq.exe' 584 "%WINDIR%\SysWOW64\cgnhcn.exe"' (with hidden window)
'%WINDIR%\syswow64\xyelhn.exe' 612 "%WINDIR%\SysWOW64\hqqouj.exe"' (with hidden window)
'%WINDIR%\syswow64\xtorhf.exe' 948 "%WINDIR%\SysWOW64\kfvdvh.exe"' (with hidden window)

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней