Trojan.DownLoader10.51249

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%HOMEPATH%\Start Menu\Programs\Startup\lsass.exe

Вредоносные функции:

Создает и запускает на исполнение:

'%HOMEPATH%\Start Menu\Programs\Startup\lsass.exe'
'%HOMEPATH%\L43Y\skyy.exe'

Внедряет код в

следующие системные процессы:

<SYSTEM32>\cmd.exe
<SYSTEM32>\cscript.exe
%WINDIR%\Explorer.EXE
<SYSTEM32>\ctfmon.exe

большое количество пользовательских процессов.

Изменения в файловой системе:

Создает следующие файлы:

%HOMEPATH%\L43Y\34005.ICO
%HOMEPATH%\L43Y\Y50489.QIH
%HOMEPATH%\L43Y\50603.OHY
%HOMEPATH%\L43Y\13557.NVX
%HOMEPATH%\L43Y\68479.VXV
%HOMEPATH%\L43Y\T61570.AMJ
%HOMEPATH%\L43Y\Y67736.YMU
%HOMEPATH%\L43Y\C38810.ZUF
%HOMEPATH%\L43Y\X79906.JMW
%HOMEPATH%\L43Y\L72609.YFN
%HOMEPATH%\L43Y\W84592.WIY
%HOMEPATH%\L43Y\W32634.ULF
%HOMEPATH%\L43Y\T21371.IVH
%HOMEPATH%\L43Y\34264.TDB
%HOMEPATH%\L43Y\22094.JDD
%HOMEPATH%\L43Y\X80338.SDX
%HOMEPATH%\L43Y\99509.HSB
%HOMEPATH%\L43Y\Z40437.JWD
%HOMEPATH%\L43Y\45085.DHU
%HOMEPATH%\L43Y\17643.PHM
%HOMEPATH%\L43Y\L18049.XWE
%HOMEPATH%\L43Y\89662.KJE
%HOMEPATH%\L43Y\R47594.AYJ
%HOMEPATH%\L43Y\48614.JNY
%HOMEPATH%\L43Y\77201.GPC
%HOMEPATH%\L43Y\F22626.DSF
%HOMEPATH%\L43Y\B67066.FSQ
%HOMEPATH%\L43Y\17932.YYT
%HOMEPATH%\L43Y\39240.CCI
%HOMEPATH%\L43Y\74648.PIS
%HOMEPATH%\L43Y\74686.PJD
%HOMEPATH%\L43Y\58161.DAM
%HOMEPATH%\L43Y\U96635.KAU
%HOMEPATH%\L43Y\65132.SQN
%HOMEPATH%\L43Y\D82066.IJE
%HOMEPATH%\L43Y\70928.ABS
%HOMEPATH%\L43Y\S89246.GUG
%HOMEPATH%\L43Y\20593.AYG
%HOMEPATH%\L43Y\28900.QDD
%HOMEPATH%\L43Y\81528.PHF
%HOMEPATH%\L43Y\40730.DQO
%HOMEPATH%\L43Y\4062.EXI
%HOMEPATH%\L43Y\A25066.RNM
%HOMEPATH%\L43Y\K68378.KNJ
%HOMEPATH%\L43Y\13067.HUM
%HOMEPATH%\L43Y\C24742.HEG
%HOMEPATH%\L43Y\C73906.FXI
%HOMEPATH%\L43Y\I19906.AXZ
%HOMEPATH%\L43Y\P70277.KUX
%HOMEPATH%\L43Y\83909.JNJ
%HOMEPATH%\L43Y\39429.JCR
%HOMEPATH%\L43Y\40203.YWH
%HOMEPATH%\L43Y\87283.TOZ
%HOMEPATH%\L43Y\V97649.AHG
%HOMEPATH%\L43Y\T80659.XIQ
%HOMEPATH%\L43Y\F39252.ZMM
%HOMEPATH%\L43Y\U71800.HFT
%HOMEPATH%\L43Y\83760.WBT
%HOMEPATH%\L43Y\T31139.KRU
%HOMEPATH%\L43Y\28460.DTN
%HOMEPATH%\L43Y\77612.COC
%HOMEPATH%\L43Y\49207.DUT
%HOMEPATH%\L43Y\40244.MKS
%HOMEPATH%\L43Y\D66417.ZKR
%HOMEPATH%\L43Y\99072.ZSP
%HOMEPATH%\L43Y\S18981.CIW
%HOMEPATH%\L43Y\X66837.KCA
%HOMEPATH%\L43Y\24519.NFY
%HOMEPATH%\L43Y\D49195.LHM
%HOMEPATH%\L43Y\S27879.FKP
%HOMEPATH%\L43Y\M68734.EXM
%HOMEPATH%\L43Y\15145.WPX
%HOMEPATH%\L43Y\E30536.FML
%HOMEPATH%\L43Y\A44399.KLS
%HOMEPATH%\L43Y\U76638.OVA
%HOMEPATH%\L43Y\S63981.ZJD
%HOMEPATH%\L43Y\J63743.JOD
%HOMEPATH%\L43Y\31969.SSU
%HOMEPATH%\L43Y\R49805.EWN
%HOMEPATH%\L43Y\K20104.XYY
%HOMEPATH%\L43Y\35019.USG
%HOMEPATH%\L43Y\G63931.EDV
%HOMEPATH%\L43Y\99621.EFK
%HOMEPATH%\L43Y\L24787.KRI
%HOMEPATH%\L43Y\P13939.KVW
%HOMEPATH%\L43Y\48963.GMN
%HOMEPATH%\L43Y\6944.PSV
%HOMEPATH%\L43Y\72119.AEO
%HOMEPATH%\L43Y\86401.PCL
%HOMEPATH%\L43Y\97283.NML
%HOMEPATH%\L43Y\N24512.NND
%HOMEPATH%\L43Y\L43899.AIR
%HOMEPATH%\L43Y\93689.YAQ
%HOMEPATH%\L43Y\86113.IMJ
%HOMEPATH%\L43Y\3691.OAU
%HOMEPATH%\L43Y\S98660.CNW
%HOMEPATH%\L43Y\H5562.RNC
%HOMEPATH%\L43Y\B55930.OJI
%HOMEPATH%\L43Y\J82750.CYS
%HOMEPATH%\L43Y\M21646.USG
%HOMEPATH%\L43Y\79408.ZBZ
%HOMEPATH%\L43Y\81812.YSQ
%HOMEPATH%\L43Y\48164.YLA
%HOMEPATH%\L43Y\13455.VXL
%HOMEPATH%\L43Y\23847.FQQ
%HOMEPATH%\L43Y\Z65686.HYH
%HOMEPATH%\L43Y\U25407.YFX
%HOMEPATH%\L43Y\M41857.NAW
%HOMEPATH%\L43Y\35368.TBD
%HOMEPATH%\L43Y\68755.ALW
%HOMEPATH%\L43Y\77181.IKX
%HOMEPATH%\L43Y\78264.WLT
%HOMEPATH%\L43Y\E77201.DZZ
%HOMEPATH%\L43Y\84514.XMS
%HOMEPATH%\L43Y\Y7271.OTE
%HOMEPATH%\L43Y\44325.UYZ
%HOMEPATH%\L43Y\31484.BZN
%HOMEPATH%\L43Y\87871.FUH
%HOMEPATH%\L43Y\E23505.NYI
%HOMEPATH%\L43Y\72290.VAS
%HOMEPATH%\L43Y\47948.XBJ
%HOMEPATH%\L43Y\Q94872.IJD
%HOMEPATH%\L43Y\51615.KYA
%HOMEPATH%\L43Y\21151.IBW
%HOMEPATH%\L43Y\M38219.PBW
%HOMEPATH%\L43Y\A26376.WUH
%HOMEPATH%\L43Y\D46671.QJC
%HOMEPATH%\L43Y\72312.PHO
%HOMEPATH%\L43Y\80610.EBA
%HOMEPATH%\L43Y\O44500.VTZ
%HOMEPATH%\L43Y\C6407.UYQ
%HOMEPATH%\L43Y\47123.JBN
%HOMEPATH%\L43Y\K1370.KPG
%HOMEPATH%\L43Y\D17722.ENX
%HOMEPATH%\L43Y\Y97296.SDW
%HOMEPATH%\L43Y\E89353.FUZ
%HOMEPATH%\L43Y\48644.TUR
%HOMEPATH%\L43Y\64438.EPE
%HOMEPATH%\L43Y\Q69623.XKL
%HOMEPATH%\L43Y\P89032.UZF
%HOMEPATH%\L43Y\42626.NQG
%HOMEPATH%\L43Y\Z51667.BHZ
%HOMEPATH%\L43Y\88106.SLC
%HOMEPATH%\L43Y\O75731.KSV
%HOMEPATH%\L43Y\Y13673.RXN
%HOMEPATH%\L43Y\98790.TOY
%HOMEPATH%\L43Y\D72437.DIY
%HOMEPATH%\L43Y\71357.DKN
%HOMEPATH%\L43Y\T84442.GDZ
%HOMEPATH%\L43Y\8202.BRH
%HOMEPATH%\L43Y\33268.OLQ
%HOMEPATH%\L43Y\J42227.VPF
%HOMEPATH%\L43Y\99661.XJC
%HOMEPATH%\L43Y\22563.HHI
%HOMEPATH%\L43Y\H61453.KOU
%HOMEPATH%\L43Y\27882.VFU
%HOMEPATH%\L43Y\E24174.JAM
%HOMEPATH%\L43Y\I37897.ZFM
%HOMEPATH%\L43Y\Y99476.TVV
%HOMEPATH%\L43Y\F69895.DLC
%HOMEPATH%\L43Y\Z23418.MOX
%HOMEPATH%\L43Y\B18468.SZL
%HOMEPATH%\L43Y\I93982.HUB
%HOMEPATH%\L43Y\S73664.IHF
%HOMEPATH%\L43Y\35131.DFM
%HOMEPATH%\L43Y\Q14451.BDJ
%HOMEPATH%\L43Y\99091.HYK
%HOMEPATH%\L43Y\A1353.JOC
%HOMEPATH%\L43Y\O60175.XZU
%HOMEPATH%\L43Y\S35397.NIN
%HOMEPATH%\L43Y\41872.LXS
%HOMEPATH%\L43Y\8581.TPU
%HOMEPATH%\L43Y\X8878.RVS
%HOMEPATH%\L43Y\61293.PRL
%HOMEPATH%\L43Y\28564.MSX
%HOMEPATH%\L43Y\Y54137.AHZ
%HOMEPATH%\L43Y\28153.NZR
%TEMP%\aut2.tmp
%HOMEPATH%\E32D28.BN8
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\index[1].htm
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\index[1].htm
%HOMEPATH%\L43Y\53314.VIZ
%HOMEPATH%\L43Y\C39368.OIG
%TEMP%\aut1.tmp
%HOMEPATH%\L43Y\31038.QMC
%HOMEPATH%\L43Y\I5893.USO
%HOMEPATH%\L43Y\66146.UGP
%HOMEPATH%\L43Y\C84839.ACA
%HOMEPATH%\L43Y\D31006.ZPO
%HOMEPATH%\L43Y\R55784.EQG
%HOMEPATH%\L43Y\E47834.PNJ
%HOMEPATH%\L43Y\O90358.QTE
%HOMEPATH%\L43Y\73277.PQO
%HOMEPATH%\L43Y\B45940.PKM
%HOMEPATH%\L43Y\86399.CIH
%HOMEPATH%\L43Y\33937.ZWE
%HOMEPATH%\L43Y\V36461.VTP
%HOMEPATH%\L43Y\32869.BEP
%HOMEPATH%\L43Y\23994.NJT
%HOMEPATH%\L43Y\59661.RWO
%HOMEPATH%\L43Y\D6251.LLO
%HOMEPATH%\L43Y\M32892.MDT
%HOMEPATH%\L43Y\L43569.XBR
%HOMEPATH%\L43Y\H64356.ZQT
%HOMEPATH%\L43Y\Q61984.NSL
%HOMEPATH%\L43Y\I98759.EIA
%HOMEPATH%\L43Y\24634.YJK
%HOMEPATH%\L43Y\A12520.MIW
%HOMEPATH%\L43Y\M55948.NOX
%HOMEPATH%\L43Y\16509.ADA
%HOMEPATH%\L43Y\F16780.HUZ
%HOMEPATH%\L43Y\79682.AWG
%HOMEPATH%\L43Y\54076.VSI
%HOMEPATH%\L43Y\59823.HSE
%HOMEPATH%\L43Y\T50716.JBB
%HOMEPATH%\L43Y\99692.PET
%HOMEPATH%\L43Y\J16211.AHN
%HOMEPATH%\L43Y\X10241.MRQ
%HOMEPATH%\L43Y\29607.VGN
%HOMEPATH%\L43Y\B75528.JLB
%HOMEPATH%\L43Y\20874.TIQ
%HOMEPATH%\L43Y\49794.BVI
%HOMEPATH%\L43Y\I7873.BEY
%HOMEPATH%\L43Y\9702.CUA
%HOMEPATH%\L43Y\D74123.SZC
%HOMEPATH%\L43Y\J52725.SCB
%HOMEPATH%\L43Y\M94856.DTM
%HOMEPATH%\L43Y\L39069.DAH
%HOMEPATH%\L43Y\C27411.HOB
%HOMEPATH%\L43Y\18527.WIK
%HOMEPATH%\L43Y\90017.KQY
%HOMEPATH%\L43Y\99372.GCG
%HOMEPATH%\L43Y\T5388.SVS
%HOMEPATH%\L43Y\79868.FAY
%HOMEPATH%\L43Y\67237.BOB
%HOMEPATH%\L43Y\17799.KXJ
%HOMEPATH%\L43Y\S44260.IPC
%HOMEPATH%\L43Y\R48951.WNB
%HOMEPATH%\L43Y\1561.BGT
%HOMEPATH%\L43Y\33328.PYV
%HOMEPATH%\L43Y\5885.YSH
%HOMEPATH%\L43Y\K65107.NPD
%HOMEPATH%\L43Y\99418.JGE
%HOMEPATH%\L43Y\O96940.JPX
%HOMEPATH%\L43Y\D93208.IVU
%HOMEPATH%\L43Y\I1393.JSB
%HOMEPATH%\L43Y\T31037.GMP
%HOMEPATH%\L43Y\10611.BRH
%HOMEPATH%\L43Y\I59962.SBZ
%HOMEPATH%\L43Y\94587.ICA
%HOMEPATH%\L43Y\74470.UYM
%HOMEPATH%\L43Y\3882.VMZ
%HOMEPATH%\L43Y\K64842.DHH
%HOMEPATH%\L43Y\71662.OTJ
%HOMEPATH%\L43Y\37020.JPG
%HOMEPATH%\L43Y\63790.PUI
%HOMEPATH%\L43Y\P16191.XTK
%HOMEPATH%\L43Y\85484.EEM
%HOMEPATH%\L43Y\I32819.NFH
%HOMEPATH%\L43Y\86961.CTK
%HOMEPATH%\L43Y\45817.OZW
%HOMEPATH%\L43Y\16000.PPO
%HOMEPATH%\L43Y\Q87213.KJD
%HOMEPATH%\L43Y\K18034.JEJ
%HOMEPATH%\L43Y\D2466.NAK
%HOMEPATH%\L43Y\62279.GWW
%HOMEPATH%\L43Y\Q67441.XED
%HOMEPATH%\L43Y\E49093.KSV
%HOMEPATH%\L43Y\34271.GCV
%HOMEPATH%\L43Y\84819.HNV
%HOMEPATH%\L43Y\P65160.CEX
%HOMEPATH%\L43Y\87175.IUA
%HOMEPATH%\L43Y\U77896.LMZ
%HOMEPATH%\L43Y\K98356.BIG
%HOMEPATH%\L43Y\K70638.FUE
%HOMEPATH%\L43Y\8068.WJN
%HOMEPATH%\L43Y\85912.JPY
%HOMEPATH%\L43Y\N42907.NWR
%HOMEPATH%\L43Y\68203.DVA
%HOMEPATH%\L43Y\I66152.BNZ
%HOMEPATH%\L43Y\W8377.PJU
%HOMEPATH%\L43Y\58527.MFQ
%HOMEPATH%\L43Y\75356.FXJ
%HOMEPATH%\L43Y\F99206.FZO
%HOMEPATH%\L43Y\T29751.NSW
%HOMEPATH%\L43Y\U29464.GLO
%HOMEPATH%\L43Y\N67940.TBX
%HOMEPATH%\L43Y\99894.QIZ
%HOMEPATH%\L43Y\L51809.HWY
%HOMEPATH%\L43Y\V73194.PLC
%HOMEPATH%\L43Y\U93531.UDJ
%HOMEPATH%\L43Y\38122.ZDB
%HOMEPATH%\L43Y\70314.IHU
%HOMEPATH%\L43Y\48410.DWJ
%HOMEPATH%\L43Y\Z99490.MOU
%HOMEPATH%\L43Y\99152.ZVT
%HOMEPATH%\L43Y\S31790.UGS
%HOMEPATH%\L43Y\X87889.XDR
%HOMEPATH%\L43Y\P61578.FBD
%HOMEPATH%\L43Y\Z84798.MJR
%HOMEPATH%\L43Y\19275.HEH
%HOMEPATH%\L43Y\H95464.MHF
%HOMEPATH%\L43Y\76069.MYJ
%HOMEPATH%\L43Y\F4773.QGV
%HOMEPATH%\L43Y\10269.DTT
%HOMEPATH%\L43Y\I57935.GRK
%HOMEPATH%\L43Y\17260.VAN
%HOMEPATH%\L43Y\Z27485.YEC
%HOMEPATH%\L43Y\B20233.KTB
%HOMEPATH%\L43Y\Z82986.HVM
%HOMEPATH%\L43Y\65482.SEZ
%HOMEPATH%\L43Y\19619.EDY
%HOMEPATH%\L43Y\54132.GRC
%HOMEPATH%\L43Y\Q87579.RDN
%HOMEPATH%\L43Y\51960.CMP
%HOMEPATH%\L43Y\W95789.ZNV
%HOMEPATH%\L43Y\U73422.IYU
%HOMEPATH%\L43Y\A31667.QNI
%HOMEPATH%\L43Y\90646.VVR
%HOMEPATH%\L43Y\40203.VUB
%HOMEPATH%\L43Y\45819.YAM
%HOMEPATH%\L43Y\S61782.FQX
%HOMEPATH%\L43Y\F13223.PRJ
%HOMEPATH%\L43Y\O67896.TBU
%HOMEPATH%\L43Y\E43452.VYT
%HOMEPATH%\L43Y\74692.TDC
%HOMEPATH%\L43Y\I30306.MED
%HOMEPATH%\L43Y\B96057.UCL
%HOMEPATH%\L43Y\17276.DCK
%HOMEPATH%\L43Y\3732.RCV
%HOMEPATH%\L43Y\S78722.PSP
%HOMEPATH%\L43Y\P9392.HAT
%HOMEPATH%\L43Y\37582.OLV
%HOMEPATH%\L43Y\60534.YRM
%HOMEPATH%\L43Y\92053.WGH
%HOMEPATH%\L43Y\R17560.ZYC
%HOMEPATH%\L43Y\51296.LJJ
%HOMEPATH%\L43Y\X47202.LHU
%HOMEPATH%\L43Y\91418.QDP
%HOMEPATH%\L43Y\30107.KBJ
%HOMEPATH%\L43Y\66987.SEI
%HOMEPATH%\L43Y\48154.FIJ
%HOMEPATH%\L43Y\X64956.LFJ
%HOMEPATH%\L43Y\K72057.RZV
%HOMEPATH%\L43Y\S59284.BIF
%HOMEPATH%\L43Y\48893.YZY
%HOMEPATH%\L43Y\W30819.XBI
%HOMEPATH%\L43Y\I11339.NJB
%HOMEPATH%\L43Y\43731.UVM
%HOMEPATH%\L43Y\P30696.QKF
%HOMEPATH%\L43Y\B76176.LSB
%HOMEPATH%\L43Y\26019.PKC
%HOMEPATH%\L43Y\43629.KOT
%HOMEPATH%\L43Y\90012.CBM
%HOMEPATH%\L43Y\F88401.ENY
%HOMEPATH%\L43Y\90509.MWC
%HOMEPATH%\L43Y\S92527.HXZ
%HOMEPATH%\L43Y\N11183.JIO
%HOMEPATH%\L43Y\skyy.exe
%HOMEPATH%\L43Y\66324.BIU
%HOMEPATH%\L43Y\H71389.EIC
%HOMEPATH%\L43Y\I44396.KXQ
%HOMEPATH%\L43Y\H21903.YGN
%HOMEPATH%\L43Y\W40524.DNI
%HOMEPATH%\L43Y\S8160.EZT
%HOMEPATH%\L43Y\8543.ZVK
%HOMEPATH%\L43Y\F88002.YIP
%HOMEPATH%\L43Y\1765.KJP
%HOMEPATH%\L43Y\61904.NKS
%HOMEPATH%\L43Y\35547.FID
%HOMEPATH%\L43Y\24803.SEL
%HOMEPATH%\L43Y\98411.BIN
%HOMEPATH%\L43Y\5254.UHW
%HOMEPATH%\L43Y\97711.NWI
%HOMEPATH%\L43Y\M64983.KUV
%HOMEPATH%\L43Y\10892.SIG
%HOMEPATH%\L43Y\E7379.CVH
%HOMEPATH%\L43Y\K70823.JIC
%HOMEPATH%\L43Y\Y97895.YFT
%HOMEPATH%\L43Y\Z27958.WXM
%HOMEPATH%\L43Y\G24158.GWC
%HOMEPATH%\L43Y\22527.NEP
%HOMEPATH%\L43Y\L99585.EGA
%HOMEPATH%\L43Y\48187.ZBP
%HOMEPATH%\L43Y\99253.JOV
%HOMEPATH%\L43Y\35194.EJM
%HOMEPATH%\L43Y\V34715.VSU
%HOMEPATH%\L43Y\I31634.XTR
%HOMEPATH%\L43Y\H67157.EDE
%HOMEPATH%\L43Y\28039.OVK
%HOMEPATH%\L43Y\45980.JNT
%HOMEPATH%\L43Y\16061.WSQ
%HOMEPATH%\L43Y\19723.BPT
%HOMEPATH%\L43Y\K60266.HPV
%HOMEPATH%\L43Y\A29718.UMH
%HOMEPATH%\L43Y\95850.RUJ
%HOMEPATH%\L43Y\D99879.KQS
%HOMEPATH%\L43Y\85116.MVA
%HOMEPATH%\L43Y\U96072.FJF
%HOMEPATH%\L43Y\Z95933.DQD
%HOMEPATH%\L43Y\38525.OUL
%HOMEPATH%\L43Y\U47200.CWS
%HOMEPATH%\L43Y\Y4194.CXB
%HOMEPATH%\L43Y\L90347.RXC
%HOMEPATH%\L43Y\A69995.ZJG
%HOMEPATH%\L43Y\Y14150.MCD
%HOMEPATH%\L43Y\23147.PRD
%HOMEPATH%\L43Y\27354.NCW
%HOMEPATH%\L43Y\84800.AYN
%HOMEPATH%\L43Y\59210.QYE
%HOMEPATH%\L43Y\V63748.XQA
%HOMEPATH%\L43Y\R32054.FGN
%HOMEPATH%\L43Y\34068.IFE
%HOMEPATH%\L43Y\X80215.VXA
%HOMEPATH%\L43Y\Y37473.AEZ
%HOMEPATH%\L43Y\30261.PCI
%HOMEPATH%\L43Y\68787.JJN
%HOMEPATH%\L43Y\89588.KPS
%HOMEPATH%\L43Y\Q27200.UZW
%HOMEPATH%\L43Y\36306.SYI
%HOMEPATH%\L43Y\58924.PYP
%HOMEPATH%\L43Y\40568.BDQ
%HOMEPATH%\L43Y\B8710.MUN
%HOMEPATH%\L43Y\10278.LRY
%HOMEPATH%\L43Y\87872.XXE
%HOMEPATH%\L43Y\64324.IUY
%HOMEPATH%\L43Y\17755.IWG
%HOMEPATH%\L43Y\20753.WOB
%HOMEPATH%\L43Y\17546.WOA
%HOMEPATH%\L43Y\35606.RKZ
%HOMEPATH%\L43Y\F29354.NCW
%HOMEPATH%\L43Y\M15938.WQD
%HOMEPATH%\L43Y\78116.JID
%HOMEPATH%\L43Y\Y95109.KAS
%HOMEPATH%\L43Y\B43694.JER
%HOMEPATH%\L43Y\U23703.UWU
%HOMEPATH%\L43Y\C8794.XSQ
%HOMEPATH%\L43Y\34780.LGV
%HOMEPATH%\L43Y\51336.NFN
%HOMEPATH%\L43Y\69045.HRA
%HOMEPATH%\L43Y\V54301.RPZ
%HOMEPATH%\L43Y\K16061.QSX
%HOMEPATH%\L43Y\24388.YTZ
%HOMEPATH%\L43Y\24928.SXJ
%HOMEPATH%\L43Y\Z59934.MJR
%HOMEPATH%\L43Y\20402.DRN
%HOMEPATH%\L43Y\J7927.RYV
%HOMEPATH%\L43Y\Z91519.QFT
%HOMEPATH%\L43Y\98272.XVU
%HOMEPATH%\L43Y\54392.LBZ
%HOMEPATH%\L43Y\51118.WFF
%HOMEPATH%\L43Y\P68173.NTG
%HOMEPATH%\L43Y\21306.XNR
%HOMEPATH%\L43Y\J56433.COI
%HOMEPATH%\L43Y\75613.LYH
%HOMEPATH%\L43Y\B73023.EMQ
%HOMEPATH%\L43Y\77413.ALP
%HOMEPATH%\L43Y\B18050.BUG
%HOMEPATH%\L43Y\61360.IPR
%HOMEPATH%\L43Y\8244.KBJ
%HOMEPATH%\L43Y\67237.PUT
%HOMEPATH%\L43Y\G86405.OYT
%HOMEPATH%\L43Y\88233.MPU
%HOMEPATH%\L43Y\J9585.KQJ
%HOMEPATH%\L43Y\H82470.SGS
%HOMEPATH%\L43Y\64029.QXD
%HOMEPATH%\L43Y\G80303.UTW
%HOMEPATH%\L43Y\87255.TDI
%HOMEPATH%\L43Y\N31975.YGN
%HOMEPATH%\L43Y\U69799.QNF
%HOMEPATH%\L43Y\48587.SLZ
%HOMEPATH%\L43Y\G61403.DWD
%HOMEPATH%\L43Y\W82253.WFM
%HOMEPATH%\L43Y\X44301.BHQ
%HOMEPATH%\L43Y\30069.WFM
%HOMEPATH%\L43Y\59300.RVL
%HOMEPATH%\L43Y\R52614.LQL
%HOMEPATH%\L43Y\I14442.YZZ
%HOMEPATH%\L43Y\85383.CPD
%HOMEPATH%\L43Y\T37164.VFI
%HOMEPATH%\L43Y\N34093.WUQ
%HOMEPATH%\L43Y\72139.KRW
%HOMEPATH%\L43Y\49417.ETP
%HOMEPATH%\L43Y\J17896.WYU
%HOMEPATH%\L43Y\H97874.ZTO
%HOMEPATH%\L43Y\K4645.BKT
%HOMEPATH%\L43Y\F50412.LNY
%HOMEPATH%\L43Y\37690.WOE
%HOMEPATH%\L43Y\E84269.ZNH
%HOMEPATH%\L43Y\72328.CVA
%HOMEPATH%\L43Y\U26877.ZAN
%HOMEPATH%\L43Y\Z98425.EEM
%HOMEPATH%\L43Y\98576.WHF
%HOMEPATH%\L43Y\26354.EII
%HOMEPATH%\L43Y\44784.YST
%HOMEPATH%\L43Y\O92826.SLT
%HOMEPATH%\L43Y\I46302.SUV
%HOMEPATH%\L43Y\Y19602.NGP
%HOMEPATH%\L43Y\63963.DIY
%HOMEPATH%\L43Y\N64180.ZWJ
%HOMEPATH%\L43Y\U86920.BPF
%HOMEPATH%\L43Y\53123.WAM
%HOMEPATH%\L43Y\L95139.RYG
%HOMEPATH%\L43Y\I97209.LDA
%HOMEPATH%\L43Y\J9910.QMG
%HOMEPATH%\L43Y\S33827.DUX
%HOMEPATH%\L43Y\51095.RQO
%HOMEPATH%\L43Y\W9039.IIX
%HOMEPATH%\L43Y\M66518.EVN
%HOMEPATH%\L43Y\G72749.OUC
%HOMEPATH%\L43Y\B4915.ZMP
%HOMEPATH%\L43Y\8767.WIF
%HOMEPATH%\L43Y\13100.BIE
%HOMEPATH%\L43Y\68417.IGR
%HOMEPATH%\L43Y\69679.ZOA
%HOMEPATH%\L43Y\W97504.PMH
%HOMEPATH%\L43Y\Z8221.ZYV
%HOMEPATH%\L43Y\E87265.RLK
%HOMEPATH%\L43Y\I3386.RVL
%HOMEPATH%\L43Y\S95492.OLO
%HOMEPATH%\L43Y\G47358.DMJ
%HOMEPATH%\L43Y\18564.QUJ
%HOMEPATH%\L43Y\53008.RWK
%HOMEPATH%\L43Y\85527.DZO
%HOMEPATH%\L43Y\Q71571.SRD
%HOMEPATH%\L43Y\Y48339.PBJ
%HOMEPATH%\L43Y\45785.YQJ
%HOMEPATH%\L43Y\93890.TEH
%HOMEPATH%\L43Y\53408.QHE
%HOMEPATH%\L43Y\25606.CZR
%HOMEPATH%\L43Y\21024.PWF
%HOMEPATH%\L43Y\I4835.CZK
%HOMEPATH%\L43Y\F4196.GWX
%HOMEPATH%\L43Y\R96837.IVD
%HOMEPATH%\L43Y\60171.MFX
%HOMEPATH%\L43Y\34325.DTM
%HOMEPATH%\L43Y\24667.FNU
%HOMEPATH%\L43Y\73610.CFL

Присваивает атрибут 'скрытый' для следующих файлов:

%HOMEPATH%\E32D28.BN8

Удаляет следующие файлы:

%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\index[1].htm
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\index[1].htm
%TEMP%\aut2.tmp
%TEMP%\aut1.tmp
%HOMEPATH%\E32D28.BN8

Сетевая активность:

Подключается к:

'ne####nupdete.com':80

UDP:

DNS ASK ne####nupdete.com

Другое:

Ищет следующие окна:

ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'EDIT' WindowName: '(null)'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней