Trojan.DownLoader10.3039

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'HROCC' = '%HOMEPATH%\HROCC\start.vbs'

Malicious functions:

Creates and executes the following:

'%HOMEPATH%\HROCC\Autoit3803025.exe' RYSTKIXW.dat
'%HOMEPATH%\HROCC\Autoit3803025.exe' 110319.dat
'%HOMEPATH%\HROCC\rpc412_setup.exe'

Executes the following:

'%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
'<SYSTEM32>\wscript.exe' "%HOMEPATH%\HROCC\run.vbs"

Injects code into

the following system processes:

%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

Modifies file system :

Creates the following files:

%HOMEPATH%\HROCC\10472.IXU
%HOMEPATH%\HROCC\98816.JUO
%HOMEPATH%\HROCC\X79842.TIH
%HOMEPATH%\HROCC\B21768.GGW
%HOMEPATH%\HROCC\52009.YNH
%HOMEPATH%\HROCC\F85500.KKX
%HOMEPATH%\HROCC\74679.QNR
%HOMEPATH%\HROCC\7092.XQY
%HOMEPATH%\HROCC\Z18877.CHM
%HOMEPATH%\HROCC\78614.BHZ
%HOMEPATH%\HROCC\70001.PUS
%HOMEPATH%\HROCC\89547.QPY
%HOMEPATH%\HROCC\F64635.XPF
%HOMEPATH%\HROCC\X39969.COZ
%HOMEPATH%\HROCC\G9441.BWH
%HOMEPATH%\HROCC\4134.WLL
%HOMEPATH%\HROCC\C14280.QUQ
%HOMEPATH%\HROCC\10328.EZG
%HOMEPATH%\HROCC\32728.ONM
%HOMEPATH%\HROCC\78184.WFS
%HOMEPATH%\HROCC\L56002.EFT
%HOMEPATH%\HROCC\W2765.JWR
%HOMEPATH%\HROCC\P8758.LKX
%HOMEPATH%\HROCC\56628.GSS
%HOMEPATH%\HROCC\A60037.MRX
%HOMEPATH%\HROCC\65965.MVH
%HOMEPATH%\HROCC\75108.JZK
%HOMEPATH%\HROCC\19331.WOE
%HOMEPATH%\HROCC\X40105.OFB
%HOMEPATH%\HROCC\Z62661.CGZ
%HOMEPATH%\HROCC\41328.UUY
%HOMEPATH%\HROCC\P68765.AGO
%HOMEPATH%\HROCC\8175.PKA
%HOMEPATH%\HROCC\63453.SOB
%HOMEPATH%\HROCC\48296.KBJ
%HOMEPATH%\HROCC\I66114.ZBG
%HOMEPATH%\HROCC\51702.DGA
%HOMEPATH%\HROCC\X10803.ZES
%HOMEPATH%\HROCC\J57257.XQF
%HOMEPATH%\HROCC\M37079.WXD
%HOMEPATH%\HROCC\8164.MKZ
%HOMEPATH%\HROCC\26559.FDC
%HOMEPATH%\HROCC\Q26021.GGZ
%HOMEPATH%\HROCC\69635.CAN
%HOMEPATH%\HROCC\22073.UCR
%HOMEPATH%\HROCC\7003.CWE
%HOMEPATH%\HROCC\39943.UBV
%HOMEPATH%\HROCC\7381.UVM
%HOMEPATH%\HROCC\V97032.YFG
%HOMEPATH%\HROCC\49632.LHY
%HOMEPATH%\HROCC\93779.ORD
%HOMEPATH%\HROCC\38226.AJC
%HOMEPATH%\HROCC\30472.VXM
%HOMEPATH%\HROCC\39940.SLR
%HOMEPATH%\HROCC\76790.JUZ
%HOMEPATH%\HROCC\50533.OEN
%HOMEPATH%\HROCC\O28442.MLK
%HOMEPATH%\HROCC\A35292.YYQ
%HOMEPATH%\HROCC\65872.XZZ
%HOMEPATH%\HROCC\B64749.LDU
%HOMEPATH%\HROCC\45039.KQW
%HOMEPATH%\HROCC\J19907.OYC
%HOMEPATH%\HROCC\T57033.EQH
%HOMEPATH%\HROCC\55151.MCF
%HOMEPATH%\HROCC\25916.UXT
%HOMEPATH%\HROCC\64428.RFC
%HOMEPATH%\HROCC\Q71590.GUQ
%HOMEPATH%\HROCC\60467.RNU
%HOMEPATH%\HROCC\12054.TNS
%HOMEPATH%\HROCC\A14056.FHS
%HOMEPATH%\HROCC\X91760.KXJ
%HOMEPATH%\HROCC\95119.UBF
%HOMEPATH%\HROCC\65705.MJI
%HOMEPATH%\HROCC\49809.ZUE
%HOMEPATH%\HROCC\17782.QFA
%HOMEPATH%\HROCC\I58390.KHH
%HOMEPATH%\HROCC\64068.XXW
%HOMEPATH%\HROCC\60853.XEE
%HOMEPATH%\HROCC\58707.ZGW
%HOMEPATH%\HROCC\60511.GHB
%HOMEPATH%\HROCC\O18992.ZOL
%HOMEPATH%\HROCC\68215.QFC
%HOMEPATH%\HROCC\73696.TIJ
%HOMEPATH%\HROCC\61446.RWM
%HOMEPATH%\HROCC\40243.TCZ
%HOMEPATH%\HROCC\16014.KNH
%HOMEPATH%\HROCC\99578.TBG
%HOMEPATH%\HROCC\38873.ETO
%HOMEPATH%\HROCC\N57237.VKH
%HOMEPATH%\HROCC\97215.XQM
%HOMEPATH%\HROCC\47085.BCF
%HOMEPATH%\HROCC\F80621.ZZN
%HOMEPATH%\HROCC\K72128.UDS
%HOMEPATH%\HROCC\34895.IGE
%HOMEPATH%\HROCC\66104.GZO
%HOMEPATH%\HROCC\75993.RZL
%HOMEPATH%\HROCC\Z35609.VVQ
%HOMEPATH%\HROCC\58151.AUK
%HOMEPATH%\HROCC\Z84778.APK
%HOMEPATH%\HROCC\Q45035.JIM
%HOMEPATH%\HROCC\K37053.RRI
%HOMEPATH%\HROCC\96690.XMZ
%HOMEPATH%\HROCC\F47569.PJC
%HOMEPATH%\HROCC\A92611.HBC
%HOMEPATH%\HROCC\30968.FNN
%HOMEPATH%\HROCC\R19726.NTN
%HOMEPATH%\HROCC\S21416.RWH
%HOMEPATH%\HROCC\X74544.PYO
%HOMEPATH%\HROCC\P24383.QKA
%HOMEPATH%\HROCC\77603.DSD
%HOMEPATH%\HROCC\35946.HCQ
%HOMEPATH%\HROCC\X96345.LYA
%HOMEPATH%\HROCC\F59151.FOW
%HOMEPATH%\HROCC\9256.MFE
%HOMEPATH%\HROCC\A90822.BOG
%HOMEPATH%\HROCC\30442.AXF
%HOMEPATH%\HROCC\4343.TIT
%HOMEPATH%\HROCC\S56697.JCM
%HOMEPATH%\HROCC\80468.URE
%HOMEPATH%\HROCC\L50726.SYQ
%HOMEPATH%\HROCC\49712.CQP
%HOMEPATH%\HROCC\65335.XZJ
%HOMEPATH%\HROCC\W22900.DKP
%HOMEPATH%\HROCC\86999.JFF
%HOMEPATH%\HROCC\30122.OXI
%HOMEPATH%\HROCC\8098.VYR
%HOMEPATH%\HROCC\55745.KWE
%HOMEPATH%\HROCC\K84653.CSA
%HOMEPATH%\HROCC\91886.AJL
%HOMEPATH%\HROCC\U55280.ZPW
%HOMEPATH%\HROCC\16516.RTL
%HOMEPATH%\HROCC\26913.YAC
%HOMEPATH%\HROCC\8253.DIY
%HOMEPATH%\HROCC\A59189.GAB
%HOMEPATH%\HROCC\K29957.AKR
%HOMEPATH%\HROCC\V64214.LOJ
%HOMEPATH%\HROCC\82390.EOW
%HOMEPATH%\HROCC\P50684.IFI
%HOMEPATH%\HROCC\K41513.SMI
%HOMEPATH%\HROCC\W4664.PZW
%HOMEPATH%\HROCC\96428.FJN
%HOMEPATH%\HROCC\H69984.KMX
%HOMEPATH%\HROCC\Z55293.XVT
%HOMEPATH%\HROCC\57156.PDP
%HOMEPATH%\HROCC\W76269.ZED
%HOMEPATH%\HROCC\V19520.KVA
%HOMEPATH%\HROCC\76250.UZU
%HOMEPATH%\HROCC\48648.EWA
%HOMEPATH%\HROCC\D38405.XIE
%HOMEPATH%\HROCC\C94797.GBT
%HOMEPATH%\HROCC\29406.UXB
%HOMEPATH%\HROCC\16468.QVL
%HOMEPATH%\HROCC\A38370.EYG
%HOMEPATH%\HROCC\79188.HZV
%HOMEPATH%\HROCC\M32946.SLS
%HOMEPATH%\HROCC\U35920.UDK
%HOMEPATH%\HROCC\D48998.GMY
%HOMEPATH%\HROCC\U74708.UEE
%HOMEPATH%\HROCC\N54071.JPD
%HOMEPATH%\HROCC\73948.DZZ
%HOMEPATH%\HROCC\W17357.MQV
%HOMEPATH%\HROCC\Z81124.ZOT
%HOMEPATH%\HROCC\K78308.ZCI
%HOMEPATH%\HROCC\17293.PVU
%HOMEPATH%\HROCC\Y92793.NXX
%HOMEPATH%\HROCC\J32505.VSI
%HOMEPATH%\HROCC\D59283.IXD
%HOMEPATH%\HROCC\4604.YUE
%HOMEPATH%\HROCC\78068.FYG
%HOMEPATH%\HROCC\N54154.AJQ
%HOMEPATH%\HROCC\E38344.JXL
%HOMEPATH%\HROCC\5658.VTE
%HOMEPATH%\HROCC\16225.ZLT
%HOMEPATH%\HROCC\12266.RVO
%HOMEPATH%\HROCC\46908.VVP
%HOMEPATH%\HROCC\Q45256.IKU
%HOMEPATH%\HROCC\N36890.BKT
%HOMEPATH%\HROCC\D66908.QHO
%HOMEPATH%\HROCC\I21920.EOH
%HOMEPATH%\HROCC\T1387.BHZ
%HOMEPATH%\HROCC\43273.WLO
%HOMEPATH%\HROCC\K88448.LOP
%HOMEPATH%\HROCC\H74980.PJR
%HOMEPATH%\HROCC\D7932.IYR
%TEMP%\nsf3.tmp\modern-wizard.bmp
%TEMP%\nsp2.tmp
%TEMP%\nsf3.tmp\Banner.dll
%TEMP%\nsf3.tmp\System.dll
%HOMEPATH%\HROCC\19637.EII
%HOMEPATH%\HROCC\G92945.HWS
%HOMEPATH%\HROCC\87204.KHJ
%HOMEPATH%\HROCC\86676.ZEN
%HOMEPATH%\HROCC\52275.LQW
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\BiTool[1].dll
%HOMEPATH%\HROCC\start.vbs
%TEMP%\nsf3.tmp\nsDialogs.dll
%TEMP%\bitool.xxx
%HOMEPATH%\HROCC\start.cmd
%TEMP%\nsf3.tmp\md5dll.dll
%TEMP%\nsf3.tmp\Math.dll
%HOMEPATH%\HROCC\RYSTKIXW.dat
%TEMP%\nsf3.tmp\inetc.dll
%HOMEPATH%\HROCC\S87601.WLG
%HOMEPATH%\HROCC\Q66616.WSV
%HOMEPATH%\HROCC\T13902.TUC
%HOMEPATH%\HROCC\O86710.AMN
%HOMEPATH%\HROCC\1155.LGE
%HOMEPATH%\HROCC\W74825.BLI
%HOMEPATH%\HROCC\96007.UZW
%HOMEPATH%\HROCC\C80166.IRL
%HOMEPATH%\HROCC\48775.TJO
%HOMEPATH%\HROCC\D8799.PRL
%HOMEPATH%\HROCC\67871.OUO
%HOMEPATH%\HROCC\54521.RAF
%HOMEPATH%\HROCC\68702.VBY
%HOMEPATH%\HROCC\I42019.OWO
%HOMEPATH%\HROCC\83221.CDK
%HOMEPATH%\HROCC\P45810.HUV
%HOMEPATH%\HROCC\J74582.VAS
%HOMEPATH%\HROCC\Q62674.IME
%HOMEPATH%\HROCC\I18344.YOM
%HOMEPATH%\HROCC\C59336.AOO
%HOMEPATH%\HROCC\M35225.XPT
%HOMEPATH%\HROCC\Y88591.GUE
%HOMEPATH%\HROCC\I92097.XRQ
%HOMEPATH%\HROCC\10349.WLJ
%HOMEPATH%\HROCC\47033.PNA
%HOMEPATH%\HROCC\31416.ZDF
%HOMEPATH%\HROCC\97168.NMU
%HOMEPATH%\HROCC\33204.GGA
%HOMEPATH%\HROCC\W85310.KEI
%HOMEPATH%\HROCC\L40097.YVX
%HOMEPATH%\HROCC\78866.PGQ
%HOMEPATH%\HROCC\U96093.LHJ
%HOMEPATH%\HROCC\54505.PWS
%HOMEPATH%\HROCC\I75738.AND
%HOMEPATH%\HROCC\J5689.PTO
%HOMEPATH%\HROCC\70468.XOY
%HOMEPATH%\HROCC\13551.TOM
%HOMEPATH%\HROCC\N88602.SUR
%HOMEPATH%\HROCC\90437.NTL
%HOMEPATH%\HROCC\41983.KHL
%HOMEPATH%\HROCC\55246.YDB
%HOMEPATH%\HROCC\J68391.MBD
%HOMEPATH%\HROCC\61753.QAP
%HOMEPATH%\HROCC\U54748.IMM
%HOMEPATH%\HROCC\H79712.XBK
%HOMEPATH%\HROCC\K46896.KCD
%HOMEPATH%\HROCC\28427.EUY
%HOMEPATH%\HROCC\B32669.QYK
%HOMEPATH%\HROCC\O51540.KYH
%HOMEPATH%\HROCC\P76802.XRJ
%HOMEPATH%\HROCC\Y78226.CPD
%HOMEPATH%\HROCC\W58615.TBQ
%HOMEPATH%\HROCC\W61135.BAL
%HOMEPATH%\HROCC\J32505.OCV
%HOMEPATH%\HROCC\85679.XOC
%HOMEPATH%\HROCC\W68814.ILJ
%HOMEPATH%\HROCC\68403.UWL
%HOMEPATH%\HROCC\U15791.TDF
%HOMEPATH%\HROCC\D20837.APB
%HOMEPATH%\HROCC\L90958.PME
%HOMEPATH%\HROCC\68466.RLC
%HOMEPATH%\HROCC\Z41443.FEB
%HOMEPATH%\HROCC\T84602.BRF
%HOMEPATH%\HROCC\D66269.QIE
%HOMEPATH%\HROCC\13830.AQM
%HOMEPATH%\HROCC\N50646.UUB
%HOMEPATH%\HROCC\81128.OES
%HOMEPATH%\HROCC\43835.UDQ
%HOMEPATH%\HROCC\71803.WRH
%HOMEPATH%\HROCC\55613.SLH
%HOMEPATH%\HROCC\O98016.LVN
%HOMEPATH%\HROCC\F32868.FAX
%HOMEPATH%\HROCC\S7145.KOZ
%HOMEPATH%\HROCC\O97137.RCS
%HOMEPATH%\HROCC\63489.ODZ
%HOMEPATH%\HROCC\C7449.AWB
%HOMEPATH%\HROCC\Z82596.YOX
%HOMEPATH%\HROCC\54023.HPA
%HOMEPATH%\HROCC\21335.QSQ
%HOMEPATH%\HROCC\14235.HKX
%HOMEPATH%\HROCC\U11216.XSF
%HOMEPATH%\HROCC\30445.ANC
%HOMEPATH%\HROCC\48506.RGV
%HOMEPATH%\HROCC\88255.CHQ
%HOMEPATH%\HROCC\64262.BEJ
%HOMEPATH%\HROCC\60994.YDT
%HOMEPATH%\HROCC\9728.EOJ
%HOMEPATH%\HROCC\88465.THJ
%HOMEPATH%\HROCC\B67731.QLH
%HOMEPATH%\HROCC\69167.PZD
%HOMEPATH%\HROCC\B71382.FDU
%HOMEPATH%\HROCC\E75178.IGI
%HOMEPATH%\HROCC\45927.SAC
%HOMEPATH%\HROCC\67852.DEG
%HOMEPATH%\HROCC\Q82585.MLL
%HOMEPATH%\HROCC\E69272.IGP
%HOMEPATH%\HROCC\R35706.MCF
%HOMEPATH%\HROCC\I71672.VYR
%HOMEPATH%\HROCC\T42134.EUC
%HOMEPATH%\HROCC\61611.JZA
%HOMEPATH%\HROCC\I32841.SQD
%HOMEPATH%\HROCC\B93216.YSO
%HOMEPATH%\HROCC\C5773.VKU
%HOMEPATH%\HROCC\H27643.QGR
%HOMEPATH%\HROCC\K85430.DVA
%HOMEPATH%\HROCC\55921.LHO
%HOMEPATH%\HROCC\X57577.HSV
%HOMEPATH%\HROCC\Y49130.QET
%HOMEPATH%\HROCC\K16698.AAA
%HOMEPATH%\HROCC\R50222.ZGX
%HOMEPATH%\HROCC\28597.VZW
%HOMEPATH%\HROCC\C31234.UHS
%HOMEPATH%\HROCC\94035.SFT
%HOMEPATH%\HROCC\S66028.IMS
%HOMEPATH%\HROCC\23115.NMU
%HOMEPATH%\HROCC\16975.WVS
%HOMEPATH%\HROCC\F22339.UTH
%HOMEPATH%\HROCC\12879.YHK
%HOMEPATH%\HROCC\A26535.FHC
%HOMEPATH%\HROCC\O14175.FGI
%HOMEPATH%\HROCC\67588.KBP
%HOMEPATH%\HROCC\G96256.YHT
%HOMEPATH%\HROCC\91757.EYX
%HOMEPATH%\HROCC\38804.WGS
%HOMEPATH%\HROCC\48218.NQO
%HOMEPATH%\HROCC\31624.OTI
%HOMEPATH%\HROCC\52153.SCR
%HOMEPATH%\HROCC\72256.PKE
%HOMEPATH%\HROCC\S65698.OMS
%HOMEPATH%\HROCC\K87491.MDD
%HOMEPATH%\HROCC\59861.BWV
%HOMEPATH%\HROCC\57104.JRB
%HOMEPATH%\HROCC\21054.PFU
%HOMEPATH%\HROCC\16953.FRB
%HOMEPATH%\HROCC\N52814.BXN
%HOMEPATH%\HROCC\46521.SST
%HOMEPATH%\HROCC\L40417.AAH
%HOMEPATH%\HROCC\V46284.UPN
%HOMEPATH%\HROCC\J49288.TNW
%HOMEPATH%\HROCC\I40477.AMV
%HOMEPATH%\HROCC\O29909.OYP
%HOMEPATH%\HROCC\37992.VTK
%HOMEPATH%\HROCC\77573.TVE
%HOMEPATH%\HROCC\88081.LPW
%HOMEPATH%\HROCC\V18868.JMA
%HOMEPATH%\HROCC\R97802.CIZ
%HOMEPATH%\HROCC\U79655.OAR
%HOMEPATH%\HROCC\99700.NNL
%HOMEPATH%\HROCC\E82462.YZZ
%HOMEPATH%\HROCC\11277.FHQ
%HOMEPATH%\HROCC\B41023.MKF
%HOMEPATH%\HROCC\K69931.THC
%HOMEPATH%\HROCC\K69589.MBC
%HOMEPATH%\HROCC\20938.QYX
%HOMEPATH%\HROCC\Z64375.VVF
%HOMEPATH%\HROCC\53584.YVG
%HOMEPATH%\HROCC\8150.XJQ
%HOMEPATH%\HROCC\X1270.TDO
%HOMEPATH%\HROCC\L42506.QGW
%HOMEPATH%\HROCC\16524.MQA
%HOMEPATH%\HROCC\26680.ZQQ
%HOMEPATH%\HROCC\1383.FEZ
%HOMEPATH%\HROCC\Z25792.UML
%HOMEPATH%\HROCC\71677.SUZ
%HOMEPATH%\HROCC\S78778.WLI
%HOMEPATH%\HROCC\8046.MVG
%HOMEPATH%\HROCC\39779.MVS
%HOMEPATH%\HROCC\20649.NGU
%HOMEPATH%\HROCC\L33906.RIO
%HOMEPATH%\HROCC\79784.FTT
%HOMEPATH%\HROCC\Q11286.LDM
%HOMEPATH%\HROCC\50952.JZU
%HOMEPATH%\HROCC\13855.OBS
%HOMEPATH%\HROCC\L11126.JJA
%HOMEPATH%\HROCC\J62110.CKO
%HOMEPATH%\HROCC\86433.PFG
%HOMEPATH%\HROCC\D60706.GVC
%HOMEPATH%\HROCC\32241.TCM
%HOMEPATH%\HROCC\21164.GCD
%HOMEPATH%\HROCC\22979.KJW
%HOMEPATH%\HROCC\M83857.HPI
%HOMEPATH%\HROCC\K39789.UGV
%HOMEPATH%\HROCC\G11983.DQA
%HOMEPATH%\HROCC\Y92885.STH
%HOMEPATH%\HROCC\W83534.MBA
%HOMEPATH%\HROCC\rpc412_setup.exe
%HOMEPATH%\HROCC\run.vbs
%HOMEPATH%\HROCC\K9090.BUR
%HOMEPATH%\HROCC\I84846.RLQ
%HOMEPATH%\HROCC\settings.ini
%HOMEPATH%\HROCC\888354.dat
%HOMEPATH%\HROCC\110319.dat
%HOMEPATH%\HROCC\Autoit3803025.exe
%HOMEPATH%\HROCC\780205.dat
%HOMEPATH%\HROCC\5566.QPU
%HOMEPATH%\HROCC\36731.WPE
%HOMEPATH%\HROCC\V48529.XGU
%HOMEPATH%\HROCC\22637.BEE
%HOMEPATH%\HROCC\S40852.CKW
%HOMEPATH%\HROCC\30753.EEH
%HOMEPATH%\HROCC\P6001.OCN
%HOMEPATH%\HROCC\60264.BEL
%HOMEPATH%\HROCC\9130.BMD
%HOMEPATH%\HROCC\W89224.LCV
%HOMEPATH%\HROCC\82203.YON
%HOMEPATH%\HROCC\28032.AFA
%HOMEPATH%\HROCC\2974.FLU
%HOMEPATH%\HROCC\H2111.PHJ
%HOMEPATH%\HROCC\86796.XJR
%HOMEPATH%\HROCC\31682.NPB
%HOMEPATH%\HROCC\V28309.TRL
%HOMEPATH%\HROCC\O92487.BZZ
%HOMEPATH%\HROCC\O42139.RRM
%HOMEPATH%\HROCC\33766.EJG
%HOMEPATH%\HROCC\M10470.SQI
%HOMEPATH%\HROCC\F30761.RND
%HOMEPATH%\HROCC\20162.TOV
%HOMEPATH%\HROCC\Z26807.CRQ
%HOMEPATH%\HROCC\W7662.SNM
%HOMEPATH%\HROCC\38162.XLK
%HOMEPATH%\HROCC\89962.HGP
%HOMEPATH%\HROCC\72092.FWN
%HOMEPATH%\HROCC\F56872.VRB
%HOMEPATH%\HROCC\93038.QJO
%HOMEPATH%\HROCC\28979.WVC
%HOMEPATH%\HROCC\H39775.MVU
%HOMEPATH%\HROCC\85390.DRF
%HOMEPATH%\HROCC\B59572.EJM
%HOMEPATH%\HROCC\11382.VQD
%HOMEPATH%\HROCC\3966.ORR
%HOMEPATH%\HROCC\Z87333.HDZ
%HOMEPATH%\HROCC\A80731.KKX
%HOMEPATH%\HROCC\8741.MUK
%HOMEPATH%\HROCC\L82252.GEP
%HOMEPATH%\HROCC\91505.QSO
%HOMEPATH%\HROCC\S68792.WSO
%HOMEPATH%\HROCC\Y78830.KTB
%HOMEPATH%\HROCC\11533.VCM
%HOMEPATH%\HROCC\B97554.SKG
%HOMEPATH%\HROCC\19088.RTR
%HOMEPATH%\HROCC\40134.JLC
%HOMEPATH%\HROCC\88934.OWT
%HOMEPATH%\HROCC\37331.LVS
%HOMEPATH%\HROCC\74374.TGZ
%HOMEPATH%\HROCC\80007.SCZ
%HOMEPATH%\HROCC\M29452.SPE
%HOMEPATH%\HROCC\T42660.NXN
%HOMEPATH%\HROCC\10694.HEQ
%HOMEPATH%\HROCC\41787.UDQ
%HOMEPATH%\HROCC\88253.XXT
%HOMEPATH%\HROCC\F83993.QFB
%HOMEPATH%\HROCC\62392.EHF
%HOMEPATH%\HROCC\T58000.JFY
%HOMEPATH%\HROCC\Y15771.UCP
%HOMEPATH%\HROCC\85084.XWY
%HOMEPATH%\HROCC\N61091.AAV
%HOMEPATH%\HROCC\87627.LHJ
%HOMEPATH%\HROCC\M49828.QRW
%HOMEPATH%\HROCC\E1939.KLN
%HOMEPATH%\HROCC\64882.ETH
%HOMEPATH%\HROCC\T69399.DJL
%HOMEPATH%\HROCC\6763.YKW
%HOMEPATH%\HROCC\D9513.EIY
%HOMEPATH%\HROCC\Y25779.VHA
%HOMEPATH%\HROCC\Z32853.FTA
%HOMEPATH%\HROCC\66714.FKJ
%HOMEPATH%\HROCC\35890.OEQ
%HOMEPATH%\HROCC\U14446.CXX
%HOMEPATH%\HROCC\H35790.XWM
%HOMEPATH%\HROCC\97653.RRK
%HOMEPATH%\HROCC\X50251.HGR
%HOMEPATH%\HROCC\82299.WVU
%HOMEPATH%\HROCC\B94768.FPW
%HOMEPATH%\HROCC\C22690.TQO
%HOMEPATH%\HROCC\Y30296.PZX
%HOMEPATH%\HROCC\C7116.KHB
%HOMEPATH%\HROCC\Q14209.ADI
%HOMEPATH%\HROCC\61607.SLK
%HOMEPATH%\HROCC\V26859.SMT
%HOMEPATH%\HROCC\41476.FWT
%HOMEPATH%\HROCC\64598.FYT
%HOMEPATH%\HROCC\59250.TKB
%HOMEPATH%\HROCC\6528.USU
%HOMEPATH%\HROCC\J61079.NAW
%HOMEPATH%\HROCC\N35371.DWH
%HOMEPATH%\HROCC\T26363.AZI
%HOMEPATH%\HROCC\49893.LUL
%HOMEPATH%\HROCC\M50759.RCO
%HOMEPATH%\HROCC\N55502.WCE
%HOMEPATH%\HROCC\95323.CPW
%HOMEPATH%\HROCC\89274.KIR
%HOMEPATH%\HROCC\A39841.ARP
%HOMEPATH%\HROCC\81016.ZIG
%HOMEPATH%\HROCC\42795.WZH
%HOMEPATH%\HROCC\78372.VEO
%HOMEPATH%\HROCC\Y8845.GVR
%HOMEPATH%\HROCC\40325.AGM
%HOMEPATH%\HROCC\28494.ZDI
%HOMEPATH%\HROCC\38827.LAG
%HOMEPATH%\HROCC\R88537.CPB
%HOMEPATH%\HROCC\H64658.EDU
%HOMEPATH%\HROCC\S9054.LUA
%HOMEPATH%\HROCC\70548.FNM
%HOMEPATH%\HROCC\M92081.FXE
%HOMEPATH%\HROCC\I14853.TCW
%HOMEPATH%\HROCC\I73465.RUL
%HOMEPATH%\HROCC\46677.LCQ
%HOMEPATH%\HROCC\B76766.DPH
%HOMEPATH%\HROCC\17321.BJM
%HOMEPATH%\HROCC\15199.WNH
%HOMEPATH%\HROCC\56132.FDK
%HOMEPATH%\HROCC\A67033.EEW
%HOMEPATH%\HROCC\18393.YAX
%HOMEPATH%\HROCC\78871.FAV
%HOMEPATH%\HROCC\G29018.VEZ
%HOMEPATH%\HROCC\B52788.JGJ
%HOMEPATH%\HROCC\79690.QPE
%HOMEPATH%\HROCC\67520.FKG
%HOMEPATH%\HROCC\X21115.ZBZ
%HOMEPATH%\HROCC\27752.EIJ
%HOMEPATH%\HROCC\M98409.XAW
%HOMEPATH%\HROCC\84824.UPM
%HOMEPATH%\HROCC\30169.UFE
%HOMEPATH%\HROCC\R53296.LJQ
%HOMEPATH%\HROCC\Z38676.OCF
%HOMEPATH%\HROCC\56365.PHE
%HOMEPATH%\HROCC\59683.CGY
%HOMEPATH%\HROCC\I8379.XEA
%HOMEPATH%\HROCC\72282.TJB
%HOMEPATH%\HROCC\Q37427.MGN
%HOMEPATH%\HROCC\X35045.SQO
%HOMEPATH%\HROCC\93086.KME
%HOMEPATH%\HROCC\68034.ZQP
%HOMEPATH%\HROCC\82138.SEF
%HOMEPATH%\HROCC\29584.SZV
%HOMEPATH%\HROCC\46516.ION
%HOMEPATH%\HROCC\95721.HGO
%HOMEPATH%\HROCC\23329.FWM
%HOMEPATH%\HROCC\P70442.DND
%HOMEPATH%\HROCC\74606.JVA
%HOMEPATH%\HROCC\95181.ZIX
%HOMEPATH%\HROCC\N49547.UOU
%HOMEPATH%\HROCC\86109.FSG
%HOMEPATH%\HROCC\V3802.VLD
%HOMEPATH%\HROCC\62593.EAU
%HOMEPATH%\HROCC\I36689.NMX
%HOMEPATH%\HROCC\R21910.SIB
%HOMEPATH%\HROCC\A53207.FPR
%HOMEPATH%\HROCC\34597.RMR
%HOMEPATH%\HROCC\44451.USD
%HOMEPATH%\HROCC\64796.VUU
%HOMEPATH%\HROCC\68815.BLJ
%HOMEPATH%\HROCC\91361.HAQ
%HOMEPATH%\HROCC\99212.IRU
%HOMEPATH%\HROCC\21378.PCR
%HOMEPATH%\HROCC\84853.CRG
%HOMEPATH%\HROCC\57663.AHD
%HOMEPATH%\HROCC\80973.ZXC
%HOMEPATH%\HROCC\93299.AGH
%HOMEPATH%\HROCC\33393.FUM
%HOMEPATH%\HROCC\O53193.XMY
%HOMEPATH%\HROCC\A48322.TIM
%HOMEPATH%\HROCC\59030.BZK
%HOMEPATH%\HROCC\U85294.XVL
%HOMEPATH%\HROCC\6429.UOJ
%HOMEPATH%\HROCC\32208.JUQ
%HOMEPATH%\HROCC\93700.QOU
%HOMEPATH%\HROCC\B11086.PME
%HOMEPATH%\HROCC\P46649.NEH
%HOMEPATH%\HROCC\79915.HTT
%HOMEPATH%\HROCC\P18202.BME
%HOMEPATH%\HROCC\6180.QTP
%HOMEPATH%\HROCC\D58617.ISW
%HOMEPATH%\HROCC\39745.OPK
%HOMEPATH%\HROCC\J8597.FSE
%HOMEPATH%\HROCC\57752.QAU
%HOMEPATH%\HROCC\37216.IHZ
%HOMEPATH%\HROCC\53257.WWN
%HOMEPATH%\HROCC\12849.PEG
%HOMEPATH%\HROCC\V44444.UHQ
%HOMEPATH%\HROCC\V18872.WSX
%HOMEPATH%\HROCC\N11347.QIA
%HOMEPATH%\HROCC\O45447.KYK
%HOMEPATH%\HROCC\C52738.LDR
%HOMEPATH%\HROCC\54875.ZNS
%HOMEPATH%\HROCC\T68547.AJS
%HOMEPATH%\HROCC\49207.DBV

Sets the 'hidden' attribute to the following files:

%HOMEPATH%\HROCC\19331.WOE
%HOMEPATH%\HROCC\X40105.OFB
%HOMEPATH%\HROCC\Z62661.CGZ
%HOMEPATH%\HROCC\41328.UUY
%HOMEPATH%\HROCC\I66114.ZBG
%HOMEPATH%\HROCC\8175.PKA
%HOMEPATH%\HROCC\P68765.AGO
%HOMEPATH%\HROCC\48296.KBJ
%HOMEPATH%\HROCC\74679.QNR
%HOMEPATH%\HROCC\10472.IXU
%HOMEPATH%\HROCC\98816.JUO
%HOMEPATH%\HROCC\X79842.TIH
%HOMEPATH%\HROCC\B21768.GGW
%HOMEPATH%\HROCC\Z18877.CHM
%HOMEPATH%\HROCC\F85500.KKX
%HOMEPATH%\HROCC\52009.YNH
%HOMEPATH%\HROCC\7092.XQY
%HOMEPATH%\HROCC\63453.SOB
%HOMEPATH%\HROCC\86999.JFF
%HOMEPATH%\HROCC\49712.CQP
%HOMEPATH%\HROCC\49809.ZUE
%HOMEPATH%\HROCC\W22900.DKP
%HOMEPATH%\HROCC\K84653.CSA
%HOMEPATH%\HROCC\91886.AJL
%HOMEPATH%\HROCC\65335.XZJ
%HOMEPATH%\HROCC\30122.OXI
%HOMEPATH%\HROCC\A60037.MRX
%HOMEPATH%\HROCC\32728.ONM
%HOMEPATH%\HROCC\78184.WFS
%HOMEPATH%\HROCC\L56002.EFT
%HOMEPATH%\HROCC\W2765.JWR
%HOMEPATH%\HROCC\75108.JZK
%HOMEPATH%\HROCC\56628.GSS
%HOMEPATH%\HROCC\P8758.LKX
%HOMEPATH%\HROCC\65965.MVH
%HOMEPATH%\HROCC\4134.WLL
%HOMEPATH%\HROCC\64428.RFC
%HOMEPATH%\HROCC\12054.TNS
%HOMEPATH%\HROCC\60467.RNU
%HOMEPATH%\HROCC\25916.UXT
%HOMEPATH%\HROCC\A14056.FHS
%HOMEPATH%\HROCC\X91760.KXJ
%HOMEPATH%\HROCC\95119.UBF
%HOMEPATH%\HROCC\65705.MJI
%HOMEPATH%\HROCC\Q71590.GUQ
%HOMEPATH%\HROCC\J57257.XQF
%HOMEPATH%\HROCC\26559.FDC
%HOMEPATH%\HROCC\8164.MKZ
%HOMEPATH%\HROCC\X10803.ZES
%HOMEPATH%\HROCC\Q26021.GGZ
%HOMEPATH%\HROCC\69635.CAN
%HOMEPATH%\HROCC\22073.UCR
%HOMEPATH%\HROCC\7003.CWE
%HOMEPATH%\HROCC\A35292.YYQ
%HOMEPATH%\HROCC\78614.BHZ
%HOMEPATH%\HROCC\70001.PUS
%HOMEPATH%\HROCC\89547.QPY
%HOMEPATH%\HROCC\F64635.XPF
%HOMEPATH%\HROCC\10328.EZG
%HOMEPATH%\HROCC\G9441.BWH
%HOMEPATH%\HROCC\X39969.COZ
%HOMEPATH%\HROCC\C14280.QUQ
%HOMEPATH%\HROCC\51702.DGA
%HOMEPATH%\HROCC\O28442.MLK
%HOMEPATH%\HROCC\B64749.LDU
%HOMEPATH%\HROCC\65872.XZZ
%HOMEPATH%\HROCC\50533.OEN
%HOMEPATH%\HROCC\45039.KQW
%HOMEPATH%\HROCC\J19907.OYC
%HOMEPATH%\HROCC\T57033.EQH
%HOMEPATH%\HROCC\55151.MCF
%HOMEPATH%\HROCC\8098.VYR
%HOMEPATH%\HROCC\A92611.HBC
%HOMEPATH%\HROCC\30968.FNN
%HOMEPATH%\HROCC\60511.GHB
%HOMEPATH%\HROCC\O18992.ZOL
%HOMEPATH%\HROCC\R19726.NTN
%HOMEPATH%\HROCC\P24383.QKA
%HOMEPATH%\HROCC\96690.XMZ
%HOMEPATH%\HROCC\F47569.PJC
%HOMEPATH%\HROCC\73696.TIJ
%HOMEPATH%\HROCC\64068.XXW
%HOMEPATH%\HROCC\60853.XEE
%HOMEPATH%\HROCC\N57237.VKH
%HOMEPATH%\HROCC\97215.XQM
%HOMEPATH%\HROCC\58707.ZGW
%HOMEPATH%\HROCC\68215.QFC
%HOMEPATH%\HROCC\17782.QFA
%HOMEPATH%\HROCC\I58390.KHH
%HOMEPATH%\HROCC\77603.DSD
%HOMEPATH%\HROCC\45927.SAC
%HOMEPATH%\HROCC\N55502.WCE
%HOMEPATH%\HROCC\58151.AUK
%HOMEPATH%\HROCC\Z84778.APK
%HOMEPATH%\HROCC\M50759.RCO
%HOMEPATH%\HROCC\89274.KIR
%HOMEPATH%\HROCC\95323.CPW
%HOMEPATH%\HROCC\49893.LUL
%HOMEPATH%\HROCC\K37053.RRI
%HOMEPATH%\HROCC\66104.GZO
%HOMEPATH%\HROCC\75993.RZL
%HOMEPATH%\HROCC\S21416.RWH
%HOMEPATH%\HROCC\X74544.PYO
%HOMEPATH%\HROCC\Z35609.VVQ
%HOMEPATH%\HROCC\Q45035.JIM
%HOMEPATH%\HROCC\K72128.UDS
%HOMEPATH%\HROCC\34895.IGE
%HOMEPATH%\HROCC\F80621.ZZN
%HOMEPATH%\HROCC\H69984.KMX
%HOMEPATH%\HROCC\K41513.SMI
%HOMEPATH%\HROCC\S56697.JCM
%HOMEPATH%\HROCC\96428.FJN
%HOMEPATH%\HROCC\V19520.KVA
%HOMEPATH%\HROCC\76250.UZU
%HOMEPATH%\HROCC\W4664.PZW
%HOMEPATH%\HROCC\Z55293.XVT
%HOMEPATH%\HROCC\4343.TIT
%HOMEPATH%\HROCC\A90822.BOG
%HOMEPATH%\HROCC\X96345.LYA
%HOMEPATH%\HROCC\55745.KWE
%HOMEPATH%\HROCC\9256.MFE
%HOMEPATH%\HROCC\80468.URE
%HOMEPATH%\HROCC\L50726.SYQ
%HOMEPATH%\HROCC\F59151.FOW
%HOMEPATH%\HROCC\30442.AXF
%HOMEPATH%\HROCC\57156.PDP
%HOMEPATH%\HROCC\16014.KNH
%HOMEPATH%\HROCC\99578.TBG
%HOMEPATH%\HROCC\V64214.LOJ
%HOMEPATH%\HROCC\35946.HCQ
%HOMEPATH%\HROCC\38873.ETO
%HOMEPATH%\HROCC\47085.BCF
%HOMEPATH%\HROCC\61446.RWM
%HOMEPATH%\HROCC\40243.TCZ
%HOMEPATH%\HROCC\K29957.AKR
%HOMEPATH%\HROCC\8253.DIY
%HOMEPATH%\HROCC\U55280.ZPW
%HOMEPATH%\HROCC\W76269.ZED
%HOMEPATH%\HROCC\26913.YAC
%HOMEPATH%\HROCC\82390.EOW
%HOMEPATH%\HROCC\P50684.IFI
%HOMEPATH%\HROCC\16516.RTL
%HOMEPATH%\HROCC\A59189.GAB
%HOMEPATH%\HROCC\M37079.WXD
%HOMEPATH%\HROCC\K88448.LOP
%HOMEPATH%\HROCC\H74980.PJR
%HOMEPATH%\HROCC\Q45256.IKU
%HOMEPATH%\HROCC\I21920.EOH
%HOMEPATH%\HROCC\4604.YUE
%HOMEPATH%\HROCC\78068.FYG
%HOMEPATH%\HROCC\T1387.BHZ
%HOMEPATH%\HROCC\43273.WLO
%HOMEPATH%\HROCC\46908.VVP
%HOMEPATH%\HROCC\M32946.SLS
%HOMEPATH%\HROCC\U35920.UDK
%HOMEPATH%\HROCC\D38405.XIE
%HOMEPATH%\HROCC\16468.QVL
%HOMEPATH%\HROCC\N36890.BKT
%HOMEPATH%\HROCC\D66908.QHO
%HOMEPATH%\HROCC\A38370.EYG
%HOMEPATH%\HROCC\79188.HZV
%HOMEPATH%\HROCC\J32505.VSI
%HOMEPATH%\HROCC\55613.SLH
%HOMEPATH%\HROCC\S7145.KOZ
%HOMEPATH%\HROCC\N50646.UUB
%HOMEPATH%\HROCC\81128.OES
%HOMEPATH%\HROCC\F32868.FAX
%HOMEPATH%\HROCC\D20837.APB
%HOMEPATH%\HROCC\O97137.RCS
%HOMEPATH%\HROCC\O98016.LVN
%HOMEPATH%\HROCC\71803.WRH
%HOMEPATH%\HROCC\16225.ZLT
%HOMEPATH%\HROCC\12266.RVO
%HOMEPATH%\HROCC\D59283.IXD
%HOMEPATH%\HROCC\N54154.AJQ
%HOMEPATH%\HROCC\I18344.YOM
%HOMEPATH%\HROCC\43835.UDQ
%HOMEPATH%\HROCC\E38344.JXL
%HOMEPATH%\HROCC\5658.VTE
%HOMEPATH%\HROCC\48648.EWA
%HOMEPATH%\HROCC\Q62674.IME
%HOMEPATH%\HROCC\83221.CDK
%HOMEPATH%\HROCC\I42019.OWO
%HOMEPATH%\HROCC\J74582.VAS
%HOMEPATH%\HROCC\O86710.AMN
%HOMEPATH%\HROCC\S87601.WLG
%HOMEPATH%\HROCC\P45810.HUV
%HOMEPATH%\HROCC\T13902.TUC
%HOMEPATH%\HROCC\67871.OUO
%HOMEPATH%\HROCC\52275.LQW
%HOMEPATH%\HROCC\G92945.HWS
%HOMEPATH%\HROCC\19637.EII
%HOMEPATH%\HROCC\86676.ZEN
%HOMEPATH%\HROCC\68702.VBY
%HOMEPATH%\HROCC\D8799.PRL
%HOMEPATH%\HROCC\87204.KHJ
%HOMEPATH%\HROCC\54521.RAF
%HOMEPATH%\HROCC\Q66616.WSV
%HOMEPATH%\HROCC\17293.PVU
%HOMEPATH%\HROCC\Y92793.NXX
%HOMEPATH%\HROCC\U74708.UEE
%HOMEPATH%\HROCC\W17357.MQV
%HOMEPATH%\HROCC\C94797.GBT
%HOMEPATH%\HROCC\29406.UXB
%HOMEPATH%\HROCC\Z81124.ZOT
%HOMEPATH%\HROCC\K78308.ZCI
%HOMEPATH%\HROCC\D48998.GMY
%HOMEPATH%\HROCC\48775.TJO
%HOMEPATH%\HROCC\W74825.BLI
%HOMEPATH%\HROCC\1155.LGE
%HOMEPATH%\HROCC\C80166.IRL
%HOMEPATH%\HROCC\N54071.JPD
%HOMEPATH%\HROCC\73948.DZZ
%HOMEPATH%\HROCC\96007.UZW
%HOMEPATH%\HROCC\D7932.IYR
%HOMEPATH%\HROCC\L90958.PME
%HOMEPATH%\HROCC\B32669.QYK
%HOMEPATH%\HROCC\Y78226.CPD
%HOMEPATH%\HROCC\P76802.XRJ
%HOMEPATH%\HROCC\28427.EUY
%HOMEPATH%\HROCC\W58615.TBQ
%HOMEPATH%\HROCC\W61135.BAL
%HOMEPATH%\HROCC\J32505.OCV
%HOMEPATH%\HROCC\85679.XOC
%HOMEPATH%\HROCC\O51540.KYH
%HOMEPATH%\HROCC\M35225.XPT
%HOMEPATH%\HROCC\10349.WLJ
%HOMEPATH%\HROCC\I92097.XRQ
%HOMEPATH%\HROCC\C59336.AOO
%HOMEPATH%\HROCC\47033.PNA
%HOMEPATH%\HROCC\31416.ZDF
%HOMEPATH%\HROCC\97168.NMU
%HOMEPATH%\HROCC\33204.GGA
%HOMEPATH%\HROCC\41983.KHL
%HOMEPATH%\HROCC\7381.UVM
%HOMEPATH%\HROCC\93779.ORD
%HOMEPATH%\HROCC\49632.LHY
%HOMEPATH%\HROCC\39943.UBV
%HOMEPATH%\HROCC\38226.AJC
%HOMEPATH%\HROCC\30472.VXM
%HOMEPATH%\HROCC\39940.SLR
%HOMEPATH%\HROCC\76790.JUZ
%HOMEPATH%\HROCC\V97032.YFG
%HOMEPATH%\HROCC\90437.NTL
%HOMEPATH%\HROCC\J68391.MBD
%HOMEPATH%\HROCC\55246.YDB
%HOMEPATH%\HROCC\N88602.SUR
%HOMEPATH%\HROCC\61753.QAP
%HOMEPATH%\HROCC\U54748.IMM
%HOMEPATH%\HROCC\H79712.XBK
%HOMEPATH%\HROCC\K46896.KCD
%HOMEPATH%\HROCC\Y88591.GUE
%HOMEPATH%\HROCC\88465.THJ
%HOMEPATH%\HROCC\B71382.FDU
%HOMEPATH%\HROCC\88255.CHQ
%HOMEPATH%\HROCC\64262.BEJ
%HOMEPATH%\HROCC\69167.PZD
%HOMEPATH%\HROCC\Z82596.YOX
%HOMEPATH%\HROCC\E75178.IGI
%HOMEPATH%\HROCC\B67731.QLH
%HOMEPATH%\HROCC\9728.EOJ
%HOMEPATH%\HROCC\68466.RLC
%HOMEPATH%\HROCC\D66269.QIE
%HOMEPATH%\HROCC\68403.UWL
%HOMEPATH%\HROCC\U15791.TDF
%HOMEPATH%\HROCC\T84602.BRF
%HOMEPATH%\HROCC\60994.YDT
%HOMEPATH%\HROCC\13830.AQM
%HOMEPATH%\HROCC\Z41443.FEB
%HOMEPATH%\HROCC\54023.HPA
%HOMEPATH%\HROCC\L40097.YVX
%HOMEPATH%\HROCC\54505.PWS
%HOMEPATH%\HROCC\U96093.LHJ
%HOMEPATH%\HROCC\W85310.KEI
%HOMEPATH%\HROCC\I75738.AND
%HOMEPATH%\HROCC\J5689.PTO
%HOMEPATH%\HROCC\70468.XOY
%HOMEPATH%\HROCC\13551.TOM
%HOMEPATH%\HROCC\78866.PGQ
%HOMEPATH%\HROCC\21335.QSQ
%HOMEPATH%\HROCC\30445.ANC
%HOMEPATH%\HROCC\63489.ODZ
%HOMEPATH%\HROCC\C7449.AWB
%HOMEPATH%\HROCC\U11216.XSF
%HOMEPATH%\HROCC\W68814.ILJ
%HOMEPATH%\HROCC\48506.RGV
%HOMEPATH%\HROCC\14235.HKX
%HOMEPATH%\HROCC\42795.WZH
%HOMEPATH%\HROCC\I71672.VYR
%HOMEPATH%\HROCC\I32841.SQD
%HOMEPATH%\HROCC\67852.DEG
%HOMEPATH%\HROCC\Q82585.MLL
%HOMEPATH%\HROCC\61611.JZA
%HOMEPATH%\HROCC\91757.EYX
%HOMEPATH%\HROCC\B93216.YSO
%HOMEPATH%\HROCC\T42134.EUC
%HOMEPATH%\HROCC\R35706.MCF
%HOMEPATH%\HROCC\X57577.HSV
%HOMEPATH%\HROCC\R50222.ZGX
%HOMEPATH%\HROCC\C5773.VKU
%HOMEPATH%\HROCC\H27643.QGR
%HOMEPATH%\HROCC\K16698.AAA
%HOMEPATH%\HROCC\E69272.IGP
%HOMEPATH%\HROCC\28597.VZW
%HOMEPATH%\HROCC\Y49130.QET
%HOMEPATH%\HROCC\38804.WGS
%HOMEPATH%\HROCC\16975.WVS
%HOMEPATH%\HROCC\A26535.FHC
%HOMEPATH%\HROCC\C31234.UHS
%HOMEPATH%\HROCC\94035.SFT
%HOMEPATH%\HROCC\12879.YHK
%HOMEPATH%\HROCC\39779.MVS
%HOMEPATH%\HROCC\O14175.FGI
%HOMEPATH%\HROCC\F22339.UTH
%HOMEPATH%\HROCC\23115.NMU
%HOMEPATH%\HROCC\48218.NQO
%HOMEPATH%\HROCC\72256.PKE
%HOMEPATH%\HROCC\67588.KBP
%HOMEPATH%\HROCC\G96256.YHT
%HOMEPATH%\HROCC\52153.SCR
%HOMEPATH%\HROCC\S66028.IMS
%HOMEPATH%\HROCC\S65698.OMS
%HOMEPATH%\HROCC\31624.OTI
%HOMEPATH%\HROCC\55921.LHO
%HOMEPATH%\HROCC\V46284.UPN
%HOMEPATH%\HROCC\J49288.TNW
%HOMEPATH%\HROCC\57104.JRB
%HOMEPATH%\HROCC\N52814.BXN
%HOMEPATH%\HROCC\16524.MQA
%HOMEPATH%\HROCC\26680.ZQQ
%HOMEPATH%\HROCC\46521.SST
%HOMEPATH%\HROCC\L40417.AAH
%HOMEPATH%\HROCC\59861.BWV
%HOMEPATH%\HROCC\U79655.OAR
%HOMEPATH%\HROCC\99700.NNL
%HOMEPATH%\HROCC\O29909.OYP
%HOMEPATH%\HROCC\88081.LPW
%HOMEPATH%\HROCC\21054.PFU
%HOMEPATH%\HROCC\16953.FRB
%HOMEPATH%\HROCC\V18868.JMA
%HOMEPATH%\HROCC\R97802.CIZ
%HOMEPATH%\HROCC\X1270.TDO
%HOMEPATH%\HROCC\53584.YVG
%HOMEPATH%\HROCC\8150.XJQ
%HOMEPATH%\HROCC\11277.FHQ
%HOMEPATH%\HROCC\K69589.MBC
%HOMEPATH%\HROCC\K87491.MDD
%HOMEPATH%\HROCC\K85430.DVA
%HOMEPATH%\HROCC\20938.QYX
%HOMEPATH%\HROCC\Z64375.VVF
%HOMEPATH%\HROCC\E82462.YZZ
%HOMEPATH%\HROCC\S78778.WLI
%HOMEPATH%\HROCC\8046.MVG
%HOMEPATH%\HROCC\L42506.QGW
%HOMEPATH%\HROCC\1383.FEZ
%HOMEPATH%\HROCC\B41023.MKF
%HOMEPATH%\HROCC\K69931.THC
%HOMEPATH%\HROCC\Z25792.UML
%HOMEPATH%\HROCC\71677.SUZ
%HOMEPATH%\HROCC\F30761.RND
%HOMEPATH%\HROCC\20649.NGU
%HOMEPATH%\HROCC\L33906.RIO
%HOMEPATH%\HROCC\79784.FTT
%HOMEPATH%\HROCC\Q11286.LDM
%HOMEPATH%\HROCC\86433.PFG
%HOMEPATH%\HROCC\13855.OBS
%HOMEPATH%\HROCC\50952.JZU
%HOMEPATH%\HROCC\J62110.CKO
%HOMEPATH%\HROCC\G11983.DQA
%HOMEPATH%\HROCC\D60706.GVC
%HOMEPATH%\HROCC\32241.TCM
%HOMEPATH%\HROCC\21164.GCD
%HOMEPATH%\HROCC\22979.KJW
%HOMEPATH%\HROCC\W83534.MBA
%HOMEPATH%\HROCC\K39789.UGV
%HOMEPATH%\HROCC\M83857.HPI
%HOMEPATH%\HROCC\Y92885.STH
%HOMEPATH%\HROCC\L11126.JJA
%HOMEPATH%\HROCC\run.vbs
%HOMEPATH%\HROCC\settings.ini
%HOMEPATH%\HROCC\K9090.BUR
%HOMEPATH%\HROCC\I84846.RLQ
%HOMEPATH%\HROCC\888354.dat
%HOMEPATH%\HROCC\110319.dat
%HOMEPATH%\HROCC\Autoit3803025.exe
%HOMEPATH%\HROCC\780205.dat
%HOMEPATH%\HROCC\P6001.OCN
%HOMEPATH%\HROCC\5566.QPU
%HOMEPATH%\HROCC\36731.WPE
%HOMEPATH%\HROCC\V48529.XGU
%HOMEPATH%\HROCC\22637.BEE
%HOMEPATH%\HROCC\9130.BMD
%HOMEPATH%\HROCC\30753.EEH
%HOMEPATH%\HROCC\S40852.CKW
%HOMEPATH%\HROCC\60264.BEL
%HOMEPATH%\HROCC\W89224.LCV
%HOMEPATH%\HROCC\28032.AFA
%HOMEPATH%\HROCC\86796.XJR
%HOMEPATH%\HROCC\H2111.PHJ
%HOMEPATH%\HROCC\82203.YON
%HOMEPATH%\HROCC\31682.NPB
%HOMEPATH%\HROCC\V28309.TRL
%HOMEPATH%\HROCC\O92487.BZZ
%HOMEPATH%\HROCC\O42139.RRM
%HOMEPATH%\HROCC\2974.FLU
%HOMEPATH%\HROCC\M10470.SQI
%HOMEPATH%\HROCC\Z26807.CRQ
%HOMEPATH%\HROCC\20162.TOV
%HOMEPATH%\HROCC\33766.EJG
%HOMEPATH%\HROCC\W7662.SNM
%HOMEPATH%\HROCC\38162.XLK
%HOMEPATH%\HROCC\89962.HGP
%HOMEPATH%\HROCC\72092.FWN
%HOMEPATH%\HROCC\L82252.GEP
%HOMEPATH%\HROCC\93038.QJO
%HOMEPATH%\HROCC\85390.DRF
%HOMEPATH%\HROCC\H39775.MVU
%HOMEPATH%\HROCC\F56872.VRB
%HOMEPATH%\HROCC\B59572.EJM
%HOMEPATH%\HROCC\11382.VQD
%HOMEPATH%\HROCC\3966.ORR
%HOMEPATH%\HROCC\Z87333.HDZ
%HOMEPATH%\HROCC\28979.WVC
%HOMEPATH%\HROCC\8741.MUK
%HOMEPATH%\HROCC\S68792.WSO
%HOMEPATH%\HROCC\91505.QSO
%HOMEPATH%\HROCC\A80731.KKX
%HOMEPATH%\HROCC\Y78830.KTB
%HOMEPATH%\HROCC\11533.VCM
%HOMEPATH%\HROCC\B97554.SKG
%HOMEPATH%\HROCC\19088.RTR
%HOMEPATH%\HROCC\I40477.AMV
%HOMEPATH%\HROCC\M29452.SPE
%HOMEPATH%\HROCC\T42660.NXN
%HOMEPATH%\HROCC\10694.HEQ
%HOMEPATH%\HROCC\41787.UDQ
%HOMEPATH%\HROCC\U14446.CXX
%HOMEPATH%\HROCC\H35790.XWM
%HOMEPATH%\HROCC\97653.RRK
%HOMEPATH%\HROCC\X50251.HGR
%HOMEPATH%\HROCC\80007.SCZ
%HOMEPATH%\HROCC\85084.XWY
%HOMEPATH%\HROCC\N61091.AAV
%HOMEPATH%\HROCC\87627.LHJ
%HOMEPATH%\HROCC\M49828.QRW
%HOMEPATH%\HROCC\40134.JLC
%HOMEPATH%\HROCC\88934.OWT
%HOMEPATH%\HROCC\37331.LVS
%HOMEPATH%\HROCC\74374.TGZ
%HOMEPATH%\HROCC\82299.WVU
%HOMEPATH%\HROCC\Y25779.VHA
%HOMEPATH%\HROCC\Z32853.FTA
%HOMEPATH%\HROCC\66714.FKJ
%HOMEPATH%\HROCC\35890.OEQ
%HOMEPATH%\HROCC\U85294.XVL
%HOMEPATH%\HROCC\O53193.XMY
%HOMEPATH%\HROCC\78871.FAV
%HOMEPATH%\HROCC\59030.BZK
%HOMEPATH%\HROCC\D9513.EIY
%HOMEPATH%\HROCC\B94768.FPW
%HOMEPATH%\HROCC\C22690.TQO
%HOMEPATH%\HROCC\Y30296.PZX
%HOMEPATH%\HROCC\C7116.KHB
%HOMEPATH%\HROCC\E1939.KLN
%HOMEPATH%\HROCC\64882.ETH
%HOMEPATH%\HROCC\T69399.DJL
%HOMEPATH%\HROCC\6763.YKW
%HOMEPATH%\HROCC\Y15771.UCP
%HOMEPATH%\HROCC\J61079.NAW
%HOMEPATH%\HROCC\46677.LCQ
%HOMEPATH%\HROCC\T26363.AZI
%HOMEPATH%\HROCC\6528.USU
%HOMEPATH%\HROCC\I73465.RUL
%HOMEPATH%\HROCC\17321.BJM
%HOMEPATH%\HROCC\B76766.DPH
%HOMEPATH%\HROCC\I14853.TCW
%HOMEPATH%\HROCC\N35371.DWH
%HOMEPATH%\HROCC\81016.ZIG
%HOMEPATH%\HROCC\41476.FWT
%HOMEPATH%\HROCC\78372.VEO
%HOMEPATH%\HROCC\A39841.ARP
%HOMEPATH%\HROCC\V26859.SMT
%HOMEPATH%\HROCC\59250.TKB
%HOMEPATH%\HROCC\64598.FYT
%HOMEPATH%\HROCC\61607.SLK
%HOMEPATH%\HROCC\A67033.EEW
%HOMEPATH%\HROCC\S9054.LUA
%HOMEPATH%\HROCC\Q14209.ADI
%HOMEPATH%\HROCC\M92081.FXE
%HOMEPATH%\HROCC\H64658.EDU
%HOMEPATH%\HROCC\88253.XXT
%HOMEPATH%\HROCC\F83993.QFB
%HOMEPATH%\HROCC\62392.EHF
%HOMEPATH%\HROCC\T58000.JFY
%HOMEPATH%\HROCC\70548.FNM
%HOMEPATH%\HROCC\56132.FDK
%HOMEPATH%\HROCC\28494.ZDI
%HOMEPATH%\HROCC\18393.YAX
%HOMEPATH%\HROCC\15199.WNH
%HOMEPATH%\HROCC\40325.AGM
%HOMEPATH%\HROCC\R88537.CPB
%HOMEPATH%\HROCC\38827.LAG
%HOMEPATH%\HROCC\Y8845.GVR
%HOMEPATH%\HROCC\A48322.TIM
%HOMEPATH%\HROCC\84824.UPM
%HOMEPATH%\HROCC\30169.UFE
%HOMEPATH%\HROCC\B52788.JGJ
%HOMEPATH%\HROCC\X21115.ZBZ
%HOMEPATH%\HROCC\V3802.VLD
%HOMEPATH%\HROCC\62593.EAU
%HOMEPATH%\HROCC\27752.EIJ
%HOMEPATH%\HROCC\M98409.XAW
%HOMEPATH%\HROCC\G29018.VEZ
%HOMEPATH%\HROCC\X35045.SQO
%HOMEPATH%\HROCC\93086.KME
%HOMEPATH%\HROCC\Z38676.OCF
%HOMEPATH%\HROCC\I8379.XEA
%HOMEPATH%\HROCC\79690.QPE
%HOMEPATH%\HROCC\67520.FKG
%HOMEPATH%\HROCC\72282.TJB
%HOMEPATH%\HROCC\Q37427.MGN
%HOMEPATH%\HROCC\N49547.UOU
%HOMEPATH%\HROCC\74606.JVA
%HOMEPATH%\HROCC\95181.ZIX
%HOMEPATH%\HROCC\82138.SEF
%HOMEPATH%\HROCC\95721.HGO
%HOMEPATH%\HROCC\37992.VTK
%HOMEPATH%\HROCC\77573.TVE
%HOMEPATH%\HROCC\23329.FWM
%HOMEPATH%\HROCC\P70442.DND
%HOMEPATH%\HROCC\68034.ZQP
%HOMEPATH%\HROCC\34597.RMR
%HOMEPATH%\HROCC\44451.USD
%HOMEPATH%\HROCC\86109.FSG
%HOMEPATH%\HROCC\I36689.NMX
%HOMEPATH%\HROCC\29584.SZV
%HOMEPATH%\HROCC\46516.ION
%HOMEPATH%\HROCC\R21910.SIB
%HOMEPATH%\HROCC\A53207.FPR
%HOMEPATH%\HROCC\R53296.LJQ
%HOMEPATH%\HROCC\33393.FUM
%HOMEPATH%\HROCC\57663.AHD
%HOMEPATH%\HROCC\84853.CRG
%HOMEPATH%\HROCC\93299.AGH
%HOMEPATH%\HROCC\N11347.QIA
%HOMEPATH%\HROCC\12849.PEG
%HOMEPATH%\HROCC\80973.ZXC
%HOMEPATH%\HROCC\V18872.WSX
%HOMEPATH%\HROCC\91361.HAQ
%HOMEPATH%\HROCC\P46649.NEH
%HOMEPATH%\HROCC\32208.JUQ
%HOMEPATH%\HROCC\6429.UOJ
%HOMEPATH%\HROCC\B11086.PME
%HOMEPATH%\HROCC\21378.PCR
%HOMEPATH%\HROCC\68815.BLJ
%HOMEPATH%\HROCC\93700.QOU
%HOMEPATH%\HROCC\99212.IRU
%HOMEPATH%\HROCC\V44444.UHQ
%HOMEPATH%\HROCC\53257.WWN
%HOMEPATH%\HROCC\J8597.FSE
%HOMEPATH%\HROCC\39745.OPK
%HOMEPATH%\HROCC\37216.IHZ
%HOMEPATH%\HROCC\56365.PHE
%HOMEPATH%\HROCC\59683.CGY
%HOMEPATH%\HROCC\57752.QAU
%HOMEPATH%\HROCC\64796.VUU
%HOMEPATH%\HROCC\P18202.BME
%HOMEPATH%\HROCC\49207.DBV
%HOMEPATH%\HROCC\C52738.LDR
%HOMEPATH%\HROCC\O45447.KYK
%HOMEPATH%\HROCC\T68547.AJS
%HOMEPATH%\HROCC\D58617.ISW
%HOMEPATH%\HROCC\79915.HTT
%HOMEPATH%\HROCC\54875.ZNS
%HOMEPATH%\HROCC\6180.QTP

Deletes the following files:

%HOMEPATH%\HROCC\RYSTKIXW.dat

Moves the following files:

from %TEMP%\bitool.xxx to %TEMP%\bitool.dll

Network activity:

Connects to:

'ns##.bisrv.com':80
'ro####.no-ip.biz':1337
'cd#.#isrv.com':80

TCP:

HTTP GET requests:

ns##.bisrv.com/binsis/get_pre_offering_checks?ui######################################################################################################
cd#.#isrv.com/sdk/binsis/2.0/BiTool.dll

UDP:

DNS ASK ns##.bisrv.com
DNS ASK ro####.no-ip.biz
DNS ASK cd#.#isrv.com

Miscellaneous:

Searches for the following windows:

ClassName: '#32770' WindowName: '(null)'
ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'EDIT' WindowName: '(null)'

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations

Free trial