マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Trojan.PWS.Siggen1.8682

Added to the Dr.Web virus database: 2013-10-26

Virus description added:

Technical Information

Malicious functions:
Creates and executes the following:
  • '%TEMP%\RegSvcs.exe'
  • '%HOMEPATH%\WASGF\NKFRB.exe' BGYFYXJS.dat
  • '%HOMEPATH%\WASGF\NKFRB.exe' 527498.SFN
Executes the following:
  • '<SYSTEM32>\wscript.exe' "%HOMEPATH%\WASGF\winrar.vbs" 5225
Terminates or attempts to terminate
the following user processes:
  • ICQ.exe
Searches for registry branches where third party applications store passwords:
  • [<HKLM>\SOFTWARE\FlashFXP]
  • [<HKCU>\Software\Google\Google Talk\Accounts]
  • [<HKCU>\Software\Ghisler\Total Commander]
  • [<HKLM>\Software\Ghisler\Total Commander]
  • [<HKCU>\Software\FTPWare\CoreFTP\Sites]
  • [<HKCU>\Software\Martin Prikryl\WinSCP 2\Sessions]
  • [<HKCU>\Software\Far2\Plugins\FTP\Hosts]
  • [<HKCU>\Software\Far\Plugins\FTP\Hosts]
Modifies file system :
Creates the following files:
  • %HOMEPATH%\WASGF\70028.HTZ
  • %HOMEPATH%\WASGF\D15776.PWN
  • %HOMEPATH%\WASGF\90276.MOD
  • %HOMEPATH%\WASGF\41486.YBB
  • %HOMEPATH%\WASGF\29321.JPZ
  • %HOMEPATH%\WASGF\G98042.ANN
  • %HOMEPATH%\WASGF\O42588.FXM
  • %HOMEPATH%\WASGF\C82140.CEJ
  • %HOMEPATH%\WASGF\8253.EEI
  • %HOMEPATH%\WASGF\18381.JDP
  • %HOMEPATH%\WASGF\E81915.TQO
  • %HOMEPATH%\WASGF\S5395.BXM
  • %HOMEPATH%\WASGF\Z39619.RIO
  • %HOMEPATH%\WASGF\G97812.OKU
  • %HOMEPATH%\WASGF\34391.GMM
  • %HOMEPATH%\WASGF\6175.NZH
  • %HOMEPATH%\WASGF\I17203.ZDU
  • %HOMEPATH%\WASGF\3363.DJG
  • %HOMEPATH%\WASGF\K31026.SCM
  • %HOMEPATH%\WASGF\14992.QVY
  • %HOMEPATH%\WASGF\O80440.ZYO
  • %HOMEPATH%\WASGF\T61477.TPR
  • %HOMEPATH%\WASGF\97189.IGR
  • %HOMEPATH%\WASGF\W10492.UZT
  • %HOMEPATH%\WASGF\J25060.VFP
  • %HOMEPATH%\WASGF\G8148.OIF
  • %HOMEPATH%\WASGF\B90995.UCI
  • %HOMEPATH%\WASGF\96514.ORE
  • %HOMEPATH%\WASGF\60587.QZB
  • %HOMEPATH%\WASGF\F43084.YQO
  • %HOMEPATH%\WASGF\B64358.JJI
  • %HOMEPATH%\WASGF\B51404.PXI
  • %HOMEPATH%\WASGF\G37386.PDZ
  • %HOMEPATH%\WASGF\20617.TEE
  • %HOMEPATH%\WASGF\66914.ZFZ
  • %HOMEPATH%\WASGF\14233.GNQ
  • %HOMEPATH%\WASGF\Z35712.ATW
  • %HOMEPATH%\WASGF\68917.QXR
  • %HOMEPATH%\WASGF\C54671.HOE
  • %HOMEPATH%\WASGF\V98495.INM
  • %HOMEPATH%\WASGF\58410.RHQ
  • %HOMEPATH%\WASGF\4901.EZI
  • %HOMEPATH%\WASGF\A47420.NNU
  • %HOMEPATH%\WASGF\F79458.GAO
  • %HOMEPATH%\WASGF\N9741.ICA
  • %HOMEPATH%\WASGF\17221.MIU
  • %HOMEPATH%\WASGF\98788.NPT
  • %HOMEPATH%\WASGF\90400.CWP
  • %HOMEPATH%\WASGF\S61021.JWO
  • %HOMEPATH%\WASGF\79181.GVB
  • %HOMEPATH%\WASGF\39080.QWT
  • %HOMEPATH%\WASGF\11592.IIQ
  • %HOMEPATH%\WASGF\43810.API
  • %HOMEPATH%\WASGF\46522.RDM
  • %HOMEPATH%\WASGF\59121.KYG
  • %HOMEPATH%\WASGF\42597.QZA
  • %HOMEPATH%\WASGF\30646.TZN
  • %HOMEPATH%\WASGF\44697.KCM
  • %HOMEPATH%\WASGF\I73996.QNY
  • %HOMEPATH%\WASGF\I5774.EZQ
  • %HOMEPATH%\WASGF\98294.ODO
  • %HOMEPATH%\WASGF\72321.LXJ
  • %HOMEPATH%\WASGF\L12981.MYY
  • %HOMEPATH%\WASGF\R3637.OBJ
  • %HOMEPATH%\WASGF\40798.TKP
  • %HOMEPATH%\WASGF\74344.JNQ
  • %HOMEPATH%\WASGF\67477.XZW
  • %HOMEPATH%\WASGF\D29273.CUT
  • %HOMEPATH%\WASGF\3385.MJY
  • %HOMEPATH%\WASGF\Q2504.SQT
  • %HOMEPATH%\WASGF\93532.YCA
  • %HOMEPATH%\WASGF\I77766.AZH
  • %HOMEPATH%\WASGF\76744.RJO
  • %HOMEPATH%\WASGF\F18687.KUF
  • %HOMEPATH%\WASGF\F19506.TUV
  • %HOMEPATH%\WASGF\82651.EIO
  • %HOMEPATH%\WASGF\S43922.YEA
  • %HOMEPATH%\WASGF\47719.TQG
  • %HOMEPATH%\WASGF\G65365.MAM
  • %HOMEPATH%\WASGF\I72141.TON
  • %HOMEPATH%\WASGF\92820.SVC
  • %HOMEPATH%\WASGF\W34966.XGF
  • %HOMEPATH%\WASGF\30407.WQG
  • %HOMEPATH%\WASGF\98392.VWR
  • %HOMEPATH%\WASGF\21433.KYQ
  • %HOMEPATH%\WASGF\62915.TEP
  • %HOMEPATH%\WASGF\24927.KZK
  • %HOMEPATH%\WASGF\T88350.USA
  • %HOMEPATH%\WASGF\V78941.ARP
  • %HOMEPATH%\WASGF\58149.HOO
  • %HOMEPATH%\WASGF\59046.BDH
  • %HOMEPATH%\WASGF\C84875.XOQ
  • %HOMEPATH%\WASGF\A69375.IOF
  • %HOMEPATH%\WASGF\29920.GNY
  • %HOMEPATH%\WASGF\71629.FRY
  • %HOMEPATH%\WASGF\T1537.KJB
  • %HOMEPATH%\WASGF\83738.CSY
  • %HOMEPATH%\WASGF\V83679.XLF
  • %HOMEPATH%\WASGF\L19901.AAC
  • %HOMEPATH%\WASGF\15805.ILM
  • %HOMEPATH%\WASGF\V69916.AIF
  • %HOMEPATH%\WASGF\R60839.KWP
  • %HOMEPATH%\WASGF\36393.NKZ
  • %HOMEPATH%\WASGF\32362.CRQ
  • %HOMEPATH%\WASGF\35507.VZO
  • %HOMEPATH%\WASGF\K83739.FGF
  • %HOMEPATH%\WASGF\61545.PHJ
  • %HOMEPATH%\WASGF\46433.QHN
  • %HOMEPATH%\WASGF\30642.JLA
  • %HOMEPATH%\WASGF\K1080.ROA
  • %HOMEPATH%\WASGF\10477.WSG
  • %HOMEPATH%\WASGF\R81626.FOE
  • %HOMEPATH%\WASGF\B53280.YEK
  • %HOMEPATH%\WASGF\V9783.RRS
  • %HOMEPATH%\WASGF\O41962.QCM
  • %HOMEPATH%\WASGF\P55964.BQD
  • %HOMEPATH%\WASGF\17108.KFZ
  • %HOMEPATH%\WASGF\H81944.CNR
  • %HOMEPATH%\WASGF\N93057.HOF
  • %HOMEPATH%\WASGF\Z93115.HXB
  • %HOMEPATH%\WASGF\U10243.FON
  • %HOMEPATH%\WASGF\64337.OKQ
  • %HOMEPATH%\WASGF\I25207.QST
  • %HOMEPATH%\WASGF\O55621.TJB
  • %HOMEPATH%\WASGF\4852.CSI
  • %HOMEPATH%\WASGF\G32990.VMM
  • %HOMEPATH%\WASGF\21662.ZBF
  • %HOMEPATH%\WASGF\Q73376.WBZ
  • %HOMEPATH%\WASGF\1730.JPB
  • %HOMEPATH%\WASGF\6587.BLE
  • %HOMEPATH%\WASGF\L16050.UWJ
  • %HOMEPATH%\WASGF\47060.PFE
  • %HOMEPATH%\WASGF\C81355.RON
  • %HOMEPATH%\WASGF\34512.LSR
  • %HOMEPATH%\WASGF\V95236.XAZ
  • %HOMEPATH%\WASGF\E24409.INY
  • %HOMEPATH%\WASGF\7737.PJG
  • %HOMEPATH%\WASGF\N67944.PWE
  • %HOMEPATH%\WASGF\51263.UMH
  • %HOMEPATH%\WASGF\I60231.TKJ
  • %HOMEPATH%\WASGF\95455.JAT
  • %HOMEPATH%\WASGF\T34184.LWQ
  • %HOMEPATH%\WASGF\3845.VNB
  • %HOMEPATH%\WASGF\78166.RYG
  • %HOMEPATH%\WASGF\Z13357.OYC
  • %HOMEPATH%\WASGF\35197.TVK
  • %HOMEPATH%\WASGF\27894.HZH
  • %HOMEPATH%\WASGF\X13646.PEZ
  • %HOMEPATH%\WASGF\63547.QSF
  • %HOMEPATH%\WASGF\V47134.ZHE
  • %HOMEPATH%\WASGF\B67982.SRI
  • %HOMEPATH%\WASGF\62892.RVF
  • %HOMEPATH%\WASGF\J27748.LPJ
  • %HOMEPATH%\WASGF\Z18903.LUD
  • %HOMEPATH%\WASGF\V48111.ASR
  • %HOMEPATH%\WASGF\93313.SDY
  • %HOMEPATH%\WASGF\Q37439.OCU
  • %HOMEPATH%\WASGF\Y2559.BSG
  • %HOMEPATH%\WASGF\N73768.BTL
  • %HOMEPATH%\WASGF\20667.HPF
  • %HOMEPATH%\WASGF\71699.MYG
  • %HOMEPATH%\WASGF\D48210.TJD
  • %HOMEPATH%\WASGF\76653.ZTS
  • %HOMEPATH%\WASGF\98708.CJR
  • %HOMEPATH%\WASGF\67822.PSX
  • %HOMEPATH%\WASGF\37543.CLT
  • %HOMEPATH%\WASGF\48722.UIS
  • %HOMEPATH%\WASGF\76331.ZOF
  • %HOMEPATH%\WASGF\Q8958.TYI
  • %HOMEPATH%\WASGF\B68687.YMO
  • %HOMEPATH%\WASGF\C46272.LHD
  • %HOMEPATH%\WASGF\73046.MXB
  • %HOMEPATH%\WASGF\C49072.GOG
  • %HOMEPATH%\WASGF\26278.PAH
  • %TEMP%\report_27-06-2013_17-33-05-F4D651E80A6E4747C8F28A7D8647D810-HPOM.bin
  • %TEMP%\RegSvcs.exe
  • %TEMP%\ufr_reports\NO_PWDS_report_27-06-2013_17-33-05-F4D651E80A6E4747C8F28A7D8647D810-HPOM.bin
  • %TEMP%\NO_PWDS_report_27-06-2013_17-33-05-F4D651E80A6E4747C8F28A7D8647D810-HPOM.bin
  • %HOMEPATH%\WASGF\H54848.ZLN
  • %HOMEPATH%\WASGF\P65449.ZCV
  • %HOMEPATH%\WASGF\BGYFYXJS.dat
  • %HOMEPATH%\WASGF\AOVHR
  • %HOMEPATH%\WASGF\9271.KJN
  • %HOMEPATH%\WASGF\98595.LYI
  • %HOMEPATH%\WASGF\90168.ACH
  • %HOMEPATH%\WASGF\G96015.LHS
  • %HOMEPATH%\WASGF\L27055.PGL
  • %HOMEPATH%\WASGF\R40369.PXA
  • %HOMEPATH%\WASGF\65511.JSV
  • %HOMEPATH%\WASGF\O19566.BGA
  • %HOMEPATH%\WASGF\34093.EEY
  • %HOMEPATH%\WASGF\S42887.CUX
  • %HOMEPATH%\WASGF\55219.BIC
  • %HOMEPATH%\WASGF\K44626.OAN
  • %HOMEPATH%\WASGF\D40446.EYI
  • %HOMEPATH%\WASGF\2165.RSA
  • %HOMEPATH%\WASGF\F57427.FDL
  • %HOMEPATH%\WASGF\43807.KFQ
  • %HOMEPATH%\WASGF\S16490.HCM
  • %HOMEPATH%\WASGF\T36008.IDQ
  • %HOMEPATH%\WASGF\H45131.DNU
  • %HOMEPATH%\WASGF\K77030.GWG
  • %HOMEPATH%\WASGF\Z36180.LCB
  • %HOMEPATH%\WASGF\57755.PIR
  • %HOMEPATH%\WASGF\9156.RMK
  • %HOMEPATH%\WASGF\13827.FAQ
  • %HOMEPATH%\WASGF\D23973.JGJ
  • %HOMEPATH%\WASGF\O26045.YPD
  • %HOMEPATH%\WASGF\K87460.SDF
  • %HOMEPATH%\WASGF\69574.JPO
  • %HOMEPATH%\WASGF\82233.MSA
  • %HOMEPATH%\WASGF\C70131.SBH
  • %HOMEPATH%\WASGF\60215.TBW
  • %HOMEPATH%\WASGF\50676.GGO
  • %HOMEPATH%\WASGF\42518.MZF
  • %HOMEPATH%\WASGF\44147.NTS
  • %HOMEPATH%\WASGF\22387.OEC
  • %HOMEPATH%\WASGF\P36738.ZLJ
  • %HOMEPATH%\WASGF\V19340.EIP
  • %HOMEPATH%\WASGF\R7635.HRD
  • %HOMEPATH%\WASGF\52466.YNV
  • %HOMEPATH%\WASGF\53777.YDQ
  • %HOMEPATH%\WASGF\W47052.IMG
  • %HOMEPATH%\WASGF\U25344.WHY
  • %HOMEPATH%\WASGF\16921.OOB
  • %HOMEPATH%\WASGF\I92615.KKO
  • %HOMEPATH%\WASGF\90285.ZQT
  • %HOMEPATH%\WASGF\88380.LJR
  • %HOMEPATH%\WASGF\71748.KOT
  • %HOMEPATH%\WASGF\E31743.RPC
  • %HOMEPATH%\WASGF\A94889.TTR
  • %HOMEPATH%\WASGF\13890.GNO
  • %HOMEPATH%\WASGF\89243.PEP
  • %HOMEPATH%\WASGF\Y4241.JJE
  • %HOMEPATH%\WASGF\G79154.CCB
  • %HOMEPATH%\WASGF\72178.CGD
  • %HOMEPATH%\WASGF\I9373.ZEU
  • %HOMEPATH%\WASGF\33517.FRN
  • %HOMEPATH%\WASGF\88765.WXC
  • %HOMEPATH%\WASGF\4864.BUX
  • %HOMEPATH%\WASGF\43570.RXG
  • %HOMEPATH%\WASGF\11682.SUL
  • %HOMEPATH%\WASGF\42772.TYX
  • %HOMEPATH%\WASGF\I90703.DBW
  • %HOMEPATH%\WASGF\I71495.AAQ
  • %HOMEPATH%\WASGF\D95573.MXS
  • %HOMEPATH%\WASGF\23366.MUT
  • %HOMEPATH%\WASGF\V79835.YNR
  • %HOMEPATH%\WASGF\86856.UBX
  • %HOMEPATH%\WASGF\L71644.IPS
  • %HOMEPATH%\WASGF\8065.NPY
  • %HOMEPATH%\WASGF\64814.KMN
  • %HOMEPATH%\WASGF\94656.WML
  • %HOMEPATH%\WASGF\97757.VMI
  • %HOMEPATH%\WASGF\P45886.DIB
  • %HOMEPATH%\WASGF\57276.CYN
  • %HOMEPATH%\WASGF\59100.QBH
  • %HOMEPATH%\WASGF\15883.AJD
  • %HOMEPATH%\WASGF\V65054.XJR
  • %HOMEPATH%\WASGF\C39708.MYO
  • %HOMEPATH%\WASGF\70896.DUA
  • %HOMEPATH%\WASGF\Y38343.AUD
  • %HOMEPATH%\WASGF\E33597.FFV
  • %HOMEPATH%\WASGF\77840.BPL
  • %HOMEPATH%\WASGF\O97126.LAG
  • %HOMEPATH%\WASGF\44828.INU
  • %HOMEPATH%\WASGF\V21218.ZBH
  • %HOMEPATH%\WASGF\53540.JCE
  • %HOMEPATH%\WASGF\W77738.JFJ
  • %HOMEPATH%\WASGF\4933.FZZ
  • %HOMEPATH%\WASGF\41778.GVU
  • %HOMEPATH%\WASGF\O40549.EIB
  • %HOMEPATH%\WASGF\17071.HEY
  • %HOMEPATH%\WASGF\92087.OLT
  • %HOMEPATH%\WASGF\93079.HZK
  • %HOMEPATH%\WASGF\85454.IXC
  • %HOMEPATH%\WASGF\G19891.LJD
  • %HOMEPATH%\WASGF\98417.XEW
  • %HOMEPATH%\WASGF\82339.LID
  • %HOMEPATH%\WASGF\C95993.MBV
  • %HOMEPATH%\WASGF\K73224.KYO
  • %HOMEPATH%\WASGF\73971.BPX
  • %HOMEPATH%\WASGF\78785.IJN
  • %HOMEPATH%\WASGF\T8948.JVD
  • %HOMEPATH%\WASGF\45399.ZAP
  • %HOMEPATH%\WASGF\46198.CPG
  • %HOMEPATH%\WASGF\T94462.XXK
  • %HOMEPATH%\WASGF\Z1077.PFS
  • %HOMEPATH%\WASGF\78299.XCU
  • %HOMEPATH%\WASGF\61638.WCA
  • %HOMEPATH%\WASGF\39945.PTI
  • %HOMEPATH%\WASGF\A48287.DYF
  • %HOMEPATH%\WASGF\G85133.EST
  • %HOMEPATH%\WASGF\67563.YLP
  • %HOMEPATH%\WASGF\66452.ZID
  • %HOMEPATH%\WASGF\64024.XTZ
  • %HOMEPATH%\WASGF\C28526.LZV
  • %HOMEPATH%\WASGF\N46660.MNP
  • %HOMEPATH%\WASGF\M10942.CFW
  • %HOMEPATH%\WASGF\R70322.EWF
  • %HOMEPATH%\WASGF\I12939.RFS
  • %HOMEPATH%\WASGF\69704.BHW
  • %HOMEPATH%\WASGF\18322.KID
  • %HOMEPATH%\WASGF\F24239.YHC
  • %HOMEPATH%\WASGF\S19436.YIM
  • %HOMEPATH%\WASGF\O44269.LZQ
  • %HOMEPATH%\WASGF\44600.HFL
  • %HOMEPATH%\WASGF\48945.SMK
  • %HOMEPATH%\WASGF\85789.YUJ
  • %HOMEPATH%\WASGF\95376.WGJ
  • %HOMEPATH%\WASGF\V76433.QKR
  • %HOMEPATH%\WASGF\24684.TVQ
  • %HOMEPATH%\WASGF\17574.ZWX
  • %HOMEPATH%\WASGF\15240.DFR
  • %HOMEPATH%\WASGF\60489.JWR
  • %HOMEPATH%\WASGF\Z1652.AUU
  • %HOMEPATH%\WASGF\A57061.GLO
  • %HOMEPATH%\WASGF\10071.ABH
  • %HOMEPATH%\WASGF\80395.UML
  • %HOMEPATH%\WASGF\X64244.TED
  • %HOMEPATH%\WASGF\75057.KKT
  • %HOMEPATH%\WASGF\B72244.WEF
  • %HOMEPATH%\WASGF\47007.TGI
  • %HOMEPATH%\WASGF\30503.ANL
  • %HOMEPATH%\WASGF\76134.OMB
  • %HOMEPATH%\WASGF\I42027.WFQ
  • %HOMEPATH%\WASGF\80726.RYH
  • %HOMEPATH%\WASGF\67162.UYD
  • %HOMEPATH%\WASGF\Q26670.HGU
  • %HOMEPATH%\WASGF\Q22569.CUZ
  • %HOMEPATH%\WASGF\L23730.EFH
  • %HOMEPATH%\WASGF\27771.FSL
  • %HOMEPATH%\WASGF\C92135.KPR
  • %HOMEPATH%\WASGF\C36329.WNC
  • %HOMEPATH%\WASGF\15923.VDV
  • %HOMEPATH%\WASGF\G42165.BWW
  • %HOMEPATH%\WASGF\E2460.VXY
  • %HOMEPATH%\WASGF\62122.XXV
  • %HOMEPATH%\WASGF\H73315.LTE
  • %HOMEPATH%\WASGF\39721.CCZ
  • %HOMEPATH%\WASGF\12082.YYQ
  • %HOMEPATH%\WASGF\47095.NIV
  • %HOMEPATH%\WASGF\36591.MFT
  • %HOMEPATH%\WASGF\L52942.QLF
  • %HOMEPATH%\WASGF\16746.XDR
  • %HOMEPATH%\WASGF\98235.JXD
  • %HOMEPATH%\WASGF\86978.THF
  • %HOMEPATH%\WASGF\J39649.ZRT
  • %HOMEPATH%\WASGF\Q80044.NOT
  • %HOMEPATH%\WASGF\42452.BJZ
  • %HOMEPATH%\WASGF\winrar.vbs
  • %HOMEPATH%\WASGF\settings.ini
  • %HOMEPATH%\WASGF\X12090.XWL
  • %HOMEPATH%\WASGF\C34783.WKD
  • %HOMEPATH%\WASGF\487427.dat
  • %HOMEPATH%\WASGF\527498.SFN
  • %HOMEPATH%\WASGF\NKFRB.exe
  • %HOMEPATH%\WASGF\31370.dat
  • %HOMEPATH%\WASGF\I71982.JFT
  • %HOMEPATH%\WASGF\76389.RXF
  • %HOMEPATH%\WASGF\70739.RAZ
  • %HOMEPATH%\WASGF\62670.MFC
  • %HOMEPATH%\WASGF\32658.HNM
  • %HOMEPATH%\WASGF\Z99711.BTB
  • %HOMEPATH%\WASGF\49503.EPH
  • %HOMEPATH%\WASGF\N86069.NJP
  • %HOMEPATH%\WASGF\53006.PRK
  • %HOMEPATH%\WASGF\Y3600.GCK
  • %HOMEPATH%\WASGF\99852.JKX
  • %HOMEPATH%\WASGF\L5184.TAI
  • %HOMEPATH%\WASGF\87609.IEJ
  • %HOMEPATH%\WASGF\Q50816.ZKZ
  • %HOMEPATH%\WASGF\Y15322.VJY
  • %HOMEPATH%\WASGF\C74775.GJN
  • %HOMEPATH%\WASGF\82103.GOX
  • %HOMEPATH%\WASGF\54499.SDJ
  • %HOMEPATH%\WASGF\O54764.OOC
  • %HOMEPATH%\WASGF\B85573.RDF
  • %HOMEPATH%\WASGF\M19340.GYP
  • %HOMEPATH%\WASGF\47016.ZNH
  • %HOMEPATH%\WASGF\E67998.VEK
  • %HOMEPATH%\WASGF\32124.RTH
  • %HOMEPATH%\WASGF\87098.AVU
  • %HOMEPATH%\WASGF\84612.SHZ
  • %HOMEPATH%\WASGF\S43097.EEJ
  • %HOMEPATH%\WASGF\H80453.XQC
  • %HOMEPATH%\WASGF\21497.UEV
  • %HOMEPATH%\WASGF\K46965.NPJ
  • %HOMEPATH%\WASGF\87998.MCP
  • %HOMEPATH%\WASGF\9688.HXW
  • %HOMEPATH%\WASGF\O24902.KSN
  • %HOMEPATH%\WASGF\D83283.OVM
  • %HOMEPATH%\WASGF\D75420.PWC
  • %HOMEPATH%\WASGF\38687.EJZ
  • %HOMEPATH%\WASGF\37582.FYO
  • %HOMEPATH%\WASGF\21470.FQR
  • %HOMEPATH%\WASGF\A57992.EBI
  • %HOMEPATH%\WASGF\45540.BGP
  • %HOMEPATH%\WASGF\90587.OOT
  • %HOMEPATH%\WASGF\G10520.XXX
  • %HOMEPATH%\WASGF\14738.MZX
  • %HOMEPATH%\WASGF\J36919.UJJ
  • %HOMEPATH%\WASGF\A63872.LTS
  • %HOMEPATH%\WASGF\P59040.DIO
  • %HOMEPATH%\WASGF\75159.JHO
  • %HOMEPATH%\WASGF\Z37195.LDA
  • %HOMEPATH%\WASGF\22540.WYJ
  • %HOMEPATH%\WASGF\66365.DII
  • %HOMEPATH%\WASGF\V66468.OPL
  • %HOMEPATH%\WASGF\N36123.HMH
  • %HOMEPATH%\WASGF\4462.NOY
  • %HOMEPATH%\WASGF\23686.OBY
  • %HOMEPATH%\WASGF\94642.SJJ
  • %HOMEPATH%\WASGF\16430.RRO
  • %HOMEPATH%\WASGF\40740.TRD
  • %HOMEPATH%\WASGF\89640.MXG
  • %HOMEPATH%\WASGF\D11946.HEF
  • %HOMEPATH%\WASGF\45469.UFT
  • %HOMEPATH%\WASGF\P7905.GAF
  • %HOMEPATH%\WASGF\18589.MZD
  • %HOMEPATH%\WASGF\J50624.OWT
  • %HOMEPATH%\WASGF\F22915.SUW
  • %HOMEPATH%\WASGF\31507.MYY
  • %HOMEPATH%\WASGF\G58288.WRQ
  • %HOMEPATH%\WASGF\65994.GDP
  • %HOMEPATH%\WASGF\98231.MES
  • %HOMEPATH%\WASGF\53266.GRO
  • %HOMEPATH%\WASGF\82793.CCQ
  • %HOMEPATH%\WASGF\B18010.YVH
  • %HOMEPATH%\WASGF\20405.XZO
  • %HOMEPATH%\WASGF\8718.UEV
  • %HOMEPATH%\WASGF\P69113.OFP
  • %HOMEPATH%\WASGF\O24075.ELQ
  • %HOMEPATH%\WASGF\R31257.NYG
  • %HOMEPATH%\WASGF\O99740.GPK
  • %HOMEPATH%\WASGF\14328.KMY
  • %HOMEPATH%\WASGF\85688.ZGO
  • %HOMEPATH%\WASGF\13660.LWW
  • %HOMEPATH%\WASGF\R85547.RHR
  • %HOMEPATH%\WASGF\23643.VNJ
  • %HOMEPATH%\WASGF\P32299.TMX
  • %HOMEPATH%\WASGF\X1987.RZR
  • %HOMEPATH%\WASGF\P18037.VPP
  • %HOMEPATH%\WASGF\V99053.ONP
  • %HOMEPATH%\WASGF\7210.ZOA
  • %HOMEPATH%\WASGF\53396.EPU
  • %HOMEPATH%\WASGF\Z44706.WSE
  • %HOMEPATH%\WASGF\88131.XSZ
  • %HOMEPATH%\WASGF\Z51432.UDH
  • %HOMEPATH%\WASGF\91677.MNG
  • %HOMEPATH%\WASGF\61717.NNH
  • %HOMEPATH%\WASGF\O20714.IRX
  • %HOMEPATH%\WASGF\G38478.EMP
  • %HOMEPATH%\WASGF\V56243.UGJ
  • %HOMEPATH%\WASGF\P21052.NUB
  • %HOMEPATH%\WASGF\C75691.RKJ
  • %HOMEPATH%\WASGF\H85893.KWR
  • %HOMEPATH%\WASGF\28917.SWR
  • %HOMEPATH%\WASGF\O76942.PKU
  • %HOMEPATH%\WASGF\Z31389.RVL
  • %HOMEPATH%\WASGF\67831.WAG
  • %HOMEPATH%\WASGF\H86268.DFR
  • %HOMEPATH%\WASGF\A53464.TWJ
  • %HOMEPATH%\WASGF\M75594.JEP
  • %HOMEPATH%\WASGF\11454.WYF
  • %HOMEPATH%\WASGF\38991.CFD
  • %HOMEPATH%\WASGF\X23336.VOT
  • %HOMEPATH%\WASGF\56730.OGH
  • %HOMEPATH%\WASGF\C90856.MKY
  • %HOMEPATH%\WASGF\62672.JJE
  • %HOMEPATH%\WASGF\M93126.XJK
  • %HOMEPATH%\WASGF\77047.ATL
  • %HOMEPATH%\WASGF\96815.EJA
  • %HOMEPATH%\WASGF\W14994.XXD
  • %HOMEPATH%\WASGF\63985.IIT
  • %HOMEPATH%\WASGF\X72296.IRH
  • %HOMEPATH%\WASGF\X75749.AYJ
  • %HOMEPATH%\WASGF\X49781.WNQ
  • %HOMEPATH%\WASGF\Z12466.UPU
  • %HOMEPATH%\WASGF\86284.LOF
  • %HOMEPATH%\WASGF\27885.MRG
  • %HOMEPATH%\WASGF\C88942.MJR
  • %HOMEPATH%\WASGF\M72736.YOP
  • %HOMEPATH%\WASGF\U2897.MOH
  • %HOMEPATH%\WASGF\D56893.ZYS
  • %HOMEPATH%\WASGF\S58313.LWW
  • %HOMEPATH%\WASGF\53198.XTG
  • %HOMEPATH%\WASGF\3364.JGT
  • %HOMEPATH%\WASGF\54334.MJV
  • %HOMEPATH%\WASGF\V80771.CNE
  • %HOMEPATH%\WASGF\D21306.ULZ
  • %HOMEPATH%\WASGF\48139.KMK
  • %HOMEPATH%\WASGF\I71807.UOG
  • %HOMEPATH%\WASGF\94320.JOY
  • %HOMEPATH%\WASGF\T76847.VQY
  • %HOMEPATH%\WASGF\R42495.EUA
  • %HOMEPATH%\WASGF\N40053.GYD
  • %HOMEPATH%\WASGF\D68447.HLE
  • %HOMEPATH%\WASGF\63603.LLC
  • %HOMEPATH%\WASGF\M19427.MGU
  • %HOMEPATH%\WASGF\65112.FSE
  • %HOMEPATH%\WASGF\93388.QVS
  • %HOMEPATH%\WASGF\O14816.WPX
  • %HOMEPATH%\WASGF\H25715.OPB
  • %HOMEPATH%\WASGF\Y17768.MBL
  • %HOMEPATH%\WASGF\93450.NVY
  • %HOMEPATH%\WASGF\B89815.YDN
  • %HOMEPATH%\WASGF\33424.AQR
  • %HOMEPATH%\WASGF\D12751.YHG
  • %HOMEPATH%\WASGF\60394.VJL
  • %HOMEPATH%\WASGF\P32305.DBJ
  • %HOMEPATH%\WASGF\57395.RUV
  • %HOMEPATH%\WASGF\U81533.ZGU
  • %HOMEPATH%\WASGF\X39009.JIC
  • %HOMEPATH%\WASGF\24878.AKM
  • %HOMEPATH%\WASGF\J10867.BMT
  • %HOMEPATH%\WASGF\91036.YMR
  • %HOMEPATH%\WASGF\85113.YNE
  • %HOMEPATH%\WASGF\48058.VHS
  • %HOMEPATH%\WASGF\68795.IKW
  • %HOMEPATH%\WASGF\46007.JFW
  • %HOMEPATH%\WASGF\55782.UKP
  • %HOMEPATH%\WASGF\67743.MEB
  • %HOMEPATH%\WASGF\L10639.VTO
  • %HOMEPATH%\WASGF\S98566.ROB
  • %HOMEPATH%\WASGF\O31111.PSZ
  • %HOMEPATH%\WASGF\F45652.WUT
  • %HOMEPATH%\WASGF\8314.YIC
  • %HOMEPATH%\WASGF\N39771.PYZ
  • %HOMEPATH%\WASGF\95716.BIM
  • %HOMEPATH%\WASGF\D36543.COQ
  • %HOMEPATH%\WASGF\19877.EIZ
Sets the 'hidden' attribute to the following files:
  • %HOMEPATH%\WASGF\G98042.ANN
  • %HOMEPATH%\WASGF\I17203.ZDU
  • %HOMEPATH%\WASGF\C82140.CEJ
  • %HOMEPATH%\WASGF\29321.JPZ
  • %HOMEPATH%\WASGF\G8148.OIF
  • %HOMEPATH%\WASGF\B90995.UCI
  • %HOMEPATH%\WASGF\96514.ORE
  • %HOMEPATH%\WASGF\60587.QZB
  • %HOMEPATH%\WASGF\G97812.OKU
  • %HOMEPATH%\WASGF\90276.MOD
  • %HOMEPATH%\WASGF\6175.NZH
  • %HOMEPATH%\WASGF\Z39619.RIO
  • %HOMEPATH%\WASGF\D15776.PWN
  • %HOMEPATH%\WASGF\O42588.FXM
  • %HOMEPATH%\WASGF\41486.YBB
  • %HOMEPATH%\WASGF\70028.HTZ
  • %HOMEPATH%\WASGF\T61477.TPR
  • %HOMEPATH%\WASGF\97189.IGR
  • %HOMEPATH%\WASGF\W10492.UZT
  • %HOMEPATH%\WASGF\J25060.VFP
  • %HOMEPATH%\WASGF\R81626.FOE
  • %HOMEPATH%\WASGF\30642.JLA
  • %HOMEPATH%\WASGF\67477.XZW
  • %HOMEPATH%\WASGF\10477.WSG
  • %HOMEPATH%\WASGF\F43084.YQO
  • %HOMEPATH%\WASGF\B64358.JJI
  • %HOMEPATH%\WASGF\B51404.PXI
  • %HOMEPATH%\WASGF\G37386.PDZ
  • %HOMEPATH%\WASGF\3363.DJG
  • %HOMEPATH%\WASGF\K31026.SCM
  • %HOMEPATH%\WASGF\14992.QVY
  • %HOMEPATH%\WASGF\O80440.ZYO
  • %HOMEPATH%\WASGF\34391.GMM
  • %HOMEPATH%\WASGF\C54671.HOE
  • %HOMEPATH%\WASGF\79181.GVB
  • %HOMEPATH%\WASGF\58410.RHQ
  • %HOMEPATH%\WASGF\68917.QXR
  • %HOMEPATH%\WASGF\I73996.QNY
  • %HOMEPATH%\WASGF\I5774.EZQ
  • %HOMEPATH%\WASGF\98294.ODO
  • %HOMEPATH%\WASGF\72321.LXJ
  • %HOMEPATH%\WASGF\98788.NPT
  • %HOMEPATH%\WASGF\14233.GNQ
  • %HOMEPATH%\WASGF\S61021.JWO
  • %HOMEPATH%\WASGF\17221.MIU
  • %HOMEPATH%\WASGF\66914.ZFZ
  • %HOMEPATH%\WASGF\V98495.INM
  • %HOMEPATH%\WASGF\Z35712.ATW
  • %HOMEPATH%\WASGF\20617.TEE
  • %HOMEPATH%\WASGF\59121.KYG
  • %HOMEPATH%\WASGF\42597.QZA
  • %HOMEPATH%\WASGF\30646.TZN
  • %HOMEPATH%\WASGF\44697.KCM
  • %HOMEPATH%\WASGF\8253.EEI
  • %HOMEPATH%\WASGF\18381.JDP
  • %HOMEPATH%\WASGF\E81915.TQO
  • %HOMEPATH%\WASGF\S5395.BXM
  • %HOMEPATH%\WASGF\L12981.MYY
  • %HOMEPATH%\WASGF\R3637.OBJ
  • %HOMEPATH%\WASGF\40798.TKP
  • %HOMEPATH%\WASGF\74344.JNQ
  • %HOMEPATH%\WASGF\39080.QWT
  • %HOMEPATH%\WASGF\11592.IIQ
  • %HOMEPATH%\WASGF\43810.API
  • %HOMEPATH%\WASGF\46522.RDM
  • %HOMEPATH%\WASGF\K1080.ROA
  • %HOMEPATH%\WASGF\I77766.AZH
  • %HOMEPATH%\WASGF\76744.RJO
  • %HOMEPATH%\WASGF\F18687.KUF
  • %HOMEPATH%\WASGF\F19506.TUV
  • %HOMEPATH%\WASGF\T1537.KJB
  • %HOMEPATH%\WASGF\A69375.IOF
  • %HOMEPATH%\WASGF\98392.VWR
  • %HOMEPATH%\WASGF\71629.FRY
  • %HOMEPATH%\WASGF\I72141.TON
  • %HOMEPATH%\WASGF\92820.SVC
  • %HOMEPATH%\WASGF\W34966.XGF
  • %HOMEPATH%\WASGF\30407.WQG
  • %HOMEPATH%\WASGF\D29273.CUT
  • %HOMEPATH%\WASGF\3385.MJY
  • %HOMEPATH%\WASGF\Q2504.SQT
  • %HOMEPATH%\WASGF\93532.YCA
  • %HOMEPATH%\WASGF\C84875.XOQ
  • %HOMEPATH%\WASGF\V78941.ARP
  • %HOMEPATH%\WASGF\62915.TEP
  • %HOMEPATH%\WASGF\59046.BDH
  • %HOMEPATH%\WASGF\V99053.ONP
  • %HOMEPATH%\WASGF\P32299.TMX
  • %HOMEPATH%\WASGF\58149.HOO
  • %HOMEPATH%\WASGF\P18037.VPP
  • %HOMEPATH%\WASGF\15805.ILM
  • %HOMEPATH%\WASGF\83738.CSY
  • %HOMEPATH%\WASGF\29920.GNY
  • %HOMEPATH%\WASGF\L19901.AAC
  • %HOMEPATH%\WASGF\T88350.USA
  • %HOMEPATH%\WASGF\21433.KYQ
  • %HOMEPATH%\WASGF\V83679.XLF
  • %HOMEPATH%\WASGF\24927.KZK
  • %HOMEPATH%\WASGF\S43922.YEA
  • %HOMEPATH%\WASGF\35507.VZO
  • %HOMEPATH%\WASGF\K83739.FGF
  • %HOMEPATH%\WASGF\61545.PHJ
  • %HOMEPATH%\WASGF\46433.QHN
  • %HOMEPATH%\WASGF\1730.JPB
  • %HOMEPATH%\WASGF\G32990.VMM
  • %HOMEPATH%\WASGF\17108.KFZ
  • %HOMEPATH%\WASGF\Q73376.WBZ
  • %HOMEPATH%\WASGF\B53280.YEK
  • %HOMEPATH%\WASGF\V9783.RRS
  • %HOMEPATH%\WASGF\O41962.QCM
  • %HOMEPATH%\WASGF\P55964.BQD
  • %HOMEPATH%\WASGF\V69916.AIF
  • %HOMEPATH%\WASGF\R60839.KWP
  • %HOMEPATH%\WASGF\36393.NKZ
  • %HOMEPATH%\WASGF\32362.CRQ
  • %HOMEPATH%\WASGF\4852.CSI
  • %HOMEPATH%\WASGF\64337.OKQ
  • %HOMEPATH%\WASGF\N93057.HOF
  • %HOMEPATH%\WASGF\O55621.TJB
  • %HOMEPATH%\WASGF\G65365.MAM
  • %HOMEPATH%\WASGF\82651.EIO
  • %HOMEPATH%\WASGF\I25207.QST
  • %HOMEPATH%\WASGF\47719.TQG
  • %HOMEPATH%\WASGF\C81355.RON
  • %HOMEPATH%\WASGF\6587.BLE
  • %HOMEPATH%\WASGF\21662.ZBF
  • %HOMEPATH%\WASGF\47060.PFE
  • %HOMEPATH%\WASGF\U10243.FON
  • %HOMEPATH%\WASGF\H81944.CNR
  • %HOMEPATH%\WASGF\L16050.UWJ
  • %HOMEPATH%\WASGF\Z93115.HXB
  • %HOMEPATH%\WASGF\90400.CWP
  • %HOMEPATH%\WASGF\V47134.ZHE
  • %HOMEPATH%\WASGF\71699.MYG
  • %HOMEPATH%\WASGF\N67944.PWE
  • %HOMEPATH%\WASGF\51263.UMH
  • %HOMEPATH%\WASGF\20667.HPF
  • %HOMEPATH%\WASGF\67822.PSX
  • %HOMEPATH%\WASGF\D48210.TJD
  • %HOMEPATH%\WASGF\N73768.BTL
  • %HOMEPATH%\WASGF\E24409.INY
  • %HOMEPATH%\WASGF\7737.PJG
  • %HOMEPATH%\WASGF\35197.TVK
  • %HOMEPATH%\WASGF\27894.HZH
  • %HOMEPATH%\WASGF\I60231.TKJ
  • %HOMEPATH%\WASGF\95455.JAT
  • %HOMEPATH%\WASGF\34512.LSR
  • %HOMEPATH%\WASGF\V95236.XAZ
  • %HOMEPATH%\WASGF\93313.SDY
  • %HOMEPATH%\WASGF\T36008.IDQ
  • %HOMEPATH%\WASGF\Y2559.BSG
  • %HOMEPATH%\WASGF\V48111.ASR
  • %HOMEPATH%\WASGF\11682.SUL
  • %HOMEPATH%\WASGF\42772.TYX
  • %HOMEPATH%\WASGF\I90703.DBW
  • %HOMEPATH%\WASGF\I71495.AAQ
  • %HOMEPATH%\WASGF\98708.CJR
  • %HOMEPATH%\WASGF\J27748.LPJ
  • %HOMEPATH%\WASGF\37543.CLT
  • %HOMEPATH%\WASGF\76653.ZTS
  • %HOMEPATH%\WASGF\62892.RVF
  • %HOMEPATH%\WASGF\Q37439.OCU
  • %HOMEPATH%\WASGF\Z18903.LUD
  • %HOMEPATH%\WASGF\B67982.SRI
  • %HOMEPATH%\WASGF\63547.QSF
  • %HOMEPATH%\WASGF\9271.KJN
  • %HOMEPATH%\WASGF\K44626.OAN
  • %HOMEPATH%\WASGF\C46272.LHD
  • %HOMEPATH%\WASGF\73046.MXB
  • %HOMEPATH%\WASGF\55219.BIC
  • %HOMEPATH%\WASGF\43807.KFQ
  • %HOMEPATH%\WASGF\D40446.EYI
  • %HOMEPATH%\WASGF\S42887.CUX
  • %HOMEPATH%\WASGF\Q8958.TYI
  • %HOMEPATH%\WASGF\B68687.YMO
  • %HOMEPATH%\WASGF\H54848.ZLN
  • %HOMEPATH%\WASGF\P65449.ZCV
  • %HOMEPATH%\WASGF\C49072.GOG
  • %HOMEPATH%\WASGF\26278.PAH
  • %HOMEPATH%\WASGF\48722.UIS
  • %HOMEPATH%\WASGF\76331.ZOF
  • %HOMEPATH%\WASGF\65511.JSV
  • %HOMEPATH%\WASGF\78166.RYG
  • %HOMEPATH%\WASGF\34093.EEY
  • %HOMEPATH%\WASGF\R40369.PXA
  • %HOMEPATH%\WASGF\3845.VNB
  • %HOMEPATH%\WASGF\X13646.PEZ
  • %HOMEPATH%\WASGF\Z13357.OYC
  • %HOMEPATH%\WASGF\T34184.LWQ
  • %HOMEPATH%\WASGF\F57427.FDL
  • %HOMEPATH%\WASGF\G96015.LHS
  • %HOMEPATH%\WASGF\S16490.HCM
  • %HOMEPATH%\WASGF\2165.RSA
  • %HOMEPATH%\WASGF\90168.ACH
  • %HOMEPATH%\WASGF\O19566.BGA
  • %HOMEPATH%\WASGF\L27055.PGL
  • %HOMEPATH%\WASGF\98595.LYI
  • %HOMEPATH%\WASGF\V79835.YNR
  • %HOMEPATH%\WASGF\13827.FAQ
  • %HOMEPATH%\WASGF\22387.OEC
  • %HOMEPATH%\WASGF\O26045.YPD
  • %HOMEPATH%\WASGF\9156.RMK
  • %HOMEPATH%\WASGF\I92615.KKO
  • %HOMEPATH%\WASGF\90285.ZQT
  • %HOMEPATH%\WASGF\88380.LJR
  • %HOMEPATH%\WASGF\71748.KOT
  • %HOMEPATH%\WASGF\50676.GGO
  • %HOMEPATH%\WASGF\Z36180.LCB
  • %HOMEPATH%\WASGF\44147.NTS
  • %HOMEPATH%\WASGF\60215.TBW
  • %HOMEPATH%\WASGF\K77030.GWG
  • %HOMEPATH%\WASGF\D23973.JGJ
  • %HOMEPATH%\WASGF\57755.PIR
  • %HOMEPATH%\WASGF\H45131.DNU
  • %HOMEPATH%\WASGF\53777.YDQ
  • %HOMEPATH%\WASGF\W47052.IMG
  • %HOMEPATH%\WASGF\U25344.WHY
  • %HOMEPATH%\WASGF\16921.OOB
  • %HOMEPATH%\WASGF\4901.EZI
  • %HOMEPATH%\WASGF\A47420.NNU
  • %HOMEPATH%\WASGF\F79458.GAO
  • %HOMEPATH%\WASGF\N9741.ICA
  • %HOMEPATH%\WASGF\E31743.RPC
  • %HOMEPATH%\WASGF\A94889.TTR
  • %HOMEPATH%\WASGF\13890.GNO
  • %HOMEPATH%\WASGF\89243.PEP
  • %HOMEPATH%\WASGF\P36738.ZLJ
  • %HOMEPATH%\WASGF\V19340.EIP
  • %HOMEPATH%\WASGF\R7635.HRD
  • %HOMEPATH%\WASGF\52466.YNV
  • %HOMEPATH%\WASGF\42518.MZF
  • %HOMEPATH%\WASGF\88765.WXC
  • %HOMEPATH%\WASGF\L71644.IPS
  • %HOMEPATH%\WASGF\43570.RXG
  • %HOMEPATH%\WASGF\33517.FRN
  • %HOMEPATH%\WASGF\V65054.XJR
  • %HOMEPATH%\WASGF\C39708.MYO
  • %HOMEPATH%\WASGF\70896.DUA
  • %HOMEPATH%\WASGF\Y38343.AUD
  • %HOMEPATH%\WASGF\23366.MUT
  • %HOMEPATH%\WASGF\72178.CGD
  • %HOMEPATH%\WASGF\86856.UBX
  • %HOMEPATH%\WASGF\D95573.MXS
  • %HOMEPATH%\WASGF\G79154.CCB
  • %HOMEPATH%\WASGF\4864.BUX
  • %HOMEPATH%\WASGF\I9373.ZEU
  • %HOMEPATH%\WASGF\Y4241.JJE
  • %HOMEPATH%\WASGF\P45886.DIB
  • %HOMEPATH%\WASGF\57276.CYN
  • %HOMEPATH%\WASGF\59100.QBH
  • %HOMEPATH%\WASGF\15883.AJD
  • %HOMEPATH%\WASGF\K87460.SDF
  • %HOMEPATH%\WASGF\69574.JPO
  • %HOMEPATH%\WASGF\82233.MSA
  • %HOMEPATH%\WASGF\C70131.SBH
  • %HOMEPATH%\WASGF\E33597.FFV
  • %HOMEPATH%\WASGF\77840.BPL
  • %HOMEPATH%\WASGF\O97126.LAG
  • %HOMEPATH%\WASGF\44828.INU
  • %HOMEPATH%\WASGF\8065.NPY
  • %HOMEPATH%\WASGF\64814.KMN
  • %HOMEPATH%\WASGF\94656.WML
  • %HOMEPATH%\WASGF\97757.VMI
  • %HOMEPATH%\WASGF\17071.HEY
  • %HOMEPATH%\WASGF\92087.OLT
  • %HOMEPATH%\WASGF\V21218.ZBH
  • %HOMEPATH%\WASGF\53540.JCE
  • %HOMEPATH%\WASGF\78785.IJN
  • %HOMEPATH%\WASGF\67563.YLP
  • %HOMEPATH%\WASGF\41778.GVU
  • %HOMEPATH%\WASGF\O40549.EIB
  • %HOMEPATH%\WASGF\K73224.KYO
  • %HOMEPATH%\WASGF\73971.BPX
  • %HOMEPATH%\WASGF\93079.HZK
  • %HOMEPATH%\WASGF\85454.IXC
  • %HOMEPATH%\WASGF\W77738.JFJ
  • %HOMEPATH%\WASGF\4933.FZZ
  • %HOMEPATH%\WASGF\82339.LID
  • %HOMEPATH%\WASGF\C95993.MBV
  • %HOMEPATH%\WASGF\45399.ZAP
  • %HOMEPATH%\WASGF\61638.WCA
  • %HOMEPATH%\WASGF\T94462.XXK
  • %HOMEPATH%\WASGF\T8948.JVD
  • %HOMEPATH%\WASGF\78299.XCU
  • %HOMEPATH%\WASGF\C92135.KPR
  • %HOMEPATH%\WASGF\39945.PTI
  • %HOMEPATH%\WASGF\Z1077.PFS
  • %HOMEPATH%\WASGF\G85133.EST
  • %HOMEPATH%\WASGF\N46660.MNP
  • %HOMEPATH%\WASGF\66452.ZID
  • %HOMEPATH%\WASGF\A48287.DYF
  • %HOMEPATH%\WASGF\C28526.LZV
  • %HOMEPATH%\WASGF\46198.CPG
  • %HOMEPATH%\WASGF\M10942.CFW
  • %HOMEPATH%\WASGF\64024.XTZ
  • %HOMEPATH%\WASGF\98417.XEW
  • %HOMEPATH%\WASGF\O44269.LZQ
  • %HOMEPATH%\WASGF\44600.HFL
  • %HOMEPATH%\WASGF\R70322.EWF
  • %HOMEPATH%\WASGF\I12939.RFS
  • %HOMEPATH%\WASGF\Z1652.AUU
  • %HOMEPATH%\WASGF\80726.RYH
  • %HOMEPATH%\WASGF\F24239.YHC
  • %HOMEPATH%\WASGF\S19436.YIM
  • %HOMEPATH%\WASGF\15240.DFR
  • %HOMEPATH%\WASGF\60489.JWR
  • %HOMEPATH%\WASGF\48945.SMK
  • %HOMEPATH%\WASGF\85789.YUJ
  • %HOMEPATH%\WASGF\69704.BHW
  • %HOMEPATH%\WASGF\18322.KID
  • %HOMEPATH%\WASGF\24684.TVQ
  • %HOMEPATH%\WASGF\17574.ZWX
  • %HOMEPATH%\WASGF\10071.ABH
  • %HOMEPATH%\WASGF\47007.TGI
  • %HOMEPATH%\WASGF\X64244.TED
  • %HOMEPATH%\WASGF\A57061.GLO
  • %HOMEPATH%\WASGF\B72244.WEF
  • %HOMEPATH%\WASGF\G19891.LJD
  • %HOMEPATH%\WASGF\30503.ANL
  • %HOMEPATH%\WASGF\75057.KKT
  • %HOMEPATH%\WASGF\I42027.WFQ
  • %HOMEPATH%\WASGF\L23730.EFH
  • %HOMEPATH%\WASGF\67162.UYD
  • %HOMEPATH%\WASGF\76134.OMB
  • %HOMEPATH%\WASGF\Q22569.CUZ
  • %HOMEPATH%\WASGF\80395.UML
  • %HOMEPATH%\WASGF\27771.FSL
  • %HOMEPATH%\WASGF\Q26670.HGU
  • %HOMEPATH%\WASGF\O54764.OOC
  • %HOMEPATH%\WASGF\15923.VDV
  • %HOMEPATH%\WASGF\39721.CCZ
  • %HOMEPATH%\WASGF\E2460.VXY
  • %HOMEPATH%\WASGF\C36329.WNC
  • %HOMEPATH%\WASGF\H73315.LTE
  • %HOMEPATH%\WASGF\42452.BJZ
  • %HOMEPATH%\WASGF\12082.YYQ
  • %HOMEPATH%\WASGF\62122.XXV
  • %HOMEPATH%\WASGF\36591.MFT
  • %HOMEPATH%\WASGF\J39649.ZRT
  • %HOMEPATH%\WASGF\16746.XDR
  • %HOMEPATH%\WASGF\47095.NIV
  • %HOMEPATH%\WASGF\86978.THF
  • %HOMEPATH%\WASGF\G42165.BWW
  • %HOMEPATH%\WASGF\Q80044.NOT
  • %HOMEPATH%\WASGF\98235.JXD
  • %HOMEPATH%\WASGF\winrar.vbs
  • %HOMEPATH%\WASGF\settings.ini
  • %HOMEPATH%\WASGF\X12090.XWL
  • %HOMEPATH%\WASGF\C34783.WKD
  • %HOMEPATH%\WASGF\487427.dat
  • %HOMEPATH%\WASGF\527498.SFN
  • %HOMEPATH%\WASGF\NKFRB.exe
  • %HOMEPATH%\WASGF\31370.dat
  • %HOMEPATH%\WASGF\I71982.JFT
  • %HOMEPATH%\WASGF\76389.RXF
  • %HOMEPATH%\WASGF\70739.RAZ
  • %HOMEPATH%\WASGF\62670.MFC
  • %HOMEPATH%\WASGF\32658.HNM
  • %HOMEPATH%\WASGF\Z99711.BTB
  • %HOMEPATH%\WASGF\49503.EPH
  • %HOMEPATH%\WASGF\N86069.NJP
  • %HOMEPATH%\WASGF\L52942.QLF
  • %HOMEPATH%\WASGF\Y3600.GCK
  • %HOMEPATH%\WASGF\Y15322.VJY
  • %HOMEPATH%\WASGF\L5184.TAI
  • %HOMEPATH%\WASGF\53006.PRK
  • %HOMEPATH%\WASGF\Q50816.ZKZ
  • %HOMEPATH%\WASGF\87098.AVU
  • %HOMEPATH%\WASGF\C74775.GJN
  • %HOMEPATH%\WASGF\87609.IEJ
  • %HOMEPATH%\WASGF\54499.SDJ
  • %HOMEPATH%\WASGF\E67998.VEK
  • %HOMEPATH%\WASGF\B85573.RDF
  • %HOMEPATH%\WASGF\82103.GOX
  • %HOMEPATH%\WASGF\47016.ZNH
  • %HOMEPATH%\WASGF\99852.JKX
  • %HOMEPATH%\WASGF\32124.RTH
  • %HOMEPATH%\WASGF\M19340.GYP
  • %HOMEPATH%\WASGF\84612.SHZ
  • %HOMEPATH%\WASGF\S43097.EEJ
  • %HOMEPATH%\WASGF\H80453.XQC
  • %HOMEPATH%\WASGF\21497.UEV
  • %HOMEPATH%\WASGF\K46965.NPJ
  • %HOMEPATH%\WASGF\87998.MCP
  • %HOMEPATH%\WASGF\9688.HXW
  • %HOMEPATH%\WASGF\O24902.KSN
  • %HOMEPATH%\WASGF\D83283.OVM
  • %HOMEPATH%\WASGF\D75420.PWC
  • %HOMEPATH%\WASGF\38687.EJZ
  • %HOMEPATH%\WASGF\37582.FYO
  • %HOMEPATH%\WASGF\21470.FQR
  • %HOMEPATH%\WASGF\A57992.EBI
  • %HOMEPATH%\WASGF\45540.BGP
  • %HOMEPATH%\WASGF\90587.OOT
  • %HOMEPATH%\WASGF\V76433.QKR
  • %HOMEPATH%\WASGF\22540.WYJ
  • %HOMEPATH%\WASGF\P59040.DIO
  • %HOMEPATH%\WASGF\14738.MZX
  • %HOMEPATH%\WASGF\Z37195.LDA
  • %HOMEPATH%\WASGF\53266.GRO
  • %HOMEPATH%\WASGF\82793.CCQ
  • %HOMEPATH%\WASGF\75159.JHO
  • %HOMEPATH%\WASGF\89640.MXG
  • %HOMEPATH%\WASGF\40740.TRD
  • %HOMEPATH%\WASGF\23686.OBY
  • %HOMEPATH%\WASGF\V66468.OPL
  • %HOMEPATH%\WASGF\16430.RRO
  • %HOMEPATH%\WASGF\A63872.LTS
  • %HOMEPATH%\WASGF\G10520.XXX
  • %HOMEPATH%\WASGF\94642.SJJ
  • %HOMEPATH%\WASGF\J36919.UJJ
  • %HOMEPATH%\WASGF\31507.MYY
  • %HOMEPATH%\WASGF\G58288.WRQ
  • %HOMEPATH%\WASGF\D11946.HEF
  • %HOMEPATH%\WASGF\45469.UFT
  • %HOMEPATH%\WASGF\38991.CFD
  • %HOMEPATH%\WASGF\60394.VJL
  • %HOMEPATH%\WASGF\J50624.OWT
  • %HOMEPATH%\WASGF\F22915.SUW
  • %HOMEPATH%\WASGF\8718.UEV
  • %HOMEPATH%\WASGF\P69113.OFP
  • %HOMEPATH%\WASGF\65994.GDP
  • %HOMEPATH%\WASGF\98231.MES
  • %HOMEPATH%\WASGF\P7905.GAF
  • %HOMEPATH%\WASGF\18589.MZD
  • %HOMEPATH%\WASGF\B18010.YVH
  • %HOMEPATH%\WASGF\20405.XZO
  • %HOMEPATH%\WASGF\66365.DII
  • %HOMEPATH%\WASGF\23643.VNJ
  • %HOMEPATH%\WASGF\85688.ZGO
  • %HOMEPATH%\WASGF\R31257.NYG
  • %HOMEPATH%\WASGF\R85547.RHR
  • %HOMEPATH%\WASGF\Z31389.RVL
  • %HOMEPATH%\WASGF\67831.WAG
  • %HOMEPATH%\WASGF\13660.LWW
  • %HOMEPATH%\WASGF\Z51432.UDH
  • %HOMEPATH%\WASGF\88131.XSZ
  • %HOMEPATH%\WASGF\7210.ZOA
  • %HOMEPATH%\WASGF\X1987.RZR
  • %HOMEPATH%\WASGF\Z44706.WSE
  • %HOMEPATH%\WASGF\14328.KMY
  • %HOMEPATH%\WASGF\O24075.ELQ
  • %HOMEPATH%\WASGF\53396.EPU
  • %HOMEPATH%\WASGF\O99740.GPK
  • %HOMEPATH%\WASGF\C75691.RKJ
  • %HOMEPATH%\WASGF\H85893.KWR
  • %HOMEPATH%\WASGF\91677.MNG
  • %HOMEPATH%\WASGF\61717.NNH
  • %HOMEPATH%\WASGF\N36123.HMH
  • %HOMEPATH%\WASGF\4462.NOY
  • %HOMEPATH%\WASGF\V56243.UGJ
  • %HOMEPATH%\WASGF\P21052.NUB
  • %HOMEPATH%\WASGF\M75594.JEP
  • %HOMEPATH%\WASGF\11454.WYF
  • %HOMEPATH%\WASGF\28917.SWR
  • %HOMEPATH%\WASGF\O76942.PKU
  • %HOMEPATH%\WASGF\O20714.IRX
  • %HOMEPATH%\WASGF\G38478.EMP
  • %HOMEPATH%\WASGF\H86268.DFR
  • %HOMEPATH%\WASGF\A53464.TWJ
  • %HOMEPATH%\WASGF\P32305.DBJ
  • %HOMEPATH%\WASGF\96815.EJA
  • %HOMEPATH%\WASGF\W14994.XXD
  • %HOMEPATH%\WASGF\X23336.VOT
  • %HOMEPATH%\WASGF\56730.OGH
  • %HOMEPATH%\WASGF\M72736.YOP
  • %HOMEPATH%\WASGF\94320.JOY
  • %HOMEPATH%\WASGF\M93126.XJK
  • %HOMEPATH%\WASGF\77047.ATL
  • %HOMEPATH%\WASGF\27885.MRG
  • %HOMEPATH%\WASGF\C88942.MJR
  • %HOMEPATH%\WASGF\63985.IIT
  • %HOMEPATH%\WASGF\X72296.IRH
  • %HOMEPATH%\WASGF\C90856.MKY
  • %HOMEPATH%\WASGF\62672.JJE
  • %HOMEPATH%\WASGF\Z12466.UPU
  • %HOMEPATH%\WASGF\86284.LOF
  • %HOMEPATH%\WASGF\D56893.ZYS
  • %HOMEPATH%\WASGF\V80771.CNE
  • %HOMEPATH%\WASGF\53198.XTG
  • %HOMEPATH%\WASGF\U2897.MOH
  • %HOMEPATH%\WASGF\54334.MJV
  • %HOMEPATH%\WASGF\95376.WGJ
  • %HOMEPATH%\WASGF\D21306.ULZ
  • %HOMEPATH%\WASGF\3364.JGT
  • %HOMEPATH%\WASGF\I71807.UOG
  • %HOMEPATH%\WASGF\D68447.HLE
  • %HOMEPATH%\WASGF\T76847.VQY
  • %HOMEPATH%\WASGF\48139.KMK
  • %HOMEPATH%\WASGF\N40053.GYD
  • %HOMEPATH%\WASGF\S58313.LWW
  • %HOMEPATH%\WASGF\63603.LLC
  • %HOMEPATH%\WASGF\R42495.EUA
  • %HOMEPATH%\WASGF\X49781.WNQ
  • %HOMEPATH%\WASGF\93450.NVY
  • %HOMEPATH%\WASGF\B89815.YDN
  • %HOMEPATH%\WASGF\M19427.MGU
  • %HOMEPATH%\WASGF\65112.FSE
  • %HOMEPATH%\WASGF\J10867.BMT
  • %HOMEPATH%\WASGF\F45652.WUT
  • %HOMEPATH%\WASGF\H25715.OPB
  • %HOMEPATH%\WASGF\Y17768.MBL
  • %HOMEPATH%\WASGF\X39009.JIC
  • %HOMEPATH%\WASGF\24878.AKM
  • %HOMEPATH%\WASGF\33424.AQR
  • %HOMEPATH%\WASGF\D12751.YHG
  • %HOMEPATH%\WASGF\93388.QVS
  • %HOMEPATH%\WASGF\O14816.WPX
  • %HOMEPATH%\WASGF\57395.RUV
  • %HOMEPATH%\WASGF\U81533.ZGU
  • %HOMEPATH%\WASGF\85113.YNE
  • %HOMEPATH%\WASGF\67743.MEB
  • %HOMEPATH%\WASGF\68795.IKW
  • %HOMEPATH%\WASGF\91036.YMR
  • %HOMEPATH%\WASGF\55782.UKP
  • %HOMEPATH%\WASGF\X75749.AYJ
  • %HOMEPATH%\WASGF\L10639.VTO
  • %HOMEPATH%\WASGF\46007.JFW
  • %HOMEPATH%\WASGF\O31111.PSZ
  • %HOMEPATH%\WASGF\D36543.COQ
  • %HOMEPATH%\WASGF\8314.YIC
  • %HOMEPATH%\WASGF\S98566.ROB
  • %HOMEPATH%\WASGF\95716.BIM
  • %HOMEPATH%\WASGF\48058.VHS
  • %HOMEPATH%\WASGF\19877.EIZ
  • %HOMEPATH%\WASGF\N39771.PYZ
Deletes the following files:
  • %TEMP%\NO_PWDS_report_27-06-2013_17-33-05-F4D651E80A6E4747C8F28A7D8647D810-HPOM.bin
  • %HOMEPATH%\WASGF\BGYFYXJS.dat
Moves the following files:
  • from %TEMP%\report_27-06-2013_17-33-05-F4D651E80A6E4747C8F28A7D8647D810-HPOM.bin to %TEMP%\NO_PWDS_report_27-06-2013_17-33-05-F4D651E80A6E4747C8F28A7D8647D810-HPOM.bin
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'
  • ClassName: 'EDIT' WindowName: '(null)'

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android