Trojan.DownLoader10.42177

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'TNZOQ' = '%HOMEPATH%\TNZOQ\start.vbs'

Malicious functions:

To bypass firewall, removes or modifies the following registry keys:

[<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%APPDATA%\Update.exe' = '%APPDATA%\Update.exe:*:Enabled:Windows Messanger'
[<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe' = '%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe:*:Enabled:Windows Messanger'
[<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'DoNotAllowExceptions' = '00000000'

Creates and executes the following:

'%HOMEPATH%\TNZOQ\JZHLU.exe' DKPMHJZF.dat
'%HOMEPATH%\TNZOQ\JZHLU.exe' 248131.NRE

Executes the following:

'<SYSTEM32>\reg.exe' ADD HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile /v "DoNotAllowExceptions" /t REG_DWORD /d "0" /f
'<SYSTEM32>\reg.exe' ADD HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List /v "%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe" /t REG_SZ /d "%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe:*:Enabled:Windows Messanger" /f
'<SYSTEM32>\reg.exe' ADD HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List /v "%APPDATA%\Update.exe" /t REG_SZ /d "%APPDATA%\Update.exe:*:Enabled:Windows Messanger" /f
'%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
'<SYSTEM32>\wscript.exe' "%HOMEPATH%\TNZOQ\3562.vbs" 5255
'<SYSTEM32>\mshta.exe'
'<SYSTEM32>\taskkill.exe' /IM mshta.exe

Injects code into

the following system processes:

%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

Modifies file system :

Creates the following files:

%HOMEPATH%\TNZOQ\W8239.DYA
%HOMEPATH%\TNZOQ\B48287.WOU
%HOMEPATH%\TNZOQ\96449.KLK
%HOMEPATH%\TNZOQ\B94849.WSI
%HOMEPATH%\TNZOQ\C8943.WSE
%HOMEPATH%\TNZOQ\18547.REK
%HOMEPATH%\TNZOQ\69188.MVX
%HOMEPATH%\TNZOQ\O39172.LRO
%HOMEPATH%\TNZOQ\I79400.BUR
%HOMEPATH%\TNZOQ\U20380.YFH
%HOMEPATH%\TNZOQ\42038.RAP
%HOMEPATH%\TNZOQ\24149.AYD
%HOMEPATH%\TNZOQ\E50098.IWY
%HOMEPATH%\TNZOQ\89334.TEX
%HOMEPATH%\TNZOQ\90629.ZEA
%HOMEPATH%\TNZOQ\22578.GYZ
%HOMEPATH%\TNZOQ\90992.ZDK
%HOMEPATH%\TNZOQ\I41374.CII
%HOMEPATH%\TNZOQ\J34688.TWS
%HOMEPATH%\TNZOQ\O52454.AUS
%HOMEPATH%\TNZOQ\Q27523.EIF
%HOMEPATH%\TNZOQ\E29210.HBF
%HOMEPATH%\TNZOQ\G66866.SRE
%HOMEPATH%\TNZOQ\P50806.URH
%HOMEPATH%\TNZOQ\V6153.URM
%HOMEPATH%\TNZOQ\U55145.YCD
%HOMEPATH%\TNZOQ\W89813.YES
%HOMEPATH%\TNZOQ\48919.LRI
%HOMEPATH%\TNZOQ\S23720.RNV
%HOMEPATH%\TNZOQ\O37870.YDV
%HOMEPATH%\TNZOQ\18244.RHU
%HOMEPATH%\TNZOQ\B96119.ZYJ
%HOMEPATH%\TNZOQ\35115.TDI
%HOMEPATH%\TNZOQ\4352.ZXZ
%HOMEPATH%\TNZOQ\U15806.FUH
%HOMEPATH%\TNZOQ\T28606.KWA
%HOMEPATH%\TNZOQ\51658.KAT
%HOMEPATH%\TNZOQ\M54617.LCJ
%HOMEPATH%\TNZOQ\51390.COY
%HOMEPATH%\TNZOQ\69888.IDE
%HOMEPATH%\TNZOQ\51124.LTK
%HOMEPATH%\TNZOQ\56289.QMS
%HOMEPATH%\TNZOQ\J27701.HLC
%HOMEPATH%\TNZOQ\T41335.OLO
%HOMEPATH%\TNZOQ\50879.OZM
%HOMEPATH%\TNZOQ\G28533.WDE
%HOMEPATH%\TNZOQ\O68734.FRF
%HOMEPATH%\TNZOQ\A32878.TQK
%HOMEPATH%\TNZOQ\79163.YOR
%HOMEPATH%\TNZOQ\S25835.OES
%HOMEPATH%\TNZOQ\I85100.UMI
%HOMEPATH%\TNZOQ\24685.JLS
%HOMEPATH%\TNZOQ\K23277.LNZ
%HOMEPATH%\TNZOQ\45989.FHK
%HOMEPATH%\TNZOQ\13094.HCZ
%HOMEPATH%\TNZOQ\55909.PNP
%HOMEPATH%\TNZOQ\62382.XIM
%HOMEPATH%\TNZOQ\48811.MYU
%HOMEPATH%\TNZOQ\P61238.TUR
%HOMEPATH%\TNZOQ\40442.LOS
%HOMEPATH%\TNZOQ\17983.JRS
%HOMEPATH%\TNZOQ\L62874.PLD
%HOMEPATH%\TNZOQ\28215.YBB
%HOMEPATH%\TNZOQ\N92858.FXV
%HOMEPATH%\TNZOQ\Z75634.ESS
%HOMEPATH%\TNZOQ\E96707.MIK
%HOMEPATH%\TNZOQ\N60515.NWI
%HOMEPATH%\TNZOQ\47602.BJN
%HOMEPATH%\TNZOQ\21616.GZY
%HOMEPATH%\TNZOQ\84989.HFR
%HOMEPATH%\TNZOQ\X77489.IID
%HOMEPATH%\TNZOQ\U9786.DDM
%HOMEPATH%\TNZOQ\9435.ZLB
%HOMEPATH%\TNZOQ\57933.CZY
%HOMEPATH%\TNZOQ\50121.CWM
%HOMEPATH%\TNZOQ\O45591.RTZ
%HOMEPATH%\TNZOQ\B85654.SBR
%HOMEPATH%\TNZOQ\Z66929.RNH
%HOMEPATH%\TNZOQ\79103.JUI
%HOMEPATH%\TNZOQ\C83620.KSI
%HOMEPATH%\TNZOQ\77813.NEJ
%HOMEPATH%\TNZOQ\P81880.HAN
%HOMEPATH%\TNZOQ\G7075.VGS
%HOMEPATH%\TNZOQ\N46701.JZR
%HOMEPATH%\TNZOQ\U39903.NED
%HOMEPATH%\TNZOQ\G42855.XEZ
%HOMEPATH%\TNZOQ\31781.POF
%HOMEPATH%\TNZOQ\19446.HGE
%HOMEPATH%\TNZOQ\O31408.RTX
%HOMEPATH%\TNZOQ\Y12671.FDL
%HOMEPATH%\TNZOQ\53881.VGY
%HOMEPATH%\TNZOQ\Y54354.OQA
%HOMEPATH%\TNZOQ\O62582.MKK
%HOMEPATH%\TNZOQ\56082.YNA
%HOMEPATH%\TNZOQ\B7319.BQY
%HOMEPATH%\TNZOQ\3040.QMC
%HOMEPATH%\TNZOQ\K27072.PZR
%HOMEPATH%\TNZOQ\26472.PVJ
%HOMEPATH%\TNZOQ\79545.KXO
%HOMEPATH%\TNZOQ\F90161.DSD
%HOMEPATH%\TNZOQ\M81101.IPY
%HOMEPATH%\TNZOQ\57876.BNZ
%HOMEPATH%\TNZOQ\M65658.ZSB
%HOMEPATH%\TNZOQ\66514.HGJ
%HOMEPATH%\TNZOQ\X17564.LWK
%HOMEPATH%\TNZOQ\75687.UZQ
%HOMEPATH%\TNZOQ\B12911.OEN
%HOMEPATH%\TNZOQ\3202.WPR
%HOMEPATH%\TNZOQ\84185.MGQ
%HOMEPATH%\TNZOQ\X52501.ORN
%HOMEPATH%\TNZOQ\91188.WRW
%HOMEPATH%\TNZOQ\70928.JYX
%HOMEPATH%\TNZOQ\C16659.UKU
%HOMEPATH%\TNZOQ\M6972.DGW
%HOMEPATH%\TNZOQ\47119.APS
%HOMEPATH%\TNZOQ\11525.XHO
%HOMEPATH%\TNZOQ\6894.AJS
%HOMEPATH%\TNZOQ\Y13771.HBW
%HOMEPATH%\TNZOQ\M96442.KTC
%HOMEPATH%\TNZOQ\86314.KQX
%HOMEPATH%\TNZOQ\A85221.GKJ
%HOMEPATH%\TNZOQ\T18350.OCJ
%HOMEPATH%\TNZOQ\51550.BRT
%HOMEPATH%\TNZOQ\S80517.HPD
%HOMEPATH%\TNZOQ\D53897.RFT
%HOMEPATH%\TNZOQ\S56011.QGQ
%HOMEPATH%\TNZOQ\7596.APE
%HOMEPATH%\TNZOQ\S1411.LHD
%HOMEPATH%\TNZOQ\P86197.KPT
%HOMEPATH%\TNZOQ\64339.PNN
%HOMEPATH%\TNZOQ\R8054.VEE
%HOMEPATH%\TNZOQ\89521.IUG
%HOMEPATH%\TNZOQ\30057.NSR
%HOMEPATH%\TNZOQ\6486.USJ
%HOMEPATH%\TNZOQ\39608.CJL
%HOMEPATH%\TNZOQ\1845.OXD
%HOMEPATH%\TNZOQ\I88326.RHQ
%HOMEPATH%\TNZOQ\L70270.AWN
%HOMEPATH%\TNZOQ\82074.YBM
%HOMEPATH%\TNZOQ\95372.GZG
%HOMEPATH%\TNZOQ\Y20240.FOK
%HOMEPATH%\TNZOQ\R28200.SFV
%HOMEPATH%\TNZOQ\25599.ZJX
%HOMEPATH%\TNZOQ\B38461.SRO
%HOMEPATH%\TNZOQ\E8141.SAR
%HOMEPATH%\TNZOQ\H63348.ADL
%HOMEPATH%\TNZOQ\21844.UOT
%HOMEPATH%\TNZOQ\L50503.YGX
%HOMEPATH%\TNZOQ\29330.GBP
%HOMEPATH%\TNZOQ\S86849.YVN
%HOMEPATH%\TNZOQ\F86191.IDF
%HOMEPATH%\TNZOQ\12789.FMH
%HOMEPATH%\TNZOQ\12887.TUF
%HOMEPATH%\TNZOQ\26101.FHG
%HOMEPATH%\TNZOQ\N78795.WWA
%HOMEPATH%\TNZOQ\71574.UTD
%HOMEPATH%\TNZOQ\66560.XWW
%HOMEPATH%\TNZOQ\V48043.RYA
%HOMEPATH%\TNZOQ\64120.KKL
%HOMEPATH%\TNZOQ\R25725.RUE
%HOMEPATH%\TNZOQ\18156.FWB
%HOMEPATH%\TNZOQ\S33294.COZ
%HOMEPATH%\TNZOQ\66862.LQX
%HOMEPATH%\TNZOQ\H8874.WUK
%HOMEPATH%\TNZOQ\D19980.AVP
%HOMEPATH%\TNZOQ\46678.GFJ
%HOMEPATH%\TNZOQ\34244.VBN
%HOMEPATH%\TNZOQ\Y87488.BIT
%HOMEPATH%\TNZOQ\15181.HDG
%HOMEPATH%\TNZOQ\41135.HAQ
%HOMEPATH%\TNZOQ\68085.QBJ
%HOMEPATH%\TNZOQ\41759.ZPC
%HOMEPATH%\TNZOQ\66153.RKC
%HOMEPATH%\TNZOQ\98127.TBZ
%HOMEPATH%\TNZOQ\36984.PVK
%HOMEPATH%\TNZOQ\U12566.JAV
%HOMEPATH%\TNZOQ\16219.BQK
%HOMEPATH%\TNZOQ\4464.AGL
%HOMEPATH%\TNZOQ\W83793.GEN
%HOMEPATH%\TNZOQ\35856.SFF
%HOMEPATH%\TNZOQ\52641.OEN
%HOMEPATH%\TNZOQ\93902.QFY
%HOMEPATH%\TNZOQ\Y7248.PAQ
%HOMEPATH%\TNZOQ\N82947.HMH
%HOMEPATH%\TNZOQ\H55212.CZE
%HOMEPATH%\TNZOQ\91556.GRF
%HOMEPATH%\TNZOQ\G40682.ADQ
%HOMEPATH%\TNZOQ\99033.PSB
%HOMEPATH%\TNZOQ\60053.DWD
%HOMEPATH%\TNZOQ\start.vbs
%HOMEPATH%\TNZOQ\start.cmd
%APPDATA%\24_10_2013_mp3
%APPDATA%\Update.exe
%HOMEPATH%\TNZOQ\DKPMHJZF.dat
%HOMEPATH%\TNZOQ\39858.FLO
%HOMEPATH%\TNZOQ\M55441.KBW
%HOMEPATH%\TNZOQ\95758.WCT
%HOMEPATH%\TNZOQ\L83726.XAI
%HOMEPATH%\TNZOQ\9618.TZI
%HOMEPATH%\TNZOQ\E92487.BFK
%HOMEPATH%\TNZOQ\63443.SMC
%HOMEPATH%\TNZOQ\B52064.TZC
%HOMEPATH%\TNZOQ\73307.NVP
%HOMEPATH%\TNZOQ\38486.GKJ
%HOMEPATH%\TNZOQ\58512.FTO
%HOMEPATH%\TNZOQ\B63688.XJJ
%HOMEPATH%\TNZOQ\O64658.UMZ
%HOMEPATH%\TNZOQ\B36723.SSD
%HOMEPATH%\TNZOQ\O8631.DIS
%HOMEPATH%\TNZOQ\76137.BNG
%HOMEPATH%\TNZOQ\11827.BKA
%HOMEPATH%\TNZOQ\Y32540.BIR
%HOMEPATH%\TNZOQ\74588.CEW
%HOMEPATH%\TNZOQ\60782.OAC
%HOMEPATH%\TNZOQ\Q96106.RQF
%HOMEPATH%\TNZOQ\35849.XHL
%HOMEPATH%\TNZOQ\M93229.ILB
%HOMEPATH%\TNZOQ\73556.PJD
%HOMEPATH%\TNZOQ\61200.GWL
%HOMEPATH%\TNZOQ\3928.DJZ
%HOMEPATH%\TNZOQ\A43015.YNX
%HOMEPATH%\TNZOQ\D60819.MLA
%HOMEPATH%\TNZOQ\H20655.BCT
%HOMEPATH%\TNZOQ\W93651.ZQU
%HOMEPATH%\TNZOQ\68713.FFU
%HOMEPATH%\TNZOQ\26808.JGJ
%HOMEPATH%\TNZOQ\F18302.UOT
%HOMEPATH%\TNZOQ\7088.GDQ
%HOMEPATH%\TNZOQ\U75522.JSR
%HOMEPATH%\TNZOQ\Y12295.WJB
%HOMEPATH%\TNZOQ\16213.UNM
%HOMEPATH%\TNZOQ\G79392.DJL
%HOMEPATH%\TNZOQ\R30273.JPT
%HOMEPATH%\TNZOQ\35847.IYB
%HOMEPATH%\TNZOQ\42984.FCY
%HOMEPATH%\TNZOQ\L34941.ZSA
%HOMEPATH%\TNZOQ\93391.FMG
%HOMEPATH%\TNZOQ\R86107.KCJ
%HOMEPATH%\TNZOQ\54744.KEO
%HOMEPATH%\TNZOQ\U21112.TOV
%HOMEPATH%\TNZOQ\N91914.WHM
%HOMEPATH%\TNZOQ\Z19316.BQW
%HOMEPATH%\TNZOQ\G29519.KML
%HOMEPATH%\TNZOQ\I92734.SGX
%HOMEPATH%\TNZOQ\T51301.YHT
%HOMEPATH%\TNZOQ\D72993.OMR
%HOMEPATH%\TNZOQ\16102.RRI
%HOMEPATH%\TNZOQ\8231.APX
%HOMEPATH%\TNZOQ\2224.UDJ
%HOMEPATH%\TNZOQ\26924.BET
%HOMEPATH%\TNZOQ\L37026.MPR
%HOMEPATH%\TNZOQ\22044.XZG
%HOMEPATH%\TNZOQ\81418.HZP
%HOMEPATH%\TNZOQ\U6830.TPZ
%HOMEPATH%\TNZOQ\94052.WSD
%HOMEPATH%\TNZOQ\51242.SGN
%HOMEPATH%\TNZOQ\T18184.UQA
%HOMEPATH%\TNZOQ\49332.OES
%HOMEPATH%\TNZOQ\V37140.JON
%HOMEPATH%\TNZOQ\48726.PHM
%HOMEPATH%\TNZOQ\N37042.ZWR
%HOMEPATH%\TNZOQ\N6307.GLO
%HOMEPATH%\TNZOQ\48634.YRG
%HOMEPATH%\TNZOQ\24706.GCO
%HOMEPATH%\TNZOQ\Z44488.HTH
%HOMEPATH%\TNZOQ\D33222.YMZ
%HOMEPATH%\TNZOQ\D72768.KCS
%HOMEPATH%\TNZOQ\I6450.XCP
%HOMEPATH%\TNZOQ\57422.DHT
%HOMEPATH%\TNZOQ\47934.NFS
%HOMEPATH%\TNZOQ\2360.EEG
%HOMEPATH%\TNZOQ\D12367.ZRN
%HOMEPATH%\TNZOQ\B8213.RKN
%HOMEPATH%\TNZOQ\L21521.VYS
%HOMEPATH%\TNZOQ\78317.UZH
%HOMEPATH%\TNZOQ\73561.AEF
%HOMEPATH%\TNZOQ\U28835.ZFD
%HOMEPATH%\TNZOQ\W64726.DVI
%HOMEPATH%\TNZOQ\78754.ISH
%HOMEPATH%\TNZOQ\E71879.TYQ
%HOMEPATH%\TNZOQ\55792.GMG
%HOMEPATH%\TNZOQ\3820.APL
%HOMEPATH%\TNZOQ\C54811.OPJ
%HOMEPATH%\TNZOQ\18004.HYD
%HOMEPATH%\TNZOQ\V34198.HPF
%HOMEPATH%\TNZOQ\34328.SHV
%HOMEPATH%\TNZOQ\C82612.SVS
%HOMEPATH%\TNZOQ\62083.YEF
%HOMEPATH%\TNZOQ\99763.ABB
%HOMEPATH%\TNZOQ\T11889.FKC
%HOMEPATH%\TNZOQ\M45585.QPQ
%HOMEPATH%\TNZOQ\16180.FLU
%HOMEPATH%\TNZOQ\49577.QZH
%HOMEPATH%\TNZOQ\P35851.VNA
%HOMEPATH%\TNZOQ\29933.LBO
%HOMEPATH%\TNZOQ\43684.TES
%HOMEPATH%\TNZOQ\L99050.BXJ
%HOMEPATH%\TNZOQ\46317.GGD
%HOMEPATH%\TNZOQ\H20509.FCJ
%HOMEPATH%\TNZOQ\41018.NFQ
%HOMEPATH%\TNZOQ\P54637.PZA
%HOMEPATH%\TNZOQ\N27270.WLC
%HOMEPATH%\TNZOQ\N73415.GSA
%HOMEPATH%\TNZOQ\Q74057.YAM
%HOMEPATH%\TNZOQ\47876.VLD
%HOMEPATH%\TNZOQ\48450.ZZQ
%HOMEPATH%\TNZOQ\13363.TTF
%HOMEPATH%\TNZOQ\K71103.GYL
%HOMEPATH%\TNZOQ\I78042.UQJ
%HOMEPATH%\TNZOQ\89663.EEZ
%HOMEPATH%\TNZOQ\D40732.VDA
%HOMEPATH%\TNZOQ\46910.ZSZ
%HOMEPATH%\TNZOQ\76036.SJR
%HOMEPATH%\TNZOQ\69157.FRD
%HOMEPATH%\TNZOQ\P93754.KLY
%HOMEPATH%\TNZOQ\S27460.NJV
%HOMEPATH%\TNZOQ\P97757.IDA
%HOMEPATH%\TNZOQ\Q67929.GLV
%HOMEPATH%\TNZOQ\C48733.KVQ
%HOMEPATH%\TNZOQ\3843.QZM
%HOMEPATH%\TNZOQ\O10525.XHH
%HOMEPATH%\TNZOQ\33174.UOR
%HOMEPATH%\TNZOQ\X65147.TYU
%HOMEPATH%\TNZOQ\23533.OHC
%HOMEPATH%\TNZOQ\39674.IQO
%HOMEPATH%\TNZOQ\48051.DTX
%HOMEPATH%\TNZOQ\74299.ZQI
%HOMEPATH%\TNZOQ\H7125.KIY
%HOMEPATH%\TNZOQ\S15607.YNI
%HOMEPATH%\TNZOQ\Y38604.NKC
%HOMEPATH%\TNZOQ\Z83390.VOI
%HOMEPATH%\TNZOQ\X36552.YVI
%HOMEPATH%\TNZOQ\67859.YCS
%HOMEPATH%\TNZOQ\T21945.WOP
%HOMEPATH%\TNZOQ\11380.FDR
%HOMEPATH%\TNZOQ\5086.OIM
%HOMEPATH%\TNZOQ\C88535.SFY
%HOMEPATH%\TNZOQ\13633.UCH
%HOMEPATH%\TNZOQ\Q42128.YLH
%HOMEPATH%\TNZOQ\11555.CZU
%HOMEPATH%\TNZOQ\62837.QBU
%HOMEPATH%\TNZOQ\A38668.FUP
%HOMEPATH%\TNZOQ\70765.XBX
%HOMEPATH%\TNZOQ\67698.HIE
%HOMEPATH%\TNZOQ\C25592.WAL
%HOMEPATH%\TNZOQ\3172.IAU
%HOMEPATH%\TNZOQ\89622.NRN
%HOMEPATH%\TNZOQ\C69202.WQL
%HOMEPATH%\TNZOQ\T60023.WAA
%HOMEPATH%\TNZOQ\I93429.HEO
%HOMEPATH%\TNZOQ\G77131.WMU
%HOMEPATH%\TNZOQ\O65392.AAT
%HOMEPATH%\TNZOQ\O8441.DMC
%HOMEPATH%\TNZOQ\79633.ZEF
%HOMEPATH%\TNZOQ\M84099.VYG
%HOMEPATH%\TNZOQ\N10266.DKF
%HOMEPATH%\TNZOQ\A61291.CMV
%HOMEPATH%\TNZOQ\B50012.BUS
%HOMEPATH%\TNZOQ\26355.SMF
%HOMEPATH%\TNZOQ\28606.JST
%HOMEPATH%\TNZOQ\B81691.RLM
%HOMEPATH%\TNZOQ\O10466.UDU
%HOMEPATH%\TNZOQ\G12572.HGC
%HOMEPATH%\TNZOQ\O94710.WIE
%HOMEPATH%\TNZOQ\32535.HLY
%HOMEPATH%\TNZOQ\D56100.UED
%HOMEPATH%\TNZOQ\24371.JUM
%HOMEPATH%\TNZOQ\A36083.KZU
%HOMEPATH%\TNZOQ\O46516.QUA
%HOMEPATH%\TNZOQ\54476.MWJ
%HOMEPATH%\TNZOQ\38031.UEZ
%HOMEPATH%\TNZOQ\66165.YFD
%HOMEPATH%\TNZOQ\K76031.CYU
%HOMEPATH%\TNZOQ\57756.DXU
%HOMEPATH%\TNZOQ\4688.ZUC
%HOMEPATH%\TNZOQ\E40620.LPV
%HOMEPATH%\TNZOQ\T25130.RFG
%HOMEPATH%\TNZOQ\44146.YIO
%HOMEPATH%\TNZOQ\N27919.XSE
%HOMEPATH%\TNZOQ\L16682.RPG
%HOMEPATH%\TNZOQ\3562.vbs
%HOMEPATH%\TNZOQ\Z32292.BJY
%HOMEPATH%\TNZOQ\81341.SEQ
%HOMEPATH%\TNZOQ\settings.ini
%HOMEPATH%\TNZOQ\472383.dat
%HOMEPATH%\TNZOQ\248131.NRE
%HOMEPATH%\TNZOQ\JZHLU.exe
%HOMEPATH%\TNZOQ\229422.dat
%HOMEPATH%\TNZOQ\F59021.MOG
%HOMEPATH%\TNZOQ\N10308.JLK
%HOMEPATH%\TNZOQ\H31718.TZB
%HOMEPATH%\TNZOQ\36445.EUG
%HOMEPATH%\TNZOQ\S91699.YNS
%HOMEPATH%\TNZOQ\21656.XJW
%HOMEPATH%\TNZOQ\C76239.KPA
%HOMEPATH%\TNZOQ\3422.HSG
%HOMEPATH%\TNZOQ\47502.VCB
%HOMEPATH%\TNZOQ\8676.OCI
%HOMEPATH%\TNZOQ\16868.XPY
%HOMEPATH%\TNZOQ\12421.WHY
%HOMEPATH%\TNZOQ\49519.FAL
%HOMEPATH%\TNZOQ\98324.NJW
%HOMEPATH%\TNZOQ\8883.FJH
%HOMEPATH%\TNZOQ\16679.JCN
%HOMEPATH%\TNZOQ\62178.BWO
%HOMEPATH%\TNZOQ\K8184.TXK
%HOMEPATH%\TNZOQ\96734.FBV
%HOMEPATH%\TNZOQ\K7590.VXN
%HOMEPATH%\TNZOQ\N52623.GZC
%HOMEPATH%\TNZOQ\K54496.ISF
%HOMEPATH%\TNZOQ\E50252.QAU
%HOMEPATH%\TNZOQ\77613.TLK
%HOMEPATH%\TNZOQ\85831.HBO
%HOMEPATH%\TNZOQ\14274.NAI
%HOMEPATH%\TNZOQ\3284.DQI
%HOMEPATH%\TNZOQ\C63559.KJI
%HOMEPATH%\TNZOQ\63006.HEH
%HOMEPATH%\TNZOQ\95575.YRU
%HOMEPATH%\TNZOQ\90695.GFA
%HOMEPATH%\TNZOQ\I83133.MXH
%HOMEPATH%\TNZOQ\D48463.VRY
%HOMEPATH%\TNZOQ\Q36851.GDI
%HOMEPATH%\TNZOQ\O42311.BRK
%HOMEPATH%\TNZOQ\13811.TXR
%HOMEPATH%\TNZOQ\C47888.VIK
%HOMEPATH%\TNZOQ\80539.EBY
%HOMEPATH%\TNZOQ\J98582.AEI
%HOMEPATH%\TNZOQ\K11262.NCO
%HOMEPATH%\TNZOQ\S51657.TQZ
%HOMEPATH%\TNZOQ\Z41729.LID
%HOMEPATH%\TNZOQ\8994.VQL
%HOMEPATH%\TNZOQ\41956.YSI
%HOMEPATH%\TNZOQ\97638.WPA
%HOMEPATH%\TNZOQ\74570.JGD
%HOMEPATH%\TNZOQ\P88125.NTF
%HOMEPATH%\TNZOQ\H50184.OOM
%HOMEPATH%\TNZOQ\42868.XFO
%HOMEPATH%\TNZOQ\X72020.GNL
%HOMEPATH%\TNZOQ\D91986.ENC
%HOMEPATH%\TNZOQ\42447.NWH
%HOMEPATH%\TNZOQ\A16659.PNM
%HOMEPATH%\TNZOQ\56796.GEO
%HOMEPATH%\TNZOQ\O68862.OIT
%HOMEPATH%\TNZOQ\33869.HHJ
%HOMEPATH%\TNZOQ\K75344.ZDK
%HOMEPATH%\TNZOQ\A91348.HAE
%HOMEPATH%\TNZOQ\B12559.VKZ
%HOMEPATH%\TNZOQ\K8521.UYB
%HOMEPATH%\TNZOQ\M28679.BWW
%HOMEPATH%\TNZOQ\53553.MLH
%HOMEPATH%\TNZOQ\87879.QQO
%HOMEPATH%\TNZOQ\M43014.IID
%HOMEPATH%\TNZOQ\43667.WUY
%HOMEPATH%\TNZOQ\X89793.GTW
%HOMEPATH%\TNZOQ\Q93415.EPE
%HOMEPATH%\TNZOQ\U51223.ONO
%HOMEPATH%\TNZOQ\12993.CDD
%HOMEPATH%\TNZOQ\D44963.JZD
%HOMEPATH%\TNZOQ\80348.OBV
%HOMEPATH%\TNZOQ\I70439.BZT
%HOMEPATH%\TNZOQ\41260.KBG
%HOMEPATH%\TNZOQ\34441.BJZ
%HOMEPATH%\TNZOQ\99870.LUF
%HOMEPATH%\TNZOQ\66460.ALU
%HOMEPATH%\TNZOQ\51581.YVO
%HOMEPATH%\TNZOQ\3394.UOD
%HOMEPATH%\TNZOQ\C25307.URD
%HOMEPATH%\TNZOQ\A66113.LLW
%HOMEPATH%\TNZOQ\79071.FQM
%HOMEPATH%\TNZOQ\J6715.YNC
%HOMEPATH%\TNZOQ\M60531.VSU
%HOMEPATH%\TNZOQ\76255.KOM
%HOMEPATH%\TNZOQ\79139.QLU
%HOMEPATH%\TNZOQ\94214.AHT
%HOMEPATH%\TNZOQ\8220.SFB
%HOMEPATH%\TNZOQ\31817.CZK
%HOMEPATH%\TNZOQ\V59814.SRO
%HOMEPATH%\TNZOQ\S32412.UDO
%HOMEPATH%\TNZOQ\78795.JMZ
%HOMEPATH%\TNZOQ\15336.CDS
%HOMEPATH%\TNZOQ\82183.OCO
%HOMEPATH%\TNZOQ\B66828.AYT
%HOMEPATH%\TNZOQ\61037.CCR
%HOMEPATH%\TNZOQ\Z62272.ABX
%HOMEPATH%\TNZOQ\84893.GZB
%HOMEPATH%\TNZOQ\36861.IVW
%HOMEPATH%\TNZOQ\I81768.VWV
%HOMEPATH%\TNZOQ\79738.UOV
%HOMEPATH%\TNZOQ\95108.TKD
%HOMEPATH%\TNZOQ\X58781.SZL
%HOMEPATH%\TNZOQ\J67128.KQU
%HOMEPATH%\TNZOQ\T6748.OUA
%HOMEPATH%\TNZOQ\32945.YYO
%HOMEPATH%\TNZOQ\91018.RNM
%HOMEPATH%\TNZOQ\28230.CKO
%HOMEPATH%\TNZOQ\97836.TGO
%HOMEPATH%\TNZOQ\57930.HJT
%HOMEPATH%\TNZOQ\E2112.NMJ
%HOMEPATH%\TNZOQ\I41167.JKE
%HOMEPATH%\TNZOQ\45296.DZR
%HOMEPATH%\TNZOQ\P85480.LNK
%HOMEPATH%\TNZOQ\M99835.XJJ
%HOMEPATH%\TNZOQ\71755.KJJ
%HOMEPATH%\TNZOQ\O36323.XQQ
%HOMEPATH%\TNZOQ\22398.LKC
%HOMEPATH%\TNZOQ\F82608.QOO
%HOMEPATH%\TNZOQ\52013.TGI
%HOMEPATH%\TNZOQ\A69031.VIF
%HOMEPATH%\TNZOQ\L87334.WPI
%HOMEPATH%\TNZOQ\C20942.AXX
%HOMEPATH%\TNZOQ\46791.JFR
%HOMEPATH%\TNZOQ\22223.WUL
%HOMEPATH%\TNZOQ\Q95792.AHE
%HOMEPATH%\TNZOQ\11227.CLS
%HOMEPATH%\TNZOQ\37313.JVU
%HOMEPATH%\TNZOQ\36640.ZVW
%HOMEPATH%\TNZOQ\73225.ZLF
%HOMEPATH%\TNZOQ\54302.MFH
%HOMEPATH%\TNZOQ\W27516.DAB
%HOMEPATH%\TNZOQ\77934.DSI
%HOMEPATH%\TNZOQ\92504.NJL
%HOMEPATH%\TNZOQ\3315.AQT
%HOMEPATH%\TNZOQ\86276.ZRQ
%HOMEPATH%\TNZOQ\61981.HQA
%HOMEPATH%\TNZOQ\6941.XRI
%HOMEPATH%\TNZOQ\66299.VRS
%HOMEPATH%\TNZOQ\Z51517.MPI
%HOMEPATH%\TNZOQ\R17735.PDF
%HOMEPATH%\TNZOQ\46951.JRQ
%HOMEPATH%\TNZOQ\47323.WYB
%HOMEPATH%\TNZOQ\46237.PDH
%HOMEPATH%\TNZOQ\14989.RRI
%HOMEPATH%\TNZOQ\Z62498.KYM
%HOMEPATH%\TNZOQ\U16974.KDE
%HOMEPATH%\TNZOQ\93244.EZF
%HOMEPATH%\TNZOQ\T81159.FAS
%HOMEPATH%\TNZOQ\14598.XSX
%HOMEPATH%\TNZOQ\Q84148.RWE
%HOMEPATH%\TNZOQ\84060.OHU
%HOMEPATH%\TNZOQ\Q39931.PNZ
%HOMEPATH%\TNZOQ\W75993.NJQ
%HOMEPATH%\TNZOQ\7891.IKS
%HOMEPATH%\TNZOQ\J22652.WZE
%HOMEPATH%\TNZOQ\D32735.JQL
%HOMEPATH%\TNZOQ\2222.PKJ
%HOMEPATH%\TNZOQ\G25531.JAK
%HOMEPATH%\TNZOQ\1601.JPJ
%HOMEPATH%\TNZOQ\K23055.AGA
%HOMEPATH%\TNZOQ\X26532.OEJ
%HOMEPATH%\TNZOQ\16300.BYG
%HOMEPATH%\TNZOQ\B99947.DAB
%HOMEPATH%\TNZOQ\75465.SBB
%HOMEPATH%\TNZOQ\78731.XFT
%HOMEPATH%\TNZOQ\Y16762.WDZ
%HOMEPATH%\TNZOQ\Z61532.WTL
%HOMEPATH%\TNZOQ\23858.QWY
%HOMEPATH%\TNZOQ\90272.LFG
%HOMEPATH%\TNZOQ\A60362.MFN
%HOMEPATH%\TNZOQ\56555.PFD
%HOMEPATH%\TNZOQ\Z9441.YFD
%HOMEPATH%\TNZOQ\Y64210.YFO
%HOMEPATH%\TNZOQ\A14116.FQD
%HOMEPATH%\TNZOQ\Q82751.GIZ
%HOMEPATH%\TNZOQ\K36372.JBV
%HOMEPATH%\TNZOQ\B7955.LVO
%HOMEPATH%\TNZOQ\3145.HXL
%HOMEPATH%\TNZOQ\53009.UIZ
%HOMEPATH%\TNZOQ\T27361.RLE
%HOMEPATH%\TNZOQ\95806.QRM
%HOMEPATH%\TNZOQ\R77208.ZVE
%HOMEPATH%\TNZOQ\B58279.KKJ
%HOMEPATH%\TNZOQ\Z94537.COO
%HOMEPATH%\TNZOQ\25969.FHC
%HOMEPATH%\TNZOQ\51189.EVD
%HOMEPATH%\TNZOQ\M22514.VPE
%HOMEPATH%\TNZOQ\18614.AWZ
%HOMEPATH%\TNZOQ\95410.EUS

Sets the 'hidden' attribute to the following files:

%HOMEPATH%\TNZOQ\I79400.BUR
%HOMEPATH%\TNZOQ\18547.REK
%HOMEPATH%\TNZOQ\C8943.WSE
%HOMEPATH%\TNZOQ\O39172.LRO
%HOMEPATH%\TNZOQ\18244.RHU
%HOMEPATH%\TNZOQ\48919.LRI
%HOMEPATH%\TNZOQ\69188.MVX
%HOMEPATH%\TNZOQ\O37870.YDV
%HOMEPATH%\TNZOQ\B48287.WOU
%HOMEPATH%\TNZOQ\I41374.CII
%HOMEPATH%\TNZOQ\90629.ZEA
%HOMEPATH%\TNZOQ\89334.TEX
%HOMEPATH%\TNZOQ\90992.ZDK
%HOMEPATH%\TNZOQ\B94849.WSI
%HOMEPATH%\TNZOQ\W8239.DYA
%HOMEPATH%\TNZOQ\22578.GYZ
%HOMEPATH%\TNZOQ\96449.KLK
%HOMEPATH%\TNZOQ\S23720.RNV
%HOMEPATH%\TNZOQ\W89813.YES
%HOMEPATH%\TNZOQ\P50806.URH
%HOMEPATH%\TNZOQ\G66866.SRE
%HOMEPATH%\TNZOQ\U55145.YCD
%HOMEPATH%\TNZOQ\A85221.GKJ
%HOMEPATH%\TNZOQ\Y13771.HBW
%HOMEPATH%\TNZOQ\V6153.URM
%HOMEPATH%\TNZOQ\86314.KQX
%HOMEPATH%\TNZOQ\O52454.AUS
%HOMEPATH%\TNZOQ\T28606.KWA
%HOMEPATH%\TNZOQ\35115.TDI
%HOMEPATH%\TNZOQ\B96119.ZYJ
%HOMEPATH%\TNZOQ\U15806.FUH
%HOMEPATH%\TNZOQ\E29210.HBF
%HOMEPATH%\TNZOQ\J34688.TWS
%HOMEPATH%\TNZOQ\4352.ZXZ
%HOMEPATH%\TNZOQ\Q27523.EIF
%HOMEPATH%\TNZOQ\42038.RAP
%HOMEPATH%\TNZOQ\50879.OZM
%HOMEPATH%\TNZOQ\56289.QMS
%HOMEPATH%\TNZOQ\51124.LTK
%HOMEPATH%\TNZOQ\T41335.OLO
%HOMEPATH%\TNZOQ\N60515.NWI
%HOMEPATH%\TNZOQ\N92858.FXV
%HOMEPATH%\TNZOQ\J27701.HLC
%HOMEPATH%\TNZOQ\E96707.MIK
%HOMEPATH%\TNZOQ\M54617.LCJ
%HOMEPATH%\TNZOQ\45989.FHK
%HOMEPATH%\TNZOQ\I85100.UMI
%HOMEPATH%\TNZOQ\S25835.OES
%HOMEPATH%\TNZOQ\K23277.LNZ
%HOMEPATH%\TNZOQ\69888.IDE
%HOMEPATH%\TNZOQ\51658.KAT
%HOMEPATH%\TNZOQ\24685.JLS
%HOMEPATH%\TNZOQ\51390.COY
%HOMEPATH%\TNZOQ\Z75634.ESS
%HOMEPATH%\TNZOQ\28215.YBB
%HOMEPATH%\TNZOQ\40442.LOS
%HOMEPATH%\TNZOQ\P61238.TUR
%HOMEPATH%\TNZOQ\L62874.PLD
%HOMEPATH%\TNZOQ\E50098.IWY
%HOMEPATH%\TNZOQ\U20380.YFH
%HOMEPATH%\TNZOQ\17983.JRS
%HOMEPATH%\TNZOQ\24149.AYD
%HOMEPATH%\TNZOQ\55909.PNP
%HOMEPATH%\TNZOQ\U9786.DDM
%HOMEPATH%\TNZOQ\21616.GZY
%HOMEPATH%\TNZOQ\47602.BJN
%HOMEPATH%\TNZOQ\X77489.IID
%HOMEPATH%\TNZOQ\48811.MYU
%HOMEPATH%\TNZOQ\13094.HCZ
%HOMEPATH%\TNZOQ\84989.HFR
%HOMEPATH%\TNZOQ\62382.XIM
%HOMEPATH%\TNZOQ\M96442.KTC
%HOMEPATH%\TNZOQ\77813.NEJ
%HOMEPATH%\TNZOQ\Z66929.RNH
%HOMEPATH%\TNZOQ\B85654.SBR
%HOMEPATH%\TNZOQ\C83620.KSI
%HOMEPATH%\TNZOQ\M65658.ZSB
%HOMEPATH%\TNZOQ\F90161.DSD
%HOMEPATH%\TNZOQ\79103.JUI
%HOMEPATH%\TNZOQ\57876.BNZ
%HOMEPATH%\TNZOQ\57933.CZY
%HOMEPATH%\TNZOQ\Y12671.FDL
%HOMEPATH%\TNZOQ\31781.POF
%HOMEPATH%\TNZOQ\G42855.XEZ
%HOMEPATH%\TNZOQ\O31408.RTX
%HOMEPATH%\TNZOQ\O45591.RTZ
%HOMEPATH%\TNZOQ\9435.ZLB
%HOMEPATH%\TNZOQ\19446.HGE
%HOMEPATH%\TNZOQ\50121.CWM
%HOMEPATH%\TNZOQ\M81101.IPY
%HOMEPATH%\TNZOQ\79545.KXO
%HOMEPATH%\TNZOQ\3040.QMC
%HOMEPATH%\TNZOQ\B7319.BQY
%HOMEPATH%\TNZOQ\26472.PVJ
%HOMEPATH%\TNZOQ\82183.OCO
%HOMEPATH%\TNZOQ\B66828.AYT
%HOMEPATH%\TNZOQ\K27072.PZR
%HOMEPATH%\TNZOQ\99763.ABB
%HOMEPATH%\TNZOQ\Y54354.OQA
%HOMEPATH%\TNZOQ\3202.WPR
%HOMEPATH%\TNZOQ\X17564.LWK
%HOMEPATH%\TNZOQ\66514.HGJ
%HOMEPATH%\TNZOQ\B12911.OEN
%HOMEPATH%\TNZOQ\56082.YNA
%HOMEPATH%\TNZOQ\53881.VGY
%HOMEPATH%\TNZOQ\75687.UZQ
%HOMEPATH%\TNZOQ\O62582.MKK
%HOMEPATH%\TNZOQ\G7075.VGS
%HOMEPATH%\TNZOQ\6894.AJS
%HOMEPATH%\TNZOQ\M6972.DGW
%HOMEPATH%\TNZOQ\C16659.UKU
%HOMEPATH%\TNZOQ\11525.XHO
%HOMEPATH%\TNZOQ\82074.YBM
%HOMEPATH%\TNZOQ\1845.OXD
%HOMEPATH%\TNZOQ\47119.APS
%HOMEPATH%\TNZOQ\L70270.AWN
%HOMEPATH%\TNZOQ\X52501.ORN
%HOMEPATH%\TNZOQ\S56011.QGQ
%HOMEPATH%\TNZOQ\51550.BRT
%HOMEPATH%\TNZOQ\T18350.OCJ
%HOMEPATH%\TNZOQ\D53897.RFT
%HOMEPATH%\TNZOQ\70928.JYX
%HOMEPATH%\TNZOQ\84185.MGQ
%HOMEPATH%\TNZOQ\S80517.HPD
%HOMEPATH%\TNZOQ\91188.WRW
%HOMEPATH%\TNZOQ\I88326.RHQ
%HOMEPATH%\TNZOQ\39608.CJL
%HOMEPATH%\TNZOQ\89521.IUG
%HOMEPATH%\TNZOQ\R8054.VEE
%HOMEPATH%\TNZOQ\6486.USJ
%HOMEPATH%\TNZOQ\U39903.NED
%HOMEPATH%\TNZOQ\P81880.HAN
%HOMEPATH%\TNZOQ\30057.NSR
%HOMEPATH%\TNZOQ\N46701.JZR
%HOMEPATH%\TNZOQ\S1411.LHD
%HOMEPATH%\TNZOQ\B38461.SRO
%HOMEPATH%\TNZOQ\Y20240.FOK
%HOMEPATH%\TNZOQ\95372.GZG
%HOMEPATH%\TNZOQ\25599.ZJX
%HOMEPATH%\TNZOQ\64339.PNN
%HOMEPATH%\TNZOQ\7596.APE
%HOMEPATH%\TNZOQ\R28200.SFV
%HOMEPATH%\TNZOQ\P86197.KPT
%HOMEPATH%\TNZOQ\S86849.YVN
%HOMEPATH%\TNZOQ\F86191.IDF
%HOMEPATH%\TNZOQ\12789.FMH
%HOMEPATH%\TNZOQ\12887.TUF
%HOMEPATH%\TNZOQ\41759.ZPC
%HOMEPATH%\TNZOQ\66153.RKC
%HOMEPATH%\TNZOQ\98127.TBZ
%HOMEPATH%\TNZOQ\36984.PVK
%HOMEPATH%\TNZOQ\29330.GBP
%HOMEPATH%\TNZOQ\64120.KKL
%HOMEPATH%\TNZOQ\R25725.RUE
%HOMEPATH%\TNZOQ\18156.FWB
%HOMEPATH%\TNZOQ\S33294.COZ
%HOMEPATH%\TNZOQ\E8141.SAR
%HOMEPATH%\TNZOQ\H63348.ADL
%HOMEPATH%\TNZOQ\21844.UOT
%HOMEPATH%\TNZOQ\L50503.YGX
%HOMEPATH%\TNZOQ\U12566.JAV
%HOMEPATH%\TNZOQ\Y87488.BIT
%HOMEPATH%\TNZOQ\15181.HDG
%HOMEPATH%\TNZOQ\41135.HAQ
%HOMEPATH%\TNZOQ\68085.QBJ
%HOMEPATH%\TNZOQ\N6307.GLO
%HOMEPATH%\TNZOQ\48634.YRG
%HOMEPATH%\TNZOQ\24706.GCO
%HOMEPATH%\TNZOQ\Z44488.HTH
%HOMEPATH%\TNZOQ\34244.VBN
%HOMEPATH%\TNZOQ\16219.BQK
%HOMEPATH%\TNZOQ\4464.AGL
%HOMEPATH%\TNZOQ\W83793.GEN
%HOMEPATH%\TNZOQ\35856.SFF
%HOMEPATH%\TNZOQ\66862.LQX
%HOMEPATH%\TNZOQ\H8874.WUK
%HOMEPATH%\TNZOQ\D19980.AVP
%HOMEPATH%\TNZOQ\46678.GFJ
%HOMEPATH%\TNZOQ\V48043.RYA
%HOMEPATH%\TNZOQ\91556.GRF
%HOMEPATH%\TNZOQ\G40682.ADQ
%HOMEPATH%\TNZOQ\99033.PSB
%HOMEPATH%\TNZOQ\60053.DWD
%HOMEPATH%\TNZOQ\B36723.SSD
%HOMEPATH%\TNZOQ\O8631.DIS
%HOMEPATH%\TNZOQ\76137.BNG
%HOMEPATH%\TNZOQ\11827.BKA
%HOMEPATH%\TNZOQ\H55212.CZE
%HOMEPATH%\TNZOQ\39858.FLO
%HOMEPATH%\TNZOQ\M55441.KBW
%HOMEPATH%\TNZOQ\95758.WCT
%HOMEPATH%\TNZOQ\L83726.XAI
%HOMEPATH%\TNZOQ\52641.OEN
%HOMEPATH%\TNZOQ\93902.QFY
%HOMEPATH%\TNZOQ\Y7248.PAQ
%HOMEPATH%\TNZOQ\N82947.HMH
%HOMEPATH%\TNZOQ\Y32540.BIR
%HOMEPATH%\TNZOQ\38486.GKJ
%HOMEPATH%\TNZOQ\58512.FTO
%HOMEPATH%\TNZOQ\B63688.XJJ
%HOMEPATH%\TNZOQ\O64658.UMZ
%HOMEPATH%\TNZOQ\26101.FHG
%HOMEPATH%\TNZOQ\N78795.WWA
%HOMEPATH%\TNZOQ\71574.UTD
%HOMEPATH%\TNZOQ\66560.XWW
%HOMEPATH%\TNZOQ\73307.NVP
%HOMEPATH%\TNZOQ\74588.CEW
%HOMEPATH%\TNZOQ\60782.OAC
%HOMEPATH%\TNZOQ\Q96106.RQF
%HOMEPATH%\TNZOQ\35849.XHL
%HOMEPATH%\TNZOQ\9618.TZI
%HOMEPATH%\TNZOQ\E92487.BFK
%HOMEPATH%\TNZOQ\63443.SMC
%HOMEPATH%\TNZOQ\B52064.TZC
%HOMEPATH%\TNZOQ\D33222.YMZ
%HOMEPATH%\TNZOQ\D60819.MLA
%HOMEPATH%\TNZOQ\H20655.BCT
%HOMEPATH%\TNZOQ\W93651.ZQU
%HOMEPATH%\TNZOQ\68713.FFU
%HOMEPATH%\TNZOQ\I92734.SGX
%HOMEPATH%\TNZOQ\T51301.YHT
%HOMEPATH%\TNZOQ\D72993.OMR
%HOMEPATH%\TNZOQ\16102.RRI
%HOMEPATH%\TNZOQ\A43015.YNX
%HOMEPATH%\TNZOQ\16213.UNM
%HOMEPATH%\TNZOQ\G79392.DJL
%HOMEPATH%\TNZOQ\R30273.JPT
%HOMEPATH%\TNZOQ\35847.IYB
%HOMEPATH%\TNZOQ\M93229.ILB
%HOMEPATH%\TNZOQ\73556.PJD
%HOMEPATH%\TNZOQ\61200.GWL
%HOMEPATH%\TNZOQ\3928.DJZ
%HOMEPATH%\TNZOQ\8231.APX
%HOMEPATH%\TNZOQ\U21112.TOV
%HOMEPATH%\TNZOQ\N91914.WHM
%HOMEPATH%\TNZOQ\Z19316.BQW
%HOMEPATH%\TNZOQ\G29519.KML
%HOMEPATH%\TNZOQ\G28533.WDE
%HOMEPATH%\TNZOQ\O68734.FRF
%HOMEPATH%\TNZOQ\A32878.TQK
%HOMEPATH%\TNZOQ\79163.YOR
%HOMEPATH%\TNZOQ\54744.KEO
%HOMEPATH%\TNZOQ\2224.UDJ
%HOMEPATH%\TNZOQ\26924.BET
%HOMEPATH%\TNZOQ\L37026.MPR
%HOMEPATH%\TNZOQ\22044.XZG
%HOMEPATH%\TNZOQ\42984.FCY
%HOMEPATH%\TNZOQ\L34941.ZSA
%HOMEPATH%\TNZOQ\93391.FMG
%HOMEPATH%\TNZOQ\R86107.KCJ
%HOMEPATH%\TNZOQ\Y12295.WJB
%HOMEPATH%\TNZOQ\49332.OES
%HOMEPATH%\TNZOQ\V37140.JON
%HOMEPATH%\TNZOQ\48726.PHM
%HOMEPATH%\TNZOQ\N37042.ZWR
%HOMEPATH%\TNZOQ\E71879.TYQ
%HOMEPATH%\TNZOQ\55792.GMG
%HOMEPATH%\TNZOQ\3820.APL
%HOMEPATH%\TNZOQ\C54811.OPJ
%HOMEPATH%\TNZOQ\T18184.UQA
%HOMEPATH%\TNZOQ\D72768.KCS
%HOMEPATH%\TNZOQ\I6450.XCP
%HOMEPATH%\TNZOQ\57422.DHT
%HOMEPATH%\TNZOQ\47934.NFS
%HOMEPATH%\TNZOQ\81418.HZP
%HOMEPATH%\TNZOQ\U6830.TPZ
%HOMEPATH%\TNZOQ\94052.WSD
%HOMEPATH%\TNZOQ\51242.SGN
%HOMEPATH%\TNZOQ\18004.HYD
%HOMEPATH%\TNZOQ\73561.AEF
%HOMEPATH%\TNZOQ\U28835.ZFD
%HOMEPATH%\TNZOQ\W64726.DVI
%HOMEPATH%\TNZOQ\78754.ISH
%HOMEPATH%\TNZOQ\26808.JGJ
%HOMEPATH%\TNZOQ\F18302.UOT
%HOMEPATH%\TNZOQ\7088.GDQ
%HOMEPATH%\TNZOQ\U75522.JSR
%HOMEPATH%\TNZOQ\78317.UZH
%HOMEPATH%\TNZOQ\V34198.HPF
%HOMEPATH%\TNZOQ\34328.SHV
%HOMEPATH%\TNZOQ\C82612.SVS
%HOMEPATH%\TNZOQ\62083.YEF
%HOMEPATH%\TNZOQ\2360.EEG
%HOMEPATH%\TNZOQ\D12367.ZRN
%HOMEPATH%\TNZOQ\B8213.RKN
%HOMEPATH%\TNZOQ\L21521.VYS
%HOMEPATH%\TNZOQ\M45585.QPQ
%HOMEPATH%\TNZOQ\P35851.VNA
%HOMEPATH%\TNZOQ\49577.QZH
%HOMEPATH%\TNZOQ\T11889.FKC
%HOMEPATH%\TNZOQ\29933.LBO
%HOMEPATH%\TNZOQ\43684.TES
%HOMEPATH%\TNZOQ\L99050.BXJ
%HOMEPATH%\TNZOQ\46317.GGD
%HOMEPATH%\TNZOQ\16180.FLU
%HOMEPATH%\TNZOQ\41018.NFQ
%HOMEPATH%\TNZOQ\N73415.GSA
%HOMEPATH%\TNZOQ\N27270.WLC
%HOMEPATH%\TNZOQ\H20509.FCJ
%HOMEPATH%\TNZOQ\Q74057.YAM
%HOMEPATH%\TNZOQ\47876.VLD
%HOMEPATH%\TNZOQ\48450.ZZQ
%HOMEPATH%\TNZOQ\13363.TTF
%HOMEPATH%\TNZOQ\C48733.KVQ
%HOMEPATH%\TNZOQ\I78042.UQJ
%HOMEPATH%\TNZOQ\46910.ZSZ
%HOMEPATH%\TNZOQ\D40732.VDA
%HOMEPATH%\TNZOQ\K71103.GYL
%HOMEPATH%\TNZOQ\76036.SJR
%HOMEPATH%\TNZOQ\69157.FRD
%HOMEPATH%\TNZOQ\P93754.KLY
%HOMEPATH%\TNZOQ\S27460.NJV
%HOMEPATH%\TNZOQ\89663.EEZ
%HOMEPATH%\TNZOQ\Q67929.GLV
%HOMEPATH%\TNZOQ\O10525.XHH
%HOMEPATH%\TNZOQ\3843.QZM
%HOMEPATH%\TNZOQ\P97757.IDA
%HOMEPATH%\TNZOQ\33174.UOR
%HOMEPATH%\TNZOQ\X65147.TYU
%HOMEPATH%\TNZOQ\23533.OHC
%HOMEPATH%\TNZOQ\39674.IQO
%HOMEPATH%\TNZOQ\P54637.PZA
%HOMEPATH%\TNZOQ\74299.ZQI
%HOMEPATH%\TNZOQ\Y38604.NKC
%HOMEPATH%\TNZOQ\S15607.YNI
%HOMEPATH%\TNZOQ\48051.DTX
%HOMEPATH%\TNZOQ\Z83390.VOI
%HOMEPATH%\TNZOQ\X36552.YVI
%HOMEPATH%\TNZOQ\67859.YCS
%HOMEPATH%\TNZOQ\T21945.WOP
%HOMEPATH%\TNZOQ\H7125.KIY
%HOMEPATH%\TNZOQ\5086.OIM
%HOMEPATH%\TNZOQ\Q42128.YLH
%HOMEPATH%\TNZOQ\13633.UCH
%HOMEPATH%\TNZOQ\11380.FDR
%HOMEPATH%\TNZOQ\11555.CZU
%HOMEPATH%\TNZOQ\62837.QBU
%HOMEPATH%\TNZOQ\A38668.FUP
%HOMEPATH%\TNZOQ\70765.XBX
%HOMEPATH%\TNZOQ\M84099.VYG
%HOMEPATH%\TNZOQ\C25592.WAL
%HOMEPATH%\TNZOQ\C69202.WQL
%HOMEPATH%\TNZOQ\89622.NRN
%HOMEPATH%\TNZOQ\67698.HIE
%HOMEPATH%\TNZOQ\T60023.WAA
%HOMEPATH%\TNZOQ\I93429.HEO
%HOMEPATH%\TNZOQ\G77131.WMU
%HOMEPATH%\TNZOQ\O65392.AAT
%HOMEPATH%\TNZOQ\3172.IAU
%HOMEPATH%\TNZOQ\79633.ZEF
%HOMEPATH%\TNZOQ\A61291.CMV
%HOMEPATH%\TNZOQ\N10266.DKF
%HOMEPATH%\TNZOQ\O8441.DMC
%HOMEPATH%\TNZOQ\B50012.BUS
%HOMEPATH%\TNZOQ\26355.SMF
%HOMEPATH%\TNZOQ\28606.JST
%HOMEPATH%\TNZOQ\B81691.RLM
%HOMEPATH%\TNZOQ\N52623.GZC
%HOMEPATH%\TNZOQ\G12572.HGC
%HOMEPATH%\TNZOQ\D56100.UED
%HOMEPATH%\TNZOQ\32535.HLY
%HOMEPATH%\TNZOQ\O10466.UDU
%HOMEPATH%\TNZOQ\24371.JUM
%HOMEPATH%\TNZOQ\A36083.KZU
%HOMEPATH%\TNZOQ\O46516.QUA
%HOMEPATH%\TNZOQ\54476.MWJ
%HOMEPATH%\TNZOQ\O94710.WIE
%HOMEPATH%\TNZOQ\66165.YFD
%HOMEPATH%\TNZOQ\4688.ZUC
%HOMEPATH%\TNZOQ\57756.DXU
%HOMEPATH%\TNZOQ\38031.UEZ
%HOMEPATH%\TNZOQ\E40620.LPV
%HOMEPATH%\TNZOQ\T25130.RFG
%HOMEPATH%\TNZOQ\44146.YIO
%HOMEPATH%\TNZOQ\N27919.XSE
%HOMEPATH%\TNZOQ\H31718.TZB
%HOMEPATH%\TNZOQ\3562.vbs
%HOMEPATH%\TNZOQ\settings.ini
%HOMEPATH%\TNZOQ\81341.SEQ
%HOMEPATH%\TNZOQ\L16682.RPG
%HOMEPATH%\TNZOQ\472383.dat
%HOMEPATH%\TNZOQ\248131.NRE
%HOMEPATH%\TNZOQ\JZHLU.exe
%HOMEPATH%\TNZOQ\229422.dat
%HOMEPATH%\TNZOQ\Z32292.BJY
%HOMEPATH%\TNZOQ\N10308.JLK
%HOMEPATH%\TNZOQ\S91699.YNS
%HOMEPATH%\TNZOQ\36445.EUG
%HOMEPATH%\TNZOQ\F59021.MOG
%HOMEPATH%\TNZOQ\21656.XJW
%HOMEPATH%\TNZOQ\C76239.KPA
%HOMEPATH%\TNZOQ\3422.HSG
%HOMEPATH%\TNZOQ\47502.VCB
%HOMEPATH%\TNZOQ\K76031.CYU
%HOMEPATH%\TNZOQ\16868.XPY
%HOMEPATH%\TNZOQ\98324.NJW
%HOMEPATH%\TNZOQ\49519.FAL
%HOMEPATH%\TNZOQ\8676.OCI
%HOMEPATH%\TNZOQ\8883.FJH
%HOMEPATH%\TNZOQ\16679.JCN
%HOMEPATH%\TNZOQ\62178.BWO
%HOMEPATH%\TNZOQ\K8184.TXK
%HOMEPATH%\TNZOQ\12421.WHY
%HOMEPATH%\TNZOQ\K7590.VXN
%HOMEPATH%\TNZOQ\E50252.QAU
%HOMEPATH%\TNZOQ\K54496.ISF
%HOMEPATH%\TNZOQ\96734.FBV
%HOMEPATH%\TNZOQ\77613.TLK
%HOMEPATH%\TNZOQ\85831.HBO
%HOMEPATH%\TNZOQ\14274.NAI
%HOMEPATH%\TNZOQ\3284.DQI
%HOMEPATH%\TNZOQ\J98582.AEI
%HOMEPATH%\TNZOQ\63006.HEH
%HOMEPATH%\TNZOQ\I83133.MXH
%HOMEPATH%\TNZOQ\90695.GFA
%HOMEPATH%\TNZOQ\C63559.KJI
%HOMEPATH%\TNZOQ\D48463.VRY
%HOMEPATH%\TNZOQ\Q36851.GDI
%HOMEPATH%\TNZOQ\O42311.BRK
%HOMEPATH%\TNZOQ\13811.TXR
%HOMEPATH%\TNZOQ\95575.YRU
%HOMEPATH%\TNZOQ\80539.EBY
%HOMEPATH%\TNZOQ\S51657.TQZ
%HOMEPATH%\TNZOQ\K11262.NCO
%HOMEPATH%\TNZOQ\C47888.VIK
%HOMEPATH%\TNZOQ\Z41729.LID
%HOMEPATH%\TNZOQ\8994.VQL
%HOMEPATH%\TNZOQ\41956.YSI
%HOMEPATH%\TNZOQ\97638.WPA
%HOMEPATH%\TNZOQ\X72020.GNL
%HOMEPATH%\TNZOQ\A16659.PNM
%HOMEPATH%\TNZOQ\74570.JGD
%HOMEPATH%\TNZOQ\P88125.NTF
%HOMEPATH%\TNZOQ\42447.NWH
%HOMEPATH%\TNZOQ\99870.LUF
%HOMEPATH%\TNZOQ\56796.GEO
%HOMEPATH%\TNZOQ\D91986.ENC
%HOMEPATH%\TNZOQ\42868.XFO
%HOMEPATH%\TNZOQ\B12559.VKZ
%HOMEPATH%\TNZOQ\53553.MLH
%HOMEPATH%\TNZOQ\O68862.OIT
%HOMEPATH%\TNZOQ\33869.HHJ
%HOMEPATH%\TNZOQ\M28679.BWW
%HOMEPATH%\TNZOQ\H50184.OOM
%HOMEPATH%\TNZOQ\87879.QQO
%HOMEPATH%\TNZOQ\K8521.UYB
%HOMEPATH%\TNZOQ\66460.ALU
%HOMEPATH%\TNZOQ\U51223.ONO
%HOMEPATH%\TNZOQ\80348.OBV
%HOMEPATH%\TNZOQ\M43014.IID
%HOMEPATH%\TNZOQ\43667.WUY
%HOMEPATH%\TNZOQ\D44963.JZD
%HOMEPATH%\TNZOQ\78731.XFT
%HOMEPATH%\TNZOQ\I70439.BZT
%HOMEPATH%\TNZOQ\12993.CDD
%HOMEPATH%\TNZOQ\Q93415.EPE
%HOMEPATH%\TNZOQ\51581.YVO
%HOMEPATH%\TNZOQ\A66113.LLW
%HOMEPATH%\TNZOQ\41260.KBG
%HOMEPATH%\TNZOQ\34441.BJZ
%HOMEPATH%\TNZOQ\C25307.URD
%HOMEPATH%\TNZOQ\X89793.GTW
%HOMEPATH%\TNZOQ\79071.FQM
%HOMEPATH%\TNZOQ\3394.UOD
%HOMEPATH%\TNZOQ\A91348.HAE
%HOMEPATH%\TNZOQ\94214.AHT
%HOMEPATH%\TNZOQ\V59814.SRO
%HOMEPATH%\TNZOQ\J6715.YNC
%HOMEPATH%\TNZOQ\M60531.VSU
%HOMEPATH%\TNZOQ\31817.CZK
%HOMEPATH%\TNZOQ\I41167.JKE
%HOMEPATH%\TNZOQ\S32412.UDO
%HOMEPATH%\TNZOQ\8220.SFB
%HOMEPATH%\TNZOQ\79139.QLU
%HOMEPATH%\TNZOQ\61037.CCR
%HOMEPATH%\TNZOQ\36861.IVW
%HOMEPATH%\TNZOQ\78795.JMZ
%HOMEPATH%\TNZOQ\15336.CDS
%HOMEPATH%\TNZOQ\84893.GZB
%HOMEPATH%\TNZOQ\76255.KOM
%HOMEPATH%\TNZOQ\I81768.VWV
%HOMEPATH%\TNZOQ\Z62272.ABX
%HOMEPATH%\TNZOQ\45296.DZR
%HOMEPATH%\TNZOQ\T6748.OUA
%HOMEPATH%\TNZOQ\28230.CKO
%HOMEPATH%\TNZOQ\79738.UOV
%HOMEPATH%\TNZOQ\95108.TKD
%HOMEPATH%\TNZOQ\91018.RNM
%HOMEPATH%\TNZOQ\K75344.ZDK
%HOMEPATH%\TNZOQ\97836.TGO
%HOMEPATH%\TNZOQ\32945.YYO
%HOMEPATH%\TNZOQ\J67128.KQU
%HOMEPATH%\TNZOQ\P85480.LNK
%HOMEPATH%\TNZOQ\O36323.XQQ
%HOMEPATH%\TNZOQ\57930.HJT
%HOMEPATH%\TNZOQ\E2112.NMJ
%HOMEPATH%\TNZOQ\71755.KJJ
%HOMEPATH%\TNZOQ\X58781.SZL
%HOMEPATH%\TNZOQ\22398.LKC
%HOMEPATH%\TNZOQ\M99835.XJJ
%HOMEPATH%\TNZOQ\Y16762.WDZ
%HOMEPATH%\TNZOQ\C20942.AXX
%HOMEPATH%\TNZOQ\Q95792.AHE
%HOMEPATH%\TNZOQ\F82608.QOO
%HOMEPATH%\TNZOQ\52013.TGI
%HOMEPATH%\TNZOQ\22223.WUL
%HOMEPATH%\TNZOQ\93244.EZF
%HOMEPATH%\TNZOQ\11227.CLS
%HOMEPATH%\TNZOQ\46791.JFR
%HOMEPATH%\TNZOQ\L87334.WPI
%HOMEPATH%\TNZOQ\W27516.DAB
%HOMEPATH%\TNZOQ\3315.AQT
%HOMEPATH%\TNZOQ\37313.JVU
%HOMEPATH%\TNZOQ\36640.ZVW
%HOMEPATH%\TNZOQ\92504.NJL
%HOMEPATH%\TNZOQ\A69031.VIF
%HOMEPATH%\TNZOQ\86276.ZRQ
%HOMEPATH%\TNZOQ\77934.DSI
%HOMEPATH%\TNZOQ\T81159.FAS
%HOMEPATH%\TNZOQ\R17735.PDF
%HOMEPATH%\TNZOQ\46237.PDH
%HOMEPATH%\TNZOQ\61981.HQA
%HOMEPATH%\TNZOQ\6941.XRI
%HOMEPATH%\TNZOQ\47323.WYB
%HOMEPATH%\TNZOQ\C88535.SFY
%HOMEPATH%\TNZOQ\14989.RRI
%HOMEPATH%\TNZOQ\46951.JRQ
%HOMEPATH%\TNZOQ\Z51517.MPI
%HOMEPATH%\TNZOQ\14598.XSX
%HOMEPATH%\TNZOQ\Q39931.PNZ
%HOMEPATH%\TNZOQ\Z62498.KYM
%HOMEPATH%\TNZOQ\U16974.KDE
%HOMEPATH%\TNZOQ\84060.OHU
%HOMEPATH%\TNZOQ\66299.VRS
%HOMEPATH%\TNZOQ\W75993.NJQ
%HOMEPATH%\TNZOQ\Q84148.RWE
%HOMEPATH%\TNZOQ\54302.MFH
%HOMEPATH%\TNZOQ\G25531.JAK
%HOMEPATH%\TNZOQ\X26532.OEJ
%HOMEPATH%\TNZOQ\7891.IKS
%HOMEPATH%\TNZOQ\J22652.WZE
%HOMEPATH%\TNZOQ\K23055.AGA
%HOMEPATH%\TNZOQ\B58279.KKJ
%HOMEPATH%\TNZOQ\16300.BYG
%HOMEPATH%\TNZOQ\1601.JPJ
%HOMEPATH%\TNZOQ\2222.PKJ
%HOMEPATH%\TNZOQ\Z61532.WTL
%HOMEPATH%\TNZOQ\A60362.MFN
%HOMEPATH%\TNZOQ\B99947.DAB
%HOMEPATH%\TNZOQ\75465.SBB
%HOMEPATH%\TNZOQ\90272.LFG
%HOMEPATH%\TNZOQ\D32735.JQL
%HOMEPATH%\TNZOQ\56555.PFD
%HOMEPATH%\TNZOQ\23858.QWY
%HOMEPATH%\TNZOQ\Z94537.COO
%HOMEPATH%\TNZOQ\K36372.JBV
%HOMEPATH%\TNZOQ\53009.UIZ
%HOMEPATH%\TNZOQ\Z9441.YFD
%HOMEPATH%\TNZOQ\Y64210.YFO
%HOMEPATH%\TNZOQ\3145.HXL
%HOMEPATH%\TNZOQ\73225.ZLF
%HOMEPATH%\TNZOQ\T27361.RLE
%HOMEPATH%\TNZOQ\B7955.LVO
%HOMEPATH%\TNZOQ\Q82751.GIZ
%HOMEPATH%\TNZOQ\25969.FHC
%HOMEPATH%\TNZOQ\18614.AWZ
%HOMEPATH%\TNZOQ\95806.QRM
%HOMEPATH%\TNZOQ\R77208.ZVE
%HOMEPATH%\TNZOQ\M22514.VPE
%HOMEPATH%\TNZOQ\A14116.FQD
%HOMEPATH%\TNZOQ\95410.EUS
%HOMEPATH%\TNZOQ\51189.EVD

Deletes the following files:

%HOMEPATH%\TNZOQ\DKPMHJZF.dat

Network activity:

Connects to:

'6b#####oot.no-ip.org':11930
'5b#####oot.no-ip.org':11930
'7b#####oot.no-ip.org':11930
'9b#####oot.no-ip.org':11930
'8b#####oot.no-ip.org':11930
'1b#####oot.no-ip.org':11930
'ba####oot.no-ip.org':11930
'2b#####oot.no-ip.org':11930
'4b#####oot.no-ip.org':11930
'3b#####oot.no-ip.org':11930

UDP:

DNS ASK 6b#####oot.no-ip.org
DNS ASK 5b#####oot.no-ip.org
DNS ASK 7b#####oot.no-ip.org
DNS ASK 9b#####oot.no-ip.org
DNS ASK 8b#####oot.no-ip.org
DNS ASK 1b#####oot.no-ip.org
DNS ASK ba####oot.no-ip.org
DNS ASK 2b#####oot.no-ip.org
DNS ASK 4b#####oot.no-ip.org
DNS ASK 3b#####oot.no-ip.org

Miscellaneous:

Searches for the following windows:

ClassName: '(null)' WindowName: '(null)'
ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'EDIT' WindowName: '(null)'

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations

Free trial