マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Trojan.PWS.Multi.1145

Added to the Dr.Web virus database: 2013-07-04

Virus description added:

Technical Information

To ensure autorun and distribution:
Modifies the following registry keys:
  • [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{J05Y6166-70LU-YR45-5080-88BFJ6AG4C5J}] 'StubPath' = '"%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe"'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Window' = '%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'VKHPE' = '%HOMEPATH%\VKHPE\start.vbs'
Malicious functions:
Creates and executes the following:
  • '%HOMEPATH%\VKHPE\Autoit3132628.exe' RAZGVKKG.dat
  • '%HOMEPATH%\VKHPE\Autoit3132628.exe' 330185.dat
  • '%HOMEPATH%\VKHPE\adwcleaner.exe'
Executes the following:
  • '%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
  • '<SYSTEM32>\wscript.exe' "%HOMEPATH%\VKHPE\run.vbs"
Injects code into
the following system processes:
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
Modifies file system :
Creates the following files:
  • %HOMEPATH%\VKHPE\X49571.HLY
  • %HOMEPATH%\VKHPE\81357.AUD
  • %HOMEPATH%\VKHPE\R22187.DKF
  • %HOMEPATH%\VKHPE\71416.GVB
  • %HOMEPATH%\VKHPE\R66483.GBP
  • %HOMEPATH%\VKHPE\Q69025.BHF
  • %HOMEPATH%\VKHPE\K35550.WRB
  • %HOMEPATH%\VKHPE\B62787.MJN
  • %HOMEPATH%\VKHPE\W76731.NTZ
  • %HOMEPATH%\VKHPE\51628.EJD
  • %HOMEPATH%\VKHPE\47594.SQF
  • %HOMEPATH%\VKHPE\10435.DHF
  • %HOMEPATH%\VKHPE\Y53988.RJU
  • %HOMEPATH%\VKHPE\U86387.UIR
  • %HOMEPATH%\VKHPE\Z45136.PVI
  • %HOMEPATH%\VKHPE\89492.BAI
  • %HOMEPATH%\VKHPE\L41382.OQR
  • %HOMEPATH%\VKHPE\79698.SZT
  • %HOMEPATH%\VKHPE\69397.VYD
  • %HOMEPATH%\VKHPE\F42792.NKY
  • %HOMEPATH%\VKHPE\M20795.OTV
  • %HOMEPATH%\VKHPE\32912.QYI
  • %HOMEPATH%\VKHPE\R49909.HPC
  • %HOMEPATH%\VKHPE\O61839.LLK
  • %HOMEPATH%\VKHPE\D63127.UPB
  • %HOMEPATH%\VKHPE\L45819.MNE
  • %HOMEPATH%\VKHPE\F45491.KCN
  • %HOMEPATH%\VKHPE\K95876.PXU
  • %HOMEPATH%\VKHPE\44847.DGN
  • %HOMEPATH%\VKHPE\70360.YGV
  • %HOMEPATH%\VKHPE\G57154.ZHJ
  • %HOMEPATH%\VKHPE\71134.DBF
  • %HOMEPATH%\VKHPE\40416.YKL
  • %HOMEPATH%\VKHPE\E32338.BGT
  • %HOMEPATH%\VKHPE\J48964.VHT
  • %HOMEPATH%\VKHPE\39284.KEH
  • %HOMEPATH%\VKHPE\76420.OLA
  • %HOMEPATH%\VKHPE\14514.RGJ
  • %HOMEPATH%\VKHPE\20872.UMZ
  • %HOMEPATH%\VKHPE\Y96378.MME
  • %HOMEPATH%\VKHPE\33143.LVN
  • %HOMEPATH%\VKHPE\P78494.YXI
  • %HOMEPATH%\VKHPE\P4528.WNR
  • %HOMEPATH%\VKHPE\O43181.JBW
  • %HOMEPATH%\VKHPE\20319.DAE
  • %HOMEPATH%\VKHPE\7331.TAW
  • %HOMEPATH%\VKHPE\P14932.LMI
  • %HOMEPATH%\VKHPE\23865.EAX
  • %HOMEPATH%\VKHPE\D33738.XQK
  • %HOMEPATH%\VKHPE\61606.AKC
  • %HOMEPATH%\VKHPE\98525.GOG
  • %HOMEPATH%\VKHPE\N2266.KHF
  • %HOMEPATH%\VKHPE\G10600.PBX
  • %HOMEPATH%\VKHPE\Q91585.GBB
  • %HOMEPATH%\VKHPE\M18745.MZC
  • %HOMEPATH%\VKHPE\Q68870.ZUD
  • %HOMEPATH%\VKHPE\Z66400.NZG
  • %HOMEPATH%\VKHPE\C78872.TOU
  • %HOMEPATH%\VKHPE\14120.QHJ
  • %HOMEPATH%\VKHPE\90375.SBD
  • %HOMEPATH%\VKHPE\J47348.ZHG
  • %HOMEPATH%\VKHPE\18107.KOY
  • %HOMEPATH%\VKHPE\32908.CFN
  • %HOMEPATH%\VKHPE\H95927.BOH
  • %HOMEPATH%\VKHPE\75305.GVY
  • %HOMEPATH%\VKHPE\57013.UNS
  • %HOMEPATH%\VKHPE\32093.ENJ
  • %HOMEPATH%\VKHPE\98010.LNX
  • %HOMEPATH%\VKHPE\1526.YMF
  • %HOMEPATH%\VKHPE\Q59468.ANG
  • %HOMEPATH%\VKHPE\L75580.NBI
  • %HOMEPATH%\VKHPE\O54970.WSY
  • %HOMEPATH%\VKHPE\O42689.LPU
  • %HOMEPATH%\VKHPE\68311.RZT
  • %HOMEPATH%\VKHPE\21045.BAU
  • %HOMEPATH%\VKHPE\T43984.OMQ
  • %HOMEPATH%\VKHPE\11273.QVC
  • %HOMEPATH%\VKHPE\G41178.ITF
  • %HOMEPATH%\VKHPE\L76257.OUO
  • %HOMEPATH%\VKHPE\10954.QJN
  • %HOMEPATH%\VKHPE\A31355.LVL
  • %HOMEPATH%\VKHPE\45785.PQK
  • %HOMEPATH%\VKHPE\93338.AXU
  • %HOMEPATH%\VKHPE\L22324.IXY
  • %HOMEPATH%\VKHPE\B6913.VPQ
  • %HOMEPATH%\VKHPE\89231.PTF
  • %HOMEPATH%\VKHPE\45002.SLS
  • %HOMEPATH%\VKHPE\15676.MQS
  • %HOMEPATH%\VKHPE\J26417.CPU
  • %HOMEPATH%\VKHPE\P88005.ZVD
  • %HOMEPATH%\VKHPE\55421.VKM
  • %HOMEPATH%\VKHPE\98110.EIW
  • %HOMEPATH%\VKHPE\74039.WET
  • %HOMEPATH%\VKHPE\12664.MHW
  • %HOMEPATH%\VKHPE\17461.QLI
  • %HOMEPATH%\VKHPE\H61365.NFV
  • %HOMEPATH%\VKHPE\66725.ZTE
  • %HOMEPATH%\VKHPE\Z51588.PFM
  • %HOMEPATH%\VKHPE\I3612.LQM
  • %HOMEPATH%\VKHPE\D8305.RYC
  • %HOMEPATH%\VKHPE\45704.TOX
  • %HOMEPATH%\VKHPE\G44803.BAR
  • %HOMEPATH%\VKHPE\33480.NAC
  • %HOMEPATH%\VKHPE\11798.UKY
  • %HOMEPATH%\VKHPE\84266.KQM
  • %HOMEPATH%\VKHPE\67765.LCI
  • %HOMEPATH%\VKHPE\93898.BSC
  • %HOMEPATH%\VKHPE\19046.KEC
  • %HOMEPATH%\VKHPE\Z9971.BTP
  • %HOMEPATH%\VKHPE\12254.UIJ
  • %HOMEPATH%\VKHPE\41904.DJZ
  • %HOMEPATH%\VKHPE\Y81496.EQW
  • %HOMEPATH%\VKHPE\O30682.AFU
  • %HOMEPATH%\VKHPE\W3384.WKY
  • %HOMEPATH%\VKHPE\F5468.CNH
  • %HOMEPATH%\VKHPE\F88431.PCP
  • %HOMEPATH%\VKHPE\J89623.VKA
  • %HOMEPATH%\VKHPE\18962.JTA
  • %HOMEPATH%\VKHPE\54949.XIT
  • %HOMEPATH%\VKHPE\K64058.FPC
  • %HOMEPATH%\VKHPE\G38644.IYI
  • %HOMEPATH%\VKHPE\73870.UWH
  • %HOMEPATH%\VKHPE\24105.JDO
  • %HOMEPATH%\VKHPE\42328.MTS
  • %HOMEPATH%\VKHPE\T4376.YJH
  • %HOMEPATH%\VKHPE\18811.PHX
  • %HOMEPATH%\VKHPE\X13060.VOC
  • %HOMEPATH%\VKHPE\91733.ZPD
  • %HOMEPATH%\VKHPE\N95843.ASW
  • %HOMEPATH%\VKHPE\41832.OWU
  • %HOMEPATH%\VKHPE\28882.TLZ
  • %HOMEPATH%\VKHPE\P57726.HHF
  • %HOMEPATH%\VKHPE\N88547.OWB
  • %HOMEPATH%\VKHPE\77822.OYO
  • %HOMEPATH%\VKHPE\44638.COS
  • %HOMEPATH%\VKHPE\R40071.RSJ
  • %HOMEPATH%\VKHPE\11039.JTH
  • %HOMEPATH%\VKHPE\66614.CRH
  • %HOMEPATH%\VKHPE\M76101.BAR
  • %HOMEPATH%\VKHPE\S92514.BFN
  • %HOMEPATH%\VKHPE\78982.OXQ
  • %HOMEPATH%\VKHPE\S24059.EZV
  • %HOMEPATH%\VKHPE\M17120.OOQ
  • %HOMEPATH%\VKHPE\I70851.QCS
  • %HOMEPATH%\VKHPE\25124.GQS
  • %HOMEPATH%\VKHPE\5922.CIK
  • %HOMEPATH%\VKHPE\37595.ISL
  • %HOMEPATH%\VKHPE\Q90294.VES
  • %HOMEPATH%\VKHPE\Q59969.UUN
  • %HOMEPATH%\VKHPE\26118.FCN
  • %HOMEPATH%\VKHPE\U17614.NLZ
  • %HOMEPATH%\VKHPE\61655.VMU
  • %HOMEPATH%\VKHPE\R13936.NPQ
  • %HOMEPATH%\VKHPE\73156.JTI
  • %HOMEPATH%\VKHPE\46299.AKF
  • %HOMEPATH%\VKHPE\O96748.IOR
  • %HOMEPATH%\VKHPE\4513.OYM
  • %HOMEPATH%\VKHPE\51868.IPK
  • %HOMEPATH%\VKHPE\91969.TUA
  • %HOMEPATH%\VKHPE\47644.NLB
  • %HOMEPATH%\VKHPE\O94701.MHY
  • %HOMEPATH%\VKHPE\60341.VEE
  • %HOMEPATH%\VKHPE\4396.FKH
  • %HOMEPATH%\VKHPE\34731.LZY
  • %HOMEPATH%\VKHPE\V35892.QQQ
  • %HOMEPATH%\VKHPE\G24359.AAU
  • %HOMEPATH%\VKHPE\G6845.VPI
  • %HOMEPATH%\VKHPE\Y96180.RNI
  • %HOMEPATH%\VKHPE\89145.ORP
  • %HOMEPATH%\VKHPE\81415.FIK
  • %HOMEPATH%\VKHPE\82427.IKK
  • %HOMEPATH%\VKHPE\R11311.WWM
  • %HOMEPATH%\VKHPE\84594.QOO
  • %HOMEPATH%\VKHPE\start.vbs
  • %HOMEPATH%\VKHPE\start.cmd
  • %TEMP%\Version.txt
  • %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\Version[1].txt
  • %HOMEPATH%\VKHPE\Z89275.KFI
  • %HOMEPATH%\VKHPE\40600.FUY
  • %HOMEPATH%\VKHPE\RAZGVKKG.dat
  • %HOMEPATH%\VKHPE\13740.CFJ
  • %HOMEPATH%\VKHPE\85045.SWC
  • %HOMEPATH%\VKHPE\88623.AIP
  • %HOMEPATH%\VKHPE\V79268.LNN
  • %HOMEPATH%\VKHPE\8854.SEN
  • %HOMEPATH%\VKHPE\X8701.ROF
  • %HOMEPATH%\VKHPE\K60307.BQA
  • %HOMEPATH%\VKHPE\49627.BTS
  • %HOMEPATH%\VKHPE\63608.KSJ
  • %HOMEPATH%\VKHPE\17790.SRI
  • %HOMEPATH%\VKHPE\O10341.WDW
  • %HOMEPATH%\VKHPE\P40781.BUF
  • %HOMEPATH%\VKHPE\73194.RIA
  • %HOMEPATH%\VKHPE\W62924.ZUN
  • %HOMEPATH%\VKHPE\J22548.EZT
  • %HOMEPATH%\VKHPE\E22337.EJQ
  • %HOMEPATH%\VKHPE\A91854.IHP
  • %HOMEPATH%\VKHPE\24311.ZMZ
  • %HOMEPATH%\VKHPE\F82898.PZM
  • %HOMEPATH%\VKHPE\H61034.OYH
  • %HOMEPATH%\VKHPE\E26339.WJC
  • %HOMEPATH%\VKHPE\19870.AZW
  • %HOMEPATH%\VKHPE\Q79208.VSC
  • %HOMEPATH%\VKHPE\K69781.ZXF
  • %HOMEPATH%\VKHPE\W61334.GNP
  • %HOMEPATH%\VKHPE\11586.ILG
  • %HOMEPATH%\VKHPE\C29068.GVV
  • %HOMEPATH%\VKHPE\21967.VEJ
  • %HOMEPATH%\VKHPE\40406.EJI
  • %HOMEPATH%\VKHPE\Z89337.IHW
  • %HOMEPATH%\VKHPE\O62312.YSO
  • %HOMEPATH%\VKHPE\27520.QJT
  • %HOMEPATH%\VKHPE\25879.NWI
  • %HOMEPATH%\VKHPE\F16846.JFU
  • %HOMEPATH%\VKHPE\K65747.RLD
  • %HOMEPATH%\VKHPE\41700.WZY
  • %HOMEPATH%\VKHPE\15783.ILX
  • %HOMEPATH%\VKHPE\66549.QZO
  • %HOMEPATH%\VKHPE\Y54098.ONA
  • %HOMEPATH%\VKHPE\G31101.GTK
  • %HOMEPATH%\VKHPE\97350.ATH
  • %HOMEPATH%\VKHPE\B86788.XWH
  • %HOMEPATH%\VKHPE\70483.ZLG
  • %HOMEPATH%\VKHPE\L89079.XBL
  • %HOMEPATH%\VKHPE\1584.IRJ
  • %HOMEPATH%\VKHPE\28566.TXC
  • %HOMEPATH%\VKHPE\O76083.FJC
  • %HOMEPATH%\VKHPE\W29068.GDB
  • %HOMEPATH%\VKHPE\M57881.QUF
  • %HOMEPATH%\VKHPE\V15639.PKT
  • %HOMEPATH%\VKHPE\G25065.ALN
  • %HOMEPATH%\VKHPE\R88575.HEK
  • %HOMEPATH%\VKHPE\29016.ERK
  • %HOMEPATH%\VKHPE\24662.NKE
  • %HOMEPATH%\VKHPE\14546.LPL
  • %HOMEPATH%\VKHPE\O67930.UPS
  • %HOMEPATH%\VKHPE\73484.PEM
  • %HOMEPATH%\VKHPE\56050.ARK
  • %HOMEPATH%\VKHPE\79840.FWJ
  • %HOMEPATH%\VKHPE\O33642.JGL
  • %HOMEPATH%\VKHPE\J64883.MTY
  • %HOMEPATH%\VKHPE\19999.AII
  • %HOMEPATH%\VKHPE\R80956.WPI
  • %HOMEPATH%\VKHPE\U57486.OKI
  • %HOMEPATH%\VKHPE\8086.HFG
  • %HOMEPATH%\VKHPE\J76039.YYJ
  • %HOMEPATH%\VKHPE\88945.DWO
  • %HOMEPATH%\VKHPE\86453.EPV
  • %HOMEPATH%\VKHPE\72391.ZWY
  • %HOMEPATH%\VKHPE\V41498.WYB
  • %HOMEPATH%\VKHPE\41066.PQG
  • %HOMEPATH%\VKHPE\X82093.MFU
  • %HOMEPATH%\VKHPE\45531.IXE
  • %HOMEPATH%\VKHPE\26508.MLT
  • %HOMEPATH%\VKHPE\59405.VXM
  • %HOMEPATH%\VKHPE\K7548.LXA
  • %HOMEPATH%\VKHPE\H45104.ZBN
  • %HOMEPATH%\VKHPE\I94518.HUX
  • %HOMEPATH%\VKHPE\H33345.NJQ
  • %HOMEPATH%\VKHPE\Q33808.ITT
  • %HOMEPATH%\VKHPE\A66236.RRP
  • %HOMEPATH%\VKHPE\D13566.HPG
  • %HOMEPATH%\VKHPE\21655.SUM
  • %HOMEPATH%\VKHPE\U22070.COW
  • %HOMEPATH%\VKHPE\55394.DHX
  • %HOMEPATH%\VKHPE\K54966.ZIJ
  • %HOMEPATH%\VKHPE\F89689.UFP
  • %HOMEPATH%\VKHPE\70064.WAJ
  • %HOMEPATH%\VKHPE\Y14173.DHF
  • %HOMEPATH%\VKHPE\R11402.LSH
  • %HOMEPATH%\VKHPE\42786.NKB
  • %HOMEPATH%\VKHPE\H75071.JAR
  • %HOMEPATH%\VKHPE\69948.VMG
  • %HOMEPATH%\VKHPE\G70554.BWG
  • %HOMEPATH%\VKHPE\I83327.GSV
  • %HOMEPATH%\VKHPE\88708.RPO
  • %HOMEPATH%\VKHPE\68373.OKX
  • %HOMEPATH%\VKHPE\20962.NZZ
  • %HOMEPATH%\VKHPE\E45178.WHH
  • %HOMEPATH%\VKHPE\J26151.BKF
  • %HOMEPATH%\VKHPE\50927.IJQ
  • %HOMEPATH%\VKHPE\61781.HSF
  • %HOMEPATH%\VKHPE\9036.RTZ
  • %HOMEPATH%\VKHPE\T39859.GUC
  • %HOMEPATH%\VKHPE\J27417.HXH
  • %HOMEPATH%\VKHPE\31878.OFG
  • %HOMEPATH%\VKHPE\O9100.CCH
  • %HOMEPATH%\VKHPE\F45516.FKI
  • %HOMEPATH%\VKHPE\52050.GSZ
  • %HOMEPATH%\VKHPE\W75258.FDK
  • %HOMEPATH%\VKHPE\15496.BXE
  • %HOMEPATH%\VKHPE\I90271.BBW
  • %HOMEPATH%\VKHPE\65855.MGA
  • %HOMEPATH%\VKHPE\I3671.IQA
  • %HOMEPATH%\VKHPE\67202.ZPM
  • %HOMEPATH%\VKHPE\76854.QLI
  • %HOMEPATH%\VKHPE\29741.KKP
  • %HOMEPATH%\VKHPE\14496.JAA
  • %HOMEPATH%\VKHPE\54176.UZR
  • %HOMEPATH%\VKHPE\J59869.QMO
  • %HOMEPATH%\VKHPE\31514.RZB
  • %HOMEPATH%\VKHPE\U18297.MIC
  • %HOMEPATH%\VKHPE\V10332.FSR
  • %HOMEPATH%\VKHPE\B71879.OTP
  • %HOMEPATH%\VKHPE\W29533.UAZ
  • %HOMEPATH%\VKHPE\R71263.STZ
  • %HOMEPATH%\VKHPE\77871.DEU
  • %HOMEPATH%\VKHPE\88935.UHT
  • %HOMEPATH%\VKHPE\64923.AUQ
  • %HOMEPATH%\VKHPE\H64215.JXY
  • %HOMEPATH%\VKHPE\M88649.EJI
  • %HOMEPATH%\VKHPE\95303.YNL
  • %HOMEPATH%\VKHPE\61978.PLB
  • %HOMEPATH%\VKHPE\92535.VPE
  • %HOMEPATH%\VKHPE\30527.SEN
  • %HOMEPATH%\VKHPE\40663.SBA
  • %HOMEPATH%\VKHPE\X54579.MAT
  • %HOMEPATH%\VKHPE\C62631.FIS
  • %HOMEPATH%\VKHPE\42953.SBF
  • %HOMEPATH%\VKHPE\H77279.LOY
  • %HOMEPATH%\VKHPE\12567.XXJ
  • %HOMEPATH%\VKHPE\16541.WJH
  • %HOMEPATH%\VKHPE\R56533.MBA
  • %HOMEPATH%\VKHPE\A31106.BQY
  • %HOMEPATH%\VKHPE\76077.ROO
  • %HOMEPATH%\VKHPE\S25753.TZA
  • %HOMEPATH%\VKHPE\C41311.INL
  • %HOMEPATH%\VKHPE\K3252.DKQ
  • %HOMEPATH%\VKHPE\18921.NJQ
  • %HOMEPATH%\VKHPE\S10558.BMG
  • %HOMEPATH%\VKHPE\11439.OBI
  • %HOMEPATH%\VKHPE\29341.KIE
  • %HOMEPATH%\VKHPE\D64172.BGF
  • %HOMEPATH%\VKHPE\U65770.WTT
  • %HOMEPATH%\VKHPE\K62135.KHI
  • %HOMEPATH%\VKHPE\20084.ITC
  • %HOMEPATH%\VKHPE\61074.MBD
  • %HOMEPATH%\VKHPE\84960.EFT
  • %HOMEPATH%\VKHPE\12450.ODV
  • %HOMEPATH%\VKHPE\E73388.OWS
  • %HOMEPATH%\VKHPE\Y99531.KWY
  • %HOMEPATH%\VKHPE\65411.PKX
  • %HOMEPATH%\VKHPE\A66086.TAO
  • %HOMEPATH%\VKHPE\45578.MUM
  • %HOMEPATH%\VKHPE\83585.HRP
  • %HOMEPATH%\VKHPE\R13468.AQE
  • %HOMEPATH%\VKHPE\run.vbs
  • %HOMEPATH%\VKHPE\settings.ini
  • %HOMEPATH%\VKHPE\49812.QDP
  • %HOMEPATH%\VKHPE\adwcleaner.exe
  • %HOMEPATH%\VKHPE\342974.dat
  • %HOMEPATH%\VKHPE\330185.dat
  • %HOMEPATH%\VKHPE\Autoit3132628.exe
  • %HOMEPATH%\VKHPE\71680.dat
  • %HOMEPATH%\VKHPE\35040.LRF
  • %HOMEPATH%\VKHPE\99421.BLA
  • %HOMEPATH%\VKHPE\49219.UHT
  • %HOMEPATH%\VKHPE\64186.DVG
  • %HOMEPATH%\VKHPE\85716.YDV
  • %HOMEPATH%\VKHPE\O93877.QSP
  • %HOMEPATH%\VKHPE\91299.QPX
  • %HOMEPATH%\VKHPE\B69133.JEF
  • %HOMEPATH%\VKHPE\81978.CUE
  • %HOMEPATH%\VKHPE\Y86190.JLV
  • %HOMEPATH%\VKHPE\T60442.NZR
  • %HOMEPATH%\VKHPE\68209.PVY
  • %HOMEPATH%\VKHPE\H77389.GOI
  • %HOMEPATH%\VKHPE\18068.KKO
  • %HOMEPATH%\VKHPE\28651.AZQ
  • %HOMEPATH%\VKHPE\94291.QKT
  • %HOMEPATH%\VKHPE\78211.QYP
  • %HOMEPATH%\VKHPE\66204.NDJ
  • %HOMEPATH%\VKHPE\98410.RTK
  • %HOMEPATH%\VKHPE\P38846.NJJ
  • %HOMEPATH%\VKHPE\42991.VAV
  • %HOMEPATH%\VKHPE\95741.WJI
  • %HOMEPATH%\VKHPE\68741.UDB
  • %HOMEPATH%\VKHPE\26546.RLZ
  • %HOMEPATH%\VKHPE\D44624.RSZ
  • %HOMEPATH%\VKHPE\Q89059.RZZ
  • %HOMEPATH%\VKHPE\36082.BYL
  • %HOMEPATH%\VKHPE\B18397.OTY
  • %HOMEPATH%\VKHPE\F6204.FNY
  • %HOMEPATH%\VKHPE\P21471.QFW
  • %HOMEPATH%\VKHPE\C61000.RDW
  • %HOMEPATH%\VKHPE\78415.ZGE
  • %HOMEPATH%\VKHPE\50133.GZD
  • %HOMEPATH%\VKHPE\89534.HWQ
  • %HOMEPATH%\VKHPE\36538.ANZ
  • %HOMEPATH%\VKHPE\V25748.SJL
  • %HOMEPATH%\VKHPE\95711.EYU
  • %HOMEPATH%\VKHPE\V42374.ZKI
  • %HOMEPATH%\VKHPE\76711.OMO
  • %HOMEPATH%\VKHPE\L88836.YYE
  • %HOMEPATH%\VKHPE\S27862.NFJ
  • %HOMEPATH%\VKHPE\60195.JYR
  • %HOMEPATH%\VKHPE\47241.BSY
  • %HOMEPATH%\VKHPE\72975.EOD
  • %HOMEPATH%\VKHPE\V56979.NQD
  • %HOMEPATH%\VKHPE\39836.LUZ
  • %HOMEPATH%\VKHPE\C45610.FHW
  • %HOMEPATH%\VKHPE\71117.KXB
  • %HOMEPATH%\VKHPE\S81484.CII
  • %HOMEPATH%\VKHPE\59423.JDT
  • %HOMEPATH%\VKHPE\5320.NGP
  • %HOMEPATH%\VKHPE\28649.XGY
  • %HOMEPATH%\VKHPE\96743.KTP
  • %HOMEPATH%\VKHPE\44047.LQK
  • %HOMEPATH%\VKHPE\M38394.PSD
  • %HOMEPATH%\VKHPE\K51661.DRA
  • %HOMEPATH%\VKHPE\11069.JXZ
  • %HOMEPATH%\VKHPE\O58513.ULI
  • %HOMEPATH%\VKHPE\19093.ELO
  • %HOMEPATH%\VKHPE\N81655.AJS
  • %HOMEPATH%\VKHPE\1891.PHI
  • %HOMEPATH%\VKHPE\O32463.TRM
  • %HOMEPATH%\VKHPE\N51033.AJA
  • %HOMEPATH%\VKHPE\A69167.SED
  • %HOMEPATH%\VKHPE\73932.AOC
  • %HOMEPATH%\VKHPE\22773.CCY
  • %HOMEPATH%\VKHPE\76480.ETF
  • %HOMEPATH%\VKHPE\Y26400.JUZ
  • %HOMEPATH%\VKHPE\F37653.AWG
  • %HOMEPATH%\VKHPE\40463.WZT
  • %HOMEPATH%\VKHPE\1739.MNK
  • %HOMEPATH%\VKHPE\S1898.BXA
  • %HOMEPATH%\VKHPE\89090.RTT
  • %HOMEPATH%\VKHPE\27865.MLB
  • %HOMEPATH%\VKHPE\59864.RZV
  • %HOMEPATH%\VKHPE\I52539.XQO
  • %HOMEPATH%\VKHPE\24965.XOC
  • %HOMEPATH%\VKHPE\66989.DZG
  • %HOMEPATH%\VKHPE\M99757.TLM
  • %HOMEPATH%\VKHPE\Z68824.UQJ
  • %HOMEPATH%\VKHPE\Y71883.VDO
  • %HOMEPATH%\VKHPE\K11938.XXD
  • %HOMEPATH%\VKHPE\M7344.IXZ
  • %HOMEPATH%\VKHPE\16268.TWB
  • %HOMEPATH%\VKHPE\W87725.FTU
  • %HOMEPATH%\VKHPE\X5313.BSA
  • %HOMEPATH%\VKHPE\58621.XIN
  • %HOMEPATH%\VKHPE\N75902.OIA
  • %HOMEPATH%\VKHPE\27173.ZIS
  • %HOMEPATH%\VKHPE\L29129.QFT
  • %HOMEPATH%\VKHPE\99391.PAN
  • %HOMEPATH%\VKHPE\48877.HLG
  • %HOMEPATH%\VKHPE\O95839.FVA
  • %HOMEPATH%\VKHPE\33022.LPE
  • %HOMEPATH%\VKHPE\9875.NXG
  • %HOMEPATH%\VKHPE\48675.XBQ
  • %HOMEPATH%\VKHPE\1008.EXW
  • %HOMEPATH%\VKHPE\87414.TXX
  • %HOMEPATH%\VKHPE\J83264.SKF
  • %HOMEPATH%\VKHPE\95838.SSP
  • %HOMEPATH%\VKHPE\97276.WYN
  • %HOMEPATH%\VKHPE\60266.DDD
  • %HOMEPATH%\VKHPE\58952.ROO
  • %HOMEPATH%\VKHPE\91826.POB
  • %HOMEPATH%\VKHPE\10949.RWI
  • %HOMEPATH%\VKHPE\84145.FFA
  • %HOMEPATH%\VKHPE\S96217.YES
  • %HOMEPATH%\VKHPE\A86179.JNH
  • %HOMEPATH%\VKHPE\I49787.OGJ
  • %HOMEPATH%\VKHPE\65953.SYR
  • %HOMEPATH%\VKHPE\S93760.DXK
  • %HOMEPATH%\VKHPE\85148.XDT
  • %HOMEPATH%\VKHPE\V71232.QJK
  • %HOMEPATH%\VKHPE\Y76202.XBS
  • %HOMEPATH%\VKHPE\74106.MYJ
  • %HOMEPATH%\VKHPE\82842.FJW
  • %HOMEPATH%\VKHPE\Q76654.FKD
  • %HOMEPATH%\VKHPE\J59597.ULP
  • %HOMEPATH%\VKHPE\60453.MNN
  • %HOMEPATH%\VKHPE\32046.VNG
  • %HOMEPATH%\VKHPE\33783.DCX
  • %HOMEPATH%\VKHPE\23657.JGX
  • %HOMEPATH%\VKHPE\7111.LZJ
  • %HOMEPATH%\VKHPE\G43706.EAZ
  • %HOMEPATH%\VKHPE\E45142.RFN
  • %HOMEPATH%\VKHPE\D91673.ZSU
  • %HOMEPATH%\VKHPE\N73699.OTE
  • %HOMEPATH%\VKHPE\Z51302.WRA
  • %HOMEPATH%\VKHPE\N75067.TJX
  • %HOMEPATH%\VKHPE\30570.AGD
  • %HOMEPATH%\VKHPE\20949.LJO
  • %HOMEPATH%\VKHPE\19434.FCS
  • %HOMEPATH%\VKHPE\W88336.DGP
  • %HOMEPATH%\VKHPE\95724.ONU
  • %HOMEPATH%\VKHPE\X28627.XOE
  • %HOMEPATH%\VKHPE\G39203.OKR
  • %HOMEPATH%\VKHPE\71670.UZX
  • %HOMEPATH%\VKHPE\J1171.UGD
  • %HOMEPATH%\VKHPE\I62382.YRS
  • %HOMEPATH%\VKHPE\C48479.EXO
  • %HOMEPATH%\VKHPE\53145.VCM
  • %HOMEPATH%\VKHPE\34609.GLM
  • %HOMEPATH%\VKHPE\C88380.RYS
  • %HOMEPATH%\VKHPE\K97108.WCC
  • %HOMEPATH%\VKHPE\86613.YBS
  • %HOMEPATH%\VKHPE\P2682.DUF
  • %HOMEPATH%\VKHPE\Y73702.AXX
  • %HOMEPATH%\VKHPE\25537.HEZ
  • %HOMEPATH%\VKHPE\67282.QEF
  • %HOMEPATH%\VKHPE\64580.SUP
  • %HOMEPATH%\VKHPE\48153.EMT
  • %HOMEPATH%\VKHPE\C2545.UQU
  • %HOMEPATH%\VKHPE\O23603.RKO
  • %HOMEPATH%\VKHPE\54518.GUZ
  • %HOMEPATH%\VKHPE\31106.HAQ
  • %HOMEPATH%\VKHPE\72604.UUG
  • %HOMEPATH%\VKHPE\M61990.MLD
  • %HOMEPATH%\VKHPE\Z8054.BKR
  • %HOMEPATH%\VKHPE\B33218.EDK
  • %HOMEPATH%\VKHPE\D75857.JRK
  • %HOMEPATH%\VKHPE\69370.DVG
  • %HOMEPATH%\VKHPE\75271.XRN
  • %HOMEPATH%\VKHPE\S7294.XIX
  • %HOMEPATH%\VKHPE\20587.QHX
  • %HOMEPATH%\VKHPE\B7287.HMX
  • %HOMEPATH%\VKHPE\86955.IFN
  • %HOMEPATH%\VKHPE\15212.TSY
  • %HOMEPATH%\VKHPE\97173.DFN
  • %HOMEPATH%\VKHPE\21611.WZC
  • %HOMEPATH%\VKHPE\N96418.KVN
  • %HOMEPATH%\VKHPE\P29274.UUZ
  • %HOMEPATH%\VKHPE\51880.WRC
  • %HOMEPATH%\VKHPE\W82173.NJV
Sets the 'hidden' attribute to the following files:
  • %HOMEPATH%\VKHPE\B62787.MJN
  • %HOMEPATH%\VKHPE\R66483.GBP
  • %HOMEPATH%\VKHPE\81357.AUD
  • %HOMEPATH%\VKHPE\K35550.WRB
  • %HOMEPATH%\VKHPE\K95876.PXU
  • %HOMEPATH%\VKHPE\D63127.UPB
  • %HOMEPATH%\VKHPE\Q69025.BHF
  • %HOMEPATH%\VKHPE\F45491.KCN
  • %HOMEPATH%\VKHPE\89492.BAI
  • %HOMEPATH%\VKHPE\Y53988.RJU
  • %HOMEPATH%\VKHPE\51628.EJD
  • %HOMEPATH%\VKHPE\Z45136.PVI
  • %HOMEPATH%\VKHPE\71416.GVB
  • %HOMEPATH%\VKHPE\X49571.HLY
  • %HOMEPATH%\VKHPE\U86387.UIR
  • %HOMEPATH%\VKHPE\R22187.DKF
  • %HOMEPATH%\VKHPE\O61839.LLK
  • %HOMEPATH%\VKHPE\M20795.OTV
  • %HOMEPATH%\VKHPE\79698.SZT
  • %HOMEPATH%\VKHPE\R49909.HPC
  • %HOMEPATH%\VKHPE\12254.UIJ
  • %HOMEPATH%\VKHPE\41904.DJZ
  • %HOMEPATH%\VKHPE\32912.QYI
  • %HOMEPATH%\VKHPE\57013.UNS
  • %HOMEPATH%\VKHPE\71134.DBF
  • %HOMEPATH%\VKHPE\44847.DGN
  • %HOMEPATH%\VKHPE\L45819.MNE
  • %HOMEPATH%\VKHPE\G57154.ZHJ
  • %HOMEPATH%\VKHPE\F42792.NKY
  • %HOMEPATH%\VKHPE\L41382.OQR
  • %HOMEPATH%\VKHPE\70360.YGV
  • %HOMEPATH%\VKHPE\69397.VYD
  • %HOMEPATH%\VKHPE\W76731.NTZ
  • %HOMEPATH%\VKHPE\33143.LVN
  • %HOMEPATH%\VKHPE\14514.RGJ
  • %HOMEPATH%\VKHPE\J48964.VHT
  • %HOMEPATH%\VKHPE\Y96378.MME
  • %HOMEPATH%\VKHPE\J47348.ZHG
  • %HOMEPATH%\VKHPE\C78872.TOU
  • %HOMEPATH%\VKHPE\20872.UMZ
  • %HOMEPATH%\VKHPE\90375.SBD
  • %HOMEPATH%\VKHPE\D33738.XQK
  • %HOMEPATH%\VKHPE\7331.TAW
  • %HOMEPATH%\VKHPE\P4528.WNR
  • %HOMEPATH%\VKHPE\23865.EAX
  • %HOMEPATH%\VKHPE\76420.OLA
  • %HOMEPATH%\VKHPE\E32338.BGT
  • %HOMEPATH%\VKHPE\P14932.LMI
  • %HOMEPATH%\VKHPE\39284.KEH
  • %HOMEPATH%\VKHPE\Z66400.NZG
  • %HOMEPATH%\VKHPE\Q91585.GBB
  • %HOMEPATH%\VKHPE\98525.GOG
  • %HOMEPATH%\VKHPE\Q68870.ZUD
  • %HOMEPATH%\VKHPE\47594.SQF
  • %HOMEPATH%\VKHPE\10435.DHF
  • %HOMEPATH%\VKHPE\M18745.MZC
  • %HOMEPATH%\VKHPE\40416.YKL
  • %HOMEPATH%\VKHPE\75305.GVY
  • %HOMEPATH%\VKHPE\18107.KOY
  • %HOMEPATH%\VKHPE\14120.QHJ
  • %HOMEPATH%\VKHPE\H95927.BOH
  • %HOMEPATH%\VKHPE\G10600.PBX
  • %HOMEPATH%\VKHPE\61606.AKC
  • %HOMEPATH%\VKHPE\32908.CFN
  • %HOMEPATH%\VKHPE\N2266.KHF
  • %HOMEPATH%\VKHPE\O42689.LPU
  • %HOMEPATH%\VKHPE\68311.RZT
  • %HOMEPATH%\VKHPE\32093.ENJ
  • %HOMEPATH%\VKHPE\98010.LNX
  • %HOMEPATH%\VKHPE\74039.WET
  • %HOMEPATH%\VKHPE\12664.MHW
  • %HOMEPATH%\VKHPE\L75580.NBI
  • %HOMEPATH%\VKHPE\O54970.WSY
  • %HOMEPATH%\VKHPE\A31355.LVL
  • %HOMEPATH%\VKHPE\45785.PQK
  • %HOMEPATH%\VKHPE\21045.BAU
  • %HOMEPATH%\VKHPE\T43984.OMQ
  • %HOMEPATH%\VKHPE\1526.YMF
  • %HOMEPATH%\VKHPE\Q59468.ANG
  • %HOMEPATH%\VKHPE\L76257.OUO
  • %HOMEPATH%\VKHPE\10954.QJN
  • %HOMEPATH%\VKHPE\J26417.CPU
  • %HOMEPATH%\VKHPE\P88005.ZVD
  • %HOMEPATH%\VKHPE\93338.AXU
  • %HOMEPATH%\VKHPE\L22324.IXY
  • %HOMEPATH%\VKHPE\U22070.COW
  • %HOMEPATH%\VKHPE\X5313.BSA
  • %HOMEPATH%\VKHPE\45002.SLS
  • %HOMEPATH%\VKHPE\15676.MQS
  • %HOMEPATH%\VKHPE\66725.ZTE
  • %HOMEPATH%\VKHPE\Z51588.PFM
  • %HOMEPATH%\VKHPE\55421.VKM
  • %HOMEPATH%\VKHPE\98110.EIW
  • %HOMEPATH%\VKHPE\B6913.VPQ
  • %HOMEPATH%\VKHPE\89231.PTF
  • %HOMEPATH%\VKHPE\17461.QLI
  • %HOMEPATH%\VKHPE\H61365.NFV
  • %HOMEPATH%\VKHPE\G41178.ITF
  • %HOMEPATH%\VKHPE\67765.LCI
  • %HOMEPATH%\VKHPE\93898.BSC
  • %HOMEPATH%\VKHPE\D8305.RYC
  • %HOMEPATH%\VKHPE\45704.TOX
  • %HOMEPATH%\VKHPE\18811.PHX
  • %HOMEPATH%\VKHPE\X13060.VOC
  • %HOMEPATH%\VKHPE\11798.UKY
  • %HOMEPATH%\VKHPE\84266.KQM
  • %HOMEPATH%\VKHPE\W3384.WKY
  • %HOMEPATH%\VKHPE\F5468.CNH
  • %HOMEPATH%\VKHPE\19046.KEC
  • %HOMEPATH%\VKHPE\Z9971.BTP
  • %HOMEPATH%\VKHPE\G44803.BAR
  • %HOMEPATH%\VKHPE\33480.NAC
  • %HOMEPATH%\VKHPE\Y81496.EQW
  • %HOMEPATH%\VKHPE\O30682.AFU
  • %HOMEPATH%\VKHPE\73870.UWH
  • %HOMEPATH%\VKHPE\24105.JDO
  • %HOMEPATH%\VKHPE\F88431.PCP
  • %HOMEPATH%\VKHPE\J89623.VKA
  • %HOMEPATH%\VKHPE\I3612.LQM
  • %HOMEPATH%\VKHPE\11273.QVC
  • %HOMEPATH%\VKHPE\K64058.FPC
  • %HOMEPATH%\VKHPE\G38644.IYI
  • %HOMEPATH%\VKHPE\41832.OWU
  • %HOMEPATH%\VKHPE\28882.TLZ
  • %HOMEPATH%\VKHPE\42328.MTS
  • %HOMEPATH%\VKHPE\T4376.YJH
  • %HOMEPATH%\VKHPE\18962.JTA
  • %HOMEPATH%\VKHPE\54949.XIT
  • %HOMEPATH%\VKHPE\91733.ZPD
  • %HOMEPATH%\VKHPE\N95843.ASW
  • %HOMEPATH%\VKHPE\66614.CRH
  • %HOMEPATH%\VKHPE\91969.TUA
  • %HOMEPATH%\VKHPE\S92514.BFN
  • %HOMEPATH%\VKHPE\11039.JTH
  • %HOMEPATH%\VKHPE\51868.IPK
  • %HOMEPATH%\VKHPE\4396.FKH
  • %HOMEPATH%\VKHPE\47644.NLB
  • %HOMEPATH%\VKHPE\4513.OYM
  • %HOMEPATH%\VKHPE\5922.CIK
  • %HOMEPATH%\VKHPE\44638.COS
  • %HOMEPATH%\VKHPE\Q90294.VES
  • %HOMEPATH%\VKHPE\25124.GQS
  • %HOMEPATH%\VKHPE\77822.OYO
  • %HOMEPATH%\VKHPE\M76101.BAR
  • %HOMEPATH%\VKHPE\R40071.RSJ
  • %HOMEPATH%\VKHPE\N88547.OWB
  • %HOMEPATH%\VKHPE\73156.JTI
  • %HOMEPATH%\VKHPE\24311.ZMZ
  • %HOMEPATH%\VKHPE\O96748.IOR
  • %HOMEPATH%\VKHPE\R13936.NPQ
  • %HOMEPATH%\VKHPE\O33642.JGL
  • %HOMEPATH%\VKHPE\J64883.MTY
  • %HOMEPATH%\VKHPE\19999.AII
  • %HOMEPATH%\VKHPE\R80956.WPI
  • %HOMEPATH%\VKHPE\60341.VEE
  • %HOMEPATH%\VKHPE\U17614.NLZ
  • %HOMEPATH%\VKHPE\34731.LZY
  • %HOMEPATH%\VKHPE\O94701.MHY
  • %HOMEPATH%\VKHPE\26118.FCN
  • %HOMEPATH%\VKHPE\46299.AKF
  • %HOMEPATH%\VKHPE\61655.VMU
  • %HOMEPATH%\VKHPE\Q59969.UUN
  • %HOMEPATH%\VKHPE\37595.ISL
  • %HOMEPATH%\VKHPE\82427.IKK
  • %HOMEPATH%\VKHPE\P40781.BUF
  • %HOMEPATH%\VKHPE\84594.QOO
  • %HOMEPATH%\VKHPE\81415.FIK
  • %HOMEPATH%\VKHPE\O10341.WDW
  • %HOMEPATH%\VKHPE\E22337.EJQ
  • %HOMEPATH%\VKHPE\73194.RIA
  • %HOMEPATH%\VKHPE\17790.SRI
  • %HOMEPATH%\VKHPE\40600.FUY
  • %HOMEPATH%\VKHPE\Y96180.RNI
  • %HOMEPATH%\VKHPE\13740.CFJ
  • %HOMEPATH%\VKHPE\Z89275.KFI
  • %HOMEPATH%\VKHPE\G6845.VPI
  • %HOMEPATH%\VKHPE\R11311.WWM
  • %HOMEPATH%\VKHPE\89145.ORP
  • %HOMEPATH%\VKHPE\G24359.AAU
  • %HOMEPATH%\VKHPE\K60307.BQA
  • %HOMEPATH%\VKHPE\V35892.QQQ
  • %HOMEPATH%\VKHPE\63608.KSJ
  • %HOMEPATH%\VKHPE\X8701.ROF
  • %HOMEPATH%\VKHPE\78982.OXQ
  • %HOMEPATH%\VKHPE\S24059.EZV
  • %HOMEPATH%\VKHPE\M17120.OOQ
  • %HOMEPATH%\VKHPE\I70851.QCS
  • %HOMEPATH%\VKHPE\J22548.EZT
  • %HOMEPATH%\VKHPE\V79268.LNN
  • %HOMEPATH%\VKHPE\A91854.IHP
  • %HOMEPATH%\VKHPE\W62924.ZUN
  • %HOMEPATH%\VKHPE\88623.AIP
  • %HOMEPATH%\VKHPE\49627.BTS
  • %HOMEPATH%\VKHPE\8854.SEN
  • %HOMEPATH%\VKHPE\85045.SWC
  • %HOMEPATH%\VKHPE\Q79208.VSC
  • %HOMEPATH%\VKHPE\K69781.ZXF
  • %HOMEPATH%\VKHPE\W61334.GNP
  • %HOMEPATH%\VKHPE\11586.ILG
  • %HOMEPATH%\VKHPE\70483.ZLG
  • %HOMEPATH%\VKHPE\L89079.XBL
  • %HOMEPATH%\VKHPE\1584.IRJ
  • %HOMEPATH%\VKHPE\28566.TXC
  • %HOMEPATH%\VKHPE\O62312.YSO
  • %HOMEPATH%\VKHPE\27520.QJT
  • %HOMEPATH%\VKHPE\25879.NWI
  • %HOMEPATH%\VKHPE\F16846.JFU
  • %HOMEPATH%\VKHPE\F82898.PZM
  • %HOMEPATH%\VKHPE\H61034.OYH
  • %HOMEPATH%\VKHPE\E26339.WJC
  • %HOMEPATH%\VKHPE\19870.AZW
  • %HOMEPATH%\VKHPE\Y54098.ONA
  • %HOMEPATH%\VKHPE\G31101.GTK
  • %HOMEPATH%\VKHPE\97350.ATH
  • %HOMEPATH%\VKHPE\B86788.XWH
  • %HOMEPATH%\VKHPE\20319.DAE
  • %HOMEPATH%\VKHPE\P78494.YXI
  • %HOMEPATH%\VKHPE\P57726.HHF
  • %HOMEPATH%\VKHPE\O43181.JBW
  • %HOMEPATH%\VKHPE\O76083.FJC
  • %HOMEPATH%\VKHPE\W29068.GDB
  • %HOMEPATH%\VKHPE\M57881.QUF
  • %HOMEPATH%\VKHPE\V15639.PKT
  • %HOMEPATH%\VKHPE\K65747.RLD
  • %HOMEPATH%\VKHPE\41700.WZY
  • %HOMEPATH%\VKHPE\15783.ILX
  • %HOMEPATH%\VKHPE\66549.QZO
  • %HOMEPATH%\VKHPE\21967.VEJ
  • %HOMEPATH%\VKHPE\O67930.UPS
  • %HOMEPATH%\VKHPE\73484.PEM
  • %HOMEPATH%\VKHPE\56050.ARK
  • %HOMEPATH%\VKHPE\79840.FWJ
  • %HOMEPATH%\VKHPE\K7548.LXA
  • %HOMEPATH%\VKHPE\H45104.ZBN
  • %HOMEPATH%\VKHPE\I94518.HUX
  • %HOMEPATH%\VKHPE\H33345.NJQ
  • %HOMEPATH%\VKHPE\U57486.OKI
  • %HOMEPATH%\VKHPE\8086.HFG
  • %HOMEPATH%\VKHPE\J76039.YYJ
  • %HOMEPATH%\VKHPE\88945.DWO
  • %HOMEPATH%\VKHPE\R88575.HEK
  • %HOMEPATH%\VKHPE\29016.ERK
  • %HOMEPATH%\VKHPE\24662.NKE
  • %HOMEPATH%\VKHPE\14546.LPL
  • %HOMEPATH%\VKHPE\X82093.MFU
  • %HOMEPATH%\VKHPE\45531.IXE
  • %HOMEPATH%\VKHPE\26508.MLT
  • %HOMEPATH%\VKHPE\59405.VXM
  • %HOMEPATH%\VKHPE\Z89337.IHW
  • %HOMEPATH%\VKHPE\C29068.GVV
  • %HOMEPATH%\VKHPE\G25065.ALN
  • %HOMEPATH%\VKHPE\40406.EJI
  • %HOMEPATH%\VKHPE\Q33808.ITT
  • %HOMEPATH%\VKHPE\A66236.RRP
  • %HOMEPATH%\VKHPE\D13566.HPG
  • %HOMEPATH%\VKHPE\21655.SUM
  • %HOMEPATH%\VKHPE\86453.EPV
  • %HOMEPATH%\VKHPE\72391.ZWY
  • %HOMEPATH%\VKHPE\V41498.WYB
  • %HOMEPATH%\VKHPE\41066.PQG
  • %HOMEPATH%\VKHPE\58621.XIN
  • %HOMEPATH%\VKHPE\55394.DHX
  • %HOMEPATH%\VKHPE\K54966.ZIJ
  • %HOMEPATH%\VKHPE\F89689.UFP
  • %HOMEPATH%\VKHPE\70064.WAJ
  • %HOMEPATH%\VKHPE\Y14173.DHF
  • %HOMEPATH%\VKHPE\R11402.LSH
  • %HOMEPATH%\VKHPE\42786.NKB
  • %HOMEPATH%\VKHPE\H75071.JAR
  • %HOMEPATH%\VKHPE\69948.VMG
  • %HOMEPATH%\VKHPE\G70554.BWG
  • %HOMEPATH%\VKHPE\I83327.GSV
  • %HOMEPATH%\VKHPE\88708.RPO
  • %HOMEPATH%\VKHPE\68373.OKX
  • %HOMEPATH%\VKHPE\20962.NZZ
  • %HOMEPATH%\VKHPE\E45178.WHH
  • %HOMEPATH%\VKHPE\J26151.BKF
  • %HOMEPATH%\VKHPE\50927.IJQ
  • %HOMEPATH%\VKHPE\61781.HSF
  • %HOMEPATH%\VKHPE\9036.RTZ
  • %HOMEPATH%\VKHPE\T39859.GUC
  • %HOMEPATH%\VKHPE\J27417.HXH
  • %HOMEPATH%\VKHPE\31878.OFG
  • %HOMEPATH%\VKHPE\O9100.CCH
  • %HOMEPATH%\VKHPE\F45516.FKI
  • %HOMEPATH%\VKHPE\52050.GSZ
  • %HOMEPATH%\VKHPE\W75258.FDK
  • %HOMEPATH%\VKHPE\15496.BXE
  • %HOMEPATH%\VKHPE\I90271.BBW
  • %HOMEPATH%\VKHPE\65855.MGA
  • %HOMEPATH%\VKHPE\I3671.IQA
  • %HOMEPATH%\VKHPE\67202.ZPM
  • %HOMEPATH%\VKHPE\76854.QLI
  • %HOMEPATH%\VKHPE\29741.KKP
  • %HOMEPATH%\VKHPE\14496.JAA
  • %HOMEPATH%\VKHPE\54176.UZR
  • %HOMEPATH%\VKHPE\J59869.QMO
  • %HOMEPATH%\VKHPE\31514.RZB
  • %HOMEPATH%\VKHPE\U18297.MIC
  • %HOMEPATH%\VKHPE\V10332.FSR
  • %HOMEPATH%\VKHPE\B71879.OTP
  • %HOMEPATH%\VKHPE\W29533.UAZ
  • %HOMEPATH%\VKHPE\R71263.STZ
  • %HOMEPATH%\VKHPE\77871.DEU
  • %HOMEPATH%\VKHPE\88935.UHT
  • %HOMEPATH%\VKHPE\64923.AUQ
  • %HOMEPATH%\VKHPE\H64215.JXY
  • %HOMEPATH%\VKHPE\M88649.EJI
  • %HOMEPATH%\VKHPE\95303.YNL
  • %HOMEPATH%\VKHPE\61978.PLB
  • %HOMEPATH%\VKHPE\92535.VPE
  • %HOMEPATH%\VKHPE\30527.SEN
  • %HOMEPATH%\VKHPE\40663.SBA
  • %HOMEPATH%\VKHPE\X54579.MAT
  • %HOMEPATH%\VKHPE\C62631.FIS
  • %HOMEPATH%\VKHPE\42953.SBF
  • %HOMEPATH%\VKHPE\H77279.LOY
  • %HOMEPATH%\VKHPE\12567.XXJ
  • %HOMEPATH%\VKHPE\16541.WJH
  • %HOMEPATH%\VKHPE\R56533.MBA
  • %HOMEPATH%\VKHPE\A31106.BQY
  • %HOMEPATH%\VKHPE\76077.ROO
  • %HOMEPATH%\VKHPE\S25753.TZA
  • %HOMEPATH%\VKHPE\C41311.INL
  • %HOMEPATH%\VKHPE\K3252.DKQ
  • %HOMEPATH%\VKHPE\18921.NJQ
  • %HOMEPATH%\VKHPE\U65770.WTT
  • %HOMEPATH%\VKHPE\11439.OBI
  • %HOMEPATH%\VKHPE\45578.MUM
  • %HOMEPATH%\VKHPE\D64172.BGF
  • %HOMEPATH%\VKHPE\84960.EFT
  • %HOMEPATH%\VKHPE\K62135.KHI
  • %HOMEPATH%\VKHPE\29341.KIE
  • %HOMEPATH%\VKHPE\61074.MBD
  • %HOMEPATH%\VKHPE\65411.PKX
  • %HOMEPATH%\VKHPE\12450.ODV
  • %HOMEPATH%\VKHPE\81978.CUE
  • %HOMEPATH%\VKHPE\Y99531.KWY
  • %HOMEPATH%\VKHPE\R13468.AQE
  • %HOMEPATH%\VKHPE\A66086.TAO
  • %HOMEPATH%\VKHPE\E73388.OWS
  • %HOMEPATH%\VKHPE\83585.HRP
  • %HOMEPATH%\VKHPE\run.vbs
  • %HOMEPATH%\VKHPE\settings.ini
  • %HOMEPATH%\VKHPE\O93877.QSP
  • %HOMEPATH%\VKHPE\49812.QDP
  • %HOMEPATH%\VKHPE\342974.dat
  • %HOMEPATH%\VKHPE\330185.dat
  • %HOMEPATH%\VKHPE\Autoit3132628.exe
  • %HOMEPATH%\VKHPE\71680.dat
  • %HOMEPATH%\VKHPE\64186.DVG
  • %HOMEPATH%\VKHPE\35040.LRF
  • %HOMEPATH%\VKHPE\20084.ITC
  • %HOMEPATH%\VKHPE\49219.UHT
  • %HOMEPATH%\VKHPE\B69133.JEF
  • %HOMEPATH%\VKHPE\85716.YDV
  • %HOMEPATH%\VKHPE\99421.BLA
  • %HOMEPATH%\VKHPE\91299.QPX
  • %HOMEPATH%\VKHPE\C61000.RDW
  • %HOMEPATH%\VKHPE\H77389.GOI
  • %HOMEPATH%\VKHPE\Y86190.JLV
  • %HOMEPATH%\VKHPE\68741.UDB
  • %HOMEPATH%\VKHPE\68209.PVY
  • %HOMEPATH%\VKHPE\78211.QYP
  • %HOMEPATH%\VKHPE\18068.KKO
  • %HOMEPATH%\VKHPE\T60442.NZR
  • %HOMEPATH%\VKHPE\94291.QKT
  • %HOMEPATH%\VKHPE\42991.VAV
  • %HOMEPATH%\VKHPE\66204.NDJ
  • %HOMEPATH%\VKHPE\S10558.BMG
  • %HOMEPATH%\VKHPE\P38846.NJJ
  • %HOMEPATH%\VKHPE\D44624.RSZ
  • %HOMEPATH%\VKHPE\95741.WJI
  • %HOMEPATH%\VKHPE\98410.RTK
  • %HOMEPATH%\VKHPE\26546.RLZ
  • %HOMEPATH%\VKHPE\F6204.FNY
  • %HOMEPATH%\VKHPE\Q89059.RZZ
  • %HOMEPATH%\VKHPE\76711.OMO
  • %HOMEPATH%\VKHPE\B18397.OTY
  • %HOMEPATH%\VKHPE\50133.GZD
  • %HOMEPATH%\VKHPE\P21471.QFW
  • %HOMEPATH%\VKHPE\36082.BYL
  • %HOMEPATH%\VKHPE\78415.ZGE
  • %HOMEPATH%\VKHPE\95711.EYU
  • %HOMEPATH%\VKHPE\89534.HWQ
  • %HOMEPATH%\VKHPE\28651.AZQ
  • %HOMEPATH%\VKHPE\V25748.SJL
  • %HOMEPATH%\VKHPE\S27862.NFJ
  • %HOMEPATH%\VKHPE\V42374.ZKI
  • %HOMEPATH%\VKHPE\36538.ANZ
  • %HOMEPATH%\VKHPE\L88836.YYE
  • %HOMEPATH%\VKHPE\S81484.CII
  • %HOMEPATH%\VKHPE\59423.JDT
  • %HOMEPATH%\VKHPE\47241.BSY
  • %HOMEPATH%\VKHPE\72975.EOD
  • %HOMEPATH%\VKHPE\F37653.AWG
  • %HOMEPATH%\VKHPE\40463.WZT
  • %HOMEPATH%\VKHPE\C45610.FHW
  • %HOMEPATH%\VKHPE\71117.KXB
  • %HOMEPATH%\VKHPE\11069.JXZ
  • %HOMEPATH%\VKHPE\O58513.ULI
  • %HOMEPATH%\VKHPE\5320.NGP
  • %HOMEPATH%\VKHPE\28649.XGY
  • %HOMEPATH%\VKHPE\V56979.NQD
  • %HOMEPATH%\VKHPE\39836.LUZ
  • %HOMEPATH%\VKHPE\M38394.PSD
  • %HOMEPATH%\VKHPE\K51661.DRA
  • %HOMEPATH%\VKHPE\73932.AOC
  • %HOMEPATH%\VKHPE\22773.CCY
  • %HOMEPATH%\VKHPE\19093.ELO
  • %HOMEPATH%\VKHPE\N81655.AJS
  • %HOMEPATH%\VKHPE\A86179.JNH
  • %HOMEPATH%\VKHPE\C2545.UQU
  • %HOMEPATH%\VKHPE\N51033.AJA
  • %HOMEPATH%\VKHPE\A69167.SED
  • %HOMEPATH%\VKHPE\89090.RTT
  • %HOMEPATH%\VKHPE\27865.MLB
  • %HOMEPATH%\VKHPE\76480.ETF
  • %HOMEPATH%\VKHPE\Y26400.JUZ
  • %HOMEPATH%\VKHPE\1891.PHI
  • %HOMEPATH%\VKHPE\O32463.TRM
  • %HOMEPATH%\VKHPE\1739.MNK
  • %HOMEPATH%\VKHPE\S1898.BXA
  • %HOMEPATH%\VKHPE\44047.LQK
  • %HOMEPATH%\VKHPE\K11938.XXD
  • %HOMEPATH%\VKHPE\M7344.IXZ
  • %HOMEPATH%\VKHPE\I52539.XQO
  • %HOMEPATH%\VKHPE\24965.XOC
  • %HOMEPATH%\VKHPE\60266.DDD
  • %HOMEPATH%\VKHPE\58952.ROO
  • %HOMEPATH%\VKHPE\Z68824.UQJ
  • %HOMEPATH%\VKHPE\Y71883.VDO
  • %HOMEPATH%\VKHPE\L29129.QFT
  • %HOMEPATH%\VKHPE\99391.PAN
  • %HOMEPATH%\VKHPE\16268.TWB
  • %HOMEPATH%\VKHPE\W87725.FTU
  • %HOMEPATH%\VKHPE\66989.DZG
  • %HOMEPATH%\VKHPE\M99757.TLM
  • %HOMEPATH%\VKHPE\N75902.OIA
  • %HOMEPATH%\VKHPE\27173.ZIS
  • %HOMEPATH%\VKHPE\87414.TXX
  • %HOMEPATH%\VKHPE\J83264.SKF
  • %HOMEPATH%\VKHPE\48877.HLG
  • %HOMEPATH%\VKHPE\O95839.FVA
  • %HOMEPATH%\VKHPE\59864.RZV
  • %HOMEPATH%\VKHPE\96743.KTP
  • %HOMEPATH%\VKHPE\48675.XBQ
  • %HOMEPATH%\VKHPE\1008.EXW
  • %HOMEPATH%\VKHPE\84145.FFA
  • %HOMEPATH%\VKHPE\S96217.YES
  • %HOMEPATH%\VKHPE\95838.SSP
  • %HOMEPATH%\VKHPE\97276.WYN
  • %HOMEPATH%\VKHPE\33022.LPE
  • %HOMEPATH%\VKHPE\9875.NXG
  • %HOMEPATH%\VKHPE\91826.POB
  • %HOMEPATH%\VKHPE\10949.RWI
  • %HOMEPATH%\VKHPE\65953.SYR
  • %HOMEPATH%\VKHPE\74106.MYJ
  • %HOMEPATH%\VKHPE\85148.XDT
  • %HOMEPATH%\VKHPE\I49787.OGJ
  • %HOMEPATH%\VKHPE\Y76202.XBS
  • %HOMEPATH%\VKHPE\X28627.XOE
  • %HOMEPATH%\VKHPE\82842.FJW
  • %HOMEPATH%\VKHPE\V71232.QJK
  • %HOMEPATH%\VKHPE\J59597.ULP
  • %HOMEPATH%\VKHPE\7111.LZJ
  • %HOMEPATH%\VKHPE\32046.VNG
  • %HOMEPATH%\VKHPE\Q76654.FKD
  • %HOMEPATH%\VKHPE\23657.JGX
  • %HOMEPATH%\VKHPE\S93760.DXK
  • %HOMEPATH%\VKHPE\G43706.EAZ
  • %HOMEPATH%\VKHPE\33783.DCX
  • %HOMEPATH%\VKHPE\D91673.ZSU
  • %HOMEPATH%\VKHPE\20949.LJO
  • %HOMEPATH%\VKHPE\Z51302.WRA
  • %HOMEPATH%\VKHPE\E45142.RFN
  • %HOMEPATH%\VKHPE\30570.AGD
  • %HOMEPATH%\VKHPE\60195.JYR
  • %HOMEPATH%\VKHPE\19434.FCS
  • %HOMEPATH%\VKHPE\N75067.TJX
  • %HOMEPATH%\VKHPE\95724.ONU
  • %HOMEPATH%\VKHPE\I62382.YRS
  • %HOMEPATH%\VKHPE\G39203.OKR
  • %HOMEPATH%\VKHPE\W88336.DGP
  • %HOMEPATH%\VKHPE\J1171.UGD
  • %HOMEPATH%\VKHPE\N73699.OTE
  • %HOMEPATH%\VKHPE\C48479.EXO
  • %HOMEPATH%\VKHPE\71670.UZX
  • %HOMEPATH%\VKHPE\60453.MNN
  • %HOMEPATH%\VKHPE\C88380.RYS
  • %HOMEPATH%\VKHPE\25537.HEZ
  • %HOMEPATH%\VKHPE\86613.YBS
  • %HOMEPATH%\VKHPE\34609.GLM
  • %HOMEPATH%\VKHPE\Y73702.AXX
  • %HOMEPATH%\VKHPE\97173.DFN
  • %HOMEPATH%\VKHPE\67282.QEF
  • %HOMEPATH%\VKHPE\P2682.DUF
  • %HOMEPATH%\VKHPE\48153.EMT
  • %HOMEPATH%\VKHPE\72604.UUG
  • %HOMEPATH%\VKHPE\O23603.RKO
  • %HOMEPATH%\VKHPE\64580.SUP
  • %HOMEPATH%\VKHPE\31106.HAQ
  • %HOMEPATH%\VKHPE\K97108.WCC
  • %HOMEPATH%\VKHPE\M61990.MLD
  • %HOMEPATH%\VKHPE\54518.GUZ
  • %HOMEPATH%\VKHPE\B33218.EDK
  • %HOMEPATH%\VKHPE\20587.QHX
  • %HOMEPATH%\VKHPE\69370.DVG
  • %HOMEPATH%\VKHPE\Z8054.BKR
  • %HOMEPATH%\VKHPE\S7294.XIX
  • %HOMEPATH%\VKHPE\53145.VCM
  • %HOMEPATH%\VKHPE\B7287.HMX
  • %HOMEPATH%\VKHPE\75271.XRN
  • %HOMEPATH%\VKHPE\15212.TSY
  • %HOMEPATH%\VKHPE\51880.WRC
  • %HOMEPATH%\VKHPE\21611.WZC
  • %HOMEPATH%\VKHPE\86955.IFN
  • %HOMEPATH%\VKHPE\P29274.UUZ
  • %HOMEPATH%\VKHPE\D75857.JRK
  • %HOMEPATH%\VKHPE\W82173.NJV
  • %HOMEPATH%\VKHPE\N96418.KVN
Deletes the following files:
  • %HOMEPATH%\VKHPE\RAZGVKKG.dat
Network activity:
Connects to:
  • 'mi######enkel.no-ip.info':3070
  • 'sd##.##chive-host.com':80
TCP:
HTTP GET requests:
  • sd##.##chive-host.com/membres/up/17959594961240255/Version.txt
UDP:
  • DNS ASK mi######enkel.no-ip.info
  • DNS ASK sd##.##chive-host.com
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Indicator' WindowName: '(null)'
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'
  • ClassName: 'EDIT' WindowName: '(null)'

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android