マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Trojan.Inject1.26361

Added to the Dr.Web virus database: 2013-07-21

Virus description added:

Technical Information

To ensure autorun and distribution:
Modifies the following registry keys:
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'ARHGR' = '%HOMEPATH%\ARHGR\start.vbs'
Malicious functions:
To complicate detection of its presence in the operating system,
blocks execution of the following system utilities:
  • Windows Task Manager (Taskmgr)
  • Registry Editor (RegEdit)
Creates and executes the following:
  • '%HOMEPATH%\ARHGR\428670.exe' DZNNBVHH.dat
  • '%HOMEPATH%\ARHGR\428670.exe' 364991.dat
Executes the following:
  • '%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
  • '<SYSTEM32>\wscript.exe' "%HOMEPATH%\ARHGR\runner.vbs"
Injects code into
the following system processes:
  • %WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
Modifies file system :
Creates the following files:
  • %HOMEPATH%\ARHGR\84472.ZFK
  • %HOMEPATH%\ARHGR\8466.BNT
  • %HOMEPATH%\ARHGR\A89511.HXM
  • %HOMEPATH%\ARHGR\26756.ROP
  • %HOMEPATH%\ARHGR\57824.UYV
  • %HOMEPATH%\ARHGR\M14085.MVK
  • %HOMEPATH%\ARHGR\64810.AKC
  • %HOMEPATH%\ARHGR\77105.SRG
  • %HOMEPATH%\ARHGR\N69476.KJZ
  • %HOMEPATH%\ARHGR\17125.DLE
  • %HOMEPATH%\ARHGR\97925.GPU
  • %HOMEPATH%\ARHGR\53015.WNU
  • %HOMEPATH%\ARHGR\94039.PGX
  • %HOMEPATH%\ARHGR\37367.PPR
  • %HOMEPATH%\ARHGR\D30128.AQL
  • %HOMEPATH%\ARHGR\X92446.XMV
  • %HOMEPATH%\ARHGR\96233.NGL
  • %HOMEPATH%\ARHGR\66954.SDP
  • %HOMEPATH%\ARHGR\I55362.FMY
  • %HOMEPATH%\ARHGR\67007.FZB
  • %HOMEPATH%\ARHGR\C16534.SDE
  • %HOMEPATH%\ARHGR\R22357.VRI
  • %HOMEPATH%\ARHGR\D50190.XJQ
  • %HOMEPATH%\ARHGR\38445.ZKS
  • %HOMEPATH%\ARHGR\F66058.FTY
  • %HOMEPATH%\ARHGR\12945.SZU
  • %HOMEPATH%\ARHGR\93404.LWG
  • %HOMEPATH%\ARHGR\93042.PSO
  • %HOMEPATH%\ARHGR\W25715.FRH
  • %HOMEPATH%\ARHGR\55741.CUN
  • %HOMEPATH%\ARHGR\P1594.LFW
  • %HOMEPATH%\ARHGR\W42521.TKB
  • %HOMEPATH%\ARHGR\55681.ZDW
  • %HOMEPATH%\ARHGR\K4798.ACA
  • %HOMEPATH%\ARHGR\75972.AOI
  • %HOMEPATH%\ARHGR\73407.QMX
  • %HOMEPATH%\ARHGR\Z91602.OEP
  • %HOMEPATH%\ARHGR\13284.FWC
  • %HOMEPATH%\ARHGR\33170.JEI
  • %HOMEPATH%\ARHGR\95007.JWS
  • %HOMEPATH%\ARHGR\C90087.EOP
  • %HOMEPATH%\ARHGR\I28878.RSI
  • %HOMEPATH%\ARHGR\4941.EXS
  • %HOMEPATH%\ARHGR\D91723.HDE
  • %HOMEPATH%\ARHGR\T69705.MEN
  • %HOMEPATH%\ARHGR\Z47511.UOQ
  • %HOMEPATH%\ARHGR\29063.ANN
  • %HOMEPATH%\ARHGR\53066.PDX
  • %HOMEPATH%\ARHGR\O3638.HWL
  • %HOMEPATH%\ARHGR\B37319.TRI
  • %HOMEPATH%\ARHGR\11780.NQW
  • %HOMEPATH%\ARHGR\T20224.FZV
  • %HOMEPATH%\ARHGR\M10786.OKY
  • %HOMEPATH%\ARHGR\U40375.OFE
  • %HOMEPATH%\ARHGR\E80517.HOH
  • %HOMEPATH%\ARHGR\42980.ADA
  • %HOMEPATH%\ARHGR\80528.LHH
  • %HOMEPATH%\ARHGR\22276.UIG
  • %HOMEPATH%\ARHGR\B79759.ODL
  • %HOMEPATH%\ARHGR\96847.RRG
  • %HOMEPATH%\ARHGR\32308.IDP
  • %HOMEPATH%\ARHGR\Y71276.MKI
  • %HOMEPATH%\ARHGR\18882.MIA
  • %HOMEPATH%\ARHGR\B24486.PGA
  • %HOMEPATH%\ARHGR\95548.XMP
  • %HOMEPATH%\ARHGR\W16935.BPS
  • %HOMEPATH%\ARHGR\I32206.PPD
  • %HOMEPATH%\ARHGR\K24689.WKZ
  • %HOMEPATH%\ARHGR\54323.RWO
  • %HOMEPATH%\ARHGR\35949.AAM
  • %HOMEPATH%\ARHGR\79356.FVO
  • %HOMEPATH%\ARHGR\K73591.UIG
  • %HOMEPATH%\ARHGR\73343.LSY
  • %HOMEPATH%\ARHGR\M55562.OCM
  • %HOMEPATH%\ARHGR\2835.XQZ
  • %HOMEPATH%\ARHGR\73550.IDE
  • %HOMEPATH%\ARHGR\R96368.RZD
  • %HOMEPATH%\ARHGR\A45102.HGT
  • %HOMEPATH%\ARHGR\H51369.KBN
  • %HOMEPATH%\ARHGR\91826.PHO
  • %HOMEPATH%\ARHGR\21449.TED
  • %HOMEPATH%\ARHGR\15773.NBU
  • %HOMEPATH%\ARHGR\R12183.DNS
  • %HOMEPATH%\ARHGR\M59409.LGU
  • %HOMEPATH%\ARHGR\R6902.ZFW
  • %HOMEPATH%\ARHGR\V97209.PKO
  • %HOMEPATH%\ARHGR\50463.KQS
  • %HOMEPATH%\ARHGR\47007.YHY
  • %HOMEPATH%\ARHGR\77628.BEK
  • %HOMEPATH%\ARHGR\H23382.YQP
  • %HOMEPATH%\ARHGR\C45398.QXQ
  • %HOMEPATH%\ARHGR\1957.THM
  • %HOMEPATH%\ARHGR\88999.UUT
  • %HOMEPATH%\ARHGR\51273.NWC
  • %HOMEPATH%\ARHGR\Z73899.TWD
  • %HOMEPATH%\ARHGR\90073.SWH
  • %HOMEPATH%\ARHGR\H57102.IYC
  • %HOMEPATH%\ARHGR\Y49624.FBG
  • %HOMEPATH%\ARHGR\C76293.KHD
  • %HOMEPATH%\ARHGR\11807.QRA
  • %HOMEPATH%\ARHGR\Q50958.BWQ
  • %HOMEPATH%\ARHGR\H42779.YXW
  • %HOMEPATH%\ARHGR\M86226.LTN
  • %HOMEPATH%\ARHGR\X47774.SPI
  • %HOMEPATH%\ARHGR\37961.UAO
  • %HOMEPATH%\ARHGR\62687.LSI
  • %HOMEPATH%\ARHGR\Z27901.DGY
  • %HOMEPATH%\ARHGR\36838.RIK
  • %HOMEPATH%\ARHGR\D40244.FDF
  • %HOMEPATH%\ARHGR\81427.YIH
  • %HOMEPATH%\ARHGR\O73473.TBH
  • %HOMEPATH%\ARHGR\V95246.TDP
  • %HOMEPATH%\ARHGR\P47042.YZQ
  • %HOMEPATH%\ARHGR\53482.LDQ
  • %HOMEPATH%\ARHGR\P43717.STV
  • %HOMEPATH%\ARHGR\D68935.ICB
  • %HOMEPATH%\ARHGR\S57650.TBG
  • %HOMEPATH%\ARHGR\39987.DBV
  • %HOMEPATH%\ARHGR\Z17024.PPG
  • %HOMEPATH%\ARHGR\88341.WUN
  • %HOMEPATH%\ARHGR\11569.ATQ
  • %HOMEPATH%\ARHGR\6527.KDR
  • %HOMEPATH%\ARHGR\R48460.CNQ
  • %HOMEPATH%\ARHGR\79366.JDX
  • %HOMEPATH%\ARHGR\Q9946.PIO
  • %HOMEPATH%\ARHGR\B90871.EVF
  • %HOMEPATH%\ARHGR\25459.NYZ
  • %HOMEPATH%\ARHGR\X48650.UZQ
  • %HOMEPATH%\ARHGR\72947.OIP
  • %HOMEPATH%\ARHGR\D39010.PAX
  • %HOMEPATH%\ARHGR\12418.IUI
  • %HOMEPATH%\ARHGR\A17737.JGX
  • %HOMEPATH%\ARHGR\79877.OCF
  • %HOMEPATH%\ARHGR\C28025.PEE
  • %HOMEPATH%\ARHGR\X45119.ZMK
  • %HOMEPATH%\ARHGR\48813.KDK
  • %HOMEPATH%\ARHGR\4797.IBP
  • %HOMEPATH%\ARHGR\88723.RVJ
  • %HOMEPATH%\ARHGR\F46934.HSZ
  • %HOMEPATH%\ARHGR\D93633.NHM
  • %HOMEPATH%\ARHGR\T33877.AWF
  • %HOMEPATH%\ARHGR\11884.RAW
  • %HOMEPATH%\ARHGR\W62879.SUG
  • %HOMEPATH%\ARHGR\G69093.EET
  • %HOMEPATH%\ARHGR\Y86015.TRN
  • %HOMEPATH%\ARHGR\59936.LKM
  • %HOMEPATH%\ARHGR\41241.QMC
  • %HOMEPATH%\ARHGR\10841.UGR
  • %HOMEPATH%\ARHGR\U36986.DKA
  • %HOMEPATH%\ARHGR\F34025.LBI
  • %HOMEPATH%\ARHGR\80087.RWM
  • %HOMEPATH%\ARHGR\Z64093.XRG
  • %HOMEPATH%\ARHGR\43069.YCT
  • %HOMEPATH%\ARHGR\R23185.RHH
  • %HOMEPATH%\ARHGR\P90718.UWD
  • %HOMEPATH%\ARHGR\3082.NEX
  • %HOMEPATH%\ARHGR\59307.YON
  • %HOMEPATH%\ARHGR\P73671.XJQ
  • %HOMEPATH%\ARHGR\72640.LUC
  • %HOMEPATH%\ARHGR\A82156.AVU
  • %HOMEPATH%\ARHGR\72443.KFG
  • %HOMEPATH%\ARHGR\14256.GFF
  • %HOMEPATH%\ARHGR\H25638.TAE
  • %HOMEPATH%\ARHGR\D53626.NBE
  • %HOMEPATH%\ARHGR\D69586.FRR
  • %HOMEPATH%\ARHGR\3996.HHU
  • %HOMEPATH%\ARHGR\P18198.IRL
  • %HOMEPATH%\ARHGR\75580.VKC
  • %HOMEPATH%\ARHGR\94496.PTS
  • %HOMEPATH%\ARHGR\12671.YJS
  • %HOMEPATH%\ARHGR\79214.AVF
  • %HOMEPATH%\ARHGR\33580.OSZ
  • %HOMEPATH%\ARHGR\44072.QPP
  • %HOMEPATH%\ARHGR\97450.ETF
  • %HOMEPATH%\ARHGR\6806.SES
  • %HOMEPATH%\ARHGR\39842.ZDB
  • %HOMEPATH%\ARHGR\K35404.RZY
  • %HOMEPATH%\ARHGR\DZNNBVHH.dat
  • %HOMEPATH%\ARHGR\69160.MVP
  • %HOMEPATH%\ARHGR\start.vbs
  • %HOMEPATH%\ARHGR\start.cmd
  • %HOMEPATH%\ARHGR\F99693.PDI
  • %HOMEPATH%\ARHGR\2084.ZRV
  • %HOMEPATH%\ARHGR\29399.CFI
  • %HOMEPATH%\ARHGR\O19037.XMX
  • %HOMEPATH%\ARHGR\50769.AAW
  • %HOMEPATH%\ARHGR\20313.GPL
  • %HOMEPATH%\ARHGR\16453.VSP
  • %HOMEPATH%\ARHGR\15554.STA
  • %HOMEPATH%\ARHGR\W37848.ZQC
  • %HOMEPATH%\ARHGR\98603.FZT
  • %HOMEPATH%\ARHGR\24289.LMS
  • %HOMEPATH%\ARHGR\98689.PAB
  • %HOMEPATH%\ARHGR\W66205.UTM
  • %HOMEPATH%\ARHGR\41312.WSI
  • %HOMEPATH%\ARHGR\Z56586.DIP
  • %HOMEPATH%\ARHGR\94492.MIA
  • %HOMEPATH%\ARHGR\13813.CSZ
  • %HOMEPATH%\ARHGR\H27982.PAH
  • %HOMEPATH%\ARHGR\E6755.GQY
  • %HOMEPATH%\ARHGR\16655.HIR
  • %HOMEPATH%\ARHGR\40302.CVD
  • %HOMEPATH%\ARHGR\20622.FQI
  • %HOMEPATH%\ARHGR\D73757.EGL
  • %HOMEPATH%\ARHGR\16354.AJK
  • %HOMEPATH%\ARHGR\99814.CBL
  • %HOMEPATH%\ARHGR\K65245.KTF
  • %HOMEPATH%\ARHGR\86807.ABK
  • %HOMEPATH%\ARHGR\P79200.POP
  • %HOMEPATH%\ARHGR\1354.SFG
  • %HOMEPATH%\ARHGR\55419.LZJ
  • %HOMEPATH%\ARHGR\D25060.RJE
  • %HOMEPATH%\ARHGR\36639.YYC
  • %HOMEPATH%\ARHGR\21722.WWK
  • %HOMEPATH%\ARHGR\I82623.WAN
  • %HOMEPATH%\ARHGR\T67271.XFS
  • %HOMEPATH%\ARHGR\67639.MPL
  • %HOMEPATH%\ARHGR\C29651.ICN
  • %HOMEPATH%\ARHGR\R39447.PNW
  • %HOMEPATH%\ARHGR\82832.UWL
  • %HOMEPATH%\ARHGR\U61190.EBB
  • %HOMEPATH%\ARHGR\98164.WJO
  • %HOMEPATH%\ARHGR\O28836.YZR
  • %HOMEPATH%\ARHGR\G6837.TQC
  • %HOMEPATH%\ARHGR\5995.EFC
  • %HOMEPATH%\ARHGR\91745.TNN
  • %HOMEPATH%\ARHGR\G7873.NGU
  • %HOMEPATH%\ARHGR\53441.TNJ
  • %HOMEPATH%\ARHGR\24234.UNJ
  • %HOMEPATH%\ARHGR\S6723.PVN
  • %HOMEPATH%\ARHGR\36747.VDP
  • %HOMEPATH%\ARHGR\P55747.OFB
  • %HOMEPATH%\ARHGR\70331.HPJ
  • %HOMEPATH%\ARHGR\Z44533.ZIW
  • %HOMEPATH%\ARHGR\19057.RPY
  • %HOMEPATH%\ARHGR\X26272.GQG
  • %HOMEPATH%\ARHGR\21834.KHZ
  • %HOMEPATH%\ARHGR\W30592.MAP
  • %HOMEPATH%\ARHGR\58585.MSR
  • %HOMEPATH%\ARHGR\G40664.RCA
  • %HOMEPATH%\ARHGR\48997.FWP
  • %HOMEPATH%\ARHGR\43285.TRS
  • %HOMEPATH%\ARHGR\T73483.ACS
  • %HOMEPATH%\ARHGR\62550.NRT
  • %HOMEPATH%\ARHGR\99593.RTD
  • %HOMEPATH%\ARHGR\80541.BXR
  • %HOMEPATH%\ARHGR\35957.OBR
  • %HOMEPATH%\ARHGR\M34547.OEO
  • %HOMEPATH%\ARHGR\56242.LMO
  • %HOMEPATH%\ARHGR\C81870.DZM
  • %HOMEPATH%\ARHGR\C94329.VGN
  • %HOMEPATH%\ARHGR\L67817.PVE
  • %HOMEPATH%\ARHGR\95000.TAR
  • %HOMEPATH%\ARHGR\41695.WTC
  • %HOMEPATH%\ARHGR\F83571.ZRY
  • %HOMEPATH%\ARHGR\A21229.ALV
  • %HOMEPATH%\ARHGR\75468.FDF
  • %HOMEPATH%\ARHGR\T89987.HRN
  • %HOMEPATH%\ARHGR\J74522.HDP
  • %HOMEPATH%\ARHGR\S91556.XDV
  • %HOMEPATH%\ARHGR\25944.VYA
  • %HOMEPATH%\ARHGR\29774.VMA
  • %HOMEPATH%\ARHGR\48077.BOA
  • %HOMEPATH%\ARHGR\94604.OPE
  • %HOMEPATH%\ARHGR\5306.YHO
  • %HOMEPATH%\ARHGR\86113.NHE
  • %HOMEPATH%\ARHGR\Q75088.GBX
  • %HOMEPATH%\ARHGR\T35134.BZO
  • %HOMEPATH%\ARHGR\I56082.DAI
  • %HOMEPATH%\ARHGR\82152.BQL
  • %HOMEPATH%\ARHGR\2470.CPW
  • %HOMEPATH%\ARHGR\34705.XJX
  • %HOMEPATH%\ARHGR\X64543.IKR
  • %HOMEPATH%\ARHGR\10315.XYU
  • %HOMEPATH%\ARHGR\38960.QPE
  • %HOMEPATH%\ARHGR\51656.CZE
  • %HOMEPATH%\ARHGR\78995.SAS
  • %HOMEPATH%\ARHGR\49562.QAP
  • %HOMEPATH%\ARHGR\F68436.CQG
  • %HOMEPATH%\ARHGR\P37259.VCD
  • %HOMEPATH%\ARHGR\62397.LWO
  • %HOMEPATH%\ARHGR\N90776.CAD
  • %HOMEPATH%\ARHGR\C30247.JVJ
  • %HOMEPATH%\ARHGR\4870.DON
  • %HOMEPATH%\ARHGR\O66782.EQI
  • %HOMEPATH%\ARHGR\50734.VRN
  • %HOMEPATH%\ARHGR\90712.UYV
  • %HOMEPATH%\ARHGR\44338.PFI
  • %HOMEPATH%\ARHGR\E48020.XEM
  • %HOMEPATH%\ARHGR\33706.EUE
  • %HOMEPATH%\ARHGR\V27681.AYX
  • %HOMEPATH%\ARHGR\51082.ZPJ
  • %HOMEPATH%\ARHGR\Z18003.XRI
  • %HOMEPATH%\ARHGR\39668.MRM
  • %HOMEPATH%\ARHGR\27262.RMA
  • %HOMEPATH%\ARHGR\N93346.PJV
  • %HOMEPATH%\ARHGR\C92335.FWS
  • %HOMEPATH%\ARHGR\P74076.PEH
  • %HOMEPATH%\ARHGR\N94028.CYB
  • %HOMEPATH%\ARHGR\96463.GWH
  • %HOMEPATH%\ARHGR\A88218.VAV
  • %HOMEPATH%\ARHGR\43489.BIP
  • %HOMEPATH%\ARHGR\Z38722.WHO
  • %HOMEPATH%\ARHGR\9865.DKB
  • %HOMEPATH%\ARHGR\C24132.FID
  • %HOMEPATH%\ARHGR\56298.ITW
  • %HOMEPATH%\ARHGR\N51811.JEN
  • %HOMEPATH%\ARHGR\M39830.IJX
  • %HOMEPATH%\ARHGR\25502.IDW
  • %HOMEPATH%\ARHGR\E46617.ICL
  • %HOMEPATH%\ARHGR\2800.BWO
  • %HOMEPATH%\ARHGR\K8369.SES
  • %HOMEPATH%\ARHGR\40654.BOO
  • %HOMEPATH%\ARHGR\60452.DFL
  • %HOMEPATH%\ARHGR\62862.VZU
  • %HOMEPATH%\ARHGR\40973.TSB
  • %HOMEPATH%\ARHGR\F4937.RVD
  • %HOMEPATH%\ARHGR\28975.SKA
  • %HOMEPATH%\ARHGR\54739.WUB
  • %HOMEPATH%\ARHGR\K55315.FOB
  • %HOMEPATH%\ARHGR\49125.SYU
  • %HOMEPATH%\ARHGR\78288.HFD
  • %HOMEPATH%\ARHGR\50288.IOU
  • %HOMEPATH%\ARHGR\P37480.ETC
  • %HOMEPATH%\ARHGR\84511.YQD
  • %HOMEPATH%\ARHGR\V99322.PTJ
  • %HOMEPATH%\ARHGR\P41347.HCI
  • %HOMEPATH%\ARHGR\38991.QRG
  • %HOMEPATH%\ARHGR\75350.AQH
  • %HOMEPATH%\ARHGR\2716.UJA
  • %HOMEPATH%\ARHGR\Z20646.EEY
  • %HOMEPATH%\ARHGR\Y65399.QMW
  • %HOMEPATH%\ARHGR\F70340.KDV
  • %HOMEPATH%\ARHGR\50000.BFG
  • %HOMEPATH%\ARHGR\K63219.QJI
  • %HOMEPATH%\ARHGR\J12977.HCB
  • %HOMEPATH%\ARHGR\B70621.LAP
  • %HOMEPATH%\ARHGR\74822.EJG
  • %HOMEPATH%\ARHGR\82700.SDY
  • %HOMEPATH%\ARHGR\24026.BXV
  • %HOMEPATH%\ARHGR\6652.LWW
  • %HOMEPATH%\ARHGR\53019.JWO
  • %HOMEPATH%\ARHGR\K70310.ECK
  • %HOMEPATH%\ARHGR\N99033.JJD
  • %HOMEPATH%\ARHGR\I89040.GCV
  • %HOMEPATH%\ARHGR\H79966.GYF
  • %HOMEPATH%\ARHGR\58043.MTH
  • %HOMEPATH%\ARHGR\E59876.FVI
  • %HOMEPATH%\ARHGR\32201.SQY
  • %HOMEPATH%\ARHGR\I47750.VLG
  • %HOMEPATH%\ARHGR\99886.AVQ
  • %HOMEPATH%\ARHGR\Y58248.AFO
  • %HOMEPATH%\ARHGR\42883.YZC
  • %HOMEPATH%\ARHGR\68110.OSS
  • %HOMEPATH%\ARHGR\A2182.IYQ
  • %HOMEPATH%\ARHGR\Z16938.XJG
  • %HOMEPATH%\ARHGR\runner.vbs
  • %HOMEPATH%\ARHGR\settings.ini
  • %HOMEPATH%\ARHGR\A78511.LGG
  • %HOMEPATH%\ARHGR\H99595.MPU
  • %HOMEPATH%\ARHGR\101514.dat
  • %HOMEPATH%\ARHGR\364991.dat
  • %HOMEPATH%\ARHGR\428670.exe
  • %HOMEPATH%\ARHGR\422286.dat
  • %HOMEPATH%\ARHGR\54620.XBF
  • %HOMEPATH%\ARHGR\40849.LFE
  • %HOMEPATH%\ARHGR\36421.XDF
  • %HOMEPATH%\ARHGR\R99613.WME
  • %HOMEPATH%\ARHGR\32360.CXI
  • %HOMEPATH%\ARHGR\27257.CWL
  • %HOMEPATH%\ARHGR\I38670.NOD
  • %HOMEPATH%\ARHGR\H19137.JHJ
  • %HOMEPATH%\ARHGR\73070.UBG
  • %HOMEPATH%\ARHGR\Y53357.XNO
  • %HOMEPATH%\ARHGR\F18653.YGD
  • %HOMEPATH%\ARHGR\O93757.DMT
  • %HOMEPATH%\ARHGR\Y52793.LSS
  • %HOMEPATH%\ARHGR\R37362.CEP
  • %HOMEPATH%\ARHGR\86614.XCH
  • %HOMEPATH%\ARHGR\O47653.KSE
  • %HOMEPATH%\ARHGR\91565.UXS
  • %HOMEPATH%\ARHGR\O5747.QQQ
  • %HOMEPATH%\ARHGR\H71875.MDV
  • %HOMEPATH%\ARHGR\33598.WLP
  • %HOMEPATH%\ARHGR\F11789.LHI
  • %HOMEPATH%\ARHGR\22242.BXY
  • %HOMEPATH%\ARHGR\88262.AXM
  • %HOMEPATH%\ARHGR\X6496.THA
  • %HOMEPATH%\ARHGR\57121.WIJ
  • %HOMEPATH%\ARHGR\S40838.ARR
  • %HOMEPATH%\ARHGR\F70240.TUT
  • %HOMEPATH%\ARHGR\57287.XEU
  • %HOMEPATH%\ARHGR\18259.JFN
  • %HOMEPATH%\ARHGR\85838.KRU
  • %HOMEPATH%\ARHGR\7806.PQI
  • %HOMEPATH%\ARHGR\B2901.AUY
  • %HOMEPATH%\ARHGR\B63965.ZEV
  • %HOMEPATH%\ARHGR\94146.JHH
  • %HOMEPATH%\ARHGR\G10142.PYD
  • %HOMEPATH%\ARHGR\Y56505.RNK
  • %HOMEPATH%\ARHGR\X75439.LXE
  • %HOMEPATH%\ARHGR\Q69705.ZTA
  • %HOMEPATH%\ARHGR\79457.GAB
  • %HOMEPATH%\ARHGR\N60764.XVX
  • %HOMEPATH%\ARHGR\P22881.DBZ
  • %HOMEPATH%\ARHGR\W10033.BTN
  • %HOMEPATH%\ARHGR\89236.RWG
  • %HOMEPATH%\ARHGR\69348.TNM
  • %HOMEPATH%\ARHGR\I82921.ZZI
  • %HOMEPATH%\ARHGR\89284.TSA
  • %HOMEPATH%\ARHGR\49988.GCU
  • %HOMEPATH%\ARHGR\Z22604.MOG
  • %HOMEPATH%\ARHGR\40679.ZYH
  • %HOMEPATH%\ARHGR\11815.LJF
  • %HOMEPATH%\ARHGR\K19140.PDU
  • %HOMEPATH%\ARHGR\E63816.VGD
  • %HOMEPATH%\ARHGR\63882.YXP
  • %HOMEPATH%\ARHGR\Q89274.ZRE
  • %HOMEPATH%\ARHGR\41071.DZU
  • %HOMEPATH%\ARHGR\48034.EQZ
  • %HOMEPATH%\ARHGR\2555.RTG
  • %HOMEPATH%\ARHGR\S21477.KSA
  • %HOMEPATH%\ARHGR\16404.QBH
  • %HOMEPATH%\ARHGR\59692.ASH
  • %HOMEPATH%\ARHGR\30439.CYD
  • %HOMEPATH%\ARHGR\54294.ECK
  • %HOMEPATH%\ARHGR\41072.MON
  • %HOMEPATH%\ARHGR\B2966.HJB
  • %HOMEPATH%\ARHGR\H25423.YSY
  • %HOMEPATH%\ARHGR\80638.OLX
  • %HOMEPATH%\ARHGR\83410.RWA
  • %HOMEPATH%\ARHGR\G78680.WCG
  • %HOMEPATH%\ARHGR\10207.PET
  • %HOMEPATH%\ARHGR\5007.UIS
  • %HOMEPATH%\ARHGR\S34558.MBP
  • %HOMEPATH%\ARHGR\10183.IAC
  • %HOMEPATH%\ARHGR\O86299.OLL
  • %HOMEPATH%\ARHGR\20934.WPM
  • %HOMEPATH%\ARHGR\K16955.JVX
  • %HOMEPATH%\ARHGR\51017.QBQ
  • %HOMEPATH%\ARHGR\A92684.FNT
  • %HOMEPATH%\ARHGR\J94472.SZC
  • %HOMEPATH%\ARHGR\U48314.ZTO
  • %HOMEPATH%\ARHGR\I90348.QEY
  • %HOMEPATH%\ARHGR\M76778.OCJ
  • %HOMEPATH%\ARHGR\6902.XJB
  • %HOMEPATH%\ARHGR\W17545.ACY
  • %HOMEPATH%\ARHGR\4489.JBC
  • %HOMEPATH%\ARHGR\G50083.PXI
  • %HOMEPATH%\ARHGR\C96317.WBS
  • %HOMEPATH%\ARHGR\72809.MOE
  • %HOMEPATH%\ARHGR\O42390.ICU
  • %HOMEPATH%\ARHGR\G62203.KSH
  • %HOMEPATH%\ARHGR\38346.RCL
  • %HOMEPATH%\ARHGR\T20447.MUF
  • %HOMEPATH%\ARHGR\54681.SYK
  • %HOMEPATH%\ARHGR\P81700.IMC
  • %HOMEPATH%\ARHGR\4147.SET
  • %HOMEPATH%\ARHGR\92174.ZBF
  • %HOMEPATH%\ARHGR\56842.TME
  • %HOMEPATH%\ARHGR\H74578.SIW
  • %HOMEPATH%\ARHGR\89278.XSE
  • %HOMEPATH%\ARHGR\B96638.SAO
  • %HOMEPATH%\ARHGR\51634.XWP
  • %HOMEPATH%\ARHGR\16330.RUN
  • %HOMEPATH%\ARHGR\S32311.YKS
  • %HOMEPATH%\ARHGR\39753.QNU
  • %HOMEPATH%\ARHGR\B42960.SNI
  • %HOMEPATH%\ARHGR\X62974.OYC
  • %HOMEPATH%\ARHGR\G44729.QMD
  • %HOMEPATH%\ARHGR\T40600.IJG
  • %HOMEPATH%\ARHGR\26188.MKS
  • %HOMEPATH%\ARHGR\8177.ZVR
  • %HOMEPATH%\ARHGR\25442.NJQ
  • %HOMEPATH%\ARHGR\20277.JKF
  • %HOMEPATH%\ARHGR\18200.SRM
  • %HOMEPATH%\ARHGR\W68318.LYA
  • %HOMEPATH%\ARHGR\R77546.AEE
  • %HOMEPATH%\ARHGR\T28521.OSJ
  • %HOMEPATH%\ARHGR\82532.GHL
  • %HOMEPATH%\ARHGR\V6469.DXP
  • %HOMEPATH%\ARHGR\30778.LER
  • %HOMEPATH%\ARHGR\E64362.ISF
  • %HOMEPATH%\ARHGR\H13002.EZV
  • %HOMEPATH%\ARHGR\J13189.EUG
  • %HOMEPATH%\ARHGR\53281.MWC
  • %HOMEPATH%\ARHGR\M96534.WUB
  • %HOMEPATH%\ARHGR\K8785.CRI
  • %HOMEPATH%\ARHGR\P98886.KLT
  • %HOMEPATH%\ARHGR\A54421.BRV
  • %HOMEPATH%\ARHGR\42084.WIS
  • %HOMEPATH%\ARHGR\51961.QZO
  • %HOMEPATH%\ARHGR\O69016.ERO
  • %HOMEPATH%\ARHGR\P74156.NGR
  • %HOMEPATH%\ARHGR\97773.SJS
  • %HOMEPATH%\ARHGR\44676.BVP
  • %HOMEPATH%\ARHGR\Y1735.BUY
  • %HOMEPATH%\ARHGR\U32611.BXM
  • %HOMEPATH%\ARHGR\P92091.LHZ
  • %HOMEPATH%\ARHGR\30456.ETV
  • %HOMEPATH%\ARHGR\35263.SMY
  • %HOMEPATH%\ARHGR\D25095.FZP
  • %HOMEPATH%\ARHGR\48354.SOM
  • %HOMEPATH%\ARHGR\A71864.DWA
  • %HOMEPATH%\ARHGR\O88674.TDA
  • %HOMEPATH%\ARHGR\54983.LID
  • %HOMEPATH%\ARHGR\86025.LQW
  • %HOMEPATH%\ARHGR\57189.QNC
  • %HOMEPATH%\ARHGR\K41057.QSC
  • %HOMEPATH%\ARHGR\U36298.KMR
  • %HOMEPATH%\ARHGR\A62060.INS
  • %HOMEPATH%\ARHGR\P16824.WNI
  • %HOMEPATH%\ARHGR\98646.QHY
  • %HOMEPATH%\ARHGR\A63336.HPT
  • %HOMEPATH%\ARHGR\99497.HML
  • %HOMEPATH%\ARHGR\U84134.SEQ
  • %HOMEPATH%\ARHGR\S14654.IYC
  • %HOMEPATH%\ARHGR\28657.FFH
  • %HOMEPATH%\ARHGR\D38058.GQK
  • %HOMEPATH%\ARHGR\U55508.NHZ
  • %HOMEPATH%\ARHGR\S48964.QCL
  • %HOMEPATH%\ARHGR\24525.WJF
  • %HOMEPATH%\ARHGR\92743.CFL
  • %HOMEPATH%\ARHGR\Q12137.ZCH
  • %HOMEPATH%\ARHGR\O47021.QDG
  • %HOMEPATH%\ARHGR\97308.XIN
  • %HOMEPATH%\ARHGR\R42860.VUE
  • %HOMEPATH%\ARHGR\60088.XOC
  • %HOMEPATH%\ARHGR\O9436.RQF
  • %HOMEPATH%\ARHGR\53098.MLH
  • %HOMEPATH%\ARHGR\X39165.WNS
  • %HOMEPATH%\ARHGR\93439.MTK
  • %HOMEPATH%\ARHGR\D44330.YTP
  • %HOMEPATH%\ARHGR\N27510.EXI
  • %HOMEPATH%\ARHGR\84404.MOP
  • %HOMEPATH%\ARHGR\19719.QCR
  • %HOMEPATH%\ARHGR\S97831.CGZ
  • %HOMEPATH%\ARHGR\Q50894.CZK
  • %HOMEPATH%\ARHGR\K14839.WTC
  • %HOMEPATH%\ARHGR\J21628.TBV
  • %HOMEPATH%\ARHGR\W73484.LNT
Sets the 'hidden' attribute to the following files:
  • %HOMEPATH%\ARHGR\77105.SRG
  • %HOMEPATH%\ARHGR\57824.UYV
  • %HOMEPATH%\ARHGR\8466.BNT
  • %HOMEPATH%\ARHGR\64810.AKC
  • %HOMEPATH%\ARHGR\93042.PSO
  • %HOMEPATH%\ARHGR\W25715.FRH
  • %HOMEPATH%\ARHGR\M14085.MVK
  • %HOMEPATH%\ARHGR\96233.NGL
  • %HOMEPATH%\ARHGR\X92446.XMV
  • %HOMEPATH%\ARHGR\94039.PGX
  • %HOMEPATH%\ARHGR\17125.DLE
  • %HOMEPATH%\ARHGR\D30128.AQL
  • %HOMEPATH%\ARHGR\26756.ROP
  • %HOMEPATH%\ARHGR\84472.ZFK
  • %HOMEPATH%\ARHGR\37367.PPR
  • %HOMEPATH%\ARHGR\A89511.HXM
  • %HOMEPATH%\ARHGR\12945.SZU
  • %HOMEPATH%\ARHGR\F66058.FTY
  • %HOMEPATH%\ARHGR\R22357.VRI
  • %HOMEPATH%\ARHGR\I55362.FMY
  • %HOMEPATH%\ARHGR\38445.ZKS
  • %HOMEPATH%\ARHGR\P47042.YZQ
  • %HOMEPATH%\ARHGR\53482.LDQ
  • %HOMEPATH%\ARHGR\D50190.XJQ
  • %HOMEPATH%\ARHGR\K24689.WKZ
  • %HOMEPATH%\ARHGR\55681.ZDW
  • %HOMEPATH%\ARHGR\55741.CUN
  • %HOMEPATH%\ARHGR\93404.LWG
  • %HOMEPATH%\ARHGR\W42521.TKB
  • %HOMEPATH%\ARHGR\C16534.SDE
  • %HOMEPATH%\ARHGR\66954.SDP
  • %HOMEPATH%\ARHGR\P1594.LFW
  • %HOMEPATH%\ARHGR\67007.FZB
  • %HOMEPATH%\ARHGR\N69476.KJZ
  • %HOMEPATH%\ARHGR\I28878.RSI
  • %HOMEPATH%\ARHGR\33170.JEI
  • %HOMEPATH%\ARHGR\73407.QMX
  • %HOMEPATH%\ARHGR\C90087.EOP
  • %HOMEPATH%\ARHGR\Y71276.MKI
  • %HOMEPATH%\ARHGR\18882.MIA
  • %HOMEPATH%\ARHGR\95007.JWS
  • %HOMEPATH%\ARHGR\11780.NQW
  • %HOMEPATH%\ARHGR\B37319.TRI
  • %HOMEPATH%\ARHGR\29063.ANN
  • %HOMEPATH%\ARHGR\D91723.HDE
  • %HOMEPATH%\ARHGR\O3638.HWL
  • %HOMEPATH%\ARHGR\13284.FWC
  • %HOMEPATH%\ARHGR\75972.AOI
  • %HOMEPATH%\ARHGR\53066.PDX
  • %HOMEPATH%\ARHGR\Z91602.OEP
  • %HOMEPATH%\ARHGR\96847.RRG
  • %HOMEPATH%\ARHGR\B79759.ODL
  • %HOMEPATH%\ARHGR\42980.ADA
  • %HOMEPATH%\ARHGR\M10786.OKY
  • %HOMEPATH%\ARHGR\22276.UIG
  • %HOMEPATH%\ARHGR\97925.GPU
  • %HOMEPATH%\ARHGR\53015.WNU
  • %HOMEPATH%\ARHGR\80528.LHH
  • %HOMEPATH%\ARHGR\K4798.ACA
  • %HOMEPATH%\ARHGR\I32206.PPD
  • %HOMEPATH%\ARHGR\B24486.PGA
  • %HOMEPATH%\ARHGR\32308.IDP
  • %HOMEPATH%\ARHGR\W16935.BPS
  • %HOMEPATH%\ARHGR\E80517.HOH
  • %HOMEPATH%\ARHGR\T20224.FZV
  • %HOMEPATH%\ARHGR\95548.XMP
  • %HOMEPATH%\ARHGR\U40375.OFE
  • %HOMEPATH%\ARHGR\2835.XQZ
  • %HOMEPATH%\ARHGR\73550.IDE
  • %HOMEPATH%\ARHGR\54323.RWO
  • %HOMEPATH%\ARHGR\35949.AAM
  • %HOMEPATH%\ARHGR\R6902.ZFW
  • %HOMEPATH%\ARHGR\90073.SWH
  • %HOMEPATH%\ARHGR\73343.LSY
  • %HOMEPATH%\ARHGR\M55562.OCM
  • %HOMEPATH%\ARHGR\R12183.DNS
  • %HOMEPATH%\ARHGR\M59409.LGU
  • %HOMEPATH%\ARHGR\R96368.RZD
  • %HOMEPATH%\ARHGR\A45102.HGT
  • %HOMEPATH%\ARHGR\79356.FVO
  • %HOMEPATH%\ARHGR\K73591.UIG
  • %HOMEPATH%\ARHGR\21449.TED
  • %HOMEPATH%\ARHGR\15773.NBU
  • %HOMEPATH%\ARHGR\H57102.IYC
  • %HOMEPATH%\ARHGR\1957.THM
  • %HOMEPATH%\ARHGR\88999.UUT
  • %HOMEPATH%\ARHGR\V97209.PKO
  • %HOMEPATH%\ARHGR\50463.KQS
  • %HOMEPATH%\ARHGR\2470.CPW
  • %HOMEPATH%\ARHGR\72809.MOE
  • %HOMEPATH%\ARHGR\H23382.YQP
  • %HOMEPATH%\ARHGR\C45398.QXQ
  • %HOMEPATH%\ARHGR\11807.QRA
  • %HOMEPATH%\ARHGR\Q50958.BWQ
  • %HOMEPATH%\ARHGR\51273.NWC
  • %HOMEPATH%\ARHGR\Z73899.TWD
  • %HOMEPATH%\ARHGR\47007.YHY
  • %HOMEPATH%\ARHGR\77628.BEK
  • %HOMEPATH%\ARHGR\Y49624.FBG
  • %HOMEPATH%\ARHGR\C76293.KHD
  • %HOMEPATH%\ARHGR\91826.PHO
  • %HOMEPATH%\ARHGR\D40244.FDF
  • %HOMEPATH%\ARHGR\81427.YIH
  • %HOMEPATH%\ARHGR\M86226.LTN
  • %HOMEPATH%\ARHGR\X47774.SPI
  • %HOMEPATH%\ARHGR\Z17024.PPG
  • %HOMEPATH%\ARHGR\D39010.PAX
  • %HOMEPATH%\ARHGR\Z27901.DGY
  • %HOMEPATH%\ARHGR\36838.RIK
  • %HOMEPATH%\ARHGR\S57650.TBG
  • %HOMEPATH%\ARHGR\39987.DBV
  • %HOMEPATH%\ARHGR\O73473.TBH
  • %HOMEPATH%\ARHGR\V95246.TDP
  • %HOMEPATH%\ARHGR\37961.UAO
  • %HOMEPATH%\ARHGR\62687.LSI
  • %HOMEPATH%\ARHGR\P43717.STV
  • %HOMEPATH%\ARHGR\D68935.ICB
  • %HOMEPATH%\ARHGR\12418.IUI
  • %HOMEPATH%\ARHGR\B90871.EVF
  • %HOMEPATH%\ARHGR\25459.NYZ
  • %HOMEPATH%\ARHGR\88341.WUN
  • %HOMEPATH%\ARHGR\11569.ATQ
  • %HOMEPATH%\ARHGR\H42779.YXW
  • %HOMEPATH%\ARHGR\H51369.KBN
  • %HOMEPATH%\ARHGR\79366.JDX
  • %HOMEPATH%\ARHGR\Q9946.PIO
  • %HOMEPATH%\ARHGR\C28025.PEE
  • %HOMEPATH%\ARHGR\X45119.ZMK
  • %HOMEPATH%\ARHGR\X48650.UZQ
  • %HOMEPATH%\ARHGR\72947.OIP
  • %HOMEPATH%\ARHGR\6527.KDR
  • %HOMEPATH%\ARHGR\R48460.CNQ
  • %HOMEPATH%\ARHGR\A17737.JGX
  • %HOMEPATH%\ARHGR\79877.OCF
  • %HOMEPATH%\ARHGR\4941.EXS
  • %HOMEPATH%\ARHGR\W62879.SUG
  • %HOMEPATH%\ARHGR\D93633.NHM
  • %HOMEPATH%\ARHGR\4797.IBP
  • %HOMEPATH%\ARHGR\11884.RAW
  • %HOMEPATH%\ARHGR\H25638.TAE
  • %HOMEPATH%\ARHGR\D53626.NBE
  • %HOMEPATH%\ARHGR\T33877.AWF
  • %HOMEPATH%\ARHGR\Z64093.XRG
  • %HOMEPATH%\ARHGR\80087.RWM
  • %HOMEPATH%\ARHGR\10841.UGR
  • %HOMEPATH%\ARHGR\Y86015.TRN
  • %HOMEPATH%\ARHGR\F34025.LBI
  • %HOMEPATH%\ARHGR\F46934.HSZ
  • %HOMEPATH%\ARHGR\48813.KDK
  • %HOMEPATH%\ARHGR\U36986.DKA
  • %HOMEPATH%\ARHGR\88723.RVJ
  • %HOMEPATH%\ARHGR\72443.KFG
  • %HOMEPATH%\ARHGR\A82156.AVU
  • %HOMEPATH%\ARHGR\59307.YON
  • %HOMEPATH%\ARHGR\R23185.RHH
  • %HOMEPATH%\ARHGR\72640.LUC
  • %HOMEPATH%\ARHGR\M34547.OEO
  • %HOMEPATH%\ARHGR\56242.LMO
  • %HOMEPATH%\ARHGR\P73671.XJQ
  • %HOMEPATH%\ARHGR\20622.FQI
  • %HOMEPATH%\ARHGR\75580.VKC
  • %HOMEPATH%\ARHGR\D69586.FRR
  • %HOMEPATH%\ARHGR\14256.GFF
  • %HOMEPATH%\ARHGR\P18198.IRL
  • %HOMEPATH%\ARHGR\3082.NEX
  • %HOMEPATH%\ARHGR\43069.YCT
  • %HOMEPATH%\ARHGR\3996.HHU
  • %HOMEPATH%\ARHGR\P90718.UWD
  • %HOMEPATH%\ARHGR\G69093.EET
  • %HOMEPATH%\ARHGR\K35404.RZY
  • %HOMEPATH%\ARHGR\97450.ETF
  • %HOMEPATH%\ARHGR\79214.AVF
  • %HOMEPATH%\ARHGR\39842.ZDB
  • %HOMEPATH%\ARHGR\94492.MIA
  • %HOMEPATH%\ARHGR\13813.CSZ
  • %HOMEPATH%\ARHGR\6806.SES
  • %HOMEPATH%\ARHGR\50769.AAW
  • %HOMEPATH%\ARHGR\O19037.XMX
  • %HOMEPATH%\ARHGR\F99693.PDI
  • %HOMEPATH%\ARHGR\69160.MVP
  • %HOMEPATH%\ARHGR\29399.CFI
  • %HOMEPATH%\ARHGR\44072.QPP
  • %HOMEPATH%\ARHGR\12671.YJS
  • %HOMEPATH%\ARHGR\2084.ZRV
  • %HOMEPATH%\ARHGR\33580.OSZ
  • %HOMEPATH%\ARHGR\41312.WSI
  • %HOMEPATH%\ARHGR\W66205.UTM
  • %HOMEPATH%\ARHGR\98603.FZT
  • %HOMEPATH%\ARHGR\16453.VSP
  • %HOMEPATH%\ARHGR\98689.PAB
  • %HOMEPATH%\ARHGR\59936.LKM
  • %HOMEPATH%\ARHGR\41241.QMC
  • %HOMEPATH%\ARHGR\24289.LMS
  • %HOMEPATH%\ARHGR\94496.PTS
  • %HOMEPATH%\ARHGR\40302.CVD
  • %HOMEPATH%\ARHGR\H27982.PAH
  • %HOMEPATH%\ARHGR\Z56586.DIP
  • %HOMEPATH%\ARHGR\16655.HIR
  • %HOMEPATH%\ARHGR\W37848.ZQC
  • %HOMEPATH%\ARHGR\20313.GPL
  • %HOMEPATH%\ARHGR\E6755.GQY
  • %HOMEPATH%\ARHGR\15554.STA
  • %HOMEPATH%\ARHGR\1354.SFG
  • %HOMEPATH%\ARHGR\55419.LZJ
  • %HOMEPATH%\ARHGR\D73757.EGL
  • %HOMEPATH%\ARHGR\16354.AJK
  • %HOMEPATH%\ARHGR\82832.UWL
  • %HOMEPATH%\ARHGR\36747.VDP
  • %HOMEPATH%\ARHGR\86807.ABK
  • %HOMEPATH%\ARHGR\P79200.POP
  • %HOMEPATH%\ARHGR\C29651.ICN
  • %HOMEPATH%\ARHGR\R39447.PNW
  • %HOMEPATH%\ARHGR\D25060.RJE
  • %HOMEPATH%\ARHGR\36639.YYC
  • %HOMEPATH%\ARHGR\99814.CBL
  • %HOMEPATH%\ARHGR\K65245.KTF
  • %HOMEPATH%\ARHGR\T67271.XFS
  • %HOMEPATH%\ARHGR\67639.MPL
  • %HOMEPATH%\ARHGR\P55747.OFB
  • %HOMEPATH%\ARHGR\G7873.NGU
  • %HOMEPATH%\ARHGR\53441.TNJ
  • %HOMEPATH%\ARHGR\U61190.EBB
  • %HOMEPATH%\ARHGR\98164.WJO
  • %HOMEPATH%\ARHGR\T69705.MEN
  • %HOMEPATH%\ARHGR\Z47511.UOQ
  • %HOMEPATH%\ARHGR\5995.EFC
  • %HOMEPATH%\ARHGR\91745.TNN
  • %HOMEPATH%\ARHGR\19057.RPY
  • %HOMEPATH%\ARHGR\X26272.GQG
  • %HOMEPATH%\ARHGR\24234.UNJ
  • %HOMEPATH%\ARHGR\S6723.PVN
  • %HOMEPATH%\ARHGR\O28836.YZR
  • %HOMEPATH%\ARHGR\G6837.TQC
  • %HOMEPATH%\ARHGR\70331.HPJ
  • %HOMEPATH%\ARHGR\Z44533.ZIW
  • %HOMEPATH%\ARHGR\I82623.WAN
  • %HOMEPATH%\ARHGR\62550.NRT
  • %HOMEPATH%\ARHGR\99593.RTD
  • %HOMEPATH%\ARHGR\W30592.MAP
  • %HOMEPATH%\ARHGR\58585.MSR
  • %HOMEPATH%\ARHGR\41695.WTC
  • %HOMEPATH%\ARHGR\5306.YHO
  • %HOMEPATH%\ARHGR\43285.TRS
  • %HOMEPATH%\ARHGR\T73483.ACS
  • %HOMEPATH%\ARHGR\L67817.PVE
  • %HOMEPATH%\ARHGR\95000.TAR
  • %HOMEPATH%\ARHGR\80541.BXR
  • %HOMEPATH%\ARHGR\35957.OBR
  • %HOMEPATH%\ARHGR\G40664.RCA
  • %HOMEPATH%\ARHGR\48997.FWP
  • %HOMEPATH%\ARHGR\C81870.DZM
  • %HOMEPATH%\ARHGR\C94329.VGN
  • %HOMEPATH%\ARHGR\86113.NHE
  • %HOMEPATH%\ARHGR\25944.VYA
  • %HOMEPATH%\ARHGR\29774.VMA
  • %HOMEPATH%\ARHGR\F83571.ZRY
  • %HOMEPATH%\ARHGR\A21229.ALV
  • %HOMEPATH%\ARHGR\21834.KHZ
  • %HOMEPATH%\ARHGR\21722.WWK
  • %HOMEPATH%\ARHGR\J74522.HDP
  • %HOMEPATH%\ARHGR\S91556.XDV
  • %HOMEPATH%\ARHGR\I56082.DAI
  • %HOMEPATH%\ARHGR\82152.BQL
  • %HOMEPATH%\ARHGR\48077.BOA
  • %HOMEPATH%\ARHGR\94604.OPE
  • %HOMEPATH%\ARHGR\75468.FDF
  • %HOMEPATH%\ARHGR\T89987.HRN
  • %HOMEPATH%\ARHGR\Q75088.GBX
  • %HOMEPATH%\ARHGR\T35134.BZO
  • %HOMEPATH%\ARHGR\X64543.IKR
  • %HOMEPATH%\ARHGR\49562.QAP
  • %HOMEPATH%\ARHGR\38960.QPE
  • %HOMEPATH%\ARHGR\34705.XJX
  • %HOMEPATH%\ARHGR\78995.SAS
  • %HOMEPATH%\ARHGR\44338.PFI
  • %HOMEPATH%\ARHGR\F68436.CQG
  • %HOMEPATH%\ARHGR\51656.CZE
  • %HOMEPATH%\ARHGR\62397.LWO
  • %HOMEPATH%\ARHGR\50734.VRN
  • %HOMEPATH%\ARHGR\C30247.JVJ
  • %HOMEPATH%\ARHGR\P37259.VCD
  • %HOMEPATH%\ARHGR\O66782.EQI
  • %HOMEPATH%\ARHGR\10315.XYU
  • %HOMEPATH%\ARHGR\90712.UYV
  • %HOMEPATH%\ARHGR\4870.DON
  • %HOMEPATH%\ARHGR\N94028.CYB
  • %HOMEPATH%\ARHGR\33706.EUE
  • %HOMEPATH%\ARHGR\27262.RMA
  • %HOMEPATH%\ARHGR\51082.ZPJ
  • %HOMEPATH%\ARHGR\E48020.XEM
  • %HOMEPATH%\ARHGR\39668.MRM
  • %HOMEPATH%\ARHGR\82700.SDY
  • %HOMEPATH%\ARHGR\N93346.PJV
  • %HOMEPATH%\ARHGR\Z18003.XRI
  • %HOMEPATH%\ARHGR\P74076.PEH
  • %HOMEPATH%\ARHGR\Z38722.WHO
  • %HOMEPATH%\ARHGR\96463.GWH
  • %HOMEPATH%\ARHGR\C92335.FWS
  • %HOMEPATH%\ARHGR\43489.BIP
  • %HOMEPATH%\ARHGR\V27681.AYX
  • %HOMEPATH%\ARHGR\9865.DKB
  • %HOMEPATH%\ARHGR\A88218.VAV
  • %HOMEPATH%\ARHGR\N90776.CAD
  • %HOMEPATH%\ARHGR\N51811.JEN
  • %HOMEPATH%\ARHGR\K8369.SES
  • %HOMEPATH%\ARHGR\25502.IDW
  • %HOMEPATH%\ARHGR\56298.ITW
  • %HOMEPATH%\ARHGR\2800.BWO
  • %HOMEPATH%\ARHGR\78288.HFD
  • %HOMEPATH%\ARHGR\40654.BOO
  • %HOMEPATH%\ARHGR\E46617.ICL
  • %HOMEPATH%\ARHGR\62862.VZU
  • %HOMEPATH%\ARHGR\K55315.FOB
  • %HOMEPATH%\ARHGR\F4937.RVD
  • %HOMEPATH%\ARHGR\60452.DFL
  • %HOMEPATH%\ARHGR\54739.WUB
  • %HOMEPATH%\ARHGR\M39830.IJX
  • %HOMEPATH%\ARHGR\49125.SYU
  • %HOMEPATH%\ARHGR\28975.SKA
  • %HOMEPATH%\ARHGR\F70340.KDV
  • %HOMEPATH%\ARHGR\P37480.ETC
  • %HOMEPATH%\ARHGR\75350.AQH
  • %HOMEPATH%\ARHGR\V99322.PTJ
  • %HOMEPATH%\ARHGR\50288.IOU
  • %HOMEPATH%\ARHGR\38991.QRG
  • %HOMEPATH%\ARHGR\C24132.FID
  • %HOMEPATH%\ARHGR\2716.UJA
  • %HOMEPATH%\ARHGR\P41347.HCI
  • %HOMEPATH%\ARHGR\Y65399.QMW
  • %HOMEPATH%\ARHGR\B70621.LAP
  • %HOMEPATH%\ARHGR\50000.BFG
  • %HOMEPATH%\ARHGR\Z20646.EEY
  • %HOMEPATH%\ARHGR\J12977.HCB
  • %HOMEPATH%\ARHGR\84511.YQD
  • %HOMEPATH%\ARHGR\74822.EJG
  • %HOMEPATH%\ARHGR\K63219.QJI
  • %HOMEPATH%\ARHGR\24026.BXV
  • %HOMEPATH%\ARHGR\6652.LWW
  • %HOMEPATH%\ARHGR\53019.JWO
  • %HOMEPATH%\ARHGR\K70310.ECK
  • %HOMEPATH%\ARHGR\N99033.JJD
  • %HOMEPATH%\ARHGR\I89040.GCV
  • %HOMEPATH%\ARHGR\H79966.GYF
  • %HOMEPATH%\ARHGR\58043.MTH
  • %HOMEPATH%\ARHGR\E59876.FVI
  • %HOMEPATH%\ARHGR\32201.SQY
  • %HOMEPATH%\ARHGR\I47750.VLG
  • %HOMEPATH%\ARHGR\99886.AVQ
  • %HOMEPATH%\ARHGR\Y58248.AFO
  • %HOMEPATH%\ARHGR\42883.YZC
  • %HOMEPATH%\ARHGR\68110.OSS
  • %HOMEPATH%\ARHGR\A2182.IYQ
  • %HOMEPATH%\ARHGR\Z16938.XJG
  • %HOMEPATH%\ARHGR\runner.vbs
  • %HOMEPATH%\ARHGR\settings.ini
  • %HOMEPATH%\ARHGR\A78511.LGG
  • %HOMEPATH%\ARHGR\H99595.MPU
  • %HOMEPATH%\ARHGR\101514.dat
  • %HOMEPATH%\ARHGR\364991.dat
  • %HOMEPATH%\ARHGR\428670.exe
  • %HOMEPATH%\ARHGR\422286.dat
  • %HOMEPATH%\ARHGR\54620.XBF
  • %HOMEPATH%\ARHGR\40849.LFE
  • %HOMEPATH%\ARHGR\36421.XDF
  • %HOMEPATH%\ARHGR\R99613.WME
  • %HOMEPATH%\ARHGR\32360.CXI
  • %HOMEPATH%\ARHGR\27257.CWL
  • %HOMEPATH%\ARHGR\I38670.NOD
  • %HOMEPATH%\ARHGR\H19137.JHJ
  • %HOMEPATH%\ARHGR\73070.UBG
  • %HOMEPATH%\ARHGR\Y53357.XNO
  • %HOMEPATH%\ARHGR\F18653.YGD
  • %HOMEPATH%\ARHGR\O93757.DMT
  • %HOMEPATH%\ARHGR\Y52793.LSS
  • %HOMEPATH%\ARHGR\R37362.CEP
  • %HOMEPATH%\ARHGR\86614.XCH
  • %HOMEPATH%\ARHGR\O47653.KSE
  • %HOMEPATH%\ARHGR\91565.UXS
  • %HOMEPATH%\ARHGR\O5747.QQQ
  • %HOMEPATH%\ARHGR\H71875.MDV
  • %HOMEPATH%\ARHGR\33598.WLP
  • %HOMEPATH%\ARHGR\F11789.LHI
  • %HOMEPATH%\ARHGR\22242.BXY
  • %HOMEPATH%\ARHGR\88262.AXM
  • %HOMEPATH%\ARHGR\X6496.THA
  • %HOMEPATH%\ARHGR\57121.WIJ
  • %HOMEPATH%\ARHGR\S40838.ARR
  • %HOMEPATH%\ARHGR\F70240.TUT
  • %HOMEPATH%\ARHGR\57287.XEU
  • %HOMEPATH%\ARHGR\18259.JFN
  • %HOMEPATH%\ARHGR\85838.KRU
  • %HOMEPATH%\ARHGR\7806.PQI
  • %HOMEPATH%\ARHGR\B2901.AUY
  • %HOMEPATH%\ARHGR\B63965.ZEV
  • %HOMEPATH%\ARHGR\94146.JHH
  • %HOMEPATH%\ARHGR\G10142.PYD
  • %HOMEPATH%\ARHGR\Y56505.RNK
  • %HOMEPATH%\ARHGR\X75439.LXE
  • %HOMEPATH%\ARHGR\Q69705.ZTA
  • %HOMEPATH%\ARHGR\79457.GAB
  • %HOMEPATH%\ARHGR\N60764.XVX
  • %HOMEPATH%\ARHGR\P22881.DBZ
  • %HOMEPATH%\ARHGR\W10033.BTN
  • %HOMEPATH%\ARHGR\40973.TSB
  • %HOMEPATH%\ARHGR\69348.TNM
  • %HOMEPATH%\ARHGR\40679.ZYH
  • %HOMEPATH%\ARHGR\89284.TSA
  • %HOMEPATH%\ARHGR\89236.RWG
  • %HOMEPATH%\ARHGR\Z22604.MOG
  • %HOMEPATH%\ARHGR\16404.QBH
  • %HOMEPATH%\ARHGR\11815.LJF
  • %HOMEPATH%\ARHGR\49988.GCU
  • %HOMEPATH%\ARHGR\E63816.VGD
  • %HOMEPATH%\ARHGR\2555.RTG
  • %HOMEPATH%\ARHGR\Q89274.ZRE
  • %HOMEPATH%\ARHGR\K19140.PDU
  • %HOMEPATH%\ARHGR\48034.EQZ
  • %HOMEPATH%\ARHGR\I82921.ZZI
  • %HOMEPATH%\ARHGR\S21477.KSA
  • %HOMEPATH%\ARHGR\41071.DZU
  • %HOMEPATH%\ARHGR\5007.UIS
  • %HOMEPATH%\ARHGR\30439.CYD
  • %HOMEPATH%\ARHGR\80638.OLX
  • %HOMEPATH%\ARHGR\41072.MON
  • %HOMEPATH%\ARHGR\59692.ASH
  • %HOMEPATH%\ARHGR\H25423.YSY
  • %HOMEPATH%\ARHGR\25442.NJQ
  • %HOMEPATH%\ARHGR\83410.RWA
  • %HOMEPATH%\ARHGR\B2966.HJB
  • %HOMEPATH%\ARHGR\10207.PET
  • %HOMEPATH%\ARHGR\20934.WPM
  • %HOMEPATH%\ARHGR\S34558.MBP
  • %HOMEPATH%\ARHGR\G78680.WCG
  • %HOMEPATH%\ARHGR\O86299.OLL
  • %HOMEPATH%\ARHGR\54294.ECK
  • %HOMEPATH%\ARHGR\K16955.JVX
  • %HOMEPATH%\ARHGR\10183.IAC
  • %HOMEPATH%\ARHGR\63882.YXP
  • %HOMEPATH%\ARHGR\J94472.SZC
  • %HOMEPATH%\ARHGR\W17545.ACY
  • %HOMEPATH%\ARHGR\I90348.QEY
  • %HOMEPATH%\ARHGR\A92684.FNT
  • %HOMEPATH%\ARHGR\6902.XJB
  • %HOMEPATH%\ARHGR\P81700.IMC
  • %HOMEPATH%\ARHGR\4489.JBC
  • %HOMEPATH%\ARHGR\M76778.OCJ
  • %HOMEPATH%\ARHGR\C96317.WBS
  • %HOMEPATH%\ARHGR\T20447.MUF
  • %HOMEPATH%\ARHGR\O42390.ICU
  • %HOMEPATH%\ARHGR\G50083.PXI
  • %HOMEPATH%\ARHGR\38346.RCL
  • %HOMEPATH%\ARHGR\U48314.ZTO
  • %HOMEPATH%\ARHGR\54681.SYK
  • %HOMEPATH%\ARHGR\G62203.KSH
  • %HOMEPATH%\ARHGR\B42960.SNI
  • %HOMEPATH%\ARHGR\92174.ZBF
  • %HOMEPATH%\ARHGR\51634.XWP
  • %HOMEPATH%\ARHGR\H74578.SIW
  • %HOMEPATH%\ARHGR\4147.SET
  • %HOMEPATH%\ARHGR\B96638.SAO
  • %HOMEPATH%\ARHGR\51017.QBQ
  • %HOMEPATH%\ARHGR\16330.RUN
  • %HOMEPATH%\ARHGR\89278.XSE
  • %HOMEPATH%\ARHGR\39753.QNU
  • %HOMEPATH%\ARHGR\26188.MKS
  • %HOMEPATH%\ARHGR\X62974.OYC
  • %HOMEPATH%\ARHGR\S32311.YKS
  • %HOMEPATH%\ARHGR\T40600.IJG
  • %HOMEPATH%\ARHGR\56842.TME
  • %HOMEPATH%\ARHGR\8177.ZVR
  • %HOMEPATH%\ARHGR\G44729.QMD
  • %HOMEPATH%\ARHGR\20277.JKF
  • %HOMEPATH%\ARHGR\18200.SRM
  • %HOMEPATH%\ARHGR\W68318.LYA
  • %HOMEPATH%\ARHGR\R77546.AEE
  • %HOMEPATH%\ARHGR\T28521.OSJ
  • %HOMEPATH%\ARHGR\82532.GHL
  • %HOMEPATH%\ARHGR\V6469.DXP
  • %HOMEPATH%\ARHGR\30778.LER
  • %HOMEPATH%\ARHGR\E64362.ISF
  • %HOMEPATH%\ARHGR\H13002.EZV
  • %HOMEPATH%\ARHGR\J13189.EUG
  • %HOMEPATH%\ARHGR\53281.MWC
  • %HOMEPATH%\ARHGR\M96534.WUB
  • %HOMEPATH%\ARHGR\K8785.CRI
  • %HOMEPATH%\ARHGR\P98886.KLT
  • %HOMEPATH%\ARHGR\A54421.BRV
  • %HOMEPATH%\ARHGR\42084.WIS
  • %HOMEPATH%\ARHGR\51961.QZO
  • %HOMEPATH%\ARHGR\O69016.ERO
  • %HOMEPATH%\ARHGR\P74156.NGR
  • %HOMEPATH%\ARHGR\97773.SJS
  • %HOMEPATH%\ARHGR\44676.BVP
  • %HOMEPATH%\ARHGR\Y1735.BUY
  • %HOMEPATH%\ARHGR\U32611.BXM
  • %HOMEPATH%\ARHGR\P92091.LHZ
  • %HOMEPATH%\ARHGR\30456.ETV
  • %HOMEPATH%\ARHGR\35263.SMY
  • %HOMEPATH%\ARHGR\D25095.FZP
  • %HOMEPATH%\ARHGR\48354.SOM
  • %HOMEPATH%\ARHGR\A71864.DWA
  • %HOMEPATH%\ARHGR\O88674.TDA
  • %HOMEPATH%\ARHGR\54983.LID
  • %HOMEPATH%\ARHGR\86025.LQW
  • %HOMEPATH%\ARHGR\57189.QNC
  • %HOMEPATH%\ARHGR\K41057.QSC
  • %HOMEPATH%\ARHGR\U36298.KMR
  • %HOMEPATH%\ARHGR\A62060.INS
  • %HOMEPATH%\ARHGR\P16824.WNI
  • %HOMEPATH%\ARHGR\98646.QHY
  • %HOMEPATH%\ARHGR\A63336.HPT
  • %HOMEPATH%\ARHGR\99497.HML
  • %HOMEPATH%\ARHGR\U84134.SEQ
  • %HOMEPATH%\ARHGR\S14654.IYC
  • %HOMEPATH%\ARHGR\28657.FFH
  • %HOMEPATH%\ARHGR\D38058.GQK
  • %HOMEPATH%\ARHGR\U55508.NHZ
  • %HOMEPATH%\ARHGR\S48964.QCL
  • %HOMEPATH%\ARHGR\24525.WJF
  • %HOMEPATH%\ARHGR\92743.CFL
  • %HOMEPATH%\ARHGR\Q12137.ZCH
  • %HOMEPATH%\ARHGR\O47021.QDG
  • %HOMEPATH%\ARHGR\97308.XIN
  • %HOMEPATH%\ARHGR\R42860.VUE
  • %HOMEPATH%\ARHGR\60088.XOC
  • %HOMEPATH%\ARHGR\O9436.RQF
  • %HOMEPATH%\ARHGR\53098.MLH
  • %HOMEPATH%\ARHGR\X39165.WNS
  • %HOMEPATH%\ARHGR\93439.MTK
  • %HOMEPATH%\ARHGR\D44330.YTP
  • %HOMEPATH%\ARHGR\N27510.EXI
  • %HOMEPATH%\ARHGR\84404.MOP
  • %HOMEPATH%\ARHGR\19719.QCR
  • %HOMEPATH%\ARHGR\S97831.CGZ
  • %HOMEPATH%\ARHGR\Q50894.CZK
  • %HOMEPATH%\ARHGR\K14839.WTC
  • %HOMEPATH%\ARHGR\J21628.TBV
  • %HOMEPATH%\ARHGR\W73484.LNT
Deletes the following files:
  • %HOMEPATH%\ARHGR\DZNNBVHH.dat
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'
  • ClassName: 'EDIT' WindowName: '(null)'

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android