Trojan.Inject1.33521

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Google Updater' = '%APPDATA%\Microsoft\SysAudio.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Og69820D35551' = '%HOMEPATH%\Og54135B27619\zdt.exe'

Malicious functions:

Creates and executes the following:

'%HOMEPATH%\Og54135B27619\zdt.exe'

Executes the following:

'%APPDATA%\Microsoft\WinUpdater.exe'
'%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'

Injects code into

the following system processes:

%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

Modifies file system :

Creates the following files:

%HOMEPATH%\Og54135B27619\8079.MML
%HOMEPATH%\Og54135B27619\C2108T75804.QKH
%HOMEPATH%\Og54135B27619\X10106W37248.XBG
%HOMEPATH%\Og54135B27619\4664.IDA
%HOMEPATH%\Og54135B27619\36485.MQV
%HOMEPATH%\Og54135B27619\W5513V44418.AQF
%HOMEPATH%\Og54135B27619\69131.HEL
%HOMEPATH%\Og54135B27619\T49236O86000.MNS
%HOMEPATH%\Og54135B27619\61832.IMD
%HOMEPATH%\Og54135B27619\18430.SFC
%HOMEPATH%\Og54135B27619\19471.TWO
%HOMEPATH%\Og54135B27619\R51845O75444.XLU
%HOMEPATH%\Og54135B27619\U19536F77679.YMH
%HOMEPATH%\Og54135B27619\L49152O67894.YSR
%HOMEPATH%\Og54135B27619\I72611F99822.RBV
%HOMEPATH%\Og54135B27619\E67558F79728.NLT
%HOMEPATH%\Og54135B27619\33484.UJI
%HOMEPATH%\Og54135B27619\81912.DTS
%HOMEPATH%\Og54135B27619\O1709H84016.SXP
%HOMEPATH%\Og54135B27619\66890.SJX
%HOMEPATH%\Og54135B27619\Y87715D72571.PLV
%HOMEPATH%\Og54135B27619\B31993S62282.MWE
%HOMEPATH%\Og54135B27619\66155.CAX
%HOMEPATH%\Og54135B27619\94755.LMP
%HOMEPATH%\Og54135B27619\E51730V99569.UMV
%HOMEPATH%\Og54135B27619\K90794F79883.FXE
%HOMEPATH%\Og54135B27619\53789.DMG
%HOMEPATH%\Og54135B27619\Z13253Y39371.SRJ
%HOMEPATH%\Og54135B27619\70338.KTG
%HOMEPATH%\Og54135B27619\13239.EJV
%HOMEPATH%\Og54135B27619\16709.ZDK
%HOMEPATH%\Og54135B27619\Q78984I34697.WSG
%HOMEPATH%\Og54135B27619\47086.QYC
%HOMEPATH%\Og54135B27619\7849.UEN
%HOMEPATH%\Og54135B27619\35877.MQE
%HOMEPATH%\Og54135B27619\64489.HSM
%HOMEPATH%\Og54135B27619\S47830G96391.ZAN
%HOMEPATH%\Og54135B27619\U24971V48456.RPS
%HOMEPATH%\Og54135B27619\T73622F74492.RJD
%HOMEPATH%\Og54135B27619\96311.RAQ
%HOMEPATH%\Og54135B27619\A31178D33587.QBK
%HOMEPATH%\Og54135B27619\5874.JZD
%HOMEPATH%\Og54135B27619\78156.OMP
%HOMEPATH%\Og54135B27619\49598.FPZ
%HOMEPATH%\Og54135B27619\40155.MZQ
%HOMEPATH%\Og54135B27619\51544.XBS
%HOMEPATH%\Og54135B27619\I8092D97746.YPI
%HOMEPATH%\Og54135B27619\25263.TJH
%HOMEPATH%\Og54135B27619\17861.BHW
%HOMEPATH%\Og54135B27619\S30651K89251.CQL
%HOMEPATH%\Og54135B27619\28265.ZOW
%HOMEPATH%\Og54135B27619\S7940Q20819.QMZ
%HOMEPATH%\Og54135B27619\98901.EGP
%HOMEPATH%\Og54135B27619\88768.WFQ
%HOMEPATH%\Og54135B27619\W95788Q66566.CTY
%HOMEPATH%\Og54135B27619\U16234A35102.SJN
%HOMEPATH%\Og54135B27619\V86630S68006.WCT
%HOMEPATH%\Og54135B27619\N87164F74455.JIZ
%HOMEPATH%\Og54135B27619\H30655W66490.RKV
%HOMEPATH%\Og54135B27619\I69634Z16599.AQZ
%HOMEPATH%\Og54135B27619\A20859D63826.EWF
%HOMEPATH%\Og54135B27619\95769.SGE
%HOMEPATH%\Og54135B27619\D8484Z26196.FSF
%HOMEPATH%\Og54135B27619\H42476G49656.KWK
%HOMEPATH%\Og54135B27619\Z71678M37697.YRB
%HOMEPATH%\Og54135B27619\J75751M49073.KUQ
%HOMEPATH%\Og54135B27619\29536.BFP
%HOMEPATH%\Og54135B27619\43926.XNQ
%HOMEPATH%\Og54135B27619\3029.OXD
%HOMEPATH%\Og54135B27619\I84973O81786.YHS
%HOMEPATH%\Og54135B27619\36776.YIR
%HOMEPATH%\Og54135B27619\P54803N52134.YVN
%HOMEPATH%\Og54135B27619\R56294Y33900.DDF
%HOMEPATH%\Og54135B27619\76341.IQG
%HOMEPATH%\Og54135B27619\26866.BZA
%HOMEPATH%\Og54135B27619\U29066H25056.EGQ
%HOMEPATH%\Og54135B27619\B38886F81604.RTA
%HOMEPATH%\Og54135B27619\B75030K76555.GFI
%HOMEPATH%\Og54135B27619\T66206B49937.VGC
%HOMEPATH%\Og54135B27619\70555.WZO
%HOMEPATH%\Og54135B27619\Z29211U80698.KBQ
%HOMEPATH%\Og54135B27619\Q96510X52507.VGD
%HOMEPATH%\Og54135B27619\72412.OJW
%HOMEPATH%\Og54135B27619\O93081E35827.FBY
%HOMEPATH%\Og54135B27619\87205.FVE
%HOMEPATH%\Og54135B27619\60676.NSE
%HOMEPATH%\Og54135B27619\H7850R87651.QUZ
%HOMEPATH%\Og54135B27619\G84951C47563.KCP
%HOMEPATH%\Og54135B27619\U74762F93584.FNM
%HOMEPATH%\Og54135B27619\O30474H73828.AQC
%HOMEPATH%\Og54135B27619\67929.YVI
%HOMEPATH%\Og54135B27619\36621.JMC
%HOMEPATH%\Og54135B27619\N95158C8618.DVN
%HOMEPATH%\Og54135B27619\O99963K95752.GHV
%HOMEPATH%\Og54135B27619\W45696W48436.LVU
%HOMEPATH%\Og54135B27619\12680.BJE
%HOMEPATH%\Og54135B27619\U46679U59161.XRN
%HOMEPATH%\Og54135B27619\87769.JGW
%HOMEPATH%\Og54135B27619\G79948V78089.QTQ
%HOMEPATH%\Og54135B27619\Y2151D49762.LJR
%HOMEPATH%\Og54135B27619\27214.HPQ
%HOMEPATH%\Og54135B27619\U68610S14795.CSL
%HOMEPATH%\Og54135B27619\V38164O65751.GGJ
%HOMEPATH%\Og54135B27619\R77204I2516.ELI
%HOMEPATH%\Og54135B27619\6457.UFB
%HOMEPATH%\Og54135B27619\Z28681D66782.JJI
%HOMEPATH%\Og54135B27619\53273.TXZ
%HOMEPATH%\Og54135B27619\B87351F99035.NFW
%HOMEPATH%\Og54135B27619\4816.BAZ
%HOMEPATH%\Og54135B27619\W82129O30812.XOL
%HOMEPATH%\Og54135B27619\S88516F72645.UNP
%HOMEPATH%\Og54135B27619\Z32200V4449.ICZ
%HOMEPATH%\Og54135B27619\K81349I18937.HTX
%HOMEPATH%\Og54135B27619\30546.GEL
%HOMEPATH%\Og54135B27619\R16597K55674.UQK
%HOMEPATH%\Og54135B27619\41672.NQS
%HOMEPATH%\Og54135B27619\48110.UWH
%HOMEPATH%\Og54135B27619\84608.JUZ
%HOMEPATH%\Og54135B27619\96020.IBX
%HOMEPATH%\Og54135B27619\V75587R82051.SZD
%HOMEPATH%\Og54135B27619\20501.VSL
%HOMEPATH%\Og54135B27619\P30834T10937.HTF
%HOMEPATH%\Og54135B27619\M21158E95850.YVJ
%HOMEPATH%\Og54135B27619\W17474R52047.HOC
%HOMEPATH%\Og54135B27619\O24607K76240.JMM
%HOMEPATH%\Og54135B27619\W52481Q33607.BFP
%HOMEPATH%\Og54135B27619\75543.TMQ
%HOMEPATH%\Og54135B27619\41874.SQP
%HOMEPATH%\Og54135B27619\74942.QPA
%HOMEPATH%\Og54135B27619\H65801Y47022.IVX
%HOMEPATH%\Og54135B27619\66601.JTV
%HOMEPATH%\Og54135B27619\K60355W68805.HBH
%HOMEPATH%\Og54135B27619\O45767D18156.XOE
%HOMEPATH%\Og54135B27619\V63375P55608.HFD
%HOMEPATH%\Og54135B27619\O87244J99418.HFD
%HOMEPATH%\Og54135B27619\X13245U89061.KLS
%HOMEPATH%\Og54135B27619\69854.YZD
%HOMEPATH%\Og54135B27619\70170.WCX
%HOMEPATH%\Og54135B27619\C11417G38160.WDF
%HOMEPATH%\Og54135B27619\86160.SGU
%HOMEPATH%\Og54135B27619\M86961L98079.YMW
%HOMEPATH%\Og54135B27619\44647.IDF
%HOMEPATH%\Og54135B27619\H19624Q18623.GTH
%HOMEPATH%\Og54135B27619\Q48267H47210.NTS
%HOMEPATH%\Og54135B27619\17196.NTJ
%HOMEPATH%\Og54135B27619\F39608I66525.CPY
%HOMEPATH%\Og54135B27619\F6234C23203.EDY
%HOMEPATH%\Og54135B27619\94323.BAW
%HOMEPATH%\Og54135B27619\1776.PKD
%HOMEPATH%\Og54135B27619\X38357S16818.NQP
%HOMEPATH%\Og54135B27619\M83328F82607.MWU
%HOMEPATH%\Og54135B27619\M89983Z1841.DHB
%HOMEPATH%\Og54135B27619\17715.KVF
%HOMEPATH%\Og54135B27619\L4314P99241.TTH
%HOMEPATH%\Og54135B27619\R35580F83285.MAK
%HOMEPATH%\Og54135B27619\79660.XBB
%HOMEPATH%\Og54135B27619\T92302B9372.GON
%HOMEPATH%\Og54135B27619\63507.MYE
%HOMEPATH%\Og54135B27619\57068.LSF
%HOMEPATH%\Og54135B27619\N74248I90175.ENJ
%HOMEPATH%\Og54135B27619\F6835Z73359.YLP
%HOMEPATH%\Og54135B27619\R36538P43367.BDK
%HOMEPATH%\Og54135B27619\68720.MPP
%HOMEPATH%\Og54135B27619\63581.DAO
%HOMEPATH%\Og54135B27619\83321.ZPB
%HOMEPATH%\Og54135B27619\38595.TJH
%HOMEPATH%\Og54135B27619\K6199C58803.SME
%HOMEPATH%\Og54135B27619\22839.NXH
%HOMEPATH%\Og54135B27619\18947.KHT
%HOMEPATH%\Og54135B27619\E54326A95811.GHZ
%HOMEPATH%\Og54135B27619\W19369D36374.EWY
%HOMEPATH%\Og54135B27619\G81985X52560.CWG
%HOMEPATH%\Og54135B27619\73622.BFW
%HOMEPATH%\Og54135B27619\H91240Y68489.ITF
%HOMEPATH%\Og54135B27619\42983.FXY
%HOMEPATH%\Og54135B27619\E58530I17064.EAM
%TEMP%\aut1.tmp
%HOMEPATH%\Og54135B27619\WI.WGW
%APPDATA%\Microsoft\SysAudio.exe
%HOMEPATH%\Cp62640F48006.AP5
%HOMEPATH%\Og54135B27619\D18061Y62253.NAD
%HOMEPATH%\Og54135B27619\T82245H73199.BPN
%HOMEPATH%\Og54135B27619\X80824C1115.SVH
%HOMEPATH%\Og54135B27619\U34909L77353.VEI
%HOMEPATH%\Og54135B27619\53230.OWO
%HOMEPATH%\Og54135B27619\9954.FQR
%HOMEPATH%\Og54135B27619\R4694Q46910.KWM
%HOMEPATH%\Og54135B27619\60188.BSX
%HOMEPATH%\Og54135B27619\76891.ZLW
%HOMEPATH%\Og54135B27619\K57755S21489.JQP
%HOMEPATH%\Og54135B27619\90156.HOB
%HOMEPATH%\Og54135B27619\4815.NQN
%HOMEPATH%\Og54135B27619\C30984W29781.MCL
%HOMEPATH%\Og54135B27619\M44109V7624.YIJ
%HOMEPATH%\Og54135B27619\24088.CNE
%HOMEPATH%\Og54135B27619\36527.BWT
%HOMEPATH%\Og54135B27619\R94222I34251.YIC
%HOMEPATH%\Og54135B27619\V82062R60977.ZHU
%HOMEPATH%\Og54135B27619\X72055Y2957.IVL
%HOMEPATH%\Og54135B27619\K37771P78358.DLY
%HOMEPATH%\Og54135B27619\R18342N2014.MXF
%HOMEPATH%\Og54135B27619\54132.ATU
%HOMEPATH%\Og54135B27619\E29197E62330.IDU
%HOMEPATH%\Og54135B27619\K59675D43711.ZPA
%HOMEPATH%\Og54135B27619\95651.AAK
%HOMEPATH%\Og54135B27619\38003.UXK
%HOMEPATH%\Og54135B27619\6233.QBR
%HOMEPATH%\Og54135B27619\Z79424W70202.XSF
%HOMEPATH%\Og54135B27619\J87015Y57904.UPD
%HOMEPATH%\Og54135B27619\Y14640P39452.YJX
%HOMEPATH%\Og54135B27619\H21109J89828.OIZ
%HOMEPATH%\Og54135B27619\33130.FUL
%HOMEPATH%\Og54135B27619\96008.DNR
%HOMEPATH%\Og54135B27619\10119.PHJ
%HOMEPATH%\Og54135B27619\82130.YYH
%HOMEPATH%\Og54135B27619\99641.CZE
%HOMEPATH%\Og54135B27619\82257.NJX
%HOMEPATH%\Og54135B27619\30759.MAE
%HOMEPATH%\Og54135B27619\Q64275M66542.RYC
%HOMEPATH%\Og54135B27619\81807.XAY
%HOMEPATH%\Og54135B27619\33401.DSD
%HOMEPATH%\Og54135B27619\P88151J28938.EFF
%HOMEPATH%\Og54135B27619\B21285F20103.LPQ
%HOMEPATH%\Og54135B27619\B96609F95526.DIM
%HOMEPATH%\Og54135B27619\81298.UAB
%HOMEPATH%\Og54135B27619\49383.VAJ
%HOMEPATH%\Og54135B27619\H59167A25981.EIT
%HOMEPATH%\Og54135B27619\S20763G13586.WHS
%HOMEPATH%\Og54135B27619\51044.NDE
%HOMEPATH%\Og54135B27619\79302.MDF
%HOMEPATH%\Og54135B27619\A23621H88494.GSG
%HOMEPATH%\Og54135B27619\M68325D53089.WGD
%HOMEPATH%\Og54135B27619\36263.KRM
%HOMEPATH%\Og54135B27619\R74106K56912.RTF
%HOMEPATH%\Og54135B27619\P69491K73331.VAY
%HOMEPATH%\Og54135B27619\11251.VHQ
%HOMEPATH%\Og54135B27619\36477.ABJ
%HOMEPATH%\Og54135B27619\A88982A11558.HLE
%HOMEPATH%\Og54135B27619\C72357I98266.CVL
%HOMEPATH%\Og54135B27619\44181.AOY
%HOMEPATH%\Og54135B27619\38741.RUI
%HOMEPATH%\Og54135B27619\29127.ZAG
%HOMEPATH%\Og54135B27619\H58274O90169.ERP
%HOMEPATH%\Og54135B27619\U33416J79712.DOF
%HOMEPATH%\Og54135B27619\62227.ZYW
%HOMEPATH%\Og54135B27619\48096.JVT
%HOMEPATH%\Og54135B27619\Y92186B67073.WMG
%HOMEPATH%\Og54135B27619\Q19424W26334.VFU
%HOMEPATH%\Og54135B27619\87277.BZF
%HOMEPATH%\Og54135B27619\J11234R48043.AYX
%HOMEPATH%\Og54135B27619\A54285F32858.EZI
%HOMEPATH%\Og54135B27619\55421.FSK
%HOMEPATH%\Og54135B27619\20985.VDB
%HOMEPATH%\Og54135B27619\S55743T68854.YXX
%HOMEPATH%\Og54135B27619\G9519K65665.FEL
%HOMEPATH%\Og54135B27619\L72949B54993.STH
%HOMEPATH%\Og54135B27619\91833.POH
%HOMEPATH%\Og54135B27619\23557.NRB
%HOMEPATH%\Og54135B27619\38180.VOC
%HOMEPATH%\Og54135B27619\H1003W45445.LVR
%HOMEPATH%\Og54135B27619\73252.KFU
%HOMEPATH%\Og54135B27619\38382.IKA
%HOMEPATH%\Og54135B27619\22686.BGV
%HOMEPATH%\Og54135B27619\D67966H43165.ELL
%HOMEPATH%\Og54135B27619\96667.AGN
%HOMEPATH%\Og54135B27619\F41500C50401.CMS
%HOMEPATH%\Og54135B27619\K88561I4631.MVT
%HOMEPATH%\Og54135B27619\Q46430B36439.PGE
%HOMEPATH%\Og54135B27619\O12801B26350.SXF
%HOMEPATH%\Og54135B27619\Q88987Y49415.AID
%HOMEPATH%\Og54135B27619\D65568V7234.MMH
%HOMEPATH%\Og54135B27619\27344.MQA
%HOMEPATH%\Og54135B27619\H24642G43159.XZY
%HOMEPATH%\Og54135B27619\6864.KMV
%HOMEPATH%\Og54135B27619\K55255S85702.NYS
%HOMEPATH%\Og54135B27619\86913.FQG
%HOMEPATH%\Og54135B27619\Z70033U98261.IDX
%HOMEPATH%\Og54135B27619\96874.LQC
%HOMEPATH%\Og54135B27619\U3310O13291.PDP
%HOMEPATH%\Og54135B27619\E56058F28888.DRP
%HOMEPATH%\Og54135B27619\45740.BLM
%HOMEPATH%\Og54135B27619\71436.ENE
%HOMEPATH%\Og54135B27619\R93262Y42976.LAK
%HOMEPATH%\Og54135B27619\13883.ZOI
%HOMEPATH%\Og54135B27619\D60060F73566.UOH
%HOMEPATH%\Og54135B27619\29405.YWM
%HOMEPATH%\Og54135B27619\J78857Y7829.ZBH
%HOMEPATH%\Og54135B27619\K42871K96321.FDK
%HOMEPATH%\Og54135B27619\66032.YBR
%HOMEPATH%\Og54135B27619\L9097Z48814.PUL
%HOMEPATH%\Og54135B27619\Y92617U18140.BEH
%HOMEPATH%\Og54135B27619\89423.MYH
%HOMEPATH%\Og54135B27619\8885.RUO
%HOMEPATH%\Og54135B27619\Y74168D2235.MCR
%HOMEPATH%\Og54135B27619\R31991U9642.YGP
%HOMEPATH%\Og54135B27619\88557.WKA
%HOMEPATH%\Og54135B27619\28688.FML
%HOMEPATH%\Og54135B27619\42609.IXB
%HOMEPATH%\Og54135B27619\85381.LVI
%HOMEPATH%\Og54135B27619\B34006V17743.RVC
%HOMEPATH%\Og54135B27619\M91808P92676.CZJ
%HOMEPATH%\Og54135B27619\M46011G40989.IPC
%HOMEPATH%\Og54135B27619\88809.EFL
%HOMEPATH%\Og54135B27619\14398.OMZ
%HOMEPATH%\Og54135B27619\P30909P89607.FVS
%HOMEPATH%\Og54135B27619\J60744M1611.ZVX
%HOMEPATH%\Og54135B27619\2555.CWT
%HOMEPATH%\Og54135B27619\N36742J2522.VUH
%HOMEPATH%\Og54135B27619\5107.DKU
%HOMEPATH%\Og54135B27619\31437.TES
%HOMEPATH%\Og54135B27619\B2333X1960.SOK
%HOMEPATH%\Og54135B27619\R52458Q83048.YWT
%HOMEPATH%\Og54135B27619\C28519X22514.OTO
%HOMEPATH%\Og54135B27619\54664.CTF
%HOMEPATH%\Og54135B27619\61814.SJV
%HOMEPATH%\Og54135B27619\75220.WAL
%HOMEPATH%\Og54135B27619\T3506J8143.AKQ
%HOMEPATH%\Og54135B27619\B25253C28634.EGC
%HOMEPATH%\Og54135B27619\12065.TSD
%HOMEPATH%\Og54135B27619\37425.RSU
%HOMEPATH%\Og54135B27619\30649.NIQ
%HOMEPATH%\Og54135B27619\69786.LDZ
%HOMEPATH%\Og54135B27619\74195.UGG
%HOMEPATH%\Og54135B27619\Y88786J64137.TWD
%HOMEPATH%\Og54135B27619\34971.JOB
%HOMEPATH%\Og54135B27619\63581.PKQ
%HOMEPATH%\Og54135B27619\71435.WVN
%HOMEPATH%\Og54135B27619\M83793V74554.EED
%HOMEPATH%\Og54135B27619\55723.OON
%HOMEPATH%\Og54135B27619\Q73170N78048.CPU
%HOMEPATH%\Og54135B27619\20157.ZZX
%HOMEPATH%\Og54135B27619\R71734A12423.RLA
%HOMEPATH%\Og54135B27619\22049.RVN
%HOMEPATH%\Og54135B27619\95442.JGQ
%HOMEPATH%\Og54135B27619\I53408J72535.SZF
%HOMEPATH%\Og54135B27619\81323.PPE
%HOMEPATH%\Og54135B27619\69535.PMH
%HOMEPATH%\Og54135B27619\11017.MZI
%HOMEPATH%\Og54135B27619\E60005H92820.DEK
%HOMEPATH%\Og54135B27619\G60037P95332.WQZ
%HOMEPATH%\Og54135B27619\I49315F23871.ACO
%HOMEPATH%\Og54135B27619\12985.VIC
%HOMEPATH%\Og54135B27619\35469.TPI
%HOMEPATH%\Og54135B27619\S14199E75077.EVW
%HOMEPATH%\Og54135B27619\78977.QET
%HOMEPATH%\Og54135B27619\53195.KMP
%HOMEPATH%\Og54135B27619\79139.VIR
%HOMEPATH%\Og54135B27619\P10001J62849.STY
%HOMEPATH%\Og54135B27619\33913.WAN
%HOMEPATH%\Og54135B27619\W48593L53574.MZI
%HOMEPATH%\Og54135B27619\S58324P65692.FGQ
%HOMEPATH%\Og54135B27619\95813.MAZ
%HOMEPATH%\Og54135B27619\X98902X9977.RAE
%HOMEPATH%\Og54135B27619\D2542J49022.OCH
%HOMEPATH%\Og54135B27619\75343.XMZ
%HOMEPATH%\Og54135B27619\K65607F46418.IBM
%HOMEPATH%\Og54135B27619\J32410D13988.ZQF
%HOMEPATH%\Og54135B27619\zdt.exe
%HOMEPATH%\Og54135B27619\54388.PDP
%HOMEPATH%\Og54135B27619\U33299F7474.JJT
%HOMEPATH%\Og54135B27619\M30133T43730.YAB
%HOMEPATH%\Og54135B27619\R68045E44079.CQY
%HOMEPATH%\Og54135B27619\15544.TOT
%HOMEPATH%\Og54135B27619\39058.DJY
%HOMEPATH%\Og54135B27619\67012.DCO
%HOMEPATH%\Og54135B27619\E21775B37850.KNI
%HOMEPATH%\Og54135B27619\23526.SOP
%HOMEPATH%\Og54135B27619\L54368F52682.LCY
%HOMEPATH%\Og54135B27619\I28839O94354.ZDW
%HOMEPATH%\Og54135B27619\17456.GTK
%HOMEPATH%\Og54135B27619\E4656L12088.BON
%HOMEPATH%\Og54135B27619\35860.BDK
%HOMEPATH%\Og54135B27619\74554.AQT
%HOMEPATH%\Og54135B27619\32996.PLP
%HOMEPATH%\Og54135B27619\75794.AQM
%HOMEPATH%\Og54135B27619\58677.JDS
%HOMEPATH%\Og54135B27619\35778.GMH
%HOMEPATH%\Og54135B27619\L27599O65034.JDQ
%HOMEPATH%\Og54135B27619\D21054I13055.OUQ
%HOMEPATH%\Og54135B27619\I14562K45279.XQE
%HOMEPATH%\Og54135B27619\I44428F66994.PGY
%HOMEPATH%\Og54135B27619\W97020E40693.MMU
%HOMEPATH%\Og54135B27619\I17838S92718.WIB
%HOMEPATH%\Og54135B27619\58975.EOM
%HOMEPATH%\Og54135B27619\Q5002N82057.MMA
%HOMEPATH%\Og54135B27619\F68217J16530.SOX
%HOMEPATH%\Og54135B27619\I34213D6280.IHO
%HOMEPATH%\Og54135B27619\U14450I57684.ZIK
%HOMEPATH%\Og54135B27619\81522.MXK
%HOMEPATH%\Og54135B27619\Z87980W6292.BOL
%HOMEPATH%\Og54135B27619\W51796M93224.XRY
%HOMEPATH%\Og54135B27619\45450.BLY
%HOMEPATH%\Og54135B27619\91480.DSY
%HOMEPATH%\Og54135B27619\6742.AEP
%HOMEPATH%\Og54135B27619\A71909X88108.EAU
%HOMEPATH%\Og54135B27619\58889.LTV
%HOMEPATH%\Og54135B27619\98401.NRF
%HOMEPATH%\Og54135B27619\O62837I23099.IIR
%HOMEPATH%\Og54135B27619\U90332U25442.BOC
%HOMEPATH%\Og54135B27619\B68188J11315.NWW
%HOMEPATH%\Og54135B27619\J86887D86520.XPL
%HOMEPATH%\Og54135B27619\10084.FQI
%HOMEPATH%\Og54135B27619\R39746C17233.LYC
%HOMEPATH%\Og54135B27619\47483.AHE
%HOMEPATH%\Og54135B27619\E65414Z85817.AWB
%HOMEPATH%\Og54135B27619\92858.VNC
%HOMEPATH%\Og54135B27619\R65129D61461.TLA
%HOMEPATH%\Og54135B27619\36768.WKM
%HOMEPATH%\Og54135B27619\86664.LCF
%HOMEPATH%\Og54135B27619\O92482A85356.REO
%HOMEPATH%\Og54135B27619\10507.HAE
%HOMEPATH%\Og54135B27619\93555.WNX
%HOMEPATH%\Og54135B27619\11301.MXI
%HOMEPATH%\Og54135B27619\Z38659O88471.WBJ
%HOMEPATH%\Og54135B27619\M44556B22096.IFI
%HOMEPATH%\Og54135B27619\58432.GSN
%HOMEPATH%\Og54135B27619\F64903E94246.VVG
%HOMEPATH%\Og54135B27619\81166.VTL
%HOMEPATH%\Og54135B27619\18040.ZPF
%HOMEPATH%\Og54135B27619\K79451K27846.AOD
%HOMEPATH%\Og54135B27619\X89122G52187.SFW
%HOMEPATH%\Og54135B27619\28397.BRN
%HOMEPATH%\Og54135B27619\64637.GLM
%HOMEPATH%\Og54135B27619\E23635B27352.QLP
%HOMEPATH%\Og54135B27619\55769.BDB
%HOMEPATH%\Og54135B27619\Q66586M38217.TOE
%HOMEPATH%\Og54135B27619\Q8771O14780.JCY
%HOMEPATH%\Og54135B27619\62980.VPN
%HOMEPATH%\Og54135B27619\I31178O45464.NYP
%HOMEPATH%\Og54135B27619\A91003P90530.DTF
%HOMEPATH%\Og54135B27619\B77710S27164.EQI
%HOMEPATH%\Og54135B27619\27358.JKQ
%HOMEPATH%\Og54135B27619\R73049V92686.ZKP
%HOMEPATH%\Og54135B27619\90611.IBP
%HOMEPATH%\Og54135B27619\V37428U60745.EXL
%HOMEPATH%\Og54135B27619\D88783A10530.DOG
%HOMEPATH%\Og54135B27619\L87854A31706.TOM
%HOMEPATH%\Og54135B27619\5869.BID
%HOMEPATH%\Og54135B27619\42067.VPW
%HOMEPATH%\Og54135B27619\95035.EFY
%HOMEPATH%\Og54135B27619\85164.QDD
%HOMEPATH%\Og54135B27619\Y65169K50833.WTN
%HOMEPATH%\Og54135B27619\V30751Z40399.DKW
%HOMEPATH%\Og54135B27619\26247.GZV
%HOMEPATH%\Og54135B27619\82705.IQY
%HOMEPATH%\Og54135B27619\71830.KXF
%HOMEPATH%\Og54135B27619\S34234I29665.UAW
%HOMEPATH%\Og54135B27619\A27540O65735.TDS
%HOMEPATH%\Og54135B27619\49926.PHK
%HOMEPATH%\Og54135B27619\Y29250Q50939.PGW
%HOMEPATH%\Og54135B27619\5640.VBV
%HOMEPATH%\Og54135B27619\M37217G86138.OYN
%HOMEPATH%\Og54135B27619\H79260O28695.AXD
%HOMEPATH%\Og54135B27619\C89706H92197.YVA
%HOMEPATH%\Og54135B27619\E86962I42217.NTF
%HOMEPATH%\Og54135B27619\V75869C66149.TMH
%HOMEPATH%\Og54135B27619\Q61801U43275.VBR
%HOMEPATH%\Og54135B27619\42090.TUF
%HOMEPATH%\Og54135B27619\R24029V81356.LBG
%HOMEPATH%\Og54135B27619\17999.QTT
%HOMEPATH%\Og54135B27619\M56743K28611.CUG
%HOMEPATH%\Og54135B27619\54247.GNQ
%HOMEPATH%\Og54135B27619\29730.XNF
%HOMEPATH%\Og54135B27619\H99812Z90129.VFX
%HOMEPATH%\Og54135B27619\52565.XCH
%HOMEPATH%\Og54135B27619\P28857C80112.AIU
%HOMEPATH%\Og54135B27619\T75363E86665.IEE
%HOMEPATH%\Og54135B27619\F96948G72832.GGY
%HOMEPATH%\Og54135B27619\E44236B56277.EDO
%HOMEPATH%\Og54135B27619\86047.HMX
%HOMEPATH%\Og54135B27619\P86183Y15727.GSB
%HOMEPATH%\Og54135B27619\33695.FFD
%HOMEPATH%\Og54135B27619\Q85256A70935.ZHH
%HOMEPATH%\Og54135B27619\77274.WQE
%HOMEPATH%\Og54135B27619\O77914S97314.ZJC
%HOMEPATH%\Og54135B27619\39412.GYN
%HOMEPATH%\Og54135B27619\42805.HRF
%HOMEPATH%\Og54135B27619\P47752B52757.FVG
%HOMEPATH%\Og54135B27619\14612.YLM
%HOMEPATH%\Og54135B27619\67544.TXS
%HOMEPATH%\Og54135B27619\48910.PTD
%HOMEPATH%\Og54135B27619\88399.YCF
%HOMEPATH%\Og54135B27619\9068.PGX
%HOMEPATH%\Og54135B27619\S91729I31878.SBA
%HOMEPATH%\Og54135B27619\28354.ENB
%HOMEPATH%\Og54135B27619\39551.ABQ
%HOMEPATH%\Og54135B27619\97533.HIU
%HOMEPATH%\Og54135B27619\Z2774Y77341.EHU
%HOMEPATH%\Og54135B27619\U48407H62220.CKY
%HOMEPATH%\Og54135B27619\23252.ORN
%HOMEPATH%\Og54135B27619\41506.OXO
%HOMEPATH%\Og54135B27619\R36756M42483.HTV
%HOMEPATH%\Og54135B27619\R42963A33772.ZOL
%HOMEPATH%\Og54135B27619\93869.ZVX
%HOMEPATH%\Og54135B27619\93389.ASB
%HOMEPATH%\Og54135B27619\G63734Y28567.XHB
%HOMEPATH%\Og54135B27619\G18205T97605.QAH
%HOMEPATH%\Og54135B27619\84245.YXP
%HOMEPATH%\Og54135B27619\O31960H24006.VWW
%HOMEPATH%\Og54135B27619\Z61136P10014.VGH
%HOMEPATH%\Og54135B27619\80949.UIH
%HOMEPATH%\Og54135B27619\L25526C40186.VNM
%HOMEPATH%\Og54135B27619\97136.UWU
%HOMEPATH%\Og54135B27619\94343.KTQ
%HOMEPATH%\Og54135B27619\6037.MZJ
%HOMEPATH%\Og54135B27619\55389.KGE
%HOMEPATH%\Og54135B27619\Z35589K25436.WOT
%HOMEPATH%\Og54135B27619\E61605G88136.WQP
%HOMEPATH%\Og54135B27619\45195.LKO
%HOMEPATH%\Og54135B27619\O61017U51624.QNH
%HOMEPATH%\Og54135B27619\97333.NZJ
%HOMEPATH%\Og54135B27619\X77324J82941.SHT
%HOMEPATH%\Og54135B27619\Q29488L22638.DVA
%HOMEPATH%\Og54135B27619\70908.UBP
%HOMEPATH%\Og54135B27619\27625.NZD
%HOMEPATH%\Og54135B27619\N48637A98362.MTK
%HOMEPATH%\Og54135B27619\Z6497F99860.TDC
%HOMEPATH%\Og54135B27619\82848.ZCM
%HOMEPATH%\Og54135B27619\51472.YYO
%HOMEPATH%\Og54135B27619\P62371K84864.NRC
%HOMEPATH%\Og54135B27619\57916.LNT
%HOMEPATH%\Og54135B27619\E94957F45097.APG
%HOMEPATH%\Og54135B27619\21113.KZD
%HOMEPATH%\Og54135B27619\57329.DHQ
%HOMEPATH%\Og54135B27619\80306.VFL
%HOMEPATH%\Og54135B27619\Y32208D73139.FTG
%HOMEPATH%\Og54135B27619\R51332F99574.AOE
%HOMEPATH%\Og54135B27619\L95018I5222.FBK
%HOMEPATH%\Og54135B27619\T95190A53125.XDK
%HOMEPATH%\Og54135B27619\W8526V46702.ZQS
%HOMEPATH%\Og54135B27619\B88174E2363.XVO
%HOMEPATH%\Og54135B27619\16911.LUY
%HOMEPATH%\Og54135B27619\G31854P33505.AWR
%HOMEPATH%\Og54135B27619\G53027T2534.CLZ
%HOMEPATH%\Og54135B27619\T31660S29705.DQA
%HOMEPATH%\Og54135B27619\93209.EPH

Sets the 'hidden' attribute to the following files:

%HOMEPATH%\Cp62640F48006.AP5

Deletes the following files:

%HOMEPATH%\Cp62640F48006.AP5
%TEMP%\aut1.tmp

Moves the following system files:

from %WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe to %APPDATA%\Microsoft\WinUpdater.exe

Miscellaneous:

Searches for the following windows:

ClassName: 'Indicator' WindowName: '(null)'
ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'EDIT' WindowName: '(null)'

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations

Free trial