マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

BackDoor.Comet.770

Added to the Dr.Web virus database: 2013-11-18

Virus description added:

Technical Information

To ensure autorun and distribution:
Modifies the following registry keys:
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'XKSBW' = '%HOMEPATH%\XKSBW\start.vbs'
Malicious functions:
To complicate detection of its presence in the operating system,
blocks execution of the following system utilities:
  • Windows Task Manager (Taskmgr)
Creates and executes the following:
  • '%TEMP%\RegSvcs.exe'
  • '%HOMEPATH%\XKSBW\Autoit3310029.exe' JDTPNDBK.dat
  • '%HOMEPATH%\XKSBW\Autoit3310029.exe' 383605.dat
Executes the following:
  • '<SYSTEM32>\wscript.exe' "%HOMEPATH%\XKSBW\run.vbs"
Modifies file system :
Creates the following files:
  • %HOMEPATH%\XKSBW\8077.YPF
  • %HOMEPATH%\XKSBW\U85537.GGD
  • %HOMEPATH%\XKSBW\71886.MMR
  • %HOMEPATH%\XKSBW\56451.TPY
  • %HOMEPATH%\XKSBW\F92375.JUM
  • %HOMEPATH%\XKSBW\12864.LIF
  • %HOMEPATH%\XKSBW\D64003.MEA
  • %HOMEPATH%\XKSBW\43054.EPC
  • %HOMEPATH%\XKSBW\S54653.IFE
  • %HOMEPATH%\XKSBW\75658.OYB
  • %HOMEPATH%\XKSBW\M60134.JMP
  • %HOMEPATH%\XKSBW\R20400.HDE
  • %HOMEPATH%\XKSBW\15382.JOA
  • %HOMEPATH%\XKSBW\Y62791.ZNW
  • %HOMEPATH%\XKSBW\A27149.FIO
  • %HOMEPATH%\XKSBW\J26464.QNU
  • %HOMEPATH%\XKSBW\1773.WTR
  • %HOMEPATH%\XKSBW\U53998.OID
  • %HOMEPATH%\XKSBW\R78259.BIK
  • %HOMEPATH%\XKSBW\W82349.LOR
  • %HOMEPATH%\XKSBW\I65339.ZMW
  • %HOMEPATH%\XKSBW\V17421.VHV
  • %HOMEPATH%\XKSBW\33154.GQT
  • %HOMEPATH%\XKSBW\71092.PIE
  • %HOMEPATH%\XKSBW\69471.XTH
  • %HOMEPATH%\XKSBW\P31170.UFX
  • %HOMEPATH%\XKSBW\12549.RLF
  • %HOMEPATH%\XKSBW\10555.EDL
  • %HOMEPATH%\XKSBW\8085.WFK
  • %HOMEPATH%\XKSBW\C81409.UJQ
  • %HOMEPATH%\XKSBW\52199.VPG
  • %HOMEPATH%\XKSBW\25569.NQZ
  • %HOMEPATH%\XKSBW\29482.BLR
  • %HOMEPATH%\XKSBW\L70160.BLP
  • %HOMEPATH%\XKSBW\Y10798.FOX
  • %HOMEPATH%\XKSBW\33592.VGB
  • %HOMEPATH%\XKSBW\4875.QJN
  • %HOMEPATH%\XKSBW\A39891.WJW
  • %HOMEPATH%\XKSBW\M34050.RVO
  • %HOMEPATH%\XKSBW\N45907.KTP
  • %HOMEPATH%\XKSBW\F65857.YKH
  • %HOMEPATH%\XKSBW\20047.RMO
  • %HOMEPATH%\XKSBW\W88539.OBN
  • %HOMEPATH%\XKSBW\G97528.ADU
  • %HOMEPATH%\XKSBW\26181.MYA
  • %HOMEPATH%\XKSBW\N16110.ZAQ
  • %HOMEPATH%\XKSBW\N49714.DUJ
  • %HOMEPATH%\XKSBW\47513.DUW
  • %HOMEPATH%\XKSBW\P40743.RHQ
  • %HOMEPATH%\XKSBW\F69446.EWM
  • %HOMEPATH%\XKSBW\62246.JWO
  • %HOMEPATH%\XKSBW\S37243.SDO
  • %HOMEPATH%\XKSBW\56412.BAU
  • %HOMEPATH%\XKSBW\E74442.NGI
  • %HOMEPATH%\XKSBW\10691.XYD
  • %HOMEPATH%\XKSBW\36443.JQQ
  • %HOMEPATH%\XKSBW\Q67152.EXY
  • %HOMEPATH%\XKSBW\E60227.JTP
  • %HOMEPATH%\XKSBW\37097.UFQ
  • %HOMEPATH%\XKSBW\31909.GLC
  • %HOMEPATH%\XKSBW\47021.HTL
  • %HOMEPATH%\XKSBW\5798.ZMV
  • %HOMEPATH%\XKSBW\18564.HSX
  • %HOMEPATH%\XKSBW\L73052.PFS
  • %HOMEPATH%\XKSBW\64271.VED
  • %HOMEPATH%\XKSBW\J14024.UHN
  • %HOMEPATH%\XKSBW\D28226.MVM
  • %HOMEPATH%\XKSBW\15842.WBC
  • %HOMEPATH%\XKSBW\S30120.PFM
  • %HOMEPATH%\XKSBW\97147.GIB
  • %HOMEPATH%\XKSBW\65515.BZL
  • %HOMEPATH%\XKSBW\47914.LIG
  • %HOMEPATH%\XKSBW\K50034.QRD
  • %HOMEPATH%\XKSBW\5310.CAU
  • %HOMEPATH%\XKSBW\Q59361.YWX
  • %HOMEPATH%\XKSBW\J98545.ZCB
  • %HOMEPATH%\XKSBW\U94581.USO
  • %HOMEPATH%\XKSBW\94390.YUY
  • %HOMEPATH%\XKSBW\89875.LEH
  • %HOMEPATH%\XKSBW\K13231.BWL
  • %HOMEPATH%\XKSBW\93616.JNG
  • %HOMEPATH%\XKSBW\35767.LGK
  • %HOMEPATH%\XKSBW\77639.EZE
  • %HOMEPATH%\XKSBW\Q97791.WMP
  • %HOMEPATH%\XKSBW\60821.SYT
  • %HOMEPATH%\XKSBW\Y50723.LAW
  • %HOMEPATH%\XKSBW\57299.BWZ
  • %HOMEPATH%\XKSBW\47382.MNF
  • %HOMEPATH%\XKSBW\4714.YLF
  • %HOMEPATH%\XKSBW\W2903.GFM
  • %HOMEPATH%\XKSBW\L32596.BZC
  • %HOMEPATH%\XKSBW\27491.IDB
  • %HOMEPATH%\XKSBW\J89280.YSJ
  • %HOMEPATH%\XKSBW\64592.KJF
  • %HOMEPATH%\XKSBW\E31285.QDF
  • %HOMEPATH%\XKSBW\W5746.MNA
  • %HOMEPATH%\XKSBW\Q57705.BGL
  • %HOMEPATH%\XKSBW\U44553.RIU
  • %HOMEPATH%\XKSBW\14151.XCQ
  • %HOMEPATH%\XKSBW\S34726.XOS
  • %HOMEPATH%\XKSBW\V85612.GVY
  • %HOMEPATH%\XKSBW\T22816.SUV
  • %HOMEPATH%\XKSBW\Z10632.ZIA
  • %HOMEPATH%\XKSBW\33232.SGD
  • %HOMEPATH%\XKSBW\82252.SYL
  • %HOMEPATH%\XKSBW\G65412.XMB
  • %HOMEPATH%\XKSBW\74844.QVI
  • %HOMEPATH%\XKSBW\5186.FMX
  • %HOMEPATH%\XKSBW\52349.HKL
  • %HOMEPATH%\XKSBW\83060.TCU
  • %HOMEPATH%\XKSBW\X52059.EWG
  • %HOMEPATH%\XKSBW\O79523.DBP
  • %HOMEPATH%\XKSBW\27480.STP
  • %HOMEPATH%\XKSBW\22371.OVE
  • %HOMEPATH%\XKSBW\24290.GCN
  • %HOMEPATH%\XKSBW\6541.ZQW
  • %HOMEPATH%\XKSBW\E32798.HJS
  • %HOMEPATH%\XKSBW\B18533.UCQ
  • %HOMEPATH%\XKSBW\88387.VMP
  • %HOMEPATH%\XKSBW\58946.NKO
  • %HOMEPATH%\XKSBW\Q84823.ACU
  • %HOMEPATH%\XKSBW\38562.BZI
  • %HOMEPATH%\XKSBW\31172.WPJ
  • %HOMEPATH%\XKSBW\B15343.VGD
  • %HOMEPATH%\XKSBW\79380.PSQ
  • %HOMEPATH%\XKSBW\J47331.SAQ
  • %HOMEPATH%\XKSBW\26290.CRV
  • %HOMEPATH%\XKSBW\83715.PPZ
  • %HOMEPATH%\XKSBW\86495.FOQ
  • %HOMEPATH%\XKSBW\G90687.NDX
  • %HOMEPATH%\XKSBW\X42005.IOD
  • %HOMEPATH%\XKSBW\N2844.NDW
  • %HOMEPATH%\XKSBW\91870.BLV
  • %HOMEPATH%\XKSBW\78462.NKK
  • %HOMEPATH%\XKSBW\20900.VPV
  • %HOMEPATH%\XKSBW\J6223.ALR
  • %HOMEPATH%\XKSBW\77183.OZT
  • %HOMEPATH%\XKSBW\P20484.CZV
  • %HOMEPATH%\XKSBW\39485.EPQ
  • %HOMEPATH%\XKSBW\12452.ZHP
  • %HOMEPATH%\XKSBW\D71713.ASW
  • %HOMEPATH%\XKSBW\88277.UUC
  • %HOMEPATH%\XKSBW\T67622.YCD
  • %HOMEPATH%\XKSBW\S60093.XZK
  • %HOMEPATH%\XKSBW\N10031.LBQ
  • %HOMEPATH%\XKSBW\59164.GIZ
  • %HOMEPATH%\XKSBW\J77583.KJW
  • %HOMEPATH%\XKSBW\38564.QFH
  • %HOMEPATH%\XKSBW\U11419.DHK
  • %HOMEPATH%\XKSBW\68516.WKR
  • %HOMEPATH%\XKSBW\1450.VJP
  • %HOMEPATH%\XKSBW\22926.XKO
  • %HOMEPATH%\XKSBW\11023.CMC
  • %HOMEPATH%\XKSBW\E34341.ZWT
  • %HOMEPATH%\XKSBW\C62992.ROZ
  • %HOMEPATH%\XKSBW\23830.RBX
  • %HOMEPATH%\XKSBW\L60418.HDM
  • %HOMEPATH%\XKSBW\T79860.DKK
  • %HOMEPATH%\XKSBW\S97020.NWB
  • %HOMEPATH%\XKSBW\B9366.PLV
  • %HOMEPATH%\XKSBW\O60882.YSH
  • %HOMEPATH%\XKSBW\41482.YIX
  • %HOMEPATH%\XKSBW\K81169.SDF
  • %HOMEPATH%\XKSBW\H79204.ZET
  • %HOMEPATH%\XKSBW\41701.PEM
  • %HOMEPATH%\XKSBW\48470.AZY
  • %HOMEPATH%\XKSBW\30983.DJZ
  • %HOMEPATH%\XKSBW\51885.REY
  • %HOMEPATH%\XKSBW\64554.YYQ
  • %HOMEPATH%\XKSBW\N98597.WML
  • %HOMEPATH%\XKSBW\start.cmd
  • %HOMEPATH%\XKSBW\JDTPNDBK.dat
  • %TEMP%\RegSvcs.exe
  • %HOMEPATH%\XKSBW\start.vbs
  • %HOMEPATH%\XKSBW\82990.DHD
  • %HOMEPATH%\XKSBW\38318.CJK
  • %HOMEPATH%\XKSBW\MJQOP
  • %HOMEPATH%\XKSBW\F50819.ZJV
  • %HOMEPATH%\XKSBW\39812.BSR
  • %HOMEPATH%\XKSBW\66074.ESI
  • %HOMEPATH%\XKSBW\P32237.XRR
  • %HOMEPATH%\XKSBW\26207.SNM
  • %HOMEPATH%\XKSBW\15014.NPG
  • %HOMEPATH%\XKSBW\L12509.TUN
  • %HOMEPATH%\XKSBW\Z34956.LHE
  • %HOMEPATH%\XKSBW\62304.FLO
  • %HOMEPATH%\XKSBW\G76142.ADV
  • %HOMEPATH%\XKSBW\Q69954.RPU
  • %HOMEPATH%\XKSBW\31514.UXJ
  • %HOMEPATH%\XKSBW\19525.FQT
  • %HOMEPATH%\XKSBW\P65914.BCS
  • %HOMEPATH%\XKSBW\W14105.JPJ
  • %HOMEPATH%\XKSBW\H80721.OKX
  • %HOMEPATH%\XKSBW\F51431.VBO
  • %HOMEPATH%\XKSBW\1789.NVU
  • %HOMEPATH%\XKSBW\B57597.EQF
  • %HOMEPATH%\XKSBW\51759.HVE
  • %HOMEPATH%\XKSBW\U84107.GOG
  • %HOMEPATH%\XKSBW\26609.VPV
  • %HOMEPATH%\XKSBW\95118.LCA
  • %HOMEPATH%\XKSBW\41454.NLA
  • %HOMEPATH%\XKSBW\20779.IZX
  • %HOMEPATH%\XKSBW\99629.AKN
  • %HOMEPATH%\XKSBW\X34949.YEY
  • %HOMEPATH%\XKSBW\D26060.EYZ
  • %HOMEPATH%\XKSBW\83417.REQ
  • %HOMEPATH%\XKSBW\30688.IRS
  • %HOMEPATH%\XKSBW\92938.BFK
  • %HOMEPATH%\XKSBW\35164.VLQ
  • %HOMEPATH%\XKSBW\V56473.BTJ
  • %HOMEPATH%\XKSBW\8425.CVN
  • %HOMEPATH%\XKSBW\70186.HKQ
  • %HOMEPATH%\XKSBW\55681.DZY
  • %HOMEPATH%\XKSBW\S11475.EHQ
  • %HOMEPATH%\XKSBW\27118.DXW
  • %HOMEPATH%\XKSBW\97977.RGP
  • %HOMEPATH%\XKSBW\51679.JWS
  • %HOMEPATH%\XKSBW\24303.WGP
  • %HOMEPATH%\XKSBW\72429.DUB
  • %HOMEPATH%\XKSBW\90568.QXR
  • %HOMEPATH%\XKSBW\Q38010.QBS
  • %HOMEPATH%\XKSBW\E33529.TQE
  • %HOMEPATH%\XKSBW\95362.UYL
  • %HOMEPATH%\XKSBW\94587.GHY
  • %HOMEPATH%\XKSBW\20721.QFU
  • %HOMEPATH%\XKSBW\8189.SAP
  • %HOMEPATH%\XKSBW\A61638.MJA
  • %HOMEPATH%\XKSBW\M58671.QFW
  • %HOMEPATH%\XKSBW\Q56110.LGS
  • %HOMEPATH%\XKSBW\O34148.JRI
  • %HOMEPATH%\XKSBW\5221.FBS
  • %HOMEPATH%\XKSBW\9750.OWD
  • %HOMEPATH%\XKSBW\23793.WSG
  • %HOMEPATH%\XKSBW\F28029.LQD
  • %HOMEPATH%\XKSBW\U51998.KKS
  • %HOMEPATH%\XKSBW\S26953.KUY
  • %HOMEPATH%\XKSBW\X1686.UXG
  • %HOMEPATH%\XKSBW\84023.FCO
  • %HOMEPATH%\XKSBW\32229.AKY
  • %HOMEPATH%\XKSBW\18305.IEG
  • %HOMEPATH%\XKSBW\I58152.TZU
  • %HOMEPATH%\XKSBW\K22252.LZD
  • %HOMEPATH%\XKSBW\X40620.WNG
  • %HOMEPATH%\XKSBW\S14934.QMP
  • %HOMEPATH%\XKSBW\X61838.YNO
  • %HOMEPATH%\XKSBW\44661.AJP
  • %HOMEPATH%\XKSBW\91085.TQH
  • %HOMEPATH%\XKSBW\Y51478.NAP
  • %HOMEPATH%\XKSBW\A97510.DCO
  • %HOMEPATH%\XKSBW\13740.AEO
  • %HOMEPATH%\XKSBW\I58620.HKT
  • %HOMEPATH%\XKSBW\92095.JJG
  • %HOMEPATH%\XKSBW\17401.HFF
  • %HOMEPATH%\XKSBW\38749.SLI
  • %HOMEPATH%\XKSBW\40051.IJZ
  • %HOMEPATH%\XKSBW\29116.YQN
  • %HOMEPATH%\XKSBW\J8678.HJT
  • %HOMEPATH%\XKSBW\Q20916.VVL
  • %HOMEPATH%\XKSBW\B84992.CEO
  • %HOMEPATH%\XKSBW\C22739.NDN
  • %HOMEPATH%\XKSBW\69665.UTW
  • %HOMEPATH%\XKSBW\42924.XAL
  • %HOMEPATH%\XKSBW\S96304.PEE
  • %HOMEPATH%\XKSBW\40033.LCN
  • %HOMEPATH%\XKSBW\33106.GUG
  • %HOMEPATH%\XKSBW\J4230.WKD
  • %HOMEPATH%\XKSBW\95449.KPI
  • %HOMEPATH%\XKSBW\9944.DUT
  • %HOMEPATH%\XKSBW\N6044.SJV
  • %HOMEPATH%\XKSBW\47623.KSF
  • %HOMEPATH%\XKSBW\D24681.GJW
  • %HOMEPATH%\XKSBW\F47765.ALQ
  • %HOMEPATH%\XKSBW\37921.CJR
  • %HOMEPATH%\XKSBW\W73400.GYR
  • %HOMEPATH%\XKSBW\F82268.KLK
  • %HOMEPATH%\XKSBW\O35434.XFI
  • %HOMEPATH%\XKSBW\98829.PVB
  • %HOMEPATH%\XKSBW\D58002.HDO
  • %HOMEPATH%\XKSBW\A53273.ZGG
  • %HOMEPATH%\XKSBW\37503.RTI
  • %HOMEPATH%\XKSBW\C7804.YUO
  • %HOMEPATH%\XKSBW\38003.CXO
  • %HOMEPATH%\XKSBW\D29599.FDD
  • %HOMEPATH%\XKSBW\M51863.HVW
  • %HOMEPATH%\XKSBW\76348.XAN
  • %HOMEPATH%\XKSBW\Y1667.RFX
  • %HOMEPATH%\XKSBW\K91267.BLF
  • %HOMEPATH%\XKSBW\30246.OQK
  • %HOMEPATH%\XKSBW\I42618.SOM
  • %HOMEPATH%\XKSBW\30842.HHI
  • %HOMEPATH%\XKSBW\I23766.QVM
  • %HOMEPATH%\XKSBW\Z77406.RWJ
  • %HOMEPATH%\XKSBW\Y80128.KPU
  • %HOMEPATH%\XKSBW\63939.NOE
  • %HOMEPATH%\XKSBW\36790.KCR
  • %HOMEPATH%\XKSBW\62481.BXA
  • %HOMEPATH%\XKSBW\G68435.QRV
  • %HOMEPATH%\XKSBW\92174.CKU
  • %HOMEPATH%\XKSBW\6120.JNA
  • %HOMEPATH%\XKSBW\60823.LJE
  • %HOMEPATH%\XKSBW\T56189.RDN
  • %HOMEPATH%\XKSBW\K96868.HPO
  • %HOMEPATH%\XKSBW\47357.XXT
  • %HOMEPATH%\XKSBW\Z44608.STY
  • %HOMEPATH%\XKSBW\X80703.CLO
  • %HOMEPATH%\XKSBW\33380.WDP
  • %HOMEPATH%\XKSBW\M98010.HCV
  • %HOMEPATH%\XKSBW\35202.MNP
  • %HOMEPATH%\XKSBW\E14086.TDC
  • %HOMEPATH%\XKSBW\44211.PUS
  • %HOMEPATH%\XKSBW\58834.IKV
  • %HOMEPATH%\XKSBW\60970.LHL
  • %HOMEPATH%\XKSBW\22098.JBE
  • %HOMEPATH%\XKSBW\S23525.HKD
  • %HOMEPATH%\XKSBW\D57651.HOU
  • %HOMEPATH%\XKSBW\S73338.CUD
  • %HOMEPATH%\XKSBW\A93635.LNN
  • %HOMEPATH%\XKSBW\P79444.MHR
  • %HOMEPATH%\XKSBW\Y99856.HJJ
  • %HOMEPATH%\XKSBW\47654.TTI
  • %HOMEPATH%\XKSBW\C41286.CIX
  • %HOMEPATH%\XKSBW\R6300.YGC
  • %HOMEPATH%\XKSBW\Q34570.MLK
  • %HOMEPATH%\XKSBW\H45853.BBY
  • %HOMEPATH%\XKSBW\15335.HZY
  • %HOMEPATH%\XKSBW\B87758.MSV
  • %HOMEPATH%\XKSBW\35082.HYI
  • %HOMEPATH%\XKSBW\17334.WGC
  • %HOMEPATH%\XKSBW\26693.XTZ
  • %HOMEPATH%\XKSBW\H67215.EOV
  • %HOMEPATH%\XKSBW\Z87184.FMH
  • %HOMEPATH%\XKSBW\I32165.NJY
  • %HOMEPATH%\XKSBW\98242.OWF
  • %HOMEPATH%\XKSBW\52643.SKP
  • %HOMEPATH%\XKSBW\39711.AQQ
  • %HOMEPATH%\XKSBW\39110.WEL
  • %HOMEPATH%\XKSBW\K28544.RKJ
  • %HOMEPATH%\XKSBW\E90792.KCO
  • %HOMEPATH%\XKSBW\62541.VIS
  • %HOMEPATH%\XKSBW\U65237.KVG
  • %HOMEPATH%\XKSBW\run.vbs
  • %HOMEPATH%\XKSBW\settings.ini
  • %HOMEPATH%\XKSBW\7946.AXO
  • %HOMEPATH%\XKSBW\S32652.RUW
  • %HOMEPATH%\XKSBW\352933.dat
  • %HOMEPATH%\XKSBW\383605.dat
  • %HOMEPATH%\XKSBW\Autoit3310029.exe
  • %HOMEPATH%\XKSBW\444129.dat
  • %HOMEPATH%\XKSBW\H58756.CTW
  • %HOMEPATH%\XKSBW\N53829.CFX
  • %HOMEPATH%\XKSBW\S86316.LDK
  • %HOMEPATH%\XKSBW\F29987.IOJ
  • %HOMEPATH%\XKSBW\C69846.LNQ
  • %HOMEPATH%\XKSBW\J15517.NTN
  • %HOMEPATH%\XKSBW\M66580.XPV
  • %HOMEPATH%\XKSBW\C84992.YDY
  • %HOMEPATH%\XKSBW\U7860.AAK
  • %HOMEPATH%\XKSBW\F86562.ZVE
  • %HOMEPATH%\XKSBW\35453.SAU
  • %HOMEPATH%\XKSBW\14650.VZY
  • %HOMEPATH%\XKSBW\49976.SXY
  • %HOMEPATH%\XKSBW\22326.SIH
  • %HOMEPATH%\XKSBW\38788.RIZ
  • %HOMEPATH%\XKSBW\46705.FJZ
  • %HOMEPATH%\XKSBW\61789.MEM
  • %HOMEPATH%\XKSBW\M53840.FOH
  • %HOMEPATH%\XKSBW\36931.NEO
  • %HOMEPATH%\XKSBW\G50186.NTM
  • %HOMEPATH%\XKSBW\13470.RIF
  • %HOMEPATH%\XKSBW\94723.WJN
  • %HOMEPATH%\XKSBW\49066.PMO
  • %HOMEPATH%\XKSBW\C67639.DAU
  • %HOMEPATH%\XKSBW\26414.KWL
  • %HOMEPATH%\XKSBW\8500.IPV
  • %HOMEPATH%\XKSBW\F65243.GDV
  • %HOMEPATH%\XKSBW\Q4830.KAQ
  • %HOMEPATH%\XKSBW\72522.AZL
  • %HOMEPATH%\XKSBW\E29010.YSJ
  • %HOMEPATH%\XKSBW\49704.UQO
  • %HOMEPATH%\XKSBW\P48835.SHQ
  • %HOMEPATH%\XKSBW\76208.FAA
  • %HOMEPATH%\XKSBW\9204.CIQ
  • %HOMEPATH%\XKSBW\F33266.UCF
  • %HOMEPATH%\XKSBW\D29602.VJG
  • %HOMEPATH%\XKSBW\D20280.GWI
  • %HOMEPATH%\XKSBW\X9808.BJZ
  • %HOMEPATH%\XKSBW\83660.YKB
  • %HOMEPATH%\XKSBW\G95556.OYI
  • %HOMEPATH%\XKSBW\J43435.PTH
  • %HOMEPATH%\XKSBW\S66711.KWG
  • %HOMEPATH%\XKSBW\M4917.PEG
  • %HOMEPATH%\XKSBW\B62245.OKS
  • %HOMEPATH%\XKSBW\43836.RBT
  • %HOMEPATH%\XKSBW\L50443.DUP
  • %HOMEPATH%\XKSBW\N86157.ZII
  • %HOMEPATH%\XKSBW\91199.HEN
  • %HOMEPATH%\XKSBW\22935.ITN
  • %HOMEPATH%\XKSBW\Y2221.XQK
  • %HOMEPATH%\XKSBW\E81616.JKY
  • %HOMEPATH%\XKSBW\66587.XXU
  • %HOMEPATH%\XKSBW\66694.BRG
  • %HOMEPATH%\XKSBW\68851.CCL
  • %HOMEPATH%\XKSBW\J56204.PLE
  • %HOMEPATH%\XKSBW\K78576.JYF
  • %HOMEPATH%\XKSBW\13789.HNN
  • %HOMEPATH%\XKSBW\N20487.LJY
  • %HOMEPATH%\XKSBW\U8280.WWD
  • %HOMEPATH%\XKSBW\L24215.SKM
  • %HOMEPATH%\XKSBW\I42528.RCT
  • %HOMEPATH%\XKSBW\53587.THP
  • %HOMEPATH%\XKSBW\61596.IQS
  • %HOMEPATH%\XKSBW\A58710.ZVM
  • %HOMEPATH%\XKSBW\I17965.VFR
  • %HOMEPATH%\XKSBW\E22323.KMK
  • %HOMEPATH%\XKSBW\G24059.WTG
  • %HOMEPATH%\XKSBW\F67943.NHQ
  • %HOMEPATH%\XKSBW\31944.OKB
  • %HOMEPATH%\XKSBW\K52929.RCD
  • %HOMEPATH%\XKSBW\U84834.YTJ
  • %HOMEPATH%\XKSBW\60538.TWT
  • %HOMEPATH%\XKSBW\53256.XHT
  • %HOMEPATH%\XKSBW\58021.IYV
  • %HOMEPATH%\XKSBW\T77225.DDE
  • %HOMEPATH%\XKSBW\U13553.OMV
  • %HOMEPATH%\XKSBW\9585.DEU
  • %HOMEPATH%\XKSBW\73184.PBA
  • %HOMEPATH%\XKSBW\9412.BCP
  • %HOMEPATH%\XKSBW\L97097.JCC
  • %HOMEPATH%\XKSBW\Y43982.LUT
  • %HOMEPATH%\XKSBW\34705.HDN
  • %HOMEPATH%\XKSBW\D31332.WON
  • %HOMEPATH%\XKSBW\43566.FWB
  • %HOMEPATH%\XKSBW\45221.QIC
  • %HOMEPATH%\XKSBW\F51229.IHW
  • %HOMEPATH%\XKSBW\U22627.FIR
  • %HOMEPATH%\XKSBW\27107.DFS
  • %HOMEPATH%\XKSBW\X12855.CRW
  • %HOMEPATH%\XKSBW\42998.JNR
  • %HOMEPATH%\XKSBW\H97494.TMX
  • %HOMEPATH%\XKSBW\A35571.LXL
  • %HOMEPATH%\XKSBW\80783.MFD
  • %HOMEPATH%\XKSBW\B33434.YNK
  • %HOMEPATH%\XKSBW\F68100.FYN
  • %HOMEPATH%\XKSBW\46680.EMY
  • %HOMEPATH%\XKSBW\Z72295.SOT
  • %HOMEPATH%\XKSBW\33336.IAQ
  • %HOMEPATH%\XKSBW\16258.YCQ
  • %HOMEPATH%\XKSBW\3409.BZR
  • %HOMEPATH%\XKSBW\82501.HGR
  • %HOMEPATH%\XKSBW\V16946.FCF
  • %HOMEPATH%\XKSBW\82827.VJH
  • %HOMEPATH%\XKSBW\93768.PNA
  • %HOMEPATH%\XKSBW\72954.JXF
  • %HOMEPATH%\XKSBW\81631.MBX
  • %HOMEPATH%\XKSBW\51979.YZH
  • %HOMEPATH%\XKSBW\21174.YKN
  • %HOMEPATH%\XKSBW\C55511.XUZ
  • %HOMEPATH%\XKSBW\W20595.OOE
  • %HOMEPATH%\XKSBW\E98476.ZWN
  • %HOMEPATH%\XKSBW\78059.YOH
  • %HOMEPATH%\XKSBW\53105.CIR
  • %HOMEPATH%\XKSBW\T20550.YSD
  • %HOMEPATH%\XKSBW\A13871.AMA
  • %HOMEPATH%\XKSBW\C3706.NRU
  • %HOMEPATH%\XKSBW\O18332.JZX
  • %HOMEPATH%\XKSBW\11571.JOP
  • %HOMEPATH%\XKSBW\V38794.RDI
  • %HOMEPATH%\XKSBW\C47279.EOU
  • %HOMEPATH%\XKSBW\9109.XJS
  • %HOMEPATH%\XKSBW\R90451.XHC
  • %HOMEPATH%\XKSBW\52746.GAH
  • %HOMEPATH%\XKSBW\19708.GJZ
  • %HOMEPATH%\XKSBW\H19238.SCD
  • %HOMEPATH%\XKSBW\D86546.LGM
  • %HOMEPATH%\XKSBW\H59752.JNX
  • %HOMEPATH%\XKSBW\X5255.GMZ
  • %HOMEPATH%\XKSBW\69680.CHT
  • %HOMEPATH%\XKSBW\79027.EBL
  • %HOMEPATH%\XKSBW\82458.KXJ
  • %HOMEPATH%\XKSBW\44495.VSN
  • %HOMEPATH%\XKSBW\Z70796.PGK
  • %HOMEPATH%\XKSBW\94533.NTO
  • %HOMEPATH%\XKSBW\16879.BRR
  • %HOMEPATH%\XKSBW\52391.CRP
  • %HOMEPATH%\XKSBW\O35361.RMS
  • %HOMEPATH%\XKSBW\37815.QGR
  • %HOMEPATH%\XKSBW\N64022.VQV
  • %HOMEPATH%\XKSBW\I75667.GRR
  • %HOMEPATH%\XKSBW\D37350.OCM
  • %HOMEPATH%\XKSBW\R60822.QRO
  • %HOMEPATH%\XKSBW\V31854.RVY
  • %HOMEPATH%\XKSBW\78557.ZJH
  • %HOMEPATH%\XKSBW\C78532.LGA
  • %HOMEPATH%\XKSBW\X12435.ATM
  • %HOMEPATH%\XKSBW\59645.JEO
  • %HOMEPATH%\XKSBW\72262.KMT
  • %HOMEPATH%\XKSBW\86285.UKM
  • %HOMEPATH%\XKSBW\D44586.DZX
  • %HOMEPATH%\XKSBW\U54783.VMW
  • %HOMEPATH%\XKSBW\S18672.ZHY
  • %HOMEPATH%\XKSBW\E45640.NMW
  • %HOMEPATH%\XKSBW\17450.EGO
  • %HOMEPATH%\XKSBW\H5787.YID
  • %HOMEPATH%\XKSBW\38542.GPW
  • %HOMEPATH%\XKSBW\56422.LIK
  • %HOMEPATH%\XKSBW\11632.USP
  • %HOMEPATH%\XKSBW\33751.UDP
  • %HOMEPATH%\XKSBW\B44493.AFP
  • %HOMEPATH%\XKSBW\88012.SCY
  • %HOMEPATH%\XKSBW\66984.JHB
  • %HOMEPATH%\XKSBW\6253.VIF
  • %HOMEPATH%\XKSBW\S24499.NAR
  • %HOMEPATH%\XKSBW\10572.JUB
  • %HOMEPATH%\XKSBW\33281.GWN
  • %HOMEPATH%\XKSBW\F67799.MCC
  • %HOMEPATH%\XKSBW\O11098.HJC
  • %HOMEPATH%\XKSBW\B35926.AGT
  • %HOMEPATH%\XKSBW\4689.NLF
Sets the 'hidden' attribute to the following files:
  • %HOMEPATH%\XKSBW\43054.EPC
  • %HOMEPATH%\XKSBW\F92375.JUM
  • %HOMEPATH%\XKSBW\U85537.GGD
  • %HOMEPATH%\XKSBW\D64003.MEA
  • %HOMEPATH%\XKSBW\10555.EDL
  • %HOMEPATH%\XKSBW\69471.XTH
  • %HOMEPATH%\XKSBW\12864.LIF
  • %HOMEPATH%\XKSBW\12549.RLF
  • %HOMEPATH%\XKSBW\J26464.QNU
  • %HOMEPATH%\XKSBW\15382.JOA
  • %HOMEPATH%\XKSBW\75658.OYB
  • %HOMEPATH%\XKSBW\A27149.FIO
  • %HOMEPATH%\XKSBW\56451.TPY
  • %HOMEPATH%\XKSBW\8077.YPF
  • %HOMEPATH%\XKSBW\Y62791.ZNW
  • %HOMEPATH%\XKSBW\71886.MMR
  • %HOMEPATH%\XKSBW\71092.PIE
  • %HOMEPATH%\XKSBW\I65339.ZMW
  • %HOMEPATH%\XKSBW\U53998.OID
  • %HOMEPATH%\XKSBW\33154.GQT
  • %HOMEPATH%\XKSBW\5186.FMX
  • %HOMEPATH%\XKSBW\52349.HKL
  • %HOMEPATH%\XKSBW\V17421.VHV
  • %HOMEPATH%\XKSBW\64271.VED
  • %HOMEPATH%\XKSBW\25569.NQZ
  • %HOMEPATH%\XKSBW\8085.WFK
  • %HOMEPATH%\XKSBW\P31170.UFX
  • %HOMEPATH%\XKSBW\52199.VPG
  • %HOMEPATH%\XKSBW\W82349.LOR
  • %HOMEPATH%\XKSBW\1773.WTR
  • %HOMEPATH%\XKSBW\C81409.UJQ
  • %HOMEPATH%\XKSBW\R78259.BIK
  • %HOMEPATH%\XKSBW\N45907.KTP
  • %HOMEPATH%\XKSBW\4875.QJN
  • %HOMEPATH%\XKSBW\L70160.BLP
  • %HOMEPATH%\XKSBW\M34050.RVO
  • %HOMEPATH%\XKSBW\31909.GLC
  • %HOMEPATH%\XKSBW\Q67152.EXY
  • %HOMEPATH%\XKSBW\A39891.WJW
  • %HOMEPATH%\XKSBW\37097.UFQ
  • %HOMEPATH%\XKSBW\47513.DUW
  • %HOMEPATH%\XKSBW\26181.MYA
  • %HOMEPATH%\XKSBW\20047.RMO
  • %HOMEPATH%\XKSBW\N49714.DUJ
  • %HOMEPATH%\XKSBW\33592.VGB
  • %HOMEPATH%\XKSBW\29482.BLR
  • %HOMEPATH%\XKSBW\N16110.ZAQ
  • %HOMEPATH%\XKSBW\Y10798.FOX
  • %HOMEPATH%\XKSBW\36443.JQQ
  • %HOMEPATH%\XKSBW\56412.BAU
  • %HOMEPATH%\XKSBW\F69446.EWM
  • %HOMEPATH%\XKSBW\10691.XYD
  • %HOMEPATH%\XKSBW\R20400.HDE
  • %HOMEPATH%\XKSBW\S54653.IFE
  • %HOMEPATH%\XKSBW\E74442.NGI
  • %HOMEPATH%\XKSBW\M60134.JMP
  • %HOMEPATH%\XKSBW\L73052.PFS
  • %HOMEPATH%\XKSBW\47021.HTL
  • %HOMEPATH%\XKSBW\E60227.JTP
  • %HOMEPATH%\XKSBW\18564.HSX
  • %HOMEPATH%\XKSBW\S37243.SDO
  • %HOMEPATH%\XKSBW\P40743.RHQ
  • %HOMEPATH%\XKSBW\5798.ZMV
  • %HOMEPATH%\XKSBW\62246.JWO
  • %HOMEPATH%\XKSBW\47914.LIG
  • %HOMEPATH%\XKSBW\K50034.QRD
  • %HOMEPATH%\XKSBW\J14024.UHN
  • %HOMEPATH%\XKSBW\D28226.MVM
  • %HOMEPATH%\XKSBW\27491.IDB
  • %HOMEPATH%\XKSBW\J89280.YSJ
  • %HOMEPATH%\XKSBW\97147.GIB
  • %HOMEPATH%\XKSBW\65515.BZL
  • %HOMEPATH%\XKSBW\K13231.BWL
  • %HOMEPATH%\XKSBW\93616.JNG
  • %HOMEPATH%\XKSBW\5310.CAU
  • %HOMEPATH%\XKSBW\Q59361.YWX
  • %HOMEPATH%\XKSBW\15842.WBC
  • %HOMEPATH%\XKSBW\S30120.PFM
  • %HOMEPATH%\XKSBW\94390.YUY
  • %HOMEPATH%\XKSBW\89875.LEH
  • %HOMEPATH%\XKSBW\47382.MNF
  • %HOMEPATH%\XKSBW\4714.YLF
  • %HOMEPATH%\XKSBW\35767.LGK
  • %HOMEPATH%\XKSBW\77639.EZE
  • %HOMEPATH%\XKSBW\43566.FWB
  • %HOMEPATH%\XKSBW\45221.QIC
  • %HOMEPATH%\XKSBW\Y50723.LAW
  • %HOMEPATH%\XKSBW\57299.BWZ
  • %HOMEPATH%\XKSBW\W5746.MNA
  • %HOMEPATH%\XKSBW\Q57705.BGL
  • %HOMEPATH%\XKSBW\W2903.GFM
  • %HOMEPATH%\XKSBW\L32596.BZC
  • %HOMEPATH%\XKSBW\Q97791.WMP
  • %HOMEPATH%\XKSBW\60821.SYT
  • %HOMEPATH%\XKSBW\64592.KJF
  • %HOMEPATH%\XKSBW\E31285.QDF
  • %HOMEPATH%\XKSBW\33232.SGD
  • %HOMEPATH%\XKSBW\82252.SYL
  • %HOMEPATH%\XKSBW\U44553.RIU
  • %HOMEPATH%\XKSBW\14151.XCQ
  • %HOMEPATH%\XKSBW\B15343.VGD
  • %HOMEPATH%\XKSBW\79380.PSQ
  • %HOMEPATH%\XKSBW\T22816.SUV
  • %HOMEPATH%\XKSBW\Z10632.ZIA
  • %HOMEPATH%\XKSBW\O79523.DBP
  • %HOMEPATH%\XKSBW\27480.STP
  • %HOMEPATH%\XKSBW\G65412.XMB
  • %HOMEPATH%\XKSBW\74844.QVI
  • %HOMEPATH%\XKSBW\S34726.XOS
  • %HOMEPATH%\XKSBW\V85612.GVY
  • %HOMEPATH%\XKSBW\83060.TCU
  • %HOMEPATH%\XKSBW\X52059.EWG
  • %HOMEPATH%\XKSBW\58946.NKO
  • %HOMEPATH%\XKSBW\Q84823.ACU
  • %HOMEPATH%\XKSBW\22371.OVE
  • %HOMEPATH%\XKSBW\24290.GCN
  • %HOMEPATH%\XKSBW\J98545.ZCB
  • %HOMEPATH%\XKSBW\U94581.USO
  • %HOMEPATH%\XKSBW\B18533.UCQ
  • %HOMEPATH%\XKSBW\88387.VMP
  • %HOMEPATH%\XKSBW\83715.PPZ
  • %HOMEPATH%\XKSBW\86495.FOQ
  • %HOMEPATH%\XKSBW\38562.BZI
  • %HOMEPATH%\XKSBW\31172.WPJ
  • %HOMEPATH%\XKSBW\6541.ZQW
  • %HOMEPATH%\XKSBW\E32798.HJS
  • %HOMEPATH%\XKSBW\J47331.SAQ
  • %HOMEPATH%\XKSBW\26290.CRV
  • %HOMEPATH%\XKSBW\J6223.ALR
  • %HOMEPATH%\XKSBW\L60418.HDM
  • %HOMEPATH%\XKSBW\P20484.CZV
  • %HOMEPATH%\XKSBW\20900.VPV
  • %HOMEPATH%\XKSBW\23830.RBX
  • %HOMEPATH%\XKSBW\O60882.YSH
  • %HOMEPATH%\XKSBW\T79860.DKK
  • %HOMEPATH%\XKSBW\C62992.ROZ
  • %HOMEPATH%\XKSBW\S60093.XZK
  • %HOMEPATH%\XKSBW\91870.BLV
  • %HOMEPATH%\XKSBW\59164.GIZ
  • %HOMEPATH%\XKSBW\T67622.YCD
  • %HOMEPATH%\XKSBW\N2844.NDW
  • %HOMEPATH%\XKSBW\77183.OZT
  • %HOMEPATH%\XKSBW\78462.NKK
  • %HOMEPATH%\XKSBW\X42005.IOD
  • %HOMEPATH%\XKSBW\22926.XKO
  • %HOMEPATH%\XKSBW\1789.NVU
  • %HOMEPATH%\XKSBW\E34341.ZWT
  • %HOMEPATH%\XKSBW\1450.VJP
  • %HOMEPATH%\XKSBW\S26953.KUY
  • %HOMEPATH%\XKSBW\X1686.UXG
  • %HOMEPATH%\XKSBW\84023.FCO
  • %HOMEPATH%\XKSBW\32229.AKY
  • %HOMEPATH%\XKSBW\B9366.PLV
  • %HOMEPATH%\XKSBW\U11419.DHK
  • %HOMEPATH%\XKSBW\41482.YIX
  • %HOMEPATH%\XKSBW\S97020.NWB
  • %HOMEPATH%\XKSBW\38564.QFH
  • %HOMEPATH%\XKSBW\11023.CMC
  • %HOMEPATH%\XKSBW\68516.WKR
  • %HOMEPATH%\XKSBW\J77583.KJW
  • %HOMEPATH%\XKSBW\51885.REY
  • %HOMEPATH%\XKSBW\31514.UXJ
  • %HOMEPATH%\XKSBW\N98597.WML
  • %HOMEPATH%\XKSBW\30983.DJZ
  • %HOMEPATH%\XKSBW\Q69954.RPU
  • %HOMEPATH%\XKSBW\H80721.OKX
  • %HOMEPATH%\XKSBW\19525.FQT
  • %HOMEPATH%\XKSBW\G76142.ADV
  • %HOMEPATH%\XKSBW\38318.CJK
  • %HOMEPATH%\XKSBW\41701.PEM
  • %HOMEPATH%\XKSBW\F50819.ZJV
  • %HOMEPATH%\XKSBW\82990.DHD
  • %HOMEPATH%\XKSBW\H79204.ZET
  • %HOMEPATH%\XKSBW\64554.YYQ
  • %HOMEPATH%\XKSBW\48470.AZY
  • %HOMEPATH%\XKSBW\K81169.SDF
  • %HOMEPATH%\XKSBW\L12509.TUN
  • %HOMEPATH%\XKSBW\D71713.ASW
  • %HOMEPATH%\XKSBW\62304.FLO
  • %HOMEPATH%\XKSBW\15014.NPG
  • %HOMEPATH%\XKSBW\12452.ZHP
  • %HOMEPATH%\XKSBW\N10031.LBQ
  • %HOMEPATH%\XKSBW\88277.UUC
  • %HOMEPATH%\XKSBW\39485.EPQ
  • %HOMEPATH%\XKSBW\W14105.JPJ
  • %HOMEPATH%\XKSBW\P32237.XRR
  • %HOMEPATH%\XKSBW\F51431.VBO
  • %HOMEPATH%\XKSBW\P65914.BCS
  • %HOMEPATH%\XKSBW\66074.ESI
  • %HOMEPATH%\XKSBW\Z34956.LHE
  • %HOMEPATH%\XKSBW\26207.SNM
  • %HOMEPATH%\XKSBW\39812.BSR
  • %HOMEPATH%\XKSBW\95118.LCA
  • %HOMEPATH%\XKSBW\41454.NLA
  • %HOMEPATH%\XKSBW\20779.IZX
  • %HOMEPATH%\XKSBW\99629.AKN
  • %HOMEPATH%\XKSBW\90568.QXR
  • %HOMEPATH%\XKSBW\Q38010.QBS
  • %HOMEPATH%\XKSBW\E33529.TQE
  • %HOMEPATH%\XKSBW\95362.UYL
  • %HOMEPATH%\XKSBW\92938.BFK
  • %HOMEPATH%\XKSBW\35164.VLQ
  • %HOMEPATH%\XKSBW\V56473.BTJ
  • %HOMEPATH%\XKSBW\8425.CVN
  • %HOMEPATH%\XKSBW\B57597.EQF
  • %HOMEPATH%\XKSBW\51759.HVE
  • %HOMEPATH%\XKSBW\U84107.GOG
  • %HOMEPATH%\XKSBW\26609.VPV
  • %HOMEPATH%\XKSBW\97977.RGP
  • %HOMEPATH%\XKSBW\51679.JWS
  • %HOMEPATH%\XKSBW\24303.WGP
  • %HOMEPATH%\XKSBW\72429.DUB
  • %HOMEPATH%\XKSBW\G97528.ADU
  • %HOMEPATH%\XKSBW\F65857.YKH
  • %HOMEPATH%\XKSBW\G90687.NDX
  • %HOMEPATH%\XKSBW\W88539.OBN
  • %HOMEPATH%\XKSBW\94587.GHY
  • %HOMEPATH%\XKSBW\20721.QFU
  • %HOMEPATH%\XKSBW\8189.SAP
  • %HOMEPATH%\XKSBW\A61638.MJA
  • %HOMEPATH%\XKSBW\70186.HKQ
  • %HOMEPATH%\XKSBW\55681.DZY
  • %HOMEPATH%\XKSBW\S11475.EHQ
  • %HOMEPATH%\XKSBW\27118.DXW
  • %HOMEPATH%\XKSBW\9750.OWD
  • %HOMEPATH%\XKSBW\23793.WSG
  • %HOMEPATH%\XKSBW\F28029.LQD
  • %HOMEPATH%\XKSBW\U51998.KKS
  • %HOMEPATH%\XKSBW\92095.JJG
  • %HOMEPATH%\XKSBW\17401.HFF
  • %HOMEPATH%\XKSBW\38749.SLI
  • %HOMEPATH%\XKSBW\40051.IJZ
  • %HOMEPATH%\XKSBW\18305.IEG
  • %HOMEPATH%\XKSBW\I58152.TZU
  • %HOMEPATH%\XKSBW\K22252.LZD
  • %HOMEPATH%\XKSBW\X40620.WNG
  • %HOMEPATH%\XKSBW\M58671.QFW
  • %HOMEPATH%\XKSBW\Q56110.LGS
  • %HOMEPATH%\XKSBW\O34148.JRI
  • %HOMEPATH%\XKSBW\5221.FBS
  • %HOMEPATH%\XKSBW\Y51478.NAP
  • %HOMEPATH%\XKSBW\A97510.DCO
  • %HOMEPATH%\XKSBW\13740.AEO
  • %HOMEPATH%\XKSBW\I58620.HKT
  • %HOMEPATH%\XKSBW\X34949.YEY
  • %HOMEPATH%\XKSBW\D26060.EYZ
  • %HOMEPATH%\XKSBW\83417.REQ
  • %HOMEPATH%\XKSBW\30688.IRS
  • %HOMEPATH%\XKSBW\29116.YQN
  • %HOMEPATH%\XKSBW\J8678.HJT
  • %HOMEPATH%\XKSBW\Q20916.VVL
  • %HOMEPATH%\XKSBW\B84992.CEO
  • %HOMEPATH%\XKSBW\S14934.QMP
  • %HOMEPATH%\XKSBW\X61838.YNO
  • %HOMEPATH%\XKSBW\44661.AJP
  • %HOMEPATH%\XKSBW\91085.TQH
  • %HOMEPATH%\XKSBW\34705.HDN
  • %HOMEPATH%\XKSBW\69665.UTW
  • %HOMEPATH%\XKSBW\J4230.WKD
  • %HOMEPATH%\XKSBW\S96304.PEE
  • %HOMEPATH%\XKSBW\C22739.NDN
  • %HOMEPATH%\XKSBW\33106.GUG
  • %HOMEPATH%\XKSBW\Y1667.RFX
  • %HOMEPATH%\XKSBW\95449.KPI
  • %HOMEPATH%\XKSBW\40033.LCN
  • %HOMEPATH%\XKSBW\N6044.SJV
  • %HOMEPATH%\XKSBW\W73400.GYR
  • %HOMEPATH%\XKSBW\D24681.GJW
  • %HOMEPATH%\XKSBW\9944.DUT
  • %HOMEPATH%\XKSBW\37921.CJR
  • %HOMEPATH%\XKSBW\42924.XAL
  • %HOMEPATH%\XKSBW\F82268.KLK
  • %HOMEPATH%\XKSBW\F47765.ALQ
  • %HOMEPATH%\XKSBW\98829.PVB
  • %HOMEPATH%\XKSBW\38003.CXO
  • %HOMEPATH%\XKSBW\A53273.ZGG
  • %HOMEPATH%\XKSBW\O35434.XFI
  • %HOMEPATH%\XKSBW\C7804.YUO
  • %HOMEPATH%\XKSBW\H45853.BBY
  • %HOMEPATH%\XKSBW\D29599.FDD
  • %HOMEPATH%\XKSBW\37503.RTI
  • %HOMEPATH%\XKSBW\76348.XAN
  • %HOMEPATH%\XKSBW\30842.HHI
  • %HOMEPATH%\XKSBW\K91267.BLF
  • %HOMEPATH%\XKSBW\M51863.HVW
  • %HOMEPATH%\XKSBW\I42618.SOM
  • %HOMEPATH%\XKSBW\D58002.HDO
  • %HOMEPATH%\XKSBW\I23766.QVM
  • %HOMEPATH%\XKSBW\30246.OQK
  • %HOMEPATH%\XKSBW\Y80128.KPU
  • %HOMEPATH%\XKSBW\92174.CKU
  • %HOMEPATH%\XKSBW\36790.KCR
  • %HOMEPATH%\XKSBW\Z77406.RWJ
  • %HOMEPATH%\XKSBW\G68435.QRV
  • %HOMEPATH%\XKSBW\P79444.MHR
  • %HOMEPATH%\XKSBW\6120.JNA
  • %HOMEPATH%\XKSBW\62481.BXA
  • %HOMEPATH%\XKSBW\T56189.RDN
  • %HOMEPATH%\XKSBW\33380.WDP
  • %HOMEPATH%\XKSBW\47357.XXT
  • %HOMEPATH%\XKSBW\60823.LJE
  • %HOMEPATH%\XKSBW\X80703.CLO
  • %HOMEPATH%\XKSBW\63939.NOE
  • %HOMEPATH%\XKSBW\M98010.HCV
  • %HOMEPATH%\XKSBW\Z44608.STY
  • %HOMEPATH%\XKSBW\E14086.TDC
  • %HOMEPATH%\XKSBW\S23525.HKD
  • %HOMEPATH%\XKSBW\58834.IKV
  • %HOMEPATH%\XKSBW\35202.MNP
  • %HOMEPATH%\XKSBW\22098.JBE
  • %HOMEPATH%\XKSBW\47623.KSF
  • %HOMEPATH%\XKSBW\D57651.HOU
  • %HOMEPATH%\XKSBW\60970.LHL
  • %HOMEPATH%\XKSBW\A93635.LNN
  • %HOMEPATH%\XKSBW\R6300.YGC
  • %HOMEPATH%\XKSBW\Y99856.HJJ
  • %HOMEPATH%\XKSBW\S73338.CUD
  • %HOMEPATH%\XKSBW\C41286.CIX
  • %HOMEPATH%\XKSBW\44211.PUS
  • %HOMEPATH%\XKSBW\Q34570.MLK
  • %HOMEPATH%\XKSBW\47654.TTI
  • %HOMEPATH%\XKSBW\15335.HZY
  • %HOMEPATH%\XKSBW\B87758.MSV
  • %HOMEPATH%\XKSBW\35082.HYI
  • %HOMEPATH%\XKSBW\17334.WGC
  • %HOMEPATH%\XKSBW\26693.XTZ
  • %HOMEPATH%\XKSBW\H67215.EOV
  • %HOMEPATH%\XKSBW\Z87184.FMH
  • %HOMEPATH%\XKSBW\I32165.NJY
  • %HOMEPATH%\XKSBW\98242.OWF
  • %HOMEPATH%\XKSBW\52643.SKP
  • %HOMEPATH%\XKSBW\39711.AQQ
  • %HOMEPATH%\XKSBW\39110.WEL
  • %HOMEPATH%\XKSBW\K28544.RKJ
  • %HOMEPATH%\XKSBW\E90792.KCO
  • %HOMEPATH%\XKSBW\62541.VIS
  • %HOMEPATH%\XKSBW\U65237.KVG
  • %HOMEPATH%\XKSBW\run.vbs
  • %HOMEPATH%\XKSBW\settings.ini
  • %HOMEPATH%\XKSBW\7946.AXO
  • %HOMEPATH%\XKSBW\S32652.RUW
  • %HOMEPATH%\XKSBW\352933.dat
  • %HOMEPATH%\XKSBW\383605.dat
  • %HOMEPATH%\XKSBW\Autoit3310029.exe
  • %HOMEPATH%\XKSBW\444129.dat
  • %HOMEPATH%\XKSBW\H58756.CTW
  • %HOMEPATH%\XKSBW\N53829.CFX
  • %HOMEPATH%\XKSBW\S86316.LDK
  • %HOMEPATH%\XKSBW\F29987.IOJ
  • %HOMEPATH%\XKSBW\C69846.LNQ
  • %HOMEPATH%\XKSBW\J15517.NTN
  • %HOMEPATH%\XKSBW\M66580.XPV
  • %HOMEPATH%\XKSBW\C84992.YDY
  • %HOMEPATH%\XKSBW\U7860.AAK
  • %HOMEPATH%\XKSBW\F86562.ZVE
  • %HOMEPATH%\XKSBW\35453.SAU
  • %HOMEPATH%\XKSBW\14650.VZY
  • %HOMEPATH%\XKSBW\49976.SXY
  • %HOMEPATH%\XKSBW\22326.SIH
  • %HOMEPATH%\XKSBW\38788.RIZ
  • %HOMEPATH%\XKSBW\46705.FJZ
  • %HOMEPATH%\XKSBW\61789.MEM
  • %HOMEPATH%\XKSBW\M53840.FOH
  • %HOMEPATH%\XKSBW\36931.NEO
  • %HOMEPATH%\XKSBW\G50186.NTM
  • %HOMEPATH%\XKSBW\13470.RIF
  • %HOMEPATH%\XKSBW\94723.WJN
  • %HOMEPATH%\XKSBW\49066.PMO
  • %HOMEPATH%\XKSBW\C67639.DAU
  • %HOMEPATH%\XKSBW\26414.KWL
  • %HOMEPATH%\XKSBW\8500.IPV
  • %HOMEPATH%\XKSBW\F65243.GDV
  • %HOMEPATH%\XKSBW\Q4830.KAQ
  • %HOMEPATH%\XKSBW\72522.AZL
  • %HOMEPATH%\XKSBW\E29010.YSJ
  • %HOMEPATH%\XKSBW\49704.UQO
  • %HOMEPATH%\XKSBW\P48835.SHQ
  • %HOMEPATH%\XKSBW\76208.FAA
  • %HOMEPATH%\XKSBW\9204.CIQ
  • %HOMEPATH%\XKSBW\F33266.UCF
  • %HOMEPATH%\XKSBW\D29602.VJG
  • %HOMEPATH%\XKSBW\D20280.GWI
  • %HOMEPATH%\XKSBW\X9808.BJZ
  • %HOMEPATH%\XKSBW\83660.YKB
  • %HOMEPATH%\XKSBW\G95556.OYI
  • %HOMEPATH%\XKSBW\22935.ITN
  • %HOMEPATH%\XKSBW\L50443.DUP
  • %HOMEPATH%\XKSBW\M4917.PEG
  • %HOMEPATH%\XKSBW\91199.HEN
  • %HOMEPATH%\XKSBW\31944.OKB
  • %HOMEPATH%\XKSBW\E22323.KMK
  • %HOMEPATH%\XKSBW\N86157.ZII
  • %HOMEPATH%\XKSBW\F67943.NHQ
  • %HOMEPATH%\XKSBW\13789.HNN
  • %HOMEPATH%\XKSBW\68851.CCL
  • %HOMEPATH%\XKSBW\E81616.JKY
  • %HOMEPATH%\XKSBW\K78576.JYF
  • %HOMEPATH%\XKSBW\43836.RBT
  • %HOMEPATH%\XKSBW\S66711.KWG
  • %HOMEPATH%\XKSBW\J56204.PLE
  • %HOMEPATH%\XKSBW\B62245.OKS
  • %HOMEPATH%\XKSBW\I17965.VFR
  • %HOMEPATH%\XKSBW\53587.THP
  • %HOMEPATH%\XKSBW\U8280.WWD
  • %HOMEPATH%\XKSBW\A58710.ZVM
  • %HOMEPATH%\XKSBW\86285.UKM
  • %HOMEPATH%\XKSBW\D44586.DZX
  • %HOMEPATH%\XKSBW\61596.IQS
  • %HOMEPATH%\XKSBW\81631.MBX
  • %HOMEPATH%\XKSBW\53256.XHT
  • %HOMEPATH%\XKSBW\K52929.RCD
  • %HOMEPATH%\XKSBW\G24059.WTG
  • %HOMEPATH%\XKSBW\60538.TWT
  • %HOMEPATH%\XKSBW\I42528.RCT
  • %HOMEPATH%\XKSBW\N20487.LJY
  • %HOMEPATH%\XKSBW\U84834.YTJ
  • %HOMEPATH%\XKSBW\L24215.SKM
  • %HOMEPATH%\XKSBW\Y43982.LUT
  • %HOMEPATH%\XKSBW\73184.PBA
  • %HOMEPATH%\XKSBW\T77225.DDE
  • %HOMEPATH%\XKSBW\L97097.JCC
  • %HOMEPATH%\XKSBW\82501.HGR
  • %HOMEPATH%\XKSBW\33336.IAQ
  • %HOMEPATH%\XKSBW\9412.BCP
  • %HOMEPATH%\XKSBW\3409.BZR
  • %HOMEPATH%\XKSBW\X12855.CRW
  • %HOMEPATH%\XKSBW\F51229.IHW
  • %HOMEPATH%\XKSBW\D31332.WON
  • %HOMEPATH%\XKSBW\27107.DFS
  • %HOMEPATH%\XKSBW\9585.DEU
  • %HOMEPATH%\XKSBW\58021.IYV
  • %HOMEPATH%\XKSBW\U22627.FIR
  • %HOMEPATH%\XKSBW\U13553.OMV
  • %HOMEPATH%\XKSBW\Z72295.SOT
  • %HOMEPATH%\XKSBW\B33434.YNK
  • %HOMEPATH%\XKSBW\H97494.TMX
  • %HOMEPATH%\XKSBW\46680.EMY
  • %HOMEPATH%\XKSBW\66694.BRG
  • %HOMEPATH%\XKSBW\Y2221.XQK
  • %HOMEPATH%\XKSBW\F68100.FYN
  • %HOMEPATH%\XKSBW\66587.XXU
  • %HOMEPATH%\XKSBW\72954.JXF
  • %HOMEPATH%\XKSBW\V16946.FCF
  • %HOMEPATH%\XKSBW\16258.YCQ
  • %HOMEPATH%\XKSBW\93768.PNA
  • %HOMEPATH%\XKSBW\80783.MFD
  • %HOMEPATH%\XKSBW\42998.JNR
  • %HOMEPATH%\XKSBW\82827.VJH
  • %HOMEPATH%\XKSBW\A35571.LXL
  • %HOMEPATH%\XKSBW\53105.CIR
  • %HOMEPATH%\XKSBW\T20550.YSD
  • %HOMEPATH%\XKSBW\51979.YZH
  • %HOMEPATH%\XKSBW\21174.YKN
  • %HOMEPATH%\XKSBW\Z70796.PGK
  • %HOMEPATH%\XKSBW\94533.NTO
  • %HOMEPATH%\XKSBW\E98476.ZWN
  • %HOMEPATH%\XKSBW\78059.YOH
  • %HOMEPATH%\XKSBW\9109.XJS
  • %HOMEPATH%\XKSBW\R90451.XHC
  • %HOMEPATH%\XKSBW\A13871.AMA
  • %HOMEPATH%\XKSBW\C3706.NRU
  • %HOMEPATH%\XKSBW\C55511.XUZ
  • %HOMEPATH%\XKSBW\W20595.OOE
  • %HOMEPATH%\XKSBW\V38794.RDI
  • %HOMEPATH%\XKSBW\C47279.EOU
  • %HOMEPATH%\XKSBW\69680.CHT
  • %HOMEPATH%\XKSBW\79027.EBL
  • %HOMEPATH%\XKSBW\52746.GAH
  • %HOMEPATH%\XKSBW\19708.GJZ
  • %HOMEPATH%\XKSBW\J43435.PTH
  • %HOMEPATH%\XKSBW\K96868.HPO
  • %HOMEPATH%\XKSBW\H59752.JNX
  • %HOMEPATH%\XKSBW\X5255.GMZ
  • %HOMEPATH%\XKSBW\O35361.RMS
  • %HOMEPATH%\XKSBW\37815.QGR
  • %HOMEPATH%\XKSBW\82458.KXJ
  • %HOMEPATH%\XKSBW\44495.VSN
  • %HOMEPATH%\XKSBW\H19238.SCD
  • %HOMEPATH%\XKSBW\D86546.LGM
  • %HOMEPATH%\XKSBW\16879.BRR
  • %HOMEPATH%\XKSBW\52391.CRP
  • %HOMEPATH%\XKSBW\C78532.LGA
  • %HOMEPATH%\XKSBW\X12435.ATM
  • %HOMEPATH%\XKSBW\N64022.VQV
  • %HOMEPATH%\XKSBW\I75667.GRR
  • %HOMEPATH%\XKSBW\10572.JUB
  • %HOMEPATH%\XKSBW\33281.GWN
  • %HOMEPATH%\XKSBW\V31854.RVY
  • %HOMEPATH%\XKSBW\78557.ZJH
  • %HOMEPATH%\XKSBW\E45640.NMW
  • %HOMEPATH%\XKSBW\17450.EGO
  • %HOMEPATH%\XKSBW\59645.JEO
  • %HOMEPATH%\XKSBW\72262.KMT
  • %HOMEPATH%\XKSBW\D37350.OCM
  • %HOMEPATH%\XKSBW\R60822.QRO
  • %HOMEPATH%\XKSBW\U54783.VMW
  • %HOMEPATH%\XKSBW\S18672.ZHY
  • %HOMEPATH%\XKSBW\88012.SCY
  • %HOMEPATH%\XKSBW\66984.JHB
  • %HOMEPATH%\XKSBW\H5787.YID
  • %HOMEPATH%\XKSBW\38542.GPW
  • %HOMEPATH%\XKSBW\O18332.JZX
  • %HOMEPATH%\XKSBW\11571.JOP
  • %HOMEPATH%\XKSBW\33751.UDP
  • %HOMEPATH%\XKSBW\B44493.AFP
  • %HOMEPATH%\XKSBW\B35926.AGT
  • %HOMEPATH%\XKSBW\4689.NLF
  • %HOMEPATH%\XKSBW\6253.VIF
  • %HOMEPATH%\XKSBW\S24499.NAR
  • %HOMEPATH%\XKSBW\56422.LIK
  • %HOMEPATH%\XKSBW\11632.USP
  • %HOMEPATH%\XKSBW\F67799.MCC
  • %HOMEPATH%\XKSBW\O11098.HJC
Deletes the following files:
  • %HOMEPATH%\XKSBW\JDTPNDBK.dat
Network activity:
Connects to:
  • 'ma####es.no-ip.biz':1604
UDP:
  • DNS ASK ma####es.no-ip.biz
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: '(null)'
  • ClassName: 'EDIT' WindowName: '(null)'

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android