マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Trojan.MulDrop6.63564

Added to the Dr.Web virus database: 2016-10-30

Virus description added:

Technical Information

Malicious functions:
Creates and executes the following:
  • '<SYSTEM32>\wscript.exe' "%HOMEPATH%\QHBSB\file.vbs"
Executes the following:
  • '%HOMEPATH%\QHBSB\343648.exe' GGEBLVYP.dat
  • '%HOMEPATH%\QHBSB\343648.exe' 336472.OZA
  • '%HOMEPATH%\QHBSB\OpenVPN Protector.exe'
Modifies file system:
Creates the following files:
  • %HOMEPATH%\QHBSB\41659.HOA
  • %HOMEPATH%\QHBSB\41578.NHF
  • %HOMEPATH%\QHBSB\42422.MKO
  • %HOMEPATH%\QHBSB\42272.VZR
  • %HOMEPATH%\QHBSB\40181.BBB
  • %HOMEPATH%\QHBSB\40043.KOH
  • %HOMEPATH%\QHBSB\41369.SPK
  • %HOMEPATH%\QHBSB\40756.PJV
  • %HOMEPATH%\QHBSB\46035.MVF
  • %HOMEPATH%\QHBSB\44397.XNP
  • %HOMEPATH%\QHBSB\46562.WKV
  • %HOMEPATH%\QHBSB\46506.DYF
  • %HOMEPATH%\QHBSB\42803.MCT
  • %HOMEPATH%\QHBSB\42733.PKG
  • %HOMEPATH%\QHBSB\43591.ZMM
  • %HOMEPATH%\QHBSB\43426.CXK
  • %HOMEPATH%\QHBSB\35703.WCL
  • %HOMEPATH%\QHBSB\35619.CRG
  • %HOMEPATH%\QHBSB\36072.WTD
  • %HOMEPATH%\QHBSB\36032.TGD
  • %HOMEPATH%\QHBSB\34757.SXQ
  • %HOMEPATH%\QHBSB\34211.UCI
  • %HOMEPATH%\QHBSB\35601.RMT
  • %HOMEPATH%\QHBSB\35291.MIN
  • %HOMEPATH%\QHBSB\38800.UZB
  • %HOMEPATH%\QHBSB\38794.HTF
  • %HOMEPATH%\QHBSB\39229.CPI
  • %HOMEPATH%\QHBSB\39112.YWA
  • %HOMEPATH%\QHBSB\36705.PNE
  • %HOMEPATH%\QHBSB\36296.GUH
  • %HOMEPATH%\QHBSB\38396.SGG
  • %HOMEPATH%\QHBSB\37331.YXE
  • %HOMEPATH%\QHBSB\53001.VKO
  • %HOMEPATH%\QHBSB\52283.GQQ
  • %HOMEPATH%\QHBSB\53610.CVH
  • %HOMEPATH%\QHBSB\53003.XLT
  • %HOMEPATH%\QHBSB\51892.YGF
  • %HOMEPATH%\QHBSB\51542.GLK
  • %HOMEPATH%\QHBSB\52255.YNJ
  • %HOMEPATH%\QHBSB\52240.OQY
  • %HOMEPATH%\QHBSB\56231.PHS
  • %HOMEPATH%\QHBSB\56091.IFN
  • %HOMEPATH%\QHBSB\58557.SJL
  • %HOMEPATH%\QHBSB\56882.KKU
  • %HOMEPATH%\QHBSB\54992.FDH
  • %HOMEPATH%\QHBSB\53737.KDA
  • %HOMEPATH%\QHBSB\55738.EPO
  • %HOMEPATH%\QHBSB\55271.LJY
  • %HOMEPATH%\QHBSB\47551.QEE
  • %HOMEPATH%\QHBSB\47353.VBZ
  • %HOMEPATH%\QHBSB\48192.WPS
  • %HOMEPATH%\QHBSB\48139.GUZ
  • %HOMEPATH%\QHBSB\46904.WJP
  • %HOMEPATH%\QHBSB\46764.XWU
  • %HOMEPATH%\QHBSB\47284.IPI
  • %HOMEPATH%\QHBSB\46931.KVW
  • %HOMEPATH%\QHBSB\50989.WJH
  • %HOMEPATH%\QHBSB\50840.INJ
  • %HOMEPATH%\QHBSB\51427.IDS
  • %HOMEPATH%\QHBSB\51316.GZH
  • %HOMEPATH%\QHBSB\50395.BWJ
  • %HOMEPATH%\QHBSB\49811.MZM
  • %HOMEPATH%\QHBSB\50740.BUF
  • %HOMEPATH%\QHBSB\50402.MQL
  • %HOMEPATH%\QHBSB\22487.SVK
  • %HOMEPATH%\QHBSB\22422.HNT
  • %HOMEPATH%\QHBSB\22768.HSO
  • %HOMEPATH%\QHBSB\22583.QIW
  • %HOMEPATH%\QHBSB\21104.SSW
  • %HOMEPATH%\QHBSB\20979.JOH
  • %HOMEPATH%\QHBSB\22324.KBH
  • %HOMEPATH%\QHBSB\21774.HQY
  • %HOMEPATH%\QHBSB\23859.ZPF
  • %HOMEPATH%\QHBSB\23667.FDP
  • %HOMEPATH%\QHBSB\25172.LCO
  • %HOMEPATH%\QHBSB\25088.SKK
  • %HOMEPATH%\QHBSB\22936.WGO
  • %HOMEPATH%\QHBSB\22884.ERE
  • %HOMEPATH%\QHBSB\23561.SQS
  • %HOMEPATH%\QHBSB\23154.DIX
  • %HOMEPATH%\QHBSB\15878.FEW
  • %HOMEPATH%\QHBSB\15701.BDQ
  • %HOMEPATH%\QHBSB\17187.JOA
  • %HOMEPATH%\QHBSB\16294.UYS
  • %HOMEPATH%\QHBSB\13321.ZDO
  • %HOMEPATH%\QHBSB\12991.NKO
  • %HOMEPATH%\QHBSB\15294.FXG
  • %HOMEPATH%\QHBSB\14841.QZT
  • %HOMEPATH%\QHBSB\18724.RPX
  • %HOMEPATH%\QHBSB\17916.UZT
  • %HOMEPATH%\QHBSB\20059.EJT
  • %HOMEPATH%\QHBSB\19329.XQV
  • %HOMEPATH%\QHBSB\17585.BJE
  • %HOMEPATH%\QHBSB\17287.CDY
  • %HOMEPATH%\QHBSB\17884.VJB
  • %HOMEPATH%\QHBSB\17774.NCY
  • %HOMEPATH%\QHBSB\31306.ORP
  • %HOMEPATH%\QHBSB\30893.TBE
  • %HOMEPATH%\QHBSB\31568.MQL
  • %HOMEPATH%\QHBSB\31320.ZBH
  • %HOMEPATH%\QHBSB\29719.BAH
  • %HOMEPATH%\QHBSB\29691.UBH
  • %HOMEPATH%\QHBSB\30654.PZP
  • %HOMEPATH%\QHBSB\30004.KFV
  • %HOMEPATH%\QHBSB\33489.EZQ
  • %HOMEPATH%\QHBSB\32980.UTC
  • %HOMEPATH%\QHBSB\33743.UKS
  • %HOMEPATH%\QHBSB\33728.DTA
  • %HOMEPATH%\QHBSB\32002.MSE
  • %HOMEPATH%\QHBSB\31946.ENV
  • %HOMEPATH%\QHBSB\32767.RSS
  • %HOMEPATH%\QHBSB\32055.XTS
  • %HOMEPATH%\QHBSB\26373.PPL
  • %HOMEPATH%\QHBSB\26354.UGW
  • %HOMEPATH%\QHBSB\26765.OJQ
  • %HOMEPATH%\QHBSB\26754.MWL
  • %HOMEPATH%\QHBSB\25619.HDX
  • %HOMEPATH%\QHBSB\25321.WPX
  • %HOMEPATH%\QHBSB\25941.FVE
  • %HOMEPATH%\QHBSB\25723.YOK
  • %HOMEPATH%\QHBSB\28873.RDX
  • %HOMEPATH%\QHBSB\28796.QMF
  • %HOMEPATH%\QHBSB\29319.THJ
  • %HOMEPATH%\QHBSB\29135.JVF
  • %HOMEPATH%\QHBSB\27413.ZFB
  • %HOMEPATH%\QHBSB\26921.NKC
  • %HOMEPATH%\QHBSB\28393.KEK
  • %HOMEPATH%\QHBSB\27956.DIL
  • %HOMEPATH%\QHBSB\58729.EMG
  • %HOMEPATH%\QHBSB\92684.MDC
  • %HOMEPATH%\QHBSB\92207.ZGJ
  • %HOMEPATH%\QHBSB\93137.ZHR
  • %HOMEPATH%\QHBSB\92919.DWK
  • %HOMEPATH%\QHBSB\91534.FRJ
  • %HOMEPATH%\QHBSB\91466.OJV
  • %HOMEPATH%\QHBSB\91796.PYY
  • %HOMEPATH%\QHBSB\91795.NMJ
  • %HOMEPATH%\QHBSB\94702.ODH
  • %HOMEPATH%\QHBSB\94512.EOA
  • %HOMEPATH%\QHBSB\95747.FBJ
  • %HOMEPATH%\QHBSB\95705.DIY
  • %HOMEPATH%\QHBSB\93707.NCA
  • %HOMEPATH%\QHBSB\93188.RBT
  • %HOMEPATH%\QHBSB\94224.KQP
  • %HOMEPATH%\QHBSB\94127.DPY
  • %HOMEPATH%\QHBSB\88017.AES
  • %HOMEPATH%\QHBSB\87901.QNW
  • %HOMEPATH%\QHBSB\88649.HGE
  • %HOMEPATH%\QHBSB\88159.KJR
  • %HOMEPATH%\QHBSB\84850.GCL
  • %HOMEPATH%\QHBSB\84812.HHV
  • %HOMEPATH%\QHBSB\87533.KCN
  • %HOMEPATH%\QHBSB\86614.JUD
  • %HOMEPATH%\QHBSB\90996.ZCN
  • %HOMEPATH%\QHBSB\90220.KVS
  • %HOMEPATH%\QHBSB\91332.LKO
  • %HOMEPATH%\QHBSB\91176.MJV
  • %HOMEPATH%\QHBSB\89498.HRA
  • %HOMEPATH%\QHBSB\89337.JMZ
  • %HOMEPATH%\QHBSB\90126.RWY
  • %HOMEPATH%\QHBSB\89963.ARV
  • %HOMEPATH%\QHBSB\A24449.ALE
  • %HOMEPATH%\QHBSB\A17760.XRD
  • %HOMEPATH%\QHBSB\A65535.EFI
  • %HOMEPATH%\QHBSB\A50041.GXI
  • %HOMEPATH%\QHBSB\A10943.SLF
  • %HOMEPATH%\QHBSB\A5374.YQT
  • %HOMEPATH%\QHBSB\A16409.LCG
  • %HOMEPATH%\QHBSB\A13312.HNM
  • %HOMEPATH%\QHBSB\B42819.LPO
  • %HOMEPATH%\QHBSB\B31685.MLN
  • %HOMEPATH%\QHBSB\GGEBLVYP.dat
  • %TEMP%\~DF4BD4.tmp
  • %HOMEPATH%\QHBSB\A71323.IZL
  • %HOMEPATH%\QHBSB\A65852.RLY
  • %HOMEPATH%\QHBSB\B18333.DPA
  • %HOMEPATH%\QHBSB\A85936.ALA
  • %HOMEPATH%\QHBSB\98378.TMX
  • %HOMEPATH%\QHBSB\98264.WUK
  • %HOMEPATH%\QHBSB\98675.ZOY
  • %HOMEPATH%\QHBSB\98484.UYR
  • %HOMEPATH%\QHBSB\96410.FPA
  • %HOMEPATH%\QHBSB\96335.JYP
  • %HOMEPATH%\QHBSB\97764.NNY
  • %HOMEPATH%\QHBSB\97051.FPS
  • %HOMEPATH%\QHBSB\343648.exe
  • %HOMEPATH%\QHBSB\336472.OZA
  • %HOMEPATH%\QHBSB\935737.dat
  • %HOMEPATH%\QHBSB\746149.dat
  • %HOMEPATH%\QHBSB\99414.KGI
  • %HOMEPATH%\QHBSB\98982.OAT
  • %HOMEPATH%\QHBSB\99916.YNF
  • %HOMEPATH%\QHBSB\99634.XSJ
  • %HOMEPATH%\QHBSB\67946.QPG
  • %HOMEPATH%\QHBSB\67852.BTI
  • %HOMEPATH%\QHBSB\69488.SBC
  • %HOMEPATH%\QHBSB\68200.AVQ
  • %HOMEPATH%\QHBSB\65562.QJN
  • %HOMEPATH%\QHBSB\65514.IPQ
  • %HOMEPATH%\QHBSB\67558.YAA
  • %HOMEPATH%\QHBSB\66807.GMU
  • %HOMEPATH%\QHBSB\71009.WTE
  • %HOMEPATH%\QHBSB\70727.UUR
  • %HOMEPATH%\QHBSB\71460.HBN
  • %HOMEPATH%\QHBSB\71448.AOB
  • %HOMEPATH%\QHBSB\69627.SMP
  • %HOMEPATH%\QHBSB\69531.GNI
  • %HOMEPATH%\QHBSB\69917.OKQ
  • %HOMEPATH%\QHBSB\69699.YDX
  • %HOMEPATH%\QHBSB\60939.TRJ
  • %HOMEPATH%\QHBSB\60088.VIH
  • %HOMEPATH%\QHBSB\61015.LAY
  • %HOMEPATH%\QHBSB\61001.XKA
  • %HOMEPATH%\QHBSB\59646.JXK
  • %HOMEPATH%\QHBSB\59539.AAK
  • %HOMEPATH%\QHBSB\60078.MRP
  • %HOMEPATH%\QHBSB\60069.FIZ
  • %HOMEPATH%\QHBSB\63663.PZM
  • %HOMEPATH%\QHBSB\63259.IEU
  • %HOMEPATH%\QHBSB\64810.TOQ
  • %HOMEPATH%\QHBSB\64550.YTA
  • %HOMEPATH%\QHBSB\61964.DRM
  • %HOMEPATH%\QHBSB\61587.YCL
  • %HOMEPATH%\QHBSB\62579.JQS
  • %HOMEPATH%\QHBSB\62559.GVN
  • %HOMEPATH%\QHBSB\80797.ZMN
  • %HOMEPATH%\QHBSB\80065.ANT
  • %HOMEPATH%\QHBSB\81173.JHR
  • %HOMEPATH%\QHBSB\80856.BNE
  • %HOMEPATH%\QHBSB\78722.IHL
  • %HOMEPATH%\QHBSB\78410.LPT
  • %HOMEPATH%\QHBSB\79350.KHO
  • %HOMEPATH%\QHBSB\78890.CID
  • %HOMEPATH%\QHBSB\83735.PPN
  • %HOMEPATH%\QHBSB\83427.GPK
  • %HOMEPATH%\QHBSB\84393.WCK
  • %HOMEPATH%\QHBSB\83847.JPU
  • %HOMEPATH%\QHBSB\82117.IOO
  • %HOMEPATH%\QHBSB\81514.PFT
  • %HOMEPATH%\QHBSB\83063.SLY
  • %HOMEPATH%\QHBSB\82884.RFI
  • %HOMEPATH%\QHBSB\73603.HQH
  • %HOMEPATH%\QHBSB\73108.XTS
  • %HOMEPATH%\QHBSB\75007.EDG
  • %HOMEPATH%\QHBSB\73771.FDT
  • %HOMEPATH%\QHBSB\72111.OFH
  • %HOMEPATH%\QHBSB\72075.LWK
  • %HOMEPATH%\QHBSB\72992.YXQ
  • %HOMEPATH%\QHBSB\72361.BEH
  • %HOMEPATH%\QHBSB\77830.QWB
  • %HOMEPATH%\QHBSB\76852.SKV
  • %HOMEPATH%\QHBSB\78324.KZA
  • %HOMEPATH%\QHBSB\78285.VTW
  • %HOMEPATH%\QHBSB\75070.QUN
  • %HOMEPATH%\QHBSB\75070.DZB
  • %HOMEPATH%\QHBSB\75754.JNR
  • %HOMEPATH%\QHBSB\75670.RYQ
  • %HOMEPATH%\QHBSB\K66638.QBA
  • %HOMEPATH%\QHBSB\K47562.RIF
  • %HOMEPATH%\QHBSB\K69525.IDR
  • %HOMEPATH%\QHBSB\K69042.KDV
  • %HOMEPATH%\QHBSB\K28132.KGG
  • %HOMEPATH%\QHBSB\K9387.RDK
  • %HOMEPATH%\QHBSB\K45313.MVU
  • %HOMEPATH%\QHBSB\K42215.UTZ
  • %HOMEPATH%\QHBSB\L29927.OND
  • %HOMEPATH%\QHBSB\L10059.ZDS
  • %HOMEPATH%\QHBSB\L47196.VYD
  • %HOMEPATH%\QHBSB\L32801.KJX
  • %HOMEPATH%\QHBSB\K84820.VLE
  • %HOMEPATH%\QHBSB\K80745.WEJ
  • %HOMEPATH%\QHBSB\K94310.DDW
  • %HOMEPATH%\QHBSB\K89910.DYD
  • %HOMEPATH%\QHBSB\J22918.ZVJ
  • %HOMEPATH%\QHBSB\I93361.IQD
  • %HOMEPATH%\QHBSB\J31650.WKE
  • %HOMEPATH%\QHBSB\J27102.JRF
  • %HOMEPATH%\QHBSB\I70751.HJA
  • %HOMEPATH%\QHBSB\I58100.HRV
  • %HOMEPATH%\QHBSB\I85189.CSQ
  • %HOMEPATH%\QHBSB\I71321.PKX
  • %HOMEPATH%\QHBSB\J85954.EVE
  • %HOMEPATH%\QHBSB\J81788.LJG
  • %HOMEPATH%\QHBSB\K6942.TRJ
  • %HOMEPATH%\QHBSB\J98202.OOG
  • %HOMEPATH%\QHBSB\J51168.CET
  • %HOMEPATH%\QHBSB\J49125.WGR
  • %HOMEPATH%\QHBSB\J81523.OIP
  • %HOMEPATH%\QHBSB\J79383.BVS
  • %HOMEPATH%\QHBSB\N31345.UXN
  • %HOMEPATH%\QHBSB\M71304.QZD
  • %HOMEPATH%\QHBSB\N47878.KOE
  • %HOMEPATH%\QHBSB\N44963.LWP
  • %HOMEPATH%\QHBSB\M58906.BOB
  • %HOMEPATH%\QHBSB\M36890.HUD
  • %HOMEPATH%\QHBSB\M64962.KUQ
  • %HOMEPATH%\QHBSB\M63074.IIX
  • %HOMEPATH%\QHBSB\O22523.VKS
  • %HOMEPATH%\QHBSB\O5258.XGC
  • %HOMEPATH%\QHBSB\O40307.UZC
  • %HOMEPATH%\QHBSB\O35144.KEI
  • %HOMEPATH%\QHBSB\N61382.RWJ
  • %HOMEPATH%\QHBSB\N49807.HTS
  • %HOMEPATH%\QHBSB\N98459.QOO
  • %HOMEPATH%\QHBSB\N71051.XQF
  • %HOMEPATH%\QHBSB\L88361.GBD
  • %HOMEPATH%\QHBSB\L80035.SCV
  • %HOMEPATH%\QHBSB\L98588.LSR
  • %HOMEPATH%\QHBSB\L96224.MKB
  • %HOMEPATH%\QHBSB\L56088.ZQD
  • %HOMEPATH%\QHBSB\L48113.FLN
  • %HOMEPATH%\QHBSB\L61477.ARO
  • %HOMEPATH%\QHBSB\L58836.GII
  • %HOMEPATH%\QHBSB\M23986.UTC
  • %HOMEPATH%\QHBSB\M20428.KVT
  • %HOMEPATH%\QHBSB\M34577.XTF
  • %HOMEPATH%\QHBSB\M26519.USD
  • %HOMEPATH%\QHBSB\M15746.BWZ
  • %HOMEPATH%\QHBSB\L98857.DXO
  • %HOMEPATH%\QHBSB\M19231.NTX
  • %HOMEPATH%\QHBSB\M16837.KHN
  • %HOMEPATH%\QHBSB\D28545.EQN
  • %HOMEPATH%\QHBSB\D23213.PDG
  • %HOMEPATH%\QHBSB\D48192.HIL
  • %HOMEPATH%\QHBSB\D44825.KBG
  • %HOMEPATH%\QHBSB\D6105.TFK
  • %HOMEPATH%\QHBSB\D3554.WNR
  • %HOMEPATH%\QHBSB\D18623.FKA
  • %HOMEPATH%\QHBSB\D15643.QYU
  • %HOMEPATH%\QHBSB\E32287.JZG
  • %HOMEPATH%\QHBSB\E19858.UUI
  • %HOMEPATH%\QHBSB\E41852.PYV
  • %HOMEPATH%\QHBSB\E36760.IQL
  • %HOMEPATH%\QHBSB\D85809.LPV
  • %HOMEPATH%\QHBSB\D63482.YMG
  • %HOMEPATH%\QHBSB\E18344.RSA
  • %HOMEPATH%\QHBSB\E4688.SLT
  • %HOMEPATH%\QHBSB\B91816.JAP
  • %HOMEPATH%\QHBSB\B90016.WES
  • %HOMEPATH%\QHBSB\C9470.UUH
  • %HOMEPATH%\QHBSB\B98363.LVO
  • %HOMEPATH%\QHBSB\B77004.KDK
  • %HOMEPATH%\QHBSB\B72934.QIH
  • %HOMEPATH%\QHBSB\B86287.UPZ
  • %HOMEPATH%\QHBSB\B82910.KEF
  • %HOMEPATH%\QHBSB\C67258.KJP
  • %HOMEPATH%\QHBSB\C66193.QQH
  • %HOMEPATH%\QHBSB\C91723.KUL
  • %HOMEPATH%\QHBSB\C85596.JLD
  • %HOMEPATH%\QHBSB\C35562.FXR
  • %HOMEPATH%\QHBSB\C32274.HDB
  • %HOMEPATH%\QHBSB\C50784.GGL
  • %HOMEPATH%\QHBSB\C50264.TJD
  • %HOMEPATH%\QHBSB\H46400.ZNB
  • %HOMEPATH%\QHBSB\G92755.WMQ
  • %HOMEPATH%\QHBSB\H54186.IFW
  • %HOMEPATH%\QHBSB\H46634.KBQ
  • %HOMEPATH%\QHBSB\file.vbs
  • %HOMEPATH%\QHBSB\F95723.KCC
  • %HOMEPATH%\QHBSB\G44981.LER
  • %HOMEPATH%\QHBSB\G4990.BBV
  • %HOMEPATH%\QHBSB\I42535.PHQ
  • %HOMEPATH%\QHBSB\I40643.ALO
  • %HOMEPATH%\QHBSB\I51239.SCB
  • %HOMEPATH%\QHBSB\I47173.DRA
  • %HOMEPATH%\QHBSB\H62459.LFP
  • %HOMEPATH%\QHBSB\H62226.PIL
  • %HOMEPATH%\QHBSB\I30174.PMY
  • %HOMEPATH%\QHBSB\H70338.PHH
  • %HOMEPATH%\QHBSB\E91309.WTR
  • %HOMEPATH%\QHBSB\E88257.FDR
  • %HOMEPATH%\QHBSB\F10506.GLE
  • %HOMEPATH%\QHBSB\F7458.WMC
  • %HOMEPATH%\QHBSB\E58442.SXT
  • %HOMEPATH%\QHBSB\E46757.DPO
  • %HOMEPATH%\QHBSB\E75174.SWV
  • %HOMEPATH%\QHBSB\E67310.MVR
  • %HOMEPATH%\QHBSB\F85650.JWK
  • %HOMEPATH%\QHBSB\F55099.DIS
  • %HOMEPATH%\QHBSB\F90702.VKD
  • %HOMEPATH%\QHBSB\F86517.TIV
  • %HOMEPATH%\QHBSB\F20638.JOS
  • %HOMEPATH%\QHBSB\F13588.RQS
  • %HOMEPATH%\QHBSB\F41945.ZDU
  • %HOMEPATH%\QHBSB\F20817.IAN
  • %HOMEPATH%\QHBSB\O56821.BWV
  • %HOMEPATH%\QHBSB\Y73854.VAR
  • %HOMEPATH%\QHBSB\Y62232.QZL
  • %HOMEPATH%\QHBSB\Z9167.FDF
  • %HOMEPATH%\QHBSB\Y98114.AKQ
  • %HOMEPATH%\QHBSB\Y13002.VHC
  • %HOMEPATH%\QHBSB\Y12551.QDI
  • %HOMEPATH%\QHBSB\Y61883.JYY
  • %HOMEPATH%\QHBSB\Y16506.STR
  • %HOMEPATH%\QHBSB\Z76084.UOR
  • %HOMEPATH%\QHBSB\Z72705.XKX
  • %HOMEPATH%\QHBSB\Z82587.TBK
  • %HOMEPATH%\QHBSB\Z77959.NJP
  • %HOMEPATH%\QHBSB\Z51710.WOW
  • %HOMEPATH%\QHBSB\Z49190.DVI
  • %HOMEPATH%\QHBSB\Z59144.PLZ
  • %HOMEPATH%\QHBSB\Z56678.HFI
  • %HOMEPATH%\QHBSB\X23732.ING
  • %HOMEPATH%\QHBSB\X17432.CSR
  • %HOMEPATH%\QHBSB\X48528.PAE
  • %HOMEPATH%\QHBSB\X26598.NQX
  • %HOMEPATH%\QHBSB\W17247.MOR
  • %HOMEPATH%\QHBSB\W6866.FEP
  • %HOMEPATH%\QHBSB\X12061.GCA
  • %HOMEPATH%\QHBSB\W61869.KBX
  • %HOMEPATH%\QHBSB\X88797.DTQ
  • %HOMEPATH%\QHBSB\X80910.BRP
  • %HOMEPATH%\QHBSB\Y12165.OTF
  • %HOMEPATH%\QHBSB\Y3497.SKI
  • %HOMEPATH%\QHBSB\X60466.XLO
  • %HOMEPATH%\QHBSB\X52918.SGS
  • %HOMEPATH%\QHBSB\X69034.OYL
  • %HOMEPATH%\QHBSB\X62023.EYK
  • %HOMEPATH%\QHBSB\8346.YRJ
  • %HOMEPATH%\QHBSB\8302.TCG
  • %HOMEPATH%\QHBSB\8814.SZP
  • %HOMEPATH%\QHBSB\8412.XWI
  • %HOMEPATH%\QHBSB\7980.TWM
  • %HOMEPATH%\QHBSB\7139.NTH
  • %HOMEPATH%\QHBSB\8093.PBY
  • %HOMEPATH%\QHBSB\8031.FNB
  • %HOMEPATH%\QHBSB\11976.XXF
  • %HOMEPATH%\QHBSB\10097.BPF
  • %HOMEPATH%\QHBSB\12203.OTD
  • %HOMEPATH%\QHBSB\12010.EOL
  • %HOMEPATH%\QHBSB\9342.XBZ
  • %HOMEPATH%\QHBSB\9250.SBB
  • %HOMEPATH%\QHBSB\10044.JGJ
  • %HOMEPATH%\QHBSB\9696.PCV
  • %HOMEPATH%\QHBSB\OpenVPN Protector.exe
  • %HOMEPATH%\QHBSB\Z98909.MII
  • %HOMEPATH%\QHBSB\1085.MRG
  • %HOMEPATH%\QHBSB\1076.WNV
  • %HOMEPATH%\QHBSB\Z90601.LMK
  • %HOMEPATH%\QHBSB\Z88954.XVT
  • %HOMEPATH%\QHBSB\Z97668.KOR
  • %HOMEPATH%\QHBSB\Z97452.HGS
  • %HOMEPATH%\QHBSB\4474.MUP
  • %HOMEPATH%\QHBSB\3422.BRN
  • %HOMEPATH%\QHBSB\4955.YOB
  • %HOMEPATH%\QHBSB\4644.RER
  • %HOMEPATH%\QHBSB\2518.NVM
  • %HOMEPATH%\QHBSB\1211.WWT
  • %HOMEPATH%\QHBSB\3265.XDA
  • %HOMEPATH%\QHBSB\2846.NCE
  • %HOMEPATH%\QHBSB\R36001.HIL
  • %HOMEPATH%\QHBSB\R33429.JRU
  • %HOMEPATH%\QHBSB\R51565.AOU
  • %HOMEPATH%\QHBSB\R43828.TNF
  • %HOMEPATH%\QHBSB\Q95304.MEV
  • %HOMEPATH%\QHBSB\Q84796.EXH
  • %HOMEPATH%\QHBSB\R26365.ZQN
  • %HOMEPATH%\QHBSB\R2755.KFY
  • %HOMEPATH%\QHBSB\S12070.VCT
  • %HOMEPATH%\QHBSB\S9142.QZP
  • %HOMEPATH%\QHBSB\S52979.VDF
  • %HOMEPATH%\QHBSB\S36554.RGB
  • %HOMEPATH%\QHBSB\R93698.VNN
  • %HOMEPATH%\QHBSB\R88321.ACC
  • %HOMEPATH%\QHBSB\S6004.FKU
  • %HOMEPATH%\QHBSB\S2862.CJV
  • %HOMEPATH%\QHBSB\P86114.MGY
  • %HOMEPATH%\QHBSB\P65692.EIH
  • %HOMEPATH%\QHBSB\Q11473.BZC
  • %HOMEPATH%\QHBSB\P98747.MNM
  • %HOMEPATH%\QHBSB\O71255.UWB
  • %HOMEPATH%\QHBSB\O59721.JWW
  • %HOMEPATH%\QHBSB\P4463.MLV
  • %HOMEPATH%\QHBSB\O71853.SFA
  • %HOMEPATH%\QHBSB\Q65623.PQI
  • %HOMEPATH%\QHBSB\Q63157.NGS
  • %HOMEPATH%\QHBSB\Q83271.OUQ
  • %HOMEPATH%\QHBSB\Q75021.JRP
  • %HOMEPATH%\QHBSB\Q31210.SMW
  • %HOMEPATH%\QHBSB\Q20146.ZEQ
  • %HOMEPATH%\QHBSB\Q62648.NBH
  • %HOMEPATH%\QHBSB\Q59094.YAL
  • %HOMEPATH%\QHBSB\U64886.MZL
  • %HOMEPATH%\QHBSB\U48645.CKZ
  • %HOMEPATH%\QHBSB\U74872.AOH
  • %HOMEPATH%\QHBSB\U68093.MMR
  • %HOMEPATH%\QHBSB\U31243.WEU
  • %HOMEPATH%\QHBSB\U2540.OUR
  • %HOMEPATH%\QHBSB\U44481.USC
  • %HOMEPATH%\QHBSB\U42689.HDN
  • %HOMEPATH%\QHBSB\V83941.HQP
  • %HOMEPATH%\QHBSB\V70566.LCS
  • %HOMEPATH%\QHBSB\V89861.VJM
  • %HOMEPATH%\QHBSB\V89442.POI
  • %HOMEPATH%\QHBSB\V17088.GNR
  • %HOMEPATH%\QHBSB\U76731.IOL
  • %HOMEPATH%\QHBSB\V56277.IVA
  • %HOMEPATH%\QHBSB\V32728.SXF
  • %HOMEPATH%\QHBSB\settings.ini
  • %HOMEPATH%\QHBSB\S97239.OYL
  • %HOMEPATH%\QHBSB\T6089.USB
  • %HOMEPATH%\QHBSB\T3504.MUQ
  • %HOMEPATH%\QHBSB\S57350.UKG
  • %HOMEPATH%\QHBSB\S54647.RMX
  • %HOMEPATH%\QHBSB\S79186.XPV
  • %HOMEPATH%\QHBSB\S76579.LLI
  • %HOMEPATH%\QHBSB\T65463.NIX
  • %HOMEPATH%\QHBSB\T58448.NXW
  • %HOMEPATH%\QHBSB\U1018.DPY
  • %HOMEPATH%\QHBSB\T97792.XFS
  • %HOMEPATH%\QHBSB\T23723.YJY
  • %HOMEPATH%\QHBSB\T18109.DNR
  • %HOMEPATH%\QHBSB\T52209.OOG
  • %HOMEPATH%\QHBSB\T26046.YQR
Sets the 'hidden' attribute to the following files:
  • %HOMEPATH%\QHBSB\41578.NHF
  • %HOMEPATH%\QHBSB\41659.HOA
  • %HOMEPATH%\QHBSB\42272.VZR
  • %HOMEPATH%\QHBSB\41369.SPK
  • %HOMEPATH%\QHBSB\40043.KOH
  • %HOMEPATH%\QHBSB\40181.BBB
  • %HOMEPATH%\QHBSB\40756.PJV
  • %HOMEPATH%\QHBSB\42422.MKO
  • %HOMEPATH%\QHBSB\44397.XNP
  • %HOMEPATH%\QHBSB\46035.MVF
  • %HOMEPATH%\QHBSB\46506.DYF
  • %HOMEPATH%\QHBSB\43591.ZMM
  • %HOMEPATH%\QHBSB\42733.PKG
  • %HOMEPATH%\QHBSB\42803.MCT
  • %HOMEPATH%\QHBSB\43426.CXK
  • %HOMEPATH%\QHBSB\39229.CPI
  • %HOMEPATH%\QHBSB\35619.CRG
  • %HOMEPATH%\QHBSB\35703.WCL
  • %HOMEPATH%\QHBSB\36032.TGD
  • %HOMEPATH%\QHBSB\35601.RMT
  • %HOMEPATH%\QHBSB\34211.UCI
  • %HOMEPATH%\QHBSB\34757.SXQ
  • %HOMEPATH%\QHBSB\35291.MIN
  • %HOMEPATH%\QHBSB\36072.WTD
  • %HOMEPATH%\QHBSB\38794.HTF
  • %HOMEPATH%\QHBSB\38800.UZB
  • %HOMEPATH%\QHBSB\39112.YWA
  • %HOMEPATH%\QHBSB\38396.SGG
  • %HOMEPATH%\QHBSB\36296.GUH
  • %HOMEPATH%\QHBSB\36705.PNE
  • %HOMEPATH%\QHBSB\37331.YXE
  • %HOMEPATH%\QHBSB\46562.WKV
  • %HOMEPATH%\QHBSB\52283.GQQ
  • %HOMEPATH%\QHBSB\53001.VKO
  • %HOMEPATH%\QHBSB\53003.XLT
  • %HOMEPATH%\QHBSB\52255.YNJ
  • %HOMEPATH%\QHBSB\51542.GLK
  • %HOMEPATH%\QHBSB\51892.YGF
  • %HOMEPATH%\QHBSB\52240.OQY
  • %HOMEPATH%\QHBSB\53610.CVH
  • %HOMEPATH%\QHBSB\56091.IFN
  • %HOMEPATH%\QHBSB\56231.PHS
  • %HOMEPATH%\QHBSB\56882.KKU
  • %HOMEPATH%\QHBSB\55738.EPO
  • %HOMEPATH%\QHBSB\53737.KDA
  • %HOMEPATH%\QHBSB\54992.FDH
  • %HOMEPATH%\QHBSB\55271.LJY
  • %HOMEPATH%\QHBSB\51427.IDS
  • %HOMEPATH%\QHBSB\47353.VBZ
  • %HOMEPATH%\QHBSB\47551.QEE
  • %HOMEPATH%\QHBSB\48139.GUZ
  • %HOMEPATH%\QHBSB\47284.IPI
  • %HOMEPATH%\QHBSB\46764.XWU
  • %HOMEPATH%\QHBSB\46904.WJP
  • %HOMEPATH%\QHBSB\46931.KVW
  • %HOMEPATH%\QHBSB\48192.WPS
  • %HOMEPATH%\QHBSB\50840.INJ
  • %HOMEPATH%\QHBSB\50989.WJH
  • %HOMEPATH%\QHBSB\51316.GZH
  • %HOMEPATH%\QHBSB\50740.BUF
  • %HOMEPATH%\QHBSB\49811.MZM
  • %HOMEPATH%\QHBSB\50395.BWJ
  • %HOMEPATH%\QHBSB\50402.MQL
  • %HOMEPATH%\QHBSB\33743.UKS
  • %HOMEPATH%\QHBSB\22422.HNT
  • %HOMEPATH%\QHBSB\22487.SVK
  • %HOMEPATH%\QHBSB\22583.QIW
  • %HOMEPATH%\QHBSB\22324.KBH
  • %HOMEPATH%\QHBSB\20979.JOH
  • %HOMEPATH%\QHBSB\21104.SSW
  • %HOMEPATH%\QHBSB\21774.HQY
  • %HOMEPATH%\QHBSB\22768.HSO
  • %HOMEPATH%\QHBSB\23667.FDP
  • %HOMEPATH%\QHBSB\23859.ZPF
  • %HOMEPATH%\QHBSB\25088.SKK
  • %HOMEPATH%\QHBSB\23561.SQS
  • %HOMEPATH%\QHBSB\22884.ERE
  • %HOMEPATH%\QHBSB\22936.WGO
  • %HOMEPATH%\QHBSB\23154.DIX
  • %HOMEPATH%\QHBSB\20059.EJT
  • %HOMEPATH%\QHBSB\15701.BDQ
  • %HOMEPATH%\QHBSB\15878.FEW
  • %HOMEPATH%\QHBSB\16294.UYS
  • %HOMEPATH%\QHBSB\15294.FXG
  • %HOMEPATH%\QHBSB\12991.NKO
  • %HOMEPATH%\QHBSB\13321.ZDO
  • %HOMEPATH%\QHBSB\14841.QZT
  • %HOMEPATH%\QHBSB\17187.JOA
  • %HOMEPATH%\QHBSB\17916.UZT
  • %HOMEPATH%\QHBSB\18724.RPX
  • %HOMEPATH%\QHBSB\19329.XQV
  • %HOMEPATH%\QHBSB\17884.VJB
  • %HOMEPATH%\QHBSB\17287.CDY
  • %HOMEPATH%\QHBSB\17585.BJE
  • %HOMEPATH%\QHBSB\17774.NCY
  • %HOMEPATH%\QHBSB\25172.LCO
  • %HOMEPATH%\QHBSB\30893.TBE
  • %HOMEPATH%\QHBSB\31306.ORP
  • %HOMEPATH%\QHBSB\31320.ZBH
  • %HOMEPATH%\QHBSB\30654.PZP
  • %HOMEPATH%\QHBSB\29691.UBH
  • %HOMEPATH%\QHBSB\29719.BAH
  • %HOMEPATH%\QHBSB\30004.KFV
  • %HOMEPATH%\QHBSB\31568.MQL
  • %HOMEPATH%\QHBSB\32980.UTC
  • %HOMEPATH%\QHBSB\33489.EZQ
  • %HOMEPATH%\QHBSB\33728.DTA
  • %HOMEPATH%\QHBSB\32767.RSS
  • %HOMEPATH%\QHBSB\31946.ENV
  • %HOMEPATH%\QHBSB\32002.MSE
  • %HOMEPATH%\QHBSB\32055.XTS
  • %HOMEPATH%\QHBSB\29319.THJ
  • %HOMEPATH%\QHBSB\26354.UGW
  • %HOMEPATH%\QHBSB\26373.PPL
  • %HOMEPATH%\QHBSB\26754.MWL
  • %HOMEPATH%\QHBSB\25941.FVE
  • %HOMEPATH%\QHBSB\25321.WPX
  • %HOMEPATH%\QHBSB\25619.HDX
  • %HOMEPATH%\QHBSB\25723.YOK
  • %HOMEPATH%\QHBSB\26765.OJQ
  • %HOMEPATH%\QHBSB\28796.QMF
  • %HOMEPATH%\QHBSB\28873.RDX
  • %HOMEPATH%\QHBSB\29135.JVF
  • %HOMEPATH%\QHBSB\28393.KEK
  • %HOMEPATH%\QHBSB\26921.NKC
  • %HOMEPATH%\QHBSB\27413.ZFB
  • %HOMEPATH%\QHBSB\27956.DIL
  • %HOMEPATH%\QHBSB\58557.SJL
  • %HOMEPATH%\QHBSB\91796.PYY
  • %HOMEPATH%\QHBSB\92207.ZGJ
  • %HOMEPATH%\QHBSB\92684.MDC
  • %HOMEPATH%\QHBSB\91795.NMJ
  • %HOMEPATH%\QHBSB\91332.LKO
  • %HOMEPATH%\QHBSB\91466.OJV
  • %HOMEPATH%\QHBSB\91534.FRJ
  • %HOMEPATH%\QHBSB\92919.DWK
  • %HOMEPATH%\QHBSB\94224.KQP
  • %HOMEPATH%\QHBSB\94512.EOA
  • %HOMEPATH%\QHBSB\94702.ODH
  • %HOMEPATH%\QHBSB\94127.DPY
  • %HOMEPATH%\QHBSB\93137.ZHR
  • %HOMEPATH%\QHBSB\93188.RBT
  • %HOMEPATH%\QHBSB\93707.NCA
  • %HOMEPATH%\QHBSB\91176.MJV
  • %HOMEPATH%\QHBSB\87533.KCN
  • %HOMEPATH%\QHBSB\87901.QNW
  • %HOMEPATH%\QHBSB\88017.AES
  • %HOMEPATH%\QHBSB\86614.JUD
  • %HOMEPATH%\QHBSB\84393.WCK
  • %HOMEPATH%\QHBSB\84812.HHV
  • %HOMEPATH%\QHBSB\84850.GCL
  • %HOMEPATH%\QHBSB\88159.KJR
  • %HOMEPATH%\QHBSB\90126.RWY
  • %HOMEPATH%\QHBSB\90220.KVS
  • %HOMEPATH%\QHBSB\90996.ZCN
  • %HOMEPATH%\QHBSB\89963.ARV
  • %HOMEPATH%\QHBSB\88649.HGE
  • %HOMEPATH%\QHBSB\89337.JMZ
  • %HOMEPATH%\QHBSB\89498.HRA
  • %HOMEPATH%\QHBSB\95705.DIY
  • %HOMEPATH%\QHBSB\A16409.LCG
  • %HOMEPATH%\QHBSB\A17760.XRD
  • %HOMEPATH%\QHBSB\A24449.ALE
  • %HOMEPATH%\QHBSB\A13312.HNM
  • %HOMEPATH%\QHBSB\935737.dat
  • %HOMEPATH%\QHBSB\A5374.YQT
  • %HOMEPATH%\QHBSB\A10943.SLF
  • %HOMEPATH%\QHBSB\A50041.GXI
  • %HOMEPATH%\QHBSB\B18333.DPA
  • %HOMEPATH%\QHBSB\B31685.MLN
  • %HOMEPATH%\QHBSB\B42819.LPO
  • %HOMEPATH%\QHBSB\A85936.ALA
  • %HOMEPATH%\QHBSB\A65535.EFI
  • %HOMEPATH%\QHBSB\A65852.RLY
  • %HOMEPATH%\QHBSB\A71323.IZL
  • %HOMEPATH%\QHBSB\746149.dat
  • %HOMEPATH%\QHBSB\97764.NNY
  • %HOMEPATH%\QHBSB\98264.WUK
  • %HOMEPATH%\QHBSB\98378.TMX
  • %HOMEPATH%\QHBSB\97051.FPS
  • %HOMEPATH%\QHBSB\95747.FBJ
  • %HOMEPATH%\QHBSB\96335.JYP
  • %HOMEPATH%\QHBSB\96410.FPA
  • %HOMEPATH%\QHBSB\98484.UYR
  • %HOMEPATH%\QHBSB\99916.YNF
  • %HOMEPATH%\QHBSB\336472.OZA
  • %HOMEPATH%\QHBSB\343648.exe
  • %HOMEPATH%\QHBSB\99634.XSJ
  • %HOMEPATH%\QHBSB\98675.ZOY
  • %HOMEPATH%\QHBSB\98982.OAT
  • %HOMEPATH%\QHBSB\99414.KGI
  • %HOMEPATH%\QHBSB\83847.JPU
  • %HOMEPATH%\QHBSB\67558.YAA
  • %HOMEPATH%\QHBSB\67852.BTI
  • %HOMEPATH%\QHBSB\67946.QPG
  • %HOMEPATH%\QHBSB\66807.GMU
  • %HOMEPATH%\QHBSB\64810.TOQ
  • %HOMEPATH%\QHBSB\65514.IPQ
  • %HOMEPATH%\QHBSB\65562.QJN
  • %HOMEPATH%\QHBSB\68200.AVQ
  • %HOMEPATH%\QHBSB\69917.OKQ
  • %HOMEPATH%\QHBSB\70727.UUR
  • %HOMEPATH%\QHBSB\71009.WTE
  • %HOMEPATH%\QHBSB\69699.YDX
  • %HOMEPATH%\QHBSB\69488.SBC
  • %HOMEPATH%\QHBSB\69531.GNI
  • %HOMEPATH%\QHBSB\69627.SMP
  • %HOMEPATH%\QHBSB\64550.YTA
  • %HOMEPATH%\QHBSB\60078.MRP
  • %HOMEPATH%\QHBSB\60088.VIH
  • %HOMEPATH%\QHBSB\60939.TRJ
  • %HOMEPATH%\QHBSB\60069.FIZ
  • %HOMEPATH%\QHBSB\58729.EMG
  • %HOMEPATH%\QHBSB\59539.AAK
  • %HOMEPATH%\QHBSB\59646.JXK
  • %HOMEPATH%\QHBSB\61001.XKA
  • %HOMEPATH%\QHBSB\62579.JQS
  • %HOMEPATH%\QHBSB\63259.IEU
  • %HOMEPATH%\QHBSB\63663.PZM
  • %HOMEPATH%\QHBSB\62559.GVN
  • %HOMEPATH%\QHBSB\61015.LAY
  • %HOMEPATH%\QHBSB\61587.YCL
  • %HOMEPATH%\QHBSB\61964.DRM
  • %HOMEPATH%\QHBSB\71448.AOB
  • %HOMEPATH%\QHBSB\79350.KHO
  • %HOMEPATH%\QHBSB\80065.ANT
  • %HOMEPATH%\QHBSB\80797.ZMN
  • %HOMEPATH%\QHBSB\78890.CID
  • %HOMEPATH%\QHBSB\78324.KZA
  • %HOMEPATH%\QHBSB\78410.LPT
  • %HOMEPATH%\QHBSB\78722.IHL
  • %HOMEPATH%\QHBSB\80856.BNE
  • %HOMEPATH%\QHBSB\83063.SLY
  • %HOMEPATH%\QHBSB\83427.GPK
  • %HOMEPATH%\QHBSB\83735.PPN
  • %HOMEPATH%\QHBSB\82884.RFI
  • %HOMEPATH%\QHBSB\81173.JHR
  • %HOMEPATH%\QHBSB\81514.PFT
  • %HOMEPATH%\QHBSB\82117.IOO
  • %HOMEPATH%\QHBSB\78285.VTW
  • %HOMEPATH%\QHBSB\72992.YXQ
  • %HOMEPATH%\QHBSB\73108.XTS
  • %HOMEPATH%\QHBSB\73603.HQH
  • %HOMEPATH%\QHBSB\72361.BEH
  • %HOMEPATH%\QHBSB\71460.HBN
  • %HOMEPATH%\QHBSB\72075.LWK
  • %HOMEPATH%\QHBSB\72111.OFH
  • %HOMEPATH%\QHBSB\73771.FDT
  • %HOMEPATH%\QHBSB\75754.JNR
  • %HOMEPATH%\QHBSB\76852.SKV
  • %HOMEPATH%\QHBSB\77830.QWB
  • %HOMEPATH%\QHBSB\75670.RYQ
  • %HOMEPATH%\QHBSB\75007.EDG
  • %HOMEPATH%\QHBSB\75070.DZB
  • %HOMEPATH%\QHBSB\75070.QUN
  • %HOMEPATH%\QHBSB\12203.OTD
  • %HOMEPATH%\QHBSB\K47562.RIF
  • %HOMEPATH%\QHBSB\K66638.QBA
  • %HOMEPATH%\QHBSB\K69042.KDV
  • %HOMEPATH%\QHBSB\K45313.MVU
  • %HOMEPATH%\QHBSB\K9387.RDK
  • %HOMEPATH%\QHBSB\K28132.KGG
  • %HOMEPATH%\QHBSB\K42215.UTZ
  • %HOMEPATH%\QHBSB\K69525.IDR
  • %HOMEPATH%\QHBSB\L10059.ZDS
  • %HOMEPATH%\QHBSB\L29927.OND
  • %HOMEPATH%\QHBSB\L32801.KJX
  • %HOMEPATH%\QHBSB\K94310.DDW
  • %HOMEPATH%\QHBSB\K80745.WEJ
  • %HOMEPATH%\QHBSB\K84820.VLE
  • %HOMEPATH%\QHBSB\K89910.DYD
  • %HOMEPATH%\QHBSB\K6942.TRJ
  • %HOMEPATH%\QHBSB\I93361.IQD
  • %HOMEPATH%\QHBSB\J22918.ZVJ
  • %HOMEPATH%\QHBSB\J27102.JRF
  • %HOMEPATH%\QHBSB\I85189.CSQ
  • %HOMEPATH%\QHBSB\I58100.HRV
  • %HOMEPATH%\QHBSB\I70751.HJA
  • %HOMEPATH%\QHBSB\I71321.PKX
  • %HOMEPATH%\QHBSB\J31650.WKE
  • %HOMEPATH%\QHBSB\J81788.LJG
  • %HOMEPATH%\QHBSB\J85954.EVE
  • %HOMEPATH%\QHBSB\J98202.OOG
  • %HOMEPATH%\QHBSB\J81523.OIP
  • %HOMEPATH%\QHBSB\J49125.WGR
  • %HOMEPATH%\QHBSB\J51168.CET
  • %HOMEPATH%\QHBSB\J79383.BVS
  • %HOMEPATH%\QHBSB\L47196.VYD
  • %HOMEPATH%\QHBSB\M71304.QZD
  • %HOMEPATH%\QHBSB\N31345.UXN
  • %HOMEPATH%\QHBSB\N44963.LWP
  • %HOMEPATH%\QHBSB\M64962.KUQ
  • %HOMEPATH%\QHBSB\M36890.HUD
  • %HOMEPATH%\QHBSB\M58906.BOB
  • %HOMEPATH%\QHBSB\M63074.IIX
  • %HOMEPATH%\QHBSB\N47878.KOE
  • %HOMEPATH%\QHBSB\O5258.XGC
  • %HOMEPATH%\QHBSB\O22523.VKS
  • %HOMEPATH%\QHBSB\O35144.KEI
  • %HOMEPATH%\QHBSB\N98459.QOO
  • %HOMEPATH%\QHBSB\N49807.HTS
  • %HOMEPATH%\QHBSB\N61382.RWJ
  • %HOMEPATH%\QHBSB\N71051.XQF
  • %HOMEPATH%\QHBSB\M34577.XTF
  • %HOMEPATH%\QHBSB\L80035.SCV
  • %HOMEPATH%\QHBSB\L88361.GBD
  • %HOMEPATH%\QHBSB\L96224.MKB
  • %HOMEPATH%\QHBSB\L61477.ARO
  • %HOMEPATH%\QHBSB\L48113.FLN
  • %HOMEPATH%\QHBSB\L56088.ZQD
  • %HOMEPATH%\QHBSB\L58836.GII
  • %HOMEPATH%\QHBSB\L98588.LSR
  • %HOMEPATH%\QHBSB\M20428.KVT
  • %HOMEPATH%\QHBSB\M23986.UTC
  • %HOMEPATH%\QHBSB\M26519.USD
  • %HOMEPATH%\QHBSB\M19231.NTX
  • %HOMEPATH%\QHBSB\L98857.DXO
  • %HOMEPATH%\QHBSB\M15746.BWZ
  • %HOMEPATH%\QHBSB\M16837.KHN
  • %HOMEPATH%\QHBSB\I51239.SCB
  • %HOMEPATH%\QHBSB\D23213.PDG
  • %HOMEPATH%\QHBSB\D28545.EQN
  • %HOMEPATH%\QHBSB\D44825.KBG
  • %HOMEPATH%\QHBSB\D18623.FKA
  • %HOMEPATH%\QHBSB\D3554.WNR
  • %HOMEPATH%\QHBSB\D6105.TFK
  • %HOMEPATH%\QHBSB\D15643.QYU
  • %HOMEPATH%\QHBSB\D48192.HIL
  • %HOMEPATH%\QHBSB\E19858.UUI
  • %HOMEPATH%\QHBSB\E32287.JZG
  • %HOMEPATH%\QHBSB\E36760.IQL
  • %HOMEPATH%\QHBSB\E18344.RSA
  • %HOMEPATH%\QHBSB\D63482.YMG
  • %HOMEPATH%\QHBSB\D85809.LPV
  • %HOMEPATH%\QHBSB\E4688.SLT
  • %HOMEPATH%\QHBSB\C91723.KUL
  • %HOMEPATH%\QHBSB\B90016.WES
  • %HOMEPATH%\QHBSB\B91816.JAP
  • %HOMEPATH%\QHBSB\B98363.LVO
  • %HOMEPATH%\QHBSB\B86287.UPZ
  • %HOMEPATH%\QHBSB\B72934.QIH
  • %HOMEPATH%\QHBSB\B77004.KDK
  • %HOMEPATH%\QHBSB\B82910.KEF
  • %HOMEPATH%\QHBSB\C9470.UUH
  • %HOMEPATH%\QHBSB\C66193.QQH
  • %HOMEPATH%\QHBSB\C67258.KJP
  • %HOMEPATH%\QHBSB\C85596.JLD
  • %HOMEPATH%\QHBSB\C50784.GGL
  • %HOMEPATH%\QHBSB\C32274.HDB
  • %HOMEPATH%\QHBSB\C35562.FXR
  • %HOMEPATH%\QHBSB\C50264.TJD
  • %HOMEPATH%\QHBSB\E41852.PYV
  • %HOMEPATH%\QHBSB\G92755.WMQ
  • %HOMEPATH%\QHBSB\H46400.ZNB
  • %HOMEPATH%\QHBSB\H46634.KBQ
  • %HOMEPATH%\QHBSB\G44981.LER
  • %HOMEPATH%\QHBSB\F95723.KCC
  • %HOMEPATH%\QHBSB\file.vbs
  • %HOMEPATH%\QHBSB\G4990.BBV
  • %HOMEPATH%\QHBSB\H54186.IFW
  • %HOMEPATH%\QHBSB\I40643.ALO
  • %HOMEPATH%\QHBSB\I42535.PHQ
  • %HOMEPATH%\QHBSB\I47173.DRA
  • %HOMEPATH%\QHBSB\I30174.PMY
  • %HOMEPATH%\QHBSB\H62226.PIL
  • %HOMEPATH%\QHBSB\H62459.LFP
  • %HOMEPATH%\QHBSB\H70338.PHH
  • %HOMEPATH%\QHBSB\F90702.VKD
  • %HOMEPATH%\QHBSB\E88257.FDR
  • %HOMEPATH%\QHBSB\E91309.WTR
  • %HOMEPATH%\QHBSB\F7458.WMC
  • %HOMEPATH%\QHBSB\E75174.SWV
  • %HOMEPATH%\QHBSB\E46757.DPO
  • %HOMEPATH%\QHBSB\E58442.SXT
  • %HOMEPATH%\QHBSB\E67310.MVR
  • %HOMEPATH%\QHBSB\F10506.GLE
  • %HOMEPATH%\QHBSB\F55099.DIS
  • %HOMEPATH%\QHBSB\F85650.JWK
  • %HOMEPATH%\QHBSB\F86517.TIV
  • %HOMEPATH%\QHBSB\F41945.ZDU
  • %HOMEPATH%\QHBSB\F13588.RQS
  • %HOMEPATH%\QHBSB\F20638.JOS
  • %HOMEPATH%\QHBSB\F20817.IAN
  • %HOMEPATH%\QHBSB\O40307.UZC
  • %HOMEPATH%\QHBSB\Y61883.JYY
  • %HOMEPATH%\QHBSB\Y62232.QZL
  • %HOMEPATH%\QHBSB\Y73854.VAR
  • %HOMEPATH%\QHBSB\Y16506.STR
  • %HOMEPATH%\QHBSB\Y12165.OTF
  • %HOMEPATH%\QHBSB\Y12551.QDI
  • %HOMEPATH%\QHBSB\Y13002.VHC
  • %HOMEPATH%\QHBSB\Y98114.AKQ
  • %HOMEPATH%\QHBSB\Z59144.PLZ
  • %HOMEPATH%\QHBSB\Z72705.XKX
  • %HOMEPATH%\QHBSB\Z76084.UOR
  • %HOMEPATH%\QHBSB\Z56678.HFI
  • %HOMEPATH%\QHBSB\Z9167.FDF
  • %HOMEPATH%\QHBSB\Z49190.DVI
  • %HOMEPATH%\QHBSB\Z51710.WOW
  • %HOMEPATH%\QHBSB\Y3497.SKI
  • %HOMEPATH%\QHBSB\X12061.GCA
  • %HOMEPATH%\QHBSB\X17432.CSR
  • %HOMEPATH%\QHBSB\X23732.ING
  • %HOMEPATH%\QHBSB\W61869.KBX
  • %HOMEPATH%\QHBSB\V89861.VJM
  • %HOMEPATH%\QHBSB\W6866.FEP
  • %HOMEPATH%\QHBSB\W17247.MOR
  • %HOMEPATH%\QHBSB\X26598.NQX
  • %HOMEPATH%\QHBSB\X69034.OYL
  • %HOMEPATH%\QHBSB\X80910.BRP
  • %HOMEPATH%\QHBSB\X88797.DTQ
  • %HOMEPATH%\QHBSB\X62023.EYK
  • %HOMEPATH%\QHBSB\X48528.PAE
  • %HOMEPATH%\QHBSB\X52918.SGS
  • %HOMEPATH%\QHBSB\X60466.XLO
  • %HOMEPATH%\QHBSB\Z77959.NJP
  • %HOMEPATH%\QHBSB\8302.TCG
  • %HOMEPATH%\QHBSB\8346.YRJ
  • %HOMEPATH%\QHBSB\8412.XWI
  • %HOMEPATH%\QHBSB\8093.PBY
  • %HOMEPATH%\QHBSB\7139.NTH
  • %HOMEPATH%\QHBSB\7980.TWM
  • %HOMEPATH%\QHBSB\8031.FNB
  • %HOMEPATH%\QHBSB\8814.SZP
  • %HOMEPATH%\QHBSB\10097.BPF
  • %HOMEPATH%\QHBSB\11976.XXF
  • %HOMEPATH%\QHBSB\12010.EOL
  • %HOMEPATH%\QHBSB\10044.JGJ
  • %HOMEPATH%\QHBSB\9250.SBB
  • %HOMEPATH%\QHBSB\9342.XBZ
  • %HOMEPATH%\QHBSB\9696.PCV
  • %HOMEPATH%\QHBSB\4955.YOB
  • %HOMEPATH%\QHBSB\Z97668.KOR
  • %HOMEPATH%\QHBSB\Z98909.MII
  • %HOMEPATH%\QHBSB\1076.WNV
  • %HOMEPATH%\QHBSB\Z97452.HGS
  • %HOMEPATH%\QHBSB\Z82587.TBK
  • %HOMEPATH%\QHBSB\Z88954.XVT
  • %HOMEPATH%\QHBSB\Z90601.LMK
  • %HOMEPATH%\QHBSB\1085.MRG
  • %HOMEPATH%\QHBSB\3422.BRN
  • %HOMEPATH%\QHBSB\4474.MUP
  • %HOMEPATH%\QHBSB\4644.RER
  • %HOMEPATH%\QHBSB\3265.XDA
  • %HOMEPATH%\QHBSB\1211.WWT
  • %HOMEPATH%\QHBSB\2518.NVM
  • %HOMEPATH%\QHBSB\2846.NCE
  • %HOMEPATH%\QHBSB\V89442.POI
  • %HOMEPATH%\QHBSB\R26365.ZQN
  • %HOMEPATH%\QHBSB\R33429.JRU
  • %HOMEPATH%\QHBSB\R36001.HIL
  • %HOMEPATH%\QHBSB\R2755.KFY
  • %HOMEPATH%\QHBSB\Q83271.OUQ
  • %HOMEPATH%\QHBSB\Q84796.EXH
  • %HOMEPATH%\QHBSB\Q95304.MEV
  • %HOMEPATH%\QHBSB\R43828.TNF
  • %HOMEPATH%\QHBSB\S6004.FKU
  • %HOMEPATH%\QHBSB\S9142.QZP
  • %HOMEPATH%\QHBSB\S12070.VCT
  • %HOMEPATH%\QHBSB\S2862.CJV
  • %HOMEPATH%\QHBSB\R51565.AOU
  • %HOMEPATH%\QHBSB\R88321.ACC
  • %HOMEPATH%\QHBSB\R93698.VNN
  • %HOMEPATH%\QHBSB\Q75021.JRP
  • %HOMEPATH%\QHBSB\P4463.MLV
  • %HOMEPATH%\QHBSB\P65692.EIH
  • %HOMEPATH%\QHBSB\P86114.MGY
  • %HOMEPATH%\QHBSB\O71853.SFA
  • %HOMEPATH%\QHBSB\O56821.BWV
  • %HOMEPATH%\QHBSB\O59721.JWW
  • %HOMEPATH%\QHBSB\O71255.UWB
  • %HOMEPATH%\QHBSB\P98747.MNM
  • %HOMEPATH%\QHBSB\Q62648.NBH
  • %HOMEPATH%\QHBSB\Q63157.NGS
  • %HOMEPATH%\QHBSB\Q65623.PQI
  • %HOMEPATH%\QHBSB\Q59094.YAL
  • %HOMEPATH%\QHBSB\Q11473.BZC
  • %HOMEPATH%\QHBSB\Q20146.ZEQ
  • %HOMEPATH%\QHBSB\Q31210.SMW
  • %HOMEPATH%\QHBSB\S36554.RGB
  • %HOMEPATH%\QHBSB\U44481.USC
  • %HOMEPATH%\QHBSB\U48645.CKZ
  • %HOMEPATH%\QHBSB\U64886.MZL
  • %HOMEPATH%\QHBSB\U42689.HDN
  • %HOMEPATH%\QHBSB\U1018.DPY
  • %HOMEPATH%\QHBSB\U2540.OUR
  • %HOMEPATH%\QHBSB\U31243.WEU
  • %HOMEPATH%\QHBSB\U68093.MMR
  • %HOMEPATH%\QHBSB\V56277.IVA
  • %HOMEPATH%\QHBSB\V70566.LCS
  • %HOMEPATH%\QHBSB\V83941.HQP
  • %HOMEPATH%\QHBSB\V32728.SXF
  • %HOMEPATH%\QHBSB\U74872.AOH
  • %HOMEPATH%\QHBSB\U76731.IOL
  • %HOMEPATH%\QHBSB\V17088.GNR
  • %HOMEPATH%\QHBSB\T97792.XFS
  • %HOMEPATH%\QHBSB\S79186.XPV
  • %HOMEPATH%\QHBSB\S97239.OYL
  • %HOMEPATH%\QHBSB\settings.ini
  • %HOMEPATH%\QHBSB\S76579.LLI
  • %HOMEPATH%\QHBSB\S52979.VDF
  • %HOMEPATH%\QHBSB\S54647.RMX
  • %HOMEPATH%\QHBSB\S57350.UKG
  • %HOMEPATH%\QHBSB\T3504.MUQ
  • %HOMEPATH%\QHBSB\T52209.OOG
  • %HOMEPATH%\QHBSB\T58448.NXW
  • %HOMEPATH%\QHBSB\T65463.NIX
  • %HOMEPATH%\QHBSB\T26046.YQR
  • %HOMEPATH%\QHBSB\T6089.USB
  • %HOMEPATH%\QHBSB\T18109.DNR
  • %HOMEPATH%\QHBSB\T23723.YJY
Deletes the following files:
  • %HOMEPATH%\QHBSB\GGEBLVYP.dat
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: ''
  • ClassName: 'EDIT' WindowName: ''

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android