Техническая информация
Для обеспечения автозапуска и распространения:
Модифицирует следующие ключи реестра:
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'SRRHB' = '%HOMEPATH%\SRRHB\start.vbs'
Вредоносные функции:
Для затруднения выявления своего присутствия в системе
блокирует запуск следующих системных утилит:
- Диспетчера задач (Taskmgr)
Создает и запускает на исполнение:
- '%HOMEPATH%\SRRHB\694798.exe' FYBWWZVD.dat
- '%HOMEPATH%\SRRHB\694798.exe' 12362.QVN
Запускает на исполнение:
- '%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
- '<SYSTEM32>\wscript.exe' "%HOMEPATH%\SRRHB\file.vbs" 5343
Внедряет код в
следующие системные процессы:
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe
Изменения в файловой системе:
Создает следующие файлы:
- %HOMEPATH%\SRRHB\71516.CLZ
- %HOMEPATH%\SRRHB\P78271.IMX
- %HOMEPATH%\SRRHB\76798.VFJ
- %HOMEPATH%\SRRHB\E7318.KQW
- %HOMEPATH%\SRRHB\E73049.JLL
- %HOMEPATH%\SRRHB\70548.JCK
- %HOMEPATH%\SRRHB\83476.KII
- %HOMEPATH%\SRRHB\T2341.YZV
- %HOMEPATH%\SRRHB\35496.KEA
- %HOMEPATH%\SRRHB\57116.NBG
- %HOMEPATH%\SRRHB\P77816.SGC
- %HOMEPATH%\SRRHB\75164.UTS
- %HOMEPATH%\SRRHB\8187.LBW
- %HOMEPATH%\SRRHB\69869.NKI
- %HOMEPATH%\SRRHB\19983.BYT
- %HOMEPATH%\SRRHB\57612.HKM
- %HOMEPATH%\SRRHB\Q31267.KPE
- %HOMEPATH%\SRRHB\A87885.GIO
- %HOMEPATH%\SRRHB\K8367.DFB
- %HOMEPATH%\SRRHB\57604.ZRC
- %HOMEPATH%\SRRHB\F31095.TXP
- %HOMEPATH%\SRRHB\95094.RZY
- %HOMEPATH%\SRRHB\60432.DAR
- %HOMEPATH%\SRRHB\61987.JEH
- %HOMEPATH%\SRRHB\T92418.IBI
- %HOMEPATH%\SRRHB\T93196.LQN
- %HOMEPATH%\SRRHB\4881.YFK
- %HOMEPATH%\SRRHB\L45829.SHY
- %HOMEPATH%\SRRHB\U8988.DEZ
- %HOMEPATH%\SRRHB\C7194.PGL
- %HOMEPATH%\SRRHB\84115.ICW
- %HOMEPATH%\SRRHB\12838.VWX
- %HOMEPATH%\SRRHB\41267.SNO
- %HOMEPATH%\SRRHB\M71141.LFP
- %HOMEPATH%\SRRHB\85699.TGB
- %HOMEPATH%\SRRHB\Q41100.DQM
- %HOMEPATH%\SRRHB\96547.GCG
- %HOMEPATH%\SRRHB\50560.APS
- %HOMEPATH%\SRRHB\76200.SUP
- %HOMEPATH%\SRRHB\88326.MJR
- %HOMEPATH%\SRRHB\4551.BMK
- %HOMEPATH%\SRRHB\72906.MSG
- %HOMEPATH%\SRRHB\91291.IEJ
- %HOMEPATH%\SRRHB\I87314.LJE
- %HOMEPATH%\SRRHB\B62388.IDT
- %HOMEPATH%\SRRHB\L95063.LOZ
- %HOMEPATH%\SRRHB\W10169.PPN
- %HOMEPATH%\SRRHB\45834.CLD
- %HOMEPATH%\SRRHB\U24814.IKV
- %HOMEPATH%\SRRHB\36080.NRZ
- %HOMEPATH%\SRRHB\Z77918.JWG
- %HOMEPATH%\SRRHB\78152.JPW
- %HOMEPATH%\SRRHB\23987.XHV
- %HOMEPATH%\SRRHB\45937.PLF
- %HOMEPATH%\SRRHB\99610.WSM
- %HOMEPATH%\SRRHB\I27610.LCK
- %HOMEPATH%\SRRHB\H64796.CRZ
- %HOMEPATH%\SRRHB\N52840.JLR
- %HOMEPATH%\SRRHB\M47250.QSQ
- %HOMEPATH%\SRRHB\L93634.BUJ
- %HOMEPATH%\SRRHB\C7228.DYT
- %HOMEPATH%\SRRHB\47824.EDI
- %HOMEPATH%\SRRHB\H46098.GWI
- %HOMEPATH%\SRRHB\K8365.ZSN
- %HOMEPATH%\SRRHB\Q93625.MNT
- %HOMEPATH%\SRRHB\H11437.JGI
- %HOMEPATH%\SRRHB\20689.GBS
- %HOMEPATH%\SRRHB\12320.WNU
- %HOMEPATH%\SRRHB\15205.NIU
- %HOMEPATH%\SRRHB\Y84705.JIW
- %HOMEPATH%\SRRHB\67296.KOA
- %HOMEPATH%\SRRHB\19345.UXB
- %HOMEPATH%\SRRHB\94332.IOJ
- %HOMEPATH%\SRRHB\X37549.YPL
- %HOMEPATH%\SRRHB\20010.OXN
- %HOMEPATH%\SRRHB\T91779.IWS
- %HOMEPATH%\SRRHB\49150.DZI
- %HOMEPATH%\SRRHB\6562.SRC
- %HOMEPATH%\SRRHB\33318.QGB
- %HOMEPATH%\SRRHB\T22216.JWF
- %HOMEPATH%\SRRHB\L6684.GLB
- %HOMEPATH%\SRRHB\91535.AFM
- %HOMEPATH%\SRRHB\55917.EEZ
- %HOMEPATH%\SRRHB\75415.KUH
- %HOMEPATH%\SRRHB\98529.MIG
- %HOMEPATH%\SRRHB\U19955.WKS
- %HOMEPATH%\SRRHB\70891.ICH
- %HOMEPATH%\SRRHB\40099.XHM
- %HOMEPATH%\SRRHB\A88851.NWS
- %HOMEPATH%\SRRHB\16988.RBR
- %HOMEPATH%\SRRHB\G96714.WVL
- %HOMEPATH%\SRRHB\W23523.YNP
- %HOMEPATH%\SRRHB\37087.DTB
- %HOMEPATH%\SRRHB\21458.AFJ
- %HOMEPATH%\SRRHB\Q2704.LBB
- %HOMEPATH%\SRRHB\N26707.UCF
- %HOMEPATH%\SRRHB\78841.ENM
- %HOMEPATH%\SRRHB\I3377.PKV
- %HOMEPATH%\SRRHB\43901.VZY
- %HOMEPATH%\SRRHB\Q86505.VPQ
- %HOMEPATH%\SRRHB\G57269.DZW
- %HOMEPATH%\SRRHB\46220.WGM
- %HOMEPATH%\SRRHB\M54671.ONS
- %HOMEPATH%\SRRHB\U77697.QZZ
- %HOMEPATH%\SRRHB\3373.AEH
- %HOMEPATH%\SRRHB\I66616.NPK
- %HOMEPATH%\SRRHB\12213.IRL
- %HOMEPATH%\SRRHB\7217.ADV
- %HOMEPATH%\SRRHB\C89489.QDF
- %HOMEPATH%\SRRHB\B77156.AKQ
- %HOMEPATH%\SRRHB\79211.FYI
- %HOMEPATH%\SRRHB\78880.LSH
- %HOMEPATH%\SRRHB\H55461.DPS
- %HOMEPATH%\SRRHB\H76041.HIQ
- %HOMEPATH%\SRRHB\94261.DLJ
- %HOMEPATH%\SRRHB\64315.KEW
- %HOMEPATH%\SRRHB\90601.JWI
- %HOMEPATH%\SRRHB\23946.KDF
- %HOMEPATH%\SRRHB\35815.WDR
- %HOMEPATH%\SRRHB\X95927.OJN
- %HOMEPATH%\SRRHB\43842.XTF
- %HOMEPATH%\SRRHB\39461.ULZ
- %HOMEPATH%\SRRHB\E15779.NAD
- %HOMEPATH%\SRRHB\34064.UFK
- %HOMEPATH%\SRRHB\25644.TFI
- %HOMEPATH%\SRRHB\7612.WSR
- %HOMEPATH%\SRRHB\U82855.DDF
- %HOMEPATH%\SRRHB\24062.ZLA
- %HOMEPATH%\SRRHB\19658.XBK
- %HOMEPATH%\SRRHB\T56410.FBM
- %HOMEPATH%\SRRHB\88429.QQX
- %HOMEPATH%\SRRHB\Q29820.DKC
- %HOMEPATH%\SRRHB\21830.ROS
- %HOMEPATH%\SRRHB\G21244.BDE
- %HOMEPATH%\SRRHB\55429.SBV
- %HOMEPATH%\SRRHB\D63842.QWN
- %HOMEPATH%\SRRHB\18014.CKC
- %HOMEPATH%\SRRHB\80027.SBZ
- %HOMEPATH%\SRRHB\D34525.RLR
- %HOMEPATH%\SRRHB\10902.BQC
- %HOMEPATH%\SRRHB\S39696.KVU
- %HOMEPATH%\SRRHB\W15585.ILP
- %HOMEPATH%\SRRHB\1773.TFL
- %HOMEPATH%\SRRHB\Q47555.OMS
- %HOMEPATH%\SRRHB\T53386.XYI
- %HOMEPATH%\SRRHB\35780.UDP
- %HOMEPATH%\SRRHB\O6240.FLE
- %HOMEPATH%\SRRHB\71462.GRI
- %HOMEPATH%\SRRHB\Q26933.ZWP
- %HOMEPATH%\SRRHB\31282.ILQ
- %HOMEPATH%\SRRHB\B62855.JML
- %HOMEPATH%\SRRHB\Z54436.HCM
- %HOMEPATH%\SRRHB\Q39319.AYL
- %HOMEPATH%\SRRHB\U56529.QPJ
- %HOMEPATH%\SRRHB\D37985.ZYQ
- %HOMEPATH%\SRRHB\61175.YMQ
- %HOMEPATH%\SRRHB\F6379.WWY
- %HOMEPATH%\SRRHB\16552.DLO
- %HOMEPATH%\SRRHB\44678.BIH
- %HOMEPATH%\SRRHB\D57002.KWA
- %HOMEPATH%\SRRHB\12574.JNT
- %HOMEPATH%\SRRHB\U93665.GNE
- %HOMEPATH%\SRRHB\98774.KWK
- %HOMEPATH%\SRRHB\93910.PQD
- %HOMEPATH%\SRRHB\93350.LJN
- %HOMEPATH%\SRRHB\73999.FBY
- %HOMEPATH%\SRRHB\P70230.FTK
- %HOMEPATH%\SRRHB\6319.ITT
- %HOMEPATH%\SRRHB\13687.CRT
- %HOMEPATH%\SRRHB\10118.LIL
- %HOMEPATH%\SRRHB\47259.ZWH
- %HOMEPATH%\SRRHB\64938.GBP
- %HOMEPATH%\SRRHB\74126.OCB
- %HOMEPATH%\SRRHB\N90050.BLL
- %HOMEPATH%\disable.txt
- %HOMEPATH%\SRRHB\FYBWWZVD.dat
- %HOMEPATH%\SRRHB\start.vbs
- %HOMEPATH%\SRRHB\start.cmd
- %HOMEPATH%\SRRHB\A3822.XUQ
- %HOMEPATH%\SRRHB\77554.JIB
- %HOMEPATH%\SRRHB\71074.HUF
- %HOMEPATH%\SRRHB\E22317.XVR
- %HOMEPATH%\SRRHB\Q37429.ZDO
- %HOMEPATH%\SRRHB\F99733.UAI
- %HOMEPATH%\SRRHB\75416.IVZ
- %HOMEPATH%\SRRHB\G52201.LKQ
- %HOMEPATH%\SRRHB\95108.FUM
- %HOMEPATH%\SRRHB\J72732.EWY
- %HOMEPATH%\SRRHB\5437.LZS
- %HOMEPATH%\SRRHB\52662.AVV
- %HOMEPATH%\SRRHB\O15795.GLO
- %HOMEPATH%\SRRHB\20972.DLZ
- %HOMEPATH%\SRRHB\8522.CGP
- %HOMEPATH%\SRRHB\C44183.ZLP
- %HOMEPATH%\SRRHB\Z80158.AJM
- %HOMEPATH%\SRRHB\28176.YJP
- %HOMEPATH%\SRRHB\T41941.JFO
- %HOMEPATH%\SRRHB\46405.ZER
- %HOMEPATH%\SRRHB\F7197.ANY
- %HOMEPATH%\SRRHB\56676.JBW
- %HOMEPATH%\SRRHB\U24528.IDY
- %HOMEPATH%\SRRHB\D20052.UWR
- %HOMEPATH%\SRRHB\63967.XYH
- %HOMEPATH%\SRRHB\57600.JOB
- %HOMEPATH%\SRRHB\J92458.AIY
- %HOMEPATH%\SRRHB\H79957.GMF
- %HOMEPATH%\SRRHB\V94633.TYA
- %HOMEPATH%\SRRHB\W54996.EKS
- %HOMEPATH%\SRRHB\22115.DLA
- %HOMEPATH%\SRRHB\64210.SKI
- %HOMEPATH%\SRRHB\H93524.YII
- %HOMEPATH%\SRRHB\68616.CKQ
- %HOMEPATH%\SRRHB\D87751.ZMB
- %HOMEPATH%\SRRHB\W55743.HUE
- %HOMEPATH%\SRRHB\P49616.HSK
- %HOMEPATH%\SRRHB\74905.JXW
- %HOMEPATH%\SRRHB\91931.IQP
- %HOMEPATH%\SRRHB\72292.NSV
- %HOMEPATH%\SRRHB\T69694.RGL
- %HOMEPATH%\SRRHB\78921.QHH
- %HOMEPATH%\SRRHB\B27529.WBH
- %HOMEPATH%\SRRHB\E64212.LWB
- %HOMEPATH%\SRRHB\M53559.BJD
- %HOMEPATH%\SRRHB\E88925.KLT
- %HOMEPATH%\SRRHB\62576.BPO
- %HOMEPATH%\SRRHB\T80348.BGF
- %HOMEPATH%\SRRHB\K35061.JUS
- %HOMEPATH%\SRRHB\19321.VSW
- %HOMEPATH%\SRRHB\G54894.OHD
- %HOMEPATH%\SRRHB\N17928.JYV
- %HOMEPATH%\SRRHB\N67959.VUW
- %HOMEPATH%\SRRHB\45727.VYX
- %HOMEPATH%\SRRHB\O6330.WBX
- %HOMEPATH%\SRRHB\67278.VDY
- %HOMEPATH%\SRRHB\A22043.GZK
- %HOMEPATH%\SRRHB\Q68098.NQS
- %HOMEPATH%\SRRHB\K60324.CYR
- %HOMEPATH%\SRRHB\27457.KMR
- %HOMEPATH%\SRRHB\K54011.VZY
- %HOMEPATH%\SRRHB\28841.NHK
- %HOMEPATH%\SRRHB\I59831.FUJ
- %HOMEPATH%\SRRHB\46944.JIA
- %HOMEPATH%\SRRHB\8920.NYB
- %HOMEPATH%\SRRHB\L59028.YLM
- %HOMEPATH%\SRRHB\R74783.UTX
- %HOMEPATH%\SRRHB\U52852.YZX
- %HOMEPATH%\SRRHB\23808.RYC
- %HOMEPATH%\SRRHB\61252.EXA
- %HOMEPATH%\SRRHB\Z21133.SRY
- %HOMEPATH%\SRRHB\46329.MAP
- %HOMEPATH%\SRRHB\W9858.OGB
- %HOMEPATH%\SRRHB\K88370.JSD
- %HOMEPATH%\SRRHB\62363.VBQ
- %HOMEPATH%\SRRHB\X68388.IKN
- %HOMEPATH%\SRRHB\87014.TFU
- %HOMEPATH%\SRRHB\38383.GUU
- %HOMEPATH%\SRRHB\7331.UHJ
- %HOMEPATH%\SRRHB\32615.DPI
- %HOMEPATH%\SRRHB\74782.DRC
- %HOMEPATH%\SRRHB\T38390.RFV
- %HOMEPATH%\SRRHB\Z99284.URD
- %HOMEPATH%\SRRHB\30082.YVG
- %HOMEPATH%\SRRHB\60786.MQQ
- %HOMEPATH%\SRRHB\98672.GAV
- %HOMEPATH%\SRRHB\27644.MFD
- %HOMEPATH%\SRRHB\U42152.AKY
- %HOMEPATH%\SRRHB\L12801.BSK
- %HOMEPATH%\SRRHB\Q41319.XBN
- %HOMEPATH%\SRRHB\79034.KEX
- %HOMEPATH%\SRRHB\R40787.IUI
- %HOMEPATH%\SRRHB\47952.LFZ
- %HOMEPATH%\SRRHB\F38276.PIQ
- %HOMEPATH%\SRRHB\Q79966.YSE
- %HOMEPATH%\SRRHB\10965.ZXU
- %HOMEPATH%\SRRHB\P74277.JFA
- %HOMEPATH%\SRRHB\U29370.PSP
- %HOMEPATH%\SRRHB\87618.CJR
- %HOMEPATH%\SRRHB\97798.UAW
- %HOMEPATH%\SRRHB\L13619.EUL
- %HOMEPATH%\SRRHB\31773.ZMS
- %HOMEPATH%\SRRHB\57592.UGE
- %HOMEPATH%\SRRHB\17083.BEQ
- %HOMEPATH%\SRRHB\89134.PES
- %HOMEPATH%\SRRHB\20716.YKS
- %HOMEPATH%\SRRHB\40492.CRC
- %HOMEPATH%\SRRHB\11393.CHB
- %HOMEPATH%\SRRHB\78424.UPO
- %HOMEPATH%\SRRHB\U1873.CWM
- %HOMEPATH%\SRRHB\G59822.PMX
- %HOMEPATH%\SRRHB\96873.SJZ
- %HOMEPATH%\SRRHB\85495.SBJ
- %HOMEPATH%\SRRHB\47960.TJG
- %HOMEPATH%\SRRHB\10537.KIR
- %HOMEPATH%\SRRHB\27523.MEO
- %HOMEPATH%\SRRHB\82872.KGR
- %HOMEPATH%\SRRHB\L26593.LCH
- %HOMEPATH%\SRRHB\D95437.UDX
- %HOMEPATH%\SRRHB\K13623.OCI
- %HOMEPATH%\SRRHB\E44302.QEM
- %HOMEPATH%\SRRHB\23389.FYP
- %HOMEPATH%\SRRHB\49179.QDT
- %HOMEPATH%\SRRHB\Z21513.RRT
- %HOMEPATH%\SRRHB\59152.JEC
- %HOMEPATH%\SRRHB\U60478.UJD
- %HOMEPATH%\SRRHB\F52159.KGJ
- %HOMEPATH%\SRRHB\J78724.NMI
- %HOMEPATH%\SRRHB\56779.LQI
- %HOMEPATH%\SRRHB\E78342.YCA
- %HOMEPATH%\SRRHB\62771.JRV
- %HOMEPATH%\SRRHB\63775.YYR
- %HOMEPATH%\SRRHB\30876.OQB
- %HOMEPATH%\SRRHB\91254.QLT
- %HOMEPATH%\SRRHB\X89905.KYK
- %HOMEPATH%\SRRHB\78971.EBG
- %HOMEPATH%\SRRHB\73956.QVU
- %HOMEPATH%\SRRHB\92443.RXP
- %HOMEPATH%\SRRHB\48954.ECV
- %HOMEPATH%\SRRHB\29542.JSU
- %HOMEPATH%\SRRHB\U55638.YBN
- %HOMEPATH%\SRRHB\15158.TTW
- %HOMEPATH%\SRRHB\H56054.AIW
- %HOMEPATH%\SRRHB\A34121.ETG
- %HOMEPATH%\SRRHB\76546.UZN
- %HOMEPATH%\SRRHB\11535.CAE
- %HOMEPATH%\SRRHB\4679.WQS
- %HOMEPATH%\SRRHB\D1008.UXH
- %HOMEPATH%\SRRHB\84931.CZF
- %HOMEPATH%\SRRHB\D26460.QEJ
- %HOMEPATH%\SRRHB\Y10015.QLX
- %HOMEPATH%\SRRHB\L36786.PLM
- %HOMEPATH%\SRRHB\S35815.XKQ
- %HOMEPATH%\SRRHB\76420.HVL
- %HOMEPATH%\SRRHB\34155.UPR
- %HOMEPATH%\SRRHB\I84787.WHQ
- %HOMEPATH%\SRRHB\12971.XMG
- %HOMEPATH%\SRRHB\89411.ORM
- %HOMEPATH%\SRRHB\H85719.MXE
- %HOMEPATH%\SRRHB\I49322.VKU
- %HOMEPATH%\SRRHB\80340.TDI
- %HOMEPATH%\SRRHB\9328.MRJ
- %HOMEPATH%\SRRHB\C91088.TPQ
- %HOMEPATH%\SRRHB\79035.NAC
- %HOMEPATH%\SRRHB\G44269.KTC
- %HOMEPATH%\SRRHB\55951.ANQ
- %HOMEPATH%\SRRHB\7046.VKT
- %HOMEPATH%\SRRHB\24868.DWZ
- %HOMEPATH%\SRRHB\F85321.KNW
- %HOMEPATH%\SRRHB\14450.PTI
- %HOMEPATH%\SRRHB\N71819.YXS
- %HOMEPATH%\SRRHB\R96969.JAL
- %HOMEPATH%\SRRHB\67464.VJN
- %HOMEPATH%\SRRHB\file.vbs
- %HOMEPATH%\SRRHB\settings.ini
- %HOMEPATH%\SRRHB\E83096.DHP
- %HOMEPATH%\SRRHB\32219.CPJ
- %HOMEPATH%\SRRHB\344034.dat
- %HOMEPATH%\SRRHB\12362.QVN
- %HOMEPATH%\SRRHB\694798.exe
- %HOMEPATH%\SRRHB\553117.dat
- %HOMEPATH%\SRRHB\B64025.AJK
- %HOMEPATH%\SRRHB\L16786.DAF
- %HOMEPATH%\SRRHB\92187.GDV
- %HOMEPATH%\SRRHB\V7450.JBF
- %HOMEPATH%\SRRHB\21964.MVN
- %HOMEPATH%\SRRHB\P14356.UUG
- %HOMEPATH%\SRRHB\54670.GCA
- %HOMEPATH%\SRRHB\I78437.TMI
- %HOMEPATH%\SRRHB\V47867.LDG
- %HOMEPATH%\SRRHB\Q83861.SNU
- %HOMEPATH%\SRRHB\P32815.OSV
- %HOMEPATH%\SRRHB\N70352.OUU
- %HOMEPATH%\SRRHB\70419.GPA
- %HOMEPATH%\SRRHB\D91299.YBG
- %HOMEPATH%\SRRHB\G40841.VWG
- %HOMEPATH%\SRRHB\32599.YOL
- %HOMEPATH%\SRRHB\20584.KAP
- %HOMEPATH%\SRRHB\22478.WUZ
- %HOMEPATH%\SRRHB\L50755.NAM
- %HOMEPATH%\SRRHB\I24667.KJY
- %HOMEPATH%\SRRHB\16446.JOM
- %HOMEPATH%\SRRHB\26788.HER
- %HOMEPATH%\SRRHB\8910.ADU
- %HOMEPATH%\SRRHB\3309.NSJ
- %HOMEPATH%\SRRHB\8904.XQU
- %HOMEPATH%\SRRHB\22240.JDW
- %HOMEPATH%\SRRHB\K75848.ANW
- %HOMEPATH%\SRRHB\O1842.COC
- %HOMEPATH%\SRRHB\R27650.GUZ
- %HOMEPATH%\SRRHB\Q46562.CCR
- %HOMEPATH%\SRRHB\P84329.LDI
- %HOMEPATH%\SRRHB\89169.KGD
- %HOMEPATH%\SRRHB\17160.QWS
- %HOMEPATH%\SRRHB\58248.BHB
- %HOMEPATH%\SRRHB\28988.SJP
- %HOMEPATH%\SRRHB\94056.IWH
- %HOMEPATH%\SRRHB\86679.IQE
- %HOMEPATH%\SRRHB\95380.DLW
- %HOMEPATH%\SRRHB\W26999.QUD
- %HOMEPATH%\SRRHB\Z43099.EMG
- %HOMEPATH%\SRRHB\G50379.ZGF
- %HOMEPATH%\SRRHB\B13751.HZY
- %HOMEPATH%\SRRHB\F67064.KMS
- %HOMEPATH%\SRRHB\13431.ZQJ
- %HOMEPATH%\SRRHB\A52042.QMB
- %HOMEPATH%\SRRHB\Q59135.CQP
- %HOMEPATH%\SRRHB\32902.XLU
- %HOMEPATH%\SRRHB\H71118.RWG
- %HOMEPATH%\SRRHB\V88051.KSB
- %HOMEPATH%\SRRHB\K82201.EZJ
- %HOMEPATH%\SRRHB\48121.CQJ
- %HOMEPATH%\SRRHB\39892.PVL
- %HOMEPATH%\SRRHB\W26066.BRX
- %HOMEPATH%\SRRHB\W91263.OUA
- %HOMEPATH%\SRRHB\85324.BPY
- %HOMEPATH%\SRRHB\94077.VGD
- %HOMEPATH%\SRRHB\74600.UIK
- %HOMEPATH%\SRRHB\I67958.MWR
- %HOMEPATH%\SRRHB\E46477.YOB
- %HOMEPATH%\SRRHB\35271.XTM
- %HOMEPATH%\SRRHB\71056.GFY
- %HOMEPATH%\SRRHB\O55377.QFA
- %HOMEPATH%\SRRHB\18465.BJK
- %HOMEPATH%\SRRHB\59617.DVD
- %HOMEPATH%\SRRHB\D13973.KHV
- %HOMEPATH%\SRRHB\G92933.MQC
- %HOMEPATH%\SRRHB\35441.HGM
- %HOMEPATH%\SRRHB\86065.VYQ
- %HOMEPATH%\SRRHB\93050.HJU
- %HOMEPATH%\SRRHB\G67760.ITM
- %HOMEPATH%\SRRHB\G97172.VGH
- %HOMEPATH%\SRRHB\A49662.UNS
- %HOMEPATH%\SRRHB\63081.ZNY
- %HOMEPATH%\SRRHB\31271.ZYI
- %HOMEPATH%\SRRHB\16916.KFO
- %HOMEPATH%\SRRHB\10671.ZYL
- %HOMEPATH%\SRRHB\71422.EOO
- %HOMEPATH%\SRRHB\L3456.CMA
- %HOMEPATH%\SRRHB\O13875.MLN
- %HOMEPATH%\SRRHB\L56450.SJM
- %HOMEPATH%\SRRHB\B44031.LQW
- %HOMEPATH%\SRRHB\95489.HOV
- %HOMEPATH%\SRRHB\O10375.VNO
- %HOMEPATH%\SRRHB\97260.ZCT
- %HOMEPATH%\SRRHB\90531.HZO
- %HOMEPATH%\SRRHB\65995.VVE
- %HOMEPATH%\SRRHB\C71028.TMA
- %HOMEPATH%\SRRHB\V30223.YZH
- %HOMEPATH%\SRRHB\L88974.SBZ
- %HOMEPATH%\SRRHB\Y88314.FNT
- %HOMEPATH%\SRRHB\M71742.MIX
- %HOMEPATH%\SRRHB\41578.HMZ
- %HOMEPATH%\SRRHB\26311.LLG
- %HOMEPATH%\SRRHB\91265.BCN
- %HOMEPATH%\SRRHB\29814.VLP
- %HOMEPATH%\SRRHB\4737.EYU
- %HOMEPATH%\SRRHB\53927.XOZ
- %HOMEPATH%\SRRHB\98746.MIC
- %HOMEPATH%\SRRHB\X59910.CON
- %HOMEPATH%\SRRHB\P23785.UVL
- %HOMEPATH%\SRRHB\81686.BQN
- %HOMEPATH%\SRRHB\W33450.MSW
- %HOMEPATH%\SRRHB\C81734.JWH
- %HOMEPATH%\SRRHB\Z65214.MUF
- %HOMEPATH%\SRRHB\I90670.AXX
- %HOMEPATH%\SRRHB\W54459.QKJ
- %HOMEPATH%\SRRHB\Y71781.XDO
- %HOMEPATH%\SRRHB\3006.CER
- %HOMEPATH%\SRRHB\63447.MIY
- %HOMEPATH%\SRRHB\F29415.YWI
- %HOMEPATH%\SRRHB\26776.XXY
- %HOMEPATH%\SRRHB\N41374.LSV
- %HOMEPATH%\SRRHB\69394.GUG
- %HOMEPATH%\SRRHB\G48257.BRY
- %HOMEPATH%\SRRHB\K3790.ZHX
- %HOMEPATH%\SRRHB\23764.QTU
- %HOMEPATH%\SRRHB\B96510.WRH
- %HOMEPATH%\SRRHB\C47038.VNE
- %HOMEPATH%\SRRHB\67388.OBJ
- %HOMEPATH%\SRRHB\57778.AWM
- %HOMEPATH%\SRRHB\83107.IYU
- %HOMEPATH%\SRRHB\T49047.LKB
- %HOMEPATH%\SRRHB\38271.VUI
- %HOMEPATH%\SRRHB\K69179.GAM
- %HOMEPATH%\SRRHB\U56210.ULC
- %HOMEPATH%\SRRHB\K89379.DVJ
- %HOMEPATH%\SRRHB\A92536.PIV
- %HOMEPATH%\SRRHB\5912.YHN
- %HOMEPATH%\SRRHB\V87974.APU
- %HOMEPATH%\SRRHB\V75810.IJA
- %HOMEPATH%\SRRHB\O51711.OIE
- %HOMEPATH%\SRRHB\45917.MBO
- %HOMEPATH%\SRRHB\25711.ZJW
- %HOMEPATH%\SRRHB\M32853.MBX
- %HOMEPATH%\SRRHB\45458.XZV
- %HOMEPATH%\SRRHB\78950.NWL
- %HOMEPATH%\SRRHB\30561.SNA
- %HOMEPATH%\SRRHB\M10649.CSA
- %HOMEPATH%\SRRHB\V59129.DTN
- %HOMEPATH%\SRRHB\V19869.UCG
- %HOMEPATH%\SRRHB\B37700.JFY
- %HOMEPATH%\SRRHB\R89797.IOC
- %HOMEPATH%\SRRHB\W14734.XAT
- %HOMEPATH%\SRRHB\D51532.MRU
- %HOMEPATH%\SRRHB\66471.QRN
- %HOMEPATH%\SRRHB\C16889.FJH
- %HOMEPATH%\SRRHB\P35940.LIR
- %HOMEPATH%\SRRHB\U33113.OWZ
- %HOMEPATH%\SRRHB\Q73465.CTG
- %HOMEPATH%\SRRHB\A75240.WZX
- %HOMEPATH%\SRRHB\85831.ZYG
- %HOMEPATH%\SRRHB\51492.XIN
- %HOMEPATH%\SRRHB\35394.SHY
- %HOMEPATH%\SRRHB\43319.XFA
- %HOMEPATH%\SRRHB\K49343.YWG
- %HOMEPATH%\SRRHB\E87994.QAF
- %HOMEPATH%\SRRHB\65334.WFZ
- %HOMEPATH%\SRRHB\55675.NQD
- %HOMEPATH%\SRRHB\L23609.GHG
- %HOMEPATH%\SRRHB\6346.TJJ
- %HOMEPATH%\SRRHB\21662.KMR
- %HOMEPATH%\SRRHB\W36903.HUB
- %HOMEPATH%\SRRHB\N42038.EBL
- %HOMEPATH%\SRRHB\64947.BJY
- %HOMEPATH%\SRRHB\8921.ILU
- %HOMEPATH%\SRRHB\Q64241.BYB
- %HOMEPATH%\SRRHB\Y2349.VAS
- %HOMEPATH%\SRRHB\92228.FQQ
- %HOMEPATH%\SRRHB\99382.MSG
- %HOMEPATH%\SRRHB\D95230.MKT
- %HOMEPATH%\SRRHB\71374.RPM
- %HOMEPATH%\SRRHB\5236.MWB
- %HOMEPATH%\SRRHB\N96945.PTF
- %HOMEPATH%\SRRHB\M97757.TRD
Присваивает атрибут 'скрытый' для следующих файлов:
- %HOMEPATH%\SRRHB\T2341.YZV
- %HOMEPATH%\SRRHB\E73049.JLL
- %HOMEPATH%\SRRHB\P78271.IMX
- %HOMEPATH%\SRRHB\83476.KII
- %HOMEPATH%\SRRHB\L45829.SHY
- %HOMEPATH%\SRRHB\U8988.DEZ
- %HOMEPATH%\SRRHB\70548.JCK
- %HOMEPATH%\SRRHB\Q31267.KPE
- %HOMEPATH%\SRRHB\57612.HKM
- %HOMEPATH%\SRRHB\8187.LBW
- %HOMEPATH%\SRRHB\57116.NBG
- %HOMEPATH%\SRRHB\19983.BYT
- %HOMEPATH%\SRRHB\E7318.KQW
- %HOMEPATH%\SRRHB\71516.CLZ
- %HOMEPATH%\SRRHB\69869.NKI
- %HOMEPATH%\SRRHB\76798.VFJ
- %HOMEPATH%\SRRHB\T93196.LQN
- %HOMEPATH%\SRRHB\T92418.IBI
- %HOMEPATH%\SRRHB\95094.RZY
- %HOMEPATH%\SRRHB\K8367.DFB
- %HOMEPATH%\SRRHB\61987.JEH
- %HOMEPATH%\SRRHB\79211.FYI
- %HOMEPATH%\SRRHB\78880.LSH
- %HOMEPATH%\SRRHB\60432.DAR
- %HOMEPATH%\SRRHB\20689.GBS
- %HOMEPATH%\SRRHB\41267.SNO
- %HOMEPATH%\SRRHB\C7194.PGL
- %HOMEPATH%\SRRHB\4881.YFK
- %HOMEPATH%\SRRHB\12838.VWX
- %HOMEPATH%\SRRHB\F31095.TXP
- %HOMEPATH%\SRRHB\A87885.GIO
- %HOMEPATH%\SRRHB\84115.ICW
- %HOMEPATH%\SRRHB\57604.ZRC
- %HOMEPATH%\SRRHB\4551.BMK
- %HOMEPATH%\SRRHB\50560.APS
- %HOMEPATH%\SRRHB\85699.TGB
- %HOMEPATH%\SRRHB\88326.MJR
- %HOMEPATH%\SRRHB\C7228.DYT
- %HOMEPATH%\SRRHB\47824.EDI
- %HOMEPATH%\SRRHB\76200.SUP
- %HOMEPATH%\SRRHB\36080.NRZ
- %HOMEPATH%\SRRHB\U24814.IKV
- %HOMEPATH%\SRRHB\L95063.LOZ
- %HOMEPATH%\SRRHB\91291.IEJ
- %HOMEPATH%\SRRHB\45834.CLD
- %HOMEPATH%\SRRHB\96547.GCG
- %HOMEPATH%\SRRHB\M71141.LFP
- %HOMEPATH%\SRRHB\W10169.PPN
- %HOMEPATH%\SRRHB\Q41100.DQM
- %HOMEPATH%\SRRHB\M47250.QSQ
- %HOMEPATH%\SRRHB\N52840.JLR
- %HOMEPATH%\SRRHB\99610.WSM
- %HOMEPATH%\SRRHB\78152.JPW
- %HOMEPATH%\SRRHB\H64796.CRZ
- %HOMEPATH%\SRRHB\75164.UTS
- %HOMEPATH%\SRRHB\35496.KEA
- %HOMEPATH%\SRRHB\I27610.LCK
- %HOMEPATH%\SRRHB\P77816.SGC
- %HOMEPATH%\SRRHB\H11437.JGI
- %HOMEPATH%\SRRHB\H46098.GWI
- %HOMEPATH%\SRRHB\L93634.BUJ
- %HOMEPATH%\SRRHB\Q93625.MNT
- %HOMEPATH%\SRRHB\45937.PLF
- %HOMEPATH%\SRRHB\Z77918.JWG
- %HOMEPATH%\SRRHB\K8365.ZSN
- %HOMEPATH%\SRRHB\23987.XHV
- %HOMEPATH%\SRRHB\X37549.YPL
- %HOMEPATH%\SRRHB\20010.OXN
- %HOMEPATH%\SRRHB\12320.WNU
- %HOMEPATH%\SRRHB\15205.NIU
- %HOMEPATH%\SRRHB\75415.KUH
- %HOMEPATH%\SRRHB\Q2704.LBB
- %HOMEPATH%\SRRHB\19345.UXB
- %HOMEPATH%\SRRHB\94332.IOJ
- %HOMEPATH%\SRRHB\91535.AFM
- %HOMEPATH%\SRRHB\55917.EEZ
- %HOMEPATH%\SRRHB\T91779.IWS
- %HOMEPATH%\SRRHB\49150.DZI
- %HOMEPATH%\SRRHB\Y84705.JIW
- %HOMEPATH%\SRRHB\67296.KOA
- %HOMEPATH%\SRRHB\T22216.JWF
- %HOMEPATH%\SRRHB\L6684.GLB
- %HOMEPATH%\SRRHB\N26707.UCF
- %HOMEPATH%\SRRHB\G96714.WVL
- %HOMEPATH%\SRRHB\W23523.YNP
- %HOMEPATH%\SRRHB\98529.MIG
- %HOMEPATH%\SRRHB\U19955.WKS
- %HOMEPATH%\SRRHB\L12801.BSK
- %HOMEPATH%\SRRHB\90531.HZO
- %HOMEPATH%\SRRHB\A88851.NWS
- %HOMEPATH%\SRRHB\16988.RBR
- %HOMEPATH%\SRRHB\43901.VZY
- %HOMEPATH%\SRRHB\Q86505.VPQ
- %HOMEPATH%\SRRHB\37087.DTB
- %HOMEPATH%\SRRHB\21458.AFJ
- %HOMEPATH%\SRRHB\70891.ICH
- %HOMEPATH%\SRRHB\40099.XHM
- %HOMEPATH%\SRRHB\78841.ENM
- %HOMEPATH%\SRRHB\I3377.PKV
- %HOMEPATH%\SRRHB\12213.IRL
- %HOMEPATH%\SRRHB\7217.ADV
- %HOMEPATH%\SRRHB\G57269.DZW
- %HOMEPATH%\SRRHB\46220.WGM
- %HOMEPATH%\SRRHB\90601.JWI
- %HOMEPATH%\SRRHB\24062.ZLA
- %HOMEPATH%\SRRHB\3373.AEH
- %HOMEPATH%\SRRHB\I66616.NPK
- %HOMEPATH%\SRRHB\94261.DLJ
- %HOMEPATH%\SRRHB\64315.KEW
- %HOMEPATH%\SRRHB\C89489.QDF
- %HOMEPATH%\SRRHB\B77156.AKQ
- %HOMEPATH%\SRRHB\M54671.ONS
- %HOMEPATH%\SRRHB\U77697.QZZ
- %HOMEPATH%\SRRHB\H55461.DPS
- %HOMEPATH%\SRRHB\H76041.HIQ
- %HOMEPATH%\SRRHB\19658.XBK
- %HOMEPATH%\SRRHB\34064.UFK
- %HOMEPATH%\SRRHB\25644.TFI
- %HOMEPATH%\SRRHB\23946.KDF
- %HOMEPATH%\SRRHB\35815.WDR
- %HOMEPATH%\SRRHB\6562.SRC
- %HOMEPATH%\SRRHB\33318.QGB
- %HOMEPATH%\SRRHB\39461.ULZ
- %HOMEPATH%\SRRHB\E15779.NAD
- %HOMEPATH%\SRRHB\Q29820.DKC
- %HOMEPATH%\SRRHB\21830.ROS
- %HOMEPATH%\SRRHB\7612.WSR
- %HOMEPATH%\SRRHB\U82855.DDF
- %HOMEPATH%\SRRHB\X95927.OJN
- %HOMEPATH%\SRRHB\43842.XTF
- %HOMEPATH%\SRRHB\T56410.FBM
- %HOMEPATH%\SRRHB\88429.QQX
- %HOMEPATH%\SRRHB\80027.SBZ
- %HOMEPATH%\SRRHB\D34525.RLR
- %HOMEPATH%\SRRHB\10902.BQC
- %HOMEPATH%\SRRHB\S39696.KVU
- %HOMEPATH%\SRRHB\U93665.GNE
- %HOMEPATH%\SRRHB\44678.BIH
- %HOMEPATH%\SRRHB\31282.ILQ
- %HOMEPATH%\SRRHB\12574.JNT
- %HOMEPATH%\SRRHB\35780.UDP
- %HOMEPATH%\SRRHB\O6240.FLE
- %HOMEPATH%\SRRHB\71462.GRI
- %HOMEPATH%\SRRHB\Q26933.ZWP
- %HOMEPATH%\SRRHB\G21244.BDE
- %HOMEPATH%\SRRHB\55429.SBV
- %HOMEPATH%\SRRHB\D63842.QWN
- %HOMEPATH%\SRRHB\18014.CKC
- %HOMEPATH%\SRRHB\D57002.KWA
- %HOMEPATH%\SRRHB\D37985.ZYQ
- %HOMEPATH%\SRRHB\61175.YMQ
- %HOMEPATH%\SRRHB\F6379.WWY
- %HOMEPATH%\SRRHB\16552.DLO
- %HOMEPATH%\SRRHB\R74783.UTX
- %HOMEPATH%\SRRHB\46944.JIA
- %HOMEPATH%\SRRHB\56676.JBW
- %HOMEPATH%\SRRHB\L59028.YLM
- %HOMEPATH%\SRRHB\98774.KWK
- %HOMEPATH%\SRRHB\93910.PQD
- %HOMEPATH%\SRRHB\93350.LJN
- %HOMEPATH%\SRRHB\73999.FBY
- %HOMEPATH%\SRRHB\B62855.JML
- %HOMEPATH%\SRRHB\Z54436.HCM
- %HOMEPATH%\SRRHB\Q39319.AYL
- %HOMEPATH%\SRRHB\U56529.QPJ
- %HOMEPATH%\SRRHB\47259.ZWH
- %HOMEPATH%\SRRHB\64938.GBP
- %HOMEPATH%\SRRHB\74126.OCB
- %HOMEPATH%\SRRHB\N90050.BLL
- %HOMEPATH%\SRRHB\Z80158.AJM
- %HOMEPATH%\SRRHB\20972.DLZ
- %HOMEPATH%\SRRHB\Q37429.ZDO
- %HOMEPATH%\SRRHB\C44183.ZLP
- %HOMEPATH%\SRRHB\A3822.XUQ
- %HOMEPATH%\SRRHB\77554.JIB
- %HOMEPATH%\SRRHB\71074.HUF
- %HOMEPATH%\SRRHB\E22317.XVR
- %HOMEPATH%\SRRHB\P70230.FTK
- %HOMEPATH%\SRRHB\6319.ITT
- %HOMEPATH%\SRRHB\13687.CRT
- %HOMEPATH%\SRRHB\10118.LIL
- %HOMEPATH%\SRRHB\8522.CGP
- %HOMEPATH%\SRRHB\J72732.EWY
- %HOMEPATH%\SRRHB\5437.LZS
- %HOMEPATH%\SRRHB\52662.AVV
- %HOMEPATH%\SRRHB\O15795.GLO
- %HOMEPATH%\SRRHB\W15585.ILP
- %HOMEPATH%\SRRHB\1773.TFL
- %HOMEPATH%\SRRHB\Q47555.OMS
- %HOMEPATH%\SRRHB\T53386.XYI
- %HOMEPATH%\SRRHB\28176.YJP
- %HOMEPATH%\SRRHB\T41941.JFO
- %HOMEPATH%\SRRHB\46405.ZER
- %HOMEPATH%\SRRHB\F7197.ANY
- %HOMEPATH%\SRRHB\F99733.UAI
- %HOMEPATH%\SRRHB\75416.IVZ
- %HOMEPATH%\SRRHB\G52201.LKQ
- %HOMEPATH%\SRRHB\95108.FUM
- %HOMEPATH%\SRRHB\W54996.EKS
- %HOMEPATH%\SRRHB\J92458.AIY
- %HOMEPATH%\SRRHB\D20052.UWR
- %HOMEPATH%\SRRHB\V94633.TYA
- %HOMEPATH%\SRRHB\19321.VSW
- %HOMEPATH%\SRRHB\G54894.OHD
- %HOMEPATH%\SRRHB\H79957.GMF
- %HOMEPATH%\SRRHB\91931.IQP
- %HOMEPATH%\SRRHB\74905.JXW
- %HOMEPATH%\SRRHB\D87751.ZMB
- %HOMEPATH%\SRRHB\64210.SKI
- %HOMEPATH%\SRRHB\P49616.HSK
- %HOMEPATH%\SRRHB\57600.JOB
- %HOMEPATH%\SRRHB\U24528.IDY
- %HOMEPATH%\SRRHB\W55743.HUE
- %HOMEPATH%\SRRHB\63967.XYH
- %HOMEPATH%\SRRHB\T80348.BGF
- %HOMEPATH%\SRRHB\62576.BPO
- %HOMEPATH%\SRRHB\E64212.LWB
- %HOMEPATH%\SRRHB\T69694.RGL
- %HOMEPATH%\SRRHB\E88925.KLT
- %HOMEPATH%\SRRHB\B62388.IDT
- %HOMEPATH%\SRRHB\72906.MSG
- %HOMEPATH%\SRRHB\M53559.BJD
- %HOMEPATH%\SRRHB\I87314.LJE
- %HOMEPATH%\SRRHB\O6330.WBX
- %HOMEPATH%\SRRHB\N17928.JYV
- %HOMEPATH%\SRRHB\K35061.JUS
- %HOMEPATH%\SRRHB\45727.VYX
- %HOMEPATH%\SRRHB\B27529.WBH
- %HOMEPATH%\SRRHB\72292.NSV
- %HOMEPATH%\SRRHB\N67959.VUW
- %HOMEPATH%\SRRHB\78921.QHH
- %HOMEPATH%\SRRHB\I59831.FUJ
- %HOMEPATH%\SRRHB\27457.KMR
- %HOMEPATH%\SRRHB\A22043.GZK
- %HOMEPATH%\SRRHB\28841.NHK
- %HOMEPATH%\SRRHB\Z99284.URD
- %HOMEPATH%\SRRHB\30082.YVG
- %HOMEPATH%\SRRHB\K54011.VZY
- %HOMEPATH%\SRRHB\46329.MAP
- %HOMEPATH%\SRRHB\Z21133.SRY
- %HOMEPATH%\SRRHB\U52852.YZX
- %HOMEPATH%\SRRHB\8920.NYB
- %HOMEPATH%\SRRHB\61252.EXA
- %HOMEPATH%\SRRHB\K60324.CYR
- %HOMEPATH%\SRRHB\67278.VDY
- %HOMEPATH%\SRRHB\23808.RYC
- %HOMEPATH%\SRRHB\Q68098.NQS
- %HOMEPATH%\SRRHB\74782.DRC
- %HOMEPATH%\SRRHB\32615.DPI
- %HOMEPATH%\SRRHB\87014.TFU
- %HOMEPATH%\SRRHB\K88370.JSD
- %HOMEPATH%\SRRHB\7331.UHJ
- %HOMEPATH%\SRRHB\68616.CKQ
- %HOMEPATH%\SRRHB\22115.DLA
- %HOMEPATH%\SRRHB\38383.GUU
- %HOMEPATH%\SRRHB\H93524.YII
- %HOMEPATH%\SRRHB\U42152.AKY
- %HOMEPATH%\SRRHB\60786.MQQ
- %HOMEPATH%\SRRHB\T38390.RFV
- %HOMEPATH%\SRRHB\27644.MFD
- %HOMEPATH%\SRRHB\X68388.IKN
- %HOMEPATH%\SRRHB\W9858.OGB
- %HOMEPATH%\SRRHB\98672.GAV
- %HOMEPATH%\SRRHB\62363.VBQ
- %HOMEPATH%\SRRHB\65995.VVE
- %HOMEPATH%\SRRHB\79034.KEX
- %HOMEPATH%\SRRHB\10965.ZXU
- %HOMEPATH%\SRRHB\47952.LFZ
- %HOMEPATH%\SRRHB\Q41319.XBN
- %HOMEPATH%\SRRHB\Q79966.YSE
- %HOMEPATH%\SRRHB\20716.YKS
- %HOMEPATH%\SRRHB\P74277.JFA
- %HOMEPATH%\SRRHB\F38276.PIQ
- %HOMEPATH%\SRRHB\87618.CJR
- %HOMEPATH%\SRRHB\17083.BEQ
- %HOMEPATH%\SRRHB\L13619.EUL
- %HOMEPATH%\SRRHB\U29370.PSP
- %HOMEPATH%\SRRHB\57592.UGE
- %HOMEPATH%\SRRHB\R40787.IUI
- %HOMEPATH%\SRRHB\89134.PES
- %HOMEPATH%\SRRHB\31773.ZMS
- %HOMEPATH%\SRRHB\82872.KGR
- %HOMEPATH%\SRRHB\11393.CHB
- %HOMEPATH%\SRRHB\85495.SBJ
- %HOMEPATH%\SRRHB\U1873.CWM
- %HOMEPATH%\SRRHB\40492.CRC
- %HOMEPATH%\SRRHB\96873.SJZ
- %HOMEPATH%\SRRHB\I84787.WHQ
- %HOMEPATH%\SRRHB\47960.TJG
- %HOMEPATH%\SRRHB\G59822.PMX
- %HOMEPATH%\SRRHB\27523.MEO
- %HOMEPATH%\SRRHB\E44302.QEM
- %HOMEPATH%\SRRHB\L26593.LCH
- %HOMEPATH%\SRRHB\10537.KIR
- %HOMEPATH%\SRRHB\K13623.OCI
- %HOMEPATH%\SRRHB\78424.UPO
- %HOMEPATH%\SRRHB\23389.FYP
- %HOMEPATH%\SRRHB\D95437.UDX
- %HOMEPATH%\SRRHB\Z21513.RRT
- %HOMEPATH%\SRRHB\56779.LQI
- %HOMEPATH%\SRRHB\U60478.UJD
- %HOMEPATH%\SRRHB\49179.QDT
- %HOMEPATH%\SRRHB\J78724.NMI
- %HOMEPATH%\SRRHB\48954.ECV
- %HOMEPATH%\SRRHB\E78342.YCA
- %HOMEPATH%\SRRHB\F52159.KGJ
- %HOMEPATH%\SRRHB\63775.YYR
- %HOMEPATH%\SRRHB\73956.QVU
- %HOMEPATH%\SRRHB\91254.QLT
- %HOMEPATH%\SRRHB\62771.JRV
- %HOMEPATH%\SRRHB\78971.EBG
- %HOMEPATH%\SRRHB\59152.JEC
- %HOMEPATH%\SRRHB\92443.RXP
- %HOMEPATH%\SRRHB\X89905.KYK
- %HOMEPATH%\SRRHB\D26460.QEJ
- %HOMEPATH%\SRRHB\U55638.YBN
- %HOMEPATH%\SRRHB\11535.CAE
- %HOMEPATH%\SRRHB\H56054.AIW
- %HOMEPATH%\SRRHB\29542.JSU
- %HOMEPATH%\SRRHB\76546.UZN
- %HOMEPATH%\SRRHB\97798.UAW
- %HOMEPATH%\SRRHB\4679.WQS
- %HOMEPATH%\SRRHB\A34121.ETG
- %HOMEPATH%\SRRHB\84931.CZF
- %HOMEPATH%\SRRHB\76420.HVL
- %HOMEPATH%\SRRHB\Y10015.QLX
- %HOMEPATH%\SRRHB\D1008.UXH
- %HOMEPATH%\SRRHB\S35815.XKQ
- %HOMEPATH%\SRRHB\15158.TTW
- %HOMEPATH%\SRRHB\34155.UPR
- %HOMEPATH%\SRRHB\L36786.PLM
- %HOMEPATH%\SRRHB\12971.XMG
- %HOMEPATH%\SRRHB\89411.ORM
- %HOMEPATH%\SRRHB\H85719.MXE
- %HOMEPATH%\SRRHB\I49322.VKU
- %HOMEPATH%\SRRHB\80340.TDI
- %HOMEPATH%\SRRHB\9328.MRJ
- %HOMEPATH%\SRRHB\C91088.TPQ
- %HOMEPATH%\SRRHB\79035.NAC
- %HOMEPATH%\SRRHB\G44269.KTC
- %HOMEPATH%\SRRHB\55951.ANQ
- %HOMEPATH%\SRRHB\7046.VKT
- %HOMEPATH%\SRRHB\24868.DWZ
- %HOMEPATH%\SRRHB\F85321.KNW
- %HOMEPATH%\SRRHB\14450.PTI
- %HOMEPATH%\SRRHB\N71819.YXS
- %HOMEPATH%\SRRHB\R96969.JAL
- %HOMEPATH%\SRRHB\67464.VJN
- %HOMEPATH%\SRRHB\file.vbs
- %HOMEPATH%\SRRHB\settings.ini
- %HOMEPATH%\SRRHB\E83096.DHP
- %HOMEPATH%\SRRHB\32219.CPJ
- %HOMEPATH%\SRRHB\344034.dat
- %HOMEPATH%\SRRHB\12362.QVN
- %HOMEPATH%\SRRHB\694798.exe
- %HOMEPATH%\SRRHB\553117.dat
- %HOMEPATH%\SRRHB\B64025.AJK
- %HOMEPATH%\SRRHB\L16786.DAF
- %HOMEPATH%\SRRHB\92187.GDV
- %HOMEPATH%\SRRHB\V7450.JBF
- %HOMEPATH%\SRRHB\21964.MVN
- %HOMEPATH%\SRRHB\P14356.UUG
- %HOMEPATH%\SRRHB\54670.GCA
- %HOMEPATH%\SRRHB\I78437.TMI
- %HOMEPATH%\SRRHB\V47867.LDG
- %HOMEPATH%\SRRHB\Q83861.SNU
- %HOMEPATH%\SRRHB\P32815.OSV
- %HOMEPATH%\SRRHB\N70352.OUU
- %HOMEPATH%\SRRHB\70419.GPA
- %HOMEPATH%\SRRHB\D91299.YBG
- %HOMEPATH%\SRRHB\G40841.VWG
- %HOMEPATH%\SRRHB\32599.YOL
- %HOMEPATH%\SRRHB\20584.KAP
- %HOMEPATH%\SRRHB\22478.WUZ
- %HOMEPATH%\SRRHB\L50755.NAM
- %HOMEPATH%\SRRHB\I24667.KJY
- %HOMEPATH%\SRRHB\16446.JOM
- %HOMEPATH%\SRRHB\26788.HER
- %HOMEPATH%\SRRHB\8910.ADU
- %HOMEPATH%\SRRHB\3309.NSJ
- %HOMEPATH%\SRRHB\8904.XQU
- %HOMEPATH%\SRRHB\22240.JDW
- %HOMEPATH%\SRRHB\K75848.ANW
- %HOMEPATH%\SRRHB\O1842.COC
- %HOMEPATH%\SRRHB\R27650.GUZ
- %HOMEPATH%\SRRHB\Q46562.CCR
- %HOMEPATH%\SRRHB\P84329.LDI
- %HOMEPATH%\SRRHB\89169.KGD
- %HOMEPATH%\SRRHB\17160.QWS
- %HOMEPATH%\SRRHB\58248.BHB
- %HOMEPATH%\SRRHB\28988.SJP
- %HOMEPATH%\SRRHB\94056.IWH
- %HOMEPATH%\SRRHB\86679.IQE
- %HOMEPATH%\SRRHB\95380.DLW
- %HOMEPATH%\SRRHB\W26999.QUD
- %HOMEPATH%\SRRHB\Z43099.EMG
- %HOMEPATH%\SRRHB\G50379.ZGF
- %HOMEPATH%\SRRHB\H71118.RWG
- %HOMEPATH%\SRRHB\V88051.KSB
- %HOMEPATH%\SRRHB\B13751.HZY
- %HOMEPATH%\SRRHB\F67064.KMS
- %HOMEPATH%\SRRHB\I67958.MWR
- %HOMEPATH%\SRRHB\93050.HJU
- %HOMEPATH%\SRRHB\Q59135.CQP
- %HOMEPATH%\SRRHB\32902.XLU
- %HOMEPATH%\SRRHB\94077.VGD
- %HOMEPATH%\SRRHB\74600.UIK
- %HOMEPATH%\SRRHB\K82201.EZJ
- %HOMEPATH%\SRRHB\48121.CQJ
- %HOMEPATH%\SRRHB\13431.ZQJ
- %HOMEPATH%\SRRHB\A52042.QMB
- %HOMEPATH%\SRRHB\W91263.OUA
- %HOMEPATH%\SRRHB\85324.BPY
- %HOMEPATH%\SRRHB\G67760.ITM
- %HOMEPATH%\SRRHB\D13973.KHV
- %HOMEPATH%\SRRHB\G92933.MQC
- %HOMEPATH%\SRRHB\E46477.YOB
- %HOMEPATH%\SRRHB\35271.XTM
- %HOMEPATH%\SRRHB\3006.CER
- %HOMEPATH%\SRRHB\51492.XIN
- %HOMEPATH%\SRRHB\18465.BJK
- %HOMEPATH%\SRRHB\59617.DVD
- %HOMEPATH%\SRRHB\63081.ZNY
- %HOMEPATH%\SRRHB\31271.ZYI
- %HOMEPATH%\SRRHB\35441.HGM
- %HOMEPATH%\SRRHB\86065.VYQ
- %HOMEPATH%\SRRHB\71056.GFY
- %HOMEPATH%\SRRHB\O55377.QFA
- %HOMEPATH%\SRRHB\G97172.VGH
- %HOMEPATH%\SRRHB\A49662.UNS
- %HOMEPATH%\SRRHB\B44031.LQW
- %HOMEPATH%\SRRHB\95489.HOV
- %HOMEPATH%\SRRHB\16916.KFO
- %HOMEPATH%\SRRHB\10671.ZYL
- %HOMEPATH%\SRRHB\M71742.MIX
- %HOMEPATH%\SRRHB\W33450.MSW
- %HOMEPATH%\SRRHB\O13875.MLN
- %HOMEPATH%\SRRHB\L56450.SJM
- %HOMEPATH%\SRRHB\L88974.SBZ
- %HOMEPATH%\SRRHB\Y88314.FNT
- %HOMEPATH%\SRRHB\O10375.VNO
- %HOMEPATH%\SRRHB\97260.ZCT
- %HOMEPATH%\SRRHB\71422.EOO
- %HOMEPATH%\SRRHB\L3456.CMA
- %HOMEPATH%\SRRHB\C71028.TMA
- %HOMEPATH%\SRRHB\V30223.YZH
- %HOMEPATH%\SRRHB\C81734.JWH
- %HOMEPATH%\SRRHB\98746.MIC
- %HOMEPATH%\SRRHB\X59910.CON
- %HOMEPATH%\SRRHB\41578.HMZ
- %HOMEPATH%\SRRHB\26311.LLG
- %HOMEPATH%\SRRHB\39892.PVL
- %HOMEPATH%\SRRHB\W26066.BRX
- %HOMEPATH%\SRRHB\4737.EYU
- %HOMEPATH%\SRRHB\53927.XOZ
- %HOMEPATH%\SRRHB\W54459.QKJ
- %HOMEPATH%\SRRHB\Y71781.XDO
- %HOMEPATH%\SRRHB\P23785.UVL
- %HOMEPATH%\SRRHB\81686.BQN
- %HOMEPATH%\SRRHB\91265.BCN
- %HOMEPATH%\SRRHB\29814.VLP
- %HOMEPATH%\SRRHB\Z65214.MUF
- %HOMEPATH%\SRRHB\I90670.AXX
- %HOMEPATH%\SRRHB\F29415.YWI
- %HOMEPATH%\SRRHB\K3790.ZHX
- %HOMEPATH%\SRRHB\N41374.LSV
- %HOMEPATH%\SRRHB\63447.MIY
- %HOMEPATH%\SRRHB\G48257.BRY
- %HOMEPATH%\SRRHB\U56210.ULC
- %HOMEPATH%\SRRHB\23764.QTU
- %HOMEPATH%\SRRHB\69394.GUG
- %HOMEPATH%\SRRHB\C47038.VNE
- %HOMEPATH%\SRRHB\38271.VUI
- %HOMEPATH%\SRRHB\57778.AWM
- %HOMEPATH%\SRRHB\B96510.WRH
- %HOMEPATH%\SRRHB\T49047.LKB
- %HOMEPATH%\SRRHB\26776.XXY
- %HOMEPATH%\SRRHB\K69179.GAM
- %HOMEPATH%\SRRHB\83107.IYU
- %HOMEPATH%\SRRHB\78950.NWL
- %HOMEPATH%\SRRHB\A92536.PIV
- %HOMEPATH%\SRRHB\45917.MBO
- %HOMEPATH%\SRRHB\V87974.APU
- %HOMEPATH%\SRRHB\K89379.DVJ
- %HOMEPATH%\SRRHB\O51711.OIE
- %HOMEPATH%\SRRHB\30876.OQB
- %HOMEPATH%\SRRHB\25711.ZJW
- %HOMEPATH%\SRRHB\V75810.IJA
- %HOMEPATH%\SRRHB\45458.XZV
- %HOMEPATH%\SRRHB\V19869.UCG
- %HOMEPATH%\SRRHB\30561.SNA
- %HOMEPATH%\SRRHB\M32853.MBX
- %HOMEPATH%\SRRHB\V59129.DTN
- %HOMEPATH%\SRRHB\5912.YHN
- %HOMEPATH%\SRRHB\B37700.JFY
- %HOMEPATH%\SRRHB\M10649.CSA
- %HOMEPATH%\SRRHB\W14734.XAT
- %HOMEPATH%\SRRHB\U33113.OWZ
- %HOMEPATH%\SRRHB\66471.QRN
- %HOMEPATH%\SRRHB\R89797.IOC
- %HOMEPATH%\SRRHB\P35940.LIR
- %HOMEPATH%\SRRHB\55675.NQD
- %HOMEPATH%\SRRHB\Q73465.CTG
- %HOMEPATH%\SRRHB\C16889.FJH
- %HOMEPATH%\SRRHB\85831.ZYG
- %HOMEPATH%\SRRHB\E87994.QAF
- %HOMEPATH%\SRRHB\35394.SHY
- %HOMEPATH%\SRRHB\A75240.WZX
- %HOMEPATH%\SRRHB\K49343.YWG
- %HOMEPATH%\SRRHB\D51532.MRU
- %HOMEPATH%\SRRHB\65334.WFZ
- %HOMEPATH%\SRRHB\43319.XFA
- %HOMEPATH%\SRRHB\99382.MSG
- %HOMEPATH%\SRRHB\6346.TJJ
- %HOMEPATH%\SRRHB\8921.ILU
- %HOMEPATH%\SRRHB\W36903.HUB
- %HOMEPATH%\SRRHB\L23609.GHG
- %HOMEPATH%\SRRHB\64947.BJY
- %HOMEPATH%\SRRHB\67388.OBJ
- %HOMEPATH%\SRRHB\Q64241.BYB
- %HOMEPATH%\SRRHB\N42038.EBL
- %HOMEPATH%\SRRHB\92228.FQQ
- %HOMEPATH%\SRRHB\N96945.PTF
- %HOMEPATH%\SRRHB\D95230.MKT
- %HOMEPATH%\SRRHB\Y2349.VAS
- %HOMEPATH%\SRRHB\5236.MWB
- %HOMEPATH%\SRRHB\21662.KMR
- %HOMEPATH%\SRRHB\M97757.TRD
- %HOMEPATH%\SRRHB\71374.RPM
Удаляет следующие файлы:
- %HOMEPATH%\SRRHB\FYBWWZVD.dat
Сетевая активность:
Подключается к:
- 'un######erz.redirectme.net':3080
UDP:
- DNS ASK un######erz.redirectme.net
Другое:
Ищет следующие окна:
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'
