Trojan.Inject1.44343

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'UserInit' = '<SYSTEM32>\userinit.exe,%ALLUSERSPROFILE%\Start Menu\Programs\Common Files\Java\Java Plateform SE\jusched.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Java (TM) Plateform SE' = '%ALLUSERSPROFILE%\Start Menu\Programs\Common Files\Java\Java Plateform SE\jusched.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Ju89063M16953' = '%HOMEPATH%\Yn80418G44932\test.exe'

Malicious functions:

Creates and executes the following:

'%ALLUSERSPROFILE%\Start Menu\Programs\Common Files\Java\Java Plateform SE\jusched.exe'
'%HOMEPATH%\Yn80418G44932\test.exe'

Executes the following:

'%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'

Injects code into

the following system processes:

%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

Modifies file system :

Creates the following files:

%HOMEPATH%\Yn80418G44932\24911.NVP
%HOMEPATH%\Yn80418G44932\87259.CQZ
%HOMEPATH%\Yn80418G44932\71444.OQN
%HOMEPATH%\Yn80418G44932\35131.DIE
%HOMEPATH%\Yn80418G44932\C12539K32524.QXL
%HOMEPATH%\Yn80418G44932\36376.HGQ
%HOMEPATH%\Yn80418G44932\42560.ALM
%HOMEPATH%\Yn80418G44932\D10126U10199.AZW
%HOMEPATH%\Yn80418G44932\15064.XUA
%HOMEPATH%\Yn80418G44932\94679.WSA
%HOMEPATH%\Yn80418G44932\D83419Q8369.BLN
%HOMEPATH%\Yn80418G44932\95597.JLB
%HOMEPATH%\Yn80418G44932\Q28532R46429.QLH
%HOMEPATH%\Yn80418G44932\K56794X64343.XUI
%HOMEPATH%\Yn80418G44932\B49210C19573.SZX
%HOMEPATH%\Yn80418G44932\T41815I1754.IOV
%HOMEPATH%\Yn80418G44932\26828.IXR
%HOMEPATH%\Yn80418G44932\60681.CVT
%HOMEPATH%\Yn80418G44932\C66086O98407.HYV
%HOMEPATH%\Yn80418G44932\E31456J77909.ZNQ
%HOMEPATH%\Yn80418G44932\36109.QIJ
%HOMEPATH%\Yn80418G44932\L82345L13697.SPK
%HOMEPATH%\Yn80418G44932\T28940T60203.XBV
%HOMEPATH%\Yn80418G44932\Q15908V90306.MSA
%HOMEPATH%\Yn80418G44932\76493.DJG
%HOMEPATH%\Yn80418G44932\41976.KNV
%HOMEPATH%\Yn80418G44932\T39024R6055.GON
%HOMEPATH%\Yn80418G44932\C62963W61624.IWR
%HOMEPATH%\Yn80418G44932\53723.AFD
%HOMEPATH%\Yn80418G44932\C22692O15146.DCQ
%HOMEPATH%\Yn80418G44932\90820.XOV
%HOMEPATH%\Yn80418G44932\J9566V44223.DDW
%HOMEPATH%\Yn80418G44932\39518.NCO
%HOMEPATH%\Yn80418G44932\A62755H73740.RUK
%HOMEPATH%\Yn80418G44932\A12324P90035.ARF
%HOMEPATH%\Yn80418G44932\Y73569A54941.ZKP
%HOMEPATH%\Yn80418G44932\U33587U15292.CIM
%HOMEPATH%\Yn80418G44932\18850.SJW
%HOMEPATH%\Yn80418G44932\93780.XBQ
%HOMEPATH%\Yn80418G44932\D30677Q26418.DNF
%HOMEPATH%\Yn80418G44932\30742.XFP
%HOMEPATH%\Yn80418G44932\J22942U50017.JMU
%HOMEPATH%\Yn80418G44932\59396.PSS
%HOMEPATH%\Yn80418G44932\30710.UUD
%HOMEPATH%\Yn80418G44932\K32363T81141.CNC
%HOMEPATH%\Yn80418G44932\91911.RWU
%HOMEPATH%\Yn80418G44932\12064.FQC
%HOMEPATH%\Yn80418G44932\75753.PRP
%HOMEPATH%\Yn80418G44932\94538.EFY
%HOMEPATH%\Yn80418G44932\77599.EEK
%HOMEPATH%\Yn80418G44932\M78060N5174.HQZ
%HOMEPATH%\Yn80418G44932\E13038E57384.OKQ
%HOMEPATH%\Yn80418G44932\N7529O69097.CHZ
%HOMEPATH%\Yn80418G44932\11306.GQU
%HOMEPATH%\Yn80418G44932\38620.QRY
%HOMEPATH%\Yn80418G44932\S70184J38245.AGN
%HOMEPATH%\Yn80418G44932\G65561U53959.VBH
%HOMEPATH%\Yn80418G44932\35594.ITC
%HOMEPATH%\Yn80418G44932\78923.MCW
%HOMEPATH%\Yn80418G44932\39898.ACL
%HOMEPATH%\Yn80418G44932\C91943Q11545.GLF
%HOMEPATH%\Yn80418G44932\I14699Q20593.UWH
%HOMEPATH%\Yn80418G44932\33903.TJF
%HOMEPATH%\Yn80418G44932\W21842W22954.IYP
%HOMEPATH%\Yn80418G44932\T22457F9985.MET
%HOMEPATH%\Yn80418G44932\B85209G20152.WSE
%HOMEPATH%\Yn80418G44932\A30843N72732.YLB
%HOMEPATH%\Yn80418G44932\72106.PRB
%HOMEPATH%\Yn80418G44932\Z20586J68201.OWQ
%HOMEPATH%\Yn80418G44932\Q85279L16844.EUG
%HOMEPATH%\Yn80418G44932\76734.KIG
%HOMEPATH%\Yn80418G44932\4723.OLC
%HOMEPATH%\Yn80418G44932\S85650B92886.ELE
%HOMEPATH%\Yn80418G44932\15210.GJQ
%HOMEPATH%\Yn80418G44932\88067.EOM
%HOMEPATH%\Yn80418G44932\W95709H8265.VSL
%HOMEPATH%\Yn80418G44932\83226.CGI
%HOMEPATH%\Yn80418G44932\82531.YUC
%HOMEPATH%\Yn80418G44932\49606.JSO
%HOMEPATH%\Yn80418G44932\Y72731C19641.HIF
%HOMEPATH%\Yn80418G44932\Z60987X16917.RMF
%HOMEPATH%\Yn80418G44932\T38340D60410.EZT
%HOMEPATH%\Yn80418G44932\C71800R73828.BUH
%HOMEPATH%\Yn80418G44932\K2371T83240.RIF
%HOMEPATH%\Yn80418G44932\P33816T94001.ZXJ
%HOMEPATH%\Yn80418G44932\V19431K9095.AGM
%HOMEPATH%\Yn80418G44932\N25851W55796.QSD
%HOMEPATH%\Yn80418G44932\Q53044U44576.XJU
%HOMEPATH%\Yn80418G44932\78883.JJJ
%HOMEPATH%\Yn80418G44932\36417.WLS
%HOMEPATH%\Yn80418G44932\U80581N55896.HQX
%HOMEPATH%\Yn80418G44932\58689.WER
%HOMEPATH%\Yn80418G44932\O86352C67551.YOM
%HOMEPATH%\Yn80418G44932\X82060Y51637.WIY
%HOMEPATH%\Yn80418G44932\93469.OMR
%HOMEPATH%\Yn80418G44932\R78330V82683.TIM
%HOMEPATH%\Yn80418G44932\Y21625Z99414.QTL
%HOMEPATH%\Yn80418G44932\89304.CJR
%HOMEPATH%\Yn80418G44932\3570.AAF
%HOMEPATH%\Yn80418G44932\Z7974I83102.YWC
%HOMEPATH%\Yn80418G44932\19515.HGQ
%HOMEPATH%\Yn80418G44932\15664.XAO
%HOMEPATH%\Yn80418G44932\Q68335M83300.UGG
%HOMEPATH%\Yn80418G44932\L33822O2559.EGI
%HOMEPATH%\Yn80418G44932\95550.IKO
%HOMEPATH%\Yn80418G44932\82063.AGA
%HOMEPATH%\Yn80418G44932\65434.JPN
%HOMEPATH%\Yn80418G44932\86167.BYT
%HOMEPATH%\Yn80418G44932\19630.IAE
%HOMEPATH%\Yn80418G44932\46306.INI
%HOMEPATH%\Yn80418G44932\R75297G74783.EWV
%HOMEPATH%\Yn80418G44932\77046.VTI
%HOMEPATH%\Yn80418G44932\G99270Y48043.OSS
%HOMEPATH%\Yn80418G44932\Y60705V88196.QOU
%HOMEPATH%\Yn80418G44932\27689.KDI
%HOMEPATH%\Yn80418G44932\P28825C59494.JNI
%HOMEPATH%\Yn80418G44932\H43305E95676.TPI
%HOMEPATH%\Yn80418G44932\22738.VLP
%HOMEPATH%\Yn80418G44932\90594.GBR
%HOMEPATH%\Yn80418G44932\62996.HLE
%HOMEPATH%\Yn80418G44932\7005.QSA
%HOMEPATH%\Yn80418G44932\10563.NOO
%HOMEPATH%\Yn80418G44932\Z59148B24055.QYL
%HOMEPATH%\Yn80418G44932\13961.POO
%HOMEPATH%\Yn80418G44932\2531.AQH
%HOMEPATH%\Yn80418G44932\26082.EEZ
%HOMEPATH%\Yn80418G44932\Z81575Z18617.LAD
%HOMEPATH%\Yn80418G44932\V26156M18230.KRA
%HOMEPATH%\Yn80418G44932\93106.YPW
%HOMEPATH%\Yn80418G44932\K13752H43879.TKJ
%HOMEPATH%\Yn80418G44932\1861.MJR
%HOMEPATH%\Yn80418G44932\42998.BLS
%HOMEPATH%\Yn80418G44932\O58935N49309.HZI
%HOMEPATH%\Yn80418G44932\27246.UQN
%HOMEPATH%\Yn80418G44932\C11583X82116.QSF
%HOMEPATH%\Yn80418G44932\T39583L93679.OZG
%HOMEPATH%\Yn80418G44932\B94879K89849.UIG
%HOMEPATH%\Yn80418G44932\O59332H5790.EGE
%HOMEPATH%\Yn80418G44932\49755.OWU
%HOMEPATH%\Yn80418G44932\N33758D32894.KQZ
%HOMEPATH%\Yn80418G44932\K68721K53033.RQY
%HOMEPATH%\Yn80418G44932\40596.ELG
%HOMEPATH%\Yn80418G44932\25476.CGG
%HOMEPATH%\Yn80418G44932\K75425S80676.BSO
%HOMEPATH%\Yn80418G44932\Y17475E15239.IEM
%HOMEPATH%\Yn80418G44932\39435.ELW
%HOMEPATH%\Yn80418G44932\Q4744C29299.RTR
%HOMEPATH%\Yn80418G44932\M28234A52034.AGK
%HOMEPATH%\Yn80418G44932\31929.VPQ
%HOMEPATH%\Yn80418G44932\55202.ODR
%HOMEPATH%\Yn80418G44932\O11176Q48403.CCC
%HOMEPATH%\Yn80418G44932\71684.VIL
%HOMEPATH%\Yn80418G44932\91019.FNV
%HOMEPATH%\Yn80418G44932\34088.QNC
%HOMEPATH%\Yn80418G44932\L12701Q24864.NFO
%HOMEPATH%\Yn80418G44932\2045.UNJ
%HOMEPATH%\Yn80418G44932\36414.EYU
%HOMEPATH%\Yn80418G44932\G95229Q50119.TOT
%HOMEPATH%\Yn80418G44932\4004.JRN
%HOMEPATH%\Yn80418G44932\98772.LLU
%HOMEPATH%\Yn80418G44932\80040.WUD
%HOMEPATH%\Yn80418G44932\O54085M93288.ESY
%HOMEPATH%\Yn80418G44932\A99478M17765.BHI
%HOMEPATH%\Yn80418G44932\U60060F4993.PUP
%HOMEPATH%\Yn80418G44932\B12953T58305.XND
%HOMEPATH%\Yn80418G44932\C75996Y21223.UXE
%HOMEPATH%\Yn80418G44932\39837.WPK
%HOMEPATH%\Yn80418G44932\J88345W21575.DPF
%HOMEPATH%\Yn80418G44932\G9540C80926.JNS
%HOMEPATH%\Yn80418G44932\K90152J24581.PCM
%HOMEPATH%\Yn80418G44932\89563.VIZ
%HOMEPATH%\Yn80418G44932\91860.MTJ
%HOMEPATH%\Yn80418G44932\G41611D66128.YGA
%HOMEPATH%\Yn80418G44932\H90695M9381.YKW
%HOMEPATH%\Yn80418G44932\76735.JVZ
%HOMEPATH%\Yn80418G44932\34463.BLP
%HOMEPATH%\Yn80418G44932\49964.TUB
%HOMEPATH%\Yn80418G44932\I79022X8448.UVA
%HOMEPATH%\Yn80418G44932\91990.XNS
%HOMEPATH%\Yn80418G44932\69597.XHJ
%TEMP%\aut1.tmp
%HOMEPATH%\Yn80418G44932\LS.KVW
%ALLUSERSPROFILE%\Start Menu\Programs\Common Files\Java\Java Plateform SE\jusched.exe
%HOMEPATH%\Fm77012R54742.HF3
%HOMEPATH%\Yn80418G44932\16428.NJF
%HOMEPATH%\Yn80418G44932\Z3184B3605.QNZ
%HOMEPATH%\Yn80418G44932\51256.IXB
%HOMEPATH%\Yn80418G44932\Q16048Y84408.PIQ
%HOMEPATH%\Yn80418G44932\S69842D92895.LCH
%HOMEPATH%\Yn80418G44932\85516.ORW
%HOMEPATH%\Yn80418G44932\K97972M13256.RAK
%HOMEPATH%\Yn80418G44932\90542.UKE
%HOMEPATH%\Yn80418G44932\29845.AVK
%HOMEPATH%\Yn80418G44932\E87000B15064.CJL
%HOMEPATH%\Yn80418G44932\66995.JII
%HOMEPATH%\Yn80418G44932\23871.UIG
%HOMEPATH%\Yn80418G44932\83335.OLU
%HOMEPATH%\Yn80418G44932\12497.EWU
%HOMEPATH%\Yn80418G44932\L37026N90261.KBC
%HOMEPATH%\Yn80418G44932\49051.UHU
%HOMEPATH%\Yn80418G44932\18851.JEK
%HOMEPATH%\Yn80418G44932\W16118J34551.NZZ
%HOMEPATH%\Yn80418G44932\L92794U6266.KPT
%HOMEPATH%\Yn80418G44932\52283.EAH
%HOMEPATH%\Yn80418G44932\N65715B99165.DAX
%HOMEPATH%\Yn80418G44932\I41630C94366.RMM
%HOMEPATH%\Yn80418G44932\X45134Z94765.NTU
%HOMEPATH%\Yn80418G44932\A38099G63170.COY
%HOMEPATH%\Yn80418G44932\73642.UEV
%HOMEPATH%\Yn80418G44932\2948.ACJ
%HOMEPATH%\Yn80418G44932\35114.FNY
%HOMEPATH%\Yn80418G44932\K16364U54306.FAG
%HOMEPATH%\Yn80418G44932\V73937Z71219.UGL
%HOMEPATH%\Yn80418G44932\N47330D24578.AGZ
%HOMEPATH%\Yn80418G44932\60311.FXX
%HOMEPATH%\Yn80418G44932\C91679B7830.UWS
%HOMEPATH%\Yn80418G44932\K1887W29077.SLP
%HOMEPATH%\Yn80418G44932\T6954I95872.OMU
%HOMEPATH%\Yn80418G44932\P74158K23469.EAC
%HOMEPATH%\Yn80418G44932\W82107G7687.FBD
%HOMEPATH%\Yn80418G44932\G24270A31897.MHY
%HOMEPATH%\Yn80418G44932\21190.DVH
%HOMEPATH%\Yn80418G44932\T41710D90366.YON
%HOMEPATH%\Yn80418G44932\84509.YDY
%HOMEPATH%\Yn80418G44932\90479.OBG
%HOMEPATH%\Yn80418G44932\V16650R36043.HRK
%HOMEPATH%\Yn80418G44932\67506.NGR
%HOMEPATH%\Yn80418G44932\63967.ZXJ
%HOMEPATH%\Yn80418G44932\72269.AGG
%HOMEPATH%\Yn80418G44932\70645.HEC
%HOMEPATH%\Yn80418G44932\M47933U10467.QGH
%HOMEPATH%\Yn80418G44932\31404.SKU
%HOMEPATH%\Yn80418G44932\W13416C75764.GHC
%HOMEPATH%\Yn80418G44932\Y69276K8797.WMQ
%HOMEPATH%\Yn80418G44932\69862.QLP
%HOMEPATH%\Yn80418G44932\W20554K67689.UVF
%HOMEPATH%\Yn80418G44932\S3493W97560.SSF
%HOMEPATH%\Yn80418G44932\21312.RTB
%HOMEPATH%\Yn80418G44932\47036.OND
%HOMEPATH%\Yn80418G44932\Q14840U66485.MDL
%HOMEPATH%\Yn80418G44932\P83580L68311.MJO
%HOMEPATH%\Yn80418G44932\U10455H30794.LDZ
%HOMEPATH%\Yn80418G44932\19902.GAL
%HOMEPATH%\Yn80418G44932\N35134O48693.JZJ
%HOMEPATH%\Yn80418G44932\18681.YHD
%HOMEPATH%\Yn80418G44932\L14891Q77279.TNK
%HOMEPATH%\Yn80418G44932\V95380C13337.VDW
%HOMEPATH%\Yn80418G44932\40236.LDM
%HOMEPATH%\Yn80418G44932\Z46234D10637.JTP
%HOMEPATH%\Yn80418G44932\66426.LAP
%HOMEPATH%\Yn80418G44932\Y54624M18762.OIF
%HOMEPATH%\Yn80418G44932\S3730G78282.RIY
%HOMEPATH%\Yn80418G44932\25434.EZX
%HOMEPATH%\Yn80418G44932\D79360J29187.FTM
%HOMEPATH%\Yn80418G44932\L21660Z12238.ECH
%HOMEPATH%\Yn80418G44932\E40659W55145.NNB
%HOMEPATH%\Yn80418G44932\64622.TNW
%HOMEPATH%\Yn80418G44932\92679.BBL
%HOMEPATH%\Yn80418G44932\47513.YVF
%HOMEPATH%\Yn80418G44932\57803.ZCW
%HOMEPATH%\Yn80418G44932\D83428E69703.TWZ
%HOMEPATH%\Yn80418G44932\12460.DHU
%HOMEPATH%\Yn80418G44932\67328.WMW
%HOMEPATH%\Yn80418G44932\U90428U66805.SIY
%HOMEPATH%\Yn80418G44932\L63089P15701.YZD
%HOMEPATH%\Yn80418G44932\B56316K67643.UPL
%HOMEPATH%\Yn80418G44932\Z26304S9234.PQG
%HOMEPATH%\Yn80418G44932\E41245L24003.JOW
%HOMEPATH%\Yn80418G44932\55024.XTM
%HOMEPATH%\Yn80418G44932\50114.IKO
%HOMEPATH%\Yn80418G44932\19172.CNG
%HOMEPATH%\Yn80418G44932\V2268C71146.CDX
%HOMEPATH%\Yn80418G44932\G75208Y6854.UPR
%HOMEPATH%\Yn80418G44932\S76759U42132.WKN
%HOMEPATH%\Yn80418G44932\A57066Y55505.BTL
%HOMEPATH%\Yn80418G44932\U56706V25968.JYW
%HOMEPATH%\Yn80418G44932\61509.MFH
%HOMEPATH%\Yn80418G44932\Z68601U98899.FYT
%HOMEPATH%\Yn80418G44932\59231.FAU
%HOMEPATH%\Yn80418G44932\X72583T99343.NJZ
%HOMEPATH%\Yn80418G44932\80586.PCE
%HOMEPATH%\Yn80418G44932\Y52181F24751.GRC
%HOMEPATH%\Yn80418G44932\82191.ESD
%HOMEPATH%\Yn80418G44932\L44235E20354.KUD
%HOMEPATH%\Yn80418G44932\2341.XPL
%HOMEPATH%\Yn80418G44932\R61787P6230.PUJ
%HOMEPATH%\Yn80418G44932\W7099J31623.PNE
%HOMEPATH%\Yn80418G44932\W25647S17648.TSF
%HOMEPATH%\Yn80418G44932\43480.SYN
%HOMEPATH%\Yn80418G44932\R99401S6942.RDD
%HOMEPATH%\Yn80418G44932\M99182O15267.HNB
%HOMEPATH%\Yn80418G44932\15085.PGQ
%HOMEPATH%\Yn80418G44932\P51352X48961.WTG
%HOMEPATH%\Yn80418G44932\6270.TKG
%HOMEPATH%\Yn80418G44932\74428.DKK
%HOMEPATH%\Yn80418G44932\39576.NPN
%HOMEPATH%\Yn80418G44932\Y33444Q23847.HUB
%HOMEPATH%\Yn80418G44932\V48080Y55556.BFG
%HOMEPATH%\Yn80418G44932\H7022S28490.WGY
%HOMEPATH%\Yn80418G44932\F44926O58898.RSK
%HOMEPATH%\Yn80418G44932\L48097L76388.KAD
%HOMEPATH%\Yn80418G44932\96619.IGY
%HOMEPATH%\Yn80418G44932\O98622W25747.LYR
%HOMEPATH%\Yn80418G44932\J63412N9589.IUC
%HOMEPATH%\Yn80418G44932\B18516N11441.MKV
%HOMEPATH%\Yn80418G44932\K68988D29836.TWO
%HOMEPATH%\Yn80418G44932\J81743R27440.FIR
%HOMEPATH%\Yn80418G44932\Y87095J43429.DVW
%HOMEPATH%\Yn80418G44932\B93388U57862.AVI
%HOMEPATH%\Yn80418G44932\A57927Y56258.GSU
%HOMEPATH%\Yn80418G44932\58525.NJB
%HOMEPATH%\Yn80418G44932\22300.AQP
%HOMEPATH%\Yn80418G44932\91212.UUA
%HOMEPATH%\Yn80418G44932\33197.EZO
%HOMEPATH%\Yn80418G44932\39052.BON
%HOMEPATH%\Yn80418G44932\56107.XKI
%HOMEPATH%\Yn80418G44932\T33996J95308.TEA
%HOMEPATH%\Yn80418G44932\Y66230T40268.GXZ
%HOMEPATH%\Yn80418G44932\1374.RAV
%HOMEPATH%\Yn80418G44932\48708.ICS
%HOMEPATH%\Yn80418G44932\V16017M30578.CJT
%HOMEPATH%\Yn80418G44932\70957.MXM
%HOMEPATH%\Yn80418G44932\F70804I24777.XDW
%HOMEPATH%\Yn80418G44932\92281.MJP
%HOMEPATH%\Yn80418G44932\V22399Z73421.SJZ
%HOMEPATH%\Yn80418G44932\N3859J74720.BPX
%HOMEPATH%\Yn80418G44932\R91638X61302.HFU
%HOMEPATH%\Yn80418G44932\8710.EJH
%HOMEPATH%\Yn80418G44932\I89768P57984.RAB
%HOMEPATH%\Yn80418G44932\P1272S19379.KWR
%HOMEPATH%\Yn80418G44932\E31930M1267.JFY
%HOMEPATH%\Yn80418G44932\12319.PVK
%HOMEPATH%\Yn80418G44932\51166.EXP
%HOMEPATH%\Yn80418G44932\Y94166B77785.HJK
%HOMEPATH%\Yn80418G44932\A85385A4885.BQG
%HOMEPATH%\Yn80418G44932\77032.AIO
%HOMEPATH%\Yn80418G44932\95601.DQM
%HOMEPATH%\Yn80418G44932\W55294M33952.SVS
%HOMEPATH%\Yn80418G44932\P91516H96207.KTH
%HOMEPATH%\Yn80418G44932\46506.WTO
%HOMEPATH%\Yn80418G44932\H12861Y5637.OFN
%HOMEPATH%\Yn80418G44932\I87415B43811.KSE
%HOMEPATH%\Yn80418G44932\F50376U12211.VKZ
%HOMEPATH%\Yn80418G44932\47806.DIK
%HOMEPATH%\Yn80418G44932\W96603V63748.NRB
%HOMEPATH%\Yn80418G44932\3179.NZE
%HOMEPATH%\Yn80418G44932\77174.CZX
%HOMEPATH%\Yn80418G44932\B46697P9497.OEG
%HOMEPATH%\Yn80418G44932\W29658A68577.IOX
%HOMEPATH%\Yn80418G44932\88523.BXM
%HOMEPATH%\Yn80418G44932\58811.UXT
%HOMEPATH%\Yn80418G44932\Z24519D10300.BZW
%HOMEPATH%\Yn80418G44932\27509.GDZ
%HOMEPATH%\Yn80418G44932\43035.RPN
%HOMEPATH%\Yn80418G44932\N18219C64658.GDB
%HOMEPATH%\Yn80418G44932\70849.VJS
%HOMEPATH%\Yn80418G44932\51874.TRE
%HOMEPATH%\Yn80418G44932\9506.XRA
%HOMEPATH%\Yn80418G44932\64240.SNF
%HOMEPATH%\Yn80418G44932\P26160P73641.NHC
%HOMEPATH%\Yn80418G44932\52946.ZOQ
%HOMEPATH%\Yn80418G44932\B79956E94762.UFP
%HOMEPATH%\Yn80418G44932\X86089Y82297.YVR
%HOMEPATH%\Yn80418G44932\5617.JIF
%HOMEPATH%\Yn80418G44932\test.exe
%HOMEPATH%\Yn80418G44932\96178.DNV
%HOMEPATH%\Yn80418G44932\77481.OCK
%HOMEPATH%\Yn80418G44932\52766.KAO
%HOMEPATH%\Yn80418G44932\U52131C25747.GKP
%HOMEPATH%\Yn80418G44932\Q32157I54406.WXY
%HOMEPATH%\Yn80418G44932\66303.NHL
%HOMEPATH%\Yn80418G44932\A98100D34052.BDB
%HOMEPATH%\Yn80418G44932\L87951Q73340.XRS
%HOMEPATH%\Yn80418G44932\R89187Q72453.UUA
%HOMEPATH%\Yn80418G44932\60378.CGK
%HOMEPATH%\Yn80418G44932\87031.OCO
%HOMEPATH%\Yn80418G44932\D87525J37424.WKB
%HOMEPATH%\Yn80418G44932\5272.BQN
%HOMEPATH%\Yn80418G44932\37866.SKV
%HOMEPATH%\Yn80418G44932\S19193Q11139.QYJ
%HOMEPATH%\Yn80418G44932\K1278P42773.DLB
%HOMEPATH%\Yn80418G44932\29809.ADX
%HOMEPATH%\Yn80418G44932\P39278T73526.FXR
%HOMEPATH%\Yn80418G44932\U20890U74595.JHK
%HOMEPATH%\Yn80418G44932\O70344V43080.TKS
%HOMEPATH%\Yn80418G44932\Q66234B1870.KRD
%HOMEPATH%\Yn80418G44932\51943.NIE
%HOMEPATH%\Yn80418G44932\42576.MJW
%HOMEPATH%\Yn80418G44932\25086.RFY
%HOMEPATH%\Yn80418G44932\P93841C97737.OGV
%HOMEPATH%\Yn80418G44932\R8673G2881.EFJ
%HOMEPATH%\Yn80418G44932\P53913V91034.VQZ
%HOMEPATH%\Yn80418G44932\3318.FRO
%HOMEPATH%\Yn80418G44932\1360.YQL
%HOMEPATH%\Yn80418G44932\Z62314A7274.AEU
%HOMEPATH%\Yn80418G44932\P80654N55957.BAJ
%HOMEPATH%\Yn80418G44932\D82242H19594.FQN
%HOMEPATH%\Yn80418G44932\50192.API
%HOMEPATH%\Yn80418G44932\R69500P48798.ZNT
%HOMEPATH%\Yn80418G44932\89043.LMT
%HOMEPATH%\Yn80418G44932\12100.AHM
%HOMEPATH%\Yn80418G44932\S96755G41981.ZRK
%HOMEPATH%\Yn80418G44932\62801.QEZ
%HOMEPATH%\Yn80418G44932\49731.TDA
%HOMEPATH%\Yn80418G44932\L42820A72061.CIK
%HOMEPATH%\Yn80418G44932\16570.OGA
%HOMEPATH%\Yn80418G44932\H80142R19571.UAQ
%HOMEPATH%\Yn80418G44932\8700.DGM
%HOMEPATH%\Yn80418G44932\18982.QBS
%HOMEPATH%\Yn80418G44932\J8373N11122.RUL
%HOMEPATH%\Yn80418G44932\K64187W39348.NLM
%HOMEPATH%\Yn80418G44932\D8122N15988.IPG
%HOMEPATH%\Yn80418G44932\P53354K8584.BDP
%HOMEPATH%\Yn80418G44932\G18523V15323.YWN
%HOMEPATH%\Yn80418G44932\11723.JFM
%HOMEPATH%\Yn80418G44932\U30396M93884.UFS
%HOMEPATH%\Yn80418G44932\44456.UPW
%HOMEPATH%\Yn80418G44932\T1206Y94187.ZSR
%HOMEPATH%\Yn80418G44932\51323.PFO
%HOMEPATH%\Yn80418G44932\C20651B93626.DNA
%HOMEPATH%\Yn80418G44932\W75977Y45448.BVV
%HOMEPATH%\Yn80418G44932\N19271M66890.AFW
%HOMEPATH%\Yn80418G44932\D16426F29649.UMD
%HOMEPATH%\Yn80418G44932\21937.QYK
%HOMEPATH%\Yn80418G44932\81500.UNY
%HOMEPATH%\Yn80418G44932\10973.VHQ
%HOMEPATH%\Yn80418G44932\10824.HFU
%HOMEPATH%\Yn80418G44932\3726.QUT
%HOMEPATH%\Yn80418G44932\V68134W44412.MTY
%HOMEPATH%\Yn80418G44932\29731.EBF
%HOMEPATH%\Yn80418G44932\P27978O61737.ZNU
%HOMEPATH%\Yn80418G44932\A47820M16655.FQO
%HOMEPATH%\Yn80418G44932\70775.OMH
%HOMEPATH%\Yn80418G44932\N33630F73634.HMV
%HOMEPATH%\Yn80418G44932\86360.XSF
%HOMEPATH%\Yn80418G44932\24702.UFR
%HOMEPATH%\Yn80418G44932\F56249A9802.EGT
%HOMEPATH%\Yn80418G44932\B53317U85712.LMH
%HOMEPATH%\Yn80418G44932\J27942H71755.LFQ
%HOMEPATH%\Yn80418G44932\88647.NBR
%HOMEPATH%\Yn80418G44932\54144.MEQ
%HOMEPATH%\Yn80418G44932\J29872M39761.JBK
%HOMEPATH%\Yn80418G44932\67144.PFK
%HOMEPATH%\Yn80418G44932\84136.SOZ
%HOMEPATH%\Yn80418G44932\N9244H80559.NXV
%HOMEPATH%\Yn80418G44932\77057.QLO
%HOMEPATH%\Yn80418G44932\73290.BQQ
%HOMEPATH%\Yn80418G44932\22097.PTK
%HOMEPATH%\Yn80418G44932\84119.FTL
%HOMEPATH%\Yn80418G44932\J5376R92119.HUQ
%HOMEPATH%\Yn80418G44932\2311.DUX
%HOMEPATH%\Yn80418G44932\98285.QEH
%HOMEPATH%\Yn80418G44932\37099.HPX
%HOMEPATH%\Yn80418G44932\V33206U39428.EJD
%HOMEPATH%\Yn80418G44932\8267.BMQ
%HOMEPATH%\Yn80418G44932\55325.PGM
%HOMEPATH%\Yn80418G44932\16708.AGY
%HOMEPATH%\Yn80418G44932\Z59340U22019.THY
%HOMEPATH%\Yn80418G44932\A31936T70827.UGM
%HOMEPATH%\Yn80418G44932\34146.RHO
%HOMEPATH%\Yn80418G44932\E25296X87921.LKS
%HOMEPATH%\Yn80418G44932\76362.HZN
%HOMEPATH%\Yn80418G44932\E16094C45260.FLH
%HOMEPATH%\Yn80418G44932\O78290T41429.MNU
%HOMEPATH%\Yn80418G44932\63220.KWZ
%HOMEPATH%\Yn80418G44932\98577.QLL
%HOMEPATH%\Yn80418G44932\95120.IJK
%HOMEPATH%\Yn80418G44932\X6135I1978.QFD
%HOMEPATH%\Yn80418G44932\K1282I69504.THL
%HOMEPATH%\Yn80418G44932\32797.ZRS
%HOMEPATH%\Yn80418G44932\H51791G80728.QGQ
%HOMEPATH%\Yn80418G44932\36891.FJK
%HOMEPATH%\Yn80418G44932\R78916W53963.KTL
%HOMEPATH%\Yn80418G44932\Y95325L88055.AVE
%HOMEPATH%\Yn80418G44932\S11167Z56634.LSQ
%HOMEPATH%\Yn80418G44932\L98067A73934.GQU
%HOMEPATH%\Yn80418G44932\E68932W98945.ASV
%HOMEPATH%\Yn80418G44932\9271.GCA
%HOMEPATH%\Yn80418G44932\Y60589M62635.RZN
%HOMEPATH%\Yn80418G44932\W10229Y72908.YDP
%HOMEPATH%\Yn80418G44932\B87038F12516.JBC
%HOMEPATH%\Yn80418G44932\69008.XNX
%HOMEPATH%\Yn80418G44932\K60887A66353.XKE
%HOMEPATH%\Yn80418G44932\V58280H83490.GVX
%HOMEPATH%\Yn80418G44932\A59989D8205.CWA
%HOMEPATH%\Yn80418G44932\O96915I25771.UJL
%HOMEPATH%\Yn80418G44932\1405.AXY
%HOMEPATH%\Yn80418G44932\77778.WZE
%HOMEPATH%\Yn80418G44932\13715.OYZ
%HOMEPATH%\Yn80418G44932\Z17250R62776.VWV
%HOMEPATH%\Yn80418G44932\70365.IOC
%HOMEPATH%\Yn80418G44932\58629.ORI
%HOMEPATH%\Yn80418G44932\W87227D91147.ILV
%HOMEPATH%\Yn80418G44932\38799.WJQ
%HOMEPATH%\Yn80418G44932\78741.VSD
%HOMEPATH%\Yn80418G44932\R31566E69717.SLT
%HOMEPATH%\Yn80418G44932\F51065S56512.HKC
%HOMEPATH%\Yn80418G44932\66252.EQL
%HOMEPATH%\Yn80418G44932\85357.JNN
%HOMEPATH%\Yn80418G44932\C75514L42837.IZG
%HOMEPATH%\Yn80418G44932\L58210Y21662.MQP
%HOMEPATH%\Yn80418G44932\47278.JSL
%HOMEPATH%\Yn80418G44932\29264.BWA
%HOMEPATH%\Yn80418G44932\O94349W81619.GIB
%HOMEPATH%\Yn80418G44932\25382.NEF
%HOMEPATH%\Yn80418G44932\13909.HYH
%HOMEPATH%\Yn80418G44932\G69473A50049.KVX
%HOMEPATH%\Yn80418G44932\76028.DON
%HOMEPATH%\Yn80418G44932\T32195N86834.NTE
%HOMEPATH%\Yn80418G44932\F34785G98948.HZY
%HOMEPATH%\Yn80418G44932\43310.EJE
%HOMEPATH%\Yn80418G44932\39102.LQK
%HOMEPATH%\Yn80418G44932\K36635Y19876.UNN
%HOMEPATH%\Yn80418G44932\D14129Z42356.YTC
%HOMEPATH%\Yn80418G44932\D73353U6586.FYY
%HOMEPATH%\Yn80418G44932\39045.PCQ
%HOMEPATH%\Yn80418G44932\Q45167G6901.UNC
%HOMEPATH%\Yn80418G44932\R52585J58899.GNF
%HOMEPATH%\Yn80418G44932\N49887H2349.VCU
%HOMEPATH%\Yn80418G44932\28014.YDR
%HOMEPATH%\Yn80418G44932\67490.MAQ
%HOMEPATH%\Yn80418G44932\54586.XBZ
%HOMEPATH%\Yn80418G44932\A25499O44903.ZGP
%HOMEPATH%\Yn80418G44932\F82908J6870.JHU
%HOMEPATH%\Yn80418G44932\N45048Q60843.FRU
%HOMEPATH%\Yn80418G44932\O24696O16485.VCS
%HOMEPATH%\Yn80418G44932\Q64240X83964.AUA
%HOMEPATH%\Yn80418G44932\51744.XNX
%HOMEPATH%\Yn80418G44932\T31383C63713.RNY
%HOMEPATH%\Yn80418G44932\18523.QZI
%HOMEPATH%\Yn80418G44932\R42068W73503.QAT
%HOMEPATH%\Yn80418G44932\G58292I22048.DPB
%HOMEPATH%\Yn80418G44932\C48995U86156.BMI
%HOMEPATH%\Yn80418G44932\T45225L50660.OPM
%HOMEPATH%\Yn80418G44932\A8560P66454.JWN
%HOMEPATH%\Yn80418G44932\D56760V7246.NVN
%HOMEPATH%\Yn80418G44932\24884.OQQ
%HOMEPATH%\Yn80418G44932\A28270O57321.ABT
%HOMEPATH%\Yn80418G44932\V42024V57862.NCY
%HOMEPATH%\Yn80418G44932\O58589S47692.KVD
%HOMEPATH%\Yn80418G44932\99192.YJM
%HOMEPATH%\Yn80418G44932\L95729O35842.NAX
%HOMEPATH%\Yn80418G44932\I17706A65140.VJI
%HOMEPATH%\Yn80418G44932\Y8381W64075.WLW
%HOMEPATH%\Yn80418G44932\45735.KRJ
%HOMEPATH%\Yn80418G44932\Z9476Y1121.YUE
%HOMEPATH%\Yn80418G44932\45731.KHR

Sets the 'hidden' attribute to the following files:

%HOMEPATH%\Fm77012R54742.HF3

Deletes the following files:

%HOMEPATH%\Fm77012R54742.HF3
%TEMP%\aut1.tmp

Miscellaneous:

Searches for the following windows:

ClassName: 'Indicator' WindowName: '(null)'
ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'EDIT' WindowName: '(null)'

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Technical Information

Curing recommendations

Free trial