Trojan.DownLoader46.25686

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '00000' = '%WINDIR%\Boot\DVD\9023mdsn894w.com'
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '00000' = '<DRIVERS>\9023mdsn894w.com'
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] '00001 10000' = ''
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] '00010 01000' = ''
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] '00100 00100' = ''
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] '01000 00010' = ''
[HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] '10000 00001' = ''
[HKCU\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce] 'Test Value' = ''
[HKCU\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'Test Value' = ''

Modifies file system

Creates the following files

<Current directory>\661818740.exe
<Current directory>\291675494.exe
<Current directory>\1766295546.exe
<Current directory>\94362059.exe
<Current directory>\434955446.exe
<Current directory>\1228710492.exe
<Current directory>\1146276810.exe
<Current directory>\1130694399.exe
<Current directory>\421548038.exe
<Current directory>\654775644.exe
<Current directory>\1266319940.exe
<Current directory>\1557849086.exe
<Current directory>\1580405887.exe
<Current directory>\614863395.exe
<Current directory>\27033887.exe
<Current directory>\1599986126.exe
<Current directory>\2080410480.exe
<Current directory>\1555941594.exe
<Current directory>\2101225936.exe
<Current directory>\461503005.exe
<Current directory>\418685450.exe
<Current directory>\399177141.exe
<Current directory>\1337234975.exe
<Current directory>\1525379626.exe
<Current directory>\2131047238.exe
<Current directory>\1561232093.exe
<Current directory>\1709421600.exe
<Current directory>\1855578953.exe
<Current directory>\103730480.exe
<Current directory>\89649875.exe
<Current directory>\183091955.exe
<Current directory>\1234138419.exe
<Current directory>\68906337.exe
<Current directory>\1885378214.exe
<Current directory>\200364513.exe
<Current directory>\813691282.exe
<Current directory>\1039274478.exe
<Current directory>\957166171.exe
<Current directory>\1573953756.exe
<Current directory>\1367251685.exe
<Current directory>\681627787.exe
<Current directory>\2129565865.exe
<Current directory>\1915160359.exe
<Current directory>\1187506896.exe
<Current directory>\857600456.exe
<Current directory>\772218693.exe
<Current directory>\1606671266.exe
<Current directory>\1691010525.exe
<Current directory>\1122935942.exe
<Current directory>\2075149865.exe
<Current directory>\1515519446.exe
<Current directory>\565761556.exe
<Current directory>\349189681.exe
<Current directory>\2129046802.exe
<Current directory>\1430054576.exe
<Current directory>\355115009.exe
<Current directory>\1092275237.exe
<Current directory>\623729579.exe
<Current directory>\1812909313.exe
<Current directory>\1087017248.exe
<Current directory>\658240518.exe
<Current directory>\165490142.exe
<Current directory>\620087534.exe
<Current directory>\196488192.exe
<Current directory>\823645124.exe
<Current directory>\708069828.exe
<Current directory>\1030824874.exe
<Current directory>\929562110.exe
<Current directory>\1117585466.exe
<Current directory>\796323761.exe
<Current directory>\2082204163.exe
<Current directory>\1170358823.exe
<Current directory>\1834413901.exe
<Current directory>\2087609085.exe
<Current directory>\344918388.exe
<Current directory>\1264901021.exe
<Current directory>\1823624390.exe
<Current directory>\482046511.exe
<Current directory>\1792062346.exe
<Current directory>\1815172886.exe
<Current directory>\709230023.exe
<Current directory>\1375308880.exe
<Current directory>\1613909726.exe
<Current directory>\1766362383.exe
<Current directory>\843609792.exe
<Current directory>\254378988.exe
<Current directory>\1276632387.exe
<Current directory>\1182136826.exe
<Current directory>\2106307258.exe
<Current directory>\1283603104.exe
<Current directory>\963720115.exe
<Current directory>\724525888.exe
<Current directory>\2033606562.exe
<Current directory>\1763456857.exe
<Current directory>\1375732399.exe
<Current directory>\663346962.exe
<Current directory>\85262232.exe
<Current directory>\145372061.exe
<Current directory>\1756637270.exe
<Current directory>\1411684265.exe
<Current directory>\437229708.exe
<Current directory>\1107053508.exe
<Current directory>\366205909.exe
<Current directory>\1755011735.exe
<Current directory>\976770162.exe
<Current directory>\1785526642.exe
<Current directory>\1975146265.exe
<Current directory>\282259570.exe
<Current directory>\234559660.exe
<Current directory>\2017936755.exe
<Current directory>\1933965233.exe
<Current directory>\367318654.exe
<Current directory>\746405672.exe
<Current directory>\601927613.exe
<Current directory>\177139349.exe
<Current directory>\1472978363.exe
<Current directory>\191204605.exe
<Current directory>\2135877650.exe
<Current directory>\1230177255.exe
<Current directory>\1199518061.exe
<Current directory>\1135281799.exe
<Current directory>\1322569373.exe
<Current directory>\825375817.exe
<Current directory>\949731540.exe
<Current directory>\1463233033.exe
<Current directory>\910114848.exe
<Current directory>\1978166771.exe
<Current directory>\1717714510.exe
<Current directory>\401563978.exe
<Current directory>\600184391.exe
<Current directory>\1089149998.exe
<Current directory>\1065082046.exe
<Current directory>\1235039063.exe
<Current directory>\1816844097.exe
<Current directory>\209853201.exe
<Current directory>\825264427.exe
<Current directory>\1073371953.exe
<Current directory>\487921277.exe
<Current directory>\1093099365.exe
<Current directory>\397008072.exe
<Current directory>\1942391189.exe
<Current directory>\1601126513.exe
<Current directory>\1974131344.exe
<Current directory>\615438578.exe
<Current directory>\511597609.exe
<Current directory>\96994325.exe
<Current directory>\1929541416.exe
<Current directory>\1842660125.exe
<Current directory>\973217908.exe
<Current directory>\44526496.exe
<Current directory>\1160649318.exe
<Current directory>\266953711.exe
<Current directory>\1435933120.exe
<Current directory>\1197149984.exe
<Current directory>\1829842613.exe
<Current directory>\293690548.exe
<Current directory>\1463247200.exe
<Current directory>\1528829253.exe
<Current directory>\207136093.exe
<Current directory>\1977786202.exe
<Current directory>\322131241.exe
<Current directory>\1391936243.exe
<Current directory>\923566893.exe
<Current directory>\1885354875.exe
<Current directory>\1149123800.exe
<Current directory>\889647963.exe
<Current directory>\401676866.exe
<Current directory>\947316687.exe
<Current directory>\1410061585.exe
<Current directory>\785511768.exe
<Current directory>\2111105065.exe
<Current directory>\1398805638.exe
<Current directory>\1494933891.exe
<Current directory>\588960357.exe
<Current directory>\1362541770.exe
<Current directory>\1792244591.exe
<Current directory>\569086511.exe
<Current directory>\1827854737.exe
<Current directory>\1463924385.exe
<Current directory>\1326074686.exe
<Current directory>\451833126.exe
<Current directory>\586417164.exe
<Current directory>\744438087.exe
<Current directory>\123099359.exe
<Current directory>\685646017.exe
<Current directory>\2003023468.exe
<Current directory>\1824224535.exe
<Current directory>\917847769.exe
<Current directory>\280952874.exe
<Current directory>\1915792165.exe
<Current directory>\1069923011.exe
<Current directory>\219947660.exe
<Current directory>\1780432883.exe
<Current directory>\242381024.exe
<Current directory>\928798857.exe
<Current directory>\166332482.exe
<Current directory>\378121861.exe
<Current directory>\1930742821.exe
<Current directory>\1419956793.exe
<Current directory>\1436655832.exe
<Current directory>\850276531.exe
<Current directory>\1792797007.exe
<Current directory>\51480755.exe
<Current directory>\1781369707.exe
<Current directory>\1365833361.exe
<Current directory>\2102996814.exe
<Current directory>\448460374.exe
<Current directory>\242655984.exe
<Current directory>\916614867.exe
<Current directory>\1640165514.exe
<Current directory>\950843125.exe
<Current directory>\731586559.exe
<Current directory>\311991659.exe
<Current directory>\2064955475.exe
<Current directory>\649075736.exe
<Current directory>\817101450.exe
<Current directory>\1128433709.exe
<Current directory>\269903987.exe
<Current directory>\1045277673.exe
<Current directory>\719392667.exe
<Current directory>\342015831.exe
<Current directory>\877125874.exe
<Current directory>\587691562.exe
<Current directory>\1725259722.exe
<Current directory>\1517860076.exe
<Current directory>\1523790486.exe
<Current directory>\1440289105.exe
<Current directory>\13509560.exe
<Current directory>\1592813767.exe
<Current directory>\753211910.exe
<Current directory>\88357871.exe
<Current directory>\1004314143.exe
<Current directory>\359395665.exe
<Current directory>\1101171095.exe
<Current directory>\1981760995.exe
<Current directory>\1711025010.exe
<Current directory>\819224970.exe
<Current directory>\981554939.exe
<Current directory>\2061655673.exe
<Current directory>\997745308.exe
<Current directory>\212886100.exe
<Current directory>\871804166.exe
<Current directory>\1975755753.exe
<Current directory>\254972937.exe
<Current directory>\1391451020.exe
<Current directory>\25863381.exe
<Current directory>\311774090.exe
<Current directory>\1788582325.exe
<Current directory>\1214402949.exe
<Current directory>\1211605957.exe
<Current directory>\972176989.exe
<Current directory>\635380397.exe
<Current directory>\1159522469.exe
<Current directory>\1360302411.exe
<Current directory>\1987605710.exe
<Current directory>\1767162243.exe
<Current directory>\1964748720.exe
<Current directory>\835862400.exe
<Current directory>\1963015692.exe
<Current directory>\553569573.exe
<Current directory>\284976876.exe
<Current directory>\1648510980.exe
<Current directory>\1649906869.exe
<Current directory>\1615539936.exe
<Current directory>\1820730581.exe
<Current directory>\542723556.exe
<Current directory>\1147007552.exe
<Current directory>\1728463663.exe
<Current directory>\248060787.exe
<Current directory>\801919236.exe
<Current directory>\1321868749.exe
<Current directory>\212346260.exe
<Current directory>\1225065765.exe
<Current directory>\2022121691.exe
<Current directory>\1682159939.exe
<Current directory>\950255431.exe
<Current directory>\580608963.exe
<Current directory>\1533682814.exe
<Current directory>\1010069936.exe
<Current directory>\1261001944.exe
<Current directory>\1683478846.exe
<Current directory>\2144446874.exe
<Current directory>\1028528395.exe
<Current directory>\226492850.exe
<Current directory>\415272454.exe
<Current directory>\972200299.exe
<Current directory>\497564856.exe
<Current directory>\1558713945.exe
<Current directory>\2129698904.exe
<Current directory>\714056232.exe
<Current directory>\639798809.exe
<Current directory>\109475826.exe
<Current directory>\2051631193.exe
<Current directory>\1310814291.exe
<Current directory>\598113786.exe
<Current directory>\906761502.exe
<Current directory>\1453910573.exe
<Current directory>\801292817.exe
<Current directory>\343121459.exe
<Current directory>\1468230711.exe
<Current directory>\1705567141.exe
<Current directory>\1328313007.exe
<Current directory>\973622007.exe
<Current directory>\911768225.exe
<Current directory>\1289039972.exe
<Current directory>\439963529.exe
<Current directory>\698913450.exe
<Current directory>\1328947646.exe
<Current directory>\1380786481.exe
<Current directory>\1376063453.exe
<Current directory>\1940430382.exe
<Current directory>\1260853954.exe
<Current directory>\1558437408.exe
<Current directory>\1129996022.exe
<Current directory>\167115258.exe
<Current directory>\135761384.exe
<Current directory>\913245507.exe
<Current directory>\1825358094.exe
<Current directory>\160609884.exe
<Current directory>\788712546.exe
<Current directory>\24111447.exe
<Current directory>\1877747408.exe
<Current directory>\457513558.exe
<Current directory>\418179113.exe
<Current directory>\1978978359.exe
<Current directory>\594324209.exe
<Current directory>\2jdn83gyjs0.exe
<Current directory>\2jdn83gyjs0.zip
<Current directory>\2jdn83gyjs0.rar
<Current directory>\2jdn83gyjs0.doc
<Current directory>\2jdn83gyjs0.ini
<Current directory>\2jdn83gyjs0.msi
<Current directory>\2jdn83gyjs0.icon
<Current directory>\169549110.exe
<Current directory>\2014428113.exe
<Current directory>\2jdn83gyjs0.png
<Current directory>\2jdn83gyjs0.dll
<Current directory>\2jdn83gyjs0.mp3
<Current directory>\2jdn83gyjs0.mp4
<Current directory>\2jdn83gyjs0.avi
<Current directory>\2jdn83gyjs0.bin
<Current directory>\2jdn83gyjs0.bat
<Current directory>\2jdn83gy3s0.ogg
<Current directory>\2jdn85gyjs0.ogg
<Current directory>\2jdn93gyjs0.ogg
<Current directory>\2jd183gyjs0.ogg
<Current directory>\2jdy834yjs0.ogg
<Current directory>\microsoft.jar
<Current directory>\2jdn83gyjs0.jpg
<Current directory>\2jdn83gyjs0.sys
<Current directory>\2023168864.exe
<Current directory>\1008767246.exe
<Current directory>\1183166807.exe
<Current directory>\143107308.exe
<Current directory>\763173651.exe
<Current directory>\1724179014.exe
<Current directory>\515629870.exe
<Current directory>\1483361513.exe
<Current directory>\508878435.exe
<Current directory>\570135227.exe
<Current directory>\1647308751.exe
<Current directory>\1187094587.exe
<Current directory>\48456190.exe
<Current directory>\439129843.exe
<Current directory>\1940582267.exe
<Current directory>\808378194.exe
<Current directory>\1043991599.exe
<Current directory>\623388593.exe
<Current directory>\787326441.exe
<Current directory>\1780750791.exe
<Current directory>\1750784976.exe
<Current directory>\1588902573.exe
<Current directory>\377720239.exe
<Current directory>\756819333.exe
<Current directory>\864569160.exe
<Current directory>\734167966.exe
<Current directory>\3694429.exe
<Current directory>\949699090.exe
<Current directory>\1538735557.exe
<Current directory>\1795057282.exe
<Current directory>\952651712.exe
<Current directory>\2061450740.exe
<Current directory>\269342113.exe
<Current directory>\1065860031.exe
<Current directory>\688327780.exe
<Current directory>\1663385767.exe
<Current directory>\1533313398.exe
<Current directory>\844849929.exe
<Current directory>\644099141.exe
<Current directory>\731447890.exe
<Current directory>\733069531.exe
<Current directory>\526657213.exe
<Current directory>\1203916808.exe
<Current directory>\679240425.exe
<Current directory>\492077976.exe
<Current directory>\628992109.exe
<Current directory>\1351536068.exe
<Current directory>\1706429415.exe
<Current directory>\405208868.exe
<Current directory>\1550268058.exe
<Current directory>\1669945723.exe
<Current directory>\2147389580.exe
<Current directory>\177171454.exe
<Current directory>\1245733216.exe
<Current directory>\1275820978.exe
<Current directory>\415860551.exe
<Current directory>\1965753240.exe
<Current directory>\1687155419.exe
<Current directory>\1350948354.exe
<Current directory>\1835957813.exe
<Current directory>\1287685147.exe
<Current directory>\1330129587.exe
<Current directory>\1923123747.exe
<Current directory>\534877563.exe
<Current directory>\2098755271.exe
<Current directory>\1198046404.exe
<Current directory>\341285937.exe
<Current directory>\10097520.exe
<Current directory>\2145611591.exe
<Current directory>\720763316.exe
<Current directory>\1712255492.exe
<Current directory>\504040066.exe
<Current directory>\1854243635.exe
<Current directory>\647253943.exe
<Current directory>\115144868.exe
<Current directory>\708869084.exe
<Current directory>\865671954.exe
<Current directory>\2007232688.exe
<Current directory>\1462966769.exe
<Current directory>\2071117959.exe
<Current directory>\1257588803.exe
<Current directory>\783860881.exe
<Current directory>\1186459106.exe
<Current directory>\808377170.exe
<Current directory>\2013763853.exe
<Current directory>\979850851.exe
<Current directory>\1202970454.exe
<Current directory>\492792243.exe
<Current directory>\407245298.exe
<Current directory>\846079505.exe
<Current directory>\244594521.exe
<Current directory>\195191071.exe
<Current directory>\1040094074.exe
<Current directory>\753987291.exe
<Current directory>\1277940695.exe
<Current directory>\249635901.exe
<Current directory>\427179842.exe
<Current directory>\802220416.exe
<Current directory>\1636349245.exe
<Current directory>\916376486.exe
<Current directory>\1880249050.exe
<Current directory>\1224293349.exe
<Current directory>\1000970729.exe
<Current directory>\1829684640.exe
<Current directory>\474148553.exe
<Current directory>\1580419093.exe
<Current directory>\617797630.exe
<Current directory>\1247686656.exe
<Current directory>\1911754321.exe
<Current directory>\1593773768.exe
<Current directory>\586815406.exe
<Current directory>\44443122.exe
<Current directory>\1124178134.exe
<Current directory>\1867285338.exe
<Current directory>\920035649.exe
<Current directory>\1911697926.exe
<Current directory>\1100604263.exe
<Current directory>\79008858.exe
<Current directory>\889655472.exe
<Current directory>\1833760640.exe
<Current directory>\706986988.exe
<Current directory>\626340987.exe
<Current directory>\1358396571.exe
<Current directory>\1350391181.exe
<Current directory>\1186350741.exe
<Current directory>\782523542.exe
<Current directory>\662842117.exe
<Current directory>\604405124.exe
<Current directory>\1637091808.exe
<Current directory>\1385142517.exe
<Current directory>\2081189435.exe
<Current directory>\1645738244.exe
<Current directory>\399425417.exe
<Current directory>\1702292232.exe
<Current directory>\1003244178.exe
<Current directory>\1984012992.exe
<Current directory>\1901978249.exe
<Current directory>\512560803.exe
<Current directory>\1221153778.exe
<Current directory>\1191726495.exe
<Current directory>\132972455.exe
<Current directory>\1459690968.exe
<Current directory>\222747230.exe
<Current directory>\888541847.exe
<Current directory>\1954699511.exe
<Current directory>\1283863722.exe
<Current directory>\1142116704.exe
<Current directory>\1577974928.exe
<Current directory>\1373469015.exe
<Current directory>\935881513.exe
<Current directory>\795017192.exe
<Current directory>\1819375655.exe
<Current directory>\89834463.exe
<Current directory>\1043967839.exe
<Current directory>\729507697.exe
<Current directory>\1415497948.exe
<Current directory>\80357029.exe
<Current directory>\208279764.exe
<Current directory>\1785430285.exe
<Current directory>\965020076.exe
<Current directory>\1728373304.exe
<Current directory>\1104790589.exe
<Current directory>\751895277.exe
<Current directory>\1778559218.exe
<Current directory>\768656676.exe
<Current directory>\893524106.exe
<Current directory>\170466211.exe
<Current directory>\278489043.exe
<Current directory>\1855363487.exe
<Current directory>\1765106409.exe
<Current directory>\448323620.exe
<Current directory>\1058705001.exe
<Current directory>\1136128889.exe
<Current directory>\724002680.exe
<Current directory>\1214493774.exe
<Current directory>\990568054.exe
<Current directory>\275771046.exe
<Current directory>\1304348733.exe
<Current directory>\1075904053.exe
<Current directory>\2018241416.exe
<Current directory>\1104476032.exe
<Current directory>\27787410.exe
<Current directory>\549463098.exe
<Current directory>\1476995252.exe
<Current directory>\1432066111.exe
<Current directory>\1133783059.exe
<Current directory>\350718804.exe
<Current directory>\1507554542.exe
<Current directory>\1027323883.exe
<Current directory>\1053415596.exe
<Current directory>\931376867.exe
<Current directory>\571968214.exe
<Current directory>\46119077.exe
<Current directory>\1329279001.exe
<Current directory>\1064636290.exe
<Current directory>\1359280612.exe
<Current directory>\106370226.exe
<Current directory>\12360618.exe
<Current directory>\1695302439.exe
<Current directory>\1042160918.exe
<Current directory>\143337692.exe
<Current directory>\2071104370.exe
<Current directory>\2023156419.exe
<Current directory>\1393133878.exe
<Current directory>\1362353951.exe
<Current directory>\284877599.exe
<Current directory>\1503329837.exe
<Current directory>\1383614952.exe
<Current directory>\443767034.exe
<Current directory>\866741047.exe
<Current directory>\865626912.exe
<Current directory>\230593772.exe
<Current directory>\2118615056.exe
<Current directory>\324919846.exe
<Current directory>\1701876944.exe
<Current directory>\1191697995.exe
<Current directory>\1050529753.exe
<Current directory>\1634583804.exe
<Current directory>\1546831966.exe
<Current directory>\431264955.exe
<Current directory>\1979378542.exe
<Current directory>\867142702.exe
<Current directory>\1470667536.exe
<Current directory>\1143885553.exe
<Current directory>\1487521648.exe
<Current directory>\33698590.exe
<Current directory>\1288769001.exe
<Current directory>\1774040004.exe
<Current directory>\727617601.exe
<Current directory>\571907890.exe
<Current directory>\511760960.exe
<Current directory>\744803503.exe
<Current directory>\1616283204.exe
<Current directory>\1281434583.exe
<Current directory>\348302325.exe
<Current directory>\424923982.exe
<Current directory>\1310449562.exe
<Current directory>\1741631831.exe
<Current directory>\571930590.exe
<Current directory>\2095110994.exe
<Current directory>\1520782753.exe
<Current directory>\1701179162.exe
<Current directory>\1470238105.exe
<Current directory>\580641169.exe
<Current directory>\1779331230.exe
<Current directory>\1096493452.exe
<Current directory>\1051333985.exe
<Current directory>\1612156703.exe
<Current directory>\853797875.exe
<Current directory>\1091355117.exe
<Current directory>\839590733.exe
<Current directory>\853223841.exe
<Current directory>\1647025563.exe
<Current directory>\2145496238.exe
<Current directory>\1636330016.exe
<Current directory>\309006414.exe
<Current directory>\1726699940.exe
<Current directory>\137935686.exe
<Current directory>\1987185572.exe
<Current directory>\470737528.exe
<Current directory>\1414136401.exe
<Current directory>\1183060848.exe
<Current directory>\1002406023.exe
<Current directory>\1838082601.exe
<Current directory>\106188176.exe
<Current directory>\27133478.exe
<Current directory>\2095219417.exe
<Current directory>\1498010649.exe
<Current directory>\172454940.exe
<Current directory>\9335080.exe
<Current directory>\1616055663.exe
<Current directory>\1791352504.exe
<Current directory>\1668474898.exe
<Current directory>\1463053077.exe
<Current directory>\774811393.exe
<Current directory>\1867508103.exe
<Current directory>\1268219559.exe
<Current directory>\1896365804.exe
<Current directory>\957965453.exe
<Current directory>\1362952409.exe
<Current directory>\946005593.exe
<Current directory>\1750712443.exe
<Current directory>\1682922306.exe
<Current directory>\2068876455.exe
<Current directory>\644045400.exe
<Current directory>\967053784.exe
<Current directory>\1320736770.exe
<Current directory>\2018706808.exe
<Current directory>\287648817.exe
<Current directory>\1490091948.exe
<Current directory>\1986633152.exe
<Current directory>\739709040.exe
<Current directory>\1063752099.exe
<Current directory>\1443430408.exe
<Current directory>\1933818370.exe
<Current directory>\662237375.exe
<Current directory>\754179290.exe
<Current directory>\318233679.exe
<Current directory>\2065136821.exe
<Current directory>\1663365822.exe
<Current directory>\1171553210.exe
<Current directory>\1649332315.exe
<Current directory>\737576447.exe
<Current directory>\1856037189.exe
<Current directory>\1245681113.exe
<Current directory>\1088174470.exe
<Current directory>\1875465879.exe
<Current directory>\1998396619.exe
<Current directory>\158439219.exe
<Current directory>\649153281.exe
<Current directory>\1528017283.exe
<Current directory>\890130309.exe
<Current directory>\444382362.exe
<Current directory>\863521975.exe
<Current directory>\1923119640.exe
<Current directory>\672135006.exe
<Current directory>\983291923.exe
<Current directory>\939074137.exe
<Current directory>\131256835.exe
<Current directory>\1501029129.exe
<Current directory>\875719944.exe
<Current directory>\447699041.exe
<Current directory>\394492707.exe
<Current directory>\273871747.exe
<Current directory>\1621450689.exe
<Current directory>\827814300.exe
<Current directory>\1268194907.exe
<Current directory>\1574020581.exe
<Current directory>\1733168660.exe
<Current directory>\131576581.exe
<Current directory>\1905841296.exe
<Current directory>\1679022366.exe
<Current directory>\1757535655.exe
<Current directory>\1141604043.exe
<Current directory>\64547462.exe
<Current directory>\566632664.exe
<Current directory>\1448932409.exe
<Current directory>\1520931512.exe
<Current directory>\1455756179.exe
<Current directory>\1780708109.exe
<Current directory>\1838736572.exe
<Current directory>\1115579297.exe
<Current directory>\1759526809.exe
<Current directory>\1956200480.exe
<Current directory>\631929609.exe
<Current directory>\1972544137.exe
<Current directory>\1644757825.exe
<Current directory>\234245444.exe
<Current directory>\267734731.exe
<Current directory>\345049720.exe
<Current directory>\988632428.exe
<Current directory>\192940521.exe
<Current directory>\1416498581.exe
<Current directory>\1233795735.exe
<Current directory>\1922465172.exe
<Current directory>\1277797229.exe
<Current directory>\1462232241.exe
<Current directory>\1085025197.exe
<Current directory>\1555691799.exe
<Current directory>\1656417959.exe
<Current directory>\734166435.exe
<Current directory>\2120901195.exe
<Current directory>\1661415583.exe
<Current directory>\1697403437.exe
<Current directory>\746557784.exe
<Current directory>\672755309.exe
<Current directory>\9811701.exe
<Current directory>\1873953710.exe
<Current directory>\903473307.exe
<Current directory>\775748732.exe
<Current directory>\823997032.exe
<Current directory>\672580098.exe
<Current directory>\697721102.exe
<Current directory>\1688640346.exe
<Current directory>\1743288836.exe
<Current directory>\1526585296.exe
<Current directory>\562419029.exe
<Current directory>\2139514980.exe
<Current directory>\551939829.exe
<Current directory>\2043375681.exe
<Current directory>\1058372306.exe
<Current directory>\1384483586.exe
<Current directory>\636907.exe
<Current directory>\1087612995.exe
<Current directory>\1219664797.exe
<Current directory>\838395405.exe
<Current directory>\1844516380.exe
<Current directory>\1710421970.exe
<Current directory>\678333741.exe
<Current directory>\617005335.exe
<Current directory>\1360989130.exe
<Current directory>\547842731.exe
<Current directory>\1881967134.exe
<Current directory>\704939301.exe
<Current directory>\585024659.exe
<Current directory>\1869404792.exe
<Current directory>\1491552824.exe
<Current directory>\1114505231.exe
<Current directory>\760166593.exe
<Current directory>\1737761981.exe
<Current directory>\1600278259.exe
<Current directory>\1872537128.exe
<Current directory>\1037477071.exe
<Current directory>\1650371664.exe
<Current directory>\1526707569.exe
<Current directory>\588266120.exe
<Current directory>\1956869205.exe
<Current directory>\924006899.exe
<Current directory>\620833397.exe
<Current directory>\1393205993.exe
<Current directory>\1780645531.exe
<Current directory>\723206778.exe
<Current directory>\269989025.exe
<Current directory>\2139273438.exe
<Current directory>\190165144.exe
<Current directory>\927705795.exe
<Current directory>\1093036098.exe
<Current directory>\931631147.exe
<Current directory>\100132538.exe
<Current directory>\1171844753.exe
<Current directory>\791262218.exe
<Current directory>\681343624.exe
<Current directory>\185406331.exe
<Current directory>\741784568.exe
<Current directory>\848996589.exe
<Current directory>\294048532.exe
<Current directory>\2035661762.exe
<Current directory>\1726440718.exe
<Current directory>\98992493.exe
<Current directory>\2101465091.exe
<Current directory>\1866385163.exe
<Current directory>\1326786605.exe
<Current directory>\1332791798.exe
<Current directory>\1186158124.exe
<Current directory>\1919454700.exe
<Current directory>\532971754.exe
<Current directory>\2032353423.exe
<Current directory>\887087239.exe
<Current directory>\848024678.exe
<Current directory>\824180618.exe
<Current directory>\85450822.exe
<Current directory>\2136732711.exe
<Current directory>\698679263.exe
<Current directory>\1783293823.exe
<Current directory>\1001637893.exe
<Current directory>\1532711199.exe
<Current directory>\1763780322.exe
<Current directory>\666441261.exe
<Current directory>\1814960899.exe
<Current directory>\1255279915.exe
<Current directory>\1940354563.exe
<Current directory>\761606517.exe
<Current directory>\1365350884.exe
<Current directory>\1896876090.exe
<Current directory>\225805690.exe
<Current directory>\877511900.exe
<Current directory>\1814232800.exe
<Current directory>\1265531732.exe
<Current directory>\233854135.exe
<Current directory>\1145299211.exe
<Current directory>\1990551767.exe
<Current directory>\2116819242.exe
<Current directory>\1014494627.exe
<Current directory>\9311458.exe
<Current directory>\1703610180.exe
<Current directory>\1582262869.exe
<Current directory>\1044457783.exe
<Current directory>\2070633780.exe
<Current directory>\490437377.exe
<Current directory>\424027258.exe
<Current directory>\1004586311.exe
<Current directory>\1648260628.exe
<Current directory>\950002533.exe
<Current directory>\255017771.exe
<Current directory>\1867597236.exe
<Current directory>\1941460941.exe
<Current directory>\1970849460.exe
<Current directory>\1255347434.exe
<Current directory>\211292199.exe
<Current directory>\937439392.exe
<Current directory>\1085933510.exe
<Current directory>\1885158936.exe
<Current directory>\2122212441.exe
<Current directory>\1494674274.exe
<Current directory>\77143047.exe
<Current directory>\2142893569.exe
<Current directory>\422922410.exe
<Current directory>\2017518566.exe
<Current directory>\415228136.exe
<Current directory>\1015104643.exe
<Current directory>\2142839557.exe
<Current directory>\1302590788.exe
<Current directory>\1345489483.exe
<Current directory>\616914980.exe
<Current directory>\576910109.exe
<Current directory>\304295193.exe
<Current directory>\1376629535.exe
<Current directory>\1028820959.exe
<Current directory>\977334237.exe
<Current directory>\868594072.exe
<Current directory>\25183541.exe
<Current directory>\1059427841.exe
<Current directory>\1945109307.exe
<Current directory>\2031062231.exe
<Current directory>\317922968.exe
<Current directory>\1905968678.exe
<Current directory>\1262742022.exe
<Current directory>\19645097.exe
<Current directory>\680544147.exe
<Current directory>\1003353589.exe
<Current directory>\1996233429.exe
<Current directory>\1168201516.exe
<Current directory>\938466761.exe
<Current directory>\1090724200.exe
<Current directory>\379641641.exe
<Current directory>\293641223.exe
<Current directory>\196162083.exe
<Current directory>\1758312443.exe
<Current directory>\1090035818.exe
<Current directory>\1569777130.exe
<Current directory>\1334314323.exe
<Current directory>\2140284669.exe
<Current directory>\1264144346.exe
<Current directory>\1002595159.exe
<Current directory>\2039853915.exe
<Current directory>\536506342.exe
<Current directory>\2125545546.exe
<Current directory>\1785603997.exe
<Current directory>\477212633.exe
<Current directory>\1631934323.exe
<Current directory>\424163686.exe
<Current directory>\953933987.exe
<Current directory>\509668728.exe
<Current directory>\781353580.exe
<Current directory>\1667456854.exe
<Current directory>\931431733.exe
<Current directory>\1353741373.exe
<Current directory>\1233681733.exe
<Current directory>\2134244513.exe
<Current directory>\82186580.exe
<Current directory>\488214099.exe
<Current directory>\2466415.exe
<Current directory>\444935153.exe
<Current directory>\2091755358.exe
<Current directory>\1980128111.exe
<Current directory>\1294239447.exe
<Current directory>\2023946357.exe
<Current directory>\923146062.exe
<Current directory>\1543332778.exe
<Current directory>\1275969343.exe
<Current directory>\2069604681.exe
<Current directory>\192712267.exe
<Current directory>\1355026445.exe
<Current directory>\1352682670.exe
<Current directory>\95044761.exe
<Current directory>\672680301.exe
<Current directory>\1754067740.exe
<Current directory>\1884846624.exe
<Current directory>\1971106658.exe
<Current directory>\1626229164.exe
<Current directory>\910748620.exe
<Current directory>\723113187.exe
<Current directory>\2142158669.exe
<Current directory>\586145984.exe
<Current directory>\1242059477.exe
<Current directory>\1536289180.exe
<Current directory>\338931673.exe
<Current directory>\1064059373.exe
<Current directory>\777760460.exe
<Current directory>\808632915.exe
<Current directory>\559273671.exe
<Current directory>\1954698824.exe
<Current directory>\326002628.exe
<Current directory>\1047570856.exe
<Current directory>\1573414676.exe
<Current directory>\1874613417.exe
<Current directory>\1402538808.exe
<Current directory>\1152754366.exe
<Current directory>\2127873017.exe
<Current directory>\2069170945.exe
<Current directory>\1167567486.exe
<Current directory>\1765402857.exe
<Current directory>\1549493282.exe
<Current directory>\731307165.exe
<Current directory>\483012036.exe
<Current directory>\751916241.exe
<Current directory>\761530123.exe
<Current directory>\148919400.exe
<Current directory>\986927294.exe
<Current directory>\1988940034.exe
<Current directory>\669047512.exe
<Current directory>\983435284.exe
<Current directory>\489559534.exe
<Current directory>\1423791882.exe
<Current directory>\1800593500.exe
<Current directory>\1195916798.exe
<Current directory>\1968357243.exe
<Current directory>\1288167441.exe
<Current directory>\457531090.exe
<Current directory>\1437536317.exe
<Current directory>\1939067535.exe
<Current directory>\1955189059.exe
<Current directory>\1116295261.exe
<Current directory>\1273083480.exe
<Current directory>\1566341374.exe
<Current directory>\776590847.exe
<Current directory>\168282521.exe
<Current directory>\1854404246.exe
<Current directory>\1123020145.exe
<Current directory>\1391520126.exe
<Current directory>\808139688.exe
<Current directory>\1669991207.exe
<Current directory>\143863191.exe
<Current directory>\1937416702.exe
<Current directory>\570895310.exe
<Current directory>\1927002124.exe
<Current directory>\970991060.exe
<Current directory>\1897645221.exe
<Current directory>\1318734134.exe
<Current directory>\1329128439.exe
<Current directory>\815592467.exe
<Current directory>\714781908.exe
<Current directory>\323654834.exe
<Current directory>\188236001.exe
<Current directory>\1156471907.exe
<Current directory>\342697463.exe
<Current directory>\1489709734.exe
<Current directory>\1702337207.exe
<Current directory>\2060584556.exe
<Current directory>\965773302.exe
<Current directory>\2050062950.exe
<Current directory>\1899382182.exe
<Current directory>\980401111.exe
<Current directory>\2111878874.exe
<Current directory>\68280355.exe
<Current directory>\956715108.exe
<Current directory>\1332145400.exe
<Current directory>\435019782.exe
<Current directory>\687052667.exe
<Current directory>\930999085.exe
<Current directory>\776119881.exe
<Current directory>\1271267807.exe
<Current directory>\945105686.exe
<Current directory>\1829789788.exe
<Current directory>\1352902267.exe
<Current directory>\247863785.exe
<Current directory>\1727093445.exe
<Current directory>\222434035.exe
<Current directory>\768857013.exe
<Current directory>\1524578707.exe
<Current directory>\716953543.exe
<Current directory>\262918407.exe
<Current directory>\1852366543.exe
<Current directory>\1171081161.exe
<Current directory>\249538416.exe
<Current directory>\641423458.exe
<Current directory>\1086421882.exe
<Current directory>\1801203066.exe
<Current directory>\1522607306.exe
<Current directory>\2096178144.exe
<Current directory>\1252657303.exe
<Current directory>\1278754774.exe
<Current directory>\1249433379.exe
<Current directory>\502146061.exe
<Current directory>\1325381698.exe
<Current directory>\1214296934.exe
<Current directory>\535601601.exe
<Current directory>\2100102684.exe
<Current directory>\213055487.exe
<Current directory>\1515171842.exe
<Current directory>\1301048649.exe
<Current directory>\759219340.exe
<Current directory>\2jdn83jyjs0.ogg
C:\kdafsn4w8rfns.cmd

Deletes the following files

%WINDIR%\win.ini

Network activity

Connects to

'ei##r.org':80

TCP

HTTP GET requests

http://www.ei##r.org/download/eicar.com.txt

UDP

DNS ASK ei##r.org

Технології

Терміни

Навчання

Міфи

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней