Trojan.Fakealert.55331

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '115766252' = '<LS_APPDATA>\ngr.exe'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ctfmon.exe' = '<SYSTEM32>\ctfmon.exe'

Вредоносные функции:

Для обхода брандмауэра удаляет или модифицирует следующие ключи реестра:

[<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] 'EnableFirewall' = '00000000'
[<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] 'DoNotAllowExceptions' = '00000000'
[<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] 'DisableNotifications' = '00000001'
[<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'EnableFirewall' = '00000000'
[<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'DoNotAllowExceptions' = '00000000'
[<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'DisableNotifications' = '00000001'

Для затруднения выявления своего присутствия в системе

блокирует запуск следующих системных утилит:

Обновления системы (Windows Update)

блокирует:

Центр обеспечения безопасности (Security Center)

Создает и запускает на исполнение:

'%TEMP%\5t43DJ.exe' (загружен из сети Интернет)

Запускает на исполнение:

'%TEMP%\5t43DJ.exe'
'<LS_APPDATA>\ngr.exe' -gav <Полный путь к вирусу>

Ищет ветки реестра, отвечающие за хранение паролей сторонними программами:

[<HKCU>\Software\VanDyke\SecureFX]
[<HKCU>\Software\FTPWare\COREFTP\Sites]
[<HKCU>\Software\Cryer\WebSitePublisher]
[<HKLM>\Software\NCH Software\ClassicFTP\FTPAccounts]
[<HKCU>\Software\ExpanDrive\Sessions]
[<HKCU>\Software\CoffeeCup Software\Internet\Profiles]
[<HKCU>\Software\BPFTP]
[<HKCU>\Software\BulletProof Software\BulletProof FTP Client\Options]
[<HKCU>\Software\TurboFTP]
[<HKCU>\Software\Sota\FFFTP\Options]
[<HKCU>\Software\Sota\FFFTP]
[<HKCU>\Software\NCH Software\ClassicFTP\FTPAccounts]
[<HKLM>\Software\Martin Prikryl]
[<HKCU>\Software\Martin Prikryl]
[<HKCU>\Software\South River Technologies\WebDrive\Connections]
[<HKCU>\Software\Microsoft\Internet Explorer\IntelliForms\Storage2]
[<HKLM>\Software\South River Technologies\WebDrive\Connections]
[<HKLM>\Software\SoftX.org\FTPClient\Sites]
[<HKLM>\SOFTWARE\NCH Software\Fling\Accounts]
[<HKCU>\SOFTWARE\NCH Software\Fling\Accounts]
[<HKCU>\Software\FTPClient\Sites]
[<HKCU>\Software\SoftX.org\FTPClient\Sites]
[<HKLM>\Software\FTPClient\Sites]
[<HKCU>\Software\GlobalSCAPE\CuteFTP 6 Professional\QCToolbar]
[<HKCU>\Software\GlobalSCAPE\CuteFTP 6 Home\QCToolbar]
[<HKCU>\Software\GlobalSCAPE\CuteFTP 7 Home\QCToolbar]
[<HKCU>\Software\GlobalSCAPE\CuteFTP 8 Home\QCToolbar]
[<HKCU>\Software\GlobalSCAPE\CuteFTP 7 Professional\QCToolbar]
[<HKLM>\Software\Ghisler\Total Commander]
[<HKCU>\Software\Far2\SavedDialogHistory\FTPHost]
[<HKCU>\Software\Far\SavedDialogHistory\FTPHost]
[<HKCU>\Software\Ghisler\Windows Commander]
[<HKLM>\Software\Ghisler\Windows Commander]
[<HKCU>\Software\Ghisler\Total Commander]
[<HKCU>\Software\GlobalSCAPE\CuteFTP 8 Professional\QCToolbar]
[<HKLM>\Software\FileZilla Client]
[<HKLM>\Software\FileZilla]
[<HKCU>\Software\BPFTP\Bullet Proof FTP\Main]
[<HKCU>\Software\BPFTP\Bullet Proof FTP\Options]
[<HKCU>\Software\BulletProof Software\BulletProof FTP Client\Main]
[<HKCU>\Software\FileZilla Client]
[<HKCU>\Software\FlashFXP]
[<HKCU>\Software\FlashFXP\3]
[<HKLM>\Software\FlashFXP\3]
[<HKCU>\Software\FileZilla]
[<HKLM>\Software\FlashFXP]

Изменения в файловой системе:

Создает следующие файлы:

%TEMP%\aek2F6.tmp
%TEMP%\aek2F7.tmp
%TEMP%\aek2F4.tmp
%TEMP%\aek2F5.tmp
%TEMP%\aek2F8.tmp
%TEMP%\aek2FB.tmp
%TEMP%\aek2FC.tmp
%TEMP%\aek2F9.tmp
%TEMP%\aek2FA.tmp
%TEMP%\aek2ED.tmp
%TEMP%\aek2EE.tmp
%TEMP%\aek2EB.tmp
%TEMP%\aek2EC.tmp
%TEMP%\aek2EF.tmp
%TEMP%\aek2F2.tmp
%TEMP%\aek2F3.tmp
%TEMP%\aek2F0.tmp
%TEMP%\aek2F1.tmp
%TEMP%\aek308.tmp
%TEMP%\aek309.tmp
%TEMP%\aek306.tmp
%TEMP%\aek307.tmp
%TEMP%\aek30A.tmp
%TEMP%\aek30D.tmp
%TEMP%\aek30E.tmp
%TEMP%\aek30B.tmp
%TEMP%\aek30C.tmp
%TEMP%\aek2FF.tmp
%TEMP%\aek300.tmp
%TEMP%\aek2FD.tmp
%TEMP%\aek2FE.tmp
%TEMP%\aek301.tmp
%TEMP%\aek304.tmp
%TEMP%\aek305.tmp
%TEMP%\aek302.tmp
%TEMP%\aek303.tmp
%TEMP%\aek2D2.tmp
%TEMP%\aek2D3.tmp
%TEMP%\aek2D0.tmp
%TEMP%\aek2D1.tmp
%TEMP%\aek2D4.tmp
%TEMP%\aek2D7.tmp
%TEMP%\aek2D8.tmp
%TEMP%\aek2D5.tmp
%TEMP%\aek2D6.tmp
%TEMP%\aek2C9.tmp
%TEMP%\aek2CA.tmp
%TEMP%\aek2C7.tmp
%TEMP%\aek2C8.tmp
%TEMP%\aek2CB.tmp
%TEMP%\aek2CE.tmp
%TEMP%\aek2CF.tmp
%TEMP%\aek2CC.tmp
%TEMP%\aek2CD.tmp
%TEMP%\aek2E4.tmp
%TEMP%\aek2E5.tmp
%TEMP%\aek2E2.tmp
%TEMP%\aek2E3.tmp
%TEMP%\aek2E6.tmp
%TEMP%\aek2E9.tmp
%TEMP%\aek2EA.tmp
%TEMP%\aek2E7.tmp
%TEMP%\aek2E8.tmp
%TEMP%\aek2DB.tmp
%TEMP%\aek2DC.tmp
%TEMP%\aek2D9.tmp
%TEMP%\aek2DA.tmp
%TEMP%\aek2DD.tmp
%TEMP%\aek2E0.tmp
%TEMP%\aek2E1.tmp
%TEMP%\aek2DE.tmp
%TEMP%\aek2DF.tmp
%TEMP%\aek30F.tmp
%TEMP%\aek33F.tmp
%TEMP%\aek340.tmp
%TEMP%\aek33D.tmp
%TEMP%\aek33E.tmp
%TEMP%\aek341.tmp
%TEMP%\aek344.tmp
%TEMP%\aek345.tmp
%TEMP%\aek342.tmp
%TEMP%\aek343.tmp
%TEMP%\aek336.tmp
%TEMP%\aek337.tmp
%TEMP%\aek334.tmp
%TEMP%\aek335.tmp
%TEMP%\aek338.tmp
%TEMP%\aek33B.tmp
%TEMP%\aek33C.tmp
%TEMP%\aek339.tmp
%TEMP%\aek33A.tmp
%TEMP%\aek351.tmp
%TEMP%\aek352.tmp
%TEMP%\aek34F.tmp
%TEMP%\aek350.tmp
%TEMP%\aek353.tmp
%TEMP%\aek356.tmp
%TEMP%\aek357.tmp
%TEMP%\aek354.tmp
%TEMP%\aek355.tmp
%TEMP%\aek348.tmp
%TEMP%\aek349.tmp
%TEMP%\aek346.tmp
%TEMP%\aek347.tmp
%TEMP%\aek34A.tmp
%TEMP%\aek34D.tmp
%TEMP%\aek34E.tmp
%TEMP%\aek34B.tmp
%TEMP%\aek34C.tmp
%TEMP%\aek31B.tmp
%TEMP%\aek31C.tmp
%TEMP%\aek319.tmp
%TEMP%\aek31A.tmp
%TEMP%\aek31D.tmp
%TEMP%\aek320.tmp
%TEMP%\aek321.tmp
%TEMP%\aek31E.tmp
%TEMP%\aek31F.tmp
%TEMP%\aek312.tmp
%TEMP%\aek313.tmp
%TEMP%\aek310.tmp
%TEMP%\aek311.tmp
%TEMP%\aek314.tmp
%TEMP%\aek317.tmp
%TEMP%\aek318.tmp
%TEMP%\aek315.tmp
%TEMP%\aek316.tmp
%TEMP%\aek32D.tmp
%TEMP%\aek32E.tmp
%TEMP%\aek32B.tmp
%TEMP%\aek32C.tmp
%TEMP%\aek32F.tmp
%TEMP%\aek332.tmp
%TEMP%\aek333.tmp
%TEMP%\aek330.tmp
%TEMP%\aek331.tmp
%TEMP%\aek324.tmp
%TEMP%\aek325.tmp
%TEMP%\aek322.tmp
%TEMP%\aek323.tmp
%TEMP%\aek326.tmp
%TEMP%\aek329.tmp
%TEMP%\aek32A.tmp
%TEMP%\aek327.tmp
%TEMP%\aek328.tmp
%TEMP%\aek2C6.tmp
%TEMP%\aek265.tmp
%TEMP%\aek266.tmp
%TEMP%\aek263.tmp
%TEMP%\aek264.tmp
%TEMP%\aek267.tmp
%TEMP%\aek26A.tmp
%TEMP%\aek26B.tmp
%TEMP%\aek268.tmp
%TEMP%\aek269.tmp
%TEMP%\aek25C.tmp
%TEMP%\aek25D.tmp
%TEMP%\aek25A.tmp
%TEMP%\aek25B.tmp
%TEMP%\aek25E.tmp
%TEMP%\aek261.tmp
%TEMP%\aek262.tmp
%TEMP%\aek25F.tmp
%TEMP%\aek260.tmp
%TEMP%\aek277.tmp
%TEMP%\aek278.tmp
%TEMP%\aek275.tmp
%TEMP%\aek276.tmp
%TEMP%\aek279.tmp
%TEMP%\aek27C.tmp
%TEMP%\aek27D.tmp
%TEMP%\aek27A.tmp
%TEMP%\aek27B.tmp
%TEMP%\aek26E.tmp
%TEMP%\aek26F.tmp
%TEMP%\aek26C.tmp
%TEMP%\aek26D.tmp
%TEMP%\aek270.tmp
%TEMP%\aek273.tmp
%TEMP%\aek274.tmp
%TEMP%\aek271.tmp
%TEMP%\aek272.tmp
<LS_APPDATA>\wcyv.exe
%ALLUSERSPROFILE%\Application Data\gyda.exe
%HOMEPATH%\Templates\rtfv.exe
%TEMP%\aek244.tmp
%TEMP%\aek245.tmp
%TEMP%\aek247.tmp
%HOMEPATH%\Templates\hjki.exe
%TEMP%\sjll.exe
%TEMP%\aek246.tmp
%TEMP%\aek240.tmp
<LS_APPDATA>\apvb.exe
%HOMEPATH%\Templates\rqgi.exe
%TEMP%\aek23F.tmp
%TEMP%\aek241.tmp
%TEMP%\aek242.tmp
%TEMP%\aek243.tmp
%ALLUSERSPROFILE%\Application Data\ahjw.exe
%TEMP%\gfpo.exe
%TEMP%\aek253.tmp
%TEMP%\aek254.tmp
%TEMP%\aek251.tmp
%TEMP%\aek252.tmp
%TEMP%\aek255.tmp
%TEMP%\aek258.tmp
%TEMP%\aek259.tmp
%TEMP%\aek256.tmp
%TEMP%\aek257.tmp
%TEMP%\aek24A.tmp
%TEMP%\aek24B.tmp
%TEMP%\aek248.tmp
%TEMP%\aek249.tmp
%TEMP%\aek24C.tmp
%TEMP%\aek24F.tmp
%TEMP%\aek250.tmp
%TEMP%\aek24D.tmp
%TEMP%\aek24E.tmp
%TEMP%\aek27E.tmp
%TEMP%\aek2AE.tmp
%TEMP%\aek2AF.tmp
%TEMP%\aek2AC.tmp
%TEMP%\aek2AD.tmp
%TEMP%\aek2B0.tmp
%TEMP%\aek2B3.tmp
%TEMP%\aek2B4.tmp
%TEMP%\aek2B1.tmp
%TEMP%\aek2B2.tmp
%TEMP%\aek2A5.tmp
%TEMP%\aek2A6.tmp
%TEMP%\aek2A3.tmp
%TEMP%\aek2A4.tmp
%TEMP%\aek2A7.tmp
%TEMP%\aek2AA.tmp
%TEMP%\aek2AB.tmp
%TEMP%\aek2A8.tmp
%TEMP%\aek2A9.tmp
%TEMP%\aek2C0.tmp
%TEMP%\aek2C1.tmp
%TEMP%\aek2BE.tmp
%TEMP%\aek2BF.tmp
%TEMP%\5t43DJ.exe
%TEMP%\aek2C4.tmp
%TEMP%\aek2C5.tmp
%TEMP%\aek2C2.tmp
%TEMP%\aek2C3.tmp
%TEMP%\aek2B7.tmp
%TEMP%\aek2B8.tmp
%TEMP%\aek2B5.tmp
%TEMP%\aek2B6.tmp
%TEMP%\aek2B9.tmp
%TEMP%\aek2BC.tmp
%TEMP%\aek2BD.tmp
%TEMP%\aek2BA.tmp
%TEMP%\aek2BB.tmp
%TEMP%\aek28A.tmp
%TEMP%\aek28B.tmp
%TEMP%\aek288.tmp
%TEMP%\aek289.tmp
%TEMP%\aek28C.tmp
%TEMP%\aek28F.tmp
%TEMP%\aek290.tmp
%TEMP%\aek28D.tmp
%TEMP%\aek28E.tmp
%TEMP%\aek281.tmp
%TEMP%\aek282.tmp
%TEMP%\aek27F.tmp
%TEMP%\aek280.tmp
%TEMP%\aek283.tmp
%TEMP%\aek286.tmp
%TEMP%\aek287.tmp
%TEMP%\aek284.tmp
%TEMP%\aek285.tmp
%TEMP%\aek29C.tmp
%TEMP%\aek29D.tmp
%TEMP%\aek29A.tmp
%TEMP%\aek29B.tmp
%TEMP%\aek29E.tmp
%TEMP%\aek2A1.tmp
%TEMP%\aek2A2.tmp
%TEMP%\aek29F.tmp
%TEMP%\aek2A0.tmp
%TEMP%\aek293.tmp
%TEMP%\aek294.tmp
%TEMP%\aek291.tmp
%TEMP%\aek292.tmp
%TEMP%\aek295.tmp
%TEMP%\aek298.tmp
%TEMP%\aek299.tmp
%TEMP%\aek296.tmp
%TEMP%\aek297.tmp
%TEMP%\aek419.tmp
%TEMP%\aek41A.tmp
%TEMP%\aek417.tmp
%TEMP%\aek418.tmp
%TEMP%\aek41B.tmp
%TEMP%\aek41E.tmp
%TEMP%\aek41F.tmp
%TEMP%\aek41C.tmp
%TEMP%\aek41D.tmp
%TEMP%\aek410.tmp
%TEMP%\aek411.tmp
%TEMP%\aek40E.tmp
%TEMP%\aek40F.tmp
%TEMP%\aek412.tmp
%TEMP%\aek415.tmp
%TEMP%\aek416.tmp
%TEMP%\aek413.tmp
%TEMP%\aek414.tmp
%TEMP%\aek42B.tmp
%TEMP%\aek42C.tmp
%TEMP%\aek429.tmp
%TEMP%\aek42A.tmp
%TEMP%\aek42D.tmp
%TEMP%\aek430.tmp
%TEMP%\aek431.tmp
%TEMP%\aek42E.tmp
%TEMP%\aek42F.tmp
%TEMP%\aek422.tmp
%TEMP%\aek423.tmp
%TEMP%\aek420.tmp
%TEMP%\aek421.tmp
%TEMP%\aek424.tmp
%TEMP%\aek427.tmp
%TEMP%\aek428.tmp
%TEMP%\aek425.tmp
%TEMP%\aek426.tmp
%TEMP%\aek3F5.tmp
%TEMP%\aek3F6.tmp
%TEMP%\aek3F3.tmp
%TEMP%\aek3F4.tmp
%TEMP%\aek3F7.tmp
%TEMP%\aek3FA.tmp
%TEMP%\aek3FB.tmp
%TEMP%\aek3F8.tmp
%TEMP%\aek3F9.tmp
%TEMP%\aek3EC.tmp
%TEMP%\aek3ED.tmp
%TEMP%\aek3EA.tmp
%TEMP%\aek3EB.tmp
%TEMP%\aek3EE.tmp
%TEMP%\aek3F1.tmp
%TEMP%\aek3F2.tmp
%TEMP%\aek3EF.tmp
%TEMP%\aek3F0.tmp
%TEMP%\aek407.tmp
%TEMP%\aek408.tmp
%TEMP%\aek405.tmp
%TEMP%\aek406.tmp
%TEMP%\aek409.tmp
%TEMP%\aek40C.tmp
%TEMP%\aek40D.tmp
%TEMP%\aek40A.tmp
%TEMP%\aek40B.tmp
%TEMP%\aek3FE.tmp
%TEMP%\aek3FF.tmp
%TEMP%\aek3FC.tmp
%TEMP%\aek3FD.tmp
%TEMP%\aek400.tmp
%TEMP%\aek403.tmp
%TEMP%\aek404.tmp
%TEMP%\aek401.tmp
%TEMP%\aek402.tmp
%TEMP%\aek432.tmp
%TEMP%\aek462.tmp
%TEMP%\aek463.tmp
%TEMP%\aek460.tmp
%TEMP%\aek461.tmp
%TEMP%\aek464.tmp
%TEMP%\aek467.tmp
%TEMP%\aek468.tmp
%TEMP%\aek465.tmp
%TEMP%\aek466.tmp
%TEMP%\aek459.tmp
%TEMP%\aek45A.tmp
%TEMP%\aek457.tmp
%TEMP%\aek458.tmp
%TEMP%\aek45B.tmp
%TEMP%\aek45E.tmp
%TEMP%\aek45F.tmp
%TEMP%\aek45C.tmp
%TEMP%\aek45D.tmp
%TEMP%\aek474.tmp
%TEMP%\aek475.tmp
%TEMP%\aek472.tmp
%TEMP%\aek473.tmp
%TEMP%\aek476.tmp
%TEMP%\06r46603aekk00ax1o3jv05034b60iju8eeabv8kep41
%HOMEPATH%\Templates\06r46603aekk00ax1o3jv05034b60iju8eeabv8kep41
<LS_APPDATA>\06r46603aekk00ax1o3jv05034b60iju8eeabv8kep41
%ALLUSERSPROFILE%\Application Data\06r46603aekk00ax1o3jv05034b60iju8eeabv8kep41
%TEMP%\aek46B.tmp
%TEMP%\aek46C.tmp
%TEMP%\aek469.tmp
%TEMP%\aek46A.tmp
%TEMP%\aek46D.tmp
%TEMP%\aek470.tmp
%TEMP%\aek471.tmp
%TEMP%\aek46E.tmp
%TEMP%\aek46F.tmp
%TEMP%\aek43E.tmp
%TEMP%\aek43F.tmp
%TEMP%\aek43C.tmp
%TEMP%\aek43D.tmp
%TEMP%\aek440.tmp
%TEMP%\aek443.tmp
%TEMP%\aek444.tmp
%TEMP%\aek441.tmp
%TEMP%\aek442.tmp
%TEMP%\aek435.tmp
%TEMP%\aek436.tmp
%TEMP%\aek433.tmp
%TEMP%\aek434.tmp
%TEMP%\aek437.tmp
%TEMP%\aek43A.tmp
%TEMP%\aek43B.tmp
%TEMP%\aek438.tmp
%TEMP%\aek439.tmp
%TEMP%\aek450.tmp
%TEMP%\aek451.tmp
%TEMP%\aek44E.tmp
%TEMP%\aek44F.tmp
%TEMP%\aek452.tmp
%TEMP%\aek455.tmp
%TEMP%\aek456.tmp
%TEMP%\aek453.tmp
%TEMP%\aek454.tmp
%TEMP%\aek447.tmp
%TEMP%\aek448.tmp
%TEMP%\aek445.tmp
%TEMP%\aek446.tmp
%TEMP%\aek449.tmp
%TEMP%\aek44C.tmp
%TEMP%\aek44D.tmp
%TEMP%\aek44A.tmp
%TEMP%\aek44B.tmp
%TEMP%\aek3E9.tmp
%TEMP%\aek387.tmp
%TEMP%\aek388.tmp
%TEMP%\aek385.tmp
%TEMP%\aek386.tmp
%TEMP%\aek389.tmp
%TEMP%\aek38C.tmp
%TEMP%\aek38D.tmp
%TEMP%\aek38A.tmp
%TEMP%\aek38B.tmp
%TEMP%\aek37E.tmp
%TEMP%\aek37F.tmp
%TEMP%\aek37C.tmp
%TEMP%\aek37D.tmp
%TEMP%\aek380.tmp
%TEMP%\aek383.tmp
%TEMP%\aek384.tmp
%TEMP%\aek381.tmp
%TEMP%\aek382.tmp
%TEMP%\aek399.tmp
%TEMP%\aek39A.tmp
%TEMP%\aek397.tmp
%TEMP%\aek398.tmp
%TEMP%\aek39B.tmp
%TEMP%\aek39E.tmp
%TEMP%\aek39F.tmp
%TEMP%\aek39C.tmp
%TEMP%\aek39D.tmp
%TEMP%\aek390.tmp
%TEMP%\aek391.tmp
%TEMP%\aek38E.tmp
%TEMP%\aek38F.tmp
%TEMP%\aek392.tmp
%TEMP%\aek395.tmp
%TEMP%\aek396.tmp
%TEMP%\aek393.tmp
%TEMP%\aek394.tmp
%TEMP%\aek363.tmp
%TEMP%\aek364.tmp
%TEMP%\aek361.tmp
%TEMP%\aek362.tmp
%TEMP%\aek365.tmp
%TEMP%\aek368.tmp
%TEMP%\aek369.tmp
%TEMP%\aek366.tmp
%TEMP%\aek367.tmp
%TEMP%\aek35A.tmp
%TEMP%\aek35B.tmp
%TEMP%\aek358.tmp
%TEMP%\aek359.tmp
%TEMP%\aek35C.tmp
%TEMP%\aek35F.tmp
%TEMP%\aek360.tmp
%TEMP%\aek35D.tmp
%TEMP%\aek35E.tmp
%TEMP%\aek375.tmp
%TEMP%\aek376.tmp
%TEMP%\aek373.tmp
%TEMP%\aek374.tmp
%TEMP%\aek377.tmp
%TEMP%\aek37A.tmp
%TEMP%\aek37B.tmp
%TEMP%\aek378.tmp
%TEMP%\aek379.tmp
%TEMP%\aek36C.tmp
%TEMP%\aek36D.tmp
%TEMP%\aek36A.tmp
%TEMP%\aek36B.tmp
%TEMP%\aek36E.tmp
%TEMP%\aek371.tmp
%TEMP%\aek372.tmp
%TEMP%\aek36F.tmp
%TEMP%\aek370.tmp
%TEMP%\aek3A0.tmp
%TEMP%\aek3D0.tmp
%TEMP%\aek3D1.tmp
%TEMP%\aek3CE.tmp
%TEMP%\aek3CF.tmp
%TEMP%\aek3D2.tmp
%TEMP%\aek3D5.tmp
%TEMP%\aek3D6.tmp
%TEMP%\aek3D3.tmp
%TEMP%\aek3D4.tmp
%TEMP%\aek3C7.tmp
%TEMP%\aek3C8.tmp
%TEMP%\aek3C5.tmp
%TEMP%\aek3C6.tmp
%TEMP%\aek3C9.tmp
%TEMP%\aek3CC.tmp
%TEMP%\aek3CD.tmp
%TEMP%\aek3CA.tmp
%TEMP%\aek3CB.tmp
%TEMP%\aek3E2.tmp
%TEMP%\aek3E3.tmp
%TEMP%\aek3E0.tmp
%TEMP%\aek3E1.tmp
%TEMP%\aek3E4.tmp
%TEMP%\aek3E7.tmp
%TEMP%\aek3E8.tmp
%TEMP%\aek3E5.tmp
%TEMP%\aek3E6.tmp
%TEMP%\aek3D9.tmp
%TEMP%\aek3DA.tmp
%TEMP%\aek3D7.tmp
%TEMP%\aek3D8.tmp
%TEMP%\aek3DB.tmp
%TEMP%\aek3DE.tmp
%TEMP%\aek3DF.tmp
%TEMP%\aek3DC.tmp
%TEMP%\aek3DD.tmp
%TEMP%\aek3AC.tmp
%TEMP%\aek3AD.tmp
%TEMP%\aek3AA.tmp
%TEMP%\aek3AB.tmp
%TEMP%\aek3AE.tmp
%TEMP%\aek3B1.tmp
%TEMP%\aek3B2.tmp
%TEMP%\aek3AF.tmp
%TEMP%\aek3B0.tmp
%TEMP%\aek3A3.tmp
%TEMP%\aek3A4.tmp
%TEMP%\aek3A1.tmp
%TEMP%\aek3A2.tmp
%TEMP%\aek3A5.tmp
%TEMP%\aek3A8.tmp
%TEMP%\aek3A9.tmp
%TEMP%\aek3A6.tmp
%TEMP%\aek3A7.tmp
%TEMP%\aek3BE.tmp
%TEMP%\aek3BF.tmp
%TEMP%\aek3BC.tmp
%TEMP%\aek3BD.tmp
%TEMP%\aek3C0.tmp
%TEMP%\aek3C3.tmp
%TEMP%\aek3C4.tmp
%TEMP%\aek3C1.tmp
%TEMP%\aek3C2.tmp
%TEMP%\aek3B5.tmp
%TEMP%\aek3B6.tmp
%TEMP%\aek3B3.tmp
%TEMP%\aek3B4.tmp
%TEMP%\aek3B7.tmp
%TEMP%\aek3BA.tmp
%TEMP%\aek3BB.tmp
%TEMP%\aek3B8.tmp
%TEMP%\aek3B9.tmp
%TEMP%\aekC2.tmp
%TEMP%\aekC3.tmp
%TEMP%\aekC0.tmp
%TEMP%\aekC1.tmp
%TEMP%\aekC4.tmp
%TEMP%\aekC7.tmp
%TEMP%\aekC8.tmp
%TEMP%\aekC5.tmp
%TEMP%\aekC6.tmp
%TEMP%\aekB9.tmp
%TEMP%\aekBA.tmp
%TEMP%\aekB7.tmp
%TEMP%\aekB8.tmp
%TEMP%\aekBB.tmp
%TEMP%\aekBE.tmp
%TEMP%\aekBF.tmp
%TEMP%\aekBC.tmp
%TEMP%\aekBD.tmp
%TEMP%\aekD4.tmp
%TEMP%\aekD5.tmp
%TEMP%\aekD2.tmp
%TEMP%\aekD3.tmp
%TEMP%\aekD6.tmp
%TEMP%\aekD9.tmp
%TEMP%\aekDA.tmp
%TEMP%\aekD7.tmp
%TEMP%\aekD8.tmp
%TEMP%\aekCB.tmp
%TEMP%\aekCC.tmp
%TEMP%\aekC9.tmp
%TEMP%\aekCA.tmp
%TEMP%\aekCD.tmp
%TEMP%\aekD0.tmp
%TEMP%\aekD1.tmp
%TEMP%\aekCE.tmp
%TEMP%\aekCF.tmp
%TEMP%\aek9E.tmp
%TEMP%\aek9F.tmp
%TEMP%\aek9C.tmp
%TEMP%\aek9D.tmp
%TEMP%\aekA0.tmp
%TEMP%\aekA3.tmp
%TEMP%\aekA4.tmp
%TEMP%\aekA1.tmp
%TEMP%\aekA2.tmp
%TEMP%\aek95.tmp
%TEMP%\aek96.tmp
%TEMP%\aek93.tmp
%TEMP%\aek94.tmp
%TEMP%\aek97.tmp
%TEMP%\aek9A.tmp
%TEMP%\aek9B.tmp
%TEMP%\aek98.tmp
%TEMP%\aek99.tmp
%TEMP%\aekB0.tmp
%TEMP%\aekB1.tmp
%TEMP%\aekAE.tmp
%TEMP%\aekAF.tmp
%TEMP%\aekB2.tmp
%TEMP%\aekB5.tmp
%TEMP%\aekB6.tmp
%TEMP%\aekB3.tmp
%TEMP%\aekB4.tmp
%TEMP%\aekA7.tmp
%TEMP%\aekA8.tmp
%TEMP%\aekA5.tmp
%TEMP%\aekA6.tmp
%TEMP%\aekA9.tmp
%TEMP%\aekAC.tmp
%TEMP%\aekAD.tmp
%TEMP%\aekAA.tmp
%TEMP%\aekAB.tmp
%TEMP%\aekDB.tmp
%TEMP%\aek10B.tmp
%TEMP%\aek10C.tmp
%TEMP%\aek109.tmp
%TEMP%\aek10A.tmp
%TEMP%\aek10D.tmp
%TEMP%\aek110.tmp
%TEMP%\aek111.tmp
%TEMP%\aek10E.tmp
%TEMP%\aek10F.tmp
%TEMP%\aek102.tmp
%TEMP%\aek103.tmp
%TEMP%\aek100.tmp
%TEMP%\aek101.tmp
%TEMP%\aek104.tmp
%TEMP%\aek107.tmp
%TEMP%\aek108.tmp
%TEMP%\aek105.tmp
%TEMP%\aek106.tmp
%TEMP%\aek11D.tmp
%TEMP%\aek11E.tmp
%TEMP%\aek11B.tmp
%TEMP%\aek11C.tmp
%TEMP%\aek11F.tmp
%TEMP%\aek122.tmp
%TEMP%\aek123.tmp
%TEMP%\aek120.tmp
%TEMP%\aek121.tmp
%TEMP%\aek114.tmp
%TEMP%\aek115.tmp
%TEMP%\aek112.tmp
%TEMP%\aek113.tmp
%TEMP%\aek116.tmp
%TEMP%\aek119.tmp
%TEMP%\aek11A.tmp
%TEMP%\aek117.tmp
%TEMP%\aek118.tmp
%TEMP%\aekE7.tmp
%TEMP%\aekE8.tmp
%TEMP%\aekE5.tmp
%TEMP%\aekE6.tmp
%TEMP%\aekE9.tmp
%TEMP%\aekEC.tmp
%TEMP%\aekED.tmp
%TEMP%\aekEA.tmp
%TEMP%\aekEB.tmp
%TEMP%\aekDE.tmp
%TEMP%\aekDF.tmp
%TEMP%\aekDC.tmp
%TEMP%\aekDD.tmp
%TEMP%\aekE0.tmp
%TEMP%\aekE3.tmp
%TEMP%\aekE4.tmp
%TEMP%\aekE1.tmp
%TEMP%\aekE2.tmp
%TEMP%\aekF9.tmp
%TEMP%\aekFA.tmp
%TEMP%\aekF7.tmp
%TEMP%\aekF8.tmp
%TEMP%\aekFB.tmp
%TEMP%\aekFE.tmp
%TEMP%\aekFF.tmp
%TEMP%\aekFC.tmp
%TEMP%\aekFD.tmp
%TEMP%\aekF0.tmp
%TEMP%\aekF1.tmp
%TEMP%\aekEE.tmp
%TEMP%\aekEF.tmp
%TEMP%\aekF2.tmp
%TEMP%\aekF5.tmp
%TEMP%\aekF6.tmp
%TEMP%\aekF3.tmp
%TEMP%\aekF4.tmp
%TEMP%\aek92.tmp
%TEMP%\aek30.tmp
%TEMP%\aek31.tmp
%TEMP%\aek2E.tmp
%TEMP%\aek2F.tmp
%TEMP%\aek32.tmp
%TEMP%\aek35.tmp
%TEMP%\aek36.tmp
%TEMP%\aek33.tmp
%TEMP%\aek34.tmp
%TEMP%\aek27.tmp
%TEMP%\aek28.tmp
%TEMP%\aek25.tmp
%TEMP%\aek26.tmp
%TEMP%\aek29.tmp
%TEMP%\aek2C.tmp
%TEMP%\aek2D.tmp
%TEMP%\aek2A.tmp
%TEMP%\aek2B.tmp
%TEMP%\aek42.tmp
%TEMP%\aek43.tmp
%TEMP%\aek40.tmp
%TEMP%\aek41.tmp
%TEMP%\aek44.tmp
%TEMP%\aek47.tmp
%TEMP%\aek48.tmp
%TEMP%\aek45.tmp
%TEMP%\aek46.tmp
%TEMP%\aek39.tmp
%TEMP%\aek3A.tmp
%TEMP%\aek37.tmp
%TEMP%\aek38.tmp
%TEMP%\aek3B.tmp
%TEMP%\aek3E.tmp
%TEMP%\aek3F.tmp
%TEMP%\aek3C.tmp
%TEMP%\aek3D.tmp
%TEMP%\aekC.tmp
%TEMP%\aekD.tmp
%TEMP%\aekA.tmp
%TEMP%\aekB.tmp
%TEMP%\aekE.tmp
%TEMP%\aek11.tmp
%TEMP%\aek12.tmp
%TEMP%\aekF.tmp
%TEMP%\aek10.tmp
%TEMP%\aek3.tmp
%TEMP%\aek4.tmp
%TEMP%\aek1.tmp
%TEMP%\aek2.tmp
%TEMP%\aek5.tmp
%TEMP%\aek8.tmp
%TEMP%\aek9.tmp
%TEMP%\aek6.tmp
%TEMP%\aek7.tmp
%TEMP%\aek1E.tmp
%TEMP%\aek1F.tmp
%TEMP%\aek1C.tmp
%TEMP%\aek1D.tmp
%TEMP%\aek20.tmp
%TEMP%\aek23.tmp
%TEMP%\aek24.tmp
%TEMP%\aek21.tmp
%TEMP%\aek22.tmp
%TEMP%\aek15.tmp
%TEMP%\aek16.tmp
%TEMP%\aek13.tmp
%TEMP%\aek14.tmp
%TEMP%\aek17.tmp
%TEMP%\aek1A.tmp
%TEMP%\aek1B.tmp
%TEMP%\aek18.tmp
%TEMP%\aek19.tmp
%TEMP%\aek49.tmp
%TEMP%\aek79.tmp
%TEMP%\aek7A.tmp
%TEMP%\aek77.tmp
%TEMP%\aek78.tmp
%TEMP%\aek7B.tmp
%TEMP%\aek7E.tmp
%TEMP%\aek7F.tmp
%TEMP%\aek7C.tmp
%TEMP%\aek7D.tmp
%TEMP%\aek70.tmp
%TEMP%\aek71.tmp
%TEMP%\aek6E.tmp
%TEMP%\aek6F.tmp
%TEMP%\aek72.tmp
%TEMP%\aek75.tmp
%TEMP%\aek76.tmp
%TEMP%\aek73.tmp
%TEMP%\aek74.tmp
%TEMP%\aek8B.tmp
%TEMP%\aek8C.tmp
%TEMP%\aek89.tmp
%TEMP%\aek8A.tmp
%TEMP%\aek8D.tmp
%TEMP%\aek90.tmp
%TEMP%\aek91.tmp
%TEMP%\aek8E.tmp
%TEMP%\aek8F.tmp
%TEMP%\aek82.tmp
%TEMP%\aek83.tmp
%TEMP%\aek80.tmp
%TEMP%\aek81.tmp
%TEMP%\aek84.tmp
%TEMP%\aek87.tmp
%TEMP%\aek88.tmp
%TEMP%\aek85.tmp
%TEMP%\aek86.tmp
%TEMP%\aek55.tmp
%TEMP%\aek56.tmp
%TEMP%\aek53.tmp
%TEMP%\aek54.tmp
%TEMP%\aek57.tmp
%TEMP%\aek5A.tmp
%TEMP%\aek5B.tmp
%TEMP%\aek58.tmp
%TEMP%\aek59.tmp
%TEMP%\aek4C.tmp
%TEMP%\aek4D.tmp
%TEMP%\aek4A.tmp
%TEMP%\aek4B.tmp
%TEMP%\aek4E.tmp
%TEMP%\aek51.tmp
%TEMP%\aek52.tmp
%TEMP%\aek4F.tmp
%TEMP%\aek50.tmp
%TEMP%\aek67.tmp
%TEMP%\aek68.tmp
%TEMP%\aek65.tmp
%TEMP%\aek66.tmp
%TEMP%\aek69.tmp
%TEMP%\aek6C.tmp
%TEMP%\aek6D.tmp
%TEMP%\aek6A.tmp
%TEMP%\aek6B.tmp
%TEMP%\aek5E.tmp
%TEMP%\aek5F.tmp
%TEMP%\aek5C.tmp
%TEMP%\aek5D.tmp
%TEMP%\aek60.tmp
%TEMP%\aek63.tmp
%TEMP%\aek64.tmp
%TEMP%\aek61.tmp
%TEMP%\aek62.tmp
%TEMP%\aek1E5.tmp
%TEMP%\aek1E6.tmp
%TEMP%\aek1E3.tmp
%TEMP%\aek1E4.tmp
%TEMP%\aek1E7.tmp
%TEMP%\aek1EA.tmp
%TEMP%\aek1EB.tmp
%TEMP%\aek1E8.tmp
%TEMP%\aek1E9.tmp
%TEMP%\aek1DC.tmp
%TEMP%\aek1DD.tmp
%TEMP%\aek1DA.tmp
%TEMP%\aek1DB.tmp
%TEMP%\aek1DE.tmp
%TEMP%\aek1E1.tmp
%TEMP%\aek1E2.tmp
%TEMP%\aek1DF.tmp
%TEMP%\aek1E0.tmp
%TEMP%\aek1F7.tmp
%TEMP%\aek1F8.tmp
%TEMP%\aek1F5.tmp
%TEMP%\aek1F6.tmp
%TEMP%\aek1F9.tmp
%TEMP%\aek1FC.tmp
%TEMP%\aek1FD.tmp
%TEMP%\aek1FA.tmp
%TEMP%\aek1FB.tmp
%TEMP%\aek1EE.tmp
%TEMP%\aek1EF.tmp
%TEMP%\aek1EC.tmp
%TEMP%\aek1ED.tmp
%TEMP%\aek1F0.tmp
%TEMP%\aek1F3.tmp
%TEMP%\aek1F4.tmp
%TEMP%\aek1F1.tmp
%TEMP%\aek1F2.tmp
%TEMP%\aek1C1.tmp
%TEMP%\aek1C2.tmp
%TEMP%\aek1BF.tmp
%TEMP%\aek1C0.tmp
%TEMP%\aek1C3.tmp
%TEMP%\aek1C6.tmp
%TEMP%\aek1C7.tmp
%TEMP%\aek1C4.tmp
%TEMP%\aek1C5.tmp
%TEMP%\aek1B8.tmp
%TEMP%\aek1B9.tmp
%TEMP%\aek1B6.tmp
%TEMP%\aek1B7.tmp
%TEMP%\aek1BA.tmp
%TEMP%\aek1BD.tmp
%TEMP%\aek1BE.tmp
%TEMP%\aek1BB.tmp
%TEMP%\aek1BC.tmp
%TEMP%\aek1D3.tmp
%TEMP%\aek1D4.tmp
%TEMP%\aek1D1.tmp
%TEMP%\aek1D2.tmp
%TEMP%\aek1D5.tmp
%TEMP%\aek1D8.tmp
%TEMP%\aek1D9.tmp
%TEMP%\aek1D6.tmp
%TEMP%\aek1D7.tmp
%TEMP%\aek1CA.tmp
%TEMP%\aek1CB.tmp
%TEMP%\aek1C8.tmp
%TEMP%\aek1C9.tmp
%TEMP%\aek1CC.tmp
%TEMP%\aek1CF.tmp
%TEMP%\aek1D0.tmp
%TEMP%\aek1CD.tmp
%TEMP%\aek1CE.tmp
%TEMP%\aek1FE.tmp
%TEMP%\aek22E.tmp
%TEMP%\aek22F.tmp
%TEMP%\aek22C.tmp
%TEMP%\aek22D.tmp
%TEMP%\aek230.tmp
%TEMP%\aek233.tmp
%TEMP%\aek234.tmp
%TEMP%\aek231.tmp
%TEMP%\aek232.tmp
%TEMP%\aek225.tmp
%TEMP%\aek226.tmp
%TEMP%\aek223.tmp
%TEMP%\aek224.tmp
%TEMP%\aek227.tmp
%TEMP%\aek22A.tmp
%TEMP%\aek22B.tmp
%TEMP%\aek228.tmp
%TEMP%\aek229.tmp
%TEMP%\aek23C.tmp
%HOMEPATH%\Templates\lkdp.exe
%ALLUSERSPROFILE%\Application Data\cloe.exe
%TEMP%\qkss.exe
<LS_APPDATA>\enqe.exe
%TEMP%\twiw.exe
%TEMP%\aek23E.tmp
%TEMP%\aek23D.tmp
%ALLUSERSPROFILE%\Application Data\jmjg.exe
%TEMP%\aek237.tmp
%TEMP%\aek238.tmp
%TEMP%\aek235.tmp
%TEMP%\aek236.tmp
%TEMP%\aek239.tmp
<LS_APPDATA>\ngr.exe
<LS_APPDATA>\moqc.exe
%TEMP%\aek23A.tmp
%TEMP%\aek23B.tmp
%TEMP%\aek20A.tmp
%TEMP%\aek20B.tmp
%TEMP%\aek208.tmp
%TEMP%\aek209.tmp
%TEMP%\aek20C.tmp
%TEMP%\aek20F.tmp
%TEMP%\aek210.tmp
%TEMP%\aek20D.tmp
%TEMP%\aek20E.tmp
%TEMP%\aek201.tmp
%TEMP%\aek202.tmp
%TEMP%\aek1FF.tmp
%TEMP%\aek200.tmp
%TEMP%\aek203.tmp
%TEMP%\aek206.tmp
%TEMP%\aek207.tmp
%TEMP%\aek204.tmp
%TEMP%\aek205.tmp
%TEMP%\aek21C.tmp
%TEMP%\aek21D.tmp
%TEMP%\aek21A.tmp
%TEMP%\aek21B.tmp
%TEMP%\aek21E.tmp
%TEMP%\aek221.tmp
%TEMP%\aek222.tmp
%TEMP%\aek21F.tmp
%TEMP%\aek220.tmp
%TEMP%\aek213.tmp
%TEMP%\aek214.tmp
%TEMP%\aek211.tmp
%TEMP%\aek212.tmp
%TEMP%\aek215.tmp
%TEMP%\aek218.tmp
%TEMP%\aek219.tmp
%TEMP%\aek216.tmp
%TEMP%\aek217.tmp
%TEMP%\aek1B5.tmp
%TEMP%\aek153.tmp
%TEMP%\aek154.tmp
%TEMP%\aek151.tmp
%TEMP%\aek152.tmp
%TEMP%\aek155.tmp
%TEMP%\aek158.tmp
%TEMP%\aek159.tmp
%TEMP%\aek156.tmp
%TEMP%\aek157.tmp
%TEMP%\aek14A.tmp
%TEMP%\aek14B.tmp
%TEMP%\aek148.tmp
%TEMP%\aek149.tmp
%TEMP%\aek14C.tmp
%TEMP%\aek14F.tmp
%TEMP%\aek150.tmp
%TEMP%\aek14D.tmp
%TEMP%\aek14E.tmp
%TEMP%\aek165.tmp
%TEMP%\aek166.tmp
%TEMP%\aek163.tmp
%TEMP%\aek164.tmp
%TEMP%\aek167.tmp
%TEMP%\aek16A.tmp
%TEMP%\aek16B.tmp
%TEMP%\aek168.tmp
%TEMP%\aek169.tmp
%TEMP%\aek15C.tmp
%TEMP%\aek15D.tmp
%TEMP%\aek15A.tmp
%TEMP%\aek15B.tmp
%TEMP%\aek15E.tmp
%TEMP%\aek161.tmp
%TEMP%\aek162.tmp
%TEMP%\aek15F.tmp
%TEMP%\aek160.tmp
%TEMP%\aek12F.tmp
%TEMP%\aek130.tmp
%TEMP%\aek12D.tmp
%TEMP%\aek12E.tmp
%TEMP%\aek131.tmp
%TEMP%\aek134.tmp
%TEMP%\aek135.tmp
%TEMP%\aek132.tmp
%TEMP%\aek133.tmp
%TEMP%\aek126.tmp
%TEMP%\aek127.tmp
%TEMP%\aek124.tmp
%TEMP%\aek125.tmp
%TEMP%\aek128.tmp
%TEMP%\aek12B.tmp
%TEMP%\aek12C.tmp
%TEMP%\aek129.tmp
%TEMP%\aek12A.tmp
%TEMP%\aek141.tmp
%TEMP%\aek142.tmp
%TEMP%\aek13F.tmp
%TEMP%\aek140.tmp
%TEMP%\aek143.tmp
%TEMP%\aek146.tmp
%TEMP%\aek147.tmp
%TEMP%\aek144.tmp
%TEMP%\aek145.tmp
%TEMP%\aek138.tmp
%TEMP%\aek139.tmp
%TEMP%\aek136.tmp
%TEMP%\aek137.tmp
%TEMP%\aek13A.tmp
%TEMP%\aek13D.tmp
%TEMP%\aek13E.tmp
%TEMP%\aek13B.tmp
%TEMP%\aek13C.tmp
%TEMP%\aek16C.tmp
%TEMP%\aek19C.tmp
%TEMP%\aek19D.tmp
%TEMP%\aek19A.tmp
%TEMP%\aek19B.tmp
%TEMP%\aek19E.tmp
%TEMP%\aek1A1.tmp
%TEMP%\aek1A2.tmp
%TEMP%\aek19F.tmp
%TEMP%\aek1A0.tmp
%TEMP%\aek193.tmp
%TEMP%\aek194.tmp
%TEMP%\aek191.tmp
%TEMP%\aek192.tmp
%TEMP%\aek195.tmp
%TEMP%\aek198.tmp
%TEMP%\aek199.tmp
%TEMP%\aek196.tmp
%TEMP%\aek197.tmp
%TEMP%\aek1AE.tmp
%TEMP%\aek1AF.tmp
%TEMP%\aek1AC.tmp
%TEMP%\aek1AD.tmp
%TEMP%\aek1B0.tmp
%TEMP%\aek1B3.tmp
%TEMP%\aek1B4.tmp
%TEMP%\aek1B1.tmp
%TEMP%\aek1B2.tmp
%TEMP%\aek1A5.tmp
%TEMP%\aek1A6.tmp
%TEMP%\aek1A3.tmp
%TEMP%\aek1A4.tmp
%TEMP%\aek1A7.tmp
%TEMP%\aek1AA.tmp
%TEMP%\aek1AB.tmp
%TEMP%\aek1A8.tmp
%TEMP%\aek1A9.tmp
%TEMP%\aek178.tmp
%TEMP%\aek179.tmp
%TEMP%\aek176.tmp
%TEMP%\aek177.tmp
%TEMP%\aek17A.tmp
%TEMP%\aek17D.tmp
%TEMP%\aek17E.tmp
%TEMP%\aek17B.tmp
%TEMP%\aek17C.tmp
%TEMP%\aek16F.tmp
%TEMP%\aek170.tmp
%TEMP%\aek16D.tmp
%TEMP%\aek16E.tmp
%TEMP%\aek171.tmp
%TEMP%\aek174.tmp
%TEMP%\aek175.tmp
%TEMP%\aek172.tmp
%TEMP%\aek173.tmp
%TEMP%\aek18A.tmp
%TEMP%\aek18B.tmp
%TEMP%\aek188.tmp
%TEMP%\aek189.tmp
%TEMP%\aek18C.tmp
%TEMP%\aek18F.tmp
%TEMP%\aek190.tmp
%TEMP%\aek18D.tmp
%TEMP%\aek18E.tmp
%TEMP%\aek181.tmp
%TEMP%\aek182.tmp
%TEMP%\aek17F.tmp
%TEMP%\aek180.tmp
%TEMP%\aek183.tmp
%TEMP%\aek186.tmp
%TEMP%\aek187.tmp
%TEMP%\aek184.tmp
%TEMP%\aek185.tmp

Удаляет следующие файлы:

%TEMP%\aek2FA.tmp
%TEMP%\aek2FB.tmp
%TEMP%\aek2F8.tmp
%TEMP%\aek2F9.tmp
%TEMP%\aek2FE.tmp
%TEMP%\aek2FF.tmp
%TEMP%\aek2FC.tmp
%TEMP%\aek2FD.tmp
%TEMP%\aek2F7.tmp
%TEMP%\aek2F1.tmp
%TEMP%\aek2F2.tmp
%TEMP%\aek2EF.tmp
%TEMP%\aek2F0.tmp
%TEMP%\aek2F5.tmp
%TEMP%\aek2F6.tmp
%TEMP%\aek2F3.tmp
%TEMP%\aek2F4.tmp
%TEMP%\aek300.tmp
%TEMP%\aek30C.tmp
%TEMP%\aek30D.tmp
%TEMP%\aek30A.tmp
%TEMP%\aek30B.tmp
%TEMP%\aek310.tmp
%TEMP%\aek311.tmp
%TEMP%\aek30E.tmp
%TEMP%\aek30F.tmp
%TEMP%\aek309.tmp
%TEMP%\aek303.tmp
%TEMP%\aek304.tmp
%TEMP%\aek301.tmp
%TEMP%\aek302.tmp
%TEMP%\aek307.tmp
%TEMP%\aek308.tmp
%TEMP%\aek305.tmp
%TEMP%\aek306.tmp
%TEMP%\aek2EE.tmp
%TEMP%\aek2D6.tmp
%TEMP%\aek2D7.tmp
%TEMP%\aek2D4.tmp
%TEMP%\aek2D5.tmp
%TEMP%\aek2DA.tmp
%TEMP%\aek2DB.tmp
%TEMP%\aek2D8.tmp
%TEMP%\aek2D9.tmp
%TEMP%\aek2D3.tmp
%TEMP%\aek2CD.tmp
%TEMP%\aek2CE.tmp
%TEMP%\aek2CB.tmp
%TEMP%\aek2CC.tmp
%TEMP%\aek2D1.tmp
%TEMP%\aek2D2.tmp
%TEMP%\aek2CF.tmp
%TEMP%\aek2D0.tmp
%TEMP%\aek2DC.tmp
%TEMP%\aek2E8.tmp
%TEMP%\aek2E9.tmp
%TEMP%\aek2E6.tmp
%TEMP%\aek2E7.tmp
%TEMP%\aek2EC.tmp
%TEMP%\aek2ED.tmp
%TEMP%\aek2EA.tmp
%TEMP%\aek2EB.tmp
%TEMP%\aek2E5.tmp
%TEMP%\aek2DF.tmp
%TEMP%\aek2E0.tmp
%TEMP%\aek2DD.tmp
%TEMP%\aek2DE.tmp
%TEMP%\aek2E3.tmp
%TEMP%\aek2E4.tmp
%TEMP%\aek2E1.tmp
%TEMP%\aek2E2.tmp
%TEMP%\aek341.tmp
%TEMP%\aek342.tmp
%TEMP%\aek33F.tmp
%TEMP%\aek340.tmp
%TEMP%\aek345.tmp
%TEMP%\aek346.tmp
%TEMP%\aek343.tmp
%TEMP%\aek344.tmp
%TEMP%\aek33E.tmp
%TEMP%\aek338.tmp
%TEMP%\aek339.tmp
%TEMP%\aek336.tmp
%TEMP%\aek337.tmp
%TEMP%\aek33C.tmp
%TEMP%\aek33D.tmp
%TEMP%\aek33A.tmp
%TEMP%\aek33B.tmp
%TEMP%\aek347.tmp
%TEMP%\aek353.tmp
%TEMP%\aek354.tmp
%TEMP%\aek351.tmp
%TEMP%\aek352.tmp
%TEMP%\aek357.tmp
%TEMP%\aek358.tmp
%TEMP%\aek355.tmp
%TEMP%\aek356.tmp
%TEMP%\aek350.tmp
%TEMP%\aek34A.tmp
%TEMP%\aek34B.tmp
%TEMP%\aek348.tmp
%TEMP%\aek349.tmp
%TEMP%\aek34E.tmp
%TEMP%\aek34F.tmp
%TEMP%\aek34C.tmp
%TEMP%\aek34D.tmp
%TEMP%\aek335.tmp
%TEMP%\aek31D.tmp
%TEMP%\aek31E.tmp
%TEMP%\aek31B.tmp
%TEMP%\aek31C.tmp
%TEMP%\aek321.tmp
%TEMP%\aek322.tmp
%TEMP%\aek31F.tmp
%TEMP%\aek320.tmp
%TEMP%\aek31A.tmp
%TEMP%\aek314.tmp
%TEMP%\aek315.tmp
%TEMP%\aek312.tmp
%TEMP%\aek313.tmp
%TEMP%\aek318.tmp
%TEMP%\aek319.tmp
%TEMP%\aek316.tmp
%TEMP%\aek317.tmp
%TEMP%\aek323.tmp
%TEMP%\aek32F.tmp
%TEMP%\aek330.tmp
%TEMP%\aek32D.tmp
%TEMP%\aek32E.tmp
%TEMP%\aek333.tmp
%TEMP%\aek334.tmp
%TEMP%\aek331.tmp
%TEMP%\aek332.tmp
%TEMP%\aek32C.tmp
%TEMP%\aek326.tmp
%TEMP%\aek327.tmp
%TEMP%\aek324.tmp
%TEMP%\aek325.tmp
%TEMP%\aek32A.tmp
%TEMP%\aek32B.tmp
%TEMP%\aek328.tmp
%TEMP%\aek329.tmp
%TEMP%\aek2CA.tmp
%TEMP%\aek26B.tmp
%TEMP%\aek26C.tmp
%TEMP%\aek269.tmp
%TEMP%\aek26A.tmp
%TEMP%\aek26F.tmp
%TEMP%\aek270.tmp
%TEMP%\aek26D.tmp
%TEMP%\aek26E.tmp
%TEMP%\aek268.tmp
%TEMP%\aek262.tmp
%TEMP%\aek263.tmp
%TEMP%\aek260.tmp
%TEMP%\aek261.tmp
%TEMP%\aek266.tmp
%TEMP%\aek267.tmp
%TEMP%\aek264.tmp
%TEMP%\aek265.tmp
%TEMP%\aek271.tmp
%TEMP%\aek27D.tmp
%TEMP%\aek27E.tmp
%TEMP%\aek27B.tmp
%TEMP%\aek27C.tmp
%TEMP%\aek281.tmp
%TEMP%\aek282.tmp
%TEMP%\aek27F.tmp
%TEMP%\aek280.tmp
%TEMP%\aek27A.tmp
%TEMP%\aek274.tmp
%TEMP%\aek275.tmp
%TEMP%\aek272.tmp
%TEMP%\aek273.tmp
%TEMP%\aek278.tmp
%TEMP%\aek279.tmp
%TEMP%\aek276.tmp
%TEMP%\aek277.tmp
%TEMP%\aek25F.tmp
%TEMP%\aek247.tmp
%TEMP%\aek248.tmp
%TEMP%\aek245.tmp
%TEMP%\aek246.tmp
%TEMP%\aek24B.tmp
%TEMP%\aek24C.tmp
%TEMP%\aek249.tmp
%TEMP%\aek24A.tmp
%TEMP%\aek244.tmp
%TEMP%\aek23E.tmp
%TEMP%\aek23F.tmp
%TEMP%\aek23C.tmp
%TEMP%\aek23D.tmp
%TEMP%\aek242.tmp
%TEMP%\aek243.tmp
%TEMP%\aek240.tmp
%TEMP%\aek241.tmp
%TEMP%\aek24D.tmp
%TEMP%\aek259.tmp
%TEMP%\aek25A.tmp
%TEMP%\aek257.tmp
%TEMP%\aek258.tmp
%TEMP%\aek25D.tmp
%TEMP%\aek25E.tmp
%TEMP%\aek25B.tmp
%TEMP%\aek25C.tmp
%TEMP%\aek256.tmp
%TEMP%\aek250.tmp
%TEMP%\aek251.tmp
%TEMP%\aek24E.tmp
%TEMP%\aek24F.tmp
%TEMP%\aek254.tmp
%TEMP%\aek255.tmp
%TEMP%\aek252.tmp
%TEMP%\aek253.tmp
%TEMP%\aek2B2.tmp
%TEMP%\aek2B3.tmp
%TEMP%\aek2B0.tmp
%TEMP%\aek2B1.tmp
%TEMP%\aek2B6.tmp
%TEMP%\aek2B7.tmp
%TEMP%\aek2B4.tmp
%TEMP%\aek2B5.tmp
%TEMP%\aek2AF.tmp
%TEMP%\aek2A9.tmp
%TEMP%\aek2AA.tmp
%TEMP%\aek2A7.tmp
%TEMP%\aek2A8.tmp
%TEMP%\aek2AD.tmp
%TEMP%\aek2AE.tmp
%TEMP%\aek2AB.tmp
%TEMP%\aek2AC.tmp
%TEMP%\aek2B8.tmp
%TEMP%\aek2C4.tmp
%TEMP%\aek2C5.tmp
%TEMP%\aek2C2.tmp
%TEMP%\aek2C3.tmp
%TEMP%\aek2C8.tmp
%TEMP%\aek2C9.tmp
%TEMP%\aek2C6.tmp
%TEMP%\aek2C7.tmp
%TEMP%\aek2C1.tmp
%TEMP%\aek2BB.tmp
%TEMP%\aek2BC.tmp
%TEMP%\aek2B9.tmp
%TEMP%\aek2BA.tmp
%TEMP%\aek2BF.tmp
%TEMP%\aek2C0.tmp
%TEMP%\aek2BD.tmp
%TEMP%\aek2BE.tmp
%TEMP%\aek2A6.tmp
%TEMP%\aek28E.tmp
%TEMP%\aek28F.tmp
%TEMP%\aek28C.tmp
%TEMP%\aek28D.tmp
%TEMP%\aek292.tmp
%TEMP%\aek293.tmp
%TEMP%\aek290.tmp
%TEMP%\aek291.tmp
%TEMP%\aek28B.tmp
%TEMP%\aek285.tmp
%TEMP%\aek286.tmp
%TEMP%\aek283.tmp
%TEMP%\aek284.tmp
%TEMP%\aek289.tmp
%TEMP%\aek28A.tmp
%TEMP%\aek287.tmp
%TEMP%\aek288.tmp
%TEMP%\aek294.tmp
%TEMP%\aek2A0.tmp
%TEMP%\aek2A1.tmp
%TEMP%\aek29E.tmp
%TEMP%\aek29F.tmp
%TEMP%\aek2A4.tmp
%TEMP%\aek2A5.tmp
%TEMP%\aek2A2.tmp
%TEMP%\aek2A3.tmp
%TEMP%\aek29D.tmp
%TEMP%\aek297.tmp
%TEMP%\aek298.tmp
%TEMP%\aek295.tmp
%TEMP%\aek296.tmp
%TEMP%\aek29B.tmp
%TEMP%\aek29C.tmp
%TEMP%\aek299.tmp
%TEMP%\aek29A.tmp
%TEMP%\aek359.tmp
%TEMP%\aek418.tmp
%TEMP%\aek419.tmp
%TEMP%\aek416.tmp
%TEMP%\aek417.tmp
%TEMP%\aek41C.tmp
%TEMP%\aek41D.tmp
%TEMP%\aek41A.tmp
%TEMP%\aek41B.tmp
%TEMP%\aek415.tmp
%TEMP%\aek40F.tmp
%TEMP%\aek410.tmp
%TEMP%\aek40D.tmp
%TEMP%\aek40E.tmp
%TEMP%\aek413.tmp
%TEMP%\aek414.tmp
%TEMP%\aek411.tmp
%TEMP%\aek412.tmp
%TEMP%\aek41E.tmp
%TEMP%\aek42A.tmp
%TEMP%\aek42B.tmp
%TEMP%\aek428.tmp
%TEMP%\aek429.tmp
%TEMP%\aek42E.tmp
%TEMP%\aek42F.tmp
%TEMP%\aek42C.tmp
%TEMP%\aek42D.tmp
%TEMP%\aek427.tmp
%TEMP%\aek421.tmp
%TEMP%\aek422.tmp
%TEMP%\aek41F.tmp
%TEMP%\aek420.tmp
%TEMP%\aek425.tmp
%TEMP%\aek426.tmp
%TEMP%\aek423.tmp
%TEMP%\aek424.tmp
%TEMP%\aek40C.tmp
%TEMP%\aek3F4.tmp
%TEMP%\aek3F5.tmp
%TEMP%\aek3F2.tmp
%TEMP%\aek3F3.tmp
%TEMP%\aek3F8.tmp
%TEMP%\aek3F9.tmp
%TEMP%\aek3F6.tmp
%TEMP%\aek3F7.tmp
%TEMP%\aek3F1.tmp
%TEMP%\aek3EB.tmp
%TEMP%\aek3EC.tmp
%TEMP%\aek3E9.tmp
%TEMP%\aek3EA.tmp
%TEMP%\aek3EF.tmp
%TEMP%\aek3F0.tmp
%TEMP%\aek3ED.tmp
%TEMP%\aek3EE.tmp
%TEMP%\aek3FA.tmp
%TEMP%\aek406.tmp
%TEMP%\aek407.tmp
%TEMP%\aek404.tmp
%TEMP%\aek405.tmp
%TEMP%\aek40A.tmp
%TEMP%\aek40B.tmp
%TEMP%\aek408.tmp
%TEMP%\aek409.tmp
%TEMP%\aek403.tmp
%TEMP%\aek3FD.tmp
%TEMP%\aek3FE.tmp
%TEMP%\aek3FB.tmp
%TEMP%\aek3FC.tmp
%TEMP%\aek401.tmp
%TEMP%\aek402.tmp
%TEMP%\aek3FF.tmp
%TEMP%\aek400.tmp
%TEMP%\aek45F.tmp
%TEMP%\aek460.tmp
%TEMP%\aek45D.tmp
%TEMP%\aek45E.tmp
%TEMP%\aek463.tmp
%TEMP%\aek464.tmp
%TEMP%\aek461.tmp
%TEMP%\aek462.tmp
%TEMP%\aek45C.tmp
%TEMP%\aek456.tmp
%TEMP%\aek457.tmp
%TEMP%\aek454.tmp
%TEMP%\aek455.tmp
%TEMP%\aek45A.tmp
%TEMP%\aek45B.tmp
%TEMP%\aek458.tmp
%TEMP%\aek459.tmp
%TEMP%\aek465.tmp
%TEMP%\aek471.tmp
%TEMP%\aek472.tmp
%TEMP%\aek46F.tmp
%TEMP%\aek470.tmp
%TEMP%\aek475.tmp
%TEMP%\aek476.tmp
%TEMP%\aek473.tmp
%TEMP%\aek474.tmp
%TEMP%\aek46E.tmp
%TEMP%\aek468.tmp
%TEMP%\aek469.tmp
%TEMP%\aek466.tmp
%TEMP%\aek467.tmp
%TEMP%\aek46C.tmp
%TEMP%\aek46D.tmp
%TEMP%\aek46A.tmp
%TEMP%\aek46B.tmp
%TEMP%\aek453.tmp
%TEMP%\aek43B.tmp
%TEMP%\aek43C.tmp
%TEMP%\aek439.tmp
%TEMP%\aek43A.tmp
%TEMP%\aek43F.tmp
%TEMP%\aek440.tmp
%TEMP%\aek43D.tmp
%TEMP%\aek43E.tmp
%TEMP%\aek438.tmp
%TEMP%\aek432.tmp
%TEMP%\aek433.tmp
%TEMP%\aek430.tmp
%TEMP%\aek431.tmp
%TEMP%\aek436.tmp
%TEMP%\aek437.tmp
%TEMP%\aek434.tmp
%TEMP%\aek435.tmp
%TEMP%\aek441.tmp
%TEMP%\aek44D.tmp
%TEMP%\aek44E.tmp
%TEMP%\aek44B.tmp
%TEMP%\aek44C.tmp
%TEMP%\aek451.tmp
%TEMP%\aek452.tmp
%TEMP%\aek44F.tmp
%TEMP%\aek450.tmp
%TEMP%\aek44A.tmp
%TEMP%\aek444.tmp
%TEMP%\aek445.tmp
%TEMP%\aek442.tmp
%TEMP%\aek443.tmp
%TEMP%\aek448.tmp
%TEMP%\aek449.tmp
%TEMP%\aek446.tmp
%TEMP%\aek447.tmp
%TEMP%\aek3E8.tmp
%TEMP%\aek389.tmp
%TEMP%\aek38A.tmp
%TEMP%\aek387.tmp
%TEMP%\aek388.tmp
%TEMP%\aek38D.tmp
%TEMP%\aek38E.tmp
%TEMP%\aek38B.tmp
%TEMP%\aek38C.tmp
%TEMP%\aek386.tmp
%TEMP%\aek380.tmp
%TEMP%\aek381.tmp
%TEMP%\aek37E.tmp
%TEMP%\aek37F.tmp
%TEMP%\aek384.tmp
%TEMP%\aek385.tmp
%TEMP%\aek382.tmp
%TEMP%\aek383.tmp
%TEMP%\aek38F.tmp
%TEMP%\aek39B.tmp
%TEMP%\aek39C.tmp
%TEMP%\aek399.tmp
%TEMP%\aek39A.tmp
%TEMP%\aek39F.tmp
%TEMP%\aek3A0.tmp
%TEMP%\aek39D.tmp
%TEMP%\aek39E.tmp
%TEMP%\aek398.tmp
%TEMP%\aek392.tmp
%TEMP%\aek393.tmp
%TEMP%\aek390.tmp
%TEMP%\aek391.tmp
%TEMP%\aek396.tmp
%TEMP%\aek397.tmp
%TEMP%\aek394.tmp
%TEMP%\aek395.tmp
%TEMP%\aek37D.tmp
%TEMP%\aek365.tmp
%TEMP%\aek366.tmp
%TEMP%\aek363.tmp
%TEMP%\aek364.tmp
%TEMP%\aek369.tmp
%TEMP%\aek36A.tmp
%TEMP%\aek367.tmp
%TEMP%\aek368.tmp
%TEMP%\aek362.tmp
%TEMP%\aek35C.tmp
%TEMP%\aek35D.tmp
%TEMP%\aek35A.tmp
%TEMP%\aek35B.tmp
%TEMP%\aek360.tmp
%TEMP%\aek361.tmp
%TEMP%\aek35E.tmp
%TEMP%\aek35F.tmp
%TEMP%\aek36B.tmp
%TEMP%\aek377.tmp
%TEMP%\aek378.tmp
%TEMP%\aek375.tmp
%TEMP%\aek376.tmp
%TEMP%\aek37B.tmp
%TEMP%\aek37C.tmp
%TEMP%\aek379.tmp
%TEMP%\aek37A.tmp
%TEMP%\aek374.tmp
%TEMP%\aek36E.tmp
%TEMP%\aek36F.tmp
%TEMP%\aek36C.tmp
%TEMP%\aek36D.tmp
%TEMP%\aek372.tmp
%TEMP%\aek373.tmp
%TEMP%\aek370.tmp
%TEMP%\aek371.tmp
%TEMP%\aek3D0.tmp
%TEMP%\aek3D1.tmp
%TEMP%\aek3CE.tmp
%TEMP%\aek3CF.tmp
%TEMP%\aek3D4.tmp
%TEMP%\aek3D5.tmp
%TEMP%\aek3D2.tmp
%TEMP%\aek3D3.tmp
%TEMP%\aek3CD.tmp
%TEMP%\aek3C7.tmp
%TEMP%\aek3C8.tmp
%TEMP%\aek3C5.tmp
%TEMP%\aek3C6.tmp
%TEMP%\aek3CB.tmp
%TEMP%\aek3CC.tmp
%TEMP%\aek3C9.tmp
%TEMP%\aek3CA.tmp
%TEMP%\aek3D6.tmp
%TEMP%\aek3E2.tmp
%TEMP%\aek3E3.tmp
%TEMP%\aek3E0.tmp
%TEMP%\aek3E1.tmp
%TEMP%\aek3E6.tmp
%TEMP%\aek3E7.tmp
%TEMP%\aek3E4.tmp
%TEMP%\aek3E5.tmp
%TEMP%\aek3DF.tmp
%TEMP%\aek3D9.tmp
%TEMP%\aek3DA.tmp
%TEMP%\aek3D7.tmp
%TEMP%\aek3D8.tmp
%TEMP%\aek3DD.tmp
%TEMP%\aek3DE.tmp
%TEMP%\aek3DB.tmp
%TEMP%\aek3DC.tmp
%TEMP%\aek3C4.tmp
%TEMP%\aek3AC.tmp
%TEMP%\aek3AD.tmp
%TEMP%\aek3AA.tmp
%TEMP%\aek3AB.tmp
%TEMP%\aek3B0.tmp
%TEMP%\aek3B1.tmp
%TEMP%\aek3AE.tmp
%TEMP%\aek3AF.tmp
%TEMP%\aek3A9.tmp
%TEMP%\aek3A3.tmp
%TEMP%\aek3A4.tmp
%TEMP%\aek3A1.tmp
%TEMP%\aek3A2.tmp
%TEMP%\aek3A7.tmp
%TEMP%\aek3A8.tmp
%TEMP%\aek3A5.tmp
%TEMP%\aek3A6.tmp
%TEMP%\aek3B2.tmp
%TEMP%\aek3BE.tmp
%TEMP%\aek3BF.tmp
%TEMP%\aek3BC.tmp
%TEMP%\aek3BD.tmp
%TEMP%\aek3C2.tmp
%TEMP%\aek3C3.tmp
%TEMP%\aek3C0.tmp
%TEMP%\aek3C1.tmp
%TEMP%\aek3BB.tmp
%TEMP%\aek3B5.tmp
%TEMP%\aek3B6.tmp
%TEMP%\aek3B3.tmp
%TEMP%\aek3B4.tmp
%TEMP%\aek3B9.tmp
%TEMP%\aek3BA.tmp
%TEMP%\aek3B7.tmp
%TEMP%\aek3B8.tmp
%TEMP%\aekBF.tmp
%TEMP%\aekC0.tmp
%TEMP%\aekBD.tmp
%TEMP%\aekBE.tmp
%TEMP%\aekC3.tmp
%TEMP%\aekC4.tmp
%TEMP%\aekC1.tmp
%TEMP%\aekC2.tmp
%TEMP%\aekBC.tmp
%TEMP%\aekB6.tmp
%TEMP%\aekB7.tmp
%TEMP%\aekB4.tmp
%TEMP%\aekB5.tmp
%TEMP%\aekBA.tmp
%TEMP%\aekBB.tmp
%TEMP%\aekB8.tmp
%TEMP%\aekB9.tmp
%TEMP%\aekC5.tmp
%TEMP%\aekD1.tmp
%TEMP%\aekD2.tmp
%TEMP%\aekCF.tmp
%TEMP%\aekD0.tmp
%TEMP%\aekD5.tmp
%TEMP%\aekD6.tmp
%TEMP%\aekD3.tmp
%TEMP%\aekD4.tmp
%TEMP%\aekCE.tmp
%TEMP%\aekC8.tmp
%TEMP%\aekC9.tmp
%TEMP%\aekC6.tmp
%TEMP%\aekC7.tmp
%TEMP%\aekCC.tmp
%TEMP%\aekCD.tmp
%TEMP%\aekCA.tmp
%TEMP%\aekCB.tmp
%TEMP%\aekB3.tmp
%TEMP%\aek9B.tmp
%TEMP%\aek9C.tmp
%TEMP%\aek99.tmp
%TEMP%\aek9A.tmp
%TEMP%\aek9F.tmp
%TEMP%\aekA0.tmp
%TEMP%\aek9D.tmp
%TEMP%\aek9E.tmp
%TEMP%\aek98.tmp
%TEMP%\aek92.tmp
%TEMP%\aek93.tmp
%TEMP%\aek90.tmp
%TEMP%\aek91.tmp
%TEMP%\aek96.tmp
%TEMP%\aek97.tmp
%TEMP%\aek94.tmp
%TEMP%\aek95.tmp
%TEMP%\aekA1.tmp
%TEMP%\aekAD.tmp
%TEMP%\aekAE.tmp
%TEMP%\aekAB.tmp
%TEMP%\aekAC.tmp
%TEMP%\aekB1.tmp
%TEMP%\aekB2.tmp
%TEMP%\aekAF.tmp
%TEMP%\aekB0.tmp
%TEMP%\aekAA.tmp
%TEMP%\aekA4.tmp
%TEMP%\aekA5.tmp
%TEMP%\aekA2.tmp
%TEMP%\aekA3.tmp
%TEMP%\aekA8.tmp
%TEMP%\aekA9.tmp
%TEMP%\aekA6.tmp
%TEMP%\aekA7.tmp
%TEMP%\aek106.tmp
%TEMP%\aek107.tmp
%TEMP%\aek104.tmp
%TEMP%\aek105.tmp
%TEMP%\aek10A.tmp
%TEMP%\aek10B.tmp
%TEMP%\aek108.tmp
%TEMP%\aek109.tmp
%TEMP%\aek103.tmp
%TEMP%\aekFD.tmp
%TEMP%\aekFE.tmp
%TEMP%\aekFB.tmp
%TEMP%\aekFC.tmp
%TEMP%\aek101.tmp
%TEMP%\aek102.tmp
%TEMP%\aekFF.tmp
%TEMP%\aek100.tmp
%TEMP%\aek10C.tmp
%TEMP%\aek118.tmp
%TEMP%\aek119.tmp
%TEMP%\aek116.tmp
%TEMP%\aek117.tmp
%TEMP%\aek11C.tmp
%TEMP%\aek11D.tmp
%TEMP%\aek11A.tmp
%TEMP%\aek11B.tmp
%TEMP%\aek115.tmp
%TEMP%\aek10F.tmp
%TEMP%\aek110.tmp
%TEMP%\aek10D.tmp
%TEMP%\aek10E.tmp
%TEMP%\aek113.tmp
%TEMP%\aek114.tmp
%TEMP%\aek111.tmp
%TEMP%\aek112.tmp
%TEMP%\aekFA.tmp
%TEMP%\aekE2.tmp
%TEMP%\aekE3.tmp
%TEMP%\aekE0.tmp
%TEMP%\aekE1.tmp
%TEMP%\aekE6.tmp
%TEMP%\aekE7.tmp
%TEMP%\aekE4.tmp
%TEMP%\aekE5.tmp
%TEMP%\aekDF.tmp
%TEMP%\aekD9.tmp
%TEMP%\aekDA.tmp
%TEMP%\aekD7.tmp
%TEMP%\aekD8.tmp
%TEMP%\aekDD.tmp
%TEMP%\aekDE.tmp
%TEMP%\aekDB.tmp
%TEMP%\aekDC.tmp
%TEMP%\aekE8.tmp
%TEMP%\aekF4.tmp
%TEMP%\aekF5.tmp
%TEMP%\aekF2.tmp
%TEMP%\aekF3.tmp
%TEMP%\aekF8.tmp
%TEMP%\aekF9.tmp
%TEMP%\aekF6.tmp
%TEMP%\aekF7.tmp
%TEMP%\aekF1.tmp
%TEMP%\aekEB.tmp
%TEMP%\aekEC.tmp
%TEMP%\aekE9.tmp
%TEMP%\aekEA.tmp
%TEMP%\aekEF.tmp
%TEMP%\aekF0.tmp
%TEMP%\aekED.tmp
%TEMP%\aekEE.tmp
%TEMP%\aek8F.tmp
%TEMP%\aek30.tmp
%TEMP%\aek31.tmp
%TEMP%\aek2E.tmp
%TEMP%\aek2F.tmp
%TEMP%\aek34.tmp
%TEMP%\aek35.tmp
%TEMP%\aek32.tmp
%TEMP%\aek33.tmp
%TEMP%\aek2D.tmp
%TEMP%\aek27.tmp
%TEMP%\aek28.tmp
%TEMP%\aek25.tmp
%TEMP%\aek26.tmp
%TEMP%\aek2B.tmp
%TEMP%\aek2C.tmp
%TEMP%\aek29.tmp
%TEMP%\aek2A.tmp
%TEMP%\aek36.tmp
%TEMP%\aek42.tmp
%TEMP%\aek43.tmp
%TEMP%\aek40.tmp
%TEMP%\aek41.tmp
%TEMP%\aek46.tmp
%TEMP%\aek47.tmp
%TEMP%\aek44.tmp
%TEMP%\aek45.tmp
%TEMP%\aek3F.tmp
%TEMP%\aek39.tmp
%TEMP%\aek3A.tmp
%TEMP%\aek37.tmp
%TEMP%\aek38.tmp
%TEMP%\aek3D.tmp
%TEMP%\aek3E.tmp
%TEMP%\aek3B.tmp
%TEMP%\aek3C.tmp
%TEMP%\aek24.tmp
%TEMP%\aekC.tmp
%TEMP%\aekD.tmp
%TEMP%\aekA.tmp
%TEMP%\aekB.tmp
%TEMP%\aek10.tmp
%TEMP%\aek11.tmp
%TEMP%\aekE.tmp
%TEMP%\aekF.tmp
%TEMP%\aek9.tmp
%TEMP%\aek3.tmp
%TEMP%\aek4.tmp
%TEMP%\aek1.tmp
%TEMP%\aek2.tmp
%TEMP%\aek7.tmp
%TEMP%\aek8.tmp
%TEMP%\aek5.tmp
%TEMP%\aek6.tmp
%TEMP%\aek12.tmp
%TEMP%\aek1E.tmp
%TEMP%\aek1F.tmp
%TEMP%\aek1C.tmp
%TEMP%\aek1D.tmp
%TEMP%\aek22.tmp
%TEMP%\aek23.tmp
%TEMP%\aek20.tmp
%TEMP%\aek21.tmp
%TEMP%\aek1B.tmp
%TEMP%\aek15.tmp
%TEMP%\aek16.tmp
%TEMP%\aek13.tmp
%TEMP%\aek14.tmp
%TEMP%\aek19.tmp
%TEMP%\aek1A.tmp
%TEMP%\aek17.tmp
%TEMP%\aek18.tmp
%TEMP%\aek77.tmp
%TEMP%\aek78.tmp
%TEMP%\aek75.tmp
%TEMP%\aek76.tmp
%TEMP%\aek7B.tmp
%TEMP%\aek7C.tmp
%TEMP%\aek79.tmp
%TEMP%\aek7A.tmp
%TEMP%\aek74.tmp
%TEMP%\aek6E.tmp
%TEMP%\aek6F.tmp
%TEMP%\aek6C.tmp
%TEMP%\aek6D.tmp
%TEMP%\aek72.tmp
%TEMP%\aek73.tmp
%TEMP%\aek70.tmp
%TEMP%\aek71.tmp
%TEMP%\aek7D.tmp
%TEMP%\aek89.tmp
%TEMP%\aek8A.tmp
%TEMP%\aek87.tmp
%TEMP%\aek88.tmp
%TEMP%\aek8D.tmp
%TEMP%\aek8E.tmp
%TEMP%\aek8B.tmp
%TEMP%\aek8C.tmp
%TEMP%\aek86.tmp
%TEMP%\aek80.tmp
%TEMP%\aek81.tmp
%TEMP%\aek7E.tmp
%TEMP%\aek7F.tmp
%TEMP%\aek84.tmp
%TEMP%\aek85.tmp
%TEMP%\aek82.tmp
%TEMP%\aek83.tmp
%TEMP%\aek6B.tmp
%TEMP%\aek53.tmp
%TEMP%\aek54.tmp
%TEMP%\aek51.tmp
%TEMP%\aek52.tmp
%TEMP%\aek57.tmp
%TEMP%\aek58.tmp
%TEMP%\aek55.tmp
%TEMP%\aek56.tmp
%TEMP%\aek50.tmp
%TEMP%\aek4A.tmp
%TEMP%\aek4B.tmp
%TEMP%\aek48.tmp
%TEMP%\aek49.tmp
%TEMP%\aek4E.tmp
%TEMP%\aek4F.tmp
%TEMP%\aek4C.tmp
%TEMP%\aek4D.tmp
%TEMP%\aek59.tmp
%TEMP%\aek65.tmp
%TEMP%\aek66.tmp
%TEMP%\aek63.tmp
%TEMP%\aek64.tmp
%TEMP%\aek69.tmp
%TEMP%\aek6A.tmp
%TEMP%\aek67.tmp
%TEMP%\aek68.tmp
%TEMP%\aek62.tmp
%TEMP%\aek5C.tmp
%TEMP%\aek5D.tmp
%TEMP%\aek5A.tmp
%TEMP%\aek5B.tmp
%TEMP%\aek60.tmp
%TEMP%\aek61.tmp
%TEMP%\aek5E.tmp
%TEMP%\aek5F.tmp
%TEMP%\aek11E.tmp
%TEMP%\aek1DD.tmp
%TEMP%\aek1DE.tmp
%TEMP%\aek1DB.tmp
%TEMP%\aek1DC.tmp
%TEMP%\aek1E1.tmp
%TEMP%\aek1E2.tmp
%TEMP%\aek1DF.tmp
%TEMP%\aek1E0.tmp
%TEMP%\aek1DA.tmp
%TEMP%\aek1D4.tmp
%TEMP%\aek1D5.tmp
%TEMP%\aek1D2.tmp
%TEMP%\aek1D3.tmp
%TEMP%\aek1D8.tmp
%TEMP%\aek1D9.tmp
%TEMP%\aek1D6.tmp
%TEMP%\aek1D7.tmp
%TEMP%\aek1E3.tmp
%TEMP%\aek1EF.tmp
%TEMP%\aek1F0.tmp
%TEMP%\aek1ED.tmp
%TEMP%\aek1EE.tmp
%TEMP%\aek1F3.tmp
%TEMP%\aek1F4.tmp
%TEMP%\aek1F1.tmp
%TEMP%\aek1F2.tmp
%TEMP%\aek1EC.tmp
%TEMP%\aek1E6.tmp
%TEMP%\aek1E7.tmp
%TEMP%\aek1E4.tmp
%TEMP%\aek1E5.tmp
%TEMP%\aek1EA.tmp
%TEMP%\aek1EB.tmp
%TEMP%\aek1E8.tmp
%TEMP%\aek1E9.tmp
%TEMP%\aek1D1.tmp
%TEMP%\aek1B9.tmp
%TEMP%\aek1BA.tmp
%TEMP%\aek1B7.tmp
%TEMP%\aek1B8.tmp
%TEMP%\aek1BD.tmp
%TEMP%\aek1BE.tmp
%TEMP%\aek1BB.tmp
%TEMP%\aek1BC.tmp
%TEMP%\aek1B6.tmp
%TEMP%\aek1B0.tmp
%TEMP%\aek1B1.tmp
%TEMP%\aek1AE.tmp
%TEMP%\aek1AF.tmp
%TEMP%\aek1B4.tmp
%TEMP%\aek1B5.tmp
%TEMP%\aek1B2.tmp
%TEMP%\aek1B3.tmp
%TEMP%\aek1BF.tmp
%TEMP%\aek1CB.tmp
%TEMP%\aek1CC.tmp
%TEMP%\aek1C9.tmp
%TEMP%\aek1CA.tmp
%TEMP%\aek1CF.tmp
%TEMP%\aek1D0.tmp
%TEMP%\aek1CD.tmp
%TEMP%\aek1CE.tmp
%TEMP%\aek1C8.tmp
%TEMP%\aek1C2.tmp
%TEMP%\aek1C3.tmp
%TEMP%\aek1C0.tmp
%TEMP%\aek1C1.tmp
%TEMP%\aek1C6.tmp
%TEMP%\aek1C7.tmp
%TEMP%\aek1C4.tmp
%TEMP%\aek1C5.tmp
%TEMP%\aek224.tmp
%TEMP%\aek225.tmp
%TEMP%\aek222.tmp
%TEMP%\aek223.tmp
%TEMP%\aek228.tmp
%TEMP%\aek229.tmp
%TEMP%\aek226.tmp
%TEMP%\aek227.tmp
%TEMP%\aek221.tmp
%TEMP%\aek21B.tmp
%TEMP%\aek21C.tmp
%TEMP%\aek219.tmp
%TEMP%\aek21A.tmp
%TEMP%\aek21F.tmp
%TEMP%\aek220.tmp
%TEMP%\aek21D.tmp
%TEMP%\aek21E.tmp
%TEMP%\aek22A.tmp
%TEMP%\aek236.tmp
%TEMP%\aek237.tmp
%TEMP%\aek234.tmp
%TEMP%\aek235.tmp
%TEMP%\aek23A.tmp
%TEMP%\aek23B.tmp
%TEMP%\aek238.tmp
%TEMP%\aek239.tmp
%TEMP%\aek233.tmp
%TEMP%\aek22D.tmp
%TEMP%\aek22E.tmp
%TEMP%\aek22B.tmp
%TEMP%\aek22C.tmp
%TEMP%\aek231.tmp
%TEMP%\aek232.tmp
%TEMP%\aek22F.tmp
%TEMP%\aek230.tmp
%TEMP%\aek218.tmp
%TEMP%\aek200.tmp
%TEMP%\aek201.tmp
%TEMP%\aek1FE.tmp
%TEMP%\aek1FF.tmp
%TEMP%\aek204.tmp
%TEMP%\aek205.tmp
%TEMP%\aek202.tmp
%TEMP%\aek203.tmp
%TEMP%\aek1FD.tmp
%TEMP%\aek1F7.tmp
%TEMP%\aek1F8.tmp
%TEMP%\aek1F5.tmp
%TEMP%\aek1F6.tmp
%TEMP%\aek1FB.tmp
%TEMP%\aek1FC.tmp
%TEMP%\aek1F9.tmp
%TEMP%\aek1FA.tmp
%TEMP%\aek206.tmp
%TEMP%\aek212.tmp
%TEMP%\aek213.tmp
%TEMP%\aek210.tmp
%TEMP%\aek211.tmp
%TEMP%\aek216.tmp
%TEMP%\aek217.tmp
%TEMP%\aek214.tmp
%TEMP%\aek215.tmp
%TEMP%\aek20F.tmp
%TEMP%\aek209.tmp
%TEMP%\aek20A.tmp
%TEMP%\aek207.tmp
%TEMP%\aek208.tmp
%TEMP%\aek20D.tmp
%TEMP%\aek20E.tmp
%TEMP%\aek20B.tmp
%TEMP%\aek20C.tmp
%TEMP%\aek1AD.tmp
%TEMP%\aek14E.tmp
%TEMP%\aek14F.tmp
%TEMP%\aek14C.tmp
%TEMP%\aek14D.tmp
%TEMP%\aek152.tmp
%TEMP%\aek153.tmp
%TEMP%\aek150.tmp
%TEMP%\aek151.tmp
%TEMP%\aek14B.tmp
%TEMP%\aek145.tmp
%TEMP%\aek146.tmp
%TEMP%\aek143.tmp
%TEMP%\aek144.tmp
%TEMP%\aek149.tmp
%TEMP%\aek14A.tmp
%TEMP%\aek147.tmp
%TEMP%\aek148.tmp
%TEMP%\aek154.tmp
%TEMP%\aek160.tmp
%TEMP%\aek161.tmp
%TEMP%\aek15E.tmp
%TEMP%\aek15F.tmp
%TEMP%\aek164.tmp
%TEMP%\aek165.tmp
%TEMP%\aek162.tmp
%TEMP%\aek163.tmp
%TEMP%\aek15D.tmp
%TEMP%\aek157.tmp
%TEMP%\aek158.tmp
%TEMP%\aek155.tmp
%TEMP%\aek156.tmp
%TEMP%\aek15B.tmp
%TEMP%\aek15C.tmp
%TEMP%\aek159.tmp
%TEMP%\aek15A.tmp
%TEMP%\aek142.tmp
%TEMP%\aek12A.tmp
%TEMP%\aek12B.tmp
%TEMP%\aek128.tmp
%TEMP%\aek129.tmp
%TEMP%\aek12E.tmp
%TEMP%\aek12F.tmp
%TEMP%\aek12C.tmp
%TEMP%\aek12D.tmp
%TEMP%\aek127.tmp
%TEMP%\aek121.tmp
%TEMP%\aek122.tmp
%TEMP%\aek11F.tmp
%TEMP%\aek120.tmp
%TEMP%\aek125.tmp
%TEMP%\aek126.tmp
%TEMP%\aek123.tmp
%TEMP%\aek124.tmp
%TEMP%\aek130.tmp
%TEMP%\aek13C.tmp
%TEMP%\aek13D.tmp
%TEMP%\aek13A.tmp
%TEMP%\aek13B.tmp
%TEMP%\aek140.tmp
%TEMP%\aek141.tmp
%TEMP%\aek13E.tmp
%TEMP%\aek13F.tmp
%TEMP%\aek139.tmp
%TEMP%\aek133.tmp
%TEMP%\aek134.tmp
%TEMP%\aek131.tmp
%TEMP%\aek132.tmp
%TEMP%\aek137.tmp
%TEMP%\aek138.tmp
%TEMP%\aek135.tmp
%TEMP%\aek136.tmp
%TEMP%\aek195.tmp
%TEMP%\aek196.tmp
%TEMP%\aek193.tmp
%TEMP%\aek194.tmp
%TEMP%\aek199.tmp
%TEMP%\aek19A.tmp
%TEMP%\aek197.tmp
%TEMP%\aek198.tmp
%TEMP%\aek192.tmp
%TEMP%\aek18C.tmp
%TEMP%\aek18D.tmp
%TEMP%\aek18A.tmp
%TEMP%\aek18B.tmp
%TEMP%\aek190.tmp
%TEMP%\aek191.tmp
%TEMP%\aek18E.tmp
%TEMP%\aek18F.tmp
%TEMP%\aek19B.tmp
%TEMP%\aek1A7.tmp
%TEMP%\aek1A8.tmp
%TEMP%\aek1A5.tmp
%TEMP%\aek1A6.tmp
%TEMP%\aek1AB.tmp
%TEMP%\aek1AC.tmp
%TEMP%\aek1A9.tmp
%TEMP%\aek1AA.tmp
%TEMP%\aek1A4.tmp
%TEMP%\aek19E.tmp
%TEMP%\aek19F.tmp
%TEMP%\aek19C.tmp
%TEMP%\aek19D.tmp
%TEMP%\aek1A2.tmp
%TEMP%\aek1A3.tmp
%TEMP%\aek1A0.tmp
%TEMP%\aek1A1.tmp
%TEMP%\aek189.tmp
%TEMP%\aek171.tmp
%TEMP%\aek172.tmp
%TEMP%\aek16F.tmp
%TEMP%\aek170.tmp
%TEMP%\aek175.tmp
%TEMP%\aek176.tmp
%TEMP%\aek173.tmp
%TEMP%\aek174.tmp
%TEMP%\aek16E.tmp
%TEMP%\aek168.tmp
%TEMP%\aek169.tmp
%TEMP%\aek166.tmp
%TEMP%\aek167.tmp
%TEMP%\aek16C.tmp
%TEMP%\aek16D.tmp
%TEMP%\aek16A.tmp
%TEMP%\aek16B.tmp
%TEMP%\aek177.tmp
%TEMP%\aek183.tmp
%TEMP%\aek184.tmp
%TEMP%\aek181.tmp
%TEMP%\aek182.tmp
%TEMP%\aek187.tmp
%TEMP%\aek188.tmp
%TEMP%\aek185.tmp
%TEMP%\aek186.tmp
%TEMP%\aek180.tmp
%TEMP%\aek17A.tmp
%TEMP%\aek17B.tmp
%TEMP%\aek178.tmp
%TEMP%\aek179.tmp
%TEMP%\aek17E.tmp
%TEMP%\aek17F.tmp
%TEMP%\aek17C.tmp
%TEMP%\aek17D.tmp

Самоудаляется.

Сетевая активность:

Подключается к:

'so###urepu.com':80
'xe####kawuhady.com':80
'zo###ymiz.com':80
'vo####dacyfyki.com':80
'ly####fotoqy.com':80
'ro###ymici.com':80
'wu###omovom.com':80
'so###yzev.com':80
'qa####pojewiv.com':80
'vi###oxis.com':80
'bo####lawiqo.com':80
'ge####reeh0st.com':80
'dy###owid.com':80
'vu####hevixaf.com':80
'nu####jilamipu.com':80
'lo###ejav.com':80
'se####wytuzek.com':80

TCP:

Запросы HTTP GET:

http://so###urepu.com/1013000412
http://xe####kawuhady.com/1013000412
http://zo###ymiz.com/1013000412
http://vo####dacyfyki.com/1013000412
http://ly####fotoqy.com/1013000412
http://ro###ymici.com/1013000412
http://wu###omovom.com/1013000412
http://so###yzev.com/1013000412
http://qa####pojewiv.com/1013000412
http://vi###oxis.com/1013000412
http://bo####lawiqo.com/1013000412
http://ge####reeh0st.com/setup2.exe
http://dy###owid.com/1013000412
http://vu####hevixaf.com/1013000412
http://nu####jilamipu.com/1013000412
http://lo###ejav.com/1013000412
http://se####wytuzek.com/1013000412

UDP:

DNS ASK so###urepu.com
DNS ASK xe####kawuhady.com
DNS ASK zo###ymiz.com
DNS ASK vo####dacyfyki.com
DNS ASK wu###omovom.com
DNS ASK ro###ymici.com
DNS ASK ce####zugyky.com
DNS ASK so###yzev.com
DNS ASK ly####fotoqy.com
DNS ASK vi###oxis.com
DNS ASK bo####lawiqo.com
DNS ASK ge####reeh0st.com
DNS ASK dy###owid.com
DNS ASK lo###ejav.com
DNS ASK nu####jilamipu.com
DNS ASK qa####pojewiv.com
DNS ASK se####wytuzek.com
DNS ASK vu####hevixaf.com

Другое:

Ищет следующие окна:

ClassName: 'Indicator' WindowName: ''

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней