Trojan.PWS.Siggen1.59260

Technical Information

Malicious functions:

Creates and executes the following:

'%TEMP%\msupdate.exe'
'<SYSTEM32>\wscript.exe' "%HOMEPATH%\YMLSN\3562.vbs" 7007

Executes the following:

'<SYSTEM32>\cmd.exe' /c ""%TEMP%\1.tmp\inst.cmd" "
'<SYSTEM32>\net.exe' stop Alerter
'<SYSTEM32>\net1.exe' stop Alerter
'%WINDIR%\Temp\inst.exe'
'%HOMEPATH%\YMLSN\SAOVQ.exe' 93759.RIF
'%HOMEPATH%\YMLSN\SAOVQ.exe' DNCTTYMK.dat
'%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'

Injects code into

the following system processes:

%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

Terminates or attempts to terminate

the following user processes:

magent.exe
ICQ.exe

Searches for registry branches where third party applications store passwords:

[<HKLM>\SOFTWARE\FlashFXP]
[<HKCU>\Software\Google\Google Talk\Accounts]
[<HKCU>\Software\Microsoft\Internet Explorer\IntelliForms\Storage2]
[<HKCU>\Software\Ghisler\Total Commander]
[<HKLM>\Software\Ghisler\Total Commander]
[<HKCU>\Software\Far2\Plugins\FTP\Hosts]
[<HKLM>\Software\Martin Prikryl]
[<HKCU>\Software\Martin Prikryl]
[<HKLM>\SOFTWARE\RIT\The Bat!]
[<HKCU>\Software\Far\Plugins\FTP\Hosts]
[<HKCU>\SOFTWARE\RIT\The Bat!]

Modifies file system:

Creates the following files:

%HOMEPATH%\YMLSN\35509.KGX
%HOMEPATH%\YMLSN\86257.EBD
%HOMEPATH%\YMLSN\D65218.ZXC
%HOMEPATH%\YMLSN\50592.XHJ
%HOMEPATH%\YMLSN\53236.BNC
%HOMEPATH%\YMLSN\S98669.ZYL
%HOMEPATH%\YMLSN\98677.YAZ
%HOMEPATH%\YMLSN\F80938.TDB
%HOMEPATH%\YMLSN\85053.YBX
%HOMEPATH%\YMLSN\A28357.GKQ
%HOMEPATH%\YMLSN\H15425.KFQ
%HOMEPATH%\YMLSN\Y49367.PEQ
%HOMEPATH%\YMLSN\86819.EUK
%HOMEPATH%\YMLSN\35307.HRE
%HOMEPATH%\YMLSN\84846.MKQ
%HOMEPATH%\YMLSN\Q38584.XYL
%HOMEPATH%\YMLSN\U33559.CQO
%HOMEPATH%\YMLSN\W16145.TER
%HOMEPATH%\YMLSN\H62905.BVS
%HOMEPATH%\YMLSN\62253.LSM
%HOMEPATH%\YMLSN\43345.LXQ
%HOMEPATH%\YMLSN\X30286.LUS
%HOMEPATH%\YMLSN\S3391.OIH
%HOMEPATH%\YMLSN\R26861.WAQ
%HOMEPATH%\YMLSN\J22466.MJT
%HOMEPATH%\YMLSN\T8567.YMJ
%HOMEPATH%\YMLSN\67007.MTK
%HOMEPATH%\YMLSN\I92754.PZH
%HOMEPATH%\YMLSN\98671.IQU
%HOMEPATH%\YMLSN\17753.UKM
%HOMEPATH%\YMLSN\X85962.TPX
%HOMEPATH%\YMLSN\X15901.PGE
%HOMEPATH%\YMLSN\40128.HAT
%HOMEPATH%\YMLSN\Q29857.FSR
%HOMEPATH%\YMLSN\53819.NMC
%HOMEPATH%\YMLSN\W41519.WOK
%HOMEPATH%\YMLSN\A74932.SVC
%HOMEPATH%\YMLSN\H29463.LSV
%HOMEPATH%\YMLSN\Y27463.TKS
%HOMEPATH%\YMLSN\D58424.EQG
%HOMEPATH%\YMLSN\74095.LFU
%HOMEPATH%\YMLSN\57193.SFI
%HOMEPATH%\YMLSN\F12442.HJX
%HOMEPATH%\YMLSN\F28935.XXR
%HOMEPATH%\YMLSN\50772.FII
%HOMEPATH%\YMLSN\H46998.KYE
%HOMEPATH%\YMLSN\U31837.ISF
%HOMEPATH%\YMLSN\87313.WUV
%HOMEPATH%\YMLSN\V14329.ZAT
%HOMEPATH%\YMLSN\Z81265.ESZ
%HOMEPATH%\YMLSN\A54534.ZBX
%HOMEPATH%\YMLSN\52624.DBR
%HOMEPATH%\YMLSN\28146.CLJ
%HOMEPATH%\YMLSN\16150.LDT
%HOMEPATH%\YMLSN\Z62609.HTM
%HOMEPATH%\YMLSN\12091.RCR
%HOMEPATH%\YMLSN\A18933.SJD
%HOMEPATH%\YMLSN\D12696.XSV
%HOMEPATH%\YMLSN\45034.YPD
%HOMEPATH%\YMLSN\Y71104.VFE
%HOMEPATH%\YMLSN\L67876.LOS
%HOMEPATH%\YMLSN\G22585.MIR
%HOMEPATH%\YMLSN\I71709.HWI
%HOMEPATH%\YMLSN\83320.ORE
%HOMEPATH%\YMLSN\V68796.DWE
%HOMEPATH%\YMLSN\71849.DBE
%HOMEPATH%\YMLSN\79266.LCQ
%HOMEPATH%\YMLSN\86447.UYI
%HOMEPATH%\YMLSN\N76468.CYM
%HOMEPATH%\YMLSN\71831.WXX
%HOMEPATH%\YMLSN\66518.PMI
%HOMEPATH%\YMLSN\U76833.EPN
%HOMEPATH%\YMLSN\C74755.TNM
%HOMEPATH%\YMLSN\M58459.YOC
%HOMEPATH%\YMLSN\V69899.EBE
%HOMEPATH%\YMLSN\44719.WLL
%HOMEPATH%\YMLSN\15861.OWZ
%HOMEPATH%\YMLSN\93587.NWR
%HOMEPATH%\YMLSN\16569.QEF
%HOMEPATH%\YMLSN\81375.YVM
%HOMEPATH%\YMLSN\Q55900.OGW
%HOMEPATH%\YMLSN\D29012.BKP
%HOMEPATH%\YMLSN\C50944.XSV
%HOMEPATH%\YMLSN\42388.HSG
%HOMEPATH%\YMLSN\Y70867.CVP
%HOMEPATH%\YMLSN\61978.ZWQ
%HOMEPATH%\YMLSN\4488.IMM
%HOMEPATH%\YMLSN\G41753.XHR
%HOMEPATH%\YMLSN\41041.UOM
%HOMEPATH%\YMLSN\V44535.YAM
%HOMEPATH%\YMLSN\37324.FKJ
%HOMEPATH%\YMLSN\M94667.UUZ
%HOMEPATH%\YMLSN\87805.JID
%HOMEPATH%\YMLSN\23524.DHB
%HOMEPATH%\YMLSN\A94347.DKH
%HOMEPATH%\YMLSN\Y14969.BIV
%HOMEPATH%\YMLSN\P66087.VJI
%HOMEPATH%\YMLSN\O79803.YHX
%HOMEPATH%\YMLSN\90809.UNX
%HOMEPATH%\YMLSN\T38653.QNN
%HOMEPATH%\YMLSN\Q94400.BJA
%HOMEPATH%\YMLSN\46548.ONY
%HOMEPATH%\YMLSN\H97872.GCO
%HOMEPATH%\YMLSN\O12899.SZL
%HOMEPATH%\YMLSN\C70718.HXL
%HOMEPATH%\YMLSN\42750.YUL
%HOMEPATH%\YMLSN\D84211.QVJ
%HOMEPATH%\YMLSN\68771.JPD
%HOMEPATH%\YMLSN\W55189.QKO
%HOMEPATH%\YMLSN\T18559.XIM
%HOMEPATH%\YMLSN\71702.GVS
%HOMEPATH%\YMLSN\78884.TIQ
%HOMEPATH%\YMLSN\92206.PDQ
%HOMEPATH%\YMLSN\O76833.WRD
%HOMEPATH%\YMLSN\I48485.JRI
%HOMEPATH%\YMLSN\51536.MZF
%HOMEPATH%\YMLSN\T9792.MFJ
%HOMEPATH%\YMLSN\11502.WKG
%HOMEPATH%\YMLSN\76599.GLN
%HOMEPATH%\YMLSN\V78711.VQX
%HOMEPATH%\YMLSN\98345.YGY
%HOMEPATH%\YMLSN\41406.CEF
%HOMEPATH%\YMLSN\55213.WBN
%HOMEPATH%\YMLSN\J42881.CBU
%HOMEPATH%\YMLSN\Z99592.UQA
%HOMEPATH%\YMLSN\72573.ACL
%HOMEPATH%\YMLSN\19363.OIK
%HOMEPATH%\YMLSN\53206.PGB
%HOMEPATH%\YMLSN\W95198.CWY
%HOMEPATH%\YMLSN\Y23883.MLP
%HOMEPATH%\YMLSN\26298.NKZ
%HOMEPATH%\YMLSN\30426.TYK
%HOMEPATH%\YMLSN\24284.AFR
%HOMEPATH%\YMLSN\B2824.YJH
%HOMEPATH%\YMLSN\64316.XCE
%HOMEPATH%\YMLSN\Y18669.ILQ
%HOMEPATH%\YMLSN\47746.NGE
%HOMEPATH%\YMLSN\Q27133.XDD
%HOMEPATH%\YMLSN\64620.OFY
%HOMEPATH%\YMLSN\53414.BLA
%HOMEPATH%\YMLSN\50008.CQF
%HOMEPATH%\YMLSN\49042.QFO
%HOMEPATH%\YMLSN\48741.YUT
%HOMEPATH%\YMLSN\84132.UYY
%HOMEPATH%\YMLSN\24125.AHM
%HOMEPATH%\YMLSN\E41989.AEU
%HOMEPATH%\YMLSN\17869.ONO
%HOMEPATH%\YMLSN\47620.SXV
%HOMEPATH%\YMLSN\51026.BTS
%HOMEPATH%\YMLSN\L77861.YBL
%HOMEPATH%\YMLSN\N68900.RPN
%HOMEPATH%\YMLSN\59295.TXU
%HOMEPATH%\YMLSN\C78452.RZZ
%HOMEPATH%\YMLSN\52609.GUN
%HOMEPATH%\YMLSN\66667.OHG
%HOMEPATH%\YMLSN\2028.KMO
%HOMEPATH%\YMLSN\25822.XIG
%HOMEPATH%\YMLSN\41118.PAO
%HOMEPATH%\YMLSN\94849.KUC
%HOMEPATH%\YMLSN\R64687.HWS
%HOMEPATH%\YMLSN\70574.XTL
%HOMEPATH%\YMLSN\C68626.FDQ
%HOMEPATH%\YMLSN\N18214.EXM
%HOMEPATH%\YMLSN\19682.OIK
%HOMEPATH%\YMLSN\71356.MCF
%HOMEPATH%\YMLSN\E92099.IGU
%HOMEPATH%\YMLSN\Y75792.YIF
%HOMEPATH%\YMLSN\E5726.FQL
%HOMEPATH%\YMLSN\19123.LWB
%HOMEPATH%\YMLSN\92665.IIN
%HOMEPATH%\YMLSN\F7736.SFB
%HOMEPATH%\YMLSN\9823.DBB
%HOMEPATH%\YMLSN\35607.BIC
%HOMEPATH%\YMLSN\G55214.FTG
%HOMEPATH%\YMLSN\51303.QCD
%HOMEPATH%\YMLSN\23158.GOA
%HOMEPATH%\YMLSN\83717.JVK
%HOMEPATH%\YMLSN\D52444.UUF
%HOMEPATH%\YMLSN\43667.WRD
%HOMEPATH%\YMLSN\O50672.FVI
%HOMEPATH%\YMLSN\N62217.MXN
%HOMEPATH%\YMLSN\P10655.TCB
%HOMEPATH%\YMLSN\81072.CBT
%HOMEPATH%\YMLSN\X7061.TMU
%HOMEPATH%\YMLSN\62014.CKE
%HOMEPATH%\YMLSN\G80218.CKM
%HOMEPATH%\YMLSN\I85681.RBD
%HOMEPATH%\YMLSN\49163.FHN
%HOMEPATH%\YMLSN\L74456.UBC
%HOMEPATH%\YMLSN\32122.JKZ
%HOMEPATH%\YMLSN\I61633.DLQ
%HOMEPATH%\YMLSN\26580.LYG
%HOMEPATH%\YMLSN\O90931.KHX
%HOMEPATH%\YMLSN\M15177.PRJ
%TEMP%\1.tmp\inst.cmd
%WINDIR%\Temp\inst.exe
%TEMP%\NO_PWDS_report_16-11-2016_15-07-32-F4D651E80A6E4747C8F28A7D8647D810-ABKD.bin
%HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\whatismyip.akamai[1]
%WINDIR%\Temp\msupdate.msi
%HOMEPATH%\YMLSN\DNCTTYMK.dat
%HOMEPATH%\YMLSN\L33020.OAT
%TEMP%\report_16-11-2016_15-07-32-F4D651E80A6E4747C8F28A7D8647D810-ABKD.bin
%TEMP%\msupdate.exe
%HOMEPATH%\YMLSN\82459.VZP
%HOMEPATH%\YMLSN\42749.EAK
%HOMEPATH%\YMLSN\18375.LFQ
%HOMEPATH%\YMLSN\D3703.JNH
%HOMEPATH%\YMLSN\1038.VEH
%HOMEPATH%\YMLSN\B93282.GOF
%HOMEPATH%\YMLSN\X73858.MTI
%HOMEPATH%\YMLSN\D85961.QTT
%HOMEPATH%\YMLSN\L86166.JLJ
%HOMEPATH%\YMLSN\N68342.AGD
%HOMEPATH%\YMLSN\I39565.EZY
%HOMEPATH%\YMLSN\72352.ADX
%HOMEPATH%\YMLSN\O15148.DSW
%HOMEPATH%\YMLSN\J61016.OZT
%HOMEPATH%\YMLSN\A58418.IPS
%HOMEPATH%\YMLSN\76712.BHT
%HOMEPATH%\YMLSN\H21713.DJL
%HOMEPATH%\YMLSN\C11365.FUM
%HOMEPATH%\YMLSN\E12667.VCV
%HOMEPATH%\YMLSN\24852.BBI
%HOMEPATH%\YMLSN\X32826.GOT
%HOMEPATH%\YMLSN\55572.PBM
%HOMEPATH%\YMLSN\18105.TQE
%HOMEPATH%\YMLSN\Z89481.YLK
%HOMEPATH%\YMLSN\G30352.OOZ
%HOMEPATH%\YMLSN\O76732.ZZS
%HOMEPATH%\YMLSN\38243.EFP
%HOMEPATH%\YMLSN\E50871.TGB
%HOMEPATH%\YMLSN\43370.RZG
%HOMEPATH%\YMLSN\A71641.PTO
%HOMEPATH%\YMLSN\60631.ZUL
%HOMEPATH%\YMLSN\T28638.RXA
%HOMEPATH%\YMLSN\72550.MJH
%HOMEPATH%\YMLSN\49888.XWJ
%HOMEPATH%\YMLSN\C10829.DZQ
%HOMEPATH%\YMLSN\S73857.BBZ
%HOMEPATH%\YMLSN\83946.TMB
%HOMEPATH%\YMLSN\I6303.BMK
%HOMEPATH%\YMLSN\X37655.YVV
%HOMEPATH%\YMLSN\Z35270.RRP
%HOMEPATH%\YMLSN\F44957.DPS
%HOMEPATH%\YMLSN\60424.DGX
%HOMEPATH%\YMLSN\39403.ELO
%HOMEPATH%\YMLSN\T63264.WQN
%HOMEPATH%\YMLSN\F70827.TZN
%HOMEPATH%\YMLSN\N12939.MRI
%HOMEPATH%\YMLSN\Y27910.SII
%HOMEPATH%\YMLSN\F43650.RAM
%HOMEPATH%\YMLSN\38716.PJC
%HOMEPATH%\YMLSN\28202.OEU
%HOMEPATH%\YMLSN\58331.WCW
%HOMEPATH%\YMLSN\A11947.DIP
%HOMEPATH%\YMLSN\9477.SRG
%HOMEPATH%\YMLSN\61997.WFB
%HOMEPATH%\YMLSN\21693.EFL
%HOMEPATH%\YMLSN\31306.ZFX
%HOMEPATH%\YMLSN\61034.NIQ
%HOMEPATH%\YMLSN\U57243.XVB
%HOMEPATH%\YMLSN\94373.PMB
%HOMEPATH%\YMLSN\U73117.UBM
%HOMEPATH%\YMLSN\52733.IPG
%HOMEPATH%\YMLSN\Z12599.LJY
%HOMEPATH%\YMLSN\71410.BGH
%HOMEPATH%\YMLSN\25167.MPB
%HOMEPATH%\YMLSN\W69404.OHB
%HOMEPATH%\YMLSN\67181.KJX
%HOMEPATH%\YMLSN\2261.DCC
%HOMEPATH%\YMLSN\S44848.DHF
%HOMEPATH%\YMLSN\R38339.HKW
%HOMEPATH%\YMLSN\81929.ZLL
%HOMEPATH%\YMLSN\21406.OAC
%HOMEPATH%\YMLSN\6995.CCD
%HOMEPATH%\YMLSN\R89720.ITG
%HOMEPATH%\YMLSN\25177.YXD
%HOMEPATH%\YMLSN\61531.NEG
%HOMEPATH%\YMLSN\56047.TJL
%HOMEPATH%\YMLSN\K95995.RZP
%HOMEPATH%\YMLSN\78744.OYX
%HOMEPATH%\YMLSN\I51176.UOA
%HOMEPATH%\YMLSN\27057.CQN
%HOMEPATH%\YMLSN\7352.ZOC
%HOMEPATH%\YMLSN\31135.GHA
%HOMEPATH%\YMLSN\S32854.HZS
%HOMEPATH%\YMLSN\41268.BPI
%HOMEPATH%\YMLSN\44503.JJA
%HOMEPATH%\YMLSN\D21796.LLS
%HOMEPATH%\YMLSN\X66524.AGG
%HOMEPATH%\YMLSN\45410.YBT
%HOMEPATH%\YMLSN\57388.WEI
%HOMEPATH%\YMLSN\L21917.AOU
%HOMEPATH%\YMLSN\95495.DNB
%HOMEPATH%\YMLSN\L4962.FAY
%HOMEPATH%\YMLSN\68305.AHQ
%HOMEPATH%\YMLSN\81026.QAY
%HOMEPATH%\YMLSN\11334.JVN
%HOMEPATH%\YMLSN\U69640.LPA
%HOMEPATH%\YMLSN\48620.ZPG
%HOMEPATH%\YMLSN\41351.LYP
%HOMEPATH%\YMLSN\53628.LNJ
%HOMEPATH%\YMLSN\8526.IYA
%HOMEPATH%\YMLSN\90334.PHX
%HOMEPATH%\YMLSN\X87555.ARV
%HOMEPATH%\YMLSN\24402.EJM
%HOMEPATH%\YMLSN\W44585.NPA
%HOMEPATH%\YMLSN\66041.AJW
%HOMEPATH%\YMLSN\A85760.AVM
%HOMEPATH%\YMLSN\96338.FMH
%HOMEPATH%\YMLSN\U67956.HOD
%HOMEPATH%\YMLSN\98910.DPN
%HOMEPATH%\YMLSN\24740.LXF
%HOMEPATH%\YMLSN\95570.ANC
%HOMEPATH%\YMLSN\N82398.IPD
%HOMEPATH%\YMLSN\C11214.WBA
%HOMEPATH%\YMLSN\P54741.ECX
%HOMEPATH%\YMLSN\56099.XMT
%HOMEPATH%\YMLSN\41244.MLS
%HOMEPATH%\YMLSN\Z98619.WMP
%HOMEPATH%\YMLSN\K17087.NOC
%HOMEPATH%\YMLSN\54073.HAL
%HOMEPATH%\YMLSN\98687.NQM
%HOMEPATH%\YMLSN\Y11770.WUU
%HOMEPATH%\YMLSN\N43146.UUM
%HOMEPATH%\YMLSN\23225.ERH
%HOMEPATH%\YMLSN\Q85728.OPV
%HOMEPATH%\YMLSN\2250.CJQ
%HOMEPATH%\YMLSN\O56413.HJV
%HOMEPATH%\YMLSN\21732.AWV
%HOMEPATH%\YMLSN\O33975.YBN
%HOMEPATH%\YMLSN\17477.PUA
%HOMEPATH%\YMLSN\42320.SPQ
%HOMEPATH%\YMLSN\U88369.RCE
%HOMEPATH%\YMLSN\72161.PYS
%HOMEPATH%\YMLSN\52800.OKA
%HOMEPATH%\YMLSN\O27747.XVH
%HOMEPATH%\YMLSN\39484.TKB
%HOMEPATH%\YMLSN\X60291.AAR
%HOMEPATH%\YMLSN\89394.JBV
%HOMEPATH%\YMLSN\12029.ZOG
%HOMEPATH%\YMLSN\71968.EQH
%HOMEPATH%\YMLSN\H19973.RNW
%HOMEPATH%\YMLSN\N28290.CRX
%HOMEPATH%\YMLSN\W1183.TTX
%HOMEPATH%\YMLSN\T33099.EAH
%HOMEPATH%\YMLSN\42091.XBV
%HOMEPATH%\YMLSN\P24991.MOL
%HOMEPATH%\YMLSN\U5245.UJB
%HOMEPATH%\YMLSN\7448.KLL
%HOMEPATH%\YMLSN\77245.JEL
%HOMEPATH%\YMLSN\Z39979.TOL
%HOMEPATH%\YMLSN\T56957.ZMU
%HOMEPATH%\YMLSN\6013.PAV
%HOMEPATH%\YMLSN\Y9251.MDS
%HOMEPATH%\YMLSN\64197.GAD
%HOMEPATH%\YMLSN\Q93261.BJY
%HOMEPATH%\YMLSN\K81987.JZI
%HOMEPATH%\YMLSN\45046.RPB
%HOMEPATH%\YMLSN\19072.MHM
%HOMEPATH%\YMLSN\47893.MTH
%HOMEPATH%\YMLSN\H72590.YGJ
%HOMEPATH%\YMLSN\Z27203.UNY
%HOMEPATH%\YMLSN\Y95113.ITD
%HOMEPATH%\YMLSN\B40070.ESI
%HOMEPATH%\YMLSN\44605.NYE
%HOMEPATH%\YMLSN\48242.BPW
%HOMEPATH%\YMLSN\19757.AVW
%HOMEPATH%\YMLSN\S98763.AZA
%HOMEPATH%\YMLSN\17962.VXB
%HOMEPATH%\YMLSN\A6563.INC
%HOMEPATH%\YMLSN\19977.DAL
%HOMEPATH%\YMLSN\K11607.EVY
%HOMEPATH%\YMLSN\2191.UGL
%HOMEPATH%\YMLSN\K86348.IKR
%HOMEPATH%\YMLSN\A28448.TSW
%HOMEPATH%\YMLSN\P14534.LWR
%HOMEPATH%\YMLSN\56931.EHO
%HOMEPATH%\YMLSN\45174.PHY
%HOMEPATH%\YMLSN\6825.OVM
%HOMEPATH%\YMLSN\28812.RHM
%HOMEPATH%\YMLSN\58143.MXC
%HOMEPATH%\YMLSN\59668.CVI
%HOMEPATH%\YMLSN\50998.LQV
%HOMEPATH%\YMLSN\37231.YIT
%HOMEPATH%\YMLSN\77672.JLE
%HOMEPATH%\YMLSN\O44182.ZPT
%HOMEPATH%\YMLSN\1735.WHS
%HOMEPATH%\YMLSN\3562.vbs
%HOMEPATH%\YMLSN\J78394.MNJ
%HOMEPATH%\YMLSN\V23287.ONM
%HOMEPATH%\YMLSN\settings.ini
%HOMEPATH%\YMLSN\428320.dat
%HOMEPATH%\YMLSN\93759.RIF
%HOMEPATH%\YMLSN\SAOVQ.exe
%HOMEPATH%\YMLSN\583699.dat
%HOMEPATH%\YMLSN\73255.OWR
%HOMEPATH%\YMLSN\45096.MFL
%HOMEPATH%\YMLSN\L32134.RBL
%HOMEPATH%\YMLSN\12494.DUH
%HOMEPATH%\YMLSN\J98103.RVU
%HOMEPATH%\YMLSN\12192.PXG
%HOMEPATH%\YMLSN\6431.MSX
%HOMEPATH%\YMLSN\46935.FZI
%HOMEPATH%\YMLSN\41368.AEF
%HOMEPATH%\YMLSN\39799.JLR
%HOMEPATH%\YMLSN\I91946.UVJ
%HOMEPATH%\YMLSN\X66340.UPD
%HOMEPATH%\YMLSN\U32962.JXI
%HOMEPATH%\YMLSN\43943.FSU
%HOMEPATH%\YMLSN\9816.JTA
%HOMEPATH%\YMLSN\33632.MPS
%HOMEPATH%\YMLSN\F66459.KVC
%HOMEPATH%\YMLSN\T29654.BGM
%HOMEPATH%\YMLSN\Y41442.JBC
%HOMEPATH%\YMLSN\P32176.DQF
%HOMEPATH%\YMLSN\I35958.CXF
%HOMEPATH%\YMLSN\43430.DOQ
%HOMEPATH%\YMLSN\J17951.NPV
%HOMEPATH%\YMLSN\T49369.GBQ
%HOMEPATH%\YMLSN\6964.XJW
%HOMEPATH%\YMLSN\C90837.DRW
%HOMEPATH%\YMLSN\X85740.YMV
%HOMEPATH%\YMLSN\48187.CIC
%HOMEPATH%\YMLSN\37969.SWP
%HOMEPATH%\YMLSN\T79469.SLM
%HOMEPATH%\YMLSN\62727.AJC
%HOMEPATH%\YMLSN\64350.QCZ
%HOMEPATH%\YMLSN\46346.FOG
%HOMEPATH%\YMLSN\Y41781.MIV
%HOMEPATH%\YMLSN\T69744.DFP
%HOMEPATH%\YMLSN\R35109.KXS
%HOMEPATH%\YMLSN\C49020.UAY
%HOMEPATH%\YMLSN\L17816.FTW
%HOMEPATH%\YMLSN\32434.IBW
%HOMEPATH%\YMLSN\16575.VLK
%HOMEPATH%\YMLSN\C14950.ERR
%HOMEPATH%\YMLSN\52074.CTF
%HOMEPATH%\YMLSN\Q94304.ZOS
%HOMEPATH%\YMLSN\83341.RXR
%HOMEPATH%\YMLSN\H46666.MJO
%HOMEPATH%\YMLSN\H16560.OIW
%HOMEPATH%\YMLSN\43297.ACE
%HOMEPATH%\YMLSN\39172.EPR
%HOMEPATH%\YMLSN\R48500.INX
%HOMEPATH%\YMLSN\31307.TKR
%HOMEPATH%\YMLSN\64145.BBU
%HOMEPATH%\YMLSN\34930.OZC
%HOMEPATH%\YMLSN\40689.UXM
%HOMEPATH%\YMLSN\S34994.FOG
%HOMEPATH%\YMLSN\Q64608.IKK
%HOMEPATH%\YMLSN\B23570.GKI
%HOMEPATH%\YMLSN\R14503.DVQ
%HOMEPATH%\YMLSN\5684.ZRV
%HOMEPATH%\YMLSN\29158.DGG
%HOMEPATH%\YMLSN\I40847.YZV
%HOMEPATH%\YMLSN\E34243.IHF
%HOMEPATH%\YMLSN\K85969.PBU
%HOMEPATH%\YMLSN\5034.RHC
%HOMEPATH%\YMLSN\49329.YNB
%HOMEPATH%\YMLSN\D51802.VHW
%HOMEPATH%\YMLSN\E70070.QAH
%HOMEPATH%\YMLSN\11910.QYF
%HOMEPATH%\YMLSN\15525.SAS
%HOMEPATH%\YMLSN\87858.GOV
%HOMEPATH%\YMLSN\48334.ZPE
%HOMEPATH%\YMLSN\1773.ZSC
%HOMEPATH%\YMLSN\C63366.ENH
%HOMEPATH%\YMLSN\94097.BGG
%HOMEPATH%\YMLSN\21375.LNX
%HOMEPATH%\YMLSN\92404.FSQ
%HOMEPATH%\YMLSN\10519.OFX
%HOMEPATH%\YMLSN\91236.DUM
%HOMEPATH%\YMLSN\V93902.LYF
%HOMEPATH%\YMLSN\W44036.ZME
%HOMEPATH%\YMLSN\2049.FRB
%HOMEPATH%\YMLSN\V47604.RLR
%HOMEPATH%\YMLSN\M34813.CSO
%HOMEPATH%\YMLSN\W48578.UIX
%HOMEPATH%\YMLSN\98247.VWY
%HOMEPATH%\YMLSN\85581.GGT
%HOMEPATH%\YMLSN\43641.VIQ
%HOMEPATH%\YMLSN\L36240.NUX
%HOMEPATH%\YMLSN\92419.PFJ
%HOMEPATH%\YMLSN\49180.HRL
%HOMEPATH%\YMLSN\M76878.NPO
%HOMEPATH%\YMLSN\A87741.SVI
%HOMEPATH%\YMLSN\N55423.RLH
%HOMEPATH%\YMLSN\F25475.LUP
%HOMEPATH%\YMLSN\26792.CMI
%HOMEPATH%\YMLSN\U71852.PJO
%HOMEPATH%\YMLSN\J40501.GFC
%HOMEPATH%\YMLSN\O8636.EYJ
%HOMEPATH%\YMLSN\75263.JMP
%HOMEPATH%\YMLSN\35380.YSV
%HOMEPATH%\YMLSN\55924.GQR
%HOMEPATH%\YMLSN\6023.JPP
%HOMEPATH%\YMLSN\99643.AKX
%HOMEPATH%\YMLSN\B39408.RTX
%HOMEPATH%\YMLSN\I59759.UCI
%HOMEPATH%\YMLSN\91905.CXH
%HOMEPATH%\YMLSN\C3409.VMM
%HOMEPATH%\YMLSN\L43304.XED
%HOMEPATH%\YMLSN\W51490.BEA
%HOMEPATH%\YMLSN\20189.LXF
%HOMEPATH%\YMLSN\I9546.YQY
%HOMEPATH%\YMLSN\42490.ZHM
%HOMEPATH%\YMLSN\55209.IPE
%HOMEPATH%\YMLSN\85408.CKA
%HOMEPATH%\YMLSN\82634.FHT
%HOMEPATH%\YMLSN\77838.ENH
%HOMEPATH%\YMLSN\S66615.SDF
%HOMEPATH%\YMLSN\72508.QKE
%HOMEPATH%\YMLSN\19289.ENI
%HOMEPATH%\YMLSN\P13027.LCO
%HOMEPATH%\YMLSN\69608.AUL
%HOMEPATH%\YMLSN\L51835.XFV
%HOMEPATH%\YMLSN\49685.IYL
%HOMEPATH%\YMLSN\90560.UMK
%HOMEPATH%\YMLSN\I52473.UYK
%HOMEPATH%\YMLSN\9113.CBT
%HOMEPATH%\YMLSN\G92164.PJM
%HOMEPATH%\YMLSN\X52600.NZH
%HOMEPATH%\YMLSN\S80328.QJC
%HOMEPATH%\YMLSN\O20468.CGD
%HOMEPATH%\YMLSN\14354.ILF
%HOMEPATH%\YMLSN\E36756.RFM
%HOMEPATH%\YMLSN\8078.LXQ
%HOMEPATH%\YMLSN\22126.KOD
%HOMEPATH%\YMLSN\94442.ZZT
%HOMEPATH%\YMLSN\34474.VUH
%HOMEPATH%\YMLSN\76794.SYI
%HOMEPATH%\YMLSN\C77342.IMJ
%HOMEPATH%\YMLSN\51150.VZW
%HOMEPATH%\YMLSN\11694.VTI
%HOMEPATH%\YMLSN\90263.MIE
%HOMEPATH%\YMLSN\74607.ALZ
%HOMEPATH%\YMLSN\35852.SVE
%HOMEPATH%\YMLSN\S97757.CQB
%HOMEPATH%\YMLSN\99825.UDH
%HOMEPATH%\YMLSN\74798.PSH
%HOMEPATH%\YMLSN\37095.QPK
%HOMEPATH%\YMLSN\75379.HNS
%HOMEPATH%\YMLSN\95569.VDN
%HOMEPATH%\YMLSN\A14478.DPG
%HOMEPATH%\YMLSN\51123.VVC
%HOMEPATH%\YMLSN\94682.AVU
%HOMEPATH%\YMLSN\Q36992.QBZ
%HOMEPATH%\YMLSN\T80235.CUF
%HOMEPATH%\YMLSN\H11401.YUB
%HOMEPATH%\YMLSN\M39290.GFT
%HOMEPATH%\YMLSN\U58433.YWO
%HOMEPATH%\YMLSN\H91510.WRD
%HOMEPATH%\YMLSN\5875.HTX
%HOMEPATH%\YMLSN\73645.IFW
%HOMEPATH%\YMLSN\U65545.BEF
%HOMEPATH%\YMLSN\U41050.UCL
%HOMEPATH%\YMLSN\W77079.ACK
%HOMEPATH%\YMLSN\29478.YDH
%HOMEPATH%\YMLSN\B80287.FIE
%HOMEPATH%\YMLSN\35906.PPQ
%HOMEPATH%\YMLSN\98338.SGG
%HOMEPATH%\YMLSN\B40586.CVC
%HOMEPATH%\YMLSN\W53803.FJD
%HOMEPATH%\YMLSN\49419.VIA
%HOMEPATH%\YMLSN\4110.ZYV
%HOMEPATH%\YMLSN\Z51664.AJC
%HOMEPATH%\YMLSN\P13506.ERA
%HOMEPATH%\YMLSN\76297.ANW
%HOMEPATH%\YMLSN\68444.YIR
%HOMEPATH%\YMLSN\53333.BJE
%HOMEPATH%\YMLSN\65142.SAC
%HOMEPATH%\YMLSN\26153.OHX
%HOMEPATH%\YMLSN\8056.ESB
%HOMEPATH%\YMLSN\49672.EGF
%HOMEPATH%\YMLSN\U27296.LZS
%HOMEPATH%\YMLSN\77568.QGO
%HOMEPATH%\YMLSN\U7401.BTB
%HOMEPATH%\YMLSN\F85313.IYH
%HOMEPATH%\YMLSN\52742.TXB
%HOMEPATH%\YMLSN\41568.HNX
%HOMEPATH%\YMLSN\68006.DLM
%HOMEPATH%\YMLSN\67918.WWK
%HOMEPATH%\YMLSN\X11883.DIT
%HOMEPATH%\YMLSN\67384.PIC
%HOMEPATH%\YMLSN\35404.YOR
%HOMEPATH%\YMLSN\25411.SMY
%HOMEPATH%\YMLSN\W95614.HIO
%HOMEPATH%\YMLSN\N31960.OST
%HOMEPATH%\YMLSN\Q20428.IVI

Sets the 'hidden' attribute to the following files:

%HOMEPATH%\YMLSN\S98669.ZYL
%HOMEPATH%\YMLSN\98677.YAZ
%HOMEPATH%\YMLSN\F80938.TDB
%HOMEPATH%\YMLSN\85053.YBX
%HOMEPATH%\YMLSN\17753.UKM
%HOMEPATH%\YMLSN\98671.IQU
%HOMEPATH%\YMLSN\X15901.PGE
%HOMEPATH%\YMLSN\X85962.TPX
%HOMEPATH%\YMLSN\I92754.PZH
%HOMEPATH%\YMLSN\84846.MKQ
%HOMEPATH%\YMLSN\Q38584.XYL
%HOMEPATH%\YMLSN\U33559.CQO
%HOMEPATH%\YMLSN\W16145.TER
%HOMEPATH%\YMLSN\D65218.ZXC
%HOMEPATH%\YMLSN\86257.EBD
%HOMEPATH%\YMLSN\53236.BNC
%HOMEPATH%\YMLSN\50592.XHJ
%HOMEPATH%\YMLSN\35509.KGX
%HOMEPATH%\YMLSN\R26861.WAQ
%HOMEPATH%\YMLSN\J22466.MJT
%HOMEPATH%\YMLSN\T8567.YMJ
%HOMEPATH%\YMLSN\67007.MTK
%HOMEPATH%\YMLSN\M58459.YOC
%HOMEPATH%\YMLSN\98345.YGY
%HOMEPATH%\YMLSN\41406.CEF
%HOMEPATH%\YMLSN\55213.WBN
%HOMEPATH%\YMLSN\J42881.CBU
%HOMEPATH%\YMLSN\40128.HAT
%HOMEPATH%\YMLSN\Q29857.FSR
%HOMEPATH%\YMLSN\53819.NMC
%HOMEPATH%\YMLSN\W41519.WOK
%HOMEPATH%\YMLSN\43345.LXQ
%HOMEPATH%\YMLSN\62253.LSM
%HOMEPATH%\YMLSN\S3391.OIH
%HOMEPATH%\YMLSN\X30286.LUS
%HOMEPATH%\YMLSN\H62905.BVS
%HOMEPATH%\YMLSN\F28935.XXR
%HOMEPATH%\YMLSN\79266.LCQ
%HOMEPATH%\YMLSN\H46998.KYE
%HOMEPATH%\YMLSN\F12442.HJX
%HOMEPATH%\YMLSN\86447.UYI
%HOMEPATH%\YMLSN\N76468.CYM
%HOMEPATH%\YMLSN\U76833.EPN
%HOMEPATH%\YMLSN\V68796.DWE
%HOMEPATH%\YMLSN\71849.DBE
%HOMEPATH%\YMLSN\28146.CLJ
%HOMEPATH%\YMLSN\D58424.EQG
%HOMEPATH%\YMLSN\Z62609.HTM
%HOMEPATH%\YMLSN\52624.DBR
%HOMEPATH%\YMLSN\74095.LFU
%HOMEPATH%\YMLSN\57193.SFI
%HOMEPATH%\YMLSN\50772.FII
%HOMEPATH%\YMLSN\H29463.LSV
%HOMEPATH%\YMLSN\Y27463.TKS
%HOMEPATH%\YMLSN\G22585.MIR
%HOMEPATH%\YMLSN\A74932.SVC
%HOMEPATH%\YMLSN\83320.ORE
%HOMEPATH%\YMLSN\L67876.LOS
%HOMEPATH%\YMLSN\Y49367.PEQ
%HOMEPATH%\YMLSN\H15425.KFQ
%HOMEPATH%\YMLSN\35307.HRE
%HOMEPATH%\YMLSN\86819.EUK
%HOMEPATH%\YMLSN\A28357.GKQ
%HOMEPATH%\YMLSN\66518.PMI
%HOMEPATH%\YMLSN\D12696.XSV
%HOMEPATH%\YMLSN\C74755.TNM
%HOMEPATH%\YMLSN\71831.WXX
%HOMEPATH%\YMLSN\45034.YPD
%HOMEPATH%\YMLSN\Y71104.VFE
%HOMEPATH%\YMLSN\I71709.HWI
%HOMEPATH%\YMLSN\12091.RCR
%HOMEPATH%\YMLSN\A18933.SJD
%HOMEPATH%\YMLSN\Z99592.UQA
%HOMEPATH%\YMLSN\C50944.XSV
%HOMEPATH%\YMLSN\81375.YVM
%HOMEPATH%\YMLSN\16569.QEF
%HOMEPATH%\YMLSN\D29012.BKP
%HOMEPATH%\YMLSN\Q55900.OGW
%HOMEPATH%\YMLSN\46548.ONY
%HOMEPATH%\YMLSN\H97872.GCO
%HOMEPATH%\YMLSN\O12899.SZL
%HOMEPATH%\YMLSN\C70718.HXL
%HOMEPATH%\YMLSN\M94667.UUZ
%HOMEPATH%\YMLSN\41041.UOM
%HOMEPATH%\YMLSN\G41753.XHR
%HOMEPATH%\YMLSN\37324.FKJ
%HOMEPATH%\YMLSN\V44535.YAM
%HOMEPATH%\YMLSN\V69899.EBE
%HOMEPATH%\YMLSN\44719.WLL
%HOMEPATH%\YMLSN\15861.OWZ
%HOMEPATH%\YMLSN\93587.NWR
%HOMEPATH%\YMLSN\Q94400.BJA
%HOMEPATH%\YMLSN\O79803.YHX
%HOMEPATH%\YMLSN\P66087.VJI
%HOMEPATH%\YMLSN\T38653.QNN
%HOMEPATH%\YMLSN\90809.UNX
%HOMEPATH%\YMLSN\26792.CMI
%HOMEPATH%\YMLSN\U71852.PJO
%HOMEPATH%\YMLSN\J40501.GFC
%HOMEPATH%\YMLSN\O8636.EYJ
%HOMEPATH%\YMLSN\T18559.XIM
%HOMEPATH%\YMLSN\D84211.QVJ
%HOMEPATH%\YMLSN\42750.YUL
%HOMEPATH%\YMLSN\W55189.QKO
%HOMEPATH%\YMLSN\68771.JPD
%HOMEPATH%\YMLSN\87805.JID
%HOMEPATH%\YMLSN\23524.DHB
%HOMEPATH%\YMLSN\A94347.DKH
%HOMEPATH%\YMLSN\Y14969.BIV
%HOMEPATH%\YMLSN\T9792.MFJ
%HOMEPATH%\YMLSN\11502.WKG
%HOMEPATH%\YMLSN\76599.GLN
%HOMEPATH%\YMLSN\V78711.VQX
%HOMEPATH%\YMLSN\50008.CQF
%HOMEPATH%\YMLSN\53414.BLA
%HOMEPATH%\YMLSN\48741.YUT
%HOMEPATH%\YMLSN\49042.QFO
%HOMEPATH%\YMLSN\64620.OFY
%HOMEPATH%\YMLSN\72573.ACL
%HOMEPATH%\YMLSN\19363.OIK
%HOMEPATH%\YMLSN\53206.PGB
%HOMEPATH%\YMLSN\W95198.CWY
%HOMEPATH%\YMLSN\O76833.WRD
%HOMEPATH%\YMLSN\92206.PDQ
%HOMEPATH%\YMLSN\51536.MZF
%HOMEPATH%\YMLSN\I48485.JRI
%HOMEPATH%\YMLSN\78884.TIQ
%HOMEPATH%\YMLSN\64316.XCE
%HOMEPATH%\YMLSN\Y18669.ILQ
%HOMEPATH%\YMLSN\47746.NGE
%HOMEPATH%\YMLSN\Q27133.XDD
%HOMEPATH%\YMLSN\71702.GVS
%HOMEPATH%\YMLSN\42388.HSG
%HOMEPATH%\YMLSN\Y70867.CVP
%HOMEPATH%\YMLSN\61978.ZWQ
%HOMEPATH%\YMLSN\4488.IMM
%HOMEPATH%\YMLSN\84132.UYY
%HOMEPATH%\YMLSN\24125.AHM
%HOMEPATH%\YMLSN\E41989.AEU
%HOMEPATH%\YMLSN\17869.ONO
%HOMEPATH%\YMLSN\30426.TYK
%HOMEPATH%\YMLSN\26298.NKZ
%HOMEPATH%\YMLSN\B2824.YJH
%HOMEPATH%\YMLSN\24284.AFR
%HOMEPATH%\YMLSN\Y23883.MLP
%HOMEPATH%\YMLSN\16150.LDT
%HOMEPATH%\YMLSN\D52444.UUF
%HOMEPATH%\YMLSN\43667.WRD
%HOMEPATH%\YMLSN\52609.GUN
%HOMEPATH%\YMLSN\66667.OHG
%HOMEPATH%\YMLSN\23158.GOA
%HOMEPATH%\YMLSN\81072.CBT
%HOMEPATH%\YMLSN\X7061.TMU
%HOMEPATH%\YMLSN\83717.JVK
%HOMEPATH%\YMLSN\O50672.FVI
%HOMEPATH%\YMLSN\N68900.RPN
%HOMEPATH%\YMLSN\59295.TXU
%HOMEPATH%\YMLSN\N18214.EXM
%HOMEPATH%\YMLSN\19682.OIK
%HOMEPATH%\YMLSN\51026.BTS
%HOMEPATH%\YMLSN\2028.KMO
%HOMEPATH%\YMLSN\25822.XIG
%HOMEPATH%\YMLSN\L77861.YBL
%HOMEPATH%\YMLSN\C78452.RZZ
%HOMEPATH%\YMLSN\E12667.VCV
%HOMEPATH%\YMLSN\S44848.DHF
%HOMEPATH%\YMLSN\9823.DBB
%HOMEPATH%\YMLSN\35607.BIC
%HOMEPATH%\YMLSN\R38339.HKW
%HOMEPATH%\YMLSN\81929.ZLL
%HOMEPATH%\YMLSN\R89720.ITG
%HOMEPATH%\YMLSN\67181.KJX
%HOMEPATH%\YMLSN\2261.DCC
%HOMEPATH%\YMLSN\19123.LWB
%HOMEPATH%\YMLSN\92665.IIN
%HOMEPATH%\YMLSN\N62217.MXN
%HOMEPATH%\YMLSN\P10655.TCB
%HOMEPATH%\YMLSN\Y75792.YIF
%HOMEPATH%\YMLSN\G55214.FTG
%HOMEPATH%\YMLSN\51303.QCD
%HOMEPATH%\YMLSN\E5726.FQL
%HOMEPATH%\YMLSN\F7736.SFB
%HOMEPATH%\YMLSN\O15148.DSW
%HOMEPATH%\YMLSN\N68342.AGD
%HOMEPATH%\YMLSN\26580.LYG
%HOMEPATH%\YMLSN\72352.ADX
%HOMEPATH%\YMLSN\I39565.EZY
%HOMEPATH%\YMLSN\C11365.FUM
%HOMEPATH%\YMLSN\A58418.IPS
%HOMEPATH%\YMLSN\J61016.OZT
%HOMEPATH%\YMLSN\H21713.DJL
%HOMEPATH%\YMLSN\L74456.UBC
%HOMEPATH%\YMLSN\G80218.CKM
%HOMEPATH%\YMLSN\L33020.OAT
%HOMEPATH%\YMLSN\49163.FHN
%HOMEPATH%\YMLSN\I85681.RBD
%HOMEPATH%\YMLSN\M15177.PRJ
%HOMEPATH%\YMLSN\I61633.DLQ
%HOMEPATH%\YMLSN\32122.JKZ
%HOMEPATH%\YMLSN\O90931.KHX
%HOMEPATH%\YMLSN\R64687.HWS
%HOMEPATH%\YMLSN\70574.XTL
%HOMEPATH%\YMLSN\X73858.MTI
%HOMEPATH%\YMLSN\62014.CKE
%HOMEPATH%\YMLSN\41118.PAO
%HOMEPATH%\YMLSN\71356.MCF
%HOMEPATH%\YMLSN\E92099.IGU
%HOMEPATH%\YMLSN\94849.KUC
%HOMEPATH%\YMLSN\C68626.FDQ
%HOMEPATH%\YMLSN\D3703.JNH
%HOMEPATH%\YMLSN\82459.VZP
%HOMEPATH%\YMLSN\76712.BHT
%HOMEPATH%\YMLSN\18375.LFQ
%HOMEPATH%\YMLSN\42749.EAK
%HOMEPATH%\YMLSN\L86166.JLJ
%HOMEPATH%\YMLSN\B93282.GOF
%HOMEPATH%\YMLSN\1038.VEH
%HOMEPATH%\YMLSN\D85961.QTT
%HOMEPATH%\YMLSN\25177.YXD
%HOMEPATH%\YMLSN\O76732.ZZS
%HOMEPATH%\YMLSN\38716.PJC
%HOMEPATH%\YMLSN\E50871.TGB
%HOMEPATH%\YMLSN\G30352.OOZ
%HOMEPATH%\YMLSN\28202.OEU
%HOMEPATH%\YMLSN\58331.WCW
%HOMEPATH%\YMLSN\61997.WFB
%HOMEPATH%\YMLSN\Y27910.SII
%HOMEPATH%\YMLSN\F43650.RAM
%HOMEPATH%\YMLSN\C10829.DZQ
%HOMEPATH%\YMLSN\55572.PBM
%HOMEPATH%\YMLSN\83946.TMB
%HOMEPATH%\YMLSN\49888.XWJ
%HOMEPATH%\YMLSN\18105.TQE
%HOMEPATH%\YMLSN\Z89481.YLK
%HOMEPATH%\YMLSN\38243.EFP
%HOMEPATH%\YMLSN\24852.BBI
%HOMEPATH%\YMLSN\X32826.GOT
%HOMEPATH%\YMLSN\T63264.WQN
%HOMEPATH%\YMLSN\47620.SXV
%HOMEPATH%\YMLSN\N12939.MRI
%HOMEPATH%\YMLSN\39403.ELO
%HOMEPATH%\YMLSN\V14329.ZAT
%HOMEPATH%\YMLSN\87313.WUV
%HOMEPATH%\YMLSN\A54534.ZBX
%HOMEPATH%\YMLSN\Z81265.ESZ
%HOMEPATH%\YMLSN\U31837.ISF
%HOMEPATH%\YMLSN\9477.SRG
%HOMEPATH%\YMLSN\Z35270.RRP
%HOMEPATH%\YMLSN\21693.EFL
%HOMEPATH%\YMLSN\A11947.DIP
%HOMEPATH%\YMLSN\F44957.DPS
%HOMEPATH%\YMLSN\60424.DGX
%HOMEPATH%\YMLSN\F70827.TZN
%HOMEPATH%\YMLSN\I6303.BMK
%HOMEPATH%\YMLSN\X37655.YVV
%HOMEPATH%\YMLSN\D21796.LLS
%HOMEPATH%\YMLSN\X66524.AGG
%HOMEPATH%\YMLSN\Z12599.LJY
%HOMEPATH%\YMLSN\71410.BGH
%HOMEPATH%\YMLSN\41268.BPI
%HOMEPATH%\YMLSN\95495.DNB
%HOMEPATH%\YMLSN\L4962.FAY
%HOMEPATH%\YMLSN\44503.JJA
%HOMEPATH%\YMLSN\45410.YBT
%HOMEPATH%\YMLSN\94373.PMB
%HOMEPATH%\YMLSN\U73117.UBM
%HOMEPATH%\YMLSN\21406.OAC
%HOMEPATH%\YMLSN\6995.CCD
%HOMEPATH%\YMLSN\61034.NIQ
%HOMEPATH%\YMLSN\25167.MPB
%HOMEPATH%\YMLSN\W69404.OHB
%HOMEPATH%\YMLSN\U57243.XVB
%HOMEPATH%\YMLSN\52733.IPG
%HOMEPATH%\YMLSN\31306.ZFX
%HOMEPATH%\YMLSN\60631.ZUL
%HOMEPATH%\YMLSN\27057.CQN
%HOMEPATH%\YMLSN\7352.ZOC
%HOMEPATH%\YMLSN\T28638.RXA
%HOMEPATH%\YMLSN\72550.MJH
%HOMEPATH%\YMLSN\S73857.BBZ
%HOMEPATH%\YMLSN\43370.RZG
%HOMEPATH%\YMLSN\A71641.PTO
%HOMEPATH%\YMLSN\K95995.RZP
%HOMEPATH%\YMLSN\78744.OYX
%HOMEPATH%\YMLSN\57388.WEI
%HOMEPATH%\YMLSN\L21917.AOU
%HOMEPATH%\YMLSN\61531.NEG
%HOMEPATH%\YMLSN\31135.GHA
%HOMEPATH%\YMLSN\S32854.HZS
%HOMEPATH%\YMLSN\56047.TJL
%HOMEPATH%\YMLSN\I51176.UOA
%HOMEPATH%\YMLSN\81026.QAY
%HOMEPATH%\YMLSN\48620.ZPG
%HOMEPATH%\YMLSN\U69640.LPA
%HOMEPATH%\YMLSN\68305.AHQ
%HOMEPATH%\YMLSN\8526.IYA
%HOMEPATH%\YMLSN\53628.LNJ
%HOMEPATH%\YMLSN\N43146.UUM
%HOMEPATH%\YMLSN\90334.PHX
%HOMEPATH%\YMLSN\41351.LYP
%HOMEPATH%\YMLSN\24402.EJM
%HOMEPATH%\YMLSN\A85760.AVM
%HOMEPATH%\YMLSN\66041.AJW
%HOMEPATH%\YMLSN\X87555.ARV
%HOMEPATH%\YMLSN\98910.DPN
%HOMEPATH%\YMLSN\U67956.HOD
%HOMEPATH%\YMLSN\11334.JVN
%HOMEPATH%\YMLSN\24740.LXF
%HOMEPATH%\YMLSN\96338.FMH
%HOMEPATH%\YMLSN\N82398.IPD
%HOMEPATH%\YMLSN\56099.XMT
%HOMEPATH%\YMLSN\P54741.ECX
%HOMEPATH%\YMLSN\95570.ANC
%HOMEPATH%\YMLSN\K17087.NOC
%HOMEPATH%\YMLSN\Z98619.WMP
%HOMEPATH%\YMLSN\S98763.AZA
%HOMEPATH%\YMLSN\54073.HAL
%HOMEPATH%\YMLSN\41244.MLS
%HOMEPATH%\YMLSN\Y11770.WUU
%HOMEPATH%\YMLSN\Q85728.OPV
%HOMEPATH%\YMLSN\23225.ERH
%HOMEPATH%\YMLSN\98687.NQM
%HOMEPATH%\YMLSN\21732.AWV
%HOMEPATH%\YMLSN\O56413.HJV
%HOMEPATH%\YMLSN\C11214.WBA
%HOMEPATH%\YMLSN\O33975.YBN
%HOMEPATH%\YMLSN\2250.CJQ
%HOMEPATH%\YMLSN\O27747.XVH
%HOMEPATH%\YMLSN\89394.JBV
%HOMEPATH%\YMLSN\42320.SPQ
%HOMEPATH%\YMLSN\U88369.RCE
%HOMEPATH%\YMLSN\12029.ZOG
%HOMEPATH%\YMLSN\H72590.YGJ
%HOMEPATH%\YMLSN\Z27203.UNY
%HOMEPATH%\YMLSN\39484.TKB
%HOMEPATH%\YMLSN\X60291.AAR
%HOMEPATH%\YMLSN\T33099.EAH
%HOMEPATH%\YMLSN\U5245.UJB
%HOMEPATH%\YMLSN\71968.EQH
%HOMEPATH%\YMLSN\H19973.RNW
%HOMEPATH%\YMLSN\7448.KLL
%HOMEPATH%\YMLSN\72161.PYS
%HOMEPATH%\YMLSN\52800.OKA
%HOMEPATH%\YMLSN\42091.XBV
%HOMEPATH%\YMLSN\P24991.MOL
%HOMEPATH%\YMLSN\Y9251.MDS
%HOMEPATH%\YMLSN\K81987.JZI
%HOMEPATH%\YMLSN\77245.JEL
%HOMEPATH%\YMLSN\Z39979.TOL
%HOMEPATH%\YMLSN\45046.RPB
%HOMEPATH%\YMLSN\17477.PUA
%HOMEPATH%\YMLSN\W44585.NPA
%HOMEPATH%\YMLSN\64197.GAD
%HOMEPATH%\YMLSN\Q93261.BJY
%HOMEPATH%\YMLSN\Y95113.ITD
%HOMEPATH%\YMLSN\48242.BPW
%HOMEPATH%\YMLSN\19072.MHM
%HOMEPATH%\YMLSN\47893.MTH
%HOMEPATH%\YMLSN\19757.AVW
%HOMEPATH%\YMLSN\T56957.ZMU
%HOMEPATH%\YMLSN\6013.PAV
%HOMEPATH%\YMLSN\B40070.ESI
%HOMEPATH%\YMLSN\44605.NYE
%HOMEPATH%\YMLSN\43430.DOQ
%HOMEPATH%\YMLSN\17962.VXB
%HOMEPATH%\YMLSN\A6563.INC
%HOMEPATH%\YMLSN\19977.DAL
%HOMEPATH%\YMLSN\K11607.EVY
%HOMEPATH%\YMLSN\2191.UGL
%HOMEPATH%\YMLSN\K86348.IKR
%HOMEPATH%\YMLSN\A28448.TSW
%HOMEPATH%\YMLSN\P14534.LWR
%HOMEPATH%\YMLSN\56931.EHO
%HOMEPATH%\YMLSN\45174.PHY
%HOMEPATH%\YMLSN\6825.OVM
%HOMEPATH%\YMLSN\28812.RHM
%HOMEPATH%\YMLSN\58143.MXC
%HOMEPATH%\YMLSN\59668.CVI
%HOMEPATH%\YMLSN\50998.LQV
%HOMEPATH%\YMLSN\37231.YIT
%HOMEPATH%\YMLSN\77672.JLE
%HOMEPATH%\YMLSN\O44182.ZPT
%HOMEPATH%\YMLSN\1735.WHS
%HOMEPATH%\YMLSN\3562.vbs
%HOMEPATH%\YMLSN\J78394.MNJ
%HOMEPATH%\YMLSN\V23287.ONM
%HOMEPATH%\YMLSN\settings.ini
%HOMEPATH%\YMLSN\428320.dat
%HOMEPATH%\YMLSN\93759.RIF
%HOMEPATH%\YMLSN\SAOVQ.exe
%HOMEPATH%\YMLSN\583699.dat
%HOMEPATH%\YMLSN\73255.OWR
%HOMEPATH%\YMLSN\45096.MFL
%HOMEPATH%\YMLSN\L32134.RBL
%HOMEPATH%\YMLSN\12494.DUH
%HOMEPATH%\YMLSN\J98103.RVU
%HOMEPATH%\YMLSN\12192.PXG
%HOMEPATH%\YMLSN\6431.MSX
%HOMEPATH%\YMLSN\46935.FZI
%HOMEPATH%\YMLSN\41368.AEF
%HOMEPATH%\YMLSN\X66340.UPD
%HOMEPATH%\YMLSN\9816.JTA
%HOMEPATH%\YMLSN\43943.FSU
%HOMEPATH%\YMLSN\I91946.UVJ
%HOMEPATH%\YMLSN\T29654.BGM
%HOMEPATH%\YMLSN\F66459.KVC
%HOMEPATH%\YMLSN\16575.VLK
%HOMEPATH%\YMLSN\Y41442.JBC
%HOMEPATH%\YMLSN\33632.MPS
%HOMEPATH%\YMLSN\I35958.CXF
%HOMEPATH%\YMLSN\T49369.GBQ
%HOMEPATH%\YMLSN\J17951.NPV
%HOMEPATH%\YMLSN\P32176.DQF
%HOMEPATH%\YMLSN\X85740.YMV
%HOMEPATH%\YMLSN\C90837.DRW
%HOMEPATH%\YMLSN\U32962.JXI
%HOMEPATH%\YMLSN\48187.CIC
%HOMEPATH%\YMLSN\6964.XJW
%HOMEPATH%\YMLSN\T79469.SLM
%HOMEPATH%\YMLSN\46346.FOG
%HOMEPATH%\YMLSN\64350.QCZ
%HOMEPATH%\YMLSN\37969.SWP
%HOMEPATH%\YMLSN\R35109.KXS
%HOMEPATH%\YMLSN\T69744.DFP
%HOMEPATH%\YMLSN\39799.JLR
%HOMEPATH%\YMLSN\C49020.UAY
%HOMEPATH%\YMLSN\Y41781.MIV
%HOMEPATH%\YMLSN\32434.IBW
%HOMEPATH%\YMLSN\52074.CTF
%HOMEPATH%\YMLSN\C14950.ERR
%HOMEPATH%\YMLSN\L17816.FTW
%HOMEPATH%\YMLSN\H46666.MJO
%HOMEPATH%\YMLSN\83341.RXR
%HOMEPATH%\YMLSN\62727.AJC
%HOMEPATH%\YMLSN\H16560.OIW
%HOMEPATH%\YMLSN\Q94304.ZOS
%HOMEPATH%\YMLSN\W1183.TTX
%HOMEPATH%\YMLSN\Q64608.IKK
%HOMEPATH%\YMLSN\B23570.GKI
%HOMEPATH%\YMLSN\R48500.INX
%HOMEPATH%\YMLSN\34930.OZC
%HOMEPATH%\YMLSN\40689.UXM
%HOMEPATH%\YMLSN\V93902.LYF
%HOMEPATH%\YMLSN\92404.FSQ
%HOMEPATH%\YMLSN\S34994.FOG
%HOMEPATH%\YMLSN\91236.DUM
%HOMEPATH%\YMLSN\49329.YNB
%HOMEPATH%\YMLSN\D51802.VHW
%HOMEPATH%\YMLSN\5684.ZRV
%HOMEPATH%\YMLSN\E34243.IHF
%HOMEPATH%\YMLSN\K85969.PBU
%HOMEPATH%\YMLSN\64145.BBU
%HOMEPATH%\YMLSN\39172.EPR
%HOMEPATH%\YMLSN\5034.RHC
%HOMEPATH%\YMLSN\31307.TKR
%HOMEPATH%\YMLSN\94097.BGG
%HOMEPATH%\YMLSN\21375.LNX
%HOMEPATH%\YMLSN\11910.QYF
%HOMEPATH%\YMLSN\48334.ZPE
%HOMEPATH%\YMLSN\1773.ZSC
%HOMEPATH%\YMLSN\4110.ZYV
%HOMEPATH%\YMLSN\Z51664.AJC
%HOMEPATH%\YMLSN\C63366.ENH
%HOMEPATH%\YMLSN\L51835.XFV
%HOMEPATH%\YMLSN\M34813.CSO
%HOMEPATH%\YMLSN\W48578.UIX
%HOMEPATH%\YMLSN\10519.OFX
%HOMEPATH%\YMLSN\W44036.ZME
%HOMEPATH%\YMLSN\2049.FRB
%HOMEPATH%\YMLSN\87858.GOV
%HOMEPATH%\YMLSN\E70070.QAH
%HOMEPATH%\YMLSN\V47604.RLR
%HOMEPATH%\YMLSN\15525.SAS
%HOMEPATH%\YMLSN\F25475.LUP
%HOMEPATH%\YMLSN\M76878.NPO
%HOMEPATH%\YMLSN\49180.HRL
%HOMEPATH%\YMLSN\N55423.RLH
%HOMEPATH%\YMLSN\A87741.SVI
%HOMEPATH%\YMLSN\55209.IPE
%HOMEPATH%\YMLSN\85408.CKA
%HOMEPATH%\YMLSN\82634.FHT
%HOMEPATH%\YMLSN\77838.ENH
%HOMEPATH%\YMLSN\99643.AKX
%HOMEPATH%\YMLSN\35380.YSV
%HOMEPATH%\YMLSN\75263.JMP
%HOMEPATH%\YMLSN\6023.JPP
%HOMEPATH%\YMLSN\55924.GQR
%HOMEPATH%\YMLSN\85581.GGT
%HOMEPATH%\YMLSN\43641.VIQ
%HOMEPATH%\YMLSN\L36240.NUX
%HOMEPATH%\YMLSN\92419.PFJ
%HOMEPATH%\YMLSN\42490.ZHM
%HOMEPATH%\YMLSN\W51490.BEA
%HOMEPATH%\YMLSN\L43304.XED
%HOMEPATH%\YMLSN\I9546.YQY
%HOMEPATH%\YMLSN\20189.LXF
%HOMEPATH%\YMLSN\I40847.YZV
%HOMEPATH%\YMLSN\R14503.DVQ
%HOMEPATH%\YMLSN\98247.VWY
%HOMEPATH%\YMLSN\29158.DGG
%HOMEPATH%\YMLSN\69608.AUL
%HOMEPATH%\YMLSN\72508.QKE
%HOMEPATH%\YMLSN\S66615.SDF
%HOMEPATH%\YMLSN\P13027.LCO
%HOMEPATH%\YMLSN\19289.ENI
%HOMEPATH%\YMLSN\B39408.RTX
%HOMEPATH%\YMLSN\I59759.UCI
%HOMEPATH%\YMLSN\91905.CXH
%HOMEPATH%\YMLSN\C3409.VMM
%HOMEPATH%\YMLSN\W53803.FJD
%HOMEPATH%\YMLSN\G92164.PJM
%HOMEPATH%\YMLSN\O20468.CGD
%HOMEPATH%\YMLSN\49685.IYL
%HOMEPATH%\YMLSN\90560.UMK
%HOMEPATH%\YMLSN\14354.ILF
%HOMEPATH%\YMLSN\94682.AVU
%HOMEPATH%\YMLSN\Q36992.QBZ
%HOMEPATH%\YMLSN\X52600.NZH
%HOMEPATH%\YMLSN\S80328.QJC
%HOMEPATH%\YMLSN\34474.VUH
%HOMEPATH%\YMLSN\51150.VZW
%HOMEPATH%\YMLSN\E36756.RFM
%HOMEPATH%\YMLSN\8078.LXQ
%HOMEPATH%\YMLSN\11694.VTI
%HOMEPATH%\YMLSN\I52473.UYK
%HOMEPATH%\YMLSN\9113.CBT
%HOMEPATH%\YMLSN\76794.SYI
%HOMEPATH%\YMLSN\C77342.IMJ
%HOMEPATH%\YMLSN\99825.UDH
%HOMEPATH%\YMLSN\75379.HNS
%HOMEPATH%\YMLSN\90263.MIE
%HOMEPATH%\YMLSN\74607.ALZ
%HOMEPATH%\YMLSN\95569.VDN
%HOMEPATH%\YMLSN\43297.ACE
%HOMEPATH%\YMLSN\N28290.CRX
%HOMEPATH%\YMLSN\74798.PSH
%HOMEPATH%\YMLSN\37095.QPK
%HOMEPATH%\YMLSN\T80235.CUF
%HOMEPATH%\YMLSN\U58433.YWO
%HOMEPATH%\YMLSN\A14478.DPG
%HOMEPATH%\YMLSN\51123.VVC
%HOMEPATH%\YMLSN\H91510.WRD
%HOMEPATH%\YMLSN\35852.SVE
%HOMEPATH%\YMLSN\S97757.CQB
%HOMEPATH%\YMLSN\H11401.YUB
%HOMEPATH%\YMLSN\M39290.GFT
%HOMEPATH%\YMLSN\98338.SGG
%HOMEPATH%\YMLSN\B40586.CVC
%HOMEPATH%\YMLSN\U65545.BEF
%HOMEPATH%\YMLSN\29478.YDH
%HOMEPATH%\YMLSN\B80287.FIE
%HOMEPATH%\YMLSN\67384.PIC
%HOMEPATH%\YMLSN\68006.DLM
%HOMEPATH%\YMLSN\35906.PPQ
%HOMEPATH%\YMLSN\X11883.DIT
%HOMEPATH%\YMLSN\53333.BJE
%HOMEPATH%\YMLSN\65142.SAC
%HOMEPATH%\YMLSN\49419.VIA
%HOMEPATH%\YMLSN\P13506.ERA
%HOMEPATH%\YMLSN\76297.ANW
%HOMEPATH%\YMLSN\W77079.ACK
%HOMEPATH%\YMLSN\73645.IFW
%HOMEPATH%\YMLSN\68444.YIR
%HOMEPATH%\YMLSN\U41050.UCL
%HOMEPATH%\YMLSN\52742.TXB
%HOMEPATH%\YMLSN\41568.HNX
%HOMEPATH%\YMLSN\8056.ESB
%HOMEPATH%\YMLSN\77568.QGO
%HOMEPATH%\YMLSN\U7401.BTB
%HOMEPATH%\YMLSN\22126.KOD
%HOMEPATH%\YMLSN\94442.ZZT
%HOMEPATH%\YMLSN\F85313.IYH
%HOMEPATH%\YMLSN\5875.HTX
%HOMEPATH%\YMLSN\N31960.OST
%HOMEPATH%\YMLSN\Q20428.IVI
%HOMEPATH%\YMLSN\67918.WWK
%HOMEPATH%\YMLSN\35404.YOR
%HOMEPATH%\YMLSN\25411.SMY
%HOMEPATH%\YMLSN\U27296.LZS
%HOMEPATH%\YMLSN\26153.OHX
%HOMEPATH%\YMLSN\W95614.HIO
%HOMEPATH%\YMLSN\49672.EGF

Deletes the following files:

%TEMP%\NO_PWDS_report_16-11-2016_15-07-32-F4D651E80A6E4747C8F28A7D8647D810-ABKD.bin
%HOMEPATH%\YMLSN\DNCTTYMK.dat

Moves the following files:

from %TEMP%\report_16-11-2016_15-07-32-F4D651E80A6E4747C8F28A7D8647D810-ABKD.bin to %TEMP%\NO_PWDS_report_16-11-2016_15-07-32-F4D651E80A6E4747C8F28A7D8647D810-ABKD.bin

Network activity:

Connects to:

'94.##0.191.201':25
'wh#####yip.akamai.com':80

TCP:

HTTP GET requests:

http://wh#####yip.akamai.com/

UDP:

DNS ASK sm##.mail.ru
DNS ASK wh#####yip.akamai.com

Miscellaneous:

Searches for the following windows:

ClassName: 'Shell_TrayWnd' WindowName: ''
ClassName: 'EDIT' WindowName: ''

Technologies

Begriffe

Schulung und Training

Mythen

Technical Information

Curing recommendations

Free trial