Trojan.DownLoader9.54592

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'ZSNCH' = '%HOMEPATH%\ZSNCH\start.vbs'

Malicious functions:

Creates and executes the following:

'%HOMEPATH%\ZSNCH\926333.exe' YICMOQSJ.dat
'%HOMEPATH%\ZSNCH\926333.exe' 579442.dat

Executes the following:

'<SYSTEM32>\taskkill.exe' /IM mshta.exe
'%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe'
'<SYSTEM32>\wscript.exe' "%HOMEPATH%\ZSNCH\runner.vbs"
'<SYSTEM32>\mshta.exe'

Injects code into

the following system processes:

%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe

Modifies file system :

Creates the following files:

%HOMEPATH%\ZSNCH\Y45229.XGZ
%HOMEPATH%\ZSNCH\V81140.AYC
%HOMEPATH%\ZSNCH\68216.GWV
%HOMEPATH%\ZSNCH\73277.CXO
%HOMEPATH%\ZSNCH\P11339.PAV
%HOMEPATH%\ZSNCH\I2701.BRS
%HOMEPATH%\ZSNCH\9369.FDH
%HOMEPATH%\ZSNCH\X63186.PXY
%HOMEPATH%\ZSNCH\8699.OMX
%HOMEPATH%\ZSNCH\58108.CAM
%HOMEPATH%\ZSNCH\I20074.MZA
%HOMEPATH%\ZSNCH\87130.YON
%HOMEPATH%\ZSNCH\15324.JJM
%HOMEPATH%\ZSNCH\96744.PFL
%HOMEPATH%\ZSNCH\B10751.DYO
%HOMEPATH%\ZSNCH\97850.VBL
%HOMEPATH%\ZSNCH\52065.KKK
%HOMEPATH%\ZSNCH\V75814.LRR
%HOMEPATH%\ZSNCH\80537.UTV
%HOMEPATH%\ZSNCH\K30887.WSU
%HOMEPATH%\ZSNCH\23797.NCK
%HOMEPATH%\ZSNCH\7565.TXS
%HOMEPATH%\ZSNCH\R46310.CLT
%HOMEPATH%\ZSNCH\65021.OAR
%HOMEPATH%\ZSNCH\K96962.YLG
%HOMEPATH%\ZSNCH\M16705.TEK
%HOMEPATH%\ZSNCH\57726.BYK
%HOMEPATH%\ZSNCH\76910.ACJ
%HOMEPATH%\ZSNCH\36529.SIK
%HOMEPATH%\ZSNCH\G75045.TIY
%HOMEPATH%\ZSNCH\18731.NDT
%HOMEPATH%\ZSNCH\F94792.NQN
%HOMEPATH%\ZSNCH\O6972.TDG
%HOMEPATH%\ZSNCH\G78728.TUR
%HOMEPATH%\ZSNCH\A49128.XIL
%HOMEPATH%\ZSNCH\N92038.AIE
%HOMEPATH%\ZSNCH\S8527.CFQ
%HOMEPATH%\ZSNCH\Y47602.AWL
%HOMEPATH%\ZSNCH\K11611.UYM
%HOMEPATH%\ZSNCH\87874.QRP
%HOMEPATH%\ZSNCH\42617.YFA
%HOMEPATH%\ZSNCH\64761.NXZ
%HOMEPATH%\ZSNCH\W78012.OKZ
%HOMEPATH%\ZSNCH\70924.XPC
%HOMEPATH%\ZSNCH\63761.IAP
%HOMEPATH%\ZSNCH\N13847.RVD
%HOMEPATH%\ZSNCH\J41399.XXX
%HOMEPATH%\ZSNCH\50660.MZJ
%HOMEPATH%\ZSNCH\90024.OEG
%HOMEPATH%\ZSNCH\L21335.OVG
%HOMEPATH%\ZSNCH\L21403.LSV
%HOMEPATH%\ZSNCH\89748.CQG
%HOMEPATH%\ZSNCH\P55260.RFN
%HOMEPATH%\ZSNCH\59916.ZNO
%HOMEPATH%\ZSNCH\S10947.LHB
%HOMEPATH%\ZSNCH\H90065.BOY
%HOMEPATH%\ZSNCH\H74900.MNO
%HOMEPATH%\ZSNCH\85875.WEB
%HOMEPATH%\ZSNCH\68954.GPE
%HOMEPATH%\ZSNCH\20942.UKA
%HOMEPATH%\ZSNCH\A33889.ZVD
%HOMEPATH%\ZSNCH\J26047.KZQ
%HOMEPATH%\ZSNCH\57486.ODM
%HOMEPATH%\ZSNCH\T54983.KGB
%HOMEPATH%\ZSNCH\K15470.MGJ
%HOMEPATH%\ZSNCH\8805.MUN
%HOMEPATH%\ZSNCH\53280.FNH
%HOMEPATH%\ZSNCH\X13647.NQR
%HOMEPATH%\ZSNCH\I44293.JUV
%HOMEPATH%\ZSNCH\F77922.AGJ
%HOMEPATH%\ZSNCH\57194.AHA
%HOMEPATH%\ZSNCH\T32856.VOJ
%HOMEPATH%\ZSNCH\87849.KIN
%HOMEPATH%\ZSNCH\26271.JPO
%HOMEPATH%\ZSNCH\M18149.AEQ
%HOMEPATH%\ZSNCH\64932.CPE
%HOMEPATH%\ZSNCH\W91790.JSE
%HOMEPATH%\ZSNCH\48785.QDP
%HOMEPATH%\ZSNCH\85501.VJS
%HOMEPATH%\ZSNCH\21088.TBI
%HOMEPATH%\ZSNCH\99383.GPB
%HOMEPATH%\ZSNCH\88575.YSQ
%HOMEPATH%\ZSNCH\95690.EGQ
%HOMEPATH%\ZSNCH\G51262.QGN
%HOMEPATH%\ZSNCH\E52236.KLG
%HOMEPATH%\ZSNCH\37976.YAF
%HOMEPATH%\ZSNCH\89842.CHU
%HOMEPATH%\ZSNCH\6501.RWC
%HOMEPATH%\ZSNCH\56606.TUI
%HOMEPATH%\ZSNCH\I22025.JFO
%HOMEPATH%\ZSNCH\Z35140.DES
%HOMEPATH%\ZSNCH\88957.HRH
%HOMEPATH%\ZSNCH\W84121.GAL
%HOMEPATH%\ZSNCH\V62853.OSU
%HOMEPATH%\ZSNCH\U50893.JNH
%HOMEPATH%\ZSNCH\D43443.XFR
%HOMEPATH%\ZSNCH\20138.FFH
%HOMEPATH%\ZSNCH\15176.PDV
%HOMEPATH%\ZSNCH\P53609.SYZ
%HOMEPATH%\ZSNCH\3914.SLF
%HOMEPATH%\ZSNCH\Q13790.KDD
%HOMEPATH%\ZSNCH\A42826.XAP
%HOMEPATH%\ZSNCH\N97871.HYR
%HOMEPATH%\ZSNCH\Q77211.PYE
%HOMEPATH%\ZSNCH\F85786.AXV
%HOMEPATH%\ZSNCH\8114.IHD
%HOMEPATH%\ZSNCH\81200.RBA
%HOMEPATH%\ZSNCH\71349.WOT
%HOMEPATH%\ZSNCH\M34287.YGX
%HOMEPATH%\ZSNCH\T1278.WSI
%HOMEPATH%\ZSNCH\N48917.IAM
%HOMEPATH%\ZSNCH\L24925.LMR
%HOMEPATH%\ZSNCH\93423.RGO
%HOMEPATH%\ZSNCH\R41477.JNH
%HOMEPATH%\ZSNCH\W57743.KUC
%HOMEPATH%\ZSNCH\D25237.SDE
%HOMEPATH%\ZSNCH\85169.HHX
%HOMEPATH%\ZSNCH\K85120.MYT
%HOMEPATH%\ZSNCH\97326.GMW
%HOMEPATH%\ZSNCH\I29559.JMA
%HOMEPATH%\ZSNCH\T98930.SLY
%HOMEPATH%\ZSNCH\97879.KOW
%HOMEPATH%\ZSNCH\40870.YEZ
%HOMEPATH%\ZSNCH\87077.ETS
%HOMEPATH%\ZSNCH\77840.UZL
%HOMEPATH%\ZSNCH\L47596.DCW
%HOMEPATH%\ZSNCH\86033.YZW
%HOMEPATH%\ZSNCH\B43149.QWT
%HOMEPATH%\ZSNCH\E50926.NTF
%HOMEPATH%\ZSNCH\25462.CBW
%HOMEPATH%\ZSNCH\91339.UFZ
%HOMEPATH%\ZSNCH\L75185.JHH
%HOMEPATH%\ZSNCH\68912.CCZ
%HOMEPATH%\ZSNCH\D86637.XML
%HOMEPATH%\ZSNCH\Q15741.AJF
%HOMEPATH%\ZSNCH\V38080.GXR
%HOMEPATH%\ZSNCH\24294.TMD
%HOMEPATH%\ZSNCH\G31650.SAV
%HOMEPATH%\ZSNCH\61769.MMK
%HOMEPATH%\ZSNCH\A4365.DHH
%HOMEPATH%\ZSNCH\F91901.KVP
%HOMEPATH%\ZSNCH\M78818.OWR
%HOMEPATH%\ZSNCH\89655.TQW
%HOMEPATH%\ZSNCH\84494.NTA
%HOMEPATH%\ZSNCH\X97547.BMM
%HOMEPATH%\ZSNCH\21306.WBQ
%HOMEPATH%\ZSNCH\W74237.FID
%HOMEPATH%\ZSNCH\60937.VJH
%HOMEPATH%\ZSNCH\48374.BGI
%HOMEPATH%\ZSNCH\20569.NYB
%HOMEPATH%\ZSNCH\A88904.JEF
%HOMEPATH%\ZSNCH\72963.BNJ
%HOMEPATH%\ZSNCH\U95018.RQB
%HOMEPATH%\ZSNCH\P62037.IKJ
%HOMEPATH%\ZSNCH\15292.ZZR
%HOMEPATH%\ZSNCH\C45629.EKO
%HOMEPATH%\ZSNCH\40093.QHA
%HOMEPATH%\ZSNCH\12879.WPV
%HOMEPATH%\ZSNCH\M1107.SNU
%HOMEPATH%\ZSNCH\77782.VCX
%HOMEPATH%\ZSNCH\50491.LTJ
%HOMEPATH%\ZSNCH\54708.YWA
%HOMEPATH%\ZSNCH\N71929.OPP
%HOMEPATH%\ZSNCH\53069.VTW
%HOMEPATH%\ZSNCH\37313.DMN
%HOMEPATH%\ZSNCH\52523.UOM
%HOMEPATH%\ZSNCH\U18597.ZBG
%HOMEPATH%\ZSNCH\88932.GNM
%HOMEPATH%\ZSNCH\33210.JQP
%HOMEPATH%\ZSNCH\V95263.MHA
%HOMEPATH%\ZSNCH\T53642.KAA
%HOMEPATH%\ZSNCH\95748.CQE
%HOMEPATH%\ZSNCH\51128.FRA
%HOMEPATH%\ZSNCH\U44050.FWC
%HOMEPATH%\ZSNCH\G41344.JJD
%HOMEPATH%\ZSNCH\53149.RZH
%HOMEPATH%\ZSNCH\X81360.WRZ
%HOMEPATH%\ZSNCH\O83041.RJW
%HOMEPATH%\ZSNCH\F44680.TKV
%HOMEPATH%\ZSNCH\14206.KIT
%APPDATA%\Microsoft\Windows\Jy4guu\Jy4guu.nfo
%HOMEPATH%\ZSNCH\start.vbs
%APPDATA%\Microsoft\Windows\Jy4guu\Jy4guu.svr
%APPDATA%\Microsoft\Windows\Jy4guu\Jy4guu.dat
%HOMEPATH%\ZSNCH\O26971.FDM
%HOMEPATH%\ZSNCH\3798.UPB
%HOMEPATH%\ZSNCH\start.cmd
%HOMEPATH%\ZSNCH\YICMOQSJ.dat
%HOMEPATH%\ZSNCH\J42350.RAZ
%HOMEPATH%\ZSNCH\Q95742.NQV
%HOMEPATH%\ZSNCH\A14544.XUT
%HOMEPATH%\ZSNCH\T6903.QMW
%HOMEPATH%\ZSNCH\Z51355.VCF
%HOMEPATH%\ZSNCH\14230.DVI
%HOMEPATH%\ZSNCH\E99564.LIT
%HOMEPATH%\ZSNCH\G97766.CYI
%HOMEPATH%\ZSNCH\S75806.ICN
%HOMEPATH%\ZSNCH\18485.LZF
%HOMEPATH%\ZSNCH\67085.CBW
%HOMEPATH%\ZSNCH\8748.EBO
%HOMEPATH%\ZSNCH\L34075.LJJ
%HOMEPATH%\ZSNCH\15437.QUO
%HOMEPATH%\ZSNCH\B44920.KUQ
%HOMEPATH%\ZSNCH\A25855.LBJ
%HOMEPATH%\ZSNCH\46057.SWE
%HOMEPATH%\ZSNCH\60138.PTS
%HOMEPATH%\ZSNCH\B62047.ZKJ
%HOMEPATH%\ZSNCH\84354.IFW
%HOMEPATH%\ZSNCH\65961.AAL
%HOMEPATH%\ZSNCH\12418.NOE
%HOMEPATH%\ZSNCH\39413.HMV
%HOMEPATH%\ZSNCH\39385.EON
%HOMEPATH%\ZSNCH\77212.CIL
%HOMEPATH%\ZSNCH\64515.TJY
%HOMEPATH%\ZSNCH\31153.BOJ
%HOMEPATH%\ZSNCH\G11920.TOB
%HOMEPATH%\ZSNCH\84263.HIO
%HOMEPATH%\ZSNCH\12935.YFV
%HOMEPATH%\ZSNCH\W94047.OGG
%HOMEPATH%\ZSNCH\29151.KAT
%HOMEPATH%\ZSNCH\T40584.MKA
%HOMEPATH%\ZSNCH\X89373.NQB
%HOMEPATH%\ZSNCH\Q11612.WRC
%HOMEPATH%\ZSNCH\V78205.FER
%HOMEPATH%\ZSNCH\29584.ILR
%HOMEPATH%\ZSNCH\T43347.ETO
%HOMEPATH%\ZSNCH\B25603.YUI
%HOMEPATH%\ZSNCH\M5186.KRK
%HOMEPATH%\ZSNCH\21448.URO
%HOMEPATH%\ZSNCH\B42956.OUA
%HOMEPATH%\ZSNCH\O8349.DTW
%HOMEPATH%\ZSNCH\53122.XDR
%HOMEPATH%\ZSNCH\53637.XUK
%HOMEPATH%\ZSNCH\68536.WLO
%HOMEPATH%\ZSNCH\Y27990.QKV
%HOMEPATH%\ZSNCH\86664.WYW
%HOMEPATH%\ZSNCH\I12396.SXN
%HOMEPATH%\ZSNCH\64608.YDR
%HOMEPATH%\ZSNCH\17501.ZED
%HOMEPATH%\ZSNCH\83844.RNN
%HOMEPATH%\ZSNCH\45160.UWL
%HOMEPATH%\ZSNCH\A34339.SZJ
%HOMEPATH%\ZSNCH\K6791.DXD
%HOMEPATH%\ZSNCH\15724.TQD
%HOMEPATH%\ZSNCH\P2415.XMX
%HOMEPATH%\ZSNCH\38142.GPH
%HOMEPATH%\ZSNCH\G71694.BUM
%HOMEPATH%\ZSNCH\18112.UMD
%HOMEPATH%\ZSNCH\D52760.DMB
%HOMEPATH%\ZSNCH\N31084.SXJ
%HOMEPATH%\ZSNCH\V77523.WHE
%HOMEPATH%\ZSNCH\S82261.EHA
%HOMEPATH%\ZSNCH\13112.QHQ
%HOMEPATH%\ZSNCH\45545.LKX
%HOMEPATH%\ZSNCH\W9756.EYK
%HOMEPATH%\ZSNCH\87384.EYA
%HOMEPATH%\ZSNCH\32047.UOH
%HOMEPATH%\ZSNCH\H19432.EGB
%HOMEPATH%\ZSNCH\R98805.XKS
%HOMEPATH%\ZSNCH\68250.KFK
%HOMEPATH%\ZSNCH\84336.AFY
%HOMEPATH%\ZSNCH\O27984.XDH
%HOMEPATH%\ZSNCH\5081.KKP
%HOMEPATH%\ZSNCH\53181.OPC
%HOMEPATH%\ZSNCH\42133.DKH
%HOMEPATH%\ZSNCH\T83835.BVZ
%HOMEPATH%\ZSNCH\Z56343.XJF
%HOMEPATH%\ZSNCH\44330.SHL
%HOMEPATH%\ZSNCH\78379.ODG
%HOMEPATH%\ZSNCH\72133.HHK
%HOMEPATH%\ZSNCH\R70588.OQD
%HOMEPATH%\ZSNCH\38569.NVG
%HOMEPATH%\ZSNCH\36274.TKJ
%HOMEPATH%\ZSNCH\99253.LHG
%HOMEPATH%\ZSNCH\R23340.BNP
%HOMEPATH%\ZSNCH\L53856.IOJ
%HOMEPATH%\ZSNCH\H12244.WHW
%HOMEPATH%\ZSNCH\V52745.XVP
%HOMEPATH%\ZSNCH\J35464.TSY
%HOMEPATH%\ZSNCH\43709.BEE
%HOMEPATH%\ZSNCH\M93652.LNC
%HOMEPATH%\ZSNCH\14095.LVF
%HOMEPATH%\ZSNCH\N17229.VTL
%HOMEPATH%\ZSNCH\45775.JYR
%HOMEPATH%\ZSNCH\Z78290.CVJ
%HOMEPATH%\ZSNCH\87866.WEI
%HOMEPATH%\ZSNCH\15871.LOO
%HOMEPATH%\ZSNCH\M49892.VLZ
%HOMEPATH%\ZSNCH\D70798.URP
%HOMEPATH%\ZSNCH\A95674.GEK
%HOMEPATH%\ZSNCH\77044.LRF
%HOMEPATH%\ZSNCH\88785.ECX
%HOMEPATH%\ZSNCH\I34062.HBJ
%HOMEPATH%\ZSNCH\W65421.THH
%HOMEPATH%\ZSNCH\B44924.PGC
%HOMEPATH%\ZSNCH\G54183.JKB
%HOMEPATH%\ZSNCH\K19483.JIE
%HOMEPATH%\ZSNCH\S42820.VYE
%HOMEPATH%\ZSNCH\13696.UFR
%HOMEPATH%\ZSNCH\40070.JOF
%HOMEPATH%\ZSNCH\41649.CFM
%HOMEPATH%\ZSNCH\H68750.DQB
%HOMEPATH%\ZSNCH\W55907.CEQ
%HOMEPATH%\ZSNCH\38284.PCH
%HOMEPATH%\ZSNCH\G34446.MGY
%HOMEPATH%\ZSNCH\58079.VDV
%HOMEPATH%\ZSNCH\29874.ZZQ
%HOMEPATH%\ZSNCH\E8467.DLE
%HOMEPATH%\ZSNCH\9951.JOH
%HOMEPATH%\ZSNCH\39040.HOS
%HOMEPATH%\ZSNCH\G99076.DXT
%HOMEPATH%\ZSNCH\O69749.IKE
%HOMEPATH%\ZSNCH\J48885.EZZ
%HOMEPATH%\ZSNCH\E5488.GAB
%HOMEPATH%\ZSNCH\J73597.GNO
%HOMEPATH%\ZSNCH\P33879.JXT
%HOMEPATH%\ZSNCH\12075.WWS
%HOMEPATH%\ZSNCH\Q45380.BMT
%HOMEPATH%\ZSNCH\82128.VRD
%HOMEPATH%\ZSNCH\80208.TPW
%HOMEPATH%\ZSNCH\Y75051.JDD
%HOMEPATH%\ZSNCH\40063.GOV
%HOMEPATH%\ZSNCH\40626.OJX
%HOMEPATH%\ZSNCH\E46466.LVQ
%HOMEPATH%\ZSNCH\64080.CBK
%HOMEPATH%\ZSNCH\18074.YVC
%HOMEPATH%\ZSNCH\U71991.ONM
%HOMEPATH%\ZSNCH\C70482.CRG
%HOMEPATH%\ZSNCH\70349.EXR
%HOMEPATH%\ZSNCH\58020.LJI
%HOMEPATH%\ZSNCH\Y66196.PFZ
%HOMEPATH%\ZSNCH\R66388.SXN
%HOMEPATH%\ZSNCH\N67904.SRV
%HOMEPATH%\ZSNCH\M4905.NEO
%HOMEPATH%\ZSNCH\R80440.ZRC
%HOMEPATH%\ZSNCH\W17746.ENU
%HOMEPATH%\ZSNCH\R6353.QLY
%HOMEPATH%\ZSNCH\X10166.LMV
%HOMEPATH%\ZSNCH\57484.SOL
%HOMEPATH%\ZSNCH\44684.MEY
%HOMEPATH%\ZSNCH\O30914.LDS
%HOMEPATH%\ZSNCH\J71850.SVV
%HOMEPATH%\ZSNCH\89117.QTM
%HOMEPATH%\ZSNCH\64744.TBY
%HOMEPATH%\ZSNCH\Q73613.ISZ
%HOMEPATH%\ZSNCH\X85113.HMG
%HOMEPATH%\ZSNCH\H16935.SBW
%HOMEPATH%\ZSNCH\T9631.PEQ
%HOMEPATH%\ZSNCH\V66015.GHN
%HOMEPATH%\ZSNCH\U81804.ZUS
%HOMEPATH%\ZSNCH\K11330.QGI
%HOMEPATH%\ZSNCH\92169.FWC
%HOMEPATH%\ZSNCH\3525.HBM
%HOMEPATH%\ZSNCH\11695.XLC
%HOMEPATH%\ZSNCH\81972.VTM
%HOMEPATH%\ZSNCH\83697.AEO
%HOMEPATH%\ZSNCH\Y36013.PNZ
%HOMEPATH%\ZSNCH\B41243.NSD
%HOMEPATH%\ZSNCH\87751.PIB
%HOMEPATH%\ZSNCH\runner.vbs
%HOMEPATH%\ZSNCH\settings.ini
%HOMEPATH%\ZSNCH\Q16353.TFN
%HOMEPATH%\ZSNCH\30926.KNG
%HOMEPATH%\ZSNCH\17330.dat
%HOMEPATH%\ZSNCH\579442.dat
%HOMEPATH%\ZSNCH\926333.exe
%HOMEPATH%\ZSNCH\953779.dat
%HOMEPATH%\ZSNCH\G96918.PUX
%HOMEPATH%\ZSNCH\70544.LYI
%HOMEPATH%\ZSNCH\30558.MHO
%HOMEPATH%\ZSNCH\45950.ARH
%HOMEPATH%\ZSNCH\46588.WGH
%HOMEPATH%\ZSNCH\C33899.QIY
%HOMEPATH%\ZSNCH\O99575.PHZ
%HOMEPATH%\ZSNCH\60440.LBI
%HOMEPATH%\ZSNCH\94618.CFP
%HOMEPATH%\ZSNCH\94847.QVU
%HOMEPATH%\ZSNCH\10118.ZXB
%HOMEPATH%\ZSNCH\G37642.LOD
%HOMEPATH%\ZSNCH\J37916.GLG
%HOMEPATH%\ZSNCH\M64046.TJA
%HOMEPATH%\ZSNCH\T96344.LDO
%HOMEPATH%\ZSNCH\F55612.VBN
%HOMEPATH%\ZSNCH\68687.QNL
%HOMEPATH%\ZSNCH\U21940.NDK
%HOMEPATH%\ZSNCH\84725.UDE
%HOMEPATH%\ZSNCH\38086.WOE
%HOMEPATH%\ZSNCH\31862.NJM
%HOMEPATH%\ZSNCH\F12002.FAW
%HOMEPATH%\ZSNCH\N54542.KAF
%HOMEPATH%\ZSNCH\57948.NZT
%HOMEPATH%\ZSNCH\D20928.EGA
%HOMEPATH%\ZSNCH\I67573.SED
%HOMEPATH%\ZSNCH\V64895.PJO
%HOMEPATH%\ZSNCH\K44591.MZN
%HOMEPATH%\ZSNCH\61955.SCG
%HOMEPATH%\ZSNCH\49608.IUQ
%HOMEPATH%\ZSNCH\Q33206.RWS
%HOMEPATH%\ZSNCH\38687.VGW
%HOMEPATH%\ZSNCH\28595.OVR
%HOMEPATH%\ZSNCH\27849.BBD
%HOMEPATH%\ZSNCH\K92183.RGG
%HOMEPATH%\ZSNCH\I73262.EFQ
%HOMEPATH%\ZSNCH\94793.QMK
%HOMEPATH%\ZSNCH\19720.WMM
%HOMEPATH%\ZSNCH\A53009.BBH
%HOMEPATH%\ZSNCH\56056.CFN
%HOMEPATH%\ZSNCH\B31964.DXR
%HOMEPATH%\ZSNCH\M3849.ZVY
%HOMEPATH%\ZSNCH\93463.NZZ
%HOMEPATH%\ZSNCH\82510.KAR
%HOMEPATH%\ZSNCH\90898.RNF
%HOMEPATH%\ZSNCH\43444.TIF
%HOMEPATH%\ZSNCH\3871.AMZ
%HOMEPATH%\ZSNCH\Y4977.FVT
%HOMEPATH%\ZSNCH\24336.YNU
%HOMEPATH%\ZSNCH\16196.OJS
%HOMEPATH%\ZSNCH\1529.YMH
%HOMEPATH%\ZSNCH\48663.ZUP
%HOMEPATH%\ZSNCH\12019.VDR
%HOMEPATH%\ZSNCH\P46116.FNZ
%HOMEPATH%\ZSNCH\G2005.UEE
%HOMEPATH%\ZSNCH\76264.AEC
%HOMEPATH%\ZSNCH\M2470.KAU
%HOMEPATH%\ZSNCH\U77917.LYX
%HOMEPATH%\ZSNCH\L98264.RDO
%HOMEPATH%\ZSNCH\87812.XPS
%HOMEPATH%\ZSNCH\J60492.UGZ
%HOMEPATH%\ZSNCH\60317.GRD
%HOMEPATH%\ZSNCH\B46610.VQF
%HOMEPATH%\ZSNCH\Y53745.FME
%HOMEPATH%\ZSNCH\67014.AME
%HOMEPATH%\ZSNCH\B72456.IKR
%HOMEPATH%\ZSNCH\25710.JBE
%HOMEPATH%\ZSNCH\87999.MIP
%HOMEPATH%\ZSNCH\85454.JBV
%HOMEPATH%\ZSNCH\97777.SEM
%HOMEPATH%\ZSNCH\Q6117.YYZ
%HOMEPATH%\ZSNCH\B84366.DNK
%HOMEPATH%\ZSNCH\62732.QAC
%HOMEPATH%\ZSNCH\43601.COC
%HOMEPATH%\ZSNCH\E28291.KNR
%HOMEPATH%\ZSNCH\E68701.EQE
%HOMEPATH%\ZSNCH\F53323.WOT
%HOMEPATH%\ZSNCH\20780.BNH
%HOMEPATH%\ZSNCH\E87782.EZJ
%HOMEPATH%\ZSNCH\B50473.INF
%HOMEPATH%\ZSNCH\H78364.LQG
%HOMEPATH%\ZSNCH\24957.HUP
%HOMEPATH%\ZSNCH\32128.BOK
%HOMEPATH%\ZSNCH\30545.XCR
%HOMEPATH%\ZSNCH\V43525.GTJ
%HOMEPATH%\ZSNCH\34064.KHF
%HOMEPATH%\ZSNCH\L97070.XPJ
%HOMEPATH%\ZSNCH\34654.OGL
%HOMEPATH%\ZSNCH\70425.ZTC
%HOMEPATH%\ZSNCH\98693.ACH
%HOMEPATH%\ZSNCH\P93662.RGP
%HOMEPATH%\ZSNCH\M9599.LGR
%HOMEPATH%\ZSNCH\98153.RST
%HOMEPATH%\ZSNCH\79987.APQ
%HOMEPATH%\ZSNCH\86955.CAM
%HOMEPATH%\ZSNCH\43656.JZN
%HOMEPATH%\ZSNCH\33655.GNC
%HOMEPATH%\ZSNCH\94235.NXA
%HOMEPATH%\ZSNCH\82701.KXS
%HOMEPATH%\ZSNCH\V69391.YJY
%HOMEPATH%\ZSNCH\92355.GQZ
%HOMEPATH%\ZSNCH\1227.UKG
%HOMEPATH%\ZSNCH\G40059.XEX
%HOMEPATH%\ZSNCH\K1545.QEI
%HOMEPATH%\ZSNCH\V6963.CUL
%HOMEPATH%\ZSNCH\85188.AHW
%HOMEPATH%\ZSNCH\U24450.BBG
%HOMEPATH%\ZSNCH\M3357.NNJ
%HOMEPATH%\ZSNCH\66371.OQU
%HOMEPATH%\ZSNCH\48538.HMS
%HOMEPATH%\ZSNCH\50354.OPC
%HOMEPATH%\ZSNCH\P28544.GPM
%HOMEPATH%\ZSNCH\18662.YMW
%HOMEPATH%\ZSNCH\W4323.UBP
%HOMEPATH%\ZSNCH\14274.QEI
%HOMEPATH%\ZSNCH\90646.QCD
%HOMEPATH%\ZSNCH\7635.YGS
%HOMEPATH%\ZSNCH\13865.LJV
%HOMEPATH%\ZSNCH\K84656.NMW
%HOMEPATH%\ZSNCH\K7991.WPH
%HOMEPATH%\ZSNCH\59333.CRM
%HOMEPATH%\ZSNCH\41335.PGT
%HOMEPATH%\ZSNCH\93221.BUE
%HOMEPATH%\ZSNCH\27158.MOP
%HOMEPATH%\ZSNCH\7596.PPR
%HOMEPATH%\ZSNCH\94299.CGU
%HOMEPATH%\ZSNCH\89649.RBE
%HOMEPATH%\ZSNCH\5783.MXJ
%HOMEPATH%\ZSNCH\V83065.RFZ
%HOMEPATH%\ZSNCH\91707.NHE
%HOMEPATH%\ZSNCH\31071.QLF
%HOMEPATH%\ZSNCH\N23229.RQK
%HOMEPATH%\ZSNCH\C65185.NEU
%HOMEPATH%\ZSNCH\K13905.SXO
%HOMEPATH%\ZSNCH\M11187.WCR
%HOMEPATH%\ZSNCH\74181.WQI
%HOMEPATH%\ZSNCH\87702.QNG
%HOMEPATH%\ZSNCH\14681.ZHQ
%HOMEPATH%\ZSNCH\E83034.YQT
%HOMEPATH%\ZSNCH\Z81533.YOB
%HOMEPATH%\ZSNCH\3483.FKY
%HOMEPATH%\ZSNCH\27538.TRJ
%HOMEPATH%\ZSNCH\V81439.JQS
%HOMEPATH%\ZSNCH\H97673.VTZ
%HOMEPATH%\ZSNCH\I46452.WCT
%HOMEPATH%\ZSNCH\P19969.LBW
%HOMEPATH%\ZSNCH\V87271.TZG
%HOMEPATH%\ZSNCH\P26177.LLK
%HOMEPATH%\ZSNCH\W64714.SQY
%HOMEPATH%\ZSNCH\E30251.DRE
%HOMEPATH%\ZSNCH\13892.WXE
%HOMEPATH%\ZSNCH\78798.NLQ
%HOMEPATH%\ZSNCH\P34245.BNY
%HOMEPATH%\ZSNCH\P1306.JNP
%HOMEPATH%\ZSNCH\18256.HRA
%HOMEPATH%\ZSNCH\X58900.XFY
%HOMEPATH%\ZSNCH\65910.GCX
%HOMEPATH%\ZSNCH\H48985.RBQ
%HOMEPATH%\ZSNCH\W89646.LOM
%HOMEPATH%\ZSNCH\J33670.ZSV
%HOMEPATH%\ZSNCH\W75753.YTY
%HOMEPATH%\ZSNCH\K33057.RHN
%HOMEPATH%\ZSNCH\X77757.KAO
%HOMEPATH%\ZSNCH\L80800.TGV
%HOMEPATH%\ZSNCH\98459.NHQ
%HOMEPATH%\ZSNCH\93607.NGK
%HOMEPATH%\ZSNCH\I75043.PCU
%HOMEPATH%\ZSNCH\59471.XNI
%HOMEPATH%\ZSNCH\R46196.ILY
%HOMEPATH%\ZSNCH\M68213.VYD
%HOMEPATH%\ZSNCH\R18183.KDI
%HOMEPATH%\ZSNCH\N52196.HIF
%HOMEPATH%\ZSNCH\63015.QYA
%HOMEPATH%\ZSNCH\U45223.JEL
%HOMEPATH%\ZSNCH\L48859.JSF
%HOMEPATH%\ZSNCH\X73207.SQY
%HOMEPATH%\ZSNCH\37169.ONG
%HOMEPATH%\ZSNCH\96379.BJR
%HOMEPATH%\ZSNCH\Z32026.LMJ
%HOMEPATH%\ZSNCH\84649.YAO

Sets the 'hidden' attribute to the following files:

%HOMEPATH%\ZSNCH\9369.FDH
%HOMEPATH%\ZSNCH\X63186.PXY
%HOMEPATH%\ZSNCH\Y45229.XGZ
%HOMEPATH%\ZSNCH\V81140.AYC
%HOMEPATH%\ZSNCH\36529.SIK
%HOMEPATH%\ZSNCH\G75045.TIY
%HOMEPATH%\ZSNCH\P11339.PAV
%HOMEPATH%\ZSNCH\I2701.BRS
%HOMEPATH%\ZSNCH\73277.CXO
%HOMEPATH%\ZSNCH\97850.VBL
%HOMEPATH%\ZSNCH\52065.KKK
%HOMEPATH%\ZSNCH\58108.CAM
%HOMEPATH%\ZSNCH\I20074.MZA
%HOMEPATH%\ZSNCH\8699.OMX
%HOMEPATH%\ZSNCH\68216.GWV
%HOMEPATH%\ZSNCH\96744.PFL
%HOMEPATH%\ZSNCH\B10751.DYO
%HOMEPATH%\ZSNCH\65021.OAR
%HOMEPATH%\ZSNCH\K96962.YLG
%HOMEPATH%\ZSNCH\V75814.LRR
%HOMEPATH%\ZSNCH\80537.UTV
%HOMEPATH%\ZSNCH\R41477.JNH
%HOMEPATH%\ZSNCH\W57743.KUC
%HOMEPATH%\ZSNCH\7565.TXS
%HOMEPATH%\ZSNCH\R46310.CLT
%HOMEPATH%\ZSNCH\23797.NCK
%HOMEPATH%\ZSNCH\O6972.TDG
%HOMEPATH%\ZSNCH\G78728.TUR
%HOMEPATH%\ZSNCH\57726.BYK
%HOMEPATH%\ZSNCH\76910.ACJ
%HOMEPATH%\ZSNCH\M16705.TEK
%HOMEPATH%\ZSNCH\K30887.WSU
%HOMEPATH%\ZSNCH\18731.NDT
%HOMEPATH%\ZSNCH\F94792.NQN
%HOMEPATH%\ZSNCH\42617.YFA
%HOMEPATH%\ZSNCH\64761.NXZ
%HOMEPATH%\ZSNCH\A49128.XIL
%HOMEPATH%\ZSNCH\N92038.AIE
%HOMEPATH%\ZSNCH\57486.ODM
%HOMEPATH%\ZSNCH\T54983.KGB
%HOMEPATH%\ZSNCH\K11611.UYM
%HOMEPATH%\ZSNCH\87874.QRP
%HOMEPATH%\ZSNCH\Y47602.AWL
%HOMEPATH%\ZSNCH\L21335.OVG
%HOMEPATH%\ZSNCH\L21403.LSV
%HOMEPATH%\ZSNCH\70924.XPC
%HOMEPATH%\ZSNCH\63761.IAP
%HOMEPATH%\ZSNCH\W78012.OKZ
%HOMEPATH%\ZSNCH\S8527.CFQ
%HOMEPATH%\ZSNCH\50660.MZJ
%HOMEPATH%\ZSNCH\90024.OEG
%HOMEPATH%\ZSNCH\85875.WEB
%HOMEPATH%\ZSNCH\68954.GPE
%HOMEPATH%\ZSNCH\89748.CQG
%HOMEPATH%\ZSNCH\P55260.RFN
%HOMEPATH%\ZSNCH\87130.YON
%HOMEPATH%\ZSNCH\15324.JJM
%HOMEPATH%\ZSNCH\H90065.BOY
%HOMEPATH%\ZSNCH\H74900.MNO
%HOMEPATH%\ZSNCH\S10947.LHB
%HOMEPATH%\ZSNCH\53280.FNH
%HOMEPATH%\ZSNCH\X13647.NQR
%HOMEPATH%\ZSNCH\A33889.ZVD
%HOMEPATH%\ZSNCH\J26047.KZQ
%HOMEPATH%\ZSNCH\20942.UKA
%HOMEPATH%\ZSNCH\59916.ZNO
%HOMEPATH%\ZSNCH\K15470.MGJ
%HOMEPATH%\ZSNCH\8805.MUN
%HOMEPATH%\ZSNCH\M18149.AEQ
%HOMEPATH%\ZSNCH\64932.CPE
%HOMEPATH%\ZSNCH\I44293.JUV
%HOMEPATH%\ZSNCH\F77922.AGJ
%HOMEPATH%\ZSNCH\20138.FFH
%HOMEPATH%\ZSNCH\15176.PDV
%HOMEPATH%\ZSNCH\87849.KIN
%HOMEPATH%\ZSNCH\26271.JPO
%HOMEPATH%\ZSNCH\T32856.VOJ
%HOMEPATH%\ZSNCH\G51262.QGN
%HOMEPATH%\ZSNCH\E52236.KLG
%HOMEPATH%\ZSNCH\48785.QDP
%HOMEPATH%\ZSNCH\85501.VJS
%HOMEPATH%\ZSNCH\W91790.JSE
%HOMEPATH%\ZSNCH\57194.AHA
%HOMEPATH%\ZSNCH\88575.YSQ
%HOMEPATH%\ZSNCH\95690.EGQ
%HOMEPATH%\ZSNCH\88957.HRH
%HOMEPATH%\ZSNCH\W84121.GAL
%HOMEPATH%\ZSNCH\37976.YAF
%HOMEPATH%\ZSNCH\89842.CHU
%HOMEPATH%\ZSNCH\99253.LHG
%HOMEPATH%\ZSNCH\98693.ACH
%HOMEPATH%\ZSNCH\I22025.JFO
%HOMEPATH%\ZSNCH\Z35140.DES
%HOMEPATH%\ZSNCH\56606.TUI
%HOMEPATH%\ZSNCH\Q13790.KDD
%HOMEPATH%\ZSNCH\A42826.XAP
%HOMEPATH%\ZSNCH\U50893.JNH
%HOMEPATH%\ZSNCH\D43443.XFR
%HOMEPATH%\ZSNCH\V62853.OSU
%HOMEPATH%\ZSNCH\6501.RWC
%HOMEPATH%\ZSNCH\P53609.SYZ
%HOMEPATH%\ZSNCH\3914.SLF
%HOMEPATH%\ZSNCH\M34287.YGX
%HOMEPATH%\ZSNCH\T1278.WSI
%HOMEPATH%\ZSNCH\N97871.HYR
%HOMEPATH%\ZSNCH\Q77211.PYE
%HOMEPATH%\ZSNCH\91339.UFZ
%HOMEPATH%\ZSNCH\L75185.JHH
%HOMEPATH%\ZSNCH\81200.RBA
%HOMEPATH%\ZSNCH\71349.WOT
%HOMEPATH%\ZSNCH\8114.IHD
%HOMEPATH%\ZSNCH\K85120.MYT
%HOMEPATH%\ZSNCH\97326.GMW
%HOMEPATH%\ZSNCH\L24925.LMR
%HOMEPATH%\ZSNCH\93423.RGO
%HOMEPATH%\ZSNCH\N48917.IAM
%HOMEPATH%\ZSNCH\F85786.AXV
%HOMEPATH%\ZSNCH\D25237.SDE
%HOMEPATH%\ZSNCH\85169.HHX
%HOMEPATH%\ZSNCH\L47596.DCW
%HOMEPATH%\ZSNCH\86033.YZW
%HOMEPATH%\ZSNCH\I29559.JMA
%HOMEPATH%\ZSNCH\T98930.SLY
%HOMEPATH%\ZSNCH\21088.TBI
%HOMEPATH%\ZSNCH\99383.GPB
%HOMEPATH%\ZSNCH\87077.ETS
%HOMEPATH%\ZSNCH\77840.UZL
%HOMEPATH%\ZSNCH\40870.YEZ
%HOMEPATH%\ZSNCH\Q15741.AJF
%HOMEPATH%\ZSNCH\V38080.GXR
%HOMEPATH%\ZSNCH\E50926.NTF
%HOMEPATH%\ZSNCH\25462.CBW
%HOMEPATH%\ZSNCH\B43149.QWT
%HOMEPATH%\ZSNCH\97879.KOW
%HOMEPATH%\ZSNCH\68912.CCZ
%HOMEPATH%\ZSNCH\D86637.XML
%HOMEPATH%\ZSNCH\X97547.BMM
%HOMEPATH%\ZSNCH\M78818.OWR
%HOMEPATH%\ZSNCH\61769.MMK
%HOMEPATH%\ZSNCH\84494.NTA
%HOMEPATH%\ZSNCH\U18597.ZBG
%HOMEPATH%\ZSNCH\53069.VTW
%HOMEPATH%\ZSNCH\89655.TQW
%HOMEPATH%\ZSNCH\52523.UOM
%HOMEPATH%\ZSNCH\G31650.SAV
%HOMEPATH%\ZSNCH\P62037.IKJ
%HOMEPATH%\ZSNCH\A88904.JEF
%HOMEPATH%\ZSNCH\60937.VJH
%HOMEPATH%\ZSNCH\U95018.RQB
%HOMEPATH%\ZSNCH\A4365.DHH
%HOMEPATH%\ZSNCH\F91901.KVP
%HOMEPATH%\ZSNCH\72963.BNJ
%HOMEPATH%\ZSNCH\21306.WBQ
%HOMEPATH%\ZSNCH\54708.YWA
%HOMEPATH%\ZSNCH\M1107.SNU
%HOMEPATH%\ZSNCH\C45629.EKO
%HOMEPATH%\ZSNCH\50491.LTJ
%HOMEPATH%\ZSNCH\S82261.EHA
%HOMEPATH%\ZSNCH\D52760.DMB
%HOMEPATH%\ZSNCH\77782.VCX
%HOMEPATH%\ZSNCH\V77523.WHE
%HOMEPATH%\ZSNCH\15292.ZZR
%HOMEPATH%\ZSNCH\T53642.KAA
%HOMEPATH%\ZSNCH\88932.GNM
%HOMEPATH%\ZSNCH\37313.DMN
%HOMEPATH%\ZSNCH\V95263.MHA
%HOMEPATH%\ZSNCH\40093.QHA
%HOMEPATH%\ZSNCH\12879.WPV
%HOMEPATH%\ZSNCH\33210.JQP
%HOMEPATH%\ZSNCH\N71929.OPP
%HOMEPATH%\ZSNCH\F44680.TKV
%HOMEPATH%\ZSNCH\53149.RZH
%HOMEPATH%\ZSNCH\51128.FRA
%HOMEPATH%\ZSNCH\O83041.RJW
%HOMEPATH%\ZSNCH\L34075.LJJ
%HOMEPATH%\ZSNCH\18485.LZF
%HOMEPATH%\ZSNCH\X81360.WRZ
%HOMEPATH%\ZSNCH\8748.EBO
%HOMEPATH%\ZSNCH\95748.CQE
%APPDATA%\Microsoft\Windows\Jy4guu\Jy4guu.nfo
%HOMEPATH%\ZSNCH\O26971.FDM
%APPDATA%\Microsoft\Windows\Jy4guu\Jy4guu.svr
%APPDATA%\Microsoft\Windows\Jy4guu\Jy4guu.dat
%HOMEPATH%\ZSNCH\U44050.FWC
%HOMEPATH%\ZSNCH\G41344.JJD
%HOMEPATH%\ZSNCH\3798.UPB
%HOMEPATH%\ZSNCH\14206.KIT
%HOMEPATH%\ZSNCH\G97766.CYI
%HOMEPATH%\ZSNCH\Z51355.VCF
%HOMEPATH%\ZSNCH\Q95742.NQV
%HOMEPATH%\ZSNCH\E99564.LIT
%HOMEPATH%\ZSNCH\20569.NYB
%HOMEPATH%\ZSNCH\W74237.FID
%HOMEPATH%\ZSNCH\14230.DVI
%HOMEPATH%\ZSNCH\48374.BGI
%HOMEPATH%\ZSNCH\J42350.RAZ
%HOMEPATH%\ZSNCH\46057.SWE
%HOMEPATH%\ZSNCH\15437.QUO
%HOMEPATH%\ZSNCH\67085.CBW
%HOMEPATH%\ZSNCH\A25855.LBJ
%HOMEPATH%\ZSNCH\A14544.XUT
%HOMEPATH%\ZSNCH\T6903.QMW
%HOMEPATH%\ZSNCH\B44920.KUQ
%HOMEPATH%\ZSNCH\S75806.ICN
%HOMEPATH%\ZSNCH\77212.CIL
%HOMEPATH%\ZSNCH\12418.NOE
%HOMEPATH%\ZSNCH\B62047.ZKJ
%HOMEPATH%\ZSNCH\39385.EON
%HOMEPATH%\ZSNCH\Y27990.QKV
%HOMEPATH%\ZSNCH\53122.XDR
%HOMEPATH%\ZSNCH\39413.HMV
%HOMEPATH%\ZSNCH\68536.WLO
%HOMEPATH%\ZSNCH\60138.PTS
%HOMEPATH%\ZSNCH\X89373.NQB
%HOMEPATH%\ZSNCH\W94047.OGG
%HOMEPATH%\ZSNCH\G11920.TOB
%HOMEPATH%\ZSNCH\T40584.MKA
%HOMEPATH%\ZSNCH\84354.IFW
%HOMEPATH%\ZSNCH\65961.AAL
%HOMEPATH%\ZSNCH\29151.KAT
%HOMEPATH%\ZSNCH\64515.TJY
%HOMEPATH%\ZSNCH\B42956.OUA
%HOMEPATH%\ZSNCH\B25603.YUI
%HOMEPATH%\ZSNCH\V78205.FER
%HOMEPATH%\ZSNCH\21448.URO
%HOMEPATH%\ZSNCH\N13847.RVD
%HOMEPATH%\ZSNCH\J41399.XXX
%HOMEPATH%\ZSNCH\M5186.KRK
%HOMEPATH%\ZSNCH\24294.TMD
%HOMEPATH%\ZSNCH\Q11612.WRC
%HOMEPATH%\ZSNCH\17501.ZED
%HOMEPATH%\ZSNCH\86664.WYW
%HOMEPATH%\ZSNCH\53637.XUK
%HOMEPATH%\ZSNCH\64608.YDR
%HOMEPATH%\ZSNCH\29584.ILR
%HOMEPATH%\ZSNCH\T43347.ETO
%HOMEPATH%\ZSNCH\I12396.SXN
%HOMEPATH%\ZSNCH\O8349.DTW
%HOMEPATH%\ZSNCH\G71694.BUM
%HOMEPATH%\ZSNCH\15724.TQD
%HOMEPATH%\ZSNCH\45160.UWL
%HOMEPATH%\ZSNCH\38142.GPH
%HOMEPATH%\ZSNCH\78379.ODG
%HOMEPATH%\ZSNCH\T83835.BVZ
%HOMEPATH%\ZSNCH\P2415.XMX
%HOMEPATH%\ZSNCH\44330.SHL
%HOMEPATH%\ZSNCH\83844.RNN
%HOMEPATH%\ZSNCH\87384.EYA
%HOMEPATH%\ZSNCH\13112.QHQ
%HOMEPATH%\ZSNCH\N31084.SXJ
%HOMEPATH%\ZSNCH\W9756.EYK
%HOMEPATH%\ZSNCH\A34339.SZJ
%HOMEPATH%\ZSNCH\K6791.DXD
%HOMEPATH%\ZSNCH\45545.LKX
%HOMEPATH%\ZSNCH\18112.UMD
%HOMEPATH%\ZSNCH\53181.OPC
%HOMEPATH%\ZSNCH\84336.AFY
%HOMEPATH%\ZSNCH\H19432.EGB
%HOMEPATH%\ZSNCH\5081.KKP
%HOMEPATH%\ZSNCH\12935.YFV
%HOMEPATH%\ZSNCH\31153.BOJ
%HOMEPATH%\ZSNCH\O27984.XDH
%HOMEPATH%\ZSNCH\84263.HIO
%HOMEPATH%\ZSNCH\32047.UOH
%HOMEPATH%\ZSNCH\36274.TKJ
%HOMEPATH%\ZSNCH\72133.HHK
%HOMEPATH%\ZSNCH\Z56343.XJF
%HOMEPATH%\ZSNCH\38569.NVG
%HOMEPATH%\ZSNCH\R98805.XKS
%HOMEPATH%\ZSNCH\68250.KFK
%HOMEPATH%\ZSNCH\R70588.OQD
%HOMEPATH%\ZSNCH\42133.DKH
%HOMEPATH%\ZSNCH\R23340.BNP
%HOMEPATH%\ZSNCH\L53856.IOJ
%HOMEPATH%\ZSNCH\H12244.WHW
%HOMEPATH%\ZSNCH\V52745.XVP
%HOMEPATH%\ZSNCH\J35464.TSY
%HOMEPATH%\ZSNCH\43709.BEE
%HOMEPATH%\ZSNCH\M93652.LNC
%HOMEPATH%\ZSNCH\14095.LVF
%HOMEPATH%\ZSNCH\N17229.VTL
%HOMEPATH%\ZSNCH\45775.JYR
%HOMEPATH%\ZSNCH\Z78290.CVJ
%HOMEPATH%\ZSNCH\87866.WEI
%HOMEPATH%\ZSNCH\15871.LOO
%HOMEPATH%\ZSNCH\M49892.VLZ
%HOMEPATH%\ZSNCH\D70798.URP
%HOMEPATH%\ZSNCH\A95674.GEK
%HOMEPATH%\ZSNCH\77044.LRF
%HOMEPATH%\ZSNCH\88785.ECX
%HOMEPATH%\ZSNCH\I34062.HBJ
%HOMEPATH%\ZSNCH\W65421.THH
%HOMEPATH%\ZSNCH\B44924.PGC
%HOMEPATH%\ZSNCH\G54183.JKB
%HOMEPATH%\ZSNCH\K19483.JIE
%HOMEPATH%\ZSNCH\S42820.VYE
%HOMEPATH%\ZSNCH\13696.UFR
%HOMEPATH%\ZSNCH\40070.JOF
%HOMEPATH%\ZSNCH\41649.CFM
%HOMEPATH%\ZSNCH\H68750.DQB
%HOMEPATH%\ZSNCH\W55907.CEQ
%HOMEPATH%\ZSNCH\38284.PCH
%HOMEPATH%\ZSNCH\G34446.MGY
%HOMEPATH%\ZSNCH\58079.VDV
%HOMEPATH%\ZSNCH\29874.ZZQ
%HOMEPATH%\ZSNCH\E8467.DLE
%HOMEPATH%\ZSNCH\9951.JOH
%HOMEPATH%\ZSNCH\39040.HOS
%HOMEPATH%\ZSNCH\G99076.DXT
%HOMEPATH%\ZSNCH\O69749.IKE
%HOMEPATH%\ZSNCH\J48885.EZZ
%HOMEPATH%\ZSNCH\E5488.GAB
%HOMEPATH%\ZSNCH\J73597.GNO
%HOMEPATH%\ZSNCH\P33879.JXT
%HOMEPATH%\ZSNCH\12075.WWS
%HOMEPATH%\ZSNCH\Q45380.BMT
%HOMEPATH%\ZSNCH\82128.VRD
%HOMEPATH%\ZSNCH\80208.TPW
%HOMEPATH%\ZSNCH\Y75051.JDD
%HOMEPATH%\ZSNCH\40063.GOV
%HOMEPATH%\ZSNCH\40626.OJX
%HOMEPATH%\ZSNCH\E46466.LVQ
%HOMEPATH%\ZSNCH\64080.CBK
%HOMEPATH%\ZSNCH\18074.YVC
%HOMEPATH%\ZSNCH\U71991.ONM
%HOMEPATH%\ZSNCH\C70482.CRG
%HOMEPATH%\ZSNCH\70349.EXR
%HOMEPATH%\ZSNCH\58020.LJI
%HOMEPATH%\ZSNCH\Y66196.PFZ
%HOMEPATH%\ZSNCH\R66388.SXN
%HOMEPATH%\ZSNCH\N67904.SRV
%HOMEPATH%\ZSNCH\M4905.NEO
%HOMEPATH%\ZSNCH\R80440.ZRC
%HOMEPATH%\ZSNCH\W17746.ENU
%HOMEPATH%\ZSNCH\R6353.QLY
%HOMEPATH%\ZSNCH\X10166.LMV
%HOMEPATH%\ZSNCH\57484.SOL
%HOMEPATH%\ZSNCH\44684.MEY
%HOMEPATH%\ZSNCH\O30914.LDS
%HOMEPATH%\ZSNCH\J71850.SVV
%HOMEPATH%\ZSNCH\89117.QTM
%HOMEPATH%\ZSNCH\64744.TBY
%HOMEPATH%\ZSNCH\Q73613.ISZ
%HOMEPATH%\ZSNCH\X85113.HMG
%HOMEPATH%\ZSNCH\H16935.SBW
%HOMEPATH%\ZSNCH\T9631.PEQ
%HOMEPATH%\ZSNCH\V66015.GHN
%HOMEPATH%\ZSNCH\U81804.ZUS
%HOMEPATH%\ZSNCH\K11330.QGI
%HOMEPATH%\ZSNCH\92169.FWC
%HOMEPATH%\ZSNCH\3525.HBM
%HOMEPATH%\ZSNCH\11695.XLC
%HOMEPATH%\ZSNCH\81972.VTM
%HOMEPATH%\ZSNCH\83697.AEO
%HOMEPATH%\ZSNCH\Y36013.PNZ
%HOMEPATH%\ZSNCH\B41243.NSD
%HOMEPATH%\ZSNCH\87751.PIB
%HOMEPATH%\ZSNCH\runner.vbs
%HOMEPATH%\ZSNCH\settings.ini
%HOMEPATH%\ZSNCH\Q16353.TFN
%HOMEPATH%\ZSNCH\30926.KNG
%HOMEPATH%\ZSNCH\17330.dat
%HOMEPATH%\ZSNCH\579442.dat
%HOMEPATH%\ZSNCH\926333.exe
%HOMEPATH%\ZSNCH\953779.dat
%HOMEPATH%\ZSNCH\G96918.PUX
%HOMEPATH%\ZSNCH\70544.LYI
%HOMEPATH%\ZSNCH\30558.MHO
%HOMEPATH%\ZSNCH\45950.ARH
%HOMEPATH%\ZSNCH\46588.WGH
%HOMEPATH%\ZSNCH\C33899.QIY
%HOMEPATH%\ZSNCH\O99575.PHZ
%HOMEPATH%\ZSNCH\60440.LBI
%HOMEPATH%\ZSNCH\94618.CFP
%HOMEPATH%\ZSNCH\94847.QVU
%HOMEPATH%\ZSNCH\10118.ZXB
%HOMEPATH%\ZSNCH\G37642.LOD
%HOMEPATH%\ZSNCH\J37916.GLG
%HOMEPATH%\ZSNCH\M64046.TJA
%HOMEPATH%\ZSNCH\T96344.LDO
%HOMEPATH%\ZSNCH\F55612.VBN
%HOMEPATH%\ZSNCH\68687.QNL
%HOMEPATH%\ZSNCH\U21940.NDK
%HOMEPATH%\ZSNCH\84725.UDE
%HOMEPATH%\ZSNCH\38086.WOE
%HOMEPATH%\ZSNCH\31862.NJM
%HOMEPATH%\ZSNCH\F12002.FAW
%HOMEPATH%\ZSNCH\N54542.KAF
%HOMEPATH%\ZSNCH\57948.NZT
%HOMEPATH%\ZSNCH\D20928.EGA
%HOMEPATH%\ZSNCH\I67573.SED
%HOMEPATH%\ZSNCH\V64895.PJO
%HOMEPATH%\ZSNCH\K44591.MZN
%HOMEPATH%\ZSNCH\61955.SCG
%HOMEPATH%\ZSNCH\49608.IUQ
%HOMEPATH%\ZSNCH\Q33206.RWS
%HOMEPATH%\ZSNCH\38687.VGW
%HOMEPATH%\ZSNCH\28595.OVR
%HOMEPATH%\ZSNCH\27849.BBD
%HOMEPATH%\ZSNCH\K92183.RGG
%HOMEPATH%\ZSNCH\I73262.EFQ
%HOMEPATH%\ZSNCH\94793.QMK
%HOMEPATH%\ZSNCH\19720.WMM
%HOMEPATH%\ZSNCH\A53009.BBH
%HOMEPATH%\ZSNCH\56056.CFN
%HOMEPATH%\ZSNCH\B31964.DXR
%HOMEPATH%\ZSNCH\M3849.ZVY
%HOMEPATH%\ZSNCH\93463.NZZ
%HOMEPATH%\ZSNCH\43444.TIF
%HOMEPATH%\ZSNCH\1529.YMH
%HOMEPATH%\ZSNCH\Y4977.FVT
%HOMEPATH%\ZSNCH\90898.RNF
%HOMEPATH%\ZSNCH\16196.OJS
%HOMEPATH%\ZSNCH\62732.QAC
%HOMEPATH%\ZSNCH\48663.ZUP
%HOMEPATH%\ZSNCH\24336.YNU
%HOMEPATH%\ZSNCH\3871.AMZ
%HOMEPATH%\ZSNCH\G2005.UEE
%HOMEPATH%\ZSNCH\87812.XPS
%HOMEPATH%\ZSNCH\M2470.KAU
%HOMEPATH%\ZSNCH\P46116.FNZ
%HOMEPATH%\ZSNCH\L98264.RDO
%HOMEPATH%\ZSNCH\12019.VDR
%HOMEPATH%\ZSNCH\J60492.UGZ
%HOMEPATH%\ZSNCH\U77917.LYX
%HOMEPATH%\ZSNCH\B46610.VQF
%HOMEPATH%\ZSNCH\87999.MIP
%HOMEPATH%\ZSNCH\67014.AME
%HOMEPATH%\ZSNCH\60317.GRD
%HOMEPATH%\ZSNCH\25710.JBE
%HOMEPATH%\ZSNCH\H48985.RBQ
%HOMEPATH%\ZSNCH\85454.JBV
%HOMEPATH%\ZSNCH\B72456.IKR
%HOMEPATH%\ZSNCH\Y53745.FME
%HOMEPATH%\ZSNCH\B84366.DNK
%HOMEPATH%\ZSNCH\F53323.WOT
%HOMEPATH%\ZSNCH\43601.COC
%HOMEPATH%\ZSNCH\Q6117.YYZ
%HOMEPATH%\ZSNCH\E68701.EQE
%HOMEPATH%\ZSNCH\97777.SEM
%HOMEPATH%\ZSNCH\20780.BNH
%HOMEPATH%\ZSNCH\E28291.KNR
%HOMEPATH%\ZSNCH\B50473.INF
%HOMEPATH%\ZSNCH\V43525.GTJ
%HOMEPATH%\ZSNCH\24957.HUP
%HOMEPATH%\ZSNCH\E87782.EZJ
%HOMEPATH%\ZSNCH\30545.XCR
%HOMEPATH%\ZSNCH\U24450.BBG
%HOMEPATH%\ZSNCH\34064.KHF
%HOMEPATH%\ZSNCH\32128.BOK
%HOMEPATH%\ZSNCH\H78364.LQG
%HOMEPATH%\ZSNCH\70425.ZTC
%HOMEPATH%\ZSNCH\79987.APQ
%HOMEPATH%\ZSNCH\P93662.RGP
%HOMEPATH%\ZSNCH\34654.OGL
%HOMEPATH%\ZSNCH\98153.RST
%HOMEPATH%\ZSNCH\L97070.XPJ
%HOMEPATH%\ZSNCH\86955.CAM
%HOMEPATH%\ZSNCH\M9599.LGR
%HOMEPATH%\ZSNCH\33655.GNC
%HOMEPATH%\ZSNCH\1227.UKG
%HOMEPATH%\ZSNCH\82701.KXS
%HOMEPATH%\ZSNCH\43656.JZN
%HOMEPATH%\ZSNCH\92355.GQZ
%HOMEPATH%\ZSNCH\76264.AEC
%HOMEPATH%\ZSNCH\G40059.XEX
%HOMEPATH%\ZSNCH\V69391.YJY
%HOMEPATH%\ZSNCH\94235.NXA
%HOMEPATH%\ZSNCH\85188.AHW
%HOMEPATH%\ZSNCH\50354.OPC
%HOMEPATH%\ZSNCH\M3357.NNJ
%HOMEPATH%\ZSNCH\V6963.CUL
%HOMEPATH%\ZSNCH\48538.HMS
%HOMEPATH%\ZSNCH\K1545.QEI
%HOMEPATH%\ZSNCH\P28544.GPM
%HOMEPATH%\ZSNCH\66371.OQU
%HOMEPATH%\ZSNCH\W4323.UBP
%HOMEPATH%\ZSNCH\K84656.NMW
%HOMEPATH%\ZSNCH\90646.QCD
%HOMEPATH%\ZSNCH\18662.YMW
%HOMEPATH%\ZSNCH\13865.LJV
%HOMEPATH%\ZSNCH\3483.FKY
%HOMEPATH%\ZSNCH\K7991.WPH
%HOMEPATH%\ZSNCH\7635.YGS
%HOMEPATH%\ZSNCH\14274.QEI
%HOMEPATH%\ZSNCH\93221.BUE
%HOMEPATH%\ZSNCH\5783.MXJ
%HOMEPATH%\ZSNCH\7596.PPR
%HOMEPATH%\ZSNCH\41335.PGT
%HOMEPATH%\ZSNCH\89649.RBE
%HOMEPATH%\ZSNCH\59333.CRM
%HOMEPATH%\ZSNCH\V83065.RFZ
%HOMEPATH%\ZSNCH\94299.CGU
%HOMEPATH%\ZSNCH\31071.QLF
%HOMEPATH%\ZSNCH\74181.WQI
%HOMEPATH%\ZSNCH\C65185.NEU
%HOMEPATH%\ZSNCH\91707.NHE
%HOMEPATH%\ZSNCH\M11187.WCR
%HOMEPATH%\ZSNCH\82510.KAR
%HOMEPATH%\ZSNCH\87702.QNG
%HOMEPATH%\ZSNCH\K13905.SXO
%HOMEPATH%\ZSNCH\N23229.RQK
%HOMEPATH%\ZSNCH\Z81533.YOB
%HOMEPATH%\ZSNCH\I46452.WCT
%HOMEPATH%\ZSNCH\27538.TRJ
%HOMEPATH%\ZSNCH\E83034.YQT
%HOMEPATH%\ZSNCH\H97673.VTZ
%HOMEPATH%\ZSNCH\14681.ZHQ
%HOMEPATH%\ZSNCH\P19969.LBW
%HOMEPATH%\ZSNCH\V81439.JQS
%HOMEPATH%\ZSNCH\P26177.LLK
%HOMEPATH%\ZSNCH\P34245.BNY
%HOMEPATH%\ZSNCH\E30251.DRE
%HOMEPATH%\ZSNCH\V87271.TZG
%HOMEPATH%\ZSNCH\78798.NLQ
%HOMEPATH%\ZSNCH\L48859.JSF
%HOMEPATH%\ZSNCH\P1306.JNP
%HOMEPATH%\ZSNCH\13892.WXE
%HOMEPATH%\ZSNCH\W64714.SQY
%HOMEPATH%\ZSNCH\65910.GCX
%HOMEPATH%\ZSNCH\K33057.RHN
%HOMEPATH%\ZSNCH\W89646.LOM
%HOMEPATH%\ZSNCH\X58900.XFY
%HOMEPATH%\ZSNCH\W75753.YTY
%HOMEPATH%\ZSNCH\18256.HRA
%HOMEPATH%\ZSNCH\X77757.KAO
%HOMEPATH%\ZSNCH\J33670.ZSV
%HOMEPATH%\ZSNCH\98459.NHQ
%HOMEPATH%\ZSNCH\M68213.VYD
%HOMEPATH%\ZSNCH\I75043.PCU
%HOMEPATH%\ZSNCH\L80800.TGV
%HOMEPATH%\ZSNCH\R46196.ILY
%HOMEPATH%\ZSNCH\27158.MOP
%HOMEPATH%\ZSNCH\R18183.KDI
%HOMEPATH%\ZSNCH\59471.XNI
%HOMEPATH%\ZSNCH\93607.NGK
%HOMEPATH%\ZSNCH\U45223.JEL
%HOMEPATH%\ZSNCH\Z32026.LMJ
%HOMEPATH%\ZSNCH\X73207.SQY
%HOMEPATH%\ZSNCH\63015.QYA
%HOMEPATH%\ZSNCH\96379.BJR
%HOMEPATH%\ZSNCH\N52196.HIF
%HOMEPATH%\ZSNCH\84649.YAO
%HOMEPATH%\ZSNCH\37169.ONG

Deletes the following files:

%APPDATA%\Microsoft\Windows\Jy4guu\Jy4guu.svr
%HOMEPATH%\ZSNCH\YICMOQSJ.dat

Network activity:

Connects to:

'zs####asd.no-ip.biz':3146
'localhost':1035

UDP:

DNS ASK zs####asd.no-ip.biz

Miscellaneous:

Searches for the following windows:

ClassName: '(null)' WindowName: '(null)'
ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'EDIT' WindowName: '(null)'

Technologies

Begriffe

Schulung und Training

Mythen

Technical Information

Curing recommendations

Free trial