Technical Information
- <Current directory>:{31006d00-6f00-2f00-4600-53002f004100}
- <Current directory>:{68006d00-6400-3800-5800-380036006a00}
- %ALLUSERSPROFILE%\isolated storage\{68006d00-6400-3800-5800-380036006a00}
- %TEMP%\<File name>.exe
- %TEMP%\eeeepppp
- %LOCALAPPDATA%\temp:{31006d00-6f00-2f00-4600-53002f004100}
- %ALLUSERSPROFILE%\isolated storage\{31006d00-6f00-2f00-4600-53002f004100}
- %LOCALAPPDATA%\temp:{68006d00-6400-3800-5800-380036006a00}
- <SYSTEM32>\fairr\fairreality troubleshooting.txt
- %TEMP%\eeeepppp
- %TEMP%\<File name>.exe
- <Full path to file>
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- DNS ASK fa###eality.vip
- DNS ASK ip##.#tfismyip.com
- DNS ASK ap#.#pify.org
- DNS ASK microsoft.com
- DNS ASK ip.#2.pl
- '%TEMP%\<File name>.exe' replace