Technical Information
Network activity
Connects to
- 'av##dex.net':80
- 'li##.twrank.com':80
- 'de##dol.com':80
- 'av##dex.net':443
- 's1.##count.com':80
- 's1#.#istats.com':80
- 's4.##stats.com':443
- 'microsoft.com':80
- 'x1.#.lencr.org':80
- 'r3.#.lencr.org':80
TCP
HTTP GET requests
- http://www.av##dex.net/avimg/banner/enter.jpg
- http://www.av##dex.net/avimg/banner/exit.jpg
- http://www.av###ank.com/468X132.asp?id###
- http://li##.twrank.com/framelinks.php?id#####
- http://www.de##dol.com/gl/head/00042.jpg
- http://www.de##dol.com/gl/head/00046.jpg
- http://s1.##count.com/stat.aspx?id################
- http://www.de##dol.com/gl/head/00045.jpg
- http://www.de##dol.com/gl/head/00043.jpg
- http://li##.twrank.com/js.js
- http://s1#.#istats.com/js15_as.js
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- http://x1.#.lencr.org/
- http://r3.#.lencr.org/MFMwUTBPME0wSzAJBgUrDgMCGgUABBRI2smg%2ByvTLU%2Fw3mjS9We3NfmzxAQUFC6zF7dYVsuuUAlA5h%2BvnYsUwsYCEgReii0y5V6Woa2hxaa0l8c3hw%3D%3D
Other
- 'av##dex.net':443
- 's4.##stats.com':443
UDP
- DNS ASK de##dol.com
- DNS ASK av##dex.net
- DNS ASK co######.myweb.hinet.net
- DNS ASK li##.twrank.com
- DNS ASK s1.##count.com
- DNS ASK av###ank.com
- DNS ASK s1#.#istats.com
- DNS ASK s4.##stats.com
- DNS ASK microsoft.com
- DNS ASK x1.#.lencr.org
- DNS ASK r3.#.lencr.org
Miscellaneous
Searches for the following windows
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
