Technical Information
Modifies file system
Creates the following files
- D:\windows\appcompat\programs\recentfilecache.bcf
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\mu3zpo1[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\2zcs6ne[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\b3r5io4[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\w8sakz8[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\9118yii[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\zkbfww7[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\l4ok4b7[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\8vidkn2[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\6qqoach[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\5vr89j4[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\kferg3v[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\gyg703g[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\n03cpv1[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\ixs0a8j[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\wske4we[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\zlwxkln[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\j72mu32[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\gd28my3[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\6oqg03d[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\cl8ml3s[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\nftk6f9[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\vf2otlt[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\0kbhkbh[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\a9l8yfh[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\t3dyzux[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\site_bg[1].gif
- D:\system volume information\syscache.hve.log1
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\embed[1].php
- D:\system volume information\syscache.hve
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\byo7qq7[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\jnoyijn[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\3vom9a5[1].jpg
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\f07644e38ed7c9f37d11eec6d4335e02_9b2ad33cba8fc50dd8d8b0635b46183d
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\f07644e38ed7c9f37d11eec6d4335e02_9b2ad33cba8fc50dd8d8b0635b46183d
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\js[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\hqghqrd[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\0oeer0b[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\infinity.js[1].aspx
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\u8a8y0z[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\sg76x8t[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\d80ur9e[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\hwpqzk2[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\lg7zpaq[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\lfn32ji[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\u4ch9b6[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\e4da5px[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\gmy10tn[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\1xozw9w[1].jpg
- D:\windows\system32\winevt\logs\system.evtx
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\vwuoxqi[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\4ivteyi[1].jpg
- D:\windows\system32\winevt\logs\microsoft-windows-networkprofile%4operational.evtx
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\gttzqbk[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\8ig4x76[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\0xoslao[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\u12vemk[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\n5kv18m[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\n034csq[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\80dparf[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\120x60_rta-5042-1996-1400-1577-rta_c[1].gif
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\corner_left[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\grad_bg[1].gif
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\2gcpw40[1].jpg
- D:\windows\system32\winevt\logs\application.evtx
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\ea618097e393409afa316f0f87e2c202_1e65fd33f74047223af4d58cbfd34bce
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\ea618097e393409afa316f0f87e2c202_1e65fd33f74047223af4d58cbfd34bce
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\tptp96w[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\co5hr19[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\6ub6pc7[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\hfipwl9[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\gqwexdz[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\qflhuv7[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\38ese8q[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\gyzpvnt[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\doevd3q[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\0kdnudg[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\g3d2lsx[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\dra6e4q[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\utrqv8n[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\wcrqz2l[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\hxs8qdn[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\qtrh55a[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\flzs6pk[1].jpg
- D:\windows\system32\winevt\logs\security.evtx
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\8qure0n[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\y1qkd6j[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\dvbtoof[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\05x10h8[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\ye9lhgh[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\jqpg36o[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\x0ees41[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\0loo2ls[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\owwims0[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\qaf9sow[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\13rb8sh[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\uuu4a9z[1].jpg
- D:\users\user\appdata\local\temp\cab58ba.tmp
- D:\users\user\appdata\local\temp\tar58bb.tmp
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\24bd96d5497f70b3f510a6b53cd43f3e_3a89246fb90c5ee6620004f1ae0eb0ea
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\24bd96d5497f70b3f510a6b53cd43f3e_3a89246fb90c5ee6620004f1ae0eb0ea
- D:\users\user\appdata\local\temp\cab5a80.tmp
- D:\users\user\appdata\local\temp\tar5a81.tmp
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\caf4703619713e3f18d8a9d5d88d6288_a7725538c46de2d0088ee44974e2ceba
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\caf4703619713e3f18d8a9d5d88d6288_a7725538c46de2d0088ee44974e2ceba
- D:\users\user\ntuser.dat.log1
- D:\users\user\ntuser.dat
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\265c0deb29181dd1891051371c5f863a_91df16218bac821a4575d2f721820baa
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\265c0deb29181dd1891051371c5f863a_91df16218bac821a4575d2f721820baa
- D:\users\user\appdata\local\temp\cab5d9e.tmp
- D:\users\user\appdata\local\temp\tar5d9f.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\jquery.min[1].js
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\6bada8974a10c4bd62cc921d13e43b18_78d977680f0a854594ceee125bc2e56e
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\6bada8974a10c4bd62cc921d13e43b18_78d977680f0a854594ceee125bc2e56e
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\bootstrap.min[1].css
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\glyphicons-halflings-regular[1].eot
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\bootstrap.min[1].js
- D:\users\user\appdata\local\temp\cab584b.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\bootstrap.min[1].js
- D:\users\user\appdata\local\temp\tar56e3.tmp
- D:\users\user\appdata\local\temp\tar5645.tmp
- D:\windows\system32\config\software.log1
- D:\windows\system32\config\software
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@~~local~~[1].txt
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\stylesheet[1].css
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\bootstrap.min[1].css
- D:\users\user\appdata\local\temp\cab4d64.tmp
- D:\users\user\appdata\local\temp\tar4d65.tmp
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\4a9377e7e528f7e56b69a81c500abc24
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\4a9377e7e528f7e56b69a81c500abc24
- D:\users\user\appdata\local\temp\cab5091.tmp
- D:\users\user\appdata\local\temp\tar5092.tmp
- D:\windows\system32\config\system.log1
- D:\windows\system32\config\system
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\94308059b57b3142e455b38a6eb92015
- D:\users\user\appdata\local\temp\cab51bc.tmp
- D:\users\user\appdata\local\temp\tar51bd.tmp
- D:\users\user\appdata\local\temp\cab52f6.tmp
- D:\users\user\appdata\local\temp\tar52f7.tmp
- D:\users\user\appdata\local\temp\cab5410.tmp
- D:\users\user\appdata\local\temp\tar5411.tmp
- D:\users\user\appdata\local\temp\cab5644.tmp
- D:\users\user\appdata\local\temp\cab56e2.tmp
- D:\users\user\appdata\local\microsoft\windows\usrclass.dat.log1
- D:\users\user\appdata\local\temp\tar584c.tmp
- D:\users\user\appdata\local\microsoft\windows\usrclass.dat
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\warning[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\logo_mobile[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\error[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\adshow[2].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\warning[1]
- D:\users\user\appdata\local\temp\cab7c7c.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\ikojige[1].jpg
- D:\users\user\appdata\local\temp\tar7c7d.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\adshow[2].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\yfljrss[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\arux0x2[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\re4pe3j[1].jpg
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\b2faf7692fd9ffbd64ede317e42334ba_d7393c8f62bde4d4cb606228bc7a711e
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\b2faf7692fd9ffbd64ede317e42334ba_d7393c8f62bde4d4cb606228bc7a711e
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\hx3vq1y[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\ui6a0tb[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\0ound5e[1].jpg
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\07cef2f654e3ed6050ffc9b6eb844250_3431d4c539fb2cfcb781821e9902850d
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\07cef2f654e3ed6050ffc9b6eb844250_3431d4c539fb2cfcb781821e9902850d
- D:\users\user\appdata\local\temp\cab7af4.tmp
- D:\users\user\appdata\local\temp\tar7aa5.tmp
- D:\users\user\appdata\local\temp\tar7af5.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\error[1]
- D:\users\user\appdata\local\temp\cab7aa4.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\analytics[1].js
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\reklame[1].js
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\logo[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\mootools.svn[1].js
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[1].txt
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[2].txt
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\premium2[1].php
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\corner[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\adshow[1].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\logo1[1].jpg
- D:\users\user\appdata\local\temp\cab792b.tmp
- D:\users\user\appdata\local\temp\tar792c.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\adshow[1].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\logo2[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\adshow[1].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\adshow[1].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\pop[1].js
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\warning[2]
- D:\windows\serviceprofiles\localservice\appdata\local\lastalive0.dat
Deletes the following files
- D:\users\user\appdata\local\temp\cab4d64.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\warning[1]
- D:\users\user\appdata\local\temp\cab792b.tmp
- D:\users\user\appdata\local\temp\tar792c.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\warning[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\error[1]
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[2].txt
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[1]
- D:\users\user\appdata\local\temp\cab7aa4.tmp
- D:\users\user\appdata\local\temp\cab7af4.tmp
- D:\users\user\appdata\local\temp\tar7af5.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\warning[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\error[2]
- D:\users\user\appdata\local\temp\cab7c7c.tmp
- D:\users\user\appdata\local\temp\tar7c7d.tmp
- D:\users\user\appdata\local\temp\tar7aa5.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\warning[1]
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[1].txt
- D:\users\user\appdata\local\temp\tar5d9f.tmp
- D:\users\user\appdata\local\temp\cab5d9e.tmp
- D:\users\user\appdata\local\temp\cab5091.tmp
- D:\users\user\appdata\local\temp\tar5092.tmp
- D:\users\user\appdata\local\temp\cab51bc.tmp
- D:\users\user\appdata\local\temp\tar51bd.tmp
- D:\users\user\appdata\local\temp\cab52f6.tmp
- D:\users\user\appdata\local\temp\tar52f7.tmp
- D:\users\user\appdata\local\temp\cab5410.tmp
- D:\users\user\appdata\local\temp\tar5411.tmp
- D:\users\user\appdata\local\temp\tar4d65.tmp
- D:\users\user\appdata\local\temp\cab5644.tmp
- D:\users\user\appdata\local\temp\cab56e2.tmp
- D:\users\user\appdata\local\temp\tar56e3.tmp
- D:\users\user\appdata\local\temp\cab584b.tmp
- D:\users\user\appdata\local\temp\tar584c.tmp
- D:\users\user\appdata\local\temp\cab58ba.tmp
- D:\users\user\appdata\local\temp\tar58bb.tmp
- D:\users\user\appdata\local\temp\cab5a80.tmp
- D:\users\user\appdata\local\temp\tar5a81.tmp
- D:\users\user\appdata\local\temp\tar5645.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\warning[1]
Substitutes the following files
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[1].txt
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[2].txt
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\warning[1]
Network activity
Connects to
- 'ma####.bootstrapcdn.com':443
- 'aj##.#oogleapis.com':443
- 'se###tape.net':80
- 'pk#.goog':80
- 'go#####a###ytics.com':80
- 'c1.##pads.net':80
- 'sy######ion.exoclick.com':80
- 'ad#####r.juicyads.com':80
- 'em###.fuqer.com':80
- 'em###.fuqer.com':443
- 'cd#.##uidplayer.com':443
- 'go#####agmanager.com':443
- 'cd#.#####e.phn.doublepimp.com':443
TCP
HTTP GET requests
- http://www.se###tape.net/css/bootstrap.min.css
- http://www.se###tape.net/thumbs/dra6e4q.jpg
- http://www.se###tape.net/thumbs/g3d2lsx.jpg
- http://www.se###tape.net/thumbs/0kdnudg.jpg
- http://www.se###tape.net/thumbs/doevd3q.jpg
- http://www.se###tape.net/thumbs/gyzpvnt.jpg
- http://www.se###tape.net/thumbs/qflhuv7.jpg
- http://www.se###tape.net/thumbs/38ese8q.jpg
- http://www.se###tape.net/thumbs/0loo2ls.jpg
- http://www.se###tape.net/thumbs/vwuoxqi.jpg
- http://www.se###tape.net/thumbs/6ub6pc7.jpg
- http://www.se###tape.net/thumbs/hfipwl9.jpg
- http://www.se###tape.net/thumbs/nftk6f9.jpg
- http://www.se###tape.net/thumbs/cl8ml3s.jpg
- http://www.se###tape.net/thumbs/gd28my3.jpg
- http://www.se###tape.net/thumbs/6oqg03d.jpg
- http://www.se###tape.net/thumbs/j72mu32.jpg
- http://www.se###tape.net/thumbs/zlwxkln.jpg
- http://www.se###tape.net/thumbs/wske4we.jpg
- http://www.se###tape.net/thumbs/ixs0a8j.jpg
- http://www.se###tape.net/thumbs/n03cpv1.jpg
- http://www.se###tape.net/thumbs/gyg703g.jpg
- http://www.se###tape.net/thumbs/kferg3v.jpg
- http://www.se###tape.net/thumbs/5vr89j4.jpg
- http://www.se###tape.net/thumbs/utrqv8n.jpg
- http://www.se###tape.net/thumbs/wcrqz2l.jpg
- http://www.se###tape.net/thumbs/hxs8qdn.jpg
- http://www.se###tape.net/thumbs/qtrh55a.jpg
- http://www.se###tape.net/images/corner_left.jpg
- http://www.se###tape.net/images/corner.jpg
- http://www.se###tape.net/css/images/box_skin_mini.gif
- http://www.se###tape.net/images/120x60_RTA-5042-1996-1400-1577-RTA_c.gif
- http://www.se###tape.net/thumbs/80dparf.jpg
- http://www.se###tape.net/thumbs/n034csq.jpg
- http://www.se###tape.net/thumbs/n5kv18m.jpg
- http://www.se###tape.net/thumbs/u12vemk.jpg
- http://www.se###tape.net/thumbs/0xoslao.jpg
- http://www.se###tape.net/thumbs/8ig4x76.jpg
- http://www.se###tape.net/thumbs/gttzqbk.jpg
- http://www.se###tape.net/thumbs/co5hr19.jpg
- http://www.se###tape.net/thumbs/4ivteyi.jpg
- http://www.se###tape.net/thumbs/tptp96w.jpg
- http://www.se###tape.net/thumbs/owwims0.jpg
- http://www.se###tape.net/thumbs/x0ees41.jpg
- http://www.se###tape.net/thumbs/jqpg36o.jpg
- http://www.se###tape.net/thumbs/gqwexdz.jpg
- http://www.se###tape.net/thumbs/ye9lhgh.jpg
- http://www.se###tape.net/thumbs/05x10h8.jpg
- http://www.se###tape.net/thumbs/dvbtoof.jpg
- http://www.se###tape.net/thumbs/y1qkd6j.jpg
- http://www.se###tape.net/thumbs/flzs6pk.jpg
- http://www.se###tape.net/thumbs/8qure0n.jpg
- http://www.se###tape.net/images/grad_bg.gif
- http://www.se###tape.net/thumbs/8vidkn2.jpg
- http://www.se###tape.net/thumbs/6qqoach.jpg
- http://www.se###tape.net/thumbs/l4ok4b7.jpg
- http://www.se###tape.net/thumbs/0ound5e.jpg
- http://www.se###tape.net/thumbs/ui6a0tb.jpg
- http://www.se###tape.net/thumbs/hx3vq1y.jpg
- http://www.se###tape.net/thumbs/re4pe3j.jpg
- http://www.se###tape.net/thumbs/arux0x2.jpg
- http://www.se###tape.net/thumbs/yfljrss.jpg
- http://www.se###tape.net/thumbs/ikojige.jpg
- http://www.se###tape.net/images/logo_mobile.jpg
- http://www.se###tape.net/images/logo2.jpg
- http://www.se###tape.net/images/logo1.jpg
- http://www.se###tape.net/premium2.php
- http://em###.fuqer.com/vid/1730/
- http://sy######ion.exoclick.com/splash.php?id###################
- http://ad#####r.juicyads.com/adshow.php?ad###########
- http://www.se###tape.net/images/logo.jpg
- http://www.se###tape.net/webmasters/mootools.svn.js
- http://www.se###tape.net/reklame.js
- http://c1.##pads.net/pop.js
- http://www.go#####a###ytics.com/a###ytics.js
- http://www.se###tape.net/js/bootstrap.min.js
- http://pk#.goog/gsr1/gsr1.crt
- http://www.se###tape.net/fonts/glyphicons-halflings-regular.eot?
- http://www.se###tape.net/css/stylesheet.css
- http://www.se###tape.net/thumbs/uuu4a9z.jpg
- http://www.se###tape.net/thumbs/13rb8sh.jpg
- http://www.se###tape.net/thumbs/qaf9sow.jpg
- http://www.se###tape.net/thumbs/0kbhkbh.jpg
- http://www.se###tape.net/thumbs/9118yii.jpg
- http://www.se###tape.net/thumbs/w8sakz8.jpg
- http://www.se###tape.net/thumbs/b3r5io4.jpg
- http://www.se###tape.net/thumbs/2zcs6ne.jpg
- http://www.se###tape.net/thumbs/mu3zpo1.jpg
- http://www.se###tape.net/thumbs/vf2otlt.jpg
- http://www.se###tape.net/thumbs/a9l8yfh.jpg
- http://www.se###tape.net/thumbs/gmy10tn.jpg
- http://www.se###tape.net/thumbs/t3dyzux.jpg
- http://www.se###tape.net/thumbs/e4da5px.jpg
- http://www.se###tape.net/thumbs/u4ch9b6.jpg
- http://www.se###tape.net/thumbs/lg7zpaq.jpg
- http://www.se###tape.net/thumbs/lfn32ji.jpg
- http://www.se###tape.net/thumbs/hwpqzk2.jpg
- http://www.se###tape.net/thumbs/d80ur9e.jpg
- http://www.se###tape.net/thumbs/sg76x8t.jpg
- http://www.se###tape.net/thumbs/u8a8y0z.jpg
- http://www.se###tape.net/thumbs/0oeer0b.jpg
- http://www.se###tape.net/thumbs/hqghqrd.jpg
- http://www.se###tape.net/thumbs/3vom9a5.jpg
- http://www.se###tape.net/thumbs/jnoyijn.jpg
- http://www.se###tape.net/thumbs/byo7qq7.jpg
- http://www.se###tape.net/images/site_bg.gif
- http://www.se###tape.net/thumbs/1xozw9w.jpg
- http://www.se###tape.net/thumbs/zkbfww7.jpg
- http://www.se###tape.net/thumbs/2gcpw40.jpg
Other
- 'ma####.bootstrapcdn.com':443
- 'aj##.#oogleapis.com':443
- 'em###.fuqer.com':443
- 'cd#.##uidplayer.com':443
- 'go#####agmanager.com':443
- 'cd#.#####e.phn.doublepimp.com':443
UDP
- DNS ASK se###tape.net
- DNS ASK ma####.bootstrapcdn.com
- DNS ASK aj##.#oogleapis.com
- DNS ASK pk#.goog
- DNS ASK os#.#axcdn.com
- DNS ASK go#####a###ytics.com
- DNS ASK c1.##pads.net
- DNS ASK sy######ion.exoclick.com
- DNS ASK em###.fuqer.com
- DNS ASK ad#####r.juicyads.com
- DNS ASK fu##r.com
- DNS ASK cd#.##uidplayer.com
- DNS ASK go#####agmanager.com
- DNS ASK cd#.#####e.phn.doublepimp.com
Miscellaneous
Searches for the following windows
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
