Technical Information
Modifies file system
Creates the following files
- D:\users\user\appdata\roaming\mozilla\firefox\profiles\0j9e9tku.default-release\sitesecurityservicestate.txt
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\dieao2x[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\zothmlq[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\7tjkwff[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\hqghqrd[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\8ig4x76[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\svabgs8[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\2olncsz[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\gnwndu4[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\m31h87w[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\yalmb4d[1].jpg
- D:\windows\system32\winevt\logs\system.evtx
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\rf5432f[1].jpg
- D:\windows\system32\config\system
- D:\windows\system32\winevt\logs\security.evtx
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\on1784w[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\saw70i8[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\2nondsz[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\t85uuiv[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\gbs44za[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\pfnmafa[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\x4e3fxy[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\el6ahk7[1].jpg
- D:\windows\system32\config\system.log1
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\ty8v9uf[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\bfbre3h[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\etj6lky[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\oxuus93[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\8f3g53t[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\p5pcz65[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\rmpwbfj[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\wggc2qr[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\rvy271i[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\2pucozm[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\nbb91k4[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\g4hegp5[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\c51iqf8[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\ldganmx[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\71whu4z[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\pwp9ia0[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\e8cbl10[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\y17q3kf[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\gd28my3[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\52w8e92[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\8vidkn2[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\5vr89j4[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\gdyc21h[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\doevd3q[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\dra6e4q[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\a0lbgwr[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\hmm1bpz[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\0zb5fj9[1].jpg
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\fi6fbsm[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\cl8ml3s[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\jfx5d2c[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\0z0y7cv[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\lzb0do8[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\uy3xtvq[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\m1wxpfs[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\u4ch9b6[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\6ub6pc7[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\qxkicka[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\63ovftu[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\6rjhg44[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\p4910oi[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\corner_left[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\grad_bg[1].gif
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\d80ur9e[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\lfn32ji[1].jpg
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\ea618097e393409afa316f0f87e2c202_1e65fd33f74047223af4d58cbfd34bce
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\ea618097e393409afa316f0f87e2c202_1e65fd33f74047223af4d58cbfd34bce
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\120x60_rta-5042-1996-1400-1577-rta_c[1].gif
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\corner[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\kzjr243[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\cle932z[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\osbo7y5[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\6ox678c[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\snh2vpd[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\8sw2en3[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\82jugk1[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\ezw3kqm[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\bovoeiz[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\c6tjtuy[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\4jvyv8w[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\8wbvpvq[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\iwiqcc6[1].jpg
- D:\windows\system32\winevt\logs\microsoft-windows-networkprofile%4operational.evtx
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\7biqg3u[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\4b6pnp6[1].jpg
- D:\windows\system32\winevt\logs\application.evtx
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\e0h7lj1[1].jpg
- D:\windows\system32\config\software.log1
- D:\windows\system32\config\software
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\70a0wdh[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\s83ewfw[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\b1yx151[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\z1m60pk[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\11lnh9z[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\e8wabs3[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\j72mu32[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\4392hrg[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\0ti8by5[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\reklame[1].js
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\caf4703619713e3f18d8a9d5d88d6288_a7725538c46de2d0088ee44974e2ceba
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\caf4703619713e3f18d8a9d5d88d6288_a7725538c46de2d0088ee44974e2ceba
- D:\users\user\appdata\local\temp\cab7b59.tmp
- D:\users\user\appdata\local\temp\tar7b6a.tmp
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\265c0deb29181dd1891051371c5f863a_91df16218bac821a4575d2f721820baa
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\265c0deb29181dd1891051371c5f863a_91df16218bac821a4575d2f721820baa
- D:\users\user\appdata\local\temp\cab7b99.tmp
- D:\users\user\appdata\local\temp\tar7b9a.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\jquery.min[1].js
- D:\users\user\appdata\local\temp\tar7965.tmp
- D:\users\user\ntuser.dat
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\6bada8974a10c4bd62cc921d13e43b18_78d977680f0a854594ceee125bc2e56e
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\glyphicons-halflings-regular[1].eot
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\bootstrap.min[1].js
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\bootstrap.min[1].js
- D:\users\user\appdata\local\microsoft\windows\usrclass.dat.log1
- D:\users\user\appdata\local\microsoft\windows\usrclass.dat
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\analytics[1].js
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\pop[1].js
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\error[1]
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\6bada8974a10c4bd62cc921d13e43b18_78d977680f0a854594ceee125bc2e56e
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\bootstrap.min[1].css
- D:\users\user\appdata\local\temp\cab7954.tmp
- D:\users\user\ntuser.dat.log1
- D:\users\user\appdata\local\temp\tar7888.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\bootstrap.min[1].css
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\stylesheet[1].css
- D:\users\user\appdata\local\temp\cab6fd2.tmp
- D:\users\user\appdata\local\temp\tar6fd3.tmp
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\4a9377e7e528f7e56b69a81c500abc24
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\4a9377e7e528f7e56b69a81c500abc24
- D:\users\user\appdata\local\temp\cab7273.tmp
- D:\users\user\appdata\local\temp\tar7274.tmp
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\94308059b57b3142e455b38a6eb92015
- D:\users\user\appdata\local\temp\cab72b3.tmp
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@~~local~~[1].txt
- D:\users\user\appdata\local\temp\tar72b4.tmp
- D:\users\user\appdata\local\temp\tar7343.tmp
- D:\users\user\appdata\local\temp\cab741e.tmp
- D:\users\user\appdata\local\temp\tar742f.tmp
- D:\users\user\appdata\local\temp\cab74db.tmp
- D:\users\user\appdata\local\temp\tar74dc.tmp
- D:\users\user\appdata\local\temp\cab75b8.tmp
- D:\users\user\appdata\local\temp\tar75b9.tmp
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\24bd96d5497f70b3f510a6b53cd43f3e_3a89246fb90c5ee6620004f1ae0eb0ea
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\24bd96d5497f70b3f510a6b53cd43f3e_3a89246fb90c5ee6620004f1ae0eb0ea
- D:\users\user\appdata\local\temp\cab7878.tmp
- D:\users\user\appdata\local\temp\cab7342.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\logo[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\sh8c7qo[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\mootools.svn[1].js
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\adshow[1].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\error[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\act6chd[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\8u8byou[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\jwrhkh5[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\vf2otlt[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\adshow[1].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\error[1]
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[1].txt
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[2].txt
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\adshow[1].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\mu3zpo1[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\2zcs6ne[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\adshow[2].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\o9cldxs[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\6tdvj4v[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\adshow[2].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\jz874rl[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\1ev6btb[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\gttzqbk[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\e4da5px[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\ewqr2xa[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\logo2[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\logo_mobile[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\yl35r6h[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\15a42q6[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\ui6a0tb[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\9snatqt[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\8bksyrc[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\re4pe3j[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\ikojige[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\site_bg[1].gif
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\logo1[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\uuu4a9z[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\tb4kcrl[1].jpg
- D:\system volume information\syscache.hve.log1
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\jnoyijn[1].jpg
- D:\system volume information\syscache.hve
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\mxauv3u[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\b9er4dx[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\yippj8v[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\sg76x8t[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\dejlkc2[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\lyulps6[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\1d9w4tc[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\tq1c5ti[1].jpg
- D:\windows\serviceprofiles\localservice\appdata\local\lastalive0.dat
Deletes the following files
- D:\users\user\appdata\local\temp\cab6fd2.tmp
- D:\users\user\appdata\local\temp\cab7b59.tmp
- D:\users\user\appdata\local\temp\tar7b6a.tmp
- D:\users\user\appdata\local\temp\cab7b99.tmp
- D:\users\user\appdata\local\temp\tar7b9a.tmp
- D:\users\user\appdata\roaming\mozilla\firefox\profiles\0j9e9tku.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite-wal
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[1].txt
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[1]
- D:\users\user\appdata\local\temp\cab741e.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\error[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\error[1]
- D:\users\user\appdata\local\temp\tar7965.tmp
- D:\users\user\appdata\local\temp\cab7954.tmp
- D:\users\user\appdata\local\temp\tar7888.tmp
- D:\users\user\appdata\local\temp\cab7878.tmp
- D:\users\user\appdata\local\temp\tar75b9.tmp
- D:\users\user\appdata\local\temp\cab75b8.tmp
- D:\users\user\appdata\local\temp\tar74dc.tmp
- D:\users\user\appdata\local\temp\cab74db.tmp
- D:\users\user\appdata\local\temp\tar742f.tmp
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[2].txt
- D:\users\user\appdata\local\temp\tar7343.tmp
- D:\users\user\appdata\local\temp\cab7342.tmp
- D:\users\user\appdata\local\temp\tar72b4.tmp
- D:\users\user\appdata\local\temp\cab72b3.tmp
- D:\users\user\appdata\local\temp\tar7274.tmp
- D:\users\user\appdata\local\temp\cab7273.tmp
- D:\users\user\appdata\local\temp\tar6fd3.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\warning[1]
Substitutes the following files
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[1].txt
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[2].txt
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\error[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\warning[1]
Network activity
Connects to
- 'ma####.bootstrapcdn.com':443
- 'aj##.#oogleapis.com':443
- 'se###tape.net':80
- 'pk#.goog':80
- 'go#####a###ytics.com':80
- 'c1.##pads.net':80
- 'sy######ion.exoclick.com':80
- 'ad#####r.juicyads.com':80
TCP
HTTP GET requests
- http://www.se###tape.net/css/bootstrap.min.css
- http://www.se###tape.net/thumbs/on1784w.jpg
- http://www.se###tape.net/thumbs/saw70i8.jpg
- http://www.se###tape.net/thumbs/2nondsz.jpg
- http://www.se###tape.net/thumbs/t85uuiv.jpg
- http://www.se###tape.net/thumbs/gbs44za.jpg
- http://www.se###tape.net/thumbs/pfnmafa.jpg
- http://www.se###tape.net/thumbs/hmm1bpz.jpg
- http://www.se###tape.net/thumbs/zothmlq.jpg
- http://www.se###tape.net/thumbs/4392hrg.jpg
- http://www.se###tape.net/thumbs/0zb5fj9.jpg
- http://www.se###tape.net/thumbs/fi6fbsm.jpg
- http://www.se###tape.net/thumbs/6ox678c.jpg
- http://www.se###tape.net/thumbs/snh2vpd.jpg
- http://www.se###tape.net/thumbs/8sw2en3.jpg
- http://www.se###tape.net/thumbs/el6ahk7.jpg
- http://www.se###tape.net/thumbs/rf5432f.jpg
- http://www.se###tape.net/thumbs/m31h87w.jpg
- http://www.se###tape.net/thumbs/gnwndu4.jpg
- http://www.se###tape.net/thumbs/2olncsz.jpg
- http://www.se###tape.net/thumbs/svabgs8.jpg
- http://www.se###tape.net/thumbs/8ig4x76.jpg
- http://www.se###tape.net/thumbs/hqghqrd.jpg
- http://www.se###tape.net/thumbs/7tjkwff.jpg
- http://www.se###tape.net/thumbs/x4e3fxy.jpg
- http://www.se###tape.net/thumbs/dieao2x.jpg
- http://www.se###tape.net/thumbs/yalmb4d.jpg
- http://www.se###tape.net/thumbs/ty8v9uf.jpg
- http://www.se###tape.net/thumbs/bfbre3h.jpg
- http://www.se###tape.net/thumbs/etj6lky.jpg
- http://www.se###tape.net/thumbs/dra6e4q.jpg
- http://www.se###tape.net/thumbs/doevd3q.jpg
- http://www.se###tape.net/thumbs/82jugk1.jpg
- http://www.se###tape.net/thumbs/70a0wdh.jpg
- http://www.se###tape.net/thumbs/d80ur9e.jpg
- http://www.se###tape.net/thumbs/c6tjtuy.jpg
- http://www.se###tape.net/thumbs/cl8ml3s.jpg
- http://www.se###tape.net/thumbs/jfx5d2c.jpg
- http://www.se###tape.net/thumbs/0z0y7cv.jpg
- http://www.se###tape.net/thumbs/lzb0do8.jpg
- http://www.se###tape.net/thumbs/uy3xtvq.jpg
- http://www.se###tape.net/thumbs/m1wxpfs.jpg
- http://www.se###tape.net/thumbs/6ub6pc7.jpg
- http://www.se###tape.net/thumbs/ezw3kqm.jpg
- http://www.se###tape.net/thumbs/qxkicka.jpg
- http://www.se###tape.net/thumbs/p4910oi.jpg
- http://www.se###tape.net/images/120x60_RTA-5042-1996-1400-1577-RTA_c.gif
- http://www.se###tape.net/images/corner.jpg
- http://www.se###tape.net/images/corner_left.jpg
- http://www.se###tape.net/images/grad_bg.gif
- http://www.se###tape.net/thumbs/6rjhg44.jpg
- http://www.se###tape.net/thumbs/63ovftu.jpg
- http://www.se###tape.net/thumbs/kzjr243.jpg
- http://www.se###tape.net/thumbs/cle932z.jpg
- http://www.se###tape.net/thumbs/osbo7y5.jpg
- http://www.se###tape.net/thumbs/11lnh9z.jpg
- http://www.se###tape.net/thumbs/z1m60pk.jpg
- http://www.se###tape.net/thumbs/b1yx151.jpg
- http://www.se###tape.net/thumbs/s83ewfw.jpg
- http://www.se###tape.net/thumbs/gdyc21h.jpg
- http://www.se###tape.net/thumbs/e0h7lj1.jpg
- http://www.se###tape.net/thumbs/4b6pnp6.jpg
- http://www.se###tape.net/thumbs/e8wabs3.jpg
- http://www.se###tape.net/thumbs/7biqg3u.jpg
- http://www.se###tape.net/thumbs/iwiqcc6.jpg
- http://www.se###tape.net/thumbs/8wbvpvq.jpg
- http://www.se###tape.net/thumbs/4jvyv8w.jpg
- http://www.se###tape.net/thumbs/bovoeiz.jpg
- http://www.se###tape.net/thumbs/u4ch9b6.jpg
- http://www.se###tape.net/thumbs/5vr89j4.jpg
- http://www.se###tape.net/thumbs/g4hegp5.jpg
- http://www.se###tape.net/thumbs/8bksyrc.jpg
- http://www.se###tape.net/thumbs/9snatqt.jpg
- http://www.se###tape.net/thumbs/re4pe3j.jpg
- http://www.se###tape.net/thumbs/ikojige.jpg
- http://www.se###tape.net/images/site_bg.gif
- http://www.se###tape.net/thumbs/uuu4a9z.jpg
- http://www.se###tape.net/thumbs/tb4kcrl.jpg
- http://sy######ion.exoclick.com/splash.php?id###################
- http://www.se###tape.net/thumbs/jnoyijn.jpg
- http://www.se###tape.net/thumbs/mxauv3u.jpg
- http://www.se###tape.net/thumbs/yippj8v.jpg
- http://www.se###tape.net/thumbs/b9er4dx.jpg
- http://www.se###tape.net/thumbs/dejlkc2.jpg
- http://www.se###tape.net/thumbs/sg76x8t.jpg
- http://www.se###tape.net/thumbs/ui6a0tb.jpg
- http://www.se###tape.net/thumbs/15a42q6.jpg
- http://www.se###tape.net/thumbs/yl35r6h.jpg
- http://www.se###tape.net/images/logo_mobile.jpg
- http://www.se###tape.net/images/logo2.jpg
- http://www.se###tape.net/images/logo1.jpg
- http://ad#####r.juicyads.com/adshow.php?ad###########
- http://www.se###tape.net/images/logo.jpg
- http://www.se###tape.net/webmasters/mootools.svn.js
- http://www.se###tape.net/thumbs/1d9w4tc.jpg
- http://www.se###tape.net/reklame.js
- http://c1.##pads.net/pop.js
- http://www.go#####a###ytics.com/a###ytics.js
- http://www.se###tape.net/js/bootstrap.min.js
- http://www.se###tape.net/fonts/glyphicons-halflings-regular.eot?
- http://pk#.goog/gsr1/gsr1.crt
- http://www.se###tape.net/css/stylesheet.css
- http://www.se###tape.net/thumbs/ewqr2xa.jpg
- http://www.se###tape.net/thumbs/6tdvj4v.jpg
- http://www.se###tape.net/thumbs/52w8e92.jpg
- http://www.se###tape.net/thumbs/e4da5px.jpg
- http://www.se###tape.net/thumbs/p5pcz65.jpg
- http://www.se###tape.net/thumbs/rmpwbfj.jpg
- http://www.se###tape.net/thumbs/wggc2qr.jpg
- http://www.se###tape.net/thumbs/rvy271i.jpg
- http://www.se###tape.net/thumbs/2pucozm.jpg
- http://www.se###tape.net/thumbs/nbb91k4.jpg
- http://www.se###tape.net/thumbs/c51iqf8.jpg
- http://www.se###tape.net/thumbs/lyulps6.jpg
- http://www.se###tape.net/thumbs/71whu4z.jpg
- http://www.se###tape.net/thumbs/a0lbgwr.jpg
- http://www.se###tape.net/thumbs/pwp9ia0.jpg
- http://www.se###tape.net/thumbs/e8cbl10.jpg
- http://www.se###tape.net/thumbs/y17q3kf.jpg
- http://www.se###tape.net/thumbs/gd28my3.jpg
- http://www.se###tape.net/thumbs/8f3g53t.jpg
- http://www.se###tape.net/thumbs/oxuus93.jpg
- http://www.se###tape.net/thumbs/ldganmx.jpg
- http://www.se###tape.net/thumbs/j72mu32.jpg
- http://www.se###tape.net/thumbs/0ti8by5.jpg
- http://www.se###tape.net/thumbs/tq1c5ti.jpg
- http://www.se###tape.net/thumbs/sh8c7qo.jpg
- http://www.se###tape.net/thumbs/1ev6btb.jpg
- http://www.se###tape.net/thumbs/jz874rl.jpg
- http://www.se###tape.net/thumbs/8vidkn2.jpg
- http://www.se###tape.net/thumbs/o9cldxs.jpg
- http://www.se###tape.net/thumbs/2zcs6ne.jpg
- http://www.se###tape.net/thumbs/mu3zpo1.jpg
- http://www.se###tape.net/thumbs/vf2otlt.jpg
- http://www.se###tape.net/thumbs/jwrhkh5.jpg
- http://www.se###tape.net/thumbs/8u8byou.jpg
- http://www.se###tape.net/thumbs/act6chd.jpg
- http://www.se###tape.net/thumbs/gttzqbk.jpg
- http://www.se###tape.net/thumbs/lfn32ji.jpg
Other
- 'ma####.bootstrapcdn.com':443
- 'aj##.#oogleapis.com':443
- 'localhost':49158
- '34.##0.144.191':443
UDP
- DNS ASK se###tape.net
- DNS ASK ma####.bootstrapcdn.com
- DNS ASK aj##.#oogleapis.com
- DNS ASK pk#.goog
- DNS ASK os#.#axcdn.com
- DNS ASK go#####a###ytics.com
- DNS ASK c1.##pads.net
- DNS ASK sy######ion.exoclick.com
- DNS ASK ad#####r.juicyads.com
Miscellaneous
Searches for the following windows
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
