Technical Information
Modifies file system
Creates the following files
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@~~local~~[1].txt
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\tf9po5t[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\xnngps6[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\9118yii[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\jypz9ow[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\l4ok4b7[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\ldganmx[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\jokoq3g[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\5vr89j4[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\kgh1cw3[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\el3zgc4[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\52w8e92[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\b0co15z[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\h7m0iry[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\c9mv0wp[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\j72mu32[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\68mukym[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\y4bdm5p[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\3elln4j[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\zlqn3pu[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\wyf833a[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\s2bqoey[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\2zcs6ne[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\t0upgze[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\u1bvv8l[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\9jckh9o[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\jnoyijn[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\adshow[1].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\adshow[2].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\u12vemk[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\adshow[2].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\qp62dv0[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\blmatih[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\dejlkc2[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\sg76x8t[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\f5pfbek[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\hwpqzk2[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\uf9n3di[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\lfn32ji[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\u4ch9b6[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\skeq1su[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\har1dud[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\srxlk12[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\0yrmuvu[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\u1m5cbc[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\8190b4g[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\qflhuv7[1].jpg
- D:\windows\system32\config\software.log1
- D:\windows\system32\config\software
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\geju8ir[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\6c3ww1y[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\grad_bg[1].gif
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\ub0a51y[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\185s4eo[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\el6ahk7[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\3vom9a5[1].jpg
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\zkbfww7[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\97lsa11[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\120x60_rta-5042-1996-1400-1577-rta_c[1].gif
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\t8kjb4d[1].jpg
- D:\windows\system32\winevt\logs\application.evtx
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\ea618097e393409afa316f0f87e2c202_1e65fd33f74047223af4d58cbfd34bce
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\ea618097e393409afa316f0f87e2c202_1e65fd33f74047223af4d58cbfd34bce
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\zjkiese[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\9qtk7kd[1].jpg
- D:\windows\system32\winevt\logs\microsoft-windows-networkprofile%4operational.evtx
- D:\windows\system32\winevt\logs\security.evtx
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\4ipf1l7[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\dieao2x[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\bo7qmca[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\7sc8uqj[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\dloxsee[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\d0vrzde[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\b9k8sdh[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\5dkr0mk[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\4b6pnp6[1].jpg
- D:\windows\system32\winevt\logs\system.evtx
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\adshow[1].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\8qure0n[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\y0gtzk0[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\de44pni[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\isl8c2r[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\05x10h8[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\corner[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\12tkr1x[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\47urwso[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\corner_left[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\zothmlq[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\5rkgk2b[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\8ibnwd6[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\flzs6pk[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\ewqr2xa[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\adshow[2].php
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\da3b6e45325d5fff28cf6bad6065c907_2b8cddc1665ed16b271c2fc718fb86d0
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\caf4703619713e3f18d8a9d5d88d6288_a7725538c46de2d0088ee44974e2ceba
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\caf4703619713e3f18d8a9d5d88d6288_a7725538c46de2d0088ee44974e2ceba
- D:\users\user\appdata\local\temp\cab974d.tmp
- D:\users\user\appdata\local\temp\tar975e.tmp
- D:\users\user\appdata\local\temp\cab97eb.tmp
- D:\users\user\appdata\local\temp\tar97ec.tmp
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\265c0deb29181dd1891051371c5f863a_91df16218bac821a4575d2f721820baa
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\265c0deb29181dd1891051371c5f863a_91df16218bac821a4575d2f721820baa
- D:\users\user\appdata\local\temp\cab9899.tmp
- D:\users\user\appdata\local\temp\tar989a.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\jquery.min[1].js
- D:\users\user\appdata\local\temp\cab9975.tmp
- D:\users\user\appdata\local\temp\tar9976.tmp
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\6bada8974a10c4bd62cc921d13e43b18_78d977680f0a854594ceee125bc2e56e
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\6bada8974a10c4bd62cc921d13e43b18_78d977680f0a854594ceee125bc2e56e
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\bootstrap.min[1].css
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\glyphicons-halflings-regular[1].eot
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\bootstrap.min[1].js
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\bootstrap.min[1].js
- D:\users\user\appdata\local\microsoft\windows\usrclass.dat.log1
- D:\users\user\appdata\local\microsoft\windows\usrclass.dat
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\24bd96d5497f70b3f510a6b53cd43f3e_3a89246fb90c5ee6620004f1ae0eb0ea
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\analytics[1].js
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\24bd96d5497f70b3f510a6b53cd43f3e_3a89246fb90c5ee6620004f1ae0eb0ea
- D:\users\user\appdata\local\temp\cab9568.tmp
- D:\windows\system32\config\system.log1
- D:\users\user\ntuser.dat.log1
- D:\users\user\ntuser.dat
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\stylesheet[1].css
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\bootstrap.min[1].css
- D:\windows\system32\config\system
- D:\users\user\appdata\local\temp\cab8c09.tmp
- D:\users\user\appdata\local\temp\tar8c0a.tmp
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\4a9377e7e528f7e56b69a81c500abc24
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\4a9377e7e528f7e56b69a81c500abc24
- D:\users\user\appdata\local\temp\cab90db.tmp
- D:\users\user\appdata\local\temp\tar90dc.tmp
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\94308059b57b3142e455b38a6eb92015
- D:\users\user\appdata\local\temp\cab91e7.tmp
- D:\users\user\appdata\local\temp\tar91e8.tmp
- D:\users\user\appdata\local\temp\cab9256.tmp
- D:\users\user\appdata\local\temp\tar9257.tmp
- D:\users\user\appdata\local\temp\cab9323.tmp
- D:\users\user\appdata\local\temp\tar9324.tmp
- D:\users\user\appdata\local\temp\cab94e9.tmp
- D:\users\user\appdata\local\temp\tar94ea.tmp
- D:\users\user\appdata\local\temp\tar9578.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\pop[1].js
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\error[1]
- D:\users\user\appdata\local\temp\tarb7f8.tmp
- D:\users\user\appdata\local\temp\cabb941.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\re4pe3j[1].jpg
- D:\users\user\appdata\local\temp\tarb942.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\site_bg[1].gif
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\9snatqt[1].jpg
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\8890a77645b73478f5b1ded18acbf795_c090a8c88b266c6ff99a97210e92b44d
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\8890a77645b73478f5b1ded18acbf795_c090a8c88b266c6ff99a97210e92b44d
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\yl35r6h[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\l3y3rcf[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\arux0x2[1].jpg
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\da3b6e45325d5fff28cf6bad6065c907_2b8cddc1665ed16b271c2fc718fb86d0
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\uuu4a9z[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\hx3vq1y[1].jpg
- D:\users\user\appdata\local\temp\cabbcdb\swflash64.inf
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\ikojige[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\ui6a0tb[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\fw2ma9l[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\max7zby[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\1d9w4tc[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\logo_mobile[1].jpg
- D:\users\user\appdata\local\temp\cabb7f7.tmp
- D:\users\user\appdata\local\temp\tarb7a8.tmp
- D:\users\user\appdata\local\temp\cabb7a7.tmp
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\fb5e2f83ce9b8330b0590b7cd2e5ff2e
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\reklame[1].js
- D:\system volume information\syscache.hve.log1
- D:\system volume information\syscache.hve
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\mootools.svn[1].js
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\logo[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\swflash[1].cab
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[1].txt
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[2].txt
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\adshow[1].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\f686uij[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\warning[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\logo1[1].jpg
- D:\users\user\appdata\local\temp\cabb58f.tmp
- D:\users\user\appdata\local\temp\tarb590.tmp
- D:\users\user\appdata\local\temp\cabb5cf.tmp
- D:\users\user\appdata\local\temp\tarb5d0.tmp
- D:\users\user\appdata\local\temp\cabb5f1.tmp
- D:\users\user\appdata\local\temp\tarb601.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\logo2[1].jpg
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\fb5e2f83ce9b8330b0590b7cd2e5ff2e
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\premium2[1].php
- D:\windows\serviceprofiles\localservice\appdata\local\lastalive1.dat
Deletes the following files
- D:\users\user\appdata\local\temp\cab8c09.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\warning[1]
- D:\users\user\appdata\local\temp\cabb58f.tmp
- D:\users\user\appdata\local\temp\tarb590.tmp
- D:\users\user\appdata\local\temp\cabb5cf.tmp
- D:\users\user\appdata\local\temp\tarb5d0.tmp
- D:\users\user\appdata\local\temp\cabb5f1.tmp
- D:\users\user\appdata\local\temp\tarb601.tmp
- D:\users\user\appdata\local\temp\cabb7a7.tmp
- D:\users\user\appdata\local\temp\tarb7a8.tmp
- D:\users\user\appdata\local\temp\cabb7f7.tmp
- D:\users\user\appdata\local\temp\tarb7f8.tmp
- D:\users\user\appdata\local\temp\cabb941.tmp
- D:\users\user\appdata\local\temp\tarb942.tmp
- D:\users\user\appdata\local\temp\cabbcdb\swflash64.inf
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\warning[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\error[1]
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[2].txt
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\warning[1]
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[1].txt
- D:\users\user\appdata\local\temp\cab9975.tmp
- D:\users\user\appdata\local\temp\tar8c0a.tmp
- D:\users\user\appdata\local\temp\cab90db.tmp
- D:\users\user\appdata\local\temp\tar90dc.tmp
- D:\users\user\appdata\local\temp\cab91e7.tmp
- D:\users\user\appdata\local\temp\tar91e8.tmp
- D:\users\user\appdata\local\temp\cab9256.tmp
- D:\users\user\appdata\local\temp\tar9257.tmp
- D:\users\user\appdata\local\temp\cab9323.tmp
- D:\users\user\appdata\local\temp\tar9324.tmp
- D:\users\user\appdata\local\temp\cab94e9.tmp
- D:\users\user\appdata\local\temp\tar94ea.tmp
- D:\users\user\appdata\local\temp\cab9568.tmp
- D:\users\user\appdata\local\temp\tar9578.tmp
- D:\users\user\appdata\local\temp\cab974d.tmp
- D:\users\user\appdata\local\temp\tar975e.tmp
- D:\users\user\appdata\local\temp\cab97eb.tmp
- D:\users\user\appdata\local\temp\tar97ec.tmp
- D:\users\user\appdata\local\temp\cab9899.tmp
- D:\users\user\appdata\local\temp\tar989a.tmp
- D:\users\user\appdata\local\temp\tar9976.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\warning[1]
Substitutes the following files
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[1].txt
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[2].txt
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\error[1]
Network activity
Connects to
- 'aj##.#oogleapis.com':443
- 'se###tape.net':80
- 'ma####.bootstrapcdn.com':443
- 'pk#.goog':80
- 'go#####a###ytics.com':80
- 'c1.##pads.net':80
- 'sy######ion.exoclick.com':80
- 'fp######ad.macromedia.com':80
- 'ad#####r.juicyads.com':80
- 'fp######ad2.macromedia.com':80
TCP
HTTP GET requests
- http://www.se###tape.net/css/bootstrap.min.css
- http://www.se###tape.net/thumbs/5dkr0mk.jpg
- http://www.se###tape.net/thumbs/b9k8sdh.jpg
- http://www.se###tape.net/thumbs/d0vrzde.jpg
- http://www.se###tape.net/thumbs/dloxsee.jpg
- http://www.se###tape.net/thumbs/7sc8uqj.jpg
- http://www.se###tape.net/thumbs/bo7qmca.jpg
- http://www.se###tape.net/thumbs/dieao2x.jpg
- http://www.se###tape.net/thumbs/8ibnwd6.jpg
- http://www.se###tape.net/thumbs/qflhuv7.jpg
- http://www.se###tape.net/thumbs/u1m5cbc.jpg
- http://www.se###tape.net/thumbs/8190b4g.jpg
- http://www.se###tape.net/thumbs/5vr89j4.jpg
- http://www.se###tape.net/thumbs/t0upgze.jpg
- http://www.se###tape.net/thumbs/zlqn3pu.jpg
- http://www.se###tape.net/thumbs/wyf833a.jpg
- http://www.se###tape.net/thumbs/3elln4j.jpg
- http://www.se###tape.net/thumbs/y4bdm5p.jpg
- http://www.se###tape.net/thumbs/68mukym.jpg
- http://www.se###tape.net/thumbs/j72mu32.jpg
- http://www.se###tape.net/thumbs/h7m0iry.jpg
- http://www.se###tape.net/thumbs/c9mv0wp.jpg
- http://www.se###tape.net/thumbs/b0co15z.jpg
- http://www.se###tape.net/thumbs/52w8e92.jpg
- http://www.se###tape.net/thumbs/kgh1cw3.jpg
- http://www.se###tape.net/thumbs/s2bqoey.jpg
- http://www.se###tape.net/thumbs/el3zgc4.jpg
- http://www.se###tape.net/thumbs/4b6pnp6.jpg
- http://www.se###tape.net/thumbs/zjkiese.jpg
- http://www.se###tape.net/images/120x60_RTA-5042-1996-1400-1577-RTA_c.gif
- http://www.se###tape.net/thumbs/97lsa11.jpg
- http://www.se###tape.net/thumbs/ewqr2xa.jpg
- http://www.se###tape.net/thumbs/zkbfww7.jpg
- http://www.se###tape.net/thumbs/3vom9a5.jpg
- http://www.se###tape.net/thumbs/el6ahk7.jpg
- http://www.se###tape.net/thumbs/185s4eo.jpg
- http://www.se###tape.net/thumbs/ub0a51y.jpg
- http://www.se###tape.net/images/grad_bg.gif
- http://www.se###tape.net/thumbs/6c3ww1y.jpg
- http://www.se###tape.net/thumbs/geju8ir.jpg
- http://www.se###tape.net/thumbs/8qure0n.jpg
- http://www.se###tape.net/thumbs/y0gtzk0.jpg
- http://www.se###tape.net/thumbs/4ipf1l7.jpg
- http://www.se###tape.net/thumbs/5rkgk2b.jpg
- http://www.se###tape.net/thumbs/zothmlq.jpg
- http://www.se###tape.net/images/corner_left.jpg
- http://www.se###tape.net/thumbs/47urwso.jpg
- http://www.se###tape.net/thumbs/12tkr1x.jpg
- http://www.se###tape.net/images/corner.jpg
- http://www.se###tape.net/thumbs/05x10h8.jpg
- http://www.se###tape.net/thumbs/isl8c2r.jpg
- http://www.se###tape.net/thumbs/de44pni.jpg
- http://www.se###tape.net/thumbs/flzs6pk.jpg
- http://www.se###tape.net/thumbs/9qtk7kd.jpg
- http://www.se###tape.net/thumbs/jokoq3g.jpg
- http://www.se###tape.net/thumbs/ldganmx.jpg
- http://www.se###tape.net/thumbs/l4ok4b7.jpg
- http://www.se###tape.net/thumbs/uuu4a9z.jpg
- http://www.se###tape.net/thumbs/arux0x2.jpg
- http://www.se###tape.net/thumbs/yl35r6h.jpg
- http://www.se###tape.net/thumbs/9snatqt.jpg
- http://www.se###tape.net/images/site_bg.gif
- http://www.se###tape.net/thumbs/re4pe3j.jpg
- http://www.se###tape.net/images/logo_mobile.jpg
- http://www.se###tape.net/images/logo2.jpg
- http://www.se###tape.net/images/logo1.jpg
- http://www.se###tape.net/premium2.php
- http://www.se###tape.net/thumbs/ikojige.jpg
- http://fp######ad2.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
- http://ad#####r.juicyads.com/adshow.php?ad###########
- http://sy######ion.exoclick.com/splash.php?id###################
- http://www.se###tape.net/images/logo.jpg
- http://www.se###tape.net/webmasters/mootools.svn.js
- http://www.se###tape.net/reklame.js
- http://c1.##pads.net/pop.js
- http://www.go#####a###ytics.com/a###ytics.js
- http://www.se###tape.net/js/bootstrap.min.js
- http://pk#.goog/gsr1/gsr1.crt
- http://www.se###tape.net/fonts/glyphicons-halflings-regular.eot?
- http://www.se###tape.net/css/stylesheet.css
- http://fp######ad.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
- http://www.se###tape.net/thumbs/ui6a0tb.jpg
- http://www.se###tape.net/thumbs/hx3vq1y.jpg
- http://www.se###tape.net/thumbs/max7zby.jpg
- http://www.se###tape.net/thumbs/jypz9ow.jpg
- http://www.se###tape.net/thumbs/lfn32ji.jpg
- http://www.se###tape.net/thumbs/9118yii.jpg
- http://www.se###tape.net/thumbs/xnngps6.jpg
- http://www.se###tape.net/thumbs/tf9po5t.jpg
- http://www.se###tape.net/thumbs/2zcs6ne.jpg
- http://www.se###tape.net/thumbs/u1bvv8l.jpg
- http://www.se###tape.net/thumbs/0yrmuvu.jpg
- http://www.se###tape.net/thumbs/9jckh9o.jpg
- http://www.se###tape.net/thumbs/srxlk12.jpg
- http://www.se###tape.net/thumbs/har1dud.jpg
- http://www.se###tape.net/thumbs/skeq1su.jpg
- http://www.se###tape.net/thumbs/u4ch9b6.jpg
- http://www.se###tape.net/thumbs/uf9n3di.jpg
- http://www.se###tape.net/thumbs/fw2ma9l.jpg
- http://www.se###tape.net/thumbs/hwpqzk2.jpg
- http://www.se###tape.net/thumbs/f5pfbek.jpg
- http://www.se###tape.net/thumbs/sg76x8t.jpg
- http://www.se###tape.net/thumbs/dejlkc2.jpg
- http://www.se###tape.net/thumbs/blmatih.jpg
- http://www.se###tape.net/thumbs/qp62dv0.jpg
- http://www.se###tape.net/thumbs/u12vemk.jpg
- http://www.se###tape.net/thumbs/jnoyijn.jpg
- http://www.se###tape.net/thumbs/f686uij.jpg
- http://www.se###tape.net/thumbs/1d9w4tc.jpg
- http://www.se###tape.net/thumbs/l3y3rcf.jpg
- http://www.se###tape.net/thumbs/t8kjb4d.jpg
- http://www.se###tape.net/css/images/box_skin_mini.gif
Other
- 'aj##.#oogleapis.com':443
- 'ma####.bootstrapcdn.com':443
UDP
- DNS ASK se###tape.net
- DNS ASK ma####.bootstrapcdn.com
- DNS ASK aj##.#oogleapis.com
- DNS ASK pk#.goog
- DNS ASK os#.#axcdn.com
- DNS ASK go#####a###ytics.com
- DNS ASK c1.##pads.net
- DNS ASK sy######ion.exoclick.com
- DNS ASK fp######ad.macromedia.com
- DNS ASK ad#####r.juicyads.com
- DNS ASK fp######ad2.macromedia.com
Miscellaneous
Searches for the following windows
- ClassName: 'SystemTray_Main' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
