Technical Information
Modifies file system
Creates the following files
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@~~local~~[1].txt
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\4mnvebx[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\gyzpvnt[1].jpg
- D:\windows\system32\winevt\logs\security.evtx
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\mw862bz[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\vgvia2c[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\mxauv3u[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\97lsa11[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\b9er4dx[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\mctuzu9[1].jpg
- D:\windows\system32\config\system.log1
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\u1m5cbc[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\ihljidp[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\999j9xy[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\uf9n3di[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\har1dud[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\e4da5px[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\8eapd0z[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\ciy9w27[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\saw70i8[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\9kdtk4x[1].jpg
- D:\windows\system32\config\system
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\t85uuiv[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\0xoslao[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\6ub6pc7[1].jpg
- D:\windows\system32\winevt\logs\system.evtx
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\bo7qmca[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\j72mu32[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\n1sfzij[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\duib73i[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\ybltqsk[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\3svshk2[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\wwd036c[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\flr8e59[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\6dz0c6k[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\tz6r8v3[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\g1fbcrw[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\kej1xcw[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\x8fblgv[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\urnmzjm[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\kcxxc5b[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\a00enl3[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\pwp9ia0[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\660c33j[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\i6c4tio[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\jokoq3g[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\5vr89j4[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\3t2o19m[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\h6r93yi[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\gbhybol[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\4kvwldw[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\f80ap1i[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\hmm1bpz[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\6ox678c[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\63ovftu[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\6rjhg44[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\cl8ml3s[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\jfx5d2c[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\0z0y7cv[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\lzb0do8[1].jpg
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\uy3xtvq[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\cle932z[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\kzjr243[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\m1wxpfs[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\qxkicka[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\u4ch9b6[1].jpg
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\p4910oi[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\120x60_rta-5042-1996-1400-1577-rta_c[1].gif
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\corner[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\corner_left[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\grad_bg[1].gif
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\ea618097e393409afa316f0f87e2c202_1e65fd33f74047223af4d58cbfd34bce
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\ea618097e393409afa316f0f87e2c202_1e65fd33f74047223af4d58cbfd34bce
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\osbo7y5[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\z1m60pk[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\site_bg[1].gif
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\snh2vpd[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\8sw2en3[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\82jugk1[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\ezw3kqm[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\bovoeiz[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\c6tjtuy[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\4jvyv8w[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\8wbvpvq[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\iwiqcc6[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\7biqg3u[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\2nondsz[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\x4e3fxy[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\gbs44za[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\pfnmafa[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\4392hrg[1].jpg
- D:\windows\system32\winevt\logs\application.evtx
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\e8wabs3[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\4b6pnp6[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\s83ewfw[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\70a0wdh[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\b1yx151[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\fi6fbsm[1].jpg
- D:\windows\system32\winevt\logs\microsoft-windows-networkprofile%4operational.evtx
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\0zb5fj9[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\1ev6btb[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\9118yii[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\w8sakz8[1].jpg
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\265c0deb29181dd1891051371c5f863a_91df16218bac821a4575d2f721820baa
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\265c0deb29181dd1891051371c5f863a_91df16218bac821a4575d2f721820baa
- D:\users\user\appdata\local\temp\cab1305.tmp
- D:\users\user\appdata\local\temp\tar1306.tmp
- D:\users\user\appdata\local\temp\cab1401.tmp
- D:\users\user\appdata\local\temp\tar1402.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\jquery.min[1].js
- D:\users\user\ntuser.dat.log1
- D:\users\user\appdata\local\temp\tar10a2.tmp
- D:\users\user\ntuser.dat
- D:\users\user\appdata\local\temp\tar115f.tmp
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\6bada8974a10c4bd62cc921d13e43b18_78d977680f0a854594ceee125bc2e56e
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\glyphicons-halflings-regular[1].eot
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\bootstrap.min[1].js
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\bootstrap.min[1].js
- D:\users\user\appdata\local\microsoft\windows\usrclass.dat.log1
- D:\users\user\appdata\local\microsoft\windows\usrclass.dat
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\analytics[1].js
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\pop[1].js
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@~~local~~[2].txt
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\6bada8974a10c4bd62cc921d13e43b18_78d977680f0a854594ceee125bc2e56e
- D:\users\user\appdata\local\temp\cab10a1.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\bootstrap.min[1].css
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\caf4703619713e3f18d8a9d5d88d6288_a7725538c46de2d0088ee44974e2ceba
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\caf4703619713e3f18d8a9d5d88d6288_a7725538c46de2d0088ee44974e2ceba
- D:\windows\system32\config\software.log1
- D:\users\user\appdata\local\temp\cab4ff.tmp
- D:\users\user\appdata\local\temp\tar510.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\bootstrap.min[1].css
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\stylesheet[1].css
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\4a9377e7e528f7e56b69a81c500abc24
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\4a9377e7e528f7e56b69a81c500abc24
- D:\users\user\appdata\local\temp\cab88a.tmp
- D:\users\user\appdata\local\temp\tar88b.tmp
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\94308059b57b3142e455b38a6eb92015
- D:\users\user\appdata\local\temp\cab995.tmp
- D:\windows\system32\config\software
- D:\users\user\appdata\local\temp\tar996.tmp
- D:\users\user\appdata\local\temp\tara92.tmp
- D:\users\user\appdata\local\temp\cabad1.tmp
- D:\users\user\appdata\local\temp\tarad2.tmp
- D:\users\user\appdata\local\temp\cabcd6.tmp
- D:\users\user\appdata\local\temp\tarcd7.tmp
- D:\users\user\appdata\local\temp\cabd64.tmp
- D:\users\user\appdata\local\temp\tard65.tmp
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\24bd96d5497f70b3f510a6b53cd43f3e_3a89246fb90c5ee6620004f1ae0eb0ea
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\24bd96d5497f70b3f510a6b53cd43f3e_3a89246fb90c5ee6620004f1ae0eb0ea
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[1]
- D:\users\user\appdata\local\temp\caba91.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\reklame[1].js
- D:\users\user\appdata\local\temp\cab115e.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\zothmlq[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\jnoyijn[1].jpg
- D:\system volume information\syscache.hve.log1
- D:\system volume information\syscache.hve
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\2qw6js6[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\hqghqrd[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\8ig4x76[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\svabgs8[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\sg76x8t[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\185s4eo[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\ewqr2xa[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\lg7zpaq[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\m31h87w[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\plqhjx9[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\n5kv18m[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\t3dyzux[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\j99bhwr[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\a9l8yfh[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\uvt6qcw[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\mu3zpo1[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\2zcs6ne[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\o9cldxs[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\yfljrss[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\7tjkwff[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\11lnh9z[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\e0h7lj1[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\15a42q6[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\mootools.svn[1].js
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[1].txt
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[2].txt
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\adshow[1].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\adshow[1].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\logo1[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\adshow[1].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\logo[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\adshow[2].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\warning[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\adshow[2].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\logo_mobile[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\8bksyrc[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\re4pe3j[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\9snatqt[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\arux0x2[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\0ound5e[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\logo2[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\uuu4a9z[1].jpg
- D:\windows\serviceprofiles\localservice\appdata\local\lastalive0.dat
Deletes the following files
- D:\users\user\appdata\local\temp\cab4ff.tmp
- D:\users\user\appdata\local\temp\tar1306.tmp
- D:\users\user\appdata\local\temp\cab1401.tmp
- D:\users\user\appdata\local\temp\tar1402.tmp
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@~~local~~[1].txt
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@~~local~~[2].txt
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[1].txt
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\warning[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\error[1]
- D:\users\user\appdata\local\temp\cab1305.tmp
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[2].txt
- D:\users\user\appdata\local\temp\tar115f.tmp
- D:\users\user\appdata\local\temp\tara92.tmp
- D:\users\user\appdata\local\temp\tar510.tmp
- D:\users\user\appdata\local\temp\cab88a.tmp
- D:\users\user\appdata\local\temp\tar88b.tmp
- D:\users\user\appdata\local\temp\cab995.tmp
- D:\users\user\appdata\local\temp\tar996.tmp
- D:\users\user\appdata\local\temp\caba91.tmp
- D:\users\user\appdata\local\temp\cabad1.tmp
- D:\users\user\appdata\local\temp\tar10a2.tmp
- D:\users\user\appdata\local\temp\tarad2.tmp
- D:\users\user\appdata\local\temp\cabcd6.tmp
- D:\users\user\appdata\local\temp\tarcd7.tmp
- D:\users\user\appdata\local\temp\cabd64.tmp
- D:\users\user\appdata\local\temp\tard65.tmp
- D:\users\user\appdata\local\temp\cab10a1.tmp
- D:\users\user\appdata\local\temp\cab115e.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\warning[1]
Substitutes the following files
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@~~local~~[1].txt
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[1].txt
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[2].txt
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\error[1]
Network activity
Connects to
- 'ma####.bootstrapcdn.com':443
- 'aj##.#oogleapis.com':443
- 'se###tape.net':80
- 'pk#.goog':80
- 'go#####a###ytics.com':80
- 'c1.##pads.net':80
- 'sy######ion.exoclick.com':80
- 'ad#####r.juicyads.com':80
TCP
HTTP GET requests
- http://www.se###tape.net/css/stylesheet.css
- http://www.se###tape.net/thumbs/hmm1bpz.jpg
- http://www.se###tape.net/thumbs/e4da5px.jpg
- http://www.se###tape.net/thumbs/8eapd0z.jpg
- http://www.se###tape.net/thumbs/ciy9w27.jpg
- http://www.se###tape.net/thumbs/saw70i8.jpg
- http://www.se###tape.net/thumbs/9kdtk4x.jpg
- http://www.se###tape.net/thumbs/t85uuiv.jpg
- http://www.se###tape.net/thumbs/0zb5fj9.jpg
- http://www.se###tape.net/thumbs/mw862bz.jpg
- http://www.se###tape.net/thumbs/fi6fbsm.jpg
- http://www.se###tape.net/thumbs/6ox678c.jpg
- http://www.se###tape.net/thumbs/snh2vpd.jpg
- http://www.se###tape.net/thumbs/8sw2en3.jpg
- http://www.se###tape.net/thumbs/82jugk1.jpg
- http://www.se###tape.net/thumbs/ezw3kqm.jpg
- http://www.se###tape.net/thumbs/har1dud.jpg
- http://www.se###tape.net/thumbs/uf9n3di.jpg
- http://www.se###tape.net/thumbs/ihljidp.jpg
- http://www.se###tape.net/thumbs/b9er4dx.jpg
- http://www.se###tape.net/thumbs/97lsa11.jpg
- http://www.se###tape.net/thumbs/mxauv3u.jpg
- http://www.se###tape.net/thumbs/vgvia2c.jpg
- http://www.se###tape.net/thumbs/gyzpvnt.jpg
- http://www.se###tape.net/thumbs/3t2o19m.jpg
- http://www.se###tape.net/thumbs/bovoeiz.jpg
- http://www.se###tape.net/thumbs/u1m5cbc.jpg
- http://www.se###tape.net/thumbs/6ub6pc7.jpg
- http://www.se###tape.net/thumbs/mctuzu9.jpg
- http://www.se###tape.net/thumbs/bo7qmca.jpg
- http://www.se###tape.net/thumbs/gbhybol.jpg
- http://www.se###tape.net/thumbs/999j9xy.jpg
- http://www.se###tape.net/thumbs/4mnvebx.jpg
- http://www.se###tape.net/thumbs/0xoslao.jpg
- http://www.se###tape.net/thumbs/c6tjtuy.jpg
- http://www.se###tape.net/thumbs/7biqg3u.jpg
- http://www.se###tape.net/thumbs/63ovftu.jpg
- http://www.se###tape.net/thumbs/6rjhg44.jpg
- http://www.se###tape.net/thumbs/cl8ml3s.jpg
- http://www.se###tape.net/thumbs/jfx5d2c.jpg
- http://www.se###tape.net/thumbs/0z0y7cv.jpg
- http://www.se###tape.net/thumbs/lzb0do8.jpg
- http://www.se###tape.net/thumbs/m1wxpfs.jpg
- http://www.se###tape.net/thumbs/cle932z.jpg
- http://www.se###tape.net/thumbs/u4ch9b6.jpg
- http://www.se###tape.net/thumbs/qxkicka.jpg
- http://www.se###tape.net/thumbs/p4910oi.jpg
- http://www.se###tape.net/images/120x60_RTA-5042-1996-1400-1577-RTA_c.gif
- http://www.se###tape.net/images/corner.jpg
- http://www.se###tape.net/images/corner_left.jpg
- http://www.se###tape.net/thumbs/kzjr243.jpg
- http://www.se###tape.net/thumbs/osbo7y5.jpg
- http://www.se###tape.net/thumbs/2zcs6ne.jpg
- http://www.se###tape.net/thumbs/2nondsz.jpg
- http://www.se###tape.net/thumbs/x4e3fxy.jpg
- http://www.se###tape.net/thumbs/gbs44za.jpg
- http://www.se###tape.net/thumbs/pfnmafa.jpg
- http://www.se###tape.net/thumbs/4jvyv8w.jpg
- http://www.se###tape.net/thumbs/iwiqcc6.jpg
- http://www.se###tape.net/thumbs/8wbvpvq.jpg
- http://www.se###tape.net/thumbs/4392hrg.jpg
- http://www.se###tape.net/thumbs/70a0wdh.jpg
- http://www.se###tape.net/thumbs/b1yx151.jpg
- http://www.se###tape.net/thumbs/11lnh9z.jpg
- http://www.se###tape.net/thumbs/z1m60pk.jpg
- http://www.se###tape.net/thumbs/e8wabs3.jpg
- http://www.se###tape.net/thumbs/s83ewfw.jpg
- http://www.se###tape.net/thumbs/4b6pnp6.jpg
- http://www.se###tape.net/thumbs/5vr89j4.jpg
- http://www.se###tape.net/thumbs/jokoq3g.jpg
- http://www.se###tape.net/thumbs/i6c4tio.jpg
- http://www.se###tape.net/thumbs/9snatqt.jpg
- http://www.se###tape.net/thumbs/arux0x2.jpg
- http://www.se###tape.net/thumbs/0ound5e.jpg
- http://www.se###tape.net/thumbs/15a42q6.jpg
- http://www.se###tape.net/images/site_bg.gif
- http://www.se###tape.net/thumbs/uuu4a9z.jpg
- http://www.se###tape.net/thumbs/zothmlq.jpg
- http://www.se###tape.net/thumbs/ewqr2xa.jpg
- http://www.se###tape.net/thumbs/7tjkwff.jpg
- http://www.se###tape.net/thumbs/jnoyijn.jpg
- http://www.se###tape.net/thumbs/2qw6js6.jpg
- http://www.se###tape.net/thumbs/hqghqrd.jpg
- http://www.se###tape.net/thumbs/8ig4x76.jpg
- http://www.se###tape.net/thumbs/svabgs8.jpg
- http://www.se###tape.net/thumbs/re4pe3j.jpg
- http://www.se###tape.net/thumbs/8bksyrc.jpg
- http://www.se###tape.net/css/bootstrap.min.css
- http://sy######ion.exoclick.com/splash.php?id###################
- http://www.se###tape.net/images/logo_mobile.jpg
- http://www.se###tape.net/images/logo2.jpg
- http://www.se###tape.net/images/logo1.jpg
- http://ad#####r.juicyads.com/adshow.php?ad###########
- http://www.se###tape.net/images/logo.jpg
- http://www.se###tape.net/thumbs/yfljrss.jpg
- http://www.se###tape.net/webmasters/mootools.svn.js
- http://www.se###tape.net/thumbs/185s4eo.jpg
- http://c1.##pads.net/pop.js
- http://www.go#####a###ytics.com/a###ytics.js
- http://www.se###tape.net/js/bootstrap.min.js
- http://pk#.goog/gsr1/gsr1.crt
- http://www.se###tape.net/fonts/glyphicons-halflings-regular.eot?
- http://www.se###tape.net/reklame.js
- http://www.se###tape.net/thumbs/sg76x8t.jpg
- http://www.se###tape.net/thumbs/lg7zpaq.jpg
- http://www.se###tape.net/thumbs/ybltqsk.jpg
- http://www.se###tape.net/thumbs/wwd036c.jpg
- http://www.se###tape.net/thumbs/flr8e59.jpg
- http://www.se###tape.net/thumbs/6dz0c6k.jpg
- http://www.se###tape.net/thumbs/tz6r8v3.jpg
- http://www.se###tape.net/thumbs/duib73i.jpg
- http://www.se###tape.net/thumbs/m31h87w.jpg
- http://www.se###tape.net/thumbs/3svshk2.jpg
- http://www.se###tape.net/thumbs/kej1xcw.jpg
- http://www.se###tape.net/thumbs/kcxxc5b.jpg
- http://www.se###tape.net/thumbs/a00enl3.jpg
- http://www.se###tape.net/thumbs/pwp9ia0.jpg
- http://www.se###tape.net/thumbs/660c33j.jpg
- http://www.se###tape.net/thumbs/h6r93yi.jpg
- http://www.se###tape.net/thumbs/x8fblgv.jpg
- http://www.se###tape.net/thumbs/urnmzjm.jpg
- http://www.se###tape.net/thumbs/uy3xtvq.jpg
- http://www.se###tape.net/images/grad_bg.gif
- http://www.se###tape.net/thumbs/f80ap1i.jpg
- http://www.se###tape.net/thumbs/g1fbcrw.jpg
- http://www.se###tape.net/thumbs/4kvwldw.jpg
- http://www.se###tape.net/thumbs/1ev6btb.jpg
- http://www.se###tape.net/thumbs/9118yii.jpg
- http://www.se###tape.net/thumbs/w8sakz8.jpg
- http://www.se###tape.net/thumbs/o9cldxs.jpg
- http://www.se###tape.net/thumbs/n1sfzij.jpg
- http://www.se###tape.net/thumbs/mu3zpo1.jpg
- http://www.se###tape.net/thumbs/uvt6qcw.jpg
- http://www.se###tape.net/thumbs/a9l8yfh.jpg
- http://www.se###tape.net/thumbs/j99bhwr.jpg
- http://www.se###tape.net/thumbs/t3dyzux.jpg
- http://www.se###tape.net/thumbs/n5kv18m.jpg
- http://www.se###tape.net/thumbs/plqhjx9.jpg
- http://www.se###tape.net/thumbs/j72mu32.jpg
- http://www.se###tape.net/thumbs/e0h7lj1.jpg
Other
- 'ma####.bootstrapcdn.com':443
- 'aj##.#oogleapis.com':443
- 'localhost':49158
- '35.##1.9.150':443
- '34.##0.144.191':443
UDP
- DNS ASK se###tape.net
- DNS ASK ma####.bootstrapcdn.com
- DNS ASK aj##.#oogleapis.com
- DNS ASK pk#.goog
- DNS ASK os#.#axcdn.com
- DNS ASK go#####a###ytics.com
- DNS ASK c1.##pads.net
- DNS ASK sy######ion.exoclick.com
- DNS ASK ad#####r.juicyads.com
Miscellaneous
Searches for the following windows
- ClassName: 'SystemTray_Main' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
