Technical Information
Modifies file system
Creates the following files
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@~~local~~[1].txt
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\dieao2x[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\mxauv3u[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\7tjkwff[1].jpg
- D:\windows\system32\winevt\logs\security.evtx
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\hqghqrd[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\8ig4x76[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\2olncsz[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\ewqr2xa[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\m31h87w[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\pfnmafa[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\zothmlq[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\yalmb4d[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\act6chd[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\8u8byou[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\nwlhxpf[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\um1cjeq[1].jpg
- D:\windows\system32\config\system.log1
- D:\windows\system32\config\system
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\775ryg4[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\oa1erva[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\qg3pgh0[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\gnwndu4[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\el6ahk7[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\j72mu32[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\rf5432f[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\e8cbl10[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\oxuus93[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\8f3g53t[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\p5pcz65[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\rmpwbfj[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\wggc2qr[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\2pucozm[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\nbb91k4[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\c51iqf8[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\g4hegp5[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\etj6lky[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\ty8v9uf[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\bfbre3h[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\pwp9ia0[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\y17q3kf[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\gd28my3[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\8vidkn2[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\gdyc21h[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\5vr89j4[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\doevd3q[1].jpg
- D:\windows\system32\winevt\logs\system.evtx
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\dra6e4q[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\71whu4z[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\52w8e92[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\ldganmx[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\x4e3fxy[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\fi6fbsm[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\osbo7y5[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\tv4op4j[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\jly3pbj[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\gcb5khk[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\63ovftu[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\dl0o8wg[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\iy8mppl[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\44sakrx[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\maoy51k[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\cle932z[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\kzjr243[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\eekuxux[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\corner[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\corner_left[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\grad_bg[1].gif
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\a0lbgwr[1].jpg
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\c46e7b0f942663a1edc8d9d6d7869173_6043fc604a395e1485af7ac16d16b7ce
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\ea618097e393409afa316f0f87e2c202_1e65fd33f74047223af4d58cbfd34bce
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\ea618097e393409afa316f0f87e2c202_1e65fd33f74047223af4d58cbfd34bce
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\nd2cb89[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\120x60_rta-5042-1996-1400-1577-rta_c[1].gif
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\4392hrg[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\hmm1bpz[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\z1m60pk[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\6ox678c[1].jpg
- D:\windows\system32\winevt\logs\microsoft-windows-networkprofile%4operational.evtx
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\snh2vpd[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\8sw2en3[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\82jugk1[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\ezw3kqm[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\bovoeiz[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\c6tjtuy[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\11lnh9z[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\0zb5fj9[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\5y97gmy[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\4jvyv8w[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\s83ewfw[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\e8wabs3[1].jpg
- D:\windows\system32\winevt\logs\application.evtx
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\4b6pnp6[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\e0h7lj1[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\rvy271i[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\b1yx151[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\70a0wdh[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\8wbvpvq[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\iwiqcc6[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\7biqg3u[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\0ti8by5[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\tq1c5ti[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\sh8c7qo[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\bootstrap.min[1].css
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\glyphicons-halflings-regular[1].eot
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\24bd96d5497f70b3f510a6b53cd43f3e_3a89246fb90c5ee6620004f1ae0eb0ea
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\24bd96d5497f70b3f510a6b53cd43f3e_3a89246fb90c5ee6620004f1ae0eb0ea
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\caf4703619713e3f18d8a9d5d88d6288_a7725538c46de2d0088ee44974e2ceba
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\caf4703619713e3f18d8a9d5d88d6288_a7725538c46de2d0088ee44974e2ceba
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\265c0deb29181dd1891051371c5f863a_91df16218bac821a4575d2f721820baa
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\265c0deb29181dd1891051371c5f863a_91df16218bac821a4575d2f721820baa
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\jquery.min[1].js
- D:\users\user\appdata\local\temp\cab97bd.tmp
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[1].txt
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\6bada8974a10c4bd62cc921d13e43b18_78d977680f0a854594ceee125bc2e56e
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\bootstrap.min[1].js
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\analytics[1].js
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\pop[1].js
- D:\users\user\appdata\local\microsoft\windows\usrclass.dat.log1
- D:\users\user\appdata\local\microsoft\windows\usrclass.dat
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\reklame[1].js
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\warning[1]
- D:\users\user\ntuser.dat
- D:\users\user\ntuser.dat.log1
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\bootstrap.min[1].js
- D:\users\user\appdata\local\temp\tar975e.tmp
- D:\users\user\appdata\local\temp\tar918a.tmp
- D:\windows\system32\config\software
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\bootstrap.min[1].css
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\stylesheet[1].css
- D:\users\user\appdata\local\temp\cab8cf3.tmp
- D:\users\user\appdata\local\temp\tar8cf4.tmp
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\4a9377e7e528f7e56b69a81c500abc24
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\4a9377e7e528f7e56b69a81c500abc24
- D:\users\user\appdata\local\temp\cab9158.tmp
- D:\users\user\appdata\local\temp\tar9159.tmp
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\6bada8974a10c4bd62cc921d13e43b18_78d977680f0a854594ceee125bc2e56e
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[2].txt
- D:\windows\system32\config\software.log1
- D:\users\user\appdata\local\temp\cab9217.tmp
- D:\users\user\appdata\local\temp\tar9218.tmp
- D:\users\user\appdata\local\temp\cab944b.tmp
- D:\users\user\appdata\local\temp\tar944c.tmp
- D:\users\user\appdata\local\temp\cab94e9.tmp
- D:\users\user\appdata\local\temp\tar94ea.tmp
- D:\users\user\appdata\local\temp\cab9577.tmp
- D:\users\user\appdata\local\temp\tar9578.tmp
- D:\users\user\appdata\local\temp\cab975d.tmp
- D:\users\user\appdata\local\temp\cab9189.tmp
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\metadata\94308059b57b3142e455b38a6eb92015
- D:\users\user\appdata\local\temp\tar97be.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\adshow[1].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\qp62dv0[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\svabgs8[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\sg76x8t[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\0xoslao[1].jpg
- D:\system volume information\syscache.hve.log1
- D:\system volume information\syscache.hve
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\hwpqzk2[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\feaaode[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\lfn32ji[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\u12vemk[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\999j9xy[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\0oeer0b[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\flzs6pk[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\a9l8yfh[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\uvt6qcw[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\rz3d17f[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\fvxpw80[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\tf9po5t[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\xnngps6[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\9118yii[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\1ev6btb[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\n5kv18m[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\t3dyzux[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\8eapd0z[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\jnoyijn[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\1d9w4tc[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\logo[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\adshow[2].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\adshow[1].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\adshow[3].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\adshow[1].php
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\error[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\mootools.svn[1].js
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\logo1[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\logo_mobile[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\yl35r6h[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\re4pe3j[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\arux0x2[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\site_bg[1].gif
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\uuu4a9z[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\0ound5e[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\9snatqt[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\15a42q6[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\ikojige[1].jpg
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\logo2[1].jpg
- D:\users\user\appdata\locallow\microsoft\cryptneturlcache\content\b3bb9c1ba2d19e090ae305b2683903a0_b89a63ac6877bd1ed812438ce82c3eb8
- D:\windows\serviceprofiles\localservice\appdata\local\lastalive1.dat
Deletes the following files
- D:\users\user\appdata\local\temp\cab8cf3.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\ugsx1com\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[1]
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[2].txt
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[1].txt
- D:\users\user\appdata\local\temp\tar97be.tmp
- D:\users\user\appdata\local\temp\cab97bd.tmp
- D:\users\user\appdata\local\temp\tar975e.tmp
- D:\users\user\appdata\local\temp\cab975d.tmp
- D:\users\user\appdata\local\temp\tar9578.tmp
- D:\users\user\appdata\local\temp\cab9577.tmp
- D:\users\user\appdata\local\temp\tar94ea.tmp
- D:\users\user\appdata\local\temp\cab94e9.tmp
- D:\users\user\appdata\local\temp\tar944c.tmp
- D:\users\user\appdata\local\temp\cab944b.tmp
- D:\users\user\appdata\local\temp\tar9218.tmp
- D:\users\user\appdata\local\temp\cab9217.tmp
- D:\users\user\appdata\local\temp\tar918a.tmp
- D:\users\user\appdata\local\temp\cab9189.tmp
- D:\users\user\appdata\local\temp\tar9159.tmp
- D:\users\user\appdata\local\temp\cab9158.tmp
- D:\users\user\appdata\local\temp\tar8cf4.tmp
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\warning[1]
Substitutes the following files
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[1].txt
- D:\users\user\appdata\roaming\microsoft\windows\cookies\user@juicyads[2].txt
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\qkr46vql\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\error[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\error[2]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\0y9o17dr\warning[1]
- D:\users\user\appdata\local\microsoft\windows\<INETFILES>\content.ie5\bm8skz0v\warning[1]
Network activity
Connects to
- 'ma####.bootstrapcdn.com':443
- 'aj##.#oogleapis.com':443
- 'se###tape.net':80
- 'pk#.goog':80
- 'go#####a###ytics.com':80
- 'c1.##pads.net':80
- 'sy######ion.exoclick.com':80
- 'ad#####r.juicyads.com':80
TCP
HTTP GET requests
- http://www.se###tape.net/css/stylesheet.css
- http://www.se###tape.net/thumbs/act6chd.jpg
- http://www.se###tape.net/thumbs/8u8byou.jpg
- http://www.se###tape.net/thumbs/nwlhxpf.jpg
- http://www.se###tape.net/thumbs/um1cjeq.jpg
- http://www.se###tape.net/thumbs/775ryg4.jpg
- http://www.se###tape.net/thumbs/oa1erva.jpg
- http://www.se###tape.net/thumbs/pfnmafa.jpg
- http://www.se###tape.net/thumbs/7tjkwff.jpg
- http://www.se###tape.net/thumbs/x4e3fxy.jpg
- http://www.se###tape.net/thumbs/hmm1bpz.jpg
- http://www.se###tape.net/thumbs/4392hrg.jpg
- http://www.se###tape.net/thumbs/0zb5fj9.jpg
- http://www.se###tape.net/thumbs/fi6fbsm.jpg
- http://www.se###tape.net/thumbs/6ox678c.jpg
- http://www.se###tape.net/thumbs/el6ahk7.jpg
- http://www.se###tape.net/thumbs/rf5432f.jpg
- http://www.se###tape.net/thumbs/m31h87w.jpg
- http://www.se###tape.net/thumbs/gnwndu4.jpg
- http://www.se###tape.net/thumbs/ewqr2xa.jpg
- http://www.se###tape.net/thumbs/2olncsz.jpg
- http://www.se###tape.net/thumbs/hqghqrd.jpg
- http://www.se###tape.net/thumbs/8ig4x76.jpg
- http://www.se###tape.net/thumbs/mxauv3u.jpg
- http://www.se###tape.net/thumbs/qg3pgh0.jpg
- http://www.se###tape.net/thumbs/dieao2x.jpg
- http://www.se###tape.net/thumbs/zothmlq.jpg
- http://www.se###tape.net/thumbs/ty8v9uf.jpg
- http://www.se###tape.net/thumbs/yalmb4d.jpg
- http://www.se###tape.net/thumbs/bfbre3h.jpg
- http://www.se###tape.net/thumbs/etj6lky.jpg
- http://www.se###tape.net/thumbs/dra6e4q.jpg
- http://www.se###tape.net/thumbs/snh2vpd.jpg
- http://www.se###tape.net/thumbs/8sw2en3.jpg
- http://www.se###tape.net/thumbs/82jugk1.jpg
- http://www.se###tape.net/thumbs/ezw3kqm.jpg
- http://www.se###tape.net/thumbs/osbo7y5.jpg
- http://www.se###tape.net/thumbs/tv4op4j.jpg
- http://www.se###tape.net/thumbs/jly3pbj.jpg
- http://www.se###tape.net/thumbs/gcb5khk.jpg
- http://www.se###tape.net/thumbs/63ovftu.jpg
- http://www.se###tape.net/thumbs/dl0o8wg.jpg
- http://www.se###tape.net/thumbs/44sakrx.jpg
- http://www.se###tape.net/thumbs/doevd3q.jpg
- http://www.se###tape.net/thumbs/maoy51k.jpg
- http://www.se###tape.net/thumbs/eekuxux.jpg
- http://www.se###tape.net/thumbs/nd2cb89.jpg
- http://www.se###tape.net/images/120x60_RTA-5042-1996-1400-1577-RTA_c.gif
- http://www.se###tape.net/images/corner.jpg
- http://www.se###tape.net/images/corner_left.jpg
- http://www.se###tape.net/thumbs/cle932z.jpg
- http://www.se###tape.net/thumbs/e8wabs3.jpg
- http://www.se###tape.net/thumbs/kzjr243.jpg
- http://www.se###tape.net/thumbs/s83ewfw.jpg
- http://www.se###tape.net/thumbs/bovoeiz.jpg
- http://www.se###tape.net/thumbs/c6tjtuy.jpg
- http://www.se###tape.net/thumbs/4jvyv8w.jpg
- http://www.se###tape.net/thumbs/8wbvpvq.jpg
- http://www.se###tape.net/thumbs/iwiqcc6.jpg
- http://www.se###tape.net/thumbs/7biqg3u.jpg
- http://www.se###tape.net/images/grad_bg.gif
- http://www.se###tape.net/thumbs/11lnh9z.jpg
- http://www.se###tape.net/thumbs/4b6pnp6.jpg
- http://www.se###tape.net/thumbs/e0h7lj1.jpg
- http://www.se###tape.net/thumbs/rvy271i.jpg
- http://www.se###tape.net/thumbs/b1yx151.jpg
- http://www.se###tape.net/thumbs/70a0wdh.jpg
- http://www.se###tape.net/thumbs/z1m60pk.jpg
- http://www.se###tape.net/thumbs/5y97gmy.jpg
- http://www.se###tape.net/thumbs/iy8mppl.jpg
- http://www.se###tape.net/thumbs/5vr89j4.jpg
- http://www.se###tape.net/thumbs/g4hegp5.jpg
- http://www.se###tape.net/images/site_bg.gif
- http://www.se###tape.net/thumbs/uuu4a9z.jpg
- http://www.se###tape.net/thumbs/0ound5e.jpg
- http://www.se###tape.net/thumbs/9snatqt.jpg
- http://www.se###tape.net/thumbs/15a42q6.jpg
- http://www.se###tape.net/thumbs/ikojige.jpg
- http://www.se###tape.net/thumbs/999j9xy.jpg
- http://sy######ion.exoclick.com/splash.php?id###################
- http://www.se###tape.net/thumbs/jnoyijn.jpg
- http://www.se###tape.net/thumbs/u12vemk.jpg
- http://www.se###tape.net/thumbs/qp62dv0.jpg
- http://www.se###tape.net/thumbs/0oeer0b.jpg
- http://www.se###tape.net/thumbs/svabgs8.jpg
- http://www.se###tape.net/thumbs/sg76x8t.jpg
- http://www.se###tape.net/thumbs/arux0x2.jpg
- http://www.se###tape.net/thumbs/re4pe3j.jpg
- http://www.se###tape.net/thumbs/yl35r6h.jpg
- http://www.se###tape.net/images/logo_mobile.jpg
- http://www.se###tape.net/images/logo2.jpg
- http://www.se###tape.net/images/logo1.jpg
- http://ad#####r.juicyads.com/adshow.php?ad###########
- http://www.se###tape.net/images/logo.jpg
- http://www.se###tape.net/webmasters/mootools.svn.js
- http://www.se###tape.net/thumbs/1d9w4tc.jpg
- http://www.se###tape.net/reklame.js
- http://c1.##pads.net/pop.js
- http://www.go#####a###ytics.com/a###ytics.js
- http://www.se###tape.net/js/bootstrap.min.js
- http://pk#.goog/gsr1/gsr1.crt
- http://www.se###tape.net/fonts/glyphicons-halflings-regular.eot?
- http://www.se###tape.net/css/bootstrap.min.css
- http://www.se###tape.net/thumbs/0xoslao.jpg
- http://www.se###tape.net/thumbs/hwpqzk2.jpg
- http://www.se###tape.net/thumbs/feaaode.jpg
- http://www.se###tape.net/thumbs/lfn32ji.jpg
- http://www.se###tape.net/thumbs/8f3g53t.jpg
- http://www.se###tape.net/thumbs/p5pcz65.jpg
- http://www.se###tape.net/thumbs/rmpwbfj.jpg
- http://www.se###tape.net/thumbs/wggc2qr.jpg
- http://www.se###tape.net/thumbs/2pucozm.jpg
- http://www.se###tape.net/thumbs/nbb91k4.jpg
- http://www.se###tape.net/thumbs/c51iqf8.jpg
- http://www.se###tape.net/thumbs/gdyc21h.jpg
- http://www.se###tape.net/thumbs/71whu4z.jpg
- http://www.se###tape.net/thumbs/e8cbl10.jpg
- http://www.se###tape.net/thumbs/52w8e92.jpg
- http://www.se###tape.net/thumbs/pwp9ia0.jpg
- http://www.se###tape.net/thumbs/gd28my3.jpg
- http://www.se###tape.net/thumbs/y17q3kf.jpg
- http://www.se###tape.net/thumbs/oxuus93.jpg
- http://www.se###tape.net/thumbs/fvxpw80.jpg
- http://www.se###tape.net/thumbs/ldganmx.jpg
- http://www.se###tape.net/thumbs/rz3d17f.jpg
- http://www.se###tape.net/thumbs/flzs6pk.jpg
- http://www.se###tape.net/thumbs/n5kv18m.jpg
- http://www.se###tape.net/thumbs/t3dyzux.jpg
- http://www.se###tape.net/thumbs/8eapd0z.jpg
- http://www.se###tape.net/thumbs/a9l8yfh.jpg
- http://www.se###tape.net/thumbs/uvt6qcw.jpg
- http://www.se###tape.net/thumbs/8vidkn2.jpg
- http://www.se###tape.net/thumbs/0ti8by5.jpg
- http://www.se###tape.net/thumbs/tf9po5t.jpg
- http://www.se###tape.net/thumbs/xnngps6.jpg
- http://www.se###tape.net/thumbs/9118yii.jpg
- http://www.se###tape.net/thumbs/1ev6btb.jpg
- http://www.se###tape.net/thumbs/sh8c7qo.jpg
- http://www.se###tape.net/thumbs/tq1c5ti.jpg
- http://www.se###tape.net/thumbs/j72mu32.jpg
- http://www.se###tape.net/thumbs/a0lbgwr.jpg
Other
- 'ma####.bootstrapcdn.com':443
- 'aj##.#oogleapis.com':443
UDP
- DNS ASK se###tape.net
- DNS ASK ma####.bootstrapcdn.com
- DNS ASK aj##.#oogleapis.com
- DNS ASK pk#.goog
- DNS ASK os#.#axcdn.com
- DNS ASK go#####a###ytics.com
- DNS ASK c1.##pads.net
- DNS ASK sy######ion.exoclick.com
- DNS ASK ad#####r.juicyads.com
Miscellaneous
Searches for the following windows
- ClassName: 'SystemTray_Main' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
