Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'exexc10' = '%TEMP%\RarSFX0\smss.exe'
- '<SYSTEM32>\rundll32.exe' InetCpl.cpl,ClearMyTracksByProcess 8
- '<SYSTEM32>\rundll32.exe' InetCpl.cpl,ClearMyTracksByProcess 2
- '%TEMP%\RarSFX0\smss.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1201' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1405' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '2201' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1001' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1004' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1200' = '00000000'
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\kupeer[4].html
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\m375games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\m355games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\m141games[2]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\kupeer[5].html
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\m221games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\m161games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\m255games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\m181games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\m141games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\m275games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\m335games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\m315games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\m295games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\m120games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\m166games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\m146games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\m126games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\m186games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\m273games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\kupeer[7].html
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\m206games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\m180games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\m160games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\m140games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\m200games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\m106games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\kupeer[6].html
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\m220games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\m121games[2]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\kupeer[1].html
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\m221games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\m201games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\m93games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\m153games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\m133games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\m113games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\m100games[1]
- %TEMP%\RarSFX0\Interop.SHDocVw.dll
- %TEMP%\RarSFX0\smss.exe
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\m121games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\m161games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\m181games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\m141games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\m173games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\m333games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\m313games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\m293games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\m353games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\m100games[2]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\kupeer[3].html
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\m373games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\kupeer[2].html
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\m213games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\m193games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\m201games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\m273games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\m253games[1]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\m161games[1]
- 'localhost':1039
- 'ku##er.com':80
- 'wp#d':80
- http://ku##er.com/?65######
- http://ku##er.com/m373games/?
- http://ku##er.com/m353games/?
- http://ku##er.com/m120games/?
- http://ku##er.com/?40######
- http://ku##er.com/m295games/?
- http://ku##er.com/m273games/?
- http://ku##er.com/m253games/?
- http://ku##er.com/?25######
- http://ku##er.com/m333games/?
- http://ku##er.com/m313games/?
- http://ku##er.com/m293games/?
- http://ku##er.com/m140games/?
- http://ku##er.com/m166games/?
- http://ku##er.com/m146games/?
- http://ku##er.com/m126games/?
- http://ku##er.com/?9.#####
- http://ku##er.com/m206games/?
- http://ku##er.com/m186games/?
- http://ku##er.com/m200games/?
- http://ku##er.com/m180games/?
- http://ku##er.com/m160games/?
- http://ku##er.com/m106games/?
- http://ku##er.com/?37######
- http://ku##er.com/m220games/?
- http://ku##er.com/m201games/?
- http://ku##er.com/m161games/?
- http://ku##er.com/m181games/?
- http://ku##er.com/m255games/?
- http://ku##er.com/?39######
- http://ku##er.com/m221games/?
- http://ku##er.com/advnew/tdv21.txt
- http://ku##er.com/advnew/d02.txt
- http://11#.#11.111.1/wpad.dat via wp#d
- http://ku##er.com/m141games/?
- http://ku##er.com/m121games/?
- http://ku##er.com/m100games/?
- http://ku##er.com/m275games/?
- http://ku##er.com/m153games/?
- http://ku##er.com/m133games/?
- http://ku##er.com/m113games/?
- http://ku##er.com/m213games/?
- http://ku##er.com/m193games/?
- http://ku##er.com/m173games/?
- http://ku##er.com/m355games/?
- http://ku##er.com/m335games/?
- http://ku##er.com/m315games/?
- http://ku##er.com/m93games/?
- http://ku##er.com/?68######
- http://ku##er.com/m375games/?
- DNS ASK ku##er.com
- DNS ASK wp#d
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''