Technical Information
To ensure autorun and distribution
Modifies the following registry keys
- [HKCU\Software\Classes\uTorrent\shell\open\command] '' = '"%APPDATA%\uTorrent\uTorrent.exe" "%1" /SHELLASSOC'
- [HKCU\Software\Classes\Applications\uTorrent.exe\shell\open\command] '' = '"%APPDATA%\uTorrent\uTorrent.exe" "%1" /SHELLASSOC'
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'ut' = '%APPDATA%\uTorrent\uTorrent.exe /MINIMIZED'
Malicious functions
Executes the following
- '%WINDIR%\syswow64\taskkill.exe' /f /im "uTorrent.exe"
Modifies file system
Creates the following files
- %TEMP%\rarsfx0\crack\player\btinstall.txt
- %TEMP%\rarsfx0\crack\virusguard\btinstall.txt
- %TEMP%\rarsfx0\crack\virusguard\bittorrentantivirus.exe
- %TEMP%\rarsfx0\crack\utorrent.exe
- %TEMP%\rarsfx0\utorrent.exe
- %TEMP%\rarsfx0\crack\virusguard\avxdisk.dll
- %TEMP%\rarsfx0\crack\virusguard\bdcore.dll
- %TEMP%\rarsfx0\crack\virusguard\bdupdateservicecom.dll
- %TEMP%\rarsfx0\crack\player\plugins\codec\liba52_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\liba52tofloat32_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\liba52tospdif_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libaccess_attachment_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libaccess_bd_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libaccess_ftp_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libaccess_http_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libaccess_imem_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libaccess_mms_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access_output\libaccess_output_dummy_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access_output\libaccess_output_file_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access_output\libaccess_output_http_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access_output\libaccess_output_livehttp_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access_output\libaccess_output_shout_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access_output\libaccess_output_udp_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libaccess_rar_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libaccess_realrtsp_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libaccess_smb_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libaccess_tcp_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libaccess_udp_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libaccess_vdr_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libadjust_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_output\libadummy_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\codec\libaes3_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libaiff_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libalphamask_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_output\libamem_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libantiflicker_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_output\libaout_directx_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_output\libaout_file_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\codec\libaraw_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libasf_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libatmo_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libau_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\libaudio_format_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\libaudiobargraph_a_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libaudiobargraph_v_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\misc\libaudioscrobbler_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\codec\libavcodec_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libavi_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libball_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libblend_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libblendbench_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libbluescreen_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_output\libcaca_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libcanvas_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libcdda_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libchain_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\libchorus_flanger_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libclone_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libcolorthres_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\libcompressor_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\libconverter_fixed_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libcroppadd_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\codec\libddummy_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libdeinterlace_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libdemux_cdg_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libdemux_stl_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libdemuxdump_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libdirac_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_output\libdirect2d_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_output\libdirect3d_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_output\libdirectx_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\codec\libdmo_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_output\libdrawable_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libdshow_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\libdtstofloat32_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\libdtstospdif_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libdtv_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\control\libdummy_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libdvdnav_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libdvdread_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\codec\libedummy_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\libequalizer_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\liberase_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libes_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\misc\libexport_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libextract_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\codec\libfaad_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libfilesystem_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_mixer\libfixed32_mixer_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\codec\libflac_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libflacsys_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_mixer\libfloat32_mixer_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\meta_engine\libfolder_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\text_renderer\libfreetype_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libgaussianblur_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\control\libgestures_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\control\libglobalhotkeys_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_output\libglwin32_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libgme_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\misc\libgnutls_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\visualization\libgoom_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libgradfun_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libgradient_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libgrain_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_chroma\libgrey_yuv_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libh264_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\control\libhotkeys_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\mmx\libi420_rgb_mmx_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_chroma\libi420_rgb_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\sse2\libi420_rgb_sse2_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\mmx\libi420_yuy2_mmx_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_chroma\libi420_yuy2_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\sse2\libi420_yuy2_sse2_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_chroma\libi422_i420_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\mmx\libi422_yuy2_mmx_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_chroma\libi422_yuy2_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\sse2\libi422_yuy2_sse2_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libidummy_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libimage_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libinvert_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\libkaraoke_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\codec\libkate_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\codec\liblibass_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\liblibbluray_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\codec\liblibmpeg2_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\liblive555_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\misc\liblogger_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\liblogo_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\lua\liblua_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libmagnify_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libmarq_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\services_discovery\libmediadirs_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\misc\libmemcpy_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\3dnow\libmemcpy3dn_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\mmx\libmemcpymmx_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\mmxext\libmemcpymmxext_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libmirror_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libmjpeg_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libmkv_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libmod_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\libmono_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libmosaic_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libmotionblur_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libmotiondetect_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libmp4_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libmpc_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\codec\libmpeg_audio_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\libmpgatofixed32_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libmpgv_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\notify\libmsn_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\mux\libmux_avi_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\mux\libmux_dummy_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\mux\libmux_mp4_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\mux\libmux_mpjpeg_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\mux\libmux_ogg_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\mux\libmux_ps_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\control\libnetsync_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\libnormvol_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libnsc_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libnsv_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\control\libntservice_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libnuv_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libogg_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\control\liboldrc_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\misc\libosd_parser_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libosdmenu_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\packetizer\libpacketizer_copy_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\packetizer\libpacketizer_dirac_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\packetizer\libpacketizer_flac_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\packetizer\libpacketizer_h264_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\packetizer\libpacketizer_mlp_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libpanoramix_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\libparam_eq_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libplaylist_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\codec\libpng_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\services_discovery\libpodcast_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libposterize_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libpostproc_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\visualization\libprojectm_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libps_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libpsychedelic_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libpuzzle_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libpva_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\gui\libqt4_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\codec\libquicktime_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\librawaud_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\librawdv_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\librawvid_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\codec\librawvideo_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libreal_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libremoteosd_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libripple_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\librotate_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\librss_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\librtp_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_chroma\librv32_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\libsamplerate_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\services_discovery\libsap_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libscale_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\libscaletempo_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libscene_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\codec\libschroedinger_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libscreen_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libsdp_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libsepia_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libsharpen_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libsid_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\libsimple_channel_mixer_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\gui\libskins2_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libsmf_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\libspatializer_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\codec\libspeex_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\libspeex_resampler_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\misc\libstats_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\stream_filter\libstream_filter_httplive_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libstream_filter_rar_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\stream_filter\libstream_filter_record_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\stream_out\libstream_out_autodel_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\stream_out\libstream_out_bridge_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\stream_out\libstream_out_delay_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\stream_out\libstream_out_description_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\stream_out\libstream_out_display_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\stream_out\libstream_out_dummy_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\stream_out\libstream_out_duplicate_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\stream_out\libstream_out_es_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\stream_out\libstream_out_gather_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\stream_out\libstream_out_langfromtelx_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\stream_out\libstream_out_raop_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\stream_out\libstream_out_record_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\stream_out\libstream_out_rtp_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\stream_out\libstream_out_select_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\stream_out\libstream_out_setid_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\stream_out\libstream_out_smem_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\stream_out\libstream_out_standard_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\stream_out\libstream_out_transcode_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libsubsdelay_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libsubtitle_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libswscale_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\meta_engine\libtaglib_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\text_renderer\libtdummy_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\codec\libtheora_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libtransform_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libts_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libtta_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libty_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_filter\libugly_resampler_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\services_discovery\libupnp_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libvc1_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libvcd_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_output\libvdummy_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\visualization\libvisual_plugin.dll
- %TEMP%\rarsfx0\crack\player\libvlc.dll
- %TEMP%\rarsfx0\crack\player\libvlccore.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_output\libvmem_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libvoc_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\codec\libvorbis_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libwall_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libwav_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libwave_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\audio_output\libwaveout_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\services_discovery\libwindrive_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_output\libwingdi_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\codec\libx264_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\demux\libxa_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\misc\libxml_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_output\libyuv_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_filter\libyuvp_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_chroma\libyuy2_i420_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\video_chroma\libyuy2_i422_plugin.dll
- %TEMP%\rarsfx0\crack\player\plugins\access\libzip_plugin.dll
- %TEMP%\rarsfx0\crack\virusguard\scan.dll
- %TEMP%\rarsfx0\crack\player\plugins\plugins.dat
- %TEMP%\rarsfx0\crack\settings.dat
- %TEMP%\rarsfx0\crack\utorrent.lng
- %TEMP%\rarsfx0\mawto.url
- %TEMP%\nscd807.tmp\system.dll
- %TEMP%\nscd807.tmp\nsislog.txt
- %TEMP%\nscd807.tmp\utorrent.exe
- %TEMP%\nscd807.tmp\nsisfirewall.dll
- %TEMP%\nscd807.tmp\inetc.dll
- %TEMP%\nscd807.tmp\utwin_install.log
- %TEMP%\uttec32.tmp
- %APPDATA%\microsoft\crypto\rsa\s-1-5-21-3691498038-2086406363-2140527554-1000\1f91d2d17ea675d4c2c3192e241743f9_0cb67e2f-dc95-45ca-8fb8-69bde8e3f814
- %APPDATA%\microsoft\windows\cookies\user@localhost[1].txt
- %APPDATA%\utorrent\updates\3.6.0_47196.exe
- %APPDATA%\utorrent\updates.dat
- %APPDATA%\utorrent\settings.dat.new
- %APPDATA%\utorrent\utorrent.exe
- %APPDATA%\microsoft\windows\start menu\Вµtorrent.lnk
- %HOMEPATH%\desktop\Вµtorrent.lnk
- %APPDATA%\microsoft\internet explorer\quick launch\Вµtorrent.lnk
- %APPDATA%\utorrent\maindoc.ico
- %TEMP%\uttfeb9.tmp
- %TEMP%\utt80b.tmp
- %APPDATA%\microsoft\crypto\rsa\s-1-5-21-3691498038-2086406363-2140527554-1000\c9ecfe57456ec342c55a85f826b40be8_0cb67e2f-dc95-45ca-8fb8-69bde8e3f814
- %APPDATA%\utorrent\utorrent.lng
- %APPDATA%\utorrent\player\btinstall.txt
- %APPDATA%\utorrent\player\libvlc.dll
- %APPDATA%\utorrent\player\libvlccore.dll
- %APPDATA%\utorrent\player\plugins\plugins.dat
- %APPDATA%\utorrent\player\plugins\3dnow\libmemcpy3dn_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libaccess_attachment_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libaccess_bd_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libaccess_ftp_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libaccess_http_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libaccess_imem_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libaccess_mms_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libaccess_rar_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libaccess_realrtsp_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libaccess_smb_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libaccess_tcp_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libaccess_udp_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libaccess_vdr_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libcdda_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libdshow_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libdtv_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libdvdnav_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libdvdread_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libfilesystem_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libidummy_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\liblibbluray_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\librtp_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libscreen_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libsdp_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libstream_filter_rar_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libvcd_plugin.dll
- %APPDATA%\utorrent\player\plugins\access\libzip_plugin.dll
- %APPDATA%\utorrent\player\plugins\access_output\libaccess_output_dummy_plugin.dll
- %APPDATA%\utorrent\player\plugins\access_output\libaccess_output_file_plugin.dll
- %APPDATA%\utorrent\player\plugins\access_output\libaccess_output_http_plugin.dll
- %APPDATA%\utorrent\player\plugins\access_output\libaccess_output_livehttp_plugin.dll
- %APPDATA%\utorrent\player\plugins\access_output\libaccess_output_shout_plugin.dll
- %APPDATA%\utorrent\player\plugins\access_output\libaccess_output_udp_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\liba52tofloat32_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\liba52tospdif_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\libaudiobargraph_a_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\libaudio_format_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\libchorus_flanger_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\libcompressor_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\libconverter_fixed_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\libdtstofloat32_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\libdtstospdif_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\libequalizer_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\libheadphone_channel_mixer_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\libkaraoke_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\libmono_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\libmpgatofixed32_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\libnormvol_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\libparam_eq_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\libsamplerate_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\libscaletempo_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\libsimple_channel_mixer_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\libspatializer_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\libspeex_resampler_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\libtrivial_channel_mixer_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_filter\libugly_resampler_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_mixer\libfixed32_mixer_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_mixer\libfloat32_mixer_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_output\libadummy_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_output\libamem_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_output\libaout_directx_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_output\libaout_file_plugin.dll
- %APPDATA%\utorrent\player\plugins\audio_output\libwaveout_plugin.dll
- %APPDATA%\utorrent\player\plugins\codec\liba52_plugin.dll
- %APPDATA%\utorrent\player\plugins\codec\libaes3_plugin.dll
- %APPDATA%\utorrent\player\plugins\codec\libaraw_plugin.dll
- %APPDATA%\utorrent\player\plugins\codec\libavcodec_plugin.dll
- %APPDATA%\utorrent\player\plugins\codec\libddummy_plugin.dll
- %APPDATA%\utorrent\player\plugins\codec\libdmo_plugin.dll
- %APPDATA%\utorrent\player\plugins\codec\libedummy_plugin.dll
- %APPDATA%\utorrent\player\plugins\codec\libfaad_plugin.dll
- %APPDATA%\utorrent\player\plugins\codec\libflac_plugin.dll
- %APPDATA%\utorrent\player\plugins\codec\libkate_plugin.dll
- %APPDATA%\utorrent\player\plugins\codec\liblibass_plugin.dll
- %APPDATA%\utorrent\player\plugins\codec\liblibmpeg2_plugin.dll
- %APPDATA%\utorrent\player\plugins\codec\libmpeg_audio_plugin.dll
- %APPDATA%\utorrent\player\plugins\codec\libpng_plugin.dll
- %APPDATA%\utorrent\player\plugins\codec\libquicktime_plugin.dll
- %APPDATA%\utorrent\player\plugins\codec\librawvideo_plugin.dll
- %APPDATA%\utorrent\player\plugins\codec\libschroedinger_plugin.dll
- %APPDATA%\utorrent\player\plugins\codec\libspeex_plugin.dll
- %APPDATA%\utorrent\player\plugins\codec\libtheora_plugin.dll
- %APPDATA%\utorrent\player\plugins\codec\libvorbis_plugin.dll
- %APPDATA%\utorrent\player\plugins\codec\libx264_plugin.dll
- %APPDATA%\utorrent\player\plugins\control\libdummy_plugin.dll
- %APPDATA%\utorrent\player\plugins\control\libgestures_plugin.dll
- %APPDATA%\utorrent\player\plugins\control\libglobalhotkeys_plugin.dll
- %APPDATA%\utorrent\player\plugins\control\libhotkeys_plugin.dll
- %APPDATA%\utorrent\player\plugins\control\libnetsync_plugin.dll
- %APPDATA%\utorrent\player\plugins\control\libntservice_plugin.dll
- %APPDATA%\utorrent\player\plugins\control\liboldrc_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libaiff_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libasf_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libau_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libavi_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libdemuxdump_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libdemux_cdg_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libdemux_stl_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libdirac_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libes_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libflacsys_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libgme_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libh264_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libimage_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\liblive555_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libmjpeg_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libmkv_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libmod_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libmp4_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libmpc_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libmpgv_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libnsc_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libnsv_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libnuv_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libogg_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libplaylist_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libps_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libpva_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\librawaud_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\librawdv_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\librawvid_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libreal_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libsid_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libsmf_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libsubtitle_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libts_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libtta_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libty_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libvc1_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libvoc_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libwav_plugin.dll
- %APPDATA%\utorrent\player\plugins\demux\libxa_plugin.dll
- %APPDATA%\utorrent\player\plugins\gui\libqt4_plugin.dll
- %APPDATA%\utorrent\player\plugins\gui\libskins2_plugin.dll
- %APPDATA%\utorrent\player\plugins\lua\liblua_plugin.dll
- %APPDATA%\utorrent\player\plugins\meta_engine\libfolder_plugin.dll
- %APPDATA%\utorrent\player\plugins\meta_engine\libtaglib_plugin.dll
- %APPDATA%\utorrent\player\plugins\misc\libaudioscrobbler_plugin.dll
- %APPDATA%\utorrent\player\plugins\misc\libexport_plugin.dll
- %APPDATA%\utorrent\player\plugins\misc\libgnutls_plugin.dll
- %APPDATA%\utorrent\player\plugins\misc\liblogger_plugin.dll
- %APPDATA%\utorrent\player\plugins\misc\libmemcpy_plugin.dll
- %APPDATA%\utorrent\player\plugins\misc\libosd_parser_plugin.dll
- %APPDATA%\utorrent\player\plugins\misc\libstats_plugin.dll
- %APPDATA%\utorrent\player\plugins\misc\libxml_plugin.dll
- %APPDATA%\utorrent\player\plugins\mmx\libi420_rgb_mmx_plugin.dll
- %APPDATA%\utorrent\player\plugins\mmx\libi420_yuy2_mmx_plugin.dll
- %APPDATA%\utorrent\player\plugins\mmx\libi422_yuy2_mmx_plugin.dll
- %APPDATA%\utorrent\player\plugins\mmx\libmemcpymmx_plugin.dll
- %APPDATA%\utorrent\player\plugins\mmxext\libmemcpymmxext_plugin.dll
- %APPDATA%\utorrent\player\plugins\mux\libmux_avi_plugin.dll
- %APPDATA%\utorrent\player\plugins\mux\libmux_dummy_plugin.dll
- %APPDATA%\utorrent\player\plugins\mux\libmux_mp4_plugin.dll
- %APPDATA%\utorrent\player\plugins\mux\libmux_mpjpeg_plugin.dll
- %APPDATA%\utorrent\player\plugins\mux\libmux_ogg_plugin.dll
- %APPDATA%\utorrent\player\plugins\mux\libmux_ps_plugin.dll
- %APPDATA%\utorrent\player\plugins\notify\libmsn_plugin.dll
- %APPDATA%\utorrent\player\plugins\packetizer\libpacketizer_copy_plugin.dll
- %APPDATA%\utorrent\player\plugins\packetizer\libpacketizer_dirac_plugin.dll
- %APPDATA%\utorrent\player\plugins\packetizer\libpacketizer_flac_plugin.dll
- %APPDATA%\utorrent\player\plugins\packetizer\libpacketizer_h264_plugin.dll
- %APPDATA%\utorrent\player\plugins\packetizer\libpacketizer_mlp_plugin.dll
- %APPDATA%\utorrent\player\plugins\packetizer\libpacketizer_mpeg4audio_plugin.dll
- %APPDATA%\utorrent\player\plugins\packetizer\libpacketizer_mpeg4video_plugin.dll
- %APPDATA%\utorrent\player\plugins\packetizer\libpacketizer_mpegvideo_plugin.dll
- %APPDATA%\utorrent\player\plugins\services_discovery\libmediadirs_plugin.dll
- %APPDATA%\utorrent\player\plugins\services_discovery\libpodcast_plugin.dll
- %APPDATA%\utorrent\player\plugins\services_discovery\libsap_plugin.dll
- %APPDATA%\utorrent\player\plugins\services_discovery\libupnp_plugin.dll
- %APPDATA%\utorrent\player\plugins\services_discovery\libwindrive_plugin.dll
- %APPDATA%\utorrent\player\plugins\sse2\libi420_rgb_sse2_plugin.dll
- %APPDATA%\utorrent\player\plugins\sse2\libi420_yuy2_sse2_plugin.dll
- %APPDATA%\utorrent\player\plugins\sse2\libi422_yuy2_sse2_plugin.dll
- %APPDATA%\utorrent\player\plugins\stream_filter\libstream_filter_httplive_plugin.dll
- %APPDATA%\utorrent\player\plugins\stream_filter\libstream_filter_record_plugin.dll
- %APPDATA%\utorrent\player\plugins\stream_out\libstream_out_autodel_plugin.dll
- %APPDATA%\utorrent\player\plugins\stream_out\libstream_out_bridge_plugin.dll
- %APPDATA%\utorrent\player\plugins\stream_out\libstream_out_delay_plugin.dll
- %APPDATA%\utorrent\player\plugins\stream_out\libstream_out_description_plugin.dll
- %APPDATA%\utorrent\player\plugins\stream_out\libstream_out_display_plugin.dll
- %APPDATA%\utorrent\player\plugins\stream_out\libstream_out_dummy_plugin.dll
- %APPDATA%\utorrent\player\plugins\stream_out\libstream_out_duplicate_plugin.dll
- %APPDATA%\utorrent\player\plugins\stream_out\libstream_out_es_plugin.dll
- %APPDATA%\utorrent\player\plugins\stream_out\libstream_out_gather_plugin.dll
- %APPDATA%\utorrent\player\plugins\stream_out\libstream_out_langfromtelx_plugin.dll
- %APPDATA%\utorrent\player\plugins\stream_out\libstream_out_mosaic_bridge_plugin.dll
- %APPDATA%\utorrent\player\plugins\stream_out\libstream_out_raop_plugin.dll
- %APPDATA%\utorrent\player\plugins\stream_out\libstream_out_record_plugin.dll
- %APPDATA%\utorrent\player\plugins\stream_out\libstream_out_rtp_plugin.dll
- %APPDATA%\utorrent\player\plugins\stream_out\libstream_out_select_plugin.dll
- %APPDATA%\utorrent\player\plugins\stream_out\libstream_out_setid_plugin.dll
- %APPDATA%\utorrent\player\plugins\stream_out\libstream_out_smem_plugin.dll
- %APPDATA%\utorrent\player\plugins\stream_out\libstream_out_standard_plugin.dll
- %APPDATA%\utorrent\player\plugins\stream_out\libstream_out_transcode_plugin.dll
- %APPDATA%\utorrent\player\plugins\text_renderer\libfreetype_plugin.dll
- %APPDATA%\utorrent\player\plugins\text_renderer\libtdummy_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_chroma\libgrey_yuv_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_chroma\libi420_rgb_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_chroma\libi420_yuy2_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_chroma\libi422_i420_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_chroma\libi422_yuy2_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_chroma\librv32_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_chroma\libyuy2_i420_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_chroma\libyuy2_i422_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libadjust_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libalphamask_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libantiflicker_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libatmo_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libaudiobargraph_v_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libball_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libblendbench_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libblend_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libbluescreen_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libcanvas_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libchain_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libclone_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libcolorthres_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libcroppadd_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libdeinterlace_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\liberase_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libextract_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libgaussianblur_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libgradfun_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libgradient_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libgrain_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libinvert_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\liblogo_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libmagnify_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libmarq_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libmirror_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libmosaic_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libmotionblur_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libmotiondetect_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libosdmenu_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libpanoramix_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libposterize_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libpostproc_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libpsychedelic_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libpuzzle_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libremoteosd_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libripple_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\librotate_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\librss_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libscale_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libscene_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libsepia_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libsharpen_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libsubsdelay_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libswscale_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libtransform_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libwall_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libwave_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_filter\libyuvp_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_output\libcaca_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_output\libdirect2d_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_output\libdirect3d_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_output\libdirectx_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_output\libdrawable_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_output\libglwin32_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_output\libvdummy_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_output\libvmem_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_output\libwingdi_plugin.dll
- %APPDATA%\utorrent\player\plugins\video_output\libyuv_plugin.dll
- %APPDATA%\utorrent\player\plugins\visualization\libgoom_plugin.dll
- %APPDATA%\utorrent\player\plugins\visualization\libprojectm_plugin.dll
- %APPDATA%\utorrent\player\plugins\visualization\libvisual_plugin.dll
- %APPDATA%\utorrent\virusguard\avxdisk.dll
- %APPDATA%\utorrent\virusguard\bdcore.dll
- %APPDATA%\utorrent\virusguard\bdupdateservicecom.dll
- %APPDATA%\utorrent\virusguard\bittorrentantivirus.exe
- %APPDATA%\utorrent\virusguard\btinstall.txt
- %APPDATA%\utorrent\virusguard\scan.dll
- %TEMP%\etilqs_tdgj0svg6zsldrq
- %TEMP%\etilqs_ob2cfobfrjmxf4a
- %TEMP%\etilqs_6litijovcquszts
- %TEMP%\etilqs_74l2atkdhkzvke2
- %TEMP%\etilqs_rxewxtkxphnjaqt
- %TEMP%\etilqs_lbxvp8vzn2wjzby
Deletes the following files
- %TEMP%\uttec32.tmp
- %TEMP%\uttfeb9.tmp
- %TEMP%\nscd807.tmp\inetc.dll
- %TEMP%\nscd807.tmp\nsisfirewall.dll
- %TEMP%\nscd807.tmp\system.dll
- %TEMP%\nscd807.tmp\utorrent.exe
- %TEMP%\nscd807.tmp\utwin_install.log
- %TEMP%\utt80b.tmp
Moves the following files
- from %APPDATA%\utorrent\settings.dat.new to %APPDATA%\utorrent\settings.dat
- from %APPDATA%\utorrent\settings.dat to %APPDATA%\utorrent\settings.dat.old
Substitutes the following files
- %APPDATA%\utorrent\settings.dat.new
- %APPDATA%\utorrent\settings.dat
Network activity
Connects to
- 'i-####.####196.ut.bench.utorrent.com':80
- 'i-##.#####96.ut.bench.utorrent.com':80
- 'up####.utorrent.li':80
- 'au######te.geo.opera.com':80
TCP
HTTP GET requests
- http://up####.utorrent.li/installstats.php?cl############################################################################################################################
- http://up####.utorrent.li/installstats.php?cl####################################################################################################################################################...
- http://ut###ent.com/download/langpacks/dl.php?bu##################################################################
- http://le####.utorrent.com/scripts/dl.php?bu##################################################################
- http://au######te.geo.opera.com/geolocation/
HTTP POST requests
- http://i-####.####196.ut.bench.utorrent.com/e?i=####
- http://i-##.#####96.ut.bench.utorrent.com/e?i=##
UDP
- DNS ASK i-####.####196.ut.bench.utorrent.com
- DNS ASK ro####.bittorrent.com
- DNS ASK ro####.utorrent.com
- DNS ASK i-##.#####96.ut.bench.utorrent.com
- DNS ASK up####.utorrent.li
- DNS ASK ut###ent.com
- DNS ASK le####.utorrent.com
- DNS ASK google.com
- DNS ASK au######te.geo.opera.com
- '<LOCALNET>..39.1':5351
Miscellaneous
Searches for the following windows
- ClassName: 'Edit' WindowName: ''
- ClassName: 'ВµTorrent4823DF041B09' WindowName: ''
- ClassName: 'ВµTorrent4823DF041B0D' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'Opera_MessageWindow' WindowName: '%APPDATA%\Opera Software\Opera Stable'
Creates and executes the following
- '%TEMP%\rarsfx0\utorrent.exe' /S
- '%TEMP%\nscd807.tmp\utorrent.exe' /S
- '%APPDATA%\utorrent\utorrent.exe' /NOINSTALL /BRINGTOFRONT /S
Executes the following
- '%WINDIR%\syswow64\xcopy.exe' /h /e /c /k /Y "Crack" "%APPDATA%\uTorrent\"
- '%ProgramFiles(x86)%\opera\launcher.exe' -noautoupdate -- "https://mawtoload.com/"
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' -noautoupdate --ran-launcher -- https://mawtoload.com/
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera_crashreporter.exe' -noautoupdate --ran-launcher -- https://mawtoload.com/ /crash-reporter-parent-id=2412
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=gpu-process --channel="2412.0.769281608\1584046665" --enable-proprietary-media-types-playback --supports-dual-gpus=false --gpu-driver-bug-workarounds=1,19,42 --gpu-vendor-id=0x0000 --gpu...
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=en-US --enable-proprietary-media-types-playback --disable-client-side-phishing-...
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=renderer --alt-high-dpi-setting=96 --disable-direct-npapi-requests --enable-deferred-image-decoding --lang=en-US --enable-proprietary-media-types-playback --extension-process --enable-we...
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="2412.4.1880421494\42489243" --lang=en-US --no-sandbox --enable-proprietary-media-types-playback /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera_crashreporter.exe' --type=utility --channel="2412.4.1880421494\42489243" --lang=en-US --no-sandbox --enable-proprietary-media-types-playback /prefetch:-645351001 /crash-reporter-parent-id=844
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="2412.5.868329662\641518562" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="2412.6.388539523\494391616" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="2412.7.1398438133\199378808" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="2412.8.436905895\551386001" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="2412.9.1589091662\129812097" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="2412.10.1932922787\1517873708" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="2412.11.1932690875\1969013448" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%ProgramFiles(x86)%\opera\29.0.1795.47\opera.exe' --type=utility --channel="2412.12.564259079\31561947" --lang=en-US --enable-proprietary-media-types-playback --ignored=" --type=renderer " /prefetch:-645351001
- '%WINDIR%\syswow64\taskkill.exe' /f /im "uTorrent.exe"' (with hidden window)
- '%WINDIR%\syswow64\xcopy.exe' /h /e /c /k /Y "Crack" "%APPDATA%\uTorrent\"' (with hidden window)
