Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %LOCALAPPDATA%\microsoft\windows\history\history.ie5\mshist012021071720210718\index.dat
Изменяет следующие файлы
Сетевая активность
Подключается к
- 'tu###ideo.eu':80
- 'nu###mtown.eu':80
- 'nu##play.me':80
- 'sh###per.org':80
- 'to###udism.eu':80
- 'be####fulsex.biz':80
TCP
Запросы HTTP GET
- http://po##otop.eu/favicon.ico
- http://i.####tifulsex.biz/streamrotator/thumbs/wd/230383.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/vd/229731.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/sd/226016.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/vd/229472.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/ud/228450.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/td/227440.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/sd/226498.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/pd/223232.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/gd/214963.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/vd/229900.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/td/227073.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/xd/231533.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/vd/229206.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/ld/219364.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/xd/231750.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/ud/228857.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/ud/228618.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/md/220813.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/td/227842.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/vd/229102.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/gd/214600.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/pd/223482.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/ed/212922.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/Zc/207396.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/vd/229208.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/fd/213877.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/vd/229549.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/pd/223924.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/wd/230072.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/nd/221102.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/sd/226813.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/vd/229309.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/xd/231386.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/Qc/198499.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/hd/215519.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/dd/211588.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/Mc/194534.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/sd/226709.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/td/227136.jpg
- http://be####fulsex.biz/f/check.php?t=############################################################
- http://i.####tifulsex.biz/streamrotator/thumbs/ud/228335.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/md/220724.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/xd/231649.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/fd/213439.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/td/227746.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/ld/219490.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/ld/219931.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/nd/221917.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/Tc/201179.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/xd/231299.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/sd/226116.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/nd/221591.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/wd/230049.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/Sc/200099.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/rd/225024.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/hd/215338.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/ud/228505.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/Tc/201270.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/ed/212215.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/hd/215509.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/pd/223538.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/Nc/195510.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/vd/229979.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/Lc/193146.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/td/227999.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/sd/226159.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/Zc/207099.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/xd/231822.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/wd/230477.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/xd/231751.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/vd/229744.jpg
- http://nu##play.me/
- http://nu###mtown.eu/analiz.js
- http://nu##play.me/ftt2/o.php
- http://nu###mtown.eu/ftt2/o.php
- http://tu###ideo.eu/jry.cgi?3
- http://tu###ideo.eu/mqcnd.cgi?2&###################################################
- http://tu###ideo.eu/2.html
- http://i.####tifulsex.biz/streamrotator/thumbs/dd/211947.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/rd/225689.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/Gc/188890.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/dd/211195.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/Qc/198731.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/sd/226137.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/Nc/195053.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/Zc/207011.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/xd/231275.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/kd/218792.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/nd/221597.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/od/222886.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/rd/225128.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/wd/230367.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/wd/230815.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/xd/231634.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/kd/218633.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/xd/231869.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/Zc/207533.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/Rc/199503.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/rd/225593.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/sd/226718.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/td/227976.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/sd/226595.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/ud/228364.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/ud/228387.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/gd/214622.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/ed/212326.jpg
- http://i.####tifulsex.biz/streamrotator/thumbs/vd/229963.jpg
- http://be####fulsex.biz/favicon.ico
UDP
- DNS ASK tu###ideo.eu
- DNS ASK po##otop.eu
- DNS ASK nu###mtown.eu
- DNS ASK sh###per.org
- DNS ASK nu##play.me
- DNS ASK to###udism.eu
- DNS ASK cd#.#opcash.net
- DNS ASK be####fulsex.biz
- DNS ASK i.####tifulsex.biz
Другое
Ищет следующие окна
- ClassName: 'Static' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
