Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %LOCALAPPDATA%\microsoft\windows\history\history.ie5\mshist012021072620210727\index.dat
Изменяет следующие файлы
Сетевая активность
Подключается к
- 'tu###ideo.eu':80
- 'r3.#.lencr.org':80
- 'x1.#.lencr.org':80
- 'al##uck.biz':80
- 'cd#.#opcash.net':80
- 'po##day.top':80
- 'ga####ynudist.eu':80
- 'microsoft.com':80
- 'nu####russian.eu':80
- 're###wsex.xyz':80
- 'js.##nspace.io':443
- 'a.###lsrv.com':443
- 'se##top.eu':80
- 'nu##y.eu':80
- 'sh###per.org':80
- 'nu##play.eu':80
- 'oc##.#tartssl.com':80
TCP
Запросы HTTP GET
- http://tu###ideo.eu/ojaftz11.html
- http://i.###fuck.biz/streamrotator/thumbs/vl/645044.jpg
- http://i.###fuck.biz/streamrotator/thumbs/ul/644978.jpg
- http://i.###fuck.biz/streamrotator/thumbs/Ji/503723.jpg
- http://i.###fuck.biz/streamrotator/thumbs/ul/644985.jpg
- http://i.###fuck.biz/streamrotator/thumbs/Uk/618108.jpg
- http://i.###fuck.biz/streamrotator/thumbs/Gi/500083.jpg
- http://i.###fuck.biz/streamrotator/thumbs/gi/474407.jpg
- http://i.###fuck.biz/streamrotator/thumbs/pi/483032.jpg
- http://i.###fuck.biz/streamrotator/thumbs/rl/641385.jpg
- http://i.###fuck.biz/streamrotator/thumbs/Qi/510869.jpg
- http://i.###fuck.biz/streamrotator/thumbs/sl/642355.jpg
- http://i.###fuck.biz/streamrotator/thumbs/jl/633386.jpg
- http://i.###fuck.biz/streamrotator/thumbs/tl/643500.jpg
- http://i.###fuck.biz/streamrotator/thumbs/rl/641327.jpg
- http://i.###fuck.biz/streamrotator/thumbs/rl/641883.jpg
- http://i.###fuck.biz/streamrotator/thumbs/tl/643812.jpg
- http://i.###fuck.biz/streamrotator/thumbs/rl/641507.jpg
- http://i.###fuck.biz/streamrotator/thumbs/ql/640605.jpg
- http://i.###fuck.biz/streamrotator/thumbs/sl/642943.jpg
- http://i.###fuck.biz/streamrotator/thumbs/ql/640114.jpg
- http://i.###fuck.biz/streamrotator/thumbs/rl/641873.jpg
- http://i.###fuck.biz/streamrotator/thumbs/ul/644575.jpg
- http://i.###fuck.biz/streamrotator/thumbs/tl/643146.jpg
- http://i.###fuck.biz/streamrotator/thumbs/Gj/552141.jpg
- http://i.###fuck.biz/streamrotator/thumbs/rk/589144.jpg
- http://i.###fuck.biz/streamrotator/thumbs/ul/644616.jpg
- http://nu##play.eu/favicon.ico
- http://po##day.top/xxx/out.php?l=########
- http://al##uck.biz/f/check.php?t=#############################################################
- http://i.###fuck.biz/streamrotator/thumbs/rl/641245.jpg
- http://i.###fuck.biz/streamrotator/thumbs/sl/642366.jpg
- http://i.###fuck.biz/streamrotator/thumbs/ql/640369.jpg
- http://i.###fuck.biz/streamrotator/thumbs/tl/643369.jpg
- http://i.###fuck.biz/streamrotator/thumbs/sl/642998.jpg
- http://i.###fuck.biz/streamrotator/thumbs/tl/643725.jpg
- http://i.###fuck.biz/streamrotator/thumbs/tl/643305.jpg
- http://nu##play.eu/tanolsew.js
- http://i.###fuck.biz/streamrotator/thumbs/sl/642714.jpg
- http://i.###fuck.biz/streamrotator/thumbs/tl/643652.jpg
- http://i.###fuck.biz/streamrotator/thumbs/tl/643772.jpg
- http://i.###fuck.biz/streamrotator/thumbs/sl/642363.jpg
- http://i.###fuck.biz/streamrotator/thumbs/ul/644322.jpg
- http://i.###fuck.biz/streamrotator/thumbs/tl/643515.jpg
- http://i.###fuck.biz/streamrotator/thumbs/tl/643805.jpg
- http://i.###fuck.biz/streamrotator/thumbs/ul/644990.jpg
- http://i.###fuck.biz/streamrotator/thumbs/ql/640693.jpg
- http://i.###fuck.biz/streamrotator/thumbs/ql/640841.jpg
- http://i.###fuck.biz/streamrotator/thumbs/sl/642630.jpg
- http://i.###fuck.biz/streamrotator/thumbs/sl/642535.jpg
- http://i.###fuck.biz/streamrotator/thumbs/ql/640969.jpg
- http://i.###fuck.biz/streamrotator/thumbs/yk/596083.jpg
- http://i.###fuck.biz/streamrotator/thumbs/rl/641176.jpg
- http://i.###fuck.biz/streamrotator/thumbs/xk/595289.jpg
- http://i.###fuck.biz/streamrotator/thumbs/Nk/611329.jpg
- http://i.###fuck.biz/streamrotator/thumbs/ul/644017.jpg
- http://i.###fuck.biz/streamrotator/thumbs/sl/642158.jpg
- http://i.###fuck.biz/streamrotator/thumbs/pl/639905.jpg
- http://i.###fuck.biz/streamrotator/thumbs/qk/588525.jpg
- http://i.###fuck.biz/streamrotator/thumbs/tl/643522.jpg
- http://i.###fuck.biz/streamrotator/thumbs/rl/641104.jpg
- http://i.###fuck.biz/streamrotator/thumbs/tl/643103.jpg
- http://i.###fuck.biz/streamrotator/thumbs/Uk/618467.jpg
- http://i.###fuck.biz/streamrotator/thumbs/sl/642596.jpg
- http://i.###fuck.biz/streamrotator/thumbs/pl/639826.jpg
- http://i.###fuck.biz/streamrotator/thumbs/gk/578049.jpg
- http://i.###fuck.biz/streamrotator/thumbs/Xk/621243.jpg
- http://i.###fuck.biz/streamrotator/thumbs/ul/644235.jpg
- http://i.###fuck.biz/streamrotator/thumbs/rl/641297.jpg
- http://i.###fuck.biz/streamrotator/thumbs/pl/639846.jpg
- http://i.###fuck.biz/streamrotator/thumbs/wk/594775.jpg
- http://i.###fuck.biz/streamrotator/thumbs/Dk/601971.jpg
- http://i.###fuck.biz/streamrotator/thumbs/sl/642215.jpg
- http://i.###fuck.biz/streamrotator/thumbs/rl/641710.jpg
- http://i.###fuck.biz/streamrotator/thumbs/tl/643739.jpg
- http://i.###fuck.biz/streamrotator/thumbs/tl/643473.jpg
- http://i.###fuck.biz/streamrotator/thumbs/ql/640406.jpg
- http://i.###fuck.biz/streamrotator/thumbs/rl/641037.jpg
- http://i.###fuck.biz/streamrotator/thumbs/rl/641896.jpg
- http://i.###fuck.biz/streamrotator/thumbs/sl/642106.jpg
- http://i.###fuck.biz/streamrotator/thumbs/ql/640942.jpg
- http://i.###fuck.biz/streamrotator/thumbs/tl/643318.jpg
- http://i.###fuck.biz/streamrotator/thumbs/tl/643046.jpg
- http://i.###fuck.biz/streamrotator/thumbs/ti/487172.jpg
- http://i.###fuck.biz/streamrotator/thumbs/Ak/598901.jpg
- http://i.###fuck.biz/streamrotator/thumbs/Uj/566095.jpg
- http://i.###fuck.biz/streamrotator/thumbs/sl/642016.jpg
- http://i.###fuck.biz/streamrotator/thumbs/Zk/623019.jpg
- http://i.###fuck.biz/streamrotator/thumbs/pl/639698.jpg
- http://i.###fuck.biz/streamrotator/thumbs/al/624969.jpg
- http://i.###fuck.biz/streamrotator/thumbs/Si/512694.jpg
- http://i.###fuck.biz/streamrotator/thumbs/tl/643561.jpg
- http://i.###fuck.biz/streamrotator/thumbs/lk/583533.jpg
- http://i.###fuck.biz/streamrotator/thumbs/ql/640123.jpg
- http://i.###fuck.biz/streamrotator/thumbs/si/486522.jpg
- http://i.###fuck.biz/streamrotator/thumbs/Qi/510327.jpg
- http://i.###fuck.biz/streamrotator/thumbs/sl/642817.jpg
- http://i.###fuck.biz/streamrotator/thumbs/Qj/562662.jpg
- http://i.###fuck.biz/streamrotator/thumbs/Rj/563833.jpg
- http://i.###fuck.biz/streamrotator/thumbs/kl/634572.jpg
- http://i.###fuck.biz/streamrotator/thumbs/sl/642658.jpg
- http://i.###fuck.biz/streamrotator/thumbs/rl/641498.jpg
- http://i.###fuck.biz/streamrotator/thumbs/Wk/620002.jpg
- http://nu##play.eu/pics/2.png
- http://i.###fuck.biz/streamrotator/thumbs/tl/643095.jpg
- http://nu##play.eu/pics/1.png
- http://i.###iewsex.xyz/streamrotator/thumbs/bc/157351.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/ca/54108.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/na/65074.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/M/38544.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Qb/146414.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/bc/157115.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/dc/159645.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/ka/62917.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/f/5765.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/V/47451.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Bb/131930.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/G/32306.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Xb/153159.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/za/77281.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/ra/69549.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/u/20219.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/wb/126158.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/bc/157766.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/r/17386.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Ya/102280.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/ea/56023.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Ya/102421.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/f/5551.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/sa/70812.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/ka/62734.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Nb/143276.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Xb/153234.jpg
- http://tu###ideo.eu/agvv2.html
- http://tu###ideo.eu/madjr.cgi?2&##################################################
- http://po##otop.eu/favicon.ico
- http://tu###ideo.eu/2.html
- http://tu###ideo.eu/smedc.cgi?2&###################################################
- http://tu###ideo.eu/jry.cgi?3
- http://sh###per.org/ajn.cgi?14###########
- http://po##otop.eu/go.php?u=############################################
- http://nu##y.eu/analiz.js
- http://nu##y.eu/ftt2/o.php
- http://se##top.eu/favicon.ico
- http://re###wsex.xyz/f/check.php?t=#############################################################
- http://i.###iewsex.xyz/streamrotator/thumbs/cc/158882.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Ya/102462.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/sb/122789.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Kb/140662.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/dc/159072.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Zb/155905.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/y/24356.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Xb/153078.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Zb/155626.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/w/22469.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Ya/102068.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/bc/157081.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/sb/122738.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/qa/68159.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/mb/116497.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Xb/153933.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Xb/153264.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/c/2835.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Ea/82908.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/wb/126616.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/da/55192.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Ca/80069.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/m/12696.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/a/13.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/l/11627.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Ba/79065.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Xb/153651.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/ac/156366.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/H/33697.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/ya/76679.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/oa/66923.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/ab/104507.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/E/30932.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/J/35336.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/ob/118862.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/R/43240.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/ua/72701.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Z/51192.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/ac/156267.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/f/5958.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Lb/141478.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Zb/155743.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Xb/153606.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/ac/156600.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Xb/153179.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/R/43918.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Zb/155872.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/cc/158161.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Yb/154548.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Y/50041.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/ka/62954.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/sb/122895.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Ra/95328.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Zb/155979.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Xb/153327.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/W/48911.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Va/99195.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/t/19177.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/cc/158318.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/w/22663.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Lb/141504.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Xb/153836.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/p/15640.jpg
- http://i.###iewsex.xyz/streamrotator/thumbs/Yb/154902.jpg
- http://tu###ideo.eu/pddwkg.cgi?2&###############################
- http://al##uck.biz/favicon.ico
Другие
- 'a.###lsrv.com':443
- 'js.##nspace.io':443
UDP
- DNS ASK tu###ideo.eu
- DNS ASK r3.#.lencr.org
- DNS ASK microsoft.com
- DNS ASK x1.#.lencr.org
- DNS ASK i.###fuck.biz
- DNS ASK al##uck.biz
- DNS ASK pl########.safestcontentgate.com
- DNS ASK po##day.top
- DNS ASK ga####ynudist.eu
- DNS ASK nu####russian.eu
- DNS ASK st####.rapidssl.com
- DNS ASK cd#.#opcash.net
- DNS ASK i.###iewsex.xyz
- DNS ASK re###wsex.xyz
- DNS ASK js.##nspace.io
- DNS ASK a.###lsrv.com
- DNS ASK nu##y.eu
- DNS ASK po##otop.eu
- DNS ASK fr###ornteen.eu
- DNS ASK sh###per.org
- DNS ASK se##top.eu
- DNS ASK nu##play.eu
- DNS ASK oc##.#tartssl.com
Другое
Ищет следующие окна
- ClassName: 'Static' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
