Trojan.DownLoader9.8798

Техническая информация

Вредоносные функции:

Создает и запускает на исполнение:

'%WINDIR%\vProtect.exe'

Изменения в файловой системе:

Создает следующие файлы:

%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.1934353[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.4522389[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.4970135[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.6997234[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.2437016[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.5867286[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow8.424115E-02[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.4257059[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.6069728[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.3611053[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.13917[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.1831366[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.9880001[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.2383354[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.8747801[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.7112486[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.6791909[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.4251161[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.2515379[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.5425719[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.4201218[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.2117838[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.5701665[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.3399675[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.4366743[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.5447025[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.477789[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.6617582[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow8.024991E-03[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.4841758[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.6898308[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.4633688[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.7122163[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.9685456[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.813929[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.7852433[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.9699557[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow1.633787E-02[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.6042686[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.2417268[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow8.18634E-03[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow6.909192E-02[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.4366595[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.6392713[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.7895984[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.7326438[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.2855032[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.6925226[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow9.676868E-02[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.3844448[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.7473947[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.113676[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.2228236[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.5268748[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow1.379961E-02[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.4196289[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.4692686[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.2746172[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.7575961[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.833033[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.0924722[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.3691729[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.1441683[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.4398119[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.9562098[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.2903066[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.8674379[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.5389225[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.6938294[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.3825275[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.6267774[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow9.704149E-02[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.7399244[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.461767[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.6999221[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.2991803[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.855284[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.2374007[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.9642978[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.9257535[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.7623524[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.8180567[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.5191986[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.5565825[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.8444046[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.9118035[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.5488628[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.5718108[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.5735529[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.4737264[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.6904532[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.9255604[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.4172019[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.3626354[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.9198312[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.9027519[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.4085694[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.6625913[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.8302167[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.3495976[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.9113542[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.9439859[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.3276955[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.97084[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.2613617[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.9295537[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.2481869[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.7387573[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.5048502[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.3273565[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.6845557[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.9133457[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.6582527[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow9.218097E-02[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.4453111[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.9263899[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.198623[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.8277069[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.7942854[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.4007186[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.9090437[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.4756423[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.2197472[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.1917186[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.2372146[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.9144704[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.2610272[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.3985397[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.4669427[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.1724192[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.2630569[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.2435255[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.81568[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.6479409[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.7279628[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.1487818[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.8320933[1].aspx
%TEMP%\10000000.dat
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.3426841[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.8626944[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.62346[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.908461[1].aspx
%WINDIR%\SDOModule.dat
%WINDIR%\VcodeX.dll
%WINDIR%\vProtect.exe
%TEMP%\536679649088
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\getInfo[1].php
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ChgPwdStepInputAcc[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.7471364[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.6199793[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.1710805[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.782892[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.3294584[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow1.533699E-02[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.62039[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.4318398[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.1468273[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.3401707[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.6880154[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.9659511[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.9336049[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.87499[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.4372656[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.7619534[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.888445[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.8554404[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.4266999[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.4613167[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.1360964[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.3108646[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow9.597749E-02[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.7284179[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.4638852[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.8636758[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.9010056[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.2820486[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.706832[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.8584179[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.224739[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.5513903[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.539077[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.3507376[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.4984043[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.4015222[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow3.414208E-02[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.8012351[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.9488695[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow9.731877E-02[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.7885787[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.3239993[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.1462054[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.6656954[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.3399608[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.1806188[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.1201463[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow1.273471E-02[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.9173813[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.9487165[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.9189233[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.8694874[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.1000368[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.2747536[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.7771569[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.9835598[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.38497[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.1415678[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.3376117[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow7.044673E-03[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.8889012[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.7661793[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ValidateCodeImgShow0.8163738[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.6286666[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.9074019[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ValidateCodeImgShow0.8004274[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\ValidateCodeImgShow0.7151385[1].aspx
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\ValidateCodeImgShow0.136248[1].aspx

Удаляет следующие файлы:

%TEMP%\536679649088

Сетевая активность:

Подключается к:

'di#.##mail.co.cc':80
'pw#.sdo.com':80
'localhost':1036

TCP:

Запросы HTTP GET:

pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.6997234.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.2437016.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.5867286.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.5701665.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.3399675.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.2383354.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.1934353.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.13917.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.1831366.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9880001.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4522389.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4970135.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow8.424115E-02.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.2515379.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.5425719.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.8747801.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4737264.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.6904532.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4251161.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.7112486.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.5447025.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.477789.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.2117838.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.6791909.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4201218.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4366743.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4257059.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.6898308.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4633688.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.7122163.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.3844448.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.7473947.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow8.18634E-03.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.6617582.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow1.633787E-02.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.6042686.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.2417268.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow8.024991E-03.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4841758.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9685456.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.7326438.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.2855032.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow6.909192E-02.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.6069728.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.3611053.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.7895984.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4366595.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.2228236.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.5268748.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow9.676868E-02.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.6392713.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.6925226.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.113676.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.7575961.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.833033.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow1.379961E-02.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.2374007.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.5389225.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.2746172.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4196289.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.2903066.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.8674379.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.3691729.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4692686.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.0924722.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9562098.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.461767.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.6938294.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.3825275.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.6384221.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow9.704149E-02.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.7399244.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.6267774.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.7623524.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.2991803.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.855284.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.6999221.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9642978.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9257535.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.1441683.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9118035.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.5488628.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.8180567.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.2613617.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9198312.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.8444046.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.5191986.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4172019.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.3626354.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.5735529.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.5565825.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.5718108.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9255604.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9113542.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9027519.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4085694.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4398119.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.8302167.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.3495976.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.6625913.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.7387573.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.3276955.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.97084.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9439859.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9295537.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.2481869.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.2435255.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4756423.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9133457.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.7279628.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.1724192.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.2630569.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.6582527.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.6845557.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4453111.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.7942854.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow9.218097E-02.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.5048502.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.3273565.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9189233.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9144704.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.2610272.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.2747536.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9173813.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9487165.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.3985397.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4669427.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.81568.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.6479409.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.2197472.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.1917186.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.2372146.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4007186.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.6880154.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.7471364.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.3426841.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.87499.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.1468273.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.3401707.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.8626944.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.908461.aspx?nu###
di#.##mail.co.cc/getInfo.php?ma#####################################################################################
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ChgPwdStepInputAcc.aspx?pw###############
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.62346.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.1487818.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.8320933.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.8277069.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.3294584.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow1.533699E-02.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9090437.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9263899.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.198623.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.62039.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4318398.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9659511.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9336049.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.6199793.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.1710805.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.782892.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.2820486.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.8554404.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4266999.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4015222.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow3.414208E-02.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.8012351.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4613167.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.1360964.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4638852.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.8636758.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4372656.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.7619534.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.888445.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.5513903.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.539077.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.3507376.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.813929.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.7852433.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9699557.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.706832.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9488695.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow9.731877E-02.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.7885787.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.8584179.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.224739.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.4984043.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9010056.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.7771569.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.3399608.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.1806188.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.8163738.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.6286666.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9074019.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.1201463.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow1.273471E-02.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.8694874.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.1000368.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.3239993.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.1462054.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.6656954.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.3376117.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow7.044673E-03.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.8889012.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.3108646.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow9.597749E-02.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.7284179.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.9835598.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.8004274.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.7151385.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.136248.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.38497.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.1415678.aspx?nu###
pw#.sdo.com/PTInfo/SafeCenter/GetPwd/ValidateCodeImgShow0.7661793.aspx?nu###

UDP:

DNS ASK di#.##mail.co.cc
DNS ASK pw#.sdo.com

Другое:

Ищет следующие окна:

ClassName: 'Shell_TrayWnd' WindowName: ''
ClassName: 'MS_WebcheckMonitor' WindowName: ''
ClassName: 'MS_AutodialMonitor' WindowName: ''

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней