Trojan.Encoder.26694

Technical Information

To ensure autorun and distribution:

Creates the following files on removable media:

<Drive name for removable media>:\EPOBLOCKL-NOTE.txt

Modifies file system:

Creates the following files:

<Current directory>\EPOBLOCKL-NOTE.txt
%TEMP%\bookmarks.html
%TEMP%\excel.xls.Epoblockl
%TEMP%\bookmarks.html.Crypted
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\EPOBLOCKL-NOTE.txt
%APPDATA%\Mozilla\Firefox\Profiles\EPOBLOCKL-NOTE.txt
%APPDATA%\Mozilla\Firefox\EPOBLOCKL-NOTE.txt
%APPDATA%\Mozilla\EPOBLOCKL-NOTE.txt
%APPDATA%\EPOBLOCKL-NOTE.txt
%HOMEPATH%\Cookies\EPOBLOCKL-NOTE.txt
%HOMEPATH%\Desktop\EPOBLOCKL-NOTE.txt
%HOMEPATH%\Favorites\Links\EPOBLOCKL-NOTE.txt
%HOMEPATH%\Favorites\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Outlook Express\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Identities\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Microsoft\CD Burning\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Microsoft\Credentials\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Microsoft\Media Player\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Microsoft\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\0\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\1\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\2\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\3\EPOBLOCKL-NOTE.txt
%APPDATA%\Mozilla\Extensions\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Cookies\EPOBLOCKL-NOTE.txt
%APPDATA%\Microsoft\EPOBLOCKL-NOTE.txt
%APPDATA%\Microsoft\SystemCertificates\My\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Local Settings\Application Data\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Local Settings\History\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Local Settings\Temp\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Local Settings\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\EPOBLOCKL-NOTE.txt
%APPDATA%\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\EPOBLOCKL-NOTE.txt
%APPDATA%\Identities\EPOBLOCKL-NOTE.txt
%APPDATA%\Microsoft\Address Book\EPOBLOCKL-NOTE.txt
%APPDATA%\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\EPOBLOCKL-NOTE.txt
%APPDATA%\Microsoft\Credentials\EPOBLOCKL-NOTE.txt
%APPDATA%\Microsoft\Internet Explorer\EPOBLOCKL-NOTE.txt
%APPDATA%\Microsoft\Media Player\EPOBLOCKL-NOTE.txt
%APPDATA%\Microsoft\MMC\EPOBLOCKL-NOTE.txt
%APPDATA%\Microsoft\SystemCertificates\My\Certificates\EPOBLOCKL-NOTE.txt
%APPDATA%\Microsoft\SystemCertificates\My\CRLs\EPOBLOCKL-NOTE.txt
%APPDATA%\Microsoft\SystemCertificates\My\CTLs\EPOBLOCKL-NOTE.txt
%APPDATA%\Microsoft\SystemCertificates\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-20\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\4\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\8\EPOBLOCKL-NOTE.txt
%HOMEPATH%\NetHood\EPOBLOCKL-NOTE.txt
%HOMEPATH%\PrintHood\EPOBLOCKL-NOTE.txt
%TEMP%\DrWebVirtNet.lnk
%TEMP%\Sample Music.lnk.Crypted
%TEMP%\Sample Pictures.lnk.Crypted
%HOMEPATH%\Recent\EPOBLOCKL-NOTE.txt
%HOMEPATH%\SendTo\EPOBLOCKL-NOTE.txt
%TEMP%\Far.lnk
%HOMEPATH%\Start Menu\EPOBLOCKL-NOTE.txt
%HOMEPATH%\Templates\EPOBLOCKL-NOTE.txt
%HOMEPATH%\EPOBLOCKL-NOTE.txt
%TEMP%\Set Program Access and Defaults.lnk.Crypted
C:\Documents and Settings\EPOBLOCKL-NOTE.txt
%TEMP%\Far.lnk.Crypted
%TEMP%\far.map.Crypted
C:\Far2\EPOBLOCKL-NOTE.txt
C:\Muldrop\EPOBLOCKL-NOTE.txt
C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\EPOBLOCKL-NOTE.txt
C:\RECYCLER\EPOBLOCKL-NOTE.txt
%TEMP%\list_full.txt
%TEMP%\list_full.txt.Crypted
<STUBS_DIR>\EPOBLOCKL-NOTE.txt
%TEMP%\clock.avi
%TEMP%\clock.avi.Crypted
%HOMEPATH%\My Documents\My Received Files\EPOBLOCKL-NOTE.txt
%HOMEPATH%\My Documents\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\6\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\5\EPOBLOCKL-NOTE.txt
%HOMEPATH%\My Documents\My Music\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\9\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\A\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\B\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\C\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\D\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\E\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\F\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\startupCache\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Mozilla\Firefox\Profiles\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Mozilla\Firefox\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\Mozilla\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\VMware\EPOBLOCKL-NOTE.txt
<LS_APPDATA>\EPOBLOCKL-NOTE.txt
%HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\EPOBLOCKL-NOTE.txt
%HOMEPATH%\Local Settings\History\History.IE5\EPOBLOCKL-NOTE.txt
%HOMEPATH%\Local Settings\History\EPOBLOCKL-NOTE.txt
%TEMP%\EPOBLOCKL-NOTE.txt
%HOMEPATH%\Local Settings\<INETFILES>\EPOBLOCKL-NOTE.txt
%HOMEPATH%\Local Settings\EPOBLOCKL-NOTE.txt
%HOMEPATH%\My Documents\Downloads\EPOBLOCKL-NOTE.txt
%TEMP%\Sample Music.lnk
%TEMP%\Sample Pictures.lnk
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\7\EPOBLOCKL-NOTE.txt
%HOMEPATH%\My Documents\My Pictures\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Application Data\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Documents\My Videos\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Documents\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\DRM\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Favorites\EPOBLOCKL-NOTE.txt
%TEMP%\Set Program Access and Defaults.lnk
%ALLUSERSPROFILE%\Start Menu\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Templates\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\EPOBLOCKL-NOTE.txt
%TEMP%\brndlog.txt
C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Application Data\Microsoft\Media Player\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Application Data\Microsoft\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Application Data\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Cookies\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Desktop\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Favorites\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Local Settings\Application Data\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Local Settings\History\History.IE5\EPOBLOCKL-NOTE.txt
%TEMP%\Blue hills.jpg.Crypted
%ALLUSERSPROFILE%\Documents\My Music\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\MachineKeys\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\MachineKeys\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\S-1-5-18\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Dr Watson\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\HTML Help\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Media Index\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Media Player\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Cm\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Pbk\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Application Data\Microsoft\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Application Data\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Desktop\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Documents\My Music\My Playlists\EPOBLOCKL-NOTE.txt
%TEMP%\Beethoven's Symphony No. 9 (Scherzo).wma
%TEMP%\Beethoven's Symphony No. 9 (Scherzo).wma.Crypted
%ALLUSERSPROFILE%\Documents\My Music\Sample Music\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\EPOBLOCKL-NOTE.txt
%TEMP%\Blue hills.jpg
C:\Documents and Settings\Default User\Local Settings\History\EPOBLOCKL-NOTE.txt
%ALLUSERSPROFILE%\Documents\My Pictures\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Local Settings\Temp\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Application Data\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-19\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Local Settings\Application Data\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Local Settings\History\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Local Settings\Temp\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\BGGTYMH1\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\CJCTQ25G\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\LBMMC3H3\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\MOE00UY1\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Local Settings\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\S-1-5-20\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Internet Explorer\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Media Player\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\Certificates\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CRLs\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CTLs\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Application Data\Microsoft\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Cookies\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CTLs\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Local Settings\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\My Documents\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\NetHood\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\PrintHood\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Recent\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\SendTo\EPOBLOCKL-NOTE.txt
%TEMP%\Remote Assistance.lnk
%WINDIR%\EPOBLOCKL-NOTE.txt
%TEMP%\far.map
%TEMP%\brndlog.txt.Crypted
C:\Documents and Settings\Default User\Start Menu\EPOBLOCKL-NOTE.txt
%TEMP%\excel.xls
%TEMP%\excel.xls.Crypted
C:\Documents and Settings\Default User\Templates\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\S-1-5-19\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Application Data\Microsoft\Internet Explorer\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Application Data\Microsoft\Media Player\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Certificates\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CRLs\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\EPOBLOCKL-NOTE.txt
C:\Documents and Settings\Default User\Start Menu\Programs\EPOBLOCKL-NOTE.txt
C:\EPOBLOCKL-NOTE.txt

Deletes the following files:

%TEMP%\excel.xls
%TEMP%\list_full.txt
%TEMP%\clock.avi

Substitutes the following files:

%TEMP%\excel.xls

Network activity:

Connects to:

'wp#d':80
'fa#####eathes.6te.net':80

TCP:

HTTP GET requests:

http://11#.#11.111.1/wpad.dat via wp#d
http://fa#####eathes.6te.net/write.php?in####################################################################

UDP:

DNS ASK wp#d
DNS ASK fa#####eathes.6te.net

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations

Free trial