Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\crypt] 'DLLName' = 'crypts.dll'
- %WINDIR%\Explorer.EXE
- %TEMP%\8CBB.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[55].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[55].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[56].php
- %TEMP%\8FB8.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[55].php
- %TEMP%\83D1.tmp
- %TEMP%\86BF.tmp
- %TEMP%\89CD.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[55].php
- %TEMP%\9BBE.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[56].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[57].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[57].php
- %TEMP%\9ECC.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[56].php
- %TEMP%\92C6.tmp
- %TEMP%\95B4.tmp
- %TEMP%\98C1.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[56].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[54].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[53].php
- %TEMP%\6BF4.tmp
- %TEMP%\6EE2.tmp
- %TEMP%\71E0.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[53].php
- %TEMP%\6618.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[52].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[52].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[52].php
- %TEMP%\68F6.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[54].php
- %TEMP%\7AD9.tmp
- %TEMP%\7DE6.tmp
- %TEMP%\80D4.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[54].php
- %TEMP%\74DD.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[53].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[53].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[54].php
- %TEMP%\77DB.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[60].php
- %TEMP%\CAFC.tmp
- %TEMP%\CDFA.tmp
- %TEMP%\D107.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[61].php
- %TEMP%\C501.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[60].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[60].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[60].php
- %TEMP%\C80E.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[62].php
- %TEMP%\DA5E.tmp
- %TEMP%\DD4C.tmp
- %TEMP%\E03A.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[62].php
- %TEMP%\D424.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[61].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[61].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[61].php
- %TEMP%\D731.tmp
- %TEMP%\C203.tmp
- %TEMP%\ACC6.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[58].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[58].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[58].php
- %TEMP%\AFC3.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[57].php
- %TEMP%\A1C9.tmp
- %TEMP%\A69C.tmp
- %TEMP%\A98A.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[57].php
- %TEMP%\BBF8.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[59].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[59].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[59].php
- %TEMP%\BF06.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[58].php
- %TEMP%\B2E0.tmp
- %TEMP%\B5EE.tmp
- %TEMP%\B8FB.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[59].php
- %TEMP%\1393.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[45].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[45].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[45].php
- %TEMP%\1681.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[44].php
- %TEMP%\AC9.tmp
- %TEMP%\DB7.tmp
- %TEMP%\10A5.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[45].php
- %TEMP%\2249.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[46].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[46].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[47].php
- %TEMP%\2537.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[46].php
- %TEMP%\196F.tmp
- %TEMP%\1C6D.tmp
- %TEMP%\1F5B.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[46].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[44].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[42].php
- %TEMP%\F349.tmp
- %TEMP%\F628.tmp
- %TEMP%\F925.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[43].php
- %TEMP%\ED5E.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[42].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[42].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[42].php
- %TEMP%\F05B.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[44].php
- %TEMP%\1EF.tmp
- %TEMP%\4DD.tmp
- %TEMP%\7BC.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[44].php
- %TEMP%\FC04.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[43].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[43].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[43].php
- %TEMP%\FEF2.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[50].php
- %TEMP%\4E89.tmp
- %TEMP%\5177.tmp
- %TEMP%\5465.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[50].php
- %TEMP%\489D.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[49].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[50].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[50].php
- %TEMP%\4B8B.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[51].php
- %TEMP%\5D3E.tmp
- %TEMP%\603C.tmp
- %TEMP%\632A.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[52].php
- %TEMP%\5762.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[51].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[51].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[51].php
- %TEMP%\5A50.tmp
- %TEMP%\45A0.tmp
- %TEMP%\310E.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[47].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[48].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[48].php
- %TEMP%\33FC.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[47].php
- %TEMP%\2825.tmp
- %TEMP%\2B13.tmp
- %TEMP%\2E01.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[47].php
- %TEMP%\3FC4.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[49].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[49].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[49].php
- %TEMP%\42B2.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[48].php
- %TEMP%\36EA.tmp
- %TEMP%\39C8.tmp
- %TEMP%\3CE5.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[48].php
- %TEMP%\83EC.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[76].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[76].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[76].php
- %TEMP%\87B5.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[75].php
- %TEMP%\7B60.tmp
- %TEMP%\7E3F.tmp
- %TEMP%\80A0.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[75].php
- %TEMP%\94C4.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[77].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[77].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[77].php
- %TEMP%\9801.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[76].php
- %TEMP%\8AD2.tmp
- %TEMP%\8E2D.tmp
- %TEMP%\9169.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[77].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[75].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[73].php
- %TEMP%\63D1.tmp
- %TEMP%\66A0.tmp
- %TEMP%\69DC.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[73].php
- %TEMP%\5EC0.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[72].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[73].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[73].php
- %TEMP%\6112.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[74].php
- %TEMP%\7362.tmp
- %TEMP%\75A4.tmp
- %TEMP%\78B1.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[75].php
- %TEMP%\6D18.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[74].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[74].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[74].php
- %TEMP%\7074.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[81].php
- %TEMP%\C3F3.tmp
- %TEMP%\C75E.tmp
- %TEMP%\CAA9.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[81].php
- %TEMP%\BD2C.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[80].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[80].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[81].php
- %TEMP%\C088.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[82].php
- %TEMP%\D46D.tmp
- %TEMP%\D7D8.tmp
- %TEMP%\DB05.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[82].php
- %TEMP%\CDF5.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[81].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[82].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[82].php
- %TEMP%\D150.tmp
- %TEMP%\B9E0.tmp
- %TEMP%\A3E7.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[78].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[78].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[79].php
- %TEMP%\A6B6.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[78].php
- %TEMP%\9B2D.tmp
- %TEMP%\9E2B.tmp
- %TEMP%\A0DA.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[78].php
- %TEMP%\B349.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[79].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[80].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[80].php
- %TEMP%\B695.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[79].php
- %TEMP%\A985.tmp
- %TEMP%\ACC1.tmp
- %TEMP%\AFFD.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[79].php
- %TEMP%\BAF.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[65].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[66].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[66].php
- %TEMP%\EBC.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[65].php
- %TEMP%\268.tmp
- %TEMP%\585.tmp
- %TEMP%\892.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[65].php
- %TEMP%\1B20.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[67].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[67].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[67].php
- %TEMP%\1E3D.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[66].php
- %TEMP%\11E8.tmp
- %TEMP%\14E6.tmp
- %TEMP%\1822.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[66].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[65].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[63].php
- %TEMP%\E961.tmp
- %TEMP%\EC5F.tmp
- %TEMP%\EF5D.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[63].php
- %TEMP%\E366.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[62].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[62].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[63].php
- %TEMP%\E664.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[64].php
- %TEMP%\F8C3.tmp
- %TEMP%\FC0F.tmp
- %TEMP%\FF5A.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[64].php
- %TEMP%\F26A.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[63].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[64].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[64].php
- %TEMP%\F577.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[71].php
- %TEMP%\4889.tmp
- %TEMP%\4BB5.tmp
- %TEMP%\4EC3.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[71].php
- %TEMP%\42AD.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[70].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[70].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[70].php
- %TEMP%\456C.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[72].php
- %TEMP%\574E.tmp
- %TEMP%\59A0.tmp
- %TEMP%\5C6F.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[72].php
- %TEMP%\51EF.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[71].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[71].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[72].php
- %TEMP%\54DD.tmp
- %TEMP%\400D.tmp
- %TEMP%\2AB0.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[68].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[68].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[68].php
- %TEMP%\2DDD.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[67].php
- %TEMP%\214A.tmp
- %TEMP%\2486.tmp
- %TEMP%\27A3.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[68].php
- %TEMP%\3A31.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[69].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[69].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[70].php
- %TEMP%\3D2F.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[69].php
- %TEMP%\30EA.tmp
- %TEMP%\33F7.tmp
- %TEMP%\3724.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[69].php
- %TEMP%\EA7F.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[14].php
- %TEMP%\CD57.tmp
- %TEMP%\CF6B.tmp
- %TEMP%\D239.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[14].php
- %TEMP%\C912.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[13].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[14].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[14].php
- %TEMP%\CB73.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[15].php
- %TEMP%\D92F.tmp
- %TEMP%\DBDE.tmp
- %TEMP%\DE20.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[16].php
- %TEMP%\D45C.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[15].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[15].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[15].php
- %TEMP%\D670.tmp
- %TEMP%\C6B0.tmp
- %TEMP%\B367.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[11].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[12].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[12].php
- %TEMP%\B684.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[11].php
- %TEMP%\AB39.tmp
- %TEMP%\ADD9.tmp
- %TEMP%\B098.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[11].php
- %TEMP%\C1AF.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[13].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[13].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[13].php
- %TEMP%\C420.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[12].php
- %TEMP%\B952.tmp
- %TEMP%\BC21.tmp
- %TEMP%\BEF0.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[12].php
- %TEMP%\1F.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[19].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[19].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[20].php
- %TEMP%\290.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[19].php
- %TEMP%\F92A.tmp
- %TEMP%\FBF9.tmp
- %TEMP%\FE2B.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[19].php
- %TEMP%\B1C.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[20].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[21].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[21].php
- %TEMP%\D00.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[20].php
- %TEMP%\494.tmp
- %TEMP%\698.tmp
- %TEMP%\8F9.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[20].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[18].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[17].php
- %TEMP%\E41C.tmp
- %TEMP%\E67D.tmp
- %TEMP%\E8CF.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[17].php
- %TEMP%\E014.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[16].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[16].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[16].php
- %TEMP%\E228.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[18].php
- %TEMP%\F0AE.tmp
- %TEMP%\F38D.tmp
- %TEMP%\F65B.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[18].php
- %TEMP%\EB30.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[17].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[17].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[18].php
- %TEMP%\EDE0.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[4].php
- %TEMP%\58E3.tmp
- %TEMP%\5B06.tmp
- %TEMP%\5D67.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[4].php
- %TEMP%\543F.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[3].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[3].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[4].php
- %TEMP%\56C0.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[5].php
- %TEMP%\649B.tmp
- %TEMP%\6799.tmp
- %TEMP%\6AC5.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[5].php
- %TEMP%\5F5B.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[4].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[5].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[5].php
- %TEMP%\61AD.tmp
- %TEMP%\526B.tmp
- %TEMP%\4125.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[2].php
- %TEMP%\454B.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[1].php
- <SYSTEM32>\crypts.dll
- %TEMP%\3790.tmp
- %TEMP%\3E75.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[1].php
- %TEMP%\4DA8.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[2].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[3].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[3].php
- %TEMP%\5067.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[2].php
- %TEMP%\47BC.tmp
- %TEMP%\49B0.tmp
- %TEMP%\4BB4.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[2].php
- %TEMP%\963A.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[9].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[9].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[9].php
- %TEMP%\9909.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[8].php
- %TEMP%\8D03.tmp
- %TEMP%\902F.tmp
- %TEMP%\936B.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[9].php
- %TEMP%\A5AB.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[10].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[10].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[11].php
- %TEMP%\A82C.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[10].php
- %TEMP%\9C55.tmp
- %TEMP%\9FA0.tmp
- %TEMP%\A2BD.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[10].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[8].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[6].php
- %TEMP%\73FC.tmp
- %TEMP%\7719.tmp
- %TEMP%\7A17.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[7].php
- %TEMP%\6DF2.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[6].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[6].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[6].php
- %TEMP%\70C0.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[8].php
- %TEMP%\838D.tmp
- %TEMP%\86C9.tmp
- %TEMP%\89F5.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[8].php
- %TEMP%\7D34.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[7].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[7].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[7].php
- %TEMP%\8060.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[35].php
- %TEMP%\9943.tmp
- %TEMP%\9C21.tmp
- %TEMP%\9EFF.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[35].php
- %TEMP%\9386.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[34].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[34].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[34].php
- %TEMP%\9655.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[36].php
- %TEMP%\A79A.tmp
- %TEMP%\AA79.tmp
- %TEMP%\AD57.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[36].php
- %TEMP%\A1DE.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[35].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[35].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[36].php
- %TEMP%\A4BC.tmp
- %TEMP%\90A7.tmp
- %TEMP%\7C93.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[32].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[32].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[32].php
- %TEMP%\7F71.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[31].php
- %TEMP%\73F8.tmp
- %TEMP%\76D6.tmp
- %TEMP%\79B4.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[32].php
- %TEMP%\8AEB.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[33].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[33].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[34].php
- %TEMP%\8DC9.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[33].php
- %TEMP%\8250.tmp
- %TEMP%\851E.tmp
- %TEMP%\880C.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[33].php
- %TEMP%\D64C.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[40].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[40].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[40].php
- %TEMP%\D92A.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[39].php
- %TEMP%\CDA1.tmp
- %TEMP%\D070.tmp
- %TEMP%\D35E.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[39].php
- %TEMP%\E4B3.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[41].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[41].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[41].php
- %TEMP%\E7A1.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[40].php
- %TEMP%\DC08.tmp
- %TEMP%\DEF6.tmp
- %TEMP%\E1D5.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[41].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[39].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[37].php
- %TEMP%\B612.tmp
- %TEMP%\B8F0.tmp
- %TEMP%\BBDE.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[37].php
- %TEMP%\B045.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[36].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[37].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[37].php
- %TEMP%\B333.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[38].php
- %TEMP%\C4B8.tmp
- %TEMP%\C7B5.tmp
- %TEMP%\CAB3.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[39].php
- %TEMP%\BEDC.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[38].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[38].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[38].php
- %TEMP%\C1BA.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[24].php
- %TEMP%\2C11.tmp
- %TEMP%\2E25.tmp
- %TEMP%\30E4.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[25].php
- %TEMP%\277E.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[24].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[24].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[24].php
- %TEMP%\29C0.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[26].php
- %TEMP%\37C9.tmp
- %TEMP%\3A4A.tmp
- %TEMP%\3C3E.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[26].php
- %TEMP%\3384.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[25].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[25].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[25].php
- %TEMP%\3578.tmp
- %TEMP%\251C.tmp
- %TEMP%\1686.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[22].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[22].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[22].php
- %TEMP%\1906.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[21].php
- %TEMP%\EF4.tmp
- %TEMP%\1156.tmp
- %TEMP%\13C7.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[21].php
- %TEMP%\2153.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[23].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[23].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[23].php
- %TEMP%\2338.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[22].php
- %TEMP%\1AFA.tmp
- %TEMP%\1D6B.tmp
- %TEMP%\1F7F.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[23].php
- %TEMP%\61E7.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[29].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[30].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[30].php
- %TEMP%\64C5.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[29].php
- %TEMP%\595B.tmp
- %TEMP%\5C3A.tmp
- %TEMP%\5F08.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[29].php
- %TEMP%\6E79.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[31].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[31].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[31].php
- %TEMP%\7119.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[30].php
- %TEMP%\67A3.tmp
- %TEMP%\6A43.tmp
- %TEMP%\6C28.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[30].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[29].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[27].php
- %TEMP%\4278.tmp
- %TEMP%\4547.tmp
- %TEMP%\4825.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[27].php
- %TEMP%\3E13.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[26].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[26].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[27].php
- %TEMP%\4007.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\bt[28].php
- %TEMP%\50D0.tmp
- %TEMP%\539E.tmp
- %TEMP%\567D.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[28].php
- %TEMP%\4B03.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bt[27].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bt[28].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bt[28].php
- %TEMP%\4DF1.tmp
- %TEMP%\8CBB.tmp
- %TEMP%\8FB8.tmp
- %TEMP%\89CD.tmp
- %TEMP%\83D1.tmp
- %TEMP%\86BF.tmp
- %TEMP%\9BBE.tmp
- %TEMP%\9ECC.tmp
- %TEMP%\98C1.tmp
- %TEMP%\92C6.tmp
- %TEMP%\95B4.tmp
- %TEMP%\6EE2.tmp
- %TEMP%\71E0.tmp
- %TEMP%\6BF4.tmp
- %TEMP%\6618.tmp
- %TEMP%\68F6.tmp
- %TEMP%\7DE6.tmp
- %TEMP%\80D4.tmp
- %TEMP%\7AD9.tmp
- %TEMP%\74DD.tmp
- %TEMP%\77DB.tmp
- %TEMP%\A1C9.tmp
- %TEMP%\CDFA.tmp
- %TEMP%\D107.tmp
- %TEMP%\CAFC.tmp
- %TEMP%\C501.tmp
- %TEMP%\C80E.tmp
- %TEMP%\DD4C.tmp
- %TEMP%\E03A.tmp
- %TEMP%\DA5E.tmp
- %TEMP%\D424.tmp
- %TEMP%\D731.tmp
- %TEMP%\AFC3.tmp
- %TEMP%\B2E0.tmp
- %TEMP%\ACC6.tmp
- %TEMP%\A69C.tmp
- %TEMP%\A98A.tmp
- %TEMP%\BF06.tmp
- %TEMP%\C203.tmp
- %TEMP%\BBF8.tmp
- %TEMP%\B5EE.tmp
- %TEMP%\B8FB.tmp
- %TEMP%\1393.tmp
- %TEMP%\1681.tmp
- %TEMP%\10A5.tmp
- %TEMP%\AC9.tmp
- %TEMP%\DB7.tmp
- %TEMP%\2249.tmp
- %TEMP%\2537.tmp
- %TEMP%\1F5B.tmp
- %TEMP%\196F.tmp
- %TEMP%\1C6D.tmp
- %TEMP%\F628.tmp
- %TEMP%\F925.tmp
- %TEMP%\F349.tmp
- %TEMP%\ED5E.tmp
- %TEMP%\F05B.tmp
- %TEMP%\4DD.tmp
- %TEMP%\7BC.tmp
- %TEMP%\1EF.tmp
- %TEMP%\FC04.tmp
- %TEMP%\FEF2.tmp
- %TEMP%\2825.tmp
- %TEMP%\5177.tmp
- %TEMP%\5465.tmp
- %TEMP%\4E89.tmp
- %TEMP%\489D.tmp
- %TEMP%\4B8B.tmp
- %TEMP%\603C.tmp
- %TEMP%\632A.tmp
- %TEMP%\5D3E.tmp
- %TEMP%\5762.tmp
- %TEMP%\5A50.tmp
- %TEMP%\33FC.tmp
- %TEMP%\36EA.tmp
- %TEMP%\310E.tmp
- %TEMP%\2B13.tmp
- %TEMP%\2E01.tmp
- %TEMP%\42B2.tmp
- %TEMP%\45A0.tmp
- %TEMP%\3FC4.tmp
- %TEMP%\39C8.tmp
- %TEMP%\3CE5.tmp
- %TEMP%\83EC.tmp
- %TEMP%\87B5.tmp
- %TEMP%\80A0.tmp
- %TEMP%\7B60.tmp
- %TEMP%\7E3F.tmp
- %TEMP%\94C4.tmp
- %TEMP%\9801.tmp
- %TEMP%\9169.tmp
- %TEMP%\8AD2.tmp
- %TEMP%\8E2D.tmp
- %TEMP%\66A0.tmp
- %TEMP%\69DC.tmp
- %TEMP%\63D1.tmp
- %TEMP%\5EC0.tmp
- %TEMP%\6112.tmp
- %TEMP%\75A4.tmp
- %TEMP%\78B1.tmp
- %TEMP%\7362.tmp
- %TEMP%\6D18.tmp
- %TEMP%\7074.tmp
- %TEMP%\9B2D.tmp
- %TEMP%\C75E.tmp
- %TEMP%\CAA9.tmp
- %TEMP%\C3F3.tmp
- %TEMP%\BD2C.tmp
- %TEMP%\C088.tmp
- %TEMP%\D7D8.tmp
- %TEMP%\DB05.tmp
- %TEMP%\D46D.tmp
- %TEMP%\CDF5.tmp
- %TEMP%\D150.tmp
- %TEMP%\A6B6.tmp
- %TEMP%\A985.tmp
- %TEMP%\A3E7.tmp
- %TEMP%\9E2B.tmp
- %TEMP%\A0DA.tmp
- %TEMP%\B695.tmp
- %TEMP%\B9E0.tmp
- %TEMP%\B349.tmp
- %TEMP%\ACC1.tmp
- %TEMP%\AFFD.tmp
- %TEMP%\BAF.tmp
- %TEMP%\EBC.tmp
- %TEMP%\892.tmp
- %TEMP%\268.tmp
- %TEMP%\585.tmp
- %TEMP%\1B20.tmp
- %TEMP%\1E3D.tmp
- %TEMP%\1822.tmp
- %TEMP%\11E8.tmp
- %TEMP%\14E6.tmp
- %TEMP%\EC5F.tmp
- %TEMP%\EF5D.tmp
- %TEMP%\E961.tmp
- %TEMP%\E366.tmp
- %TEMP%\E664.tmp
- %TEMP%\FC0F.tmp
- %TEMP%\FF5A.tmp
- %TEMP%\F8C3.tmp
- %TEMP%\F26A.tmp
- %TEMP%\F577.tmp
- %TEMP%\214A.tmp
- %TEMP%\4BB5.tmp
- %TEMP%\4EC3.tmp
- %TEMP%\4889.tmp
- %TEMP%\42AD.tmp
- %TEMP%\456C.tmp
- %TEMP%\59A0.tmp
- %TEMP%\5C6F.tmp
- %TEMP%\574E.tmp
- %TEMP%\51EF.tmp
- %TEMP%\54DD.tmp
- %TEMP%\2DDD.tmp
- %TEMP%\30EA.tmp
- %TEMP%\2AB0.tmp
- %TEMP%\2486.tmp
- %TEMP%\27A3.tmp
- %TEMP%\3D2F.tmp
- %TEMP%\400D.tmp
- %TEMP%\3A31.tmp
- %TEMP%\33F7.tmp
- %TEMP%\3724.tmp
- %TEMP%\CF6B.tmp
- %TEMP%\D239.tmp
- %TEMP%\CD57.tmp
- %TEMP%\C912.tmp
- %TEMP%\CB73.tmp
- %TEMP%\DBDE.tmp
- %TEMP%\DE20.tmp
- %TEMP%\D92F.tmp
- %TEMP%\D45C.tmp
- %TEMP%\D670.tmp
- %TEMP%\B684.tmp
- %TEMP%\B952.tmp
- %TEMP%\B367.tmp
- %TEMP%\ADD9.tmp
- %TEMP%\B098.tmp
- %TEMP%\C420.tmp
- %TEMP%\C6B0.tmp
- %TEMP%\C1AF.tmp
- %TEMP%\BC21.tmp
- %TEMP%\BEF0.tmp
- %TEMP%\E014.tmp
- %TEMP%\290.tmp
- %TEMP%\494.tmp
- %TEMP%\1F.tmp
- %TEMP%\FBF9.tmp
- %TEMP%\FE2B.tmp
- %TEMP%\D00.tmp
- %TEMP%\EF4.tmp
- %TEMP%\B1C.tmp
- %TEMP%\698.tmp
- %TEMP%\8F9.tmp
- %TEMP%\E8CF.tmp
- %TEMP%\EB30.tmp
- %TEMP%\E67D.tmp
- %TEMP%\E228.tmp
- %TEMP%\E41C.tmp
- %TEMP%\F65B.tmp
- %TEMP%\F92A.tmp
- %TEMP%\F38D.tmp
- %TEMP%\EDE0.tmp
- %TEMP%\F0AE.tmp
- %TEMP%\5B06.tmp
- %TEMP%\5D67.tmp
- %TEMP%\58E3.tmp
- %TEMP%\543F.tmp
- %TEMP%\56C0.tmp
- %TEMP%\6799.tmp
- %TEMP%\6AC5.tmp
- %TEMP%\649B.tmp
- %TEMP%\5F5B.tmp
- %TEMP%\61AD.tmp
- %TEMP%\454B.tmp
- %TEMP%\47BC.tmp
- %TEMP%\4125.tmp
- %TEMP%\3790.tmp
- %TEMP%\3E75.tmp
- %TEMP%\5067.tmp
- %TEMP%\526B.tmp
- %TEMP%\4DA8.tmp
- %TEMP%\49B0.tmp
- %TEMP%\4BB4.tmp
- %TEMP%\6DF2.tmp
- %TEMP%\9909.tmp
- %TEMP%\9C55.tmp
- %TEMP%\963A.tmp
- %TEMP%\902F.tmp
- %TEMP%\936B.tmp
- %TEMP%\A82C.tmp
- %TEMP%\AB39.tmp
- %TEMP%\A5AB.tmp
- %TEMP%\9FA0.tmp
- %TEMP%\A2BD.tmp
- %TEMP%\7A17.tmp
- %TEMP%\7D34.tmp
- %TEMP%\7719.tmp
- %TEMP%\70C0.tmp
- %TEMP%\73FC.tmp
- %TEMP%\89F5.tmp
- %TEMP%\8D03.tmp
- %TEMP%\86C9.tmp
- %TEMP%\8060.tmp
- %TEMP%\838D.tmp
- %TEMP%\9C21.tmp
- %TEMP%\9EFF.tmp
- %TEMP%\9943.tmp
- %TEMP%\9386.tmp
- %TEMP%\9655.tmp
- %TEMP%\AA79.tmp
- %TEMP%\AD57.tmp
- %TEMP%\A79A.tmp
- %TEMP%\A1DE.tmp
- %TEMP%\A4BC.tmp
- %TEMP%\7F71.tmp
- %TEMP%\8250.tmp
- %TEMP%\7C93.tmp
- %TEMP%\76D6.tmp
- %TEMP%\79B4.tmp
- %TEMP%\8DC9.tmp
- %TEMP%\90A7.tmp
- %TEMP%\8AEB.tmp
- %TEMP%\851E.tmp
- %TEMP%\880C.tmp
- %TEMP%\B045.tmp
- %TEMP%\D92A.tmp
- %TEMP%\DC08.tmp
- %TEMP%\D64C.tmp
- %TEMP%\D070.tmp
- %TEMP%\D35E.tmp
- %TEMP%\E7A1.tmp
- %TEMP%\EA7F.tmp
- %TEMP%\E4B3.tmp
- %TEMP%\DEF6.tmp
- %TEMP%\E1D5.tmp
- %TEMP%\BBDE.tmp
- %TEMP%\BEDC.tmp
- %TEMP%\B8F0.tmp
- %TEMP%\B333.tmp
- %TEMP%\B612.tmp
- %TEMP%\CAB3.tmp
- %TEMP%\CDA1.tmp
- %TEMP%\C7B5.tmp
- %TEMP%\C1BA.tmp
- %TEMP%\C4B8.tmp
- %TEMP%\2E25.tmp
- %TEMP%\30E4.tmp
- %TEMP%\2C11.tmp
- %TEMP%\277E.tmp
- %TEMP%\29C0.tmp
- %TEMP%\3A4A.tmp
- %TEMP%\3C3E.tmp
- %TEMP%\37C9.tmp
- %TEMP%\3384.tmp
- %TEMP%\3578.tmp
- %TEMP%\1906.tmp
- %TEMP%\1AFA.tmp
- %TEMP%\1686.tmp
- %TEMP%\1156.tmp
- %TEMP%\13C7.tmp
- %TEMP%\2338.tmp
- %TEMP%\251C.tmp
- %TEMP%\2153.tmp
- %TEMP%\1D6B.tmp
- %TEMP%\1F7F.tmp
- %TEMP%\3E13.tmp
- %TEMP%\64C5.tmp
- %TEMP%\67A3.tmp
- %TEMP%\61E7.tmp
- %TEMP%\5C3A.tmp
- %TEMP%\5F08.tmp
- %TEMP%\7119.tmp
- %TEMP%\73F8.tmp
- %TEMP%\6E79.tmp
- %TEMP%\6A43.tmp
- %TEMP%\6C28.tmp
- %TEMP%\4825.tmp
- %TEMP%\4B03.tmp
- %TEMP%\4547.tmp
- %TEMP%\4007.tmp
- %TEMP%\4278.tmp
- %TEMP%\567D.tmp
- %TEMP%\595B.tmp
- %TEMP%\539E.tmp
- %TEMP%\4DF1.tmp
- %TEMP%\50D0.tmp
- 'b0###c84c69.com':80
- 'b0###63bb8.com':80
- 'localhost':1035
- b0###c84c69.com/bt.php?mo################################################
- b0###63bb8.com/bt.php?mo################################################
- DNS ASK b0###c84c69.com
- DNS ASK b0###63bb8.com