Technical Information
- %WINDIR%\Temp\svhost.exe
- <SYSTEM32>\notepad.exe "%TEMP%\Betcity_strategy.txt"
- [<HKLM>\SOFTWARE\FlashFXP]
- [<HKLM>\Software\Ghisler\Total Commander]
- [<HKCU>\Software\Ghisler\Total Commander]
- [<HKCU>\Software\Far\Plugins\FTP\Hosts]
- [<HKCU>\Software\Far2\Plugins\FTP\Hosts]
- [<HKCU>\Software\Google\Google Talk\Accounts]
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-README_12.TXT
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-whatsnew_5.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-README_13.TXT
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-Review.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-readme_11.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-WHATSNEW_4.TXT
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-Review.Rus.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-README_14.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-TechInfo.Rus.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-TechInfo.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-WhatsNew.Rus_2.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-REGISTER.TXT
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-WhatsNew.Rus_1.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-WhatsNew_6.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-README_15.TXT
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-dirlist_rus.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-FtpCmds.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-FtpCmds_rus.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-BugReport_rus.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-whatsrus.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-history_1.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-readme_10.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-Notes_rus.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-InstallPlugins.Rus.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-InstallPlugins.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-WhatsNew_3.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-HELP.TXT
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-ReadMe_eng.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-TechInfoFTP.Rus.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-TechInfoFTP.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-WhatsNew_7.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-dd_dotnetfx35install.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-OEWABLog.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-SchedLgU.Txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-dd_dotnetfx35error.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-segment3.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-segment4.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-segment5.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-setuplog.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-eula.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-wiatwain.ds
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-File-Paths.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-gmreadme.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-dberr.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-brndlog_2.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-index_4.dat
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-msoe.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-open_source_licenses.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-xxacthlp.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-License_MSXML6_ENU.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-README_16.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-Empty.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-Blank.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-list.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-nav.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-segment1.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-segment2.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-intro.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-short.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-spuninst.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-spuninst_1.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-index_1.dat
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-11-08-2011_16-47-48-File-Paths.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-Betcity_strategy.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-index.dat
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-%USERNAME%@rad.msn[2].txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-%USERNAME%@scorecardresearch[1].txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-%USERNAME%@tns-counter[1].txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-manifest.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-vistasidebar.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-<Auxiliary name>filters.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-brndlog_1.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-microsoftoffice2003.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-adobeflashcs3.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-adobephotoshopcs3.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-googledesktop.txt
- %WINDIR%\Temp\ufr_files\NO_PWDS_report_11-08-2011_16-47-48-GIAA.bin
- %TEMP%\11-08-2011_16-47-48-File-Paths.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-brndlog.txt
- %TEMP%\NO_PWDS_report_11-08-2011_16-47-48-GIAA.bin
- %WINDIR%\Temp\svhost.exe
- %TEMP%\Betcity_strategy.txt
- %TEMP%\report_11-08-2011_16-47-48-GIAA.bin
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-cookies.sqlite
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-%USERNAME%@live[1].txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-%USERNAME%@msnportal.112.2o7[1].txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-%USERNAME%@msn[2].txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-%USERNAME%@c.msn[1].txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-key3.db
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-signons.sqlite
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-%USERNAME%@atdmt[1].txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-index_2.dat
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-VCReadme.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-WhatsNew.Rus.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-WhatsNew.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-README_5.TXT
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-README_3.TXT
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-README_4.TXT
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-GCCReadme.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-readme_6.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-whatsnew_1.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-readme_9.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-whatsnew_2.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-README_8.TXT
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-kurkul.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-HISTORY.TXT
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-README_7.TXT
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-ArcSupport.Rus.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-ArcSupport.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-BugReport.Rus.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-README_2.TXT
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-index_3.dat
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-README.TXT
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-readme_1.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-BugReport.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-License.xUSSR.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-Macros.Rus.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-Macros.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-License.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-Contacts.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-FarFAQ.txt
- %WINDIR%\Temp\ufr_files\11-08-2011_16-47-48-Far_Site.txt
- %WINDIR%\Temp\svhost.exe
- %TEMP%\11-08-2011_16-47-48-File-Paths.txt
- %TEMP%\NO_PWDS_report_11-08-2011_16-47-48-GIAA.bin
- '94.##0.191.201':25
- DNS ASK sm##.mail.ru
- ClassName: 'Shell_TrayWnd' WindowName: ''