Technical Information
Malicious functions
Registers BHO
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{23EE9B20-D7ED-5676-6D41-6E9BFFE7FB4D}]
Modifies file system
Creates the following files
- %TEMP%\13af3001\te1ub8nh.dat
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- C:\users\guest\appdata\local\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- C:\users\guest\appdata\local\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- C:\users\guest\appdata\local\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- C:\users\guest\appdata\local\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- C:\users\guest\appdata\local\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- %LOCALAPPDATA%\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- %LOCALAPPDATA%\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- %LOCALAPPDATA%\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- C:\users\administrator\appdata\local\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- C:\users\administrator\appdata\local\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- C:\users\administrator\appdata\local\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- C:\users\administrator\appdata\local\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- C:\users\administrator\appdata\local\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- %LOCALAPPDATA%\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- %LOCALAPPDATA%\torch\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\tluxphfzh@jdh-dff.com\bootstrap.js
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\tluxphfzh@jdh-dff.com\chrome.manifest
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\tluxphfzh@jdh-dff.com\content\bg.js
- %ALLUSERSPROFILE%\vaaudix\te1ub8nh.dat
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\tluxphfzh@jdh-dff.com\install.rdf
- %ProgramFiles(x86)%\vaaudix\29ipede.tlb
- %ProgramFiles(x86)%\vaaudix\29ipede.dat
- %LOCALAPPDATA%low\{23ee9b20-d7ed-5676-6d41-6e9bffe7fb4d}\vaaudix.2.9.dat
- %ProgramFiles(x86)%\vaaudix\29ipede.x64.dll
- %LOCALAPPDATA%\packages\windows_ie_ac_001\ac\{23ee9b20-d7ed-5676-6d41-6e9bffe7fb4d}\vaaudix.2.9.dat
- %ALLUSERSPROFILE%\vaaudix\te1ub8nh.exe
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- %ProgramFiles(x86)%\vaaudix\29ipede.dll
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- %TEMP%\13af3001\te1ub8nh.exe
- %TEMP%\13af3001\5auq9.dll
- %TEMP%\13af3001\29ipede.x64.dll
- %TEMP%\13af3001\29ipede.tlb
- %TEMP%\13af3001\29ipede.dll
- %TEMP%\13af3001\tluxphfzh@jdh-dff.com\content\bg.js
- %TEMP%\13af3001\tluxphfzh@jdh-dff.com\install.rdf
- %TEMP%\13af3001\tluxphfzh@jdh-dff.com\chrome.manifest
- %TEMP%\13af3001\tluxphfzh@jdh-dff.com\bootstrap.js
- %TEMP%\13af3001\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\lsdb.js
- %TEMP%\13af3001\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\content.js
- %TEMP%\13af3001\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\manifest.json
- %TEMP%\13af3001\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\background.html
- %TEMP%\13af3001\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\hgqryigtt.js
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\background.html
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\content.js
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\hgqryigtt.js
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\manifest.json
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\1.3\lsdb.js
- %ALLUSERSPROFILE%\796b3ca1ae42d05d\{681002c6-5019-81a2-7871-a43754f71e56}
Deletes the following files
- %TEMP%\13af3001\te1ub8nh.dat
- %TEMP%\13af3001\te1ub8nh.exe
- %TEMP%\13af3001\5auq9.dll
- %TEMP%\13af3001\29ipede.x64.dll
- %TEMP%\13af3001\29ipede.tlb
- %TEMP%\13af3001\29ipede.dll
- %TEMP%\13af3001\tluxphfzh@jdh-dff.com\content\bg.js
- %TEMP%\13af3001\tluxphfzh@jdh-dff.com\install.rdf
- %TEMP%\13af3001\tluxphfzh@jdh-dff.com\chrome.manifest
- %TEMP%\13af3001\tluxphfzh@jdh-dff.com\bootstrap.js
- %TEMP%\13af3001\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\lsdb.js
- %TEMP%\13af3001\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\content.js
- %TEMP%\13af3001\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\manifest.json
- %TEMP%\13af3001\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\background.html
- %TEMP%\13af3001\dkpojfgjpficmjlhkbecmdjmlpjnmmlk\hgqryigtt.js
Modifies the following files
- %LOCALAPPDATA%\google\chrome\user data\default\preferences
Miscellaneous
Creates and executes the following
- '%TEMP%\13af3001\te1ub8nh.exe'
Executes the following
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\VaauDix\29ipEdE.x64.dll"
- '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\VaauDix\29ipEdE.x64.dll"
