Technical Information
Malicious functions:
Creates and executes the following:
- '%TEMP%\75127ee7\wZxAY52EIH.exe'
Terminates or attempts to terminate
the following user processes:
- iexplore.exe
- firefox.exe
- chrome.exe
Modifies file system :
Creates the following files:
- C:\Documents and Settings\Guest\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\LEaD8aIDu.js
- C:\Documents and Settings\Guest\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\content.js
- C:\Documents and Settings\Guest\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\manifest.json
- C:\Documents and Settings\Guest\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\lsdb.js
- C:\Documents and Settings\Guest\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\background.html
- C:\Documents and Settings\ASPNET\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\LEaD8aIDu.js
- C:\Documents and Settings\ASPNET\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\content.js
- C:\Documents and Settings\ASPNET\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\manifest.json
- C:\Documents and Settings\ASPNET\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\lsdb.js
- C:\Documents and Settings\HelpAssistant\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\background.html
- C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\LEaD8aIDu.js
- C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\content.js
- C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\manifest.json
- C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\lsdb.js
- C:\Documents and Settings\SUPPORT_388945a0\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\background.html
- C:\Documents and Settings\HelpAssistant\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\LEaD8aIDu.js
- C:\Documents and Settings\HelpAssistant\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\content.js
- C:\Documents and Settings\HelpAssistant\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\manifest.json
- C:\Documents and Settings\HelpAssistant\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\lsdb.js
- C:\Documents and Settings\ASPNET\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\background.html
- %TEMP%\75127ee7\uy-7rh@otmsnjzwdqb.org\install.rdf
- %TEMP%\75127ee7\uy-7rh@otmsnjzwdqb.org\content\bg.js
- %TEMP%\75127ee7\uy-7rh@otmsnjzwdqb.org\bootstrap.js
- %TEMP%\75127ee7\uy-7rh@otmsnjzwdqb.org\chrome.manifest
- %TEMP%\75127ee7\kvSdWuRCb.dll
- %TEMP%\75127ee7\wZxAY52EIH.exe
- %TEMP%\75127ee7\wZxAY52EIH.dat
- %TEMP%\75127ee7\kvSdWuRCb.tlb
- %TEMP%\75127ee7\kvSdWuRCb.x64.dll
- %TEMP%\75127ee7\aaacbegjobdbbleeadkaipidhppngnhf\lsdb.js
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\LEaD8aIDu.js
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\content.js
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\manifest.json
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\lsdb.js
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extensions\aaacbegjobdbbleeadkaipidhppngnhf\2.2\background.html
- %TEMP%\75127ee7\aaacbegjobdbbleeadkaipidhppngnhf\manifest.json
- %TEMP%\75127ee7\aaacbegjobdbbleeadkaipidhppngnhf\content.js
- %TEMP%\75127ee7\aaacbegjobdbbleeadkaipidhppngnhf\LEaD8aIDu.js
- %TEMP%\75127ee7\aaacbegjobdbbleeadkaipidhppngnhf\background.html
