Technical Information
- C:\Arquivos de programas\Sidebar\host
- C:\Arquivos de programas\Sidebar\new
- C:\Arquivos de programas\Sidebar\host (downloaded from the Internet)
- C:\Arquivos de programas\Sidebar\new (downloaded from the Internet)
- ClassName: 'OLLYDBG' WindowName: ''
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\venhonet[1].jpg
- C:\Arquivos de programas\Sidebar\Imagens\venhonet.jpg
- <DRIVERS>\AV.sys
- <SYSTEM32>\AV.RRI
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\AV[1].sys
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\nn[1].gif
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\chave2[1].jpg
- C:\Arquivos de programas\Sidebar\Imagens\chave2.jpg
- C:\Arquivos de programas\Sidebar\Imagens\nd.jpg
- C:\Arquivos de programas\Sidebar\Imagens\nn.gif
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\nd[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\AV[1].RRI
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\FCORP[1].exe
- <SYSTEM32>\FCORP.exe
- C:\Arquivos de programas\Sidebar\Imagens\ff.ico
- C:\Arquivos de programas\Sidebar\Imagens\d6.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\ff[1].ico
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\FCORP[1].RRI
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\AV[1].exe
- <SYSTEM32>\AV.exe
- <DRIVERS>\FCORP.sys
- <SYSTEM32>\FCORP.RRI
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\FCORP[1].sys
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\nb1[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\hs6[1].jpg
- C:\Arquivos de programas\Sidebar\Imagens\hs6.jpg
- C:\Arquivos de programas\Sidebar\Imagens\hs5.jpg
- C:\Arquivos de programas\Sidebar\Imagens\hs4.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\hs5[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\hs7[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\w0504[1].exe
- C:\Arquivos de programas\Sidebar\host
- C:\Arquivos de programas\Sidebar\Imagens\hs8.jpg
- C:\Arquivos de programas\Sidebar\Imagens\hs7.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\hs8[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\hs4[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\it[1].jpg
- C:\Arquivos de programas\Sidebar\Imagens\it.jpg
- C:\Arquivos de programas\Sidebar\Imagens\fu.jpg
- C:\Arquivos de programas\Sidebar\Imagens\nb1.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\fu[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\hs1[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\hs3[1].jpg
- C:\Arquivos de programas\Sidebar\Imagens\hs3.jpg
- C:\Arquivos de programas\Sidebar\Imagens\hs2.jpg
- C:\Arquivos de programas\Sidebar\Imagens\hs1.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\hs2[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\d6[1].jpg
- C:\Arquivos de programas\Sidebar\Imagens\tec.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\tab[1].bmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\tec[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\15[1].bmp
- C:\Arquivos de programas\Sidebar\Imagens\15.bmp
- C:\Arquivos de programas\Sidebar\Imagens\tab.bmp
- C:\Arquivos de programas\Sidebar\Imagens\3.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\cax2[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\3[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\13[1].bmp
- C:\Arquivos de programas\Sidebar\Imagens\13.bmp
- C:\Arquivos de programas\Sidebar\Imagens\1.jpg
- C:\Arquivos de programas\Sidebar\Imagens\c1.bmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\c2[1].bmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\c1[1].bmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\sidebr[1].exe
- C:\Arquivos de programas\Sidebar\new
- C:\Arquivos de programas\Sidebar\Imagens\c2.bmp
- C:\Arquivos de programas\Sidebar\Imagens\bc.bmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\1[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bc[1].bmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\c3[1].bmp
- C:\Arquivos de programas\Sidebar\Imagens\c3.bmp
- C:\Arquivos de programas\Sidebar\Imagens\cax2.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\d2[1].jpg
- C:\Arquivos de programas\Sidebar\Imagens\d2.jpg
- C:\Arquivos de programas\Sidebar\Imagens\d1.jpg
- C:\Arquivos de programas\Sidebar\Imagens\b2.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\d1[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\d3[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\d5[1].jpg
- C:\Arquivos de programas\Sidebar\Imagens\d5.jpg
- C:\Arquivos de programas\Sidebar\Imagens\d4.jpg
- C:\Arquivos de programas\Sidebar\Imagens\d3.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\d4[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\b2[1].jpg
- C:\Arquivos de programas\Sidebar\Imagens\2.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\4[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\2[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ie[1].ico
- C:\Arquivos de programas\Sidebar\Imagens\ie.ico
- C:\Arquivos de programas\Sidebar\Imagens\4.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\b1[1].jpg
- C:\Arquivos de programas\Sidebar\Imagens\b1.jpg
- C:\Arquivos de programas\Sidebar\Imagens\fr.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\5[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\fr[1].jpg
- 'www.ri####opontes.com':80
- 'www.av###ovo.com':80
- 'localhost':1036
- www.ri####opontes.com/images/designe/venhonet.jpg
- www.ri####opontes.com/images/designe/GB/AV.sys
- www.ri####opontes.com/images/designe/GB/AV.RRI
- www.ri####opontes.com/images/designe/chave2.jpg
- www.ri####opontes.com/images/designe/nd.jpg
- www.ri####opontes.com/images/designe/nn.gif
- www.ri####opontes.com/images/designe/GB/FCORP.exe
- www.ri####opontes.com/images/designe/ff.ico
- www.ri####opontes.com/images/designe/d6.jpg
- www.ri####opontes.com/images/designe/GB/AV.exe
- www.ri####opontes.com/images/designe/GB/FCORP.sys
- www.ri####opontes.com/images/designe/GB/FCORP.RRI
- www.ri####opontes.com/images/designe/hs6.jpg
- www.ri####opontes.com/images/designe/hs5.jpg
- www.ri####opontes.com/images/designe/hs4.jpg
- www.av###ovo.com/modules/mod_archive/tmpl/w0504.exe
- www.ri####opontes.com/images/designe/hs8.jpg
- www.ri####opontes.com/images/designe/hs7.jpg
- www.ri####opontes.com/images/designe/it.jpg
- www.ri####opontes.com/images/designe/fu.jpg
- www.ri####opontes.com/images/designe/nb1.jpg
- www.ri####opontes.com/images/designe/hs3.jpg
- www.ri####opontes.com/images/designe/hs2.jpg
- www.ri####opontes.com/images/designe/hs1.jpg
- www.ri####opontes.com/images/designe/tab.bmp
- www.ri####opontes.com/images/designe/tec.jpg
- www.ri####opontes.com/images/designe/15.bmp
- www.ri####opontes.com/images/designe/cax2.jpg
- www.ri####opontes.com/images/designe/3.jpg
- www.ri####opontes.com/images/designe/13.bmp
- www.ri####opontes.com/images/designe/c2.bmp
- www.ri####opontes.com/images/designe/c1.bmp
- www.av###ovo.com/modules/mod_archive/tmpl/sidebr.exe
- www.ri####opontes.com/images/designe/1.jpg
- www.ri####opontes.com/images/designe/bc.bmp
- www.ri####opontes.com/images/designe/c3.bmp
- www.ri####opontes.com/images/designe/d2.jpg
- www.ri####opontes.com/images/designe/d1.jpg
- www.ri####opontes.com/images/designe/b2.jpg
- www.ri####opontes.com/images/designe/d5.jpg
- www.ri####opontes.com/images/designe/d4.jpg
- www.ri####opontes.com/images/designe/d3.jpg
- www.ri####opontes.com/images/designe/4.jpg
- www.ri####opontes.com/images/designe/2.jpg
- www.ri####opontes.com/images/designe/ie.ico
- www.ri####opontes.com/images/designe/b1.jpg
- www.ri####opontes.com/images/designe/fr.jpg
- www.ri####opontes.com/images/designe/5.jpg
- DNS ASK www.ri####opontes.com
- DNS ASK www.av###ovo.com