API tools faq
paste
paladin316

Exes_996ba35165bb62473d2a6743a5200d45_1_2019-07-23_05_30.txt

paladin316
Jul 23rd, 2019
2,960
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 26.25 KB | None | 0 0
raw download clone embed print report
  1.  
  2. * MalFamily: "Malicious"
  3.  
  4. * MalScore: 10.0
  5.  
  6. * File Name: "Exes_996ba35165bb62473d2a6743a5200d45.1"
  7. * File Size: 281088
  8. * File Type: "PE32 executable (GUI) Intel 80386, for MS Windows"
  9. * SHA256: "5caffdc76a562e098c471feaede5693f9ead92d5c6c10fb3951dd1fa6c12d21d"
  10. * MD5: "996ba35165bb62473d2a6743a5200d45"
  11. * SHA1: "52169b0b5cce95c6905873b8d12a759c234bd2e0"
  12. * SHA512: "2a7fb9bdf8dcf577ac851752f8875a710a3694b99d107c397942fce1392fd99ee0b85f1fddc18c33fba56d7b8fd4dda5f40f28e64d8398e6048c2ab140780634"
  13. * CRC32: "5F666E64"
  14. * SSDEEP: "6144:vLgbC0mVQlY+3aKn7n4CTHcXXnXXfXXXWXXXXHXXXXBXXXXgXXXXX5XXXXiXXXXP:vGCtQlb3aKzvT8XXnXXfXXXWXXXXHXXf"
  15.  
  16. * Process Execution:
  17. "Exes_996ba35165bb62473d2a6743a5200d45.1"
  18.  
  19.  
  20. * Executed Commands:
  21.  
  22. * Signatures Detected:
  23.  
  24. "Description": "Creates RWX memory",
  25. "Details":
  26.  
  27.  
  28. "Description": "Possible date expiration check, exits too soon after checking local time",
  29. "Details":
  30.  
  31. "process": "Exes_996ba35165bb62473d2a6743a5200d45.1, PID 1088"
  32.  
  33.  
  34.  
  35.  
  36. "Description": "Attempts to repeatedly call a single API many times in order to delay analysis time",
  37. "Details":
  38.  
  39. "Spam": "Exes_996ba35165bb62473d2a6743a5200d45.1 (1088) called API NtClose 62783 times"
  40.  
  41.  
  42.  
  43.  
  44. "Description": "File has been identified by 58 Antiviruses on VirusTotal as malicious",
  45. "Details":
  46.  
  47. "MicroWorld-eScan": "Trojan.AgentWDCR.SVC"
  48.  
  49.  
  50. "FireEye": "Generic.mg.996ba35165bb6247"
  51.  
  52.  
  53. "CAT-QuickHeal": "Trojan.Hosts"
  54.  
  55.  
  56. "McAfee": "Generic.bto"
  57.  
  58.  
  59. "Cylance": "Unsafe"
  60.  
  61.  
  62. "SUPERAntiSpyware": "Trojan.Agent/Gen-Dropper"
  63.  
  64.  
  65. "K7AntiVirus": "Trojan ( 00545a541 )"
  66.  
  67.  
  68. "Alibaba": "Trojan:Win32/Qhost.ad0d9d3f"
  69.  
  70.  
  71. "K7GW": "Trojan ( 00545a541 )"
  72.  
  73.  
  74. "Cybereason": "malicious.165bb6"
  75.  
  76.  
  77. "Arcabit": "Trojan.AgentWDCR.SVC"
  78.  
  79.  
  80. "TrendMicro": "Trojan.Win32.MALREP.THOABAAI"
  81.  
  82.  
  83. "F-Prot": "W32/Kryptik.PT.gen!Eldorado"
  84.  
  85.  
  86. "Symantec": "Packed.Generic.525"
  87.  
  88.  
  89. "APEX": "Malicious"
  90.  
  91.  
  92. "Avast": "Other:Malware-gen Trj"
  93.  
  94.  
  95. "Kaspersky": "HEUR:Trojan.Win32.Generic"
  96.  
  97.  
  98. "BitDefender": "Trojan.AgentWDCR.SVC"
  99.  
  100.  
  101. "NANO-Antivirus": "Trojan.Win32.Encoder.fmcefj"
  102.  
  103.  
  104. "Paloalto": "generic.ml"
  105.  
  106.  
  107. "AegisLab": "Trojan.Win32.Generic.4!c"
  108.  
  109.  
  110. "Tencent": "Win32.Trojan.Generic.Hufr"
  111.  
  112.  
  113. "Endgame": "malicious (high confidence)"
  114.  
  115.  
  116. "Emsisoft": "Trojan.AgentWDCR.SVC (B)"
  117.  
  118.  
  119. "Comodo": "Malware@#336x40kplzrai"
  120.  
  121.  
  122. "F-Secure": "Trojan.TR/Crypt.Agent.tbytt"
  123.  
  124.  
  125. "DrWeb": "Trojan.Encoder.26667"
  126.  
  127.  
  128. "Zillya": "Trojan.Hosts2.Win32.3219"
  129.  
  130.  
  131. "Invincea": "heuristic"
  132.  
  133.  
  134. "McAfee-GW-Edition": "BehavesLike.Win32.Downloader.dh"
  135.  
  136.  
  137. "Trapmine": "malicious.high.ml.score"
  138.  
  139.  
  140. "Sophos": "Mal/Generic-L"
  141.  
  142.  
  143. "SentinelOne": "DFI - Suspicious PE"
  144.  
  145.  
  146. "Cyren": "W32/Trojan.KIAG-5029"
  147.  
  148.  
  149. "Jiangmin": "Trojan.Generic.dayql"
  150.  
  151.  
  152. "Webroot": "W32.Adware.Installcore"
  153.  
  154.  
  155. "Avira": "TR/Crypt.Agent.tbytt"
  156.  
  157.  
  158. "Antiy-AVL": "Trojan/Win32.Occamy"
  159.  
  160.  
  161. "Microsoft": "Trojan:Win32/Skeeyah.A!MTB"
  162.  
  163.  
  164. "ViRobot": "Trojan.Win32.Z.Mikey.281088"
  165.  
  166.  
  167. "ZoneAlarm": "HEUR:Trojan.Win32.Generic"
  168.  
  169.  
  170. "GData": "Win32.Packed.Kryptik.BHC4MD"
  171.  
  172.  
  173. "TACHYON": "Trojan/W32.DNSChanger.281088"
  174.  
  175.  
  176. "AhnLab-V3": "Win-Trojan/Gandcrab10.Exp"
  177.  
  178.  
  179. "MAX": "malware (ai score=100)"
  180.  
  181.  
  182. "Ad-Aware": "Trojan.AgentWDCR.SVC"
  183.  
  184.  
  185. "Malwarebytes": "Trojan.MalPack.GS"
  186.  
  187.  
  188. "ESET-NOD32": "Win32/Qhost.PPC"
  189.  
  190.  
  191. "TrendMicro-HouseCall": "Trojan.Win32.MALREP.THOABAAI"
  192.  
  193.  
  194. "Rising": "Trojan.Kryptik!1.B582 (KTSE)"
  195.  
  196.  
  197. "Yandex": "Trojan.Agent!DLDkla8n4zQ"
  198.  
  199.  
  200. "Ikarus": "Trojan-Ransom.Downloader.Stop"
  201.  
  202.  
  203. "Fortinet": "W32/Kryptik.GPMP!tr"
  204.  
  205.  
  206. "MaxSecure": "Ransomeware.GandCrypt.JZ"
  207.  
  208.  
  209. "AVG": "Other:Malware-gen Trj"
  210.  
  211.  
  212. "Panda": "Trj/Genetic.gen"
  213.  
  214.  
  215. "CrowdStrike": "win/malicious_confidence_100% (W)"
  216.  
  217.  
  218. "Qihoo-360": "Win32/Trojan.96d"
  219.  
  220.  
  221.  
  222.  
  223. "Description": "The sample wrote data to the system hosts file.",
  224. "Details":
  225.  
  226. "added": "127.0.0.1 ds.download.windowsupdate.com"
  227.  
  228.  
  229. "added": "127.0.0.1 www.update.microsoft.com"
  230.  
  231.  
  232. "added": "127.0.0.1 download.windowsupdate.com"
  233.  
  234.  
  235. "added": "127.0.0.1 fe2.update.microsoft.com"
  236.  
  237.  
  238. "added": "127.0.0.1 whoer.net"
  239.  
  240.  
  241. "added": "127.0.0.1 www.whoer.net"
  242.  
  243.  
  244. "added": "127.0.0.1 windowsupdate.com"
  245.  
  246.  
  247. "added": "127.0.0.1 www.windowsupdate.com"
  248.  
  249.  
  250. "added": "127.0.0.1 microsoft.com"
  251.  
  252.  
  253. "added": "127.0.0.1 www.microsoft.com"
  254.  
  255.  
  256. "added": "127.0.0.1 www.windowsupdate.com"
  257.  
  258.  
  259. "added": "127.0.0.1 windowsupdate.com"
  260.  
  261.  
  262. "added": "127.0.0.1 www.microsoft.com"
  263.  
  264.  
  265. "added": "127.0.0.1 www.360totalsecurity.com"
  266.  
  267.  
  268. "added": "127.0.0.1 360totalsecurity.com"
  269.  
  270.  
  271. "added": "127.0.0.1 www.gratissoftwaresite.com"
  272.  
  273.  
  274. "added": "127.0.0.1 gratissoftwaresite.com"
  275.  
  276.  
  277. "added": "127.0.0.1 tweakers.net"
  278.  
  279.  
  280. "added": "127.0.0.1 www.tweakers.net"
  281.  
  282.  
  283. "added": "127.0.0.1 www.avg.com"
  284.  
  285.  
  286. "added": "127.0.0.1 avg.com"
  287.  
  288.  
  289. "added": "127.0.0.1 www.bestevirusscanner.net"
  290.  
  291.  
  292. "added": "127.0.0.1 bestevirusscanner.net"
  293.  
  294.  
  295. "added": "127.0.0.1 www.consumentenbond.nl"
  296.  
  297.  
  298. "added": "127.0.0.1 consumentenbond.nl"
  299.  
  300.  
  301. "added": "127.0.0.1 cheaplicensing.com"
  302.  
  303.  
  304. "added": "127.0.0.1 www.cheaplicensing.com"
  305.  
  306.  
  307. "added": "127.0.0.1 global.ahnlab.com"
  308.  
  309.  
  310. "added": "127.0.0.1 www.global.ahnlab.com"
  311.  
  312.  
  313. "added": "127.0.0.1 www.ahnlab.com"
  314.  
  315.  
  316. "added": "127.0.0.1 ahnlab.com"
  317.  
  318.  
  319. "added": "127.0.0.1 downloads.tomsguide.com"
  320.  
  321.  
  322. "added": "127.0.0.1 www.downloads.tomsguide.com"
  323.  
  324.  
  325. "added": "127.0.0.1 www.download82.com"
  326.  
  327.  
  328. "added": "127.0.0.1 download82.com"
  329.  
  330.  
  331. "added": "127.0.0.1 download.cnet.com"
  332.  
  333.  
  334. "added": "127.0.0.1 www.download.cnet.com"
  335.  
  336.  
  337. "added": "127.0.0.1 www.avast.com"
  338.  
  339.  
  340. "added": "127.0.0.1 avast.com"
  341.  
  342.  
  343. "added": "127.0.0.1 support.avast.com"
  344.  
  345.  
  346. "added": "127.0.0.1 www.support.avast.com"
  347.  
  348.  
  349. "added": "127.0.0.1 www.consumentenbond.com"
  350.  
  351.  
  352. "added": "127.0.0.1 consumentenbond.com"
  353.  
  354.  
  355. "added": "127.0.0.1 www.goedkoopsteantivirus.com"
  356.  
  357.  
  358. "added": "127.0.0.1 goedkoopsteantivirus.com"
  359.  
  360.  
  361. "added": "127.0.0.1 www.toptenreviews.com"
  362.  
  363.  
  364. "added": "127.0.0.1 toptenreviews.com"
  365.  
  366.  
  367. "added": "127.0.0.1 www.antivirus.nl"
  368.  
  369.  
  370. "added": "127.0.0.1 antivirus.nl"
  371.  
  372.  
  373. "added": "127.0.0.1 www.bol.com"
  374.  
  375.  
  376. "added": "127.0.0.1 bol.com"
  377.  
  378.  
  379. "added": "127.0.0.1 www.avira.com"
  380.  
  381.  
  382. "added": "127.0.0.1 avira.com"
  383.  
  384.  
  385. "added": "127.0.0.1 www.bitdefender.com"
  386.  
  387.  
  388. "added": "127.0.0.1 bitdefender.com"
  389.  
  390.  
  391. "added": "127.0.0.1 licentie2go.com"
  392.  
  393.  
  394. "added": "127.0.0.1 www.licentie2go.com"
  395.  
  396.  
  397. "added": "127.0.0.1 www.bullguard.com"
  398.  
  399.  
  400. "added": "127.0.0.1 bullguard.com"
  401.  
  402.  
  403. "added": "127.0.0.1 www.kpn.com"
  404.  
  405.  
  406. "added": "127.0.0.1 kpn.com"
  407.  
  408.  
  409. "added": "127.0.0.1 virusscanner.software"
  410.  
  411.  
  412. "added": "127.0.0.1 www.virusscanner.software"
  413.  
  414.  
  415. "added": "127.0.0.1 www.comodo.com"
  416.  
  417.  
  418. "added": "127.0.0.1 comodo.com"
  419.  
  420.  
  421. "added": "127.0.0.1 www.drweb.com"
  422.  
  423.  
  424. "added": "127.0.0.1 drweb.com"
  425.  
  426.  
  427. "added": "127.0.0.1 download.drweb.com"
  428.  
  429.  
  430. "added": "127.0.0.1 www.download.drweb.com"
  431.  
  432.  
  433. "added": "127.0.0.1 vms.drweb.com"
  434.  
  435.  
  436. "added": "127.0.0.1 www.vms.drweb.com"
  437.  
  438.  
  439. "added": "127.0.0.1 alternativeto.ne"
  440.  
  441.  
  442. "added": "127.0.0.1 www.alternativeto.ne"
  443.  
  444.  
  445. "added": "127.0.0.1 softonic.com"
  446.  
  447.  
  448. "added": "127.0.0.1 www.softonic.com"
  449.  
  450.  
  451. "added": "127.0.0.1 www.softpedia.com"
  452.  
  453.  
  454. "added": "127.0.0.1 softpedia.com"
  455.  
  456.  
  457. "added": "127.0.0.1 www.flipkart.com"
  458.  
  459.  
  460. "added": "127.0.0.1 flipkart.com"
  461.  
  462.  
  463. "added": "127.0.0.1 virustotal.com"
  464.  
  465.  
  466. "added": "127.0.0.1 www.virustotal.com"
  467.  
  468.  
  469. "added": "127.0.0.1 www.emsisoft.com"
  470.  
  471.  
  472. "added": "127.0.0.1 emsisoft.com"
  473.  
  474.  
  475. "added": "127.0.0.1 www.antimalwaresoftware.com"
  476.  
  477.  
  478. "added": "127.0.0.1 antimalwaresoftware.com"
  479.  
  480.  
  481. "added": "127.0.0.1 www.pcwebplus.com"
  482.  
  483.  
  484. "added": "127.0.0.1 pcwebplus.com"
  485.  
  486.  
  487. "added": "127.0.0.1 www.pcmag.com"
  488.  
  489.  
  490. "added": "127.0.0.1 pcmag.com"
  491.  
  492.  
  493. "added": "127.0.0.1 www.eset.com"
  494.  
  495.  
  496. "added": "127.0.0.1 eset.com"
  497.  
  498.  
  499. "added": "127.0.0.1 www.surfspot.com"
  500.  
  501.  
  502. "added": "127.0.0.1 surfspot.com"
  503.  
  504.  
  505. "added": "127.0.0.1 www.topantivirus.com"
  506.  
  507.  
  508. "added": "127.0.0.1 topantivirus.com"
  509.  
  510.  
  511. "added": "127.0.0.1 www.techzine.com"
  512.  
  513.  
  514. "added": "127.0.0.1 techzine.com"
  515.  
  516.  
  517. "added": "127.0.0.1 www.eset.com"
  518.  
  519.  
  520. "added": "127.0.0.1 eset.com"
  521.  
  522.  
  523. "added": "127.0.0.1 www.fortinet.com"
  524.  
  525.  
  526. "added": "127.0.0.1 fortinet.com"
  527.  
  528.  
  529. "added": "127.0.0.1 fortiguard.com"
  530.  
  531.  
  532. "added": "127.0.0.1 www.fortiguard.com"
  533.  
  534.  
  535. "added": "127.0.0.1 forticlient.com"
  536.  
  537.  
  538. "added": "127.0.0.1 www.forticlient.com"
  539.  
  540.  
  541. "added": "127.0.0.1 www.kpn.com"
  542.  
  543.  
  544. "added": "127.0.0.1 kpn.com"
  545.  
  546.  
  547. "added": "127.0.0.1 www.kaspersky.com"
  548.  
  549.  
  550. "added": "127.0.0.1 kaspersky.com"
  551.  
  552.  
  553. "added": "127.0.0.1 www.consumentenbond.com"
  554.  
  555.  
  556. "added": "127.0.0.1 consumentenbond.com"
  557.  
  558.  
  559. "added": "127.0.0.1 www.surfspot.com"
  560.  
  561.  
  562. "added": "127.0.0.1 surfspot.com"
  563.  
  564.  
  565. "added": "127.0.0.1 www.topreviews.com"
  566.  
  567.  
  568. "added": "127.0.0.1 topreviews.com"
  569.  
  570.  
  571. "added": "127.0.0.1 www.amecomputers.com"
  572.  
  573.  
  574. "added": "127.0.0.1 amecomputers.com"
  575.  
  576.  
  577. "added": "127.0.0.1 www.instantsoftware.com"
  578.  
  579.  
  580. "added": "127.0.0.1 instantsoftware.com"
  581.  
  582.  
  583. "added": "127.0.0.1 www.malwarebytes.com"
  584.  
  585.  
  586. "added": "127.0.0.1 malwarebytes.com"
  587.  
  588.  
  589. "added": "127.0.0.1 www.malwarebytes.org"
  590.  
  591.  
  592. "added": "127.0.0.1 malwarebytes.org"
  593.  
  594.  
  595. "added": "127.0.0.1 download.cnet.com"
  596.  
  597.  
  598. "added": "127.0.0.1 www.download.cnet.com"
  599.  
  600.  
  601. "added": "127.0.0.1 www.bleepingcomputer.com"
  602.  
  603.  
  604. "added": "127.0.0.1 bleepingcomputer.com"
  605.  
  606.  
  607. "added": "127.0.0.1 www.majorgeeks.com"
  608.  
  609.  
  610. "added": "127.0.0.1 majorgeeks.com"
  611.  
  612.  
  613. "added": "127.0.0.1 www.seniorweb.com"
  614.  
  615.  
  616. "added": "127.0.0.1 seniorweb.com"
  617.  
  618.  
  619. "added": "127.0.0.1 www.amazon.com"
  620.  
  621.  
  622. "added": "127.0.0.1 amazon.com"
  623.  
  624.  
  625. "added": "127.0.0.1 www.techspot.com"
  626.  
  627.  
  628. "added": "127.0.0.1 techspot.com"
  629.  
  630.  
  631. "added": "127.0.0.1 filehippo.com"
  632.  
  633.  
  634. "added": "127.0.0.1 www.filehippo.com"
  635.  
  636.  
  637. "added": "127.0.0.1 www.idealsoftware.com"
  638.  
  639.  
  640. "added": "127.0.0.1 idealsoftware.com"
  641.  
  642.  
  643. "added": "127.0.0.1 uptodown.com"
  644.  
  645.  
  646. "added": "127.0.0.1 www.uptodown.com"
  647.  
  648.  
  649. "added": "127.0.0.1 www.mcafee.com"
  650.  
  651.  
  652. "added": "127.0.0.1 mcafee.com"
  653.  
  654.  
  655. "added": "127.0.0.1 home.mcafee.com"
  656.  
  657.  
  658. "added": "127.0.0.1 www.home.mcafee.com"
  659.  
  660.  
  661. "added": "127.0.0.1 www.coolblue.com"
  662.  
  663.  
  664. "added": "127.0.0.1 coolblue.com"
  665.  
  666.  
  667. "added": "127.0.0.1 www.pcmag.com"
  668.  
  669.  
  670. "added": "127.0.0.1 pcmag.com"
  671.  
  672.  
  673. "added": "127.0.0.1 www.sky.com"
  674.  
  675.  
  676. "added": "127.0.0.1 sky.com"
  677.  
  678.  
  679. "added": "127.0.0.1 norton.com"
  680.  
  681.  
  682. "added": "127.0.0.1 www.norton.com"
  683.  
  684.  
  685. "added": "127.0.0.1 www.kieskeurig.com"
  686.  
  687.  
  688. "added": "127.0.0.1 kieskeurig.com"
  689.  
  690.  
  691. "added": "127.0.0.1 internetsecurity.xfinity.com"
  692.  
  693.  
  694. "added": "127.0.0.1 www.internetsecurity.xfinity.com"
  695.  
  696.  
  697. "added": "127.0.0.1 www.symantec.com"
  698.  
  699.  
  700. "added": "127.0.0.1 symantec.com"
  701.  
  702.  
  703. "added": "127.0.0.1 www.campusshop.com"
  704.  
  705.  
  706. "added": "127.0.0.1 campusshop.com"
  707.  
  708.  
  709. "added": "127.0.0.1 www.pandasecurity.com"
  710.  
  711.  
  712. "added": "127.0.0.1 pandasecurity.com"
  713.  
  714.  
  715. "added": "127.0.0.1 www.paradigit.com"
  716.  
  717.  
  718. "added": "127.0.0.1 paradigit.com"
  719.  
  720.  
  721. "added": "127.0.0.1 www.sophos.com"
  722.  
  723.  
  724. "added": "127.0.0.1 sophos.com"
  725.  
  726.  
  727. "added": "127.0.0.1 home.sophos.com"
  728.  
  729.  
  730. "added": "127.0.0.1 www.home.sophos.com"
  731.  
  732.  
  733. "added": "127.0.0.1 sophos.virtualsecurity.com"
  734.  
  735.  
  736. "added": "127.0.0.1 www.sophos.virtualsecurity.com"
  737.  
  738.  
  739. "added": "127.0.0.1 www.gratissoftware.com"
  740.  
  741.  
  742. "added": "127.0.0.1 gratissoftware.com"
  743.  
  744.  
  745. "added": "127.0.0.1 www.seniorweb.com"
  746.  
  747.  
  748. "added": "127.0.0.1 seniorweb.com"
  749.  
  750.  
  751. "added": "127.0.0.1 www.softwareadvice.com"
  752.  
  753.  
  754. "added": "127.0.0.1 softwareadvice.com"
  755.  
  756.  
  757. "added": "127.0.0.1 www.symantec.com"
  758.  
  759.  
  760. "added": "127.0.0.1 symantec.com"
  761.  
  762.  
  763. "added": "127.0.0.1 hostedendpoint.spn.com"
  764.  
  765.  
  766. "added": "127.0.0.1 www.hostedendpoint.spn.com"
  767.  
  768.  
  769. "added": "127.0.0.1 www.g2crowd.com"
  770.  
  771.  
  772. "added": "127.0.0.1 g2crowd.com"
  773.  
  774.  
  775. "added": "127.0.0.1 www.trendmicro.com"
  776.  
  777.  
  778. "added": "127.0.0.1 trendmicro.com"
  779.  
  780.  
  781. "added": "127.0.0.1 www.goedkoopsteantivirus.com"
  782.  
  783.  
  784. "added": "127.0.0.1 goedkoopsteantivirus.com"
  785.  
  786.  
  787. "added": "127.0.0.1 download.cnet.com"
  788.  
  789.  
  790. "added": "127.0.0.1 www.download.cnet.com"
  791.  
  792.  
  793. "added": "127.0.0.1 www.ign.com"
  794.  
  795.  
  796. "added": "127.0.0.1 ign.com"
  797.  
  798.  
  799. "added": "127.0.0.1 www.trusteer.com"
  800.  
  801.  
  802. "added": "127.0.0.1 trusteer.com"
  803.  
  804.  
  805. "added": "127.0.0.1 my.webrootanywhere.com"
  806.  
  807.  
  808. "added": "127.0.0.1 www.my.webrootanywhere.com"
  809.  
  810.  
  811. "added": "127.0.0.1 www.webroot.com"
  812.  
  813.  
  814. "added": "127.0.0.1 webroot.com"
  815.  
  816.  
  817. "added": "127.0.0.1 www.techradar.com"
  818.  
  819.  
  820. "added": "127.0.0.1 techradar.com"
  821.  
  822.  
  823. "added": "127.0.0.1 support.microsoft.com"
  824.  
  825.  
  826. "added": "127.0.0.1 www.support.microsoft.com"
  827.  
  828.  
  829. "added": "127.0.0.1 www.microsoft.com"
  830.  
  831.  
  832. "added": "127.0.0.1 microsoft.com"
  833.  
  834.  
  835. "added": "127.0.0.1 pulse.microsoft.com"
  836.  
  837.  
  838. "added": "127.0.0.1 www.pulse.microsoft.com"
  839.  
  840.  
  841. "added": "127.0.0.1 pcmweb.com"
  842.  
  843.  
  844. "added": "127.0.0.1 www.pcmweb.com"
  845.  
  846.  
  847. "added": "127.0.0.1 www.security.com"
  848.  
  849.  
  850. "added": "127.0.0.1 security.com"
  851.  
  852.  
  853. "added": "127.0.0.1 ccm.net"
  854.  
  855.  
  856. "added": "127.0.0.1 www.ccm.net"
  857.  
  858.  
  859. "added": "127.0.0.1 www.enigmasoftware.com"
  860.  
  861.  
  862. "added": "127.0.0.1 enigmasoftware.com"
  863.  
  864.  
  865. "added": "127.0.0.1 howtoremove.guide"
  866.  
  867.  
  868. "added": "127.0.0.1 www.howtoremove.guide"
  869.  
  870.  
  871. "added": "127.0.0.1 www.2-viruses.com"
  872.  
  873.  
  874. "added": "127.0.0.1 2-viruses.com"
  875.  
  876.  
  877. "added": "127.0.0.1 www.2-spyware.com"
  878.  
  879.  
  880. "added": "127.0.0.1 2-spyware.com"
  881.  
  882.  
  883. "added": "127.0.0.1 sensorstechforum.com"
  884.  
  885.  
  886. "added": "127.0.0.1 www.sensorstechforum.com"
  887.  
  888.  
  889. "added": "127.0.0.1 greatis.com"
  890.  
  891.  
  892. "added": "127.0.0.1 www.greatis.com"
  893.  
  894.  
  895. "added": "127.0.0.1 www.pchubs.com"
  896.  
  897.  
  898. "added": "127.0.0.1 pchubs.com"
  899.  
  900.  
  901. "added": "127.0.0.1 www.pcrisk.com"
  902.  
  903.  
  904. "added": "127.0.0.1 pcrisk.com"
  905.  
  906.  
  907. "added": "127.0.0.1 www.malware-board.com"
  908.  
  909.  
  910. "added": "127.0.0.1 malware-board.com"
  911.  
  912.  
  913. "added": "127.0.0.1 pcthreatskiller.com"
  914.  
  915.  
  916. "added": "127.0.0.1 www.pcthreatskiller.com"
  917.  
  918.  
  919. "added": "127.0.0.1 pcfixhelp.net"
  920.  
  921.  
  922. "added": "127.0.0.1 www.pcfixhelp.net"
  923.  
  924.  
  925. "added": "127.0.0.1 stepsforkillingthreats.com"
  926.  
  927.  
  928. "added": "127.0.0.1 www.stepsforkillingthreats.com"
  929.  
  930.  
  931. "added": "127.0.0.1 www.removemalwarevirus.com"
  932.  
  933.  
  934. "added": "127.0.0.1 removemalwarevirus.com"
  935.  
  936.  
  937. "added": "127.0.0.1 spyware-techie.com"
  938.  
  939.  
  940. "added": "127.0.0.1 www.spyware-techie.com"
  941.  
  942.  
  943. "added": "127.0.0.1 anti-spyware-101.com"
  944.  
  945.  
  946. "added": "127.0.0.1 www.anti-spyware-101.com"
  947.  
  948.  
  949. "added": "127.0.0.1 www.removeallvirus.com"
  950.  
  951.  
  952. "added": "127.0.0.1 removeallvirus.com"
  953.  
  954.  
  955. "added": "127.0.0.1 www.pcthreat.com"
  956.  
  957.  
  958. "added": "127.0.0.1 pcthreat.com"
  959.  
  960.  
  961. "added": "127.0.0.1 www.pcinfectionsupport.com"
  962.  
  963.  
  964. "added": "127.0.0.1 pcinfectionsupport.com"
  965.  
  966.  
  967. "added": "127.0.0.1 www.howtouninstallpcmalware.com"
  968.  
  969.  
  970. "added": "127.0.0.1 howtouninstallpcmalware.com"
  971.  
  972.  
  973. "added": "127.0.0.1 computerprotectionpro.com"
  974.  
  975.  
  976. "added": "127.0.0.1 www.computerprotectionpro.com"
  977.  
  978.  
  979.  
  980.  
  981.  
  982. * Started Service:
  983.  
  984. * Mutexes:
  985.  
  986. * Modified Files:
  987. "C:\\Windows\\System32\\drivers\\etc\\hosts"
  988.  
  989.  
  990. * Deleted Files:
  991.  
  992. * Modified Registry Keys:
  993.  
  994. * Deleted Registry Keys:
  995.  
  996. * DNS Communications:
  997.  
  998. * Domains:
  999.  
  1000. * Network Communication - ICMP:
  1001.  
  1002. * Network Communication - HTTP:
  1003.  
  1004. * Network Communication - SMTP:
  1005.  
  1006. * Network Communication - Hosts:
  1007.  
  1008. * Network Communication - IRC:
Advertisement
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!