Technical Information
Modifies file system:
Creates the following files:
- %TEMP%\0001F2D7.log
- %TEMP%\ish134312\css\ie6_main.css
- %TEMP%\ish134312\css\main.css
- %TEMP%\ish134312\css\sdk-ui\browse.css
- %TEMP%\ish134312\css\sdk-ui\button.css
- %TEMP%\ish134312\css\sdk-ui\checkbox.css
- %TEMP%\ish134312\css\sdk-ui\images\button-bg.png
- %TEMP%\ish134312\css\sdk-ui\images\progress-bg-corner.png
- %TEMP%\ish134312\css\sdk-ui\images\progress-bg.png
- %TEMP%\ish134312\css\sdk-ui\images\progress-bg2.png
- %HOMEPATH%\Desktop\Continue mytopfreegames Installation.lnk
- %TEMP%\ish134312\css\sdk-ui\progress-bar.css
- %TEMP%\ish127734\images\Close.png
- %TEMP%\ish134312\csshover3.htc
- %TEMP%\ish134312\images\browsers.png
- %TEMP%\ish134312\images\Close.png
- %TEMP%\ish134312\images\Close_Hover.png
- %TEMP%\ish134312\images\Color_Button.png
- %TEMP%\ish134312\images\Color_Button_Hover.png
- %TEMP%\ish134312\images\console.jpg
- %TEMP%\ish134312\images\Gray_Button.png
- %TEMP%\ish134312\images\Gray_Button_Hover.png
- %TEMP%\ish134312\images\loader.gif
- %TEMP%\ish134312\images\Progress.png
- %TEMP%\ish134312\images\ProgressBar.png
- %TEMP%\ICReinstall_<File name>.exe
- %TEMP%\00020C89.log
- %TEMP%\is135653842\311885544.cfg
- %TEMP%\is135653842\126699613.cfg
- %TEMP%\000209AA.log
- %TEMP%\ish127734\css\main.css
- %TEMP%\ish127734\css\sdk-ui\browse.css
- %TEMP%\ish127734\css\sdk-ui\button.css
- %TEMP%\ish127734\css\sdk-ui\checkbox.css
- %TEMP%\ish127734\css\sdk-ui\images\button-bg.png
- %TEMP%\ish127734\css\sdk-ui\images\progress-bg-corner.png
- %TEMP%\ish127734\css\sdk-ui\images\progress-bg.png
- %TEMP%\ish127734\css\sdk-ui\images\progress-bg2.png
- %TEMP%\ish127734\css\sdk-ui\progress-bar.css
- %TEMP%\ish127734\csshover3.htc
- %TEMP%\ish127734\images\BG.png
- %TEMP%\ish134312\locale\EN.locale
- %TEMP%\ish134312\images\BG.png
- %TEMP%\ish127734\images\browsers.png
- %TEMP%\ish127734\images\Color_Button.png
- %TEMP%\ish127734\images\Color_Button_Hover.png
- %TEMP%\ish127734\images\console.jpg
- %TEMP%\ish127734\images\Gray_Button.png
- %TEMP%\ish127734\images\Gray_Button_Hover.png
- %TEMP%\ish127734\images\loader.gif
- %TEMP%\ish127734\images\Progress.png
- %TEMP%\ish127734\images\ProgressBar.png
- %TEMP%\ish127734\locale\EN.locale
- %TEMP%\ish127734\bootstrap_34236.html
- %ProgramFiles%\is132718.log
- %TEMP%\ish127734\css\ie6_main.css
- %TEMP%\ish127734\images\Close_Hover.png
- %TEMP%\00024992.log
Deletes the following files:
- %TEMP%\0001F2D7.log
- %TEMP%\ish134312\images\Progress.png
- %TEMP%\ish134312\images\loader.gif
- %TEMP%\ish134312\images\Gray_Button_Hover.png
- %TEMP%\ish134312\images\Gray_Button.png
- %TEMP%\ish134312\images\console.jpg
- %TEMP%\ish134312\images\Color_Button_Hover.png
- %TEMP%\ish134312\images\Color_Button.png
- %TEMP%\ish134312\images\Close_Hover.png
- %TEMP%\ish134312\images\Close.png
- %TEMP%\ish134312\images\browsers.png
- %TEMP%\ish134312\images\BG.png
- %TEMP%\ish134312\csshover3.htc
- %TEMP%\ish134312\css\sdk-ui\progress-bar.css
- %TEMP%\ish134312\css\sdk-ui\images\progress-bg2.png
- %TEMP%\ish134312\css\sdk-ui\images\progress-bg.png
- %TEMP%\ish134312\css\sdk-ui\images\progress-bg-corner.png
- %TEMP%\ish134312\css\sdk-ui\images\button-bg.png
- %TEMP%\ish134312\css\sdk-ui\checkbox.css
- %TEMP%\ish134312\css\sdk-ui\button.css
- %TEMP%\ish134312\css\sdk-ui\browse.css
- %TEMP%\ish134312\css\main.css
- %TEMP%\ish134312\css\ie6_main.css
- %TEMP%\00024992.log
- %TEMP%\ish127734\bootstrap_34236.html
- %TEMP%\00020C89.log
- %TEMP%\000209AA.log
- %ProgramFiles%\is132718.log
- %TEMP%\ish134312\images\ProgressBar.png
- %TEMP%\ish134312\locale\EN.locale
Network activity:
Connects to:
- 'os.###aracdn.com':80
- 'cd###.kitaracdn.com':80
- 'os#.##taracdn.com':80
TCP:
HTTP GET requests:
- http://cd###.kitaracdn.com/app/Kitara/mytopfreegames_v3.cis
HTTP POST requests:
- http://os.###aracdn.com/Kitara/?v=################
- http://os#.##taracdn.com/Kitara/?v=################
UDP:
- DNS ASK os.###aracdn.com
- DNS ASK cd###.kitaracdn.com
- DNS ASK os#.##taracdn.com
Miscellaneous:
Searches for the following windows:
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
Creates and executes the following:
- '<Full path to file>' /_ShowProgress
