Virus:TR/Bagle.332
Date discovered:31/03/2010
Type:Trojan
In the wild:Yes
Reported Infections:Low to medium
Distribution Potential:Low to medium
Damage Potential:Medium
Static file:Yes
File size:99.332 Bytes
MD5 checksum:0be75b30648828e9d662598ed1b22faa
IVDF version:7.10.06.06 - Wednesday, March 31, 2010

 General Method of propagation:
   • Peer to Peer


Aliases:
   •  Mcafee: W32/Bagle.gen virus
   •  Sophos: Mal/Generic-A
   •  Panda: W32/Bagle.RC.worm
   •  Eset: Win32/Bagle.TK
   •  Bitdefender: Win32.Bagle.SUQ@mm


Platforms / OS:
   • Windows 2000
   • Windows XP
   • Windows 2003


Side effects:
   • Downloads malicious files
   • Drops malicious files
   • Registry modification

 Files It copies itself to the following location:
   • %HOME%\Application Data\m\flec006.exe



The following files are created:

– %HOME%\Application Data\m\data.oct Further investigation pointed out that this file is malware, too. Detected as: TR/Dldr.Bagle.bla

– %HOME%\Application Data\m\list.oct
– %HOME%\Application Data\m\srvlist.oct



It tries to download some files:

– The locations are the following:
   • http://adaracomunicacion.com/images/1/**********
   • http://ppugi.com/images/1/**********
   • http://www.fredianipueyrredon.com.ar/images/1/**********
   • http://ferreteriacapaco.es/images/1/**********
   • http://marcozoli.it/images/1/**********
   • http://ftpeditionsmaloine2.vigot.fr/images/1/**********
   • http://kontigo.info/images/1/**********
   • http://www.mA-demos.de/images/1/**********
   • http://mavigokbiyogaz.com/images/1/**********
   • http://partirenimmobilier.fr/images/1/**********
   • http://kirche-wannweil.de/images/1/**********
   • http://www.rtw.ch/images/1/**********
   • http://pivagomme.com/images/1/**********
   • http://inju.ivyro.net/images/1/**********
   • http://stephanechalaye.com/images/1/**********
   • http://pubbligrafica.it/images/1/**********
   • http://trinitygroup.home.pl/images/1/**********
   • http://nycar.ws/images/1/**********
   • http://www.photo-sauvage.fr/images/1/**********
   • http://www.education.donorione.org/images/1/**********
   • http://www.immobiltetto.it/images/1/**********
   • http://www.sprintgrafica.it/images/1/**********
   • http://aabangu.com.br/images/1/**********
   • http://www.sinsida.biz/images/1/**********
   • http://gleis2.schwarzenbach-saale.de/images/1/**********
   • http://kamitech.pl/images/1/**********
   • http://pullig.net/images/1/**********
   • http://achievewealthsolutions.com/images/1/**********
   • http://demoimmo.idoo.com/images/1/**********
   • http://neurotraining-alsace.fr/images/1/**********
   • http://www.alessandrotana.it/images/1/**********
   • http://rfactorfr.idoo.com/images/1/**********
   • http://clients.idream.at/images/1/**********
   • http://s143920388.onlinehome.fr/images/1/**********
   • http://parquedelalana.com/images/1/**********
   • http://cadsanrafael.com/images/1/**********
   • http://radius.rinet.ru/images/1/**********
   • http://kristine.mcnicholas.com/images/1/**********
   • http://filmy.smart.media.pl/images/1/**********
   • http://www.traugutt.miasto.zgierz.pl/images/1/**********
   • http://LITOSAGI.IT/images/1/**********
   • http://makeup-colours.de/images/1/**********
   • http://somesunlight.com/images/1/**********
   • http://kaetzchen1.ka.funpic.de/images/1/**********
   • http://200.208.186.50/images/1/**********
   • http://www.aladiahembalagens.com.br/images/1/**********
   • http://intersat.com.ar/images/1/**********
   • http://2stones.nl/images/1/**********
   • http://lekarstvo.euweb.cz/images/1/**********
   • http://lettra-decor.com/images/1/**********
   • http://energyrental.it/images/1/**********
   • http://neos-tech.it/images/1/**********
   • http://mytimes.ca/images/1/**********


– The location is the following:
   • http://solmirar.com/images/**********


– The locations are the following:
   • http://abcabil.com/images/1/**********
   • http://crovace.com/images/1/**********
   • http://aabangu.com.br/images/1/**********
   • http://adaracomunicacion.com/images/1/**********
   • http://achievewealthsolutions.com/images/1/**********
   • http://2stones.nl/images/1/**********
   • http://www.agroexpress.net/images/1/**********
   • http://merchantsampler.com/images/1/**********
   • http://intersat.com.ar/images/1/**********
   • http://www.alessandrotana.it/images/1/**********
   • http://www.hotelprosperi.it/images/1/**********
   • http://architects.it/images/1/**********
   • http://aerolatino-geba.com.ar/images/1/**********
   • http://www.ardesigner.it/images/1/**********
   • http://astrocafe.pl/images/1/**********
   • http://bosment.com/images/1/**********
   • http://www.booom.in/images/1/**********
   • http://camantincendio.com/images/1/**********
   • http://bvloriga.pt/images/1/**********
   • http://latiendalicha.com/images/1/**********
   • http://dgpolicemarathon.com/images/1/**********
   • http://dungeontwister.net/images/1/**********
   • http://energyrental.it/images/1/**********
   • http://erimatta.com/images/1/**********
   • http://www.education.donorione.org/images/1/**********
   • http://energena.it/images/1/**********
   • http://www.fantaseriea33cilindri.netsons.org/images/1/**********
   • http://espaciofractal.com/images/1/**********
   • http://ferreteriacapaco.es/images/1/**********
   • http://fhinversiones.net/images/1/**********
   • http://pullig.net/images/1/**********
   • http://www.fonderiadigiacomo.it/images/1/**********
   • http://foxhom.com/images/1/**********
   • http://greenservice.com.pl/images/1/**********
   • http://habitat-ideal.com/images/1/**********
   • http://heirloomdesignsbysusan.com/images/1/**********
   • http://immobiliariacostabrava.com/images/1/**********
   • http://clients.idream.at/images/1/**********
   • http://implanchihuahua.gob.mx/images/1/**********
   • http://inju.ivyro.net/images/1/**********
   • http://metalurgicaistar.com.ar/images/1/**********
   • http://jetwaves.fr/images/1/**********
   • http://200.208.186.50/images/1/**********
   • http://kaetzchen1.ka.funpic.de/images/1/**********
   • http://my.LSFLab.com/images/1/**********
   • http://www.deliver.cl/images/1/**********
   • http://kirche-wannweil.de/images/1/**********
   • http://kristine.mcnicholas.com/images/1/**********
   • http://somesunlight.com/images/1/**********
   • http://mytimes.ca/images/1/**********
   • http://lekarstvo.euweb.cz/images/1/**********
   • http://zaehnezeigen.biz/images/1/**********
   • http://neos-tech.it/images/1/**********
   • http://partirenimmobilier.fr/images/1/**********
   • http://planetspin.it/images/1/**********
   • http://pubbligrafica.it/images/1/**********
   • http://ppugi.com/images/1/**********
   • http://radius.rinet.ru/images/1/**********
   • http://www.designintextile.com/images/1/**********
   • http://www.sinsida.biz/images/1/**********
   • http://softman.es/images/1/**********
   • http://www.sprintgrafica.it/images/1/**********
   • http://198.106.220.60/images/1/**********
   • http://tmakkie.nl/images/1/**********
   • http://revesdiseno.com/images/1/**********
   • http://www.traugutt.miasto.zgierz.pl/images/1/**********
   • http://trinitygroup.home.pl/images/1/**********
   • http://logical1.org/images/1/**********
   • http://s143920388.onlinehome.fr/images/1/**********
   • http://ipousteguy.com/images/1/**********
   • http://stephanechalaye.com/images/1/**********
   • http://daemonpc.it/images/1/**********
   • http://www.fredianipueyrredon.com.ar/images/1/**********
   • http://209.227.245.172/images/1/**********
   • http://vendovendo.es/images/1/**********
   • http://www.lr-tigges.com/images/1/**********
   • http://hgv-vioel.de.dd21832.kasserver.com/images/1/**********
   • http://gleis2.schwarzenbach-saale.de/images/1/**********
   • http://www.mA-demos.de/images/1/**********
   • http://aerolineasoeste.com.ar/images/1/**********
   • http://valettinho.com/images/1/**********
   • http://wh.webserwer.pl/images/1/**********
   • http://yoga-go.com.br/images/1/**********
   • http://halilaydin.com.tr/images/1/**********
   • http://www.zivankic.com/images/1/**********


– The locations are the following:
   • http://logical1.org/images/1/**********
   • http://aerolineasoeste.com.ar/images/1/**********
   • http://www.deliver.cl/images/1/**********
   • http://www.booom.in/images/1/**********
   • http://bosment.com/images/1/**********
   • http://habitat-ideal.com/images/1/**********
   • http://heirloomdesignsbysusan.com/images/1/**********
   • http://jub.lv/images/1/**********
   • http://aerolatino-geba.com.ar/images/1/**********
   • http://planetspin.it/images/1/**********
   • http://dungeontwister.net/images/1/**********
   • http://revesdiseno.com/images/1/**********
   • http://www.hotelprosperi.it/images/1/**********
   • http://jetwaves.fr/images/1/**********
   • http://metalurgicaistar.com.ar/images/1/**********
   • http://209.227.245.172/images/1/**********
   • http://tmakkie.nl/images/1/**********
   • http://www.fantaseriea33cilindri.netsons.org/images/1/**********
   • http://yoga-go.com.br/images/1/**********
   • http://espaciofractal.com/images/1/**********
   • http://www.designintextile.com/images/1/**********
   • http://energena.it/images/1/**********
   • http://erimatta.com/images/1/**********
   • http://fhinversiones.net/images/1/**********
   • http://vendovendo.es/images/1/**********
   • http://softman.es/images/1/**********
   • http://greenservice.com.pl/images/1/**********
   • http://crovace.com/images/1/**********
   • http://dgpolicemarathon.com/images/1/**********
   • http://valettinho.com/images/1/**********
   • http://bvloriga.pt/images/1/**********
   • http://foxhom.com/images/1/**********
   • http://198.106.220.60/images/1/**********
   • http://www.zivankic.com/images/1/**********
   • http://my.LSFLab.com/images/1/**********
   • http://latiendalicha.com/images/1/**********
   • http://daemonpc.it/images/1/**********
   • http://ipousteguy.com/images/1/**********
   • http://www.agroexpress.net/images/1/**********
   • http://camantincendio.com/images/1/**********
   • http://woonoo.idoo.com/images/1/**********
   • http://abcabil.com/images/1/**********
   • http://hgv-vioel.de.dd21832.kasserver.com/images/1/**********
   • http://immobiliariacostabrava.com/images/1/**********
   • http://zaehnezeigen.biz/images/1/**********
   • http://wh.webserwer.pl/images/1/**********
   • http://merchantsampler.com/images/1/**********
   • http://implanchihuahua.gob.mx/images/1/**********
   • http://architects.it/images/1/**********
   • http://www.ardesigner.it/images/1/**********




It tries to executes the following files:

– Filename:
   • "%HOME%\Application Data\m\flec006.exe" -upd


– Filename:
   • "%HOME%\Application Data\m\flec006.exe"

 Registry The following registry key is added in order to run the process after reboot:

– [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
   • "mule_st_key"="%HOME%\Application Data\m\flec006.exe"

 P2P In order to infect other systems in the Peer to Peer network community the following action is performed: It searches for the following directory:
   • %HOME%\Application Data\m\shared

   If successful, the following files are created:
   • SuperCleaner v2.01.czip; Vue d'Esprit 4.00-02.czip; Image Optimizer
      Pro 3.51 (Serial).czip; Thanksgiving Scenery 3D 1.0.czip; Addsoft
      1.20C (Serial).zip; Adhaero Mailipulate 1.02.zip; Termin Master v4.62
      German by ViRiLiTY.czip; JoeAlter Shave and a Haircut v2.7v11 for Maya
      6.0 LINUX Incl Keygen by PARADOX.czip; MaxBulk Mailer v4.3 GERMAN
      WinALL Incl Keymaker by Core.czip; MS Access Export Table To XML File
      Software 7.0.czip; EvenTrigger Pro v2.01 Win2kXP Incl Keygen by
      BLiZZARD.czip; SQLite Data Wizard 8.4.0.1.zip; Backup Expert
      v1.0.0.101.zip; Size Explorer 2.6 (Serial).zip; 7isv Flash Video
      Converter 1.2.zip; Power Archiver 2006 9.51 (Serial).zip; 010 Editor
      3.0.5.zip; The Ultimate Troubleshooter 2.24.zip; Adhaero Mailipulate
      1.02.czip; Yellow Pages Super Grabber v2.02c.113.zip; FinalData
      Enterprise v2.0.1.1028 by ROR.czip; Digital Zenith OmegaBasic
      Professional v1.4 Incl Keymaker by DVT.czip; SuperCleaner v2.01.zip;
      Canasta 5.0.0.6.zip; E-promt 2004 Professional English - German
      v6.5.2.40.zip; Photo Base Deluxe 1.61 (Serial).zip; Okoker Mp3 To CD
      Burner v1.6 Cracked by ARN.zip; Ease OGG TO RM Converter 1.00.zip;
      CopyPaste 4 x for Mac.zip; MP3 Sound Recorder v2.5.zip; Smart Movie
      3.22 for Symbian.zip; Spyware Snooper 1.0.1 (Serial).czip; Virtual
      Sampler 3.0.czip; CD MP3 Burner v2.12 by SND.czip; Cool EasyCard v2.55
      Patch by AT4RE.czip; SharkPoint Windows 2.0.czip; Starship Troopers
      [EURO] No-DVD Fixed Image.zip; perSIMPLEX 6.1b.zip; KMP3.4.1.86.zip;
      AirStrike II Gulf Thunder ALL ACCESS CHEAT by PiZZA.zip; FileRevival
      v1.2 Silent Update.czip; Solus Clip 3.0.zip; Elmer 2.0.2 for Mac
      (Serial).zip; Alleysoft AutoRun Design Specialty v3.0.6.0 by
      EiTHeL.czip; AntiSniff v1.02.1 by TNT.czip; VITO Technology Winterface
      v1.01 Retail for PocketPC WM5 WM6 by RLYEH.czip; HotKey Magic 1.10
      (Serial).czip; CoordTrans v1.0.14 Keygen Only by ORiON.zip;
      PixelGenius PhotoKit Color v1.0.3 for Adobe Photoshop by FOSI.czip;
      Nero Burning ROM v5.5.9.0 Serial.zip; Serie ContaPlus FacturaPlus
      TPVPlus Elite 2001.czip; Airfix Dogfighter v1.20 [ENGLISH] No-CD Fixed
      Update.czip; Solus Clip 3.0.czip; ; 1 Video Converter v3.6.2.zip;
      Xtreme Tools.zip; TweakNow RegCleaner Professional v2.5.6 by Lz0.zip;
      Neuron PE Disassembler v1.x Generic.zip; Abfallkosten-Verwaltung
      2003.01.0026 (Serial).czip; FIFA Manager 2006 CD-Key 2006
      (Serial).czip; Artech365 MPEG4 Direct Maker v4.1.0.68 Cracked WinALL
      by F4CG.zip; Super AVConverter v3.0.150.czip; Super AVConverter
      v3.0.150.zip; Termin Master v4.62 German by ViRiLiTY.zip; Email Backup
      Guardian 1.1.zip; SoftArtisans FileManager v2.5.1 (Serial).zip; Text
      To Speech Maker 1.0.8.czip; The Fifth Desciple v1.0 +4 TRAINER.zip;
      Mobile Net Switch v3.49 Incl Keymaker by Core.zip; ChrisTV
      Professional v3.80 Fixed.czip; Artech365 MPEG4 Direct Maker v4.1.0.68
      Cracked WinALL by F4CG.czip; Password Kernel 1.4.czip; PGI Workstation
      Server v7.0.2 by TBE.czip; GameHouse Maui Wowee v8.5.1 build 102 by
      BalCrNepal.zip; HGS Modellbahn v7.0 German by ViRiLiTY.zip; The
      Ultimate Troubleshooter 2.24.czip; ChrisTV Professional v3.80
      Fixed.zip; Quick Article Pro 3.0.zip; Cool EasyCard v2.55 Patch by
      AT4RE.zip; Ras Vegas Mission Pack 3 v2.3 PLUS 6 TRAINER CHEATS by
      PiZZA.zip; Stealth Activity Reporter v1.8.zip; SQLite Data Wizard
      8.4.0.1.czip; ImTOO MPEG Encoder v2.1.50.705b WinALL Incl Keygen by
      BRD.zip; PixelGenius PhotoKit Color v1.0.3 for Adobe Photoshop by
      FOSI.zip; RZ Mobile Converter 3.5.czip; Advanced CD Ripper Pro 2.50
      (Serial).czip; awinstall3 xx universalpatchsnd.czip; 32Bit Web Browser
      v.w.9.47.14.czip; Password Kernel 1.4.zip; Framerate Converter HQ
      v2.03a Cracked by F4CG.czip; AirStrike II Gulf Thunder ALL ACCESS
      CHEAT by PiZZA.czip; Mentor Graphics Seamless FPGA v5.4.3.0 Incl
      Keymaker by ZWT.zip; Kennene Halloween Screensaver 1.0.czip; Framerate
      Converter HQ v2.03a Cracked by F4CG.zip; Happy Fish 4.3.3.czip; Paint
      Shop Pro v7.04 by Crack Demon 2001.czip; Snood v3.0 by xSatIoNne.czip;
      Active Query Builder Java Edition 1.1 CrAcKed.zip; Readerware v2.92
      Linux Incl Keygen by BLiZZARD.zip; Right Hemisphere Deep Creator
      v2.3.0.1407 Incl Keymaker by ARN.zip; CTM Rail-Tarif v4.86.zip; Office
      XP 2000 (Serial).zip; TweakNow RegCleaner Professional v2.5.6 by
      Lz0.czip; HGS-Autokosten v3.9.zip; Delta Ops v1.0 AMMO TRAINER.zip;
      SEO Informer 1.0.3.zip; Gameloft Off Road Dirt Motocross Retail JAVA
      LG KS20 by RLYEH.zip; WhereverUgo 1.0 (Serial).czip; 3D Dancing
      Shamrock Teddy Bear 1.0.zip; Burn CD Now v1.04 Keygen by TSRh.zip;
      Fast Break Basketball 1.18 (Serial).zip; Snood v3.0 by xSatIoNne.zip;
      Plansoft svPlan v7.2.01210705 GERMAN Incl Keymaker by ACME.czip; Call
      of Duty World at War All Access Cheat by FFF.czip; Mind Manager
      Standard Edition 4.6.171.czip; Clock G2.5.1.1.zip; Siemens SIMATIC S7
      SCL v5.3 SP1 Multilanguage by TBE.zip; ExamXML v4.02 by BRD.zip;
      Mentor Graphics Seamless FPGA v5.4.3.0 Incl Keymaker by ZWT.czip;
      TurboBat 5.01.czip; ExcelTrans 5.1-key.czip; Chat Client v7.9.1.zip;
      Grades for Students v3.52 by TMG.czip; StartUpCleaner 1.3
      (Serial).czip; Internet Neighborhood 2.0 (Serial).zip; Platypus Web
      Builder v1.5.0.23 by Orion.czip; Image Resizer Pro 2006 2.6.7.zip;
      Power Data Recovery v4.x.x by AT4RE.zip; Pocket Tunes Retail for
      PalmOS5 by RLYEH.czip; Mighty Fax 3.06.czip; Active Query Builder Java
      Edition 1.1 CrAcKed.czip; Easy Money v3.06.zip; MailBee.NET Security
      5.7-key.zip; Advanced CD Ripper Pro 2.50 (Serial).zip; Future Value of
      Savings Calculator v1.0.00 by Oddity.zip; WinTipper 2002 v4.1.2.3
      German WinALL Incl Keygen by BLiZZARD.zip; Size Explorer 2.6
      (Serial).czip; Backup Expert v1.0.0.101.czip; Okoker Mp3 To CD Burner
      v1.6 Cracked by ARN.czip; FormAI 1.2.czip; Directory Checker v3.11
      WinALL Incl Keymaker by Core.czip; Adobe Illustrator 9 pour Mac Adobe
      Illustrator 9 pour Mac for Mac.czip; FileRevival v1.2 Silent
      Update.zip; Virtual Sampler 3.0.zip; arafasoft power autoplay menu
      creator professional 6.7.010806 serial by TSRh.czip; FaxMail for
      Windows v07.05.01 Regged by iNFECTED.czip; RZ Mobile Converter
      3.5.zip; Pizzicato Professional 3.4.3-key.czip; Prestwood Writing
      Suite 1.0 (Serial).czip; Teleport Pro v1.40.zip; Pizzicato
      Professional 3.4.3-key.zip; Adobe PHOTOSHOP BR 6 (Serial).czip;
      IconSaver v2.01 by Orion.zip; All Movie Tracker 1.2.zip; CoordTrans
      v1.0.14 Keygen Only by ORiON.czip; Checkit Diagnostic Kit 4.0
      (Serial).czip; MailBee.NET Security 5.7-key.czip; SMTP-POP3 Email
      Engine for Delphi 3.3.zip; ePodcast Express 1.0.25.zip; Deluxe Ski
      Jump 2.1.czip; Great Legends Vikings Retail JAVA K300 by RLYEH.zip;
      Amor SWF to Video Converter 2.9.9.2.czip; Chat Client v7.9.1.czip;
      Simply Shopping 2.14 (Serial).czip; Adobe Illustrator 9 pour Mac Adobe
      Illustrator 9 pour Mac for Mac.zip; Postage Saver Pro v6.2.8.czip;
      Understand for C++ Plus Plus v1.4.220.czip; Yellow Pages Super Grabber
      v2.02c.113.czip; Express Burn v2.0 by BLiZZARD.czip; Video Solution
      3.03 (Serial).czip; CD MP3 Burner v2.12 by SND.zip; 3webTotal Tv and
      Radio Tuner v3.51 Multilingual READ NFO by DVT.czip; ImageDupeless
      v1.23.zip; Understand for C++ Plus Plus v1.4.220.zip; Aquanox 1
      (Serial).zip; MereSurfer 2003 v8.004 Professional Edition.zip; 010
      Editor 3.0.5.czip; Digitope Pixelshop by T3.czip; UltraEdit-32
      v8.20.czip; Numerology Star Reader Millennium Demo v17.0.0.0.zip; The
      Complete Wedding Publisher v4.0.6 Full Edition by FHCF.czip; Nero
      Burning ROM v5.5.9.0 Serial.czip; Textured Volume 1 'ColorGradient'
      1.0.zip; Internet Neighborhood 2.0 (Serial).czip; Serie ContaPlus
      FacturaPlus TPVPlus Elite 2001.zip; awinstall3 xx
      universalpatchsnd.zip; TreePad PLUS v4.10.1 by TSRh.zip; Home
      Inventory 2000 v1.35 Serial by PC.czip; FontShow 2000 3.2
      (Serial).zip; ; 1 Video Converter v3.6.2.czip; AlgoLab Photo Vector
      v1.98.59 Incl Keygen by HERETiC.czip; Railroad Tycoon 3 v1.03.zip; The
      Complete Wedding Publisher v4.0.6 Full Edition by FHCF.zip; FormAI
      1.2.zip; Prestwood Writing Suite 1.0 (Serial).zip; SharkPoint Windows
      2.0.zip; SMTP-POP3 Email Engine for Delphi 3.3.czip; UltraEdit-32
      v8.20.zip; Cruise Ship Tycoon CHEATS.zip; Aquanox 1 (Serial).czip;
      Mighty Fax 3.06.zip; readwrite kanji 1.2.360 cracked by TSRh.czip;
      Advanced ACT Password Recovery 2.41.czip; Elmer 2.0.2 for Mac
      (Serial).czip; Starship Troopers [EURO] No-DVD Fixed Image.czip; Easy
      Video to MP4 Converter.czip; Directory Checker v3.11 WinALL Incl
      Keymaker by Core.zip; Mind Manager Standard Edition 4.6.171.zip; Music
      Organizer Deluxe v2.5 Incl Keygen by TBE.zip; 3DMiracle v1.01.czip;
      Another Task Manager v3.0.zip; Priore FingerPrint ActiveX 1.0.czip; BR
      PhotoArchiver 3.0.8.czip; Deluxe Ski Jump 2.1.zip; Chromentum 1.0
      (Serial).czip; Mathe!matix v3.0 Webversion.zip; Conversions Alchimie
      1.0 Crack by FFF.czip; RChart 1.5.1a.zip; DVD Region Free v3.20 by
      Blizzard.czip; FileRevical 1.0b (Serial).czip; Socoban 3.1 for PalmOS
      (Serial).czip; Cepstral Swifttalker with Robin v3.3.2 MacOSX by
      BRD.czip; Photo Base Deluxe 1.61 (Serial).czip; FrameMaker 5.1.1 for
      Mac.czip; DV Advanced Timer 1.0.0.0 crack.czip; easyOFFER 2004
      v4.0.0.44.czip; Poker Challenge v4.1.9 by Chic.czip; Home Inventory
      2000 v1.35 Serial by PC.zip; Speed DVD Creator v4.0.22 by
      ViRiLiTY.czip; HX Anchor Box 1.0J for Mac.zip; Ease OGG TO RM
      Converter 1.00.czip; SoftArtisans FileManager v2.5.1 (Serial).czip;
      Digitope Pixelshop by T3.zip; Anet Help Tool 5.0.0.28.zip; ExcelTrans
      5.1-key.zip; All Movie Tracker 1.2.czip; XFistor NetPowerUp
      1.0.3270.3079 crack.zip; WinTipper 2002 v4.1.2.3 German WinALL Incl
      Keygen by BLiZZARD.czip; Cricket Statz 2.6c (Serial).zip; EvenTrigger
      Pro v2.01 Win2kXP Incl Keygen by BLiZZARD.zip; Always On Time 1.0.1.14
      (Serial).zip; Power Data Recovery v4.x.x by AT4RE.czip; Canasta
      5.0.0.6.czip; 3DMiracle v1.01.zip; Mathe!matix v3.0 Webversion.czip;
      Adensoft Audio Data CD Burner v2.72 Incl Keygen by UCF.zip; WebBasic
      Studio 98.4.34.0058 (Serial).zip; Short Message Spider 1.31.zip; Clock
      G2.5.1.1.czip; HX Anchor Box 1.0J for Mac.czip; Cool MP4 MPEG to All
      Video Converter 6.0.czip; JSQL 1.31.czip; Readerware v2.92 Linux Incl
      Keygen by BLiZZARD.czip; Paint Shop Pro v7.04 by Crack Demon 2001.zip;
      Happy Feet 2006 Retail JAVA 352x416 by RLYEH.zip; ExIS 1.3.zip; 32bit
      FTP v9.88.01 Keygen Only by EXPLOSiON.zip; XFistor NetPowerUp
      1.0.3270.3079 crack.czip; Text To Speech Maker 1.0.8.zip; Call of Duty
      World at War All Access Cheat by FFF.zip; Easy Money v3.06.czip; Aone
      Ultra WMV Converter v1.7.0 WinALL Incl Keygen by ViRiLiTY.czip;
      NewLive DVD To MP3 Converter v3.1 WinALL Cracked by ARN.czip; AtomSync
      v1.20 by DBZ.czip; Desk Change 1.5.2.czip; SlideShow Expressions
      1.0.czip; Clonk Endeavour v4.95.5 Bilingual by diGERATi.czip; Priore
      FingerPrint ActiveX 1.0.zip; Speed DVD Creator v4.0.22 by
      ViRiLiTY.zip; Caleb Paye 2003.0.1 (Serial).czip; Bistro Cupid Retail
      JAVA by RLYEH.zip; VITO Technology Winterface v1.01 Retail for
      PocketPC WM5 WM6 by RLYEH.zip; TimeCalc v1.12.3 German WinALL Incl
      Keygen by BLiZZARD.czip; KaleidoscopePro 2.2.czip; Transparent Screen
      Lock Pro 3.50.zip; AntiSniff v1.02.1 by TNT.zip; MaxBulk Mailer v4.3
      GERMAN WinALL Incl Keymaker by Core.zip; DAO 3.7c (Serial).zip;
      Blazing Angels 2 Secret Missions of WWII 1.0 (Serial).zip; RChart
      1.5.1a.czip; Bistro Cupid Retail JAVA by RLYEH.czip; Sculpto 1.0.czip;
      Ras Vegas Mission Pack 3 v2.3 PLUS 6 TRAINER CHEATS by PiZZA.czip;
      GameHouse Maui Wowee v8.5.1 build 102 by BalCrNepal.czip; Easy Video
      to MP4 Converter.zip; PC Kursk 43 v1.01 [ENGLISH] No-CD Fixed
      EXE.czip; WhereverUgo 1.0 (Serial).zip; SEO Informer 1.0.3.czip; Great
      Legends Vikings Retail JAVA K300 by RLYEH.czip; StartUpCleaner 1.3
      (Serial).zip; Record Producer MIDI v5.01.4103 Cracked by
      EXPLOSiON.zip; Addsoft 1.20C (Serial).czip; Cool MP4 MPEG to All Video
      Converter 6.0.zip; Delta Ops v1.0 AMMO TRAINER.czip; Adobe PHOTOSHOP
      BR 6 (Serial).zip; easyOFFER 2004 v4.0.0.44.zip; SlideShow Expressions
      1.0.zip; Pocket Tunes Retail for PalmOS5 by RLYEH.zip; Burn CD Now
      v1.04 Keygen by TSRh.czip; PowerArchiver 2001.7.00.26.czip; Group
      Organizer 3.0.4 for Mac.czip; LiSA 3.0.2.czip; Office XP 2000
      (Serial).czip; Music Organizer Deluxe v2.5 Incl Keygen by TBE.czip;
      CTM Rail-Tarif v4.86.czip; Happy Feet 2006 Retail JAVA 352x416 by
      RLYEH.czip; Video Solution 3.03 (Serial).zip; Poker Challenge v4.1.9
      by Chic.zip; BR PhotoArchiver 3.0.8.zip; Postage Saver Pro v6.2.8.zip;
      Textured Volume 1 'ColorGradient' 1.0.czip; LiSA 3.0.2.zip; Pink Notes
      Plus 2.06 (Serial).zip; 32bit FTP v9.88.01 Keygen Only by
      EXPLOSiON.czip; Plansoft svPlan v7.2.01210705 GERMAN Incl Keymaker by
      ACME.zip; TreePad PLUS v4.10.1 by TSRh.czip; Vue d'Esprit 4.00-02.zip;
      Quick Article Pro 3.0.czip; Platypus Web Builder v1.5.0.23 by
      Orion.zip; Sculpto 1.0.zip; Another Task Manager v3.0.czip;
      Transparent Screen Lock Pro 3.50.czip; DAO 3.7c (Serial).czip;
      KaleidoscopePro 2.2.zip; ExIS 1.3.czip; Blazing Angels 2 Secret
      Missions of WWII 1.0 (Serial).czip; MS Access Export Table To XML File
      Software 7.0.zip; Stealth Activity Reporter v1.8.czip; AtomSync v1.20
      by DBZ.zip; HGS Modellbahn v7.0 German by ViRiLiTY.czip; ProjectDiff
      v1.0.4.0.czip; perSIMPLEX 6.1b.czip; Check Proxy Professional (Socks)
      4.20.0.554.zip; PowerArchiver 2001.7.00.26.zip; Happy Fish 4.3.3.zip;
      Adensoft Audio Data CD Burner v2.72 Incl Keygen by UCF.czip;
      Presidents 3000.1.0.4 for Mac.czip; Graphical UPX File Compressor
      v1.1.1.45 working Incl Keygen by diGERATi.czip; TurboBat 5.01.zip; 13
      Photos de Sandra Bullock Denudee ScreenSaver.zip; Express Burn v2.0 by
      BLiZZARD.zip; Email Backup Guardian 1.1.czip; FrameMaker 5.1.1 for
      Mac.zip; Group Organizer 3.0.4 for Mac.zip; CopyPaste 4 x for
      Mac.czip; Cricket Statz 2.6c (Serial).czip; FaxMail for Windows
      v07.05.01 Regged by iNFECTED.zip; Aone Ultra WMV Converter v1.7.0
      WinALL Incl Keygen by ViRiLiTY.zip; Conversions Alchimie 1.0 Crack by
      FFF.zip; Neuron PE Disassembler v1.x Generic.czip; Desk Change
      1.5.2.zip; Numerology Star Reader Millennium Demo v17.0.0.0.czip;
      readwrite kanji 1.2.360 cracked by TSRh.zip; Rocket Mania Deluxe!
      v1.02 by DiGERATi.zip; RegDesk 98.1.02.czip; Advanced ACT Password
      Recovery 2.41.zip; ExamXML v4.02 by BRD.czip; Clonk Endeavour v4.95.5
      Bilingual by diGERATi.zip; TimeCalc v1.12.3 German WinALL Incl Keygen
      by BLiZZARD.zip; JSQL 1.31.zip; FileRevical 1.0b (Serial).zip; Simply
      Shopping 2.14 (Serial).zip; Check Proxy Professional (Socks)
      4.20.0.554.czip; Avex DVD Ripper 4.5 Build 02.czip; E-promt 2004
      Professional English - German v6.5.2.40.czip; Checkit Diagnostic Kit
      4.0 (Serial).zip; DEMentED II v0.99.zip; Cepstral Swifttalker with
      Robin v3.3.2 MacOSX by BRD.zip; Thanksgiving Scenery 3D 1.0.zip;
      Socoban 3.1 for PalmOS (Serial).zip; Caleb Paye 2003.0.1 (Serial).zip;
      DV Advanced Timer 1.0.0.0 crack.zip; Kennene Halloween Screensaver
      1.0.zip; RegDesk 98.1.02.zip; Smart Movie 3.22 for Symbian.czip; GIF
      Movie Gear v3.0.6.czip; DVD Region Free v3.20 by Blizzard.zip;
      Yamicsoft WinXP Manager v4.92.1 WinXP Incl Keymaker by Core.zip;
      Presidents 3000.1.0.4 for Mac.zip; Siemens SIMATIC S7 SCL v5.3 SP1
      Multilanguage by TBE.czip; Amor SWF to Video Converter 2.9.9.2.zip;
      AlgoLab Photo Vector v1.98.59 Incl Keygen by HERETiC.zip; Chromentum
      1.0 (Serial).zip; Fast Break Basketball 1.18 (Serial).czip; Download
      Mechanic 1 x x pro for Mac.czip; The Fifth Desciple v1.0 +4
      TRAINER.czip; MediaSanta RM to AVI Converter 5.0 Build 90306.czip;
      32Bit Web Browser v.w.9.47.14.zip; Convert Multiple PDF Files To PS
      Files Software 7.0.czip; Right Hemisphere Deep Creator v2.3.0.1407
      Incl Keymaker by ARN.czip; ProjectDiff v1.0.4.0.zip; Videomania Pro
      v3.0.3 German WinALL Incl Keygen by ViRiLiTY.czip; Image Resizer Pro
      2006 2.6.7.czip; MP3 Sound Recorder v2.5.czip; Image Optimizer Pro
      3.51 (Serial).zip; Gonsoft Proxy Manager v2.30 Incl Keymaker by
      ZWT.czip; Gameloft Off Road Dirt Motocross Retail JAVA LG KS20 by
      RLYEH.czip; Download Mechanic 1 x x pro for Mac.zip; Graphical UPX
      File Compressor v1.1.1.45 working Incl Keygen by diGERATi.zip;
      KMP3.4.1.86.czip; Grades for Students v3.52 by TMG.zip; ImTOO MPEG
      Encoder v2.1.50.705b WinALL Incl Keygen by BRD.czip; Future Value of
      Savings Calculator v1.0.00 by Oddity.czip; Spyware Snooper 1.0.1
      (Serial).zip; Pink Notes Plus 2.06 (Serial).czip; Tess v1.67 WinAll
      Incl Patch by EiTHeL.czip; 3dDom v1.6.zip; Rocket Mania Deluxe! v1.02
      by DiGERATi.czip; EZ Photo Calendar Creator Plus 9.03.zip; Power
      Archiver 2006 9.51 (Serial).czip; PGI Workstation Server v7.0.2 by
      TBE.zip; PC Kursk 43 v1.01 [ENGLISH] No-CD Fixed EXE.zip; Railroad
      Tycoon 3 v1.03.czip; Gonsoft Proxy Manager v2.30 Incl Keymaker by
      ZWT.zip; ePodcast Express 1.0.25.czip; Always On Time 1.0.1.14
      (Serial).czip; Digital Zenith OmegaBasic Professional v1.4 Incl
      Keymaker by DVT.zip; FontShow 2000 3.2 (Serial).czip; HGS-Autokosten
      v3.9.czip; Short Message Spider 1.31.czip; Anet Help Tool
      5.0.0.28.czip; Tess v1.67 WinAll Incl Patch by EiTHeL.zip; Avex DVD
      Ripper 4.5 Build 02.zip; Cruise Ship Tycoon CHEATS.czip; WebBasic
      Studio 98.4.34.0058 (Serial).czip; Mobile Net Switch v3.49 Incl
      Keymaker by Core.czip; Picture Exhibitor MU 3.9.zip; Record Producer
      MIDI v5.01.4103 Cracked by EXPLOSiON.czip; MereSurfer 2003 v8.004
      Professional Edition.czip; Picture Exhibitor MU 3.9.czip;
      Abfallkosten-Verwaltung 2003.01.0026 (Serial).zip; EZ Photo Calendar
      Creator Plus 9.03.czip; Alleysoft AutoRun Design Specialty v3.0.6.0 by
      EiTHeL.zip; Yamicsoft WinXP Manager v4.92.1 WinXP Incl Keymaker by
      Core.czip; ImageDupeless v1.23.czip; Xtreme Tools.czip; 13 Photos de
      Sandra Bullock Denudee ScreenSaver.czip; MediaSanta RM to AVI
      Converter 5.0 Build 90306.zip; 3dDom v1.6.czip; Convert Multiple PDF
      Files To PS Files Software 7.0.zip; 3webTotal Tv and Radio Tuner v3.51
      Multilingual READ NFO by DVT.zip; Videomania Pro v3.0.3 German WinALL
      Incl Keygen by ViRiLiTY.zip; Teleport Pro v1.40.czip; DEMentED II
      v0.99.czip; FinalData Enterprise v2.0.1.1028 by ROR.zip; 7isv Flash
      Video Converter 1.2.czip; 3D Dancing Shamrock Teddy Bear 1.0.czip; GIF
      Movie Gear v3.0.6.zip; arafasoft power autoplay menu creator
      professional 6.7.010806 serial by TSRh.zip; IconSaver v2.01 by
      Orion.czip; Airfix Dogfighter v1.20 [ENGLISH] No-CD Fixed Update.zip;
      JoeAlter Shave and a Haircut v2.7v11 for Maya 6.0 LINUX Incl Keygen by
      PARADOX.zip; NewLive DVD To MP3 Converter v3.1 WinALL Cracked by
      ARN.zip; HotKey Magic 1.10 (Serial).zip; FIFA Manager 2006 CD-Key 2006
      (Serial).zip


 Miscellaneous  Checks for an internet connection by contacting the following web site:
   • http://www.google.com

 File details Runtime packer:
In order to aggravate detection and reduce size of the file it is packed with a runtime packer.

Description inserted by Petre Galan on Monday, June 14, 2010
Description updated by Petre Galan on Monday, June 14, 2010

Back . . . .