Avira Virenlabor

‹ zurück

TR/Clicker.180224

Zusammenfassung
  • Name
    TR/Clicker.180224
  • Entdeckt am
    01.10.2015
  • VDF Version
    7.11.230.254 (2015-05-13 20:52)
Vollständige Beschreibung

Bei der Bezeichnung 'TR' handelt es sich um ein Trojanisches Pferd, dass in der Lage ist, ihre Daten auszuspähen, Ihre Privatsphäre zu verletzen und nicht erwünschte Änderungen am System vornehmen kann.

  • VDF
    7.11.230.254 (2015-05-13 20:52)
  • Alias
    Avast: Win32:Dropper-gen
    AVG: Atros.AMXY
    Dr. Web: Trojan.DownLoader13.47748
    McAfee: RDN/Generic BackDoor
    G Data: Gen:Variant.Kazy.607360
    Kaspersky Lab: Backdoor.MSIL.Agent.qhf
    Bitdefender: Gen:Variant.Kazy.607360
    ESET: MSIL/TrojanClicker.Agent.NKL trojan
  • Dateien
    Die folgenden Dateien werden geändert:
    • %USERPROFILE%\Local Settings\Application Data\GDIPFONTCACHEV1.DAT
    • %temporary internet files%\Content.IE5\index.dat
    • %USERPROFILE%\Cookies\index.dat
    • %USERPROFILE%\Local Settings\History\History.IE5\index.dat
    • %USERPROFILE%\Local Settings\Application Data\Microsoft\Internet Explorer\MSIMGSIZ.DAT
    • %APPDATA%\Microsoft\Protect\CREDHIST
    • %APPDATA%\Microsoft\Protect\S-1-5-21-602162358-879983540-682003330-1003\Preferred
    • %SYSDIR%\wbem\Logs\wbemcore.log
    • %WINDIR%\Prefetch\WMIADAP.EXE-2DF425B2.pf
    • %WINDIR%\Prefetch\WMIPRVSE.EXE-28F301A9.pf
    Die folgenden Dateien werden gelöscht:
    • %temporary internet files%\Content.IE5\LV2JIAKP\Reklam3[1].htm
    • %USERPROFILE%\Cookies\[email protected][1].txt
    • %USERPROFILE%\Cookies\[email protected][2].txt
    • %USERPROFILE%\Local Settings\History\History.IE5\MSHist012013120520131206\index.dat
    • %USERPROFILE%\Local Settings\History\History.IE5\MSHist012013120520131206
    Die folgenden Dateien werden erstellt:
    • %temporary internet files%\Content.IE5\LV2JIAKP\Reklam3[1].htm
    • %temporary internet files%\Content.IE5\A9SFWXZG\553[1].png
    • %temporary internet files%\Content.IE5\QH9ZEEV0\analytics[1].js
    • %USERPROFILE%\Cookies\[email protected][1].txt
    • %USERPROFILE%\Cookies\[email protected][2].txt
    • %USERPROFILE%\Local Settings\History\History.IE5\MSHist012015100120151002\index.dat
    • %APPDATA%\Microsoft\Protect\S-1-5-21-602162358-879983540-682003330-1003\93123657-20d7-447d-af0c-d93955f041e8
    • %temporary internet files%\Content.IE5\LV2JIAKP\Reklam3[2].htm
    • %temporary internet files%\Content.IE5\LV2JIAKP\551[1].png
  • Registry
    Folgende Registryeinträge werden hinzugefügt:
    • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run ("Flash": "%FILE_PATH%")
    • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_TAPISRV\0000\Control ("ActiveService": "TapiSrv")
    • HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_RASMAN\0000\Control ("ActiveService": "RasMan")
    • HKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings ("ProxyEnable": dword:00000000)
    • HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015100120151002 ("CachePath": "%USERPROFILE%\Local Settings\History\History.IE5\MSHist012015100120151002\"; "CachePrefix": ":2015100120151002: "; "CacheLimit": dword:00002000; "CacheOptions": dword:0000000b; "CacheRepair": dword:00000000)
  • HTTP-Anfragen
    • www.*****ceklan.com/chr2.txt
    • www.*****ceklan.com/Reklam3.php
    • ocsp.*****m.pl/
    • g.*****.com/
    • www.*****e-analytics.com/r/__utm.gif?utmwv=5.6.7&utms=1&utmn=1426845439&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x600&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=889551323&utmr=-&utmp=%2F%3Fyeni&utmht=1443699182869&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1426882609&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=4&utmn=738168987&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=1135862782&utmr=-&utmp=%2F%3Fyeni&utmht=1443699193333&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=6&utmn=1914209326&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=1865384252&utmr=-&utmp=%2F%3Fyeni&utmht=1443699203616&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=8&utmn=66332022&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=1492057712&utmr=-&utmp=%2F%3Fyeni&utmht=1443699214429&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=10&utmn=1788586037&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=1302163865&utmr=-&utmp=%2F%3Fyeni&utmht=1443699224435&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=12&utmn=942431376&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=1680768455&utmr=-&utmp=%2F%3Fyeni&utmht=1443699234302&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=14&utmn=286470587&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=1386612052&utmr=-&utmp=%2F%3Fyeni&utmht=1443699244365&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=16&utmn=1424319197&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=1564706486&utmr=-&utmp=%2F%3Fyeni&utmht=1443699254462&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=18&utmn=1582678997&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=655627171&utmr=-&utmp=%2F%3Fyeni&utmht=1443699265320&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=20&utmn=1657805255&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=65806672&utmr=-&utmp=%2F%3Fyeni&utmht=1443699275438&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=22&utmn=1192908659&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=675623013&utmr=-&utmp=%2F%3Fyeni&utmht=1443699285376&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=2&utmn=273261263&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=1361907716&utmr=-&utmp=%2F%3Fyeni&utmht=1443699182892&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=3&utmn=1091892420&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=752629211&utmr=-&utmp=%2F%3Fyeni&utmht=1443699187430&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=5&utmn=313838382&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=542738339&utmr=-&utmp=%2F%3Fyeni&utmht=1443699198322&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=7&utmn=1768584559&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=744764552&utmr=-&utmp=%2F%3Fyeni&utmht=1443699209380&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=9&utmn=956360394&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=1751600558&utmr=-&utmp=%2F%3Fyeni&utmht=1443699219306&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=11&utmn=571478994&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=1420955768&utmr=-&utmp=%2F%3Fyeni&utmht=1443699229306&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=13&utmn=110577400&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=457121815&utmr=-&utmp=%2F%3Fyeni&utmht=1443699239330&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=15&utmn=1220653162&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=2000859172&utmr=-&utmp=%2F%3Fyeni&utmht=1443699249428&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=17&utmn=899009393&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=1611998263&utmr=-&utmp=%2F%3Fyeni&utmht=1443699259333&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=19&utmn=1737837146&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=327558894&utmr=-&utmp=%2F%3Fyeni&utmht=1443699270442&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=21&utmn=1624443863&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=241770427&utmr=-&utmp=%2F%3Fyeni&utmht=1443699280409&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/__utm.gif?utmwv=5.6.7&utms=23&utmn=1285570671&utmhn=www.aravebulun.com&utmcs=UTF-8&utmsr=1024x768&utmvp=1024x638&utmsc=24-bit&utmul=en-us&utmje=1&utmfl=-&utmdt=T%C3%BCrkiyenin%20yeni%20arama%20motoru&utmhid=1201337983&utmr=-&utmp=%2F%3Fyeni&utmht=1443699290324&utmac=UA-61531271-1&utmcc=__utma%3D161294061.1153446323.1443699183.1443699183.1443699183.1%3B%2B__utmz%3D161294061.1443699183.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
    • www.*****e-analytics.com/analytics.js
    • www.*****e-analytics.com/r/collect?v=1&_v=j39&a=2085027524&t=pageview&_s=1&dl=http%3A%2F%2Fwww.dosyaceklan.com%2FReklam3.php&ul=en-us&de=windows-1252&dt=ne%20bahiyon%20yarram&sd=32-bit&sr=1024x768&vp=240x130&je=0&fl=6.0%20r79&_u=AEAAAEAAI~&jid=1703585997&cid=295527006.1443699188&tid=UA-67411880-1&_r=1&z=1032554457
    • www.*****ceklan.com/KOMUT.php
    • www.*****e-analytics.com/collect?v=1&_v=j39&a=624052631&t=pageview&_s=1&dl=http%3A%2F%2Fwww.dosyaceklan.com%2FReklam3.php&ul=en-us&de=windows-1252&dt=ne%20bahiyon%20yarram&sd=32-bit&sr=1024x768&vp=240x130&je=0&fl=6.0%20r79&_u=AACAAEAAI~&jid=&cid=295527006.1443699188&tid=UA-67411880-1&z=366165304