需要修復電腦?
聘請專家
Virus:ADWARE/DomaIQ.24569
Date discovered:23/07/2013
Type:Adware/Spyware
In the wild:No
Reported Infections:Medium
Distribution Potential:Low
Damage Potential:Low
VDF version:7.11.92.22 - Tuesday, July 23, 2013
IVDF version:7.11.92.22 - Tuesday, July 23, 2013

 General Method of propagation:
   • No own spreading routine


Aliases:
   •  Kaspersky: not-a-virus:AdWare.Win32.DomaIQ.cc
   •  Eset: Win32/DomaIQ.C
   •  GData: Win32.Application.DomaIQ.A
   •  DrWeb: Adware.W3i.37


Platforms / OS:
   • Windows 2000
   • Windows XP
   • Windows 2003
   • Windows Vista
   • Windows Server 2008
   • Windows 7


Side effects:
   • Registry modification

 Registry The following registry keys are added:

– [HKCR\AppID\{09C554C3-109B-483C-A06B-F14172F1A947}]
   • ""=""
   • "(Default)"="escort"

– [HKCR\AppID\{39CB8175-E224-4446-8746-00566302DF8D}]
   • ""=""
   • "(Default)"="esrv"

– [HKCR\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}]
   • ""=""
   • "(Default)"="escorTlbr"

– [HKCR\AppID\{B12E99ED-69BD-437C-86BE-C862B9E5444D}]
   • ""=""
   • "(Default)"="escortEng"

– [HKCR\AppID\{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}\Instl\Data]
   • ""=""
   • "admin"="false"
   • "aflt"="babsst"
   • "afltId"="babsst"
   • "autoRvrt"="false"
   • "chrInstl"="all"
   • "dfltLng"="de"
   • "dpblck"=""
   • "dpk"="b48084a6407ba26966f8e8d97df8c06f"
   • "ds_url"=""
   • "dsFFX"="Delta Search"
   • "dsIE"=""
   • "excTlbr"="false"
   • "ffxInstl"="all"
   • "ffxUnstlRst"="true"
   • "hp_url"="http://www1.delta-search.com/?babsrc=HP_ss&mntrId=5C6A005056A4CFD0&affID=120518&tt=110713_9126&tsp=4944"
   • "hrdId"="5c6a51a1000000000000005056a4cfd0"
   • "ieInstl"="all"
   • "instlDay"="dword:0x00003e1d"
   • "instlRef"="sst"
   • "kw_url"="http://www1.delta-search.com/?babsrc=SP_ss&mntrId=5C6A005056A4CFD0&affID=120518&tt=110713_9126&tsp=4944&q="
   • "newTab"="false"
   • "nt_url"="http://www1.delta-search.com/?babsrc=NT_ss&mntrId=5C6A005056A4CFD0&affID=120518&tt=110713_9126&tsp=4944"
   • "postUninstall"=""
   • "run4ie"="end"
   • "rvrt"="false"
   • "smplGrp"="none"
   • "sp_name"="Delta Search"
   • "sp_url"="http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=5C6A005056A4CFD0&affID=120518&tt=110713_9126&tsp=4944"
   • "tb_url"="http://www1.delta-search.com/?q={searchTerms}&babsrc=TB_ss&mntrId=5C6A005056A4CFD0&affID=120518&tt=110713_9126&tsp=4944"
   • "tlbrId"="base"
   • "tlbrSrchUrl"=""
   • "trace"="dword:0x00000000"
   • "uninstallAll"="true"
   • "uninstaller"="C:\Programme\Delta\delta\1.8.21.5\uninstall.exe"
   • "uninstExt"="false"
   • "vrsni"="1.8.21.5"
   • "vrsnTs"="1.8.21.514:07:32"

– [HKCR\AppID\escort.DLL]
   • ""=""
   • "AppID"="{09C554C3-109B-483C-A06B-F14172F1A947}"

– [HKCR\AppID\escortApp.DLL]
   • ""=""
   • "AppID"="{D7EE8177-D51E-4F89-92B6-83EA2EC40800}"

– [HKCR\AppID\escortEng.DLL]
   • ""=""
   • "AppID"="{B12E99ED-69BD-437C-86BE-C862B9E5444D}"

– [HKCR\AppID\escorTlbr.DLL]
   • ""=""
   • "AppID"="{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}"

– [HKCR\AppID\esrv.EXE]
   • ""=""
   • "AppID"="{39CB8175-E224-4446-8746-00566302DF8D}"

– [HKCR\CLSID\{11111111-1111-1111-1111-110311121157}]
   • ""=""
   • "(Default)"="Plus-HD-1.3"

– [HKCR\CLSID\{261DD098-8A3E-43D4-87AA-63324FA897D8}\LocalServer32]
   • ""=""
   • "(Default)"=""C:\Programme\Delta\delta\1.8.21.5\deltasrv.exe""
   • "ThreadingModel"="apartment"

– [HKCR\CrossriderApp0031257.BHO]
   • ""=""

– [HKCR\CrossriderApp0031257.BHO.1]
   • ""=""
   • "(Default)"="CrossriderApp0031257"

– [HKCR\CrossriderApp0031257.BHO.1\CLSID]
   • ""=""
   • "(Default)"="{11111111-1111-1111-1111-110311121157}"

– [HKCR\CrossriderApp0031257.BHO\CurVer]
   • ""=""
   • "(Default)"="CrossriderApp0031257"

– [HKCR\CrossriderApp0031257.Sandbox.1]
   • ""=""
   • "(Default)"="CrossriderApp0031257.Sandbox"

– [HKCR\CrossriderApp0031257.Sandbox.1\CLSID]
   • ""=""
   • "(Default)"="{22222222-2222-2222-2222-220322122257}"

– [HKCR\delta.deltadskBnd]
   • "(Default)"="CDskBnd Object"

– [HKCR\delta.deltadskBnd\CLSID]
   • ""=""
   • "(Default)"="{82E1477C-B154-48D3-9891-33D83C26BCD3}"

– [HKCR\delta.deltadskBnd\CurVer]
   • ""=""
   • "(Default)"="delta.deltadskBnd.1"

– [HKCR\escort.escortIEPane]
   • "(Default)"="escortIEPane Object"

– [HKCR\escort.escortIEPane.1]
   • ""=""
   • "(Default)"="escortIEPane Object"

– [HKCR\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}]
   • ""=""
   • "(Default)"="IwebAtrbts"

– [HKCR\speedupmypc]
   • ""=""
   • "(Default)"="URL:SpeedUpMyPC Protocol"

– [HKCR\speedupmypc\DefaultIcon]
   • ""=""
   • "(Default)"="sump.exe,1"

– [HKCR\speedupmypc\shell\open\command]
   • ""=""
   • "(Default)"=""C:\Programme\Uniblue\SpeedUpMyPC\sump.exe" --serial="%1""

– [HKCR\speedupmypc]
   • "URL Protocol"=""

– [HKCU\Software\5e55d888b13dbd40\2.6.1339.144]
   • ""=""
   • "cmpid"="61"
   • "firefox search engines"="Ask Search"
   • "iexplore search engines"="{0633EE93-D776-472f-A0FF-E1416B8B2E3A}"
   • "instance"="52a064d394294495ba5bce24ea4ef003"
   • "SpXmlFN"="babylon.xml"
   • "subid"="3652"

– [HKCU\Software\5e55d888b13dbd40]
   • "GUID"="{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}"
   • "HPCHREGEXP0"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
   • "HPCHREGEXP1"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
   • "HPCHREGEXP10"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
   • "HPCHREGEXP11"="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
   • "HPCHREGEXP12"="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
   • "HPCHREGEXP13"="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
   • "HPCHREGEXP14"="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
   • "HPCHREGEXP15"="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
   • "HPCHREGEXP16"="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
   • "HPCHREGEXP17"="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
   • "HPCHREGEXP2"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
   • "HPCHREGEXP3"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
   • "HPCHREGEXP4"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
   • "HPCHREGEXP5"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
   • "HPCHREGEXP6"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
   • "HPCHREGEXP7"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
   • "HPCHREGEXP8"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
   • "HPCHREGEXP9"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
   • "HPFFREGEXP0"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
   • "HPFFREGEXP1"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
   • "HPFFREGEXP10"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
   • "HPFFREGEXP11"="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
   • "HPFFREGEXP12"="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
   • "HPFFREGEXP13"="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
   • "HPFFREGEXP14"="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
   • "HPFFREGEXP15"="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
   • "HPFFREGEXP16"="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
   • "HPFFREGEXP17"="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
   • "HPFFREGEXP2"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
   • "HPFFREGEXP3"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
   • "HPFFREGEXP4"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
   • "HPFFREGEXP5"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
   • "HPFFREGEXP6"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
   • "HPFFREGEXP7"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
   • "HPFFREGEXP8"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
   • "HPFFREGEXP9"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
   • "HPIEREGEXP0"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
   • "HPIEREGEXP1"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
   • "HPIEREGEXP10"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
   • "HPIEREGEXP11"="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
   • "HPIEREGEXP12"="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
   • "HPIEREGEXP13"="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
   • "HPIEREGEXP14"="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
   • "HPIEREGEXP15"="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
   • "HPIEREGEXP16"="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
   • "HPIEREGEXP17"="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
   • "HPIEREGEXP2"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
   • "HPIEREGEXP3"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
   • "HPIEREGEXP4"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
   • "HPIEREGEXP5"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
   • "HPIEREGEXP6"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
   • "HPIEREGEXP7"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
   • "HPIEREGEXP8"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
   • "HPIEREGEXP9"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
   • "INSTALL_FOLDER_NAME"="BrowserDefender"
   • "KWFFREGEXP0"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
   • "KWFFREGEXP1"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
   • "KWFFREGEXP10"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
   • "KWFFREGEXP11"="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
   • "KWFFREGEXP12"="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
   • "KWFFREGEXP13"="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
   • "KWFFREGEXP14"="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
   • "KWFFREGEXP15"="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
   • "KWFFREGEXP16"="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
   • "KWFFREGEXP17"="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
   • "KWFFREGEXP2"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
   • "KWFFREGEXP3"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
   • "KWFFREGEXP4"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
   • "KWFFREGEXP5"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
   • "KWFFREGEXP6"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
   • "KWFFREGEXP7"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
   • "KWFFREGEXP8"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
   • "KWFFREGEXP9"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
   • "NTCHREGEXP0"="FO81jovjQUF+5S6+haV7vGe3TMfw8oqWAhSaKzFS9OtdgZ1j5X+B4jW/459R"
   • "NTCHREGEXP1"="FO81jovjQUF+5S6+hbF0tnG4Tc/u94SDBhydJTxS8+ldnZRi5niE4Dm49Yxb"
   • "NTCHREGEXP2"="FO81jovjQUF+5S6+hbF/tG24SsHn9oyWDBuXLj1U8e1fjIJv8XSE4Dy75IlV"
   • "NTFFREGEXP0"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
   • "NTFFREGEXP1"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
   • "NTFFREGEXP10"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
   • "NTFFREGEXP11"="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
   • "NTFFREGEXP12"="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
   • "NTFFREGEXP13"="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
   • "NTFFREGEXP14"="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
   • "NTFFREGEXP15"="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
   • "NTFFREGEXP16"="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
   • "NTFFREGEXP17"="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
   • "NTFFREGEXP2"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
   • "NTFFREGEXP3"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
   • "NTFFREGEXP4"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
   • "NTFFREGEXP5"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
   • "NTFFREGEXP6"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
   • "NTFFREGEXP7"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
   • "NTFFREGEXP8"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
   • "NTFFREGEXP9"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
   • "PROTECT_EXE_NAME"="BrowserDefender.exe"
   • "PROTECTOR_DLL_NAME"="BrowserDefender.dll"
   • "SECHREGEXP0"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
   • "SECHREGEXP1"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
   • "SECHREGEXP10"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
   • "SECHREGEXP11"="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
   • "SECHREGEXP12"="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
   • "SECHREGEXP13"="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
   • "SECHREGEXP14"="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
   • "SECHREGEXP15"="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
   • "SECHREGEXP16"="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
   • "SECHREGEXP17"="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
   • "SECHREGEXP2"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
   • "SECHREGEXP3"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
   • "SECHREGEXP4"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
   • "SECHREGEXP5"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
   • "SECHREGEXP6"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
   • "SECHREGEXP7"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
   • "SECHREGEXP8"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
   • "SECHREGEXP9"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
   • "SEFFREGEXP0"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
   • "SEFFREGEXP1"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
   • "SEFFREGEXP10"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
   • "SEFFREGEXP11"="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
   • "SEFFREGEXP12"="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
   • "SEFFREGEXP13"="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
   • "SEFFREGEXP14"="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
   • "SEFFREGEXP15"="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
   • "SEFFREGEXP16"="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
   • "SEFFREGEXP17"="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
   • "SEFFREGEXP2"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
   • "SEFFREGEXP3"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
   • "SEFFREGEXP4"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
   • "SEFFREGEXP5"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
   • "SEFFREGEXP6"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
   • "SEFFREGEXP7"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
   • "SEFFREGEXP8"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
   • "SEFFREGEXP9"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
   • "SEIEREGEXP0"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41YG65LTMswjv2p+BbY"
   • "SEIEREGEXP1"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4xVGKVIf4gfxf+09lCuO/D3C39T"
   • "SEIEREGEXP10"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5tcC7Z7DtYJweyl/WTcdvz1SHs="
   • "SEIEREGEXP11"="FO81jovjQUF+5S6+hb1oqXHuCob28bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4PgTyj"
   • "SEIEREGEXP12"="FO81jovjQUF+5S6+hb1oqXHuCobi7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4bnTyj"
   • "SEIEREGEXP13"="FO81jovjQUF+5S6+hb1oqXHuCobh7bvIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4YnTyj"
   • "SEIEREGEXP14"="FO81jovjQUF+5S6+hb1oqXHuCobp+7vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Qizyj"
   • "SEIEREGEXP15"="FO81jovjQUF+5S6+hb1oqXHuCobq77vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Tnzyj"
   • "SEIEREGEXP16"="FO81jovjQUF+5S6+hb1oqXHuCob097vIARmacmgOwqhSgp8k3Sia4We454NmCbZefM0c/670ylCTeqKqVQ4Nhzyj"
   • "SEIEREGEXP17"="FO81jovjQUF+5S6+hf10qXWkH4avttjOR1OpbXMX8/9twJ1l7X6A6gb39opYC7RPf4sPz/Povw=="
   • "SEIEREGEXP2"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tcFaNGf4gfxf+09lCuO/D3C39T"
   • "SEIEREGEXP3"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr41MHLlIUMAN0v2uyRaRev62TA=="
   • "SEIEREGEXP4"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES/lBx/Gn+WTcdvz1SHs="
   • "SEIEREGEXP5"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5xcGKVES8IDzMLo9lefO7k="
   • "SEIEREGEXP6"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4dWFbZURsQew/aau1udeL2y"
   • "SEIEREGEXP7"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4hWFaRCQtcPyMLo9lefO7k="
   • "SEIEREGEXP8"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr4tYFbJURsQew/aau1udeL2y"
   • "SEIEREGEXP9"="FO81jovjQUF+5S6+hf10qXWkDdqpoN3JRlHKawFcs/wBwMtXrErF03Tzr5pXFosKUMAN0v2uyRaRev62TA=="
   • "SERVICE_NAME"="BrowserDefendert"
   • "usrcheckbox"=""
   • "version"="2.6.1339.144"

– [HKCU\Software\BabSolution\Updater\Instances\Delta Chrome Toolbar]
   • ""=""
   • "CrxId"="eooncjejnppfjjklapaamhcdmjbilmde"
   • "Report"="crtbdlt"
   • "UninstKey"="Delta Chrome Toolbar"

 Miscellaneous Internet connection:
In order to check for its internet connection the following DNS servers are contacted:
   • dtrack.**********dls.com
   • api.v2.**********dls.com
   • staticrr.new**********loadls.com
   • www.baby**********.com
   • mirror10.install**********.com
   • www.go**********.cc
   • stat.info-str**********.net
   • stp.baby**********.com
   • dl.cdn-serv**********.com
   • stats.datasrv**********.com
   • stats.myapp**********.com
   • d21bsqatndqkg8.cloud**********.net
   • errors.datasrv**********.com
   • www.two**********.com
   • app-static.**********rider.com
   • xa.xing**********.com
   • www.softo**********.com
   • protectorlb-1556088852.us-east-1.elb.amazo**********.com
   • d1js21szq85hyn.cloud**********.net
   • reports.mont**********.com
   • track.v2.**********dls.com
   • adm.**********365.com
   • up.**********365.com
   • apps.**********365.com
   • adm.wallpaper.**********365.com
   • dl.game.**********365.com
   • nic**********.com
   • cp.tug**********
   • d.adde**********.com
   • cdn.adde**********.com
   • counter.d.adde**********.com
   • www.after**********load.com

說明撰寫者 Wensin Lee 開啟 2013年7月26日星期五
說明更新者 Wensin Lee 開啟 2013年7月26日星期五

返回 . . . .
https:// 為了你的安全,此視窗已加密。