https://gammapedia.kuschelyagi.com/index.php?action=history&feed=atom&title=%24revenue%2Flog2 $revenue/log2 - Revision history 2026-04-05T18:32:14Z Revision history for this page on the wiki MediaWiki 1.45.1 https://gammapedia.kuschelyagi.com/index.php?title=$revenue/log2&diff=3980&oldid=prev 24.243.14.21 at 03:29, 8 August 2006 2006-08-08T03:29:05Z <p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 03:29, 8 August 2006</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1">Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>A test was done on the Abwayaxian Malware Testing Platform, which runs Windows 98. This is the results of the test.</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>A test was done on the Abwayaxian Malware Testing Platform, which runs <ins style="font-weight: bold; text-decoration: none;">[[</ins>Windows 98<ins style="font-weight: bold; text-decoration: none;">]]</ins>. This is the results of the test.</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">'''</del>URLs accessed<del style="font-weight: bold; text-decoration: none;">'''</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">==</ins>URLs accessed<ins style="font-weight: bold; text-decoration: none;">==</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  http://promo.dollarrevenue.com/bundle/smartload.asp?a=a_n_u&amp;id=1</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  http://promo.dollarrevenue.com/bundle/smartload.asp?a=a_n_u&amp;id=1</div></td></tr> <tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l45">Line 45:</td> <td colspan="2" class="diff-lineno">Line 45:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  http://promo.dollarrevenue.com/bundle/smartload.asp?a=a_n_u&amp;id=849&amp;rnd=0.4082605</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  http://promo.dollarrevenue.com/bundle/smartload.asp?a=a_n_u&amp;id=849&amp;rnd=0.4082605</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">'''</del>HijackThis logs<del style="font-weight: bold; text-decoration: none;">'''</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">==</ins>HijackThis logs<ins style="font-weight: bold; text-decoration: none;">==</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">''</del>Before<del style="font-weight: bold; text-decoration: none;">''</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">===</ins>Before<ins style="font-weight: bold; text-decoration: none;">===</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  Logfile of HijackThis v1.99.1</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  Logfile of HijackThis v1.99.1</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  Scan saved at 1:24:17 AM, on 8/6/06</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  Scan saved at 1:24:17 AM, on 8/6/06</div></td></tr> <tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l81">Line 81:</td> <td colspan="2" class="diff-lineno">Line 81:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  O9 - Extra &#039;Tools&#039; menuitem: Show &amp;Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  O9 - Extra &#039;Tools&#039; menuitem: Show &amp;Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">''</del>After<del style="font-weight: bold; text-decoration: none;">''</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">===</ins>After<ins style="font-weight: bold; text-decoration: none;">===</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  Logfile of HijackThis v1.99.1</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  Logfile of HijackThis v1.99.1</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  Scan saved at 1:39:08 AM, on 8/6/06</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  Scan saved at 1:39:08 AM, on 8/6/06</div></td></tr> <tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l121">Line 121:</td> <td colspan="2" class="diff-lineno">Line 121:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  O9 - Extra &#039;Tools&#039; menuitem: Show &amp;Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  O9 - Extra &#039;Tools&#039; menuitem: Show &amp;Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">'''</del>Changes to Windows Filesystem<del style="font-weight: bold; text-decoration: none;">'''</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">==</ins>Changes to Windows Filesystem<ins style="font-weight: bold; text-decoration: none;">==</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  *****************************</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  *****************************</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  COMPARING RECORDS FROM C:\ ROOT</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  COMPARING RECORDS FROM C:\ ROOT</div></td></tr> <tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l187">Line 187:</td> <td colspan="2" class="diff-lineno">Line 187:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  *****************************</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  *****************************</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">'''</del>Registry Changes<del style="font-weight: bold; text-decoration: none;">'''</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">==</ins>Registry Changes<ins style="font-weight: bold; text-decoration: none;">==</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3877C2CD-F137-4144-BDB2-0A811492F920}\Contact: &quot;Customer Support Department&quot;</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3877C2CD-F137-4144-BDB2-0A811492F920}\Contact: &quot;Customer Support Department&quot;</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3877C2CD-F137-4144-BDB2-0A811492F920}\DisplayName: &quot;Command&quot;</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3877C2CD-F137-4144-BDB2-0A811492F920}\DisplayName: &quot;Command&quot;</div></td></tr> <!-- diff cache key abwayax_gamma-wiki_:diff:1.41:old-3979:rev-3980:php=table --> </table> 24.243.14.21 https://gammapedia.kuschelyagi.com/index.php?title=$revenue/log2&diff=3979&oldid=prev 24.243.14.21 at 03:28, 8 August 2006 2006-08-08T03:28:01Z <p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="en"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Older revision</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Revision as of 03:28, 8 August 2006</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1">Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">A test was done on the Abwayaxian Malware Testing Platform, which runs Windows 98. This is the results of the test.</ins></div></td></tr> <tr><td colspan="2" class="diff-side-deleted"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&#039;&#039;&#039;URLs accessed&#039;&#039;&#039;</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&#039;&#039;&#039;URLs accessed&#039;&#039;&#039;</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br></td></tr> <!-- diff cache key abwayax_gamma-wiki_:diff:1.41:old-3978:rev-3979:php=table --> </table> 24.243.14.21 https://gammapedia.kuschelyagi.com/index.php?title=$revenue/log2&diff=3978&oldid=prev 24.243.14.21 at 03:26, 8 August 2006 2006-08-08T03:26:24Z <p></p> <p><b>New page</b></p><div>&#039;&#039;&#039;URLs accessed&#039;&#039;&#039;<br /> <br /> http://promo.dollarrevenue.com/bundle/smartload.asp?a=a_n_u&amp;id=1<br /> http://194.187.45.55/MTE3NDI6ODoxNg.exe<br /> http://content.dollarrevenue.com/nwnmff_7.exe<br /> http://content.dollarrevenue.com/dfndrff_7.exe<br /> http://content.dollarrevenue.com/kybrdff_7.exe<br /> http://www.onli-ne.com/app/ADDR/Installer.exe<br /> http://promo.dollarrevenue.com/webmasterexe/drsmartload45a.exe<br /> http://promo.dollarrevenue.com/webmasterexe/drsmartload46a.exe<br /> http://promo.dollarrevenue.com/webmasterexe/drsmartload849a.exe<br /> http://194.187.45.55/MTE3NDI6ODoxNg.exe<br /> http://command.adservs.o<br /> http://command.adservs.com/binaries/installer_9x.php?a=MTE3NDI6ODoxNg<br /> http://promo.dollarrevenue.com/bundle/smartload_stats.asp?a=a_n_u&amp;exe=http%3A%2F%2F194%2E187%2E45%2E55%2FMTE3NDI6ODoxNg%2Eexe&amp;id=1<br /> http://content.dollarrevenue.com/nwnmff_7.exe<br /> http://csx.adservs.com/checkin.php?affid=MTE3NDI6ODoxNg&amp;msg=success<br /> http://promo.dollarrevenue.com/bundle/smartload_stats.asp?a=a_n_u&amp;exe=http%3A%2F%2Fcontent%2Edollarrevenue%2Ecom%2Fnwnmff%5F7%2Eexe&amp;id=1<br /> http://content.dollarrevenue.com/dfndrff_7.exe<br /> http://80gw6ry3i3x3qbrkwhxhw.032439.com/client.php?str=/yfwar6fICKBx2qrDXg9BV/fv/jVhqN8gXXOzYkEdJLFuPkpSzPhh9Qx5B/5bH4b<br /> http://command.adservs.com/binaries/relevance.dat<br /> http://promo.dollarrevenue.com/bundle/smartload_stats.asp?a=a_n_u&amp;exe=http%3A%2F%2Fcontent%2Edollarrevenue%2Ecom%2Fdfndrff%5F7%2Eexe&amp;id=1<br /> http://content.dollarrevenue.com/kybrdff_7.exe<br /> http://promo.dollarrevenue.com/bundle/smartload_stats.asp?a=a_n_u&amp;exe=http%3A%2F%2Fcontent%2Edollarrevenue%2Ecom%2Fkybrdff%5F7%2Eexe&amp;id=1<br /> http://www.onli-ne.com/app/ADDR/Installer.exe<br /> www.onli-ne.com<br /> http://www.nonameforthisdomain.com/data.asp?rnd=0.3843958&amp;antisp=1<br /> www.nonameforthisdomain.com<br /> http://content.dollarrevenue.com/kybrdff_7.exe<br /> http://www.findthewebsiteyouneed.com<br /> http://searchbar.findthewebsiteyouneed.com<br /> http://content.dollarrevenue.com/dfndrff_7.exe<br /> http://promo.dollarrevenue.com/bundle/smartload_stats.asp?a=a_n_u&amp;exe=http%3A%2F%2Fwww%2Eonli%2Dne%2Ecom%2Fapp%2FADDR%2FInstaller%2Eexe&amp;id=1<br /> http://promo.dollarrevenue.com/webmasterexe/drsmartload45a.exe<br /> http://promo.dollarrevenue.com/bundle/smartload_stats.asp?a=a_n_u&amp;exe=http%3A%2F%2Fpromo%2Edollarrevenue%2Ecom%2Fwebmasterexe%2Fdrsmartload45a%2Eexe&amp;id=1<br /> http://promo.dollarrevenue.com/webmasterexe/drsmartload46a.exe<br /> http://promo.dollarrevenue.com/bundle/loader.exe<br /> http://promo.dollarrevenue.com/bundle/smartload_stats.asp?a=a_n_u&amp;exe=http%3A%2F%2Fpromo%2Edollarrevenue%2Ecom%2Fwebmasterexe%2Fdrsmartload46a%2Eexe&amp;id=1<br /> http://promo.dollarrevenue.com/webmasterexe/drsmartload849a.exe<br /> http://promo.dollarrevenue.com/bundle/smartload_stats.asp?a=a_n_u&amp;exe=http%3A%2F%2Fpromo%2Edollarrevenue%2Ecom%2Fwebmasterexe%2Fdrsmartload849a%2Eexe&amp;id=1<br /> http://promo.dollarrevenue.com/bundle/smartload.asp?a=a_n_u&amp;id=45&amp;rnd=0.3896601<br /> http://promo.dollarrevenue.com/bundle/smartload.asp?a=a_n_u&amp;id=46&amp;rnd=0.6209986<br /> http://promo.dollarrevenue.com/bundle/smartload.asp?a=a_n_u&amp;id=849&amp;rnd=0.4082605<br /> <br /> &#039;&#039;&#039;HijackThis logs&#039;&#039;&#039;<br /> <br /> &#039;&#039;Before&#039;&#039;<br /> Logfile of HijackThis v1.99.1<br /> Scan saved at 1:24:17 AM, on 8/6/06<br /> Platform: Windows 98 SE (Win9x 4.10.2222A)<br /> MSIE: Internet Explorer v5.00 (5.00.2614.3500)<br /> &amp;nbsp;<br /> Running processes:<br /> C:\WINDOWS\SYSTEM\KERNEL32.DLL<br /> C:\WINDOWS\SYSTEM\MSGSRV32.EXE<br /> C:\WINDOWS\SYSTEM\MPREXE.EXE<br /> C:\WINDOWS\SYSTEM\mmtask.tsk<br /> C:\WINDOWS\SYSTEM\MSTASK.EXE<br /> C:\WINDOWS\EXPLORER.EXE<br /> C:\WINDOWS\TASKMON.EXE<br /> C:\WINDOWS\SYSTEM\SYSTRAY.EXE<br /> C:\PROGRAM FILES\BELKIN\BELKIN WIRELESS NETWORK UTILITY\WLANCFGG.EXE<br /> C:\WINDOWS\SYSTEM\VMSRVC.EXE<br /> C:\PROGRAM FILES\OPERA\OPERA.EXE<br /> C:\PROGRAM FILES\URLSNOOPER2\URLSNOOPER.EXE<br /> C:\PROGRAM FILES\FILEMAP BY BB V405\FILEMAP.EXE<br /> C:\REGSHOT\REGSHOT.EXE<br /> C:\HIJACKTHIS\HIJACKTHIS.EXE<br /> O3 - Toolbar: &amp;Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX<br /> O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun<br /> O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe<br /> O4 - HKLM\..\Run: [SystemTray] SysTray.Exe<br /> O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme<br /> O4 - HKLM\..\Run: [InvokeSvc.exe] C:\Program Files\Belkin\Belkin Wireless Network Utility\WLanCfgG.exe<br /> O4 - HKLM\..\Run: [VMServices] C:\WINDOWS\SYSTEM\VMSrvc.exe<br /> O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme<br /> O4 - HKLM\..\RunServices: [SchedulingAgent] C:\WINDOWS\SYSTEM\mstask.exe<br /> O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm<br /> O9 - Extra &#039;Tools&#039; menuitem: Show &amp;Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm<br /> <br /> &#039;&#039;After&#039;&#039;<br /> Logfile of HijackThis v1.99.1<br /> Scan saved at 1:39:08 AM, on 8/6/06<br /> Platform: Windows 98 SE (Win9x 4.10.2222A)<br /> MSIE: Internet Explorer v5.00 (5.00.2614.3500)<br /> Running processes:<br /> C:\WINDOWS\SYSTEM\KERNEL32.DLL<br /> C:\WINDOWS\SYSTEM\MSGSRV32.EXE<br /> C:\WINDOWS\SYSTEM\MPREXE.EXE<br /> C:\WINDOWS\SYSTEM\mmtask.tsk<br /> C:\WINDOWS\SYSTEM\MSTASK.EXE<br /> C:\WINDOWS\TASKMON.EXE<br /> C:\WINDOWS\SYSTEM\SYSTRAY.EXE<br /> C:\PROGRAM FILES\BELKIN\BELKIN WIRELESS NETWORK UTILITY\WLANCFGG.EXE<br /> C:\WINDOWS\SYSTEM\VMSRVC.EXE<br /> C:\PROGRAM FILES\OPERA\OPERA.EXE<br /> C:\PROGRAM FILES\URLSNOOPER2\URLSNOOPER.EXE<br /> C:\PROGRAM FILES\FILEMAP BY BB V405\FILEMAP.EXE<br /> C:\REGSHOT\REGSHOT.EXE<br /> C:\HIJACKTHIS\HIJACKTHIS.EXE<br /> C:\WINDOWS\QWJ3YXLHEAAA\COMMAND.EXE<br /> C:\DFNDRFF_7.EXE<br /> C:\KYBRDFF_7.EXE<br /> C:\WINDOWS\RUNDLL32.EXE<br /> O3 - Toolbar: &amp;Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\SYSTEM\MSDXM.OCX<br /> O4 - HKLM\..\Run: [ScanRegistry] C:\WINDOWS\scanregw.exe /autorun<br /> O4 - HKLM\..\Run: [TaskMonitor] C:\WINDOWS\taskmon.exe<br /> O4 - HKLM\..\Run: [SystemTray] SysTray.Exe<br /> O4 - HKLM\..\Run: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme<br /> O4 - HKLM\..\Run: [InvokeSvc.exe] C:\Program Files\Belkin\Belkin Wireless Network Utility\WLanCfgG.exe<br /> O4 - HKLM\..\Run: [VMServices] C:\WINDOWS\SYSTEM\VMSrvc.exe<br /> O4 - HKLM\..\Run: [Command] C:\WINDOWS\QWJ3YXlheAAA\command.exe<br /> O4 - HKLM\..\Run: [newname] C:\\NWNMFF_7.exe<br /> O4 - HKLM\..\Run: [defender] C:\\DFNDRFF_7.exe<br /> O4 - HKLM\..\Run: [keyboard] C:\\KYBRDFF_7.exe<br /> O4 - HKLM\..\RunServices: [LoadPowerProfile] Rundll32.exe powrprof.dll,LoadCurrentPwrScheme<br /> O4 - HKLM\..\RunServices: [SchedulingAgent] C:\WINDOWS\SYSTEM\mstask.exe<br /> O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm<br /> O9 - Extra &#039;Tools&#039; menuitem: Show &amp;Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINDOWS\web\related.htm<br /> <br /> &#039;&#039;&#039;Changes to Windows Filesystem&#039;&#039;&#039;<br /> *****************************<br /> COMPARING RECORDS FROM C:\ ROOT<br /> *****************************<br /> -----------------------------<br /> These files were present at:<br /> 06 Aug 06 at 01:37:02<br /> but not on:<br /> 06 Aug 06 at 01:21:27<br /> -----------------------------<br /> dfndrff_7.exe<br /> drsmartload.exe<br /> drsmartload45a8a.exe<br /> drsmartload46a8a.exe<br /> drsmartload849a8a.exe<br /> installer3.exe<br /> kybrdff_7.exe<br /> mte3ndi6odoxng.exe<br /> nwnmff_7.exe<br /> -----------------------------<br /> These files were present at:<br /> 06 Aug 06 at 01:21:27<br /> but not on:<br /> 06 Aug 06 at 01:37:02<br /> -----------------------------<br /> -----------------------------<br /> *****************************<br /> *****************************<br /> COMPARING RECORDS FROM WINDOWS<br /> *****************************<br /> -----------------------------<br /> These files were present at:<br /> 06 Aug 06 at 01:37:11<br /> but not on:<br /> 06 Aug 06 at 01:21:27<br /> -----------------------------<br /> hosts<br /> keyboard1.dat<br /> -----------------------------<br /> These files were present at:<br /> 06 Aug 06 at 01:21:27<br /> but not on:<br /> 06 Aug 06 at 01:37:11<br /> -----------------------------<br /> -----------------------------<br /> *****************************<br /> *****************************<br /> COMPARING RECORDS FROM SYSTEM<br /> *****************************<br /> -----------------------------<br /> These files were present at:<br /> 06 Aug 06 at 01:37:18<br /> but not on:<br /> 06 Aug 06 at 01:21:27<br /> -----------------------------<br /> opgfs400.dll<br /> uldm16.dll<br /> -----------------------------<br /> These files were present at:<br /> 06 Aug 06 at 01:21:27<br /> but not on:<br /> 06 Aug 06 at 01:37:18<br /> -----------------------------<br /> -----------------------------<br /> *****************************<br /> <br /> &#039;&#039;&#039;Registry Changes&#039;&#039;&#039;<br /> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3877C2CD-F137-4144-BDB2-0A811492F920}\Contact: &quot;Customer Support Department&quot;<br /> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3877C2CD-F137-4144-BDB2-0A811492F920}\DisplayName: &quot;Command&quot;<br /> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3877C2CD-F137-4144-BDB2-0A811492F920}\DisplayVersion: &quot;1.0.1&quot;<br /> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3877C2CD-F137-4144-BDB2-0A811492F920}\NoModify: 0x00000001<br /> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3877C2CD-F137-4144-BDB2-0A811492F920}\NoRemove: 0x00000000<br /> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3877C2CD-F137-4144-BDB2-0A811492F920}\NoRepair: 0x00000001<br /> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall\{3877C2CD-F137-4144-BDB2-0A811492F920}\UninstallString: &quot;wscript &quot;C:\WINDOWS\QWJ3YXlheAAA\pge0.vbs&quot;&quot;<br /> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Internet Settings\User Agent\Post Platform\{E5F6E74B-BE35-3B3D-54D4-00F0412DEABA}: &quot;&quot;<br /> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\Command: &quot;C:\WINDOWS\QWJ3YXlheAAA\command.exe&quot;<br /> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\newname: &quot;C:\\NWNMFF_7.exe&quot;<br /> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\defender: &quot;C:\\DFNDRFF_7.exe&quot;<br /> HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\keyboard: &quot;C:\\KYBRDFF_7.exe&quot;</div> 24.243.14.21