Technical Information
- [<HKLM>\Software\Classes\cclaunch\shell\open\command] '' = '"%ProgramFiles%\CCleaner\ccleaner.exe" /%1'
- [<HKLM>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'GrpConv' = 'grpconv -o'
- %ProgramFiles%\ccleaner\set6e51.tmp
- %TEMP%\rarsfx0\cybermania.exe
- %ProgramFiles%\ccleaner\lang\set734e.tmp
- %ProgramFiles%\ccleaner\lang\set734d.tmp
- %ProgramFiles%\ccleaner\lang\set733d.tmp
- %ProgramFiles%\ccleaner\lang\set732c.tmp
- %ProgramFiles%\ccleaner\lang\set731b.tmp
- %ProgramFiles%\ccleaner\lang\set730b.tmp
- %ProgramFiles%\ccleaner\lang\set72fa.tmp
- %ProgramFiles%\ccleaner\lang\set72f9.tmp
- %ProgramFiles%\ccleaner\lang\set72e9.tmp
- %ProgramFiles%\ccleaner\lang\set72d8.tmp
- %ProgramFiles%\ccleaner\lang\set72c7.tmp
- %ProgramFiles%\ccleaner\lang\set72c6.tmp
- %ProgramFiles%\ccleaner\lang\set72a5.tmp
- %ProgramFiles%\ccleaner\lang\set736f.tmp
- %ProgramFiles%\ccleaner\lang\set7295.tmp
- %ProgramFiles%\ccleaner\lang\set7294.tmp
- %ProgramFiles%\ccleaner\lang\set7273.tmp
- %ProgramFiles%\ccleaner\lang\set7272.tmp
- %ProgramFiles%\ccleaner\lang\set7262.tmp
- %ProgramFiles%\ccleaner\lang\set7251.tmp
- %ProgramFiles%\ccleaner\lang\set7241.tmp
- %ProgramFiles%\ccleaner\lang\set7230.tmp
- %ProgramFiles%\ccleaner\lang\set721f.tmp
- %ProgramFiles%\ccleaner\lang\set721e.tmp
- %ProgramFiles%\ccleaner\lang\set720e.tmp
- %ProgramFiles%\ccleaner\lang\set72a6.tmp
- %ProgramFiles%\ccleaner\lang\set70e3.tmp
- %ProgramFiles%\ccleaner\lang\set7380.tmp
- %ProgramFiles%\ccleaner\set74e3.tmp
- %ProgramFiles%\ccleaner\set74d2.tmp
- %ProgramFiles%\ccleaner\lang\set74c1.tmp
- %ProgramFiles%\ccleaner\lang\set74c0.tmp
- %ProgramFiles%\ccleaner\lang\set74a0.tmp
- %ProgramFiles%\ccleaner\lang\set749f.tmp
- %ProgramFiles%\ccleaner\lang\set748f.tmp
- %ProgramFiles%\ccleaner\lang\set748e.tmp
- %ProgramFiles%\ccleaner\lang\set746d.tmp
- %ProgramFiles%\ccleaner\lang\set746c.tmp
- %ProgramFiles%\ccleaner\lang\set745c.tmp
- %ProgramFiles%\ccleaner\lang\set745b.tmp
- %ProgramFiles%\ccleaner\lang\set71fd.tmp
- %ProgramFiles%\ccleaner\lang\set735f.tmp
- %ProgramFiles%\ccleaner\lang\set7429.tmp
- %ProgramFiles%\ccleaner\lang\set7428.tmp
- %ProgramFiles%\ccleaner\lang\set7408.tmp
- %ProgramFiles%\ccleaner\lang\set7407.tmp
- %ProgramFiles%\ccleaner\lang\set73e7.tmp
- %ProgramFiles%\ccleaner\lang\set73e6.tmp
- %ProgramFiles%\ccleaner\lang\set73d5.tmp
- %ProgramFiles%\ccleaner\lang\set73c4.tmp
- %ProgramFiles%\ccleaner\lang\set73b4.tmp
- %ProgramFiles%\ccleaner\lang\set73b3.tmp
- %ProgramFiles%\ccleaner\lang\set73a2.tmp
- %ProgramFiles%\ccleaner\lang\set7392.tmp
- %ProgramFiles%\ccleaner\lang\set743a.tmp
- %ProgramFiles%\ccleaner\lang\set7381.tmp
- %ProgramFiles%\ccleaner\lang\set71dd.tmp
- %ProgramFiles%\ccleaner\lang\set71dc.tmp
- %ProgramFiles%\ccleaner\lang\set71cb.tmp
- %ProgramFiles%\ccleaner\lang\set6f3f.tmp
- %ProgramFiles%\ccleaner\lang\set6fe7.tmp
- %ProgramFiles%\ccleaner\lang\set6fe6.tmp
- %ProgramFiles%\ccleaner\lang\set6fc6.tmp
- %ProgramFiles%\ccleaner\lang\set6fb5.tmp
- %ProgramFiles%\ccleaner\lang\set6fa5.tmp
- %ProgramFiles%\ccleaner\lang\set6fa4.tmp
- %ProgramFiles%\ccleaner\lang\set6f93.tmp
- %ProgramFiles%\ccleaner\lang\set6f92.tmp
- %ProgramFiles%\ccleaner\lang\set6f72.tmp
- %ProgramFiles%\ccleaner\lang\set6f71.tmp
- %ProgramFiles%\ccleaner\lang\set6f60.tmp
- %ProgramFiles%\ccleaner\ccleaner.ini
- %ProgramFiles%\ccleaner\lang\set7008.tmp
- %ProgramFiles%\ccleaner\lang\set6f3e.tmp
- %ProgramFiles%\ccleaner\lang\set6f2d.tmp
- %ProgramFiles%\ccleaner\lang\set6f2c.tmp
- %ProgramFiles%\ccleaner\set6e51.tmp
- %WINDIR%\temp\old6e3c.tmp
- %ProgramFiles%\ccleaner\set6d47.tmp
- %ProgramFiles%\ccleaner\set6d36.tmp
- %ProgramFiles%\ccleaner\set6d35.tmp
- %ProgramFiles%\ccleaner\set6d15.tmp
- %ProgramFiles%\ccleaner\set6d14.tmp
- %TEMP%\rarsfx0\ccleaner.cab
- %TEMP%\rarsfx0\ccleaner.inf
- %ProgramFiles%\ccleaner\lang\set6f5f.tmp
- %ProgramFiles%\ccleaner\lang\set744a.tmp
- %ProgramFiles%\ccleaner\lang\set7019.tmp
- %ProgramFiles%\ccleaner\lang\set703b.tmp
- %ProgramFiles%\ccleaner\lang\set7029.tmp
- %ProgramFiles%\ccleaner\lang\set71bb.tmp
- %ProgramFiles%\ccleaner\lang\set71aa.tmp
- %ProgramFiles%\ccleaner\lang\set71a9.tmp
- %ProgramFiles%\ccleaner\lang\set7189.tmp
- %ProgramFiles%\ccleaner\lang\set7188.tmp
- %ProgramFiles%\ccleaner\lang\set7177.tmp
- %ProgramFiles%\ccleaner\lang\set7176.tmp
- %ProgramFiles%\ccleaner\lang\set7156.tmp
- %ProgramFiles%\ccleaner\lang\set7146.tmp
- %ProgramFiles%\ccleaner\lang\set7135.tmp
- %ProgramFiles%\ccleaner\lang\set7124.tmp
- %ProgramFiles%\ccleaner\lang\set703a.tmp
- %ProgramFiles%\ccleaner\lang\set7104.tmp
- %ProgramFiles%\ccleaner\lang\set7007.tmp
- %ProgramFiles%\ccleaner\lang\set70d2.tmp
- %ProgramFiles%\ccleaner\lang\set70c2.tmp
- %ProgramFiles%\ccleaner\lang\set70c1.tmp
- %ProgramFiles%\ccleaner\lang\set70b0.tmp
- %ProgramFiles%\ccleaner\lang\set70a0.tmp
- %ProgramFiles%\ccleaner\lang\set708f.tmp
- %ProgramFiles%\ccleaner\lang\set707e.tmp
- %ProgramFiles%\ccleaner\lang\set706e.tmp
- %ProgramFiles%\ccleaner\lang\set706d.tmp
- %ProgramFiles%\ccleaner\lang\set705c.tmp
- %ProgramFiles%\ccleaner\lang\set704c.tmp
- %ProgramFiles%\ccleaner\lang\set70f4.tmp
- %TEMP%\bt0053.bat
- %TEMP%\bt0053.bat
- %ProgramFiles%\ccleaner\set6d14.tmp
- %ProgramFiles%\ccleaner\lang\set7272.tmp
- %ProgramFiles%\ccleaner\lang\set7294.tmp
- %ProgramFiles%\ccleaner\lang\set72a5.tmp
- %ProgramFiles%\ccleaner\lang\set72c6.tmp
- %ProgramFiles%\ccleaner\lang\set72d8.tmp
- %ProgramFiles%\ccleaner\lang\set72f9.tmp
- %ProgramFiles%\ccleaner\lang\set730b.tmp
- %ProgramFiles%\ccleaner\lang\set732c.tmp
- %ProgramFiles%\ccleaner\lang\set734d.tmp
- %ProgramFiles%\ccleaner\lang\set735f.tmp
- %ProgramFiles%\ccleaner\lang\set7380.tmp
- %ProgramFiles%\ccleaner\lang\set7392.tmp
- %ProgramFiles%\ccleaner\lang\set73b3.tmp
- %ProgramFiles%\ccleaner\lang\set73c4.tmp
- %ProgramFiles%\ccleaner\lang\set73e6.tmp
- %ProgramFiles%\ccleaner\lang\set7407.tmp
- %ProgramFiles%\ccleaner\lang\set7428.tmp
- %ProgramFiles%\ccleaner\lang\set743a.tmp
- %ProgramFiles%\ccleaner\lang\set745b.tmp
- %ProgramFiles%\ccleaner\lang\set746c.tmp
- %ProgramFiles%\ccleaner\lang\set748e.tmp
- %ProgramFiles%\ccleaner\lang\set749f.tmp
- %ProgramFiles%\ccleaner\lang\set74c0.tmp
- %ProgramFiles%\ccleaner\set74d2.tmp
- %WINDIR%\temp\old6e3c.tmp
- %TEMP%\bt0053.bat
- %TEMP%\rarsfx0\ccleaner.cab
- %ProgramFiles%\ccleaner\lang\set7251.tmp
- %TEMP%\rarsfx0\ccleaner.inf
- %ProgramFiles%\ccleaner\lang\set7230.tmp
- %ProgramFiles%\ccleaner\lang\set71fd.tmp
- %ProgramFiles%\ccleaner\set6d35.tmp
- %ProgramFiles%\ccleaner\set6d47.tmp
- %ProgramFiles%\ccleaner\lang\set6f2c.tmp
- %ProgramFiles%\ccleaner\lang\set6f3e.tmp
- %ProgramFiles%\ccleaner\lang\set6f5f.tmp
- %ProgramFiles%\ccleaner\lang\set6f71.tmp
- %ProgramFiles%\ccleaner\lang\set6f92.tmp
- %ProgramFiles%\ccleaner\lang\set6fa4.tmp
- %ProgramFiles%\ccleaner\lang\set6fb5.tmp
- %ProgramFiles%\ccleaner\lang\set6fe6.tmp
- %ProgramFiles%\ccleaner\lang\set7007.tmp
- %ProgramFiles%\ccleaner\lang\set7019.tmp
- %ProgramFiles%\ccleaner\lang\set703a.tmp
- %ProgramFiles%\ccleaner\lang\set704c.tmp
- %ProgramFiles%\ccleaner\lang\set706d.tmp
- %ProgramFiles%\ccleaner\lang\set707e.tmp
- %ProgramFiles%\ccleaner\lang\set70a0.tmp
- %ProgramFiles%\ccleaner\lang\set70c1.tmp
- %ProgramFiles%\ccleaner\lang\set70d2.tmp
- %ProgramFiles%\ccleaner\lang\set70f4.tmp
- %ProgramFiles%\ccleaner\lang\set7124.tmp
- %ProgramFiles%\ccleaner\lang\set7146.tmp
- %ProgramFiles%\ccleaner\lang\set7176.tmp
- %ProgramFiles%\ccleaner\lang\set7188.tmp
- %ProgramFiles%\ccleaner\lang\set71a9.tmp
- %ProgramFiles%\ccleaner\lang\set71bb.tmp
- %ProgramFiles%\ccleaner\lang\set71dc.tmp
- %ProgramFiles%\ccleaner\lang\set721e.tmp
- %TEMP%\rarsfx0\cybermania.exe
- from %ProgramFiles%\ccleaner\set6d15.tmp to %ProgramFiles%\ccleaner\branding.dll
- from %ProgramFiles%\ccleaner\lang\set7241.tmp to %ProgramFiles%\ccleaner\lang\lang-1055.dll
- from %ProgramFiles%\ccleaner\lang\set7262.tmp to %ProgramFiles%\ccleaner\lang\lang-1057.dll
- from %ProgramFiles%\ccleaner\lang\set7273.tmp to %ProgramFiles%\ccleaner\lang\lang-1058.dll
- from %ProgramFiles%\ccleaner\lang\set7295.tmp to %ProgramFiles%\ccleaner\lang\lang-1059.dll
- from %ProgramFiles%\ccleaner\lang\set72a6.tmp to %ProgramFiles%\ccleaner\lang\lang-1060.dll
- from %ProgramFiles%\ccleaner\lang\set72c7.tmp to %ProgramFiles%\ccleaner\lang\lang-1061.dll
- from %ProgramFiles%\ccleaner\lang\set72e9.tmp to %ProgramFiles%\ccleaner\lang\lang-1062.dll
- from %ProgramFiles%\ccleaner\lang\set72fa.tmp to %ProgramFiles%\ccleaner\lang\lang-1063.dll
- from %ProgramFiles%\ccleaner\lang\set731b.tmp to %ProgramFiles%\ccleaner\lang\lang-1065.dll
- from %ProgramFiles%\ccleaner\lang\set733d.tmp to %ProgramFiles%\ccleaner\lang\lang-1066.dll
- from %ProgramFiles%\ccleaner\lang\set734e.tmp to %ProgramFiles%\ccleaner\lang\lang-1067.dll
- from %ProgramFiles%\ccleaner\lang\set7381.tmp to %ProgramFiles%\ccleaner\lang\lang-1071.dll
- from %ProgramFiles%\ccleaner\lang\set74c1.tmp to %ProgramFiles%\ccleaner\lang\lang-9999.dll
- from %ProgramFiles%\ccleaner\lang\set73a2.tmp to %ProgramFiles%\ccleaner\lang\lang-1079.dll
- from %ProgramFiles%\ccleaner\lang\set73b4.tmp to %ProgramFiles%\ccleaner\lang\lang-1081.dll
- from %ProgramFiles%\ccleaner\lang\set73d5.tmp to %ProgramFiles%\ccleaner\lang\lang-1087.dll
- from %ProgramFiles%\ccleaner\lang\set73e7.tmp to %ProgramFiles%\ccleaner\lang\lang-1102.dll
- from %ProgramFiles%\ccleaner\lang\set7408.tmp to %ProgramFiles%\ccleaner\lang\lang-1109.dll
- from %ProgramFiles%\ccleaner\lang\set7429.tmp to %ProgramFiles%\ccleaner\lang\lang-1110.dll
- from %ProgramFiles%\ccleaner\lang\set744a.tmp to %ProgramFiles%\ccleaner\lang\lang-2052.dll
- from %ProgramFiles%\ccleaner\lang\set745c.tmp to %ProgramFiles%\ccleaner\lang\lang-2070.dll
- from %ProgramFiles%\ccleaner\lang\set746d.tmp to %ProgramFiles%\ccleaner\lang\lang-2074.dll
- from %ProgramFiles%\ccleaner\lang\set748f.tmp to %ProgramFiles%\ccleaner\lang\lang-3098.dll
- from %ProgramFiles%\ccleaner\lang\set74a0.tmp to %ProgramFiles%\ccleaner\lang\lang-5146.dll
- from %ProgramFiles%\ccleaner\lang\set721f.tmp to %ProgramFiles%\ccleaner\lang\lang-1054.dll
- from %ProgramFiles%\ccleaner\lang\set736f.tmp to %ProgramFiles%\ccleaner\lang\lang-1068.dll
- from %ProgramFiles%\ccleaner\lang\set720e.tmp to %ProgramFiles%\ccleaner\lang\lang-1053.dll
- from %ProgramFiles%\ccleaner\lang\set703b.tmp to %ProgramFiles%\ccleaner\lang\lang-1036.dll
- from %ProgramFiles%\ccleaner\set6d36.tmp to %ProgramFiles%\ccleaner\ccleaner.dat
- from %ProgramFiles%\ccleaner\lang\set6f2d.tmp to %ProgramFiles%\ccleaner\lang\lang-1025.dll
- from %ProgramFiles%\ccleaner\lang\set6f3f.tmp to %ProgramFiles%\ccleaner\lang\lang-1026.dll
- from %ProgramFiles%\ccleaner\lang\set6f60.tmp to %ProgramFiles%\ccleaner\lang\lang-1027.dll
- from %ProgramFiles%\ccleaner\lang\set6f72.tmp to %ProgramFiles%\ccleaner\lang\lang-1028.dll
- from %ProgramFiles%\ccleaner\lang\set6f93.tmp to %ProgramFiles%\ccleaner\lang\lang-1029.dll
- from %ProgramFiles%\ccleaner\lang\set6fa5.tmp to %ProgramFiles%\ccleaner\lang\lang-1030.dll
- from %ProgramFiles%\ccleaner\lang\set6fc6.tmp to %ProgramFiles%\ccleaner\lang\lang-1031.dll
- from %ProgramFiles%\ccleaner\lang\set6fe7.tmp to %ProgramFiles%\ccleaner\lang\lang-1032.dll
- from %ProgramFiles%\ccleaner\lang\set7008.tmp to %ProgramFiles%\ccleaner\lang\lang-1034.dll
- from %ProgramFiles%\ccleaner\lang\set7029.tmp to %ProgramFiles%\ccleaner\lang\lang-1035.dll
- from %ProgramFiles%\ccleaner\lang\set705c.tmp to %ProgramFiles%\ccleaner\lang\lang-1037.dll
- from %ProgramFiles%\ccleaner\lang\set71cb.tmp to %ProgramFiles%\ccleaner\lang\lang-1051.dll
- from %ProgramFiles%\ccleaner\lang\set706e.tmp to %ProgramFiles%\ccleaner\lang\lang-1038.dll
- from %ProgramFiles%\ccleaner\lang\set708f.tmp to %ProgramFiles%\ccleaner\lang\lang-1040.dll
- from %ProgramFiles%\ccleaner\lang\set70b0.tmp to %ProgramFiles%\ccleaner\lang\lang-1041.dll
- from %ProgramFiles%\ccleaner\lang\set70c2.tmp to %ProgramFiles%\ccleaner\lang\lang-1042.dll
- from %ProgramFiles%\ccleaner\lang\set70e3.tmp to %ProgramFiles%\ccleaner\lang\lang-1043.dll
- from %ProgramFiles%\ccleaner\lang\set7104.tmp to %ProgramFiles%\ccleaner\lang\lang-1044.dll
- from %ProgramFiles%\ccleaner\lang\set7135.tmp to %ProgramFiles%\ccleaner\lang\lang-1045.dll
- from %ProgramFiles%\ccleaner\lang\set7156.tmp to %ProgramFiles%\ccleaner\lang\lang-1046.dll
- from %ProgramFiles%\ccleaner\lang\set7177.tmp to %ProgramFiles%\ccleaner\lang\lang-1048.dll
- from %ProgramFiles%\ccleaner\lang\set7189.tmp to %ProgramFiles%\ccleaner\lang\lang-1049.dll
- from %ProgramFiles%\ccleaner\lang\set71aa.tmp to %ProgramFiles%\ccleaner\lang\lang-1050.dll
- from %ProgramFiles%\ccleaner\lang\set71dd.tmp to %ProgramFiles%\ccleaner\lang\lang-1052.dll
- from %ProgramFiles%\ccleaner\set74e3.tmp to %ProgramFiles%\ccleaner\uninst.exe
- %LOCALAPPDATA%\microsoft\windows\explorer\explorerstartuplog_runonce.etl
- 'cy###mania.ws':80
- 'cy###mania.ws':443
- http://www.cy###mania.ws/
- 'cy###mania.ws':443
- DNS ASK cy###mania.ws
- DNS ASK microsoft.com
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'DDEMLMom' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'Static' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
- '%TEMP%\rarsfx0\cybermania.exe'
- '%WINDIR%\syswow64\cmd.exe' /c %TEMP%\bt0053.bat "%TEMP%\RarSFX0\CyberMania.exe"' (with hidden window)
- '<SYSTEM32>\infdefaultinstall.exe' "%TEMP%\RarSFX0\CCleaner.inf"
- '<SYSTEM32>\runonce.exe' -r
- '<SYSTEM32>\grpconv.exe' -o
- '%WINDIR%\syswow64\cmd.exe' /c %TEMP%\bt0053.bat "%TEMP%\RarSFX0\CyberMania.exe"