Trojan.DownLoader7.7735

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'winlogon' = '%WINDIR%\svchost.exe'

Malicious functions:

Creates and executes the following:

%WINDIR%\svchost.exe
%PROGRAM_FILES%\Company\Plugin_Mini_1610\Plugin-Setup.exe

Modifies file system :

Creates the following files:

%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\skillprogress.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\Supercall.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\selectnpc.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\RungGai.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\TDLT.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\tool.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\VuotRao.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\tool.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\Thuthapgo.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\Thuthapthaoduoc.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\Detector.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\enemy.WAV
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\cuonghoa_setting.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\CTC.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\cuonghoa.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\Fishing.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\NangDong.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\openYaoXiang.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\member.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\helpsprite.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\Input0.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\XiaKe.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\support_phuongtmp\TLHL.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\support_phuongtmp\uiMsgPad.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\support_phuongtmp\Tien_ich.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\support_phuongtmp\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\support_phuongtmp\ReLoad.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\support_phuongtmp\uiSayPanel.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\support_phuongtmp\VatPhamDauGia.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\ToDoiNangCao\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\support_phuongtmp\ui_chinhtuyen.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\support_phuongtmp\uiTaskTips.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\support_phuongtmp\UI_CHINHTUYEN.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\supermaplink\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\supermaplink\ReloadCH.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\supermaplink\myui.dll
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\supermaplink\maplink_ui.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\supermaplink\maplink_ui.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\supermaplink\supermaplink.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\support_phuongtmp\NhiemVuChinhTuyen.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\support_phuongtmp\OnTeamApplyAdd.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\support_phuongtmp\HeThong.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\support_phuongtmp\AutoThuongHoi.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\support_phuongtmp\BeepTimes.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Preview\script\window\preview.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Preview\script\window\PreViewMgr.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Preview\script\window\base.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Preview\001a\window\preview.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Preview\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Recipe\BuyCoint.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Recipe\CheckPhucLoi.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Recipe\CheckPhucLoiTDC.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Recipe\BuyCointVSV.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Recipe\BuyCointTDC.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Recipe\BuyCointTDLT.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Hanhtrang_Ruong\orderbag.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Hanhtrang_Ruong\orderbag_compare.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\btssl_class\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\btssl_class\equip.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\btssl_class\item.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Hanhtrang_Ruong\orderbag_logic.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Hanhtrang_Ruong\throwAway.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\interfacemanagercfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Hanhtrang_Ruong\repository.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Hanhtrang_Ruong\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Hanhtrang_Ruong\repository.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Recipe\CheckPhucLoiTDLT.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\sprTrade\msgsellelem.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\sprTrade\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\sprTrade\itembox.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\setting\task\wanted\wanted_killnpc.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\sprTrade\extbagmodify.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\sprTrade\trade.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\AutoParty.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\CheLak60.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\AutoParty.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\activeaward.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\auctionroom.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Recipe\Reload.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Recipe\TDC.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Recipe\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Recipe\CheckPhucLoiVSV.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Recipe\NAT.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Recipe\TDLT.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\setting\map\treasuremap_pos.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\setting\map\worldmap.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\setting\map\transmit.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Recipe\VSV.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\setting\map\maplist.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\ToDoiNangCao\teamportrait.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\UI_PLAYERPANEL\viewwealthvalue.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\UI_PLAYERPANEL\viewwealthvalue.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\UI_PLAYERPANEL\Scrip09.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\UI_PLAYERPANEL\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\UI_PLAYERPANEL\Scrip08.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\UI_PLAYERPANEL\zhenyuan.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\ui\001a\wndconfig.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\ui\001b\window\cover.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\ui\001a\window\fightmode.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\ui\001a\UI_POPBAR=552,518.rar
%PROGRAM_FILES%\Company\Plugin_Mini_1610\ui\001a\window\cover.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\ui_autosay2\data\reply2.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\ui_autosay2\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\ui_autosay2\data\reply.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\ui_autosay2\data\hanhua5.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\ui_autosay2\data\msg.wav
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\UI_miniclock\miniclock.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\UI_PLAYERPANEL\playerpanel.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\UI_PLAYERPANEL\playerpanel.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\UI_PLAYERPANEL\playerhonor_wealth.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\UI_miniclock\miniclock.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\UI_miniclock\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\ui\001b\wndconfig.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\setting\item\001\other\specialbinditem.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\setting\item\001\other\stone.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\setting\item\001\other\skillitem.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\setting\item\001\other\presentitem.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\setting\item\001\other\scriptitem.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\setting\item\001\other\stuffitem.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\Uninstall.ini
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\autokiemthe[1]
%PROGRAM_FILES%\Company\Plugin_Mini_1610\Uninstall.exe
%PROGRAM_FILES%\Company\Plugin_Mini_1610\setting\item\001\other\taskquest.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\Plugin-Setup.exe
%PROGRAM_FILES%\Company\Plugin_Mini_1610\ui\002b\wndconfig.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\setting\misc\daytip.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\ui\002a\wndconfig.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\ui\001c\window\cover.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\ui\001c\wndconfig.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\setting\item\001\other\dayaward.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\setting\item\001\other\medicine.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\setting\item\001\other\planitem.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\setting\item\001\other\mask_time.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\setting\item\001\other\extbag.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\setting\item\001\other\limituse.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\checkplugin.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\collection.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\callback.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\books.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\BuffTC.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\Confirm.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\healthy.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\mgr.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\guttalk.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\GetIDNPC.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\gutmodel.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\001a\window\nopick_setting.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\001a\window\renascencepanel.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\001a\window\cover.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\ToDoiNangCao\teamportrait.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\ToDoiNangCao\team_modify.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\001a\window\shop.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\AutoPick.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\autotreasure.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\001a\window\tools.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\001a\window\viewfightskill.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\new4X.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\ui_autosay2\AutoSay.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\ui_autosay2\autosay2.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\ui_autosay2\autosay.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\xuanjing.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\ui_autosay2\AutoReply.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\ui_autosay2\AutoSay2.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\ui_autosay2\data\hanhua3.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\ui_autosay2\data\hanhua4.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\ui_autosay2\data\hanhua2.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\ui_autosay2\data\hanhua.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\ui_autosay2\data\hanhua1.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\playname_ex.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\renascencepanel.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\playerpray.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\NoEXPl.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\noPick.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\shop.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\viewfightskill.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\worldmap_sub.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\Tools1.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\shortcuts.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\Tools\script\window\tools.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\btssl_class\enhance.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\sprTrade\msgsellelem.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\sprTrade\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\sprTrade\itembox.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\sprBag\zhanhunbag.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\sprTrade\extbagmodify.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\sprTrade\trade.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\AutoParty.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\CheLak60.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\AutoParty.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\activeaward.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\auctionroom.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\sprBag\orderbag.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\sprBag\orderbag_compare.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\sprBag\itembox.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\setting\task\wanted\wanted_killnpc.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\sprBag\itembox.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\sprBag\orderbag_logic.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\sprBag\throwAway.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\sprBag\zhanhunbag.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\sprBag\repository.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\sprBag\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\sprBag\repository.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\CTC.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\Supercall.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\TDLT.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\skillprogress.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\RungGai.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\selectnpc.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\Thuthapgo.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\VuotRao.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\XiaKe.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\tool.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\Thuthapthaoduoc.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\tool.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\enemy.WAV
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\Fishing.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\Detector.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\cuonghoa.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\cuonghoa_setting.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\helpsprite.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\openYaoXiang.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\NangDong.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\Input0.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\member.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Hanhtrang_Ruong\orderbag_compare.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Hanhtrang_Ruong\orderbag_logic.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Hanhtrang_Ruong\orderbag.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\btssl_class\item.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\btssl_class\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Hanhtrang_Ruong\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\helpsprite.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\interfacemanagercfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Hanhtrang_Ruong\throwAway.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Hanhtrang_Ruong\repository.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Hanhtrang_Ruong\repository.lua
%TEMP%\$inst\temp_0.tmp
%WINDIR%\svchost.exe
%TEMP%\$inst\5.tmp
%TEMP%\$inst\2.tmp
%TEMP%\$inst\4.tmp
%TEMP%\down.a3x
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\btssl_class\enhance.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\btssl_class\equip.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\btssl_autofight\script\window\auto_fight.lua
%TEMP%\ie1.a3x
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\btssl_autofight\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Preview\001a\window\preview.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Recipe\Reload.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Recipe\TDC.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Recipe\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Recipe\CheckPhucLoiVSV.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Recipe\NAT.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Recipe\TDLT.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\setting\map\treasuremap_pos.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\setting\map\worldmap.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\setting\map\transmit.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Recipe\VSV.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\setting\map\maplist.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Preview\script\window\PreViewMgr.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Recipe\BuyCoint.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Preview\script\window\preview.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Preview\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Preview\script\window\base.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Recipe\BuyCointTDC.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Recipe\CheckPhucLoiTDC.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Recipe\CheckPhucLoiTDLT.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Recipe\CheckPhucLoi.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Recipe\BuyCointTDLT.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Recipe\BuyCointVSV.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\supermaplink\maplink_ui.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\ui_autosay2\AutoReply.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\ui_autosay2\autosay.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\xuanjing.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\viewfightskill.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\worldmap_sub.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\ui_autosay2\AutoSay.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\ui_autosay2\data\hanhua1.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\ui_autosay2\data\hanhua2.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\ui_autosay2\data\hanhua.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\ui_autosay2\autosay2.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\ui_autosay2\AutoSay2.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\playerpray.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\playname_ex.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\noPick.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\new4X.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\NoEXPl.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\popbar.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\tools.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\Tools1.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\shortcuts.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\renascencepanel.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\shop.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\ui_autosay2\data\hanhua3.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\UI_PLAYERPANEL\Scrip09.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\UI_PLAYERPANEL\viewfightskill.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\UI_PLAYERPANEL\Scrip08.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\UI_PLAYERPANEL\playerpanel.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\UI_PLAYERPANEL\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\UI_PLAYERPANEL\viewfightskill.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\btssl_autofight\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\btssl_autofight\script\window\auto_fight.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\UI_PLAYERPANEL\zhenyuan.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\UI_PLAYERPANEL\viewwealthvalue.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\UI_PLAYERPANEL\viewwealthvalue.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\ui_autosay2\data\reply.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\ui_autosay2\data\reply2.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\ui_autosay2\data\msg.wav
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\ui_autosay2\data\hanhua4.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\ui_autosay2\data\hanhua5.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\ui_autosay2\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\UI_PLAYERPANEL\playerhonor_wealth.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\UI_PLAYERPANEL\playerpanel.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\UI_miniclock\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\UI_miniclock\miniclock.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\UI_miniclock\miniclock.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\support_phuongtmp\uiMsgPad.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\support_phuongtmp\uiSayPanel.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\support_phuongtmp\TLHL.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\support_phuongtmp\ReLoad.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\support_phuongtmp\Tien_ich.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\support_phuongtmp\uiTaskTips.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\ToDoiNangCao\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\ToDoiNangCao\teamportrait.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\support_phuongtmp\VatPhamDauGia.txt
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\support_phuongtmp\UI_CHINHTUYEN.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\support_phuongtmp\ui_chinhtuyen.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\supermaplink\ReloadCH.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\supermaplink\supermaplink.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\supermaplink\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\supermaplink\maplink_ui.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\supermaplink\myui.dll
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\support_phuongtmp\AutoThuongHoi.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\support_phuongtmp\OnTeamApplyAdd.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\support_phuongtmp\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\support_phuongtmp\NhiemVuChinhTuyen.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\support_phuongtmp\BeepTimes.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\support_phuongtmp\HeThong.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\ToDoiNangCao\teamportrait.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\checkplugin.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\collection.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\callback.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\books.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\BuffTC.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\Confirm.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\healthy.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\mgr.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\guttalk.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\GetIDNPC.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\gutmodel.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\001a\window\popbar.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\001a\window\renascencepanel.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\001a\window\nopick_setting.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\ToDoiNangCao\team_modify.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\001a\window\cover.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\001a\window\shop.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\AutoPick.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\script\window\autotreasure.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\plugincfg.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\001a\window\tools.ini
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\Tools\001a\window\viewfightskill.ini

Sets the 'hidden' attribute to the following files:

%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\AutoParty.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\activeaward.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\Detector.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\openYaoXiang.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface2\spr_hethong\member.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\AutoParty.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\activeaward.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\Detector.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\openYaoXiang.lua
%PROGRAM_FILES%\Company\Plugin_Mini_1610\interface\spr_hethong\member.lua

Deletes the following files:

%TEMP%\$inst\4.tmp
%TEMP%\$inst\5.tmp
%TEMP%\$inst\temp_0.tmp
%TEMP%\$inst\2.tmp

Network activity:

Connects to:

'www.au###iemthe.net':80
'localhost':1037

TCP:

HTTP GET requests:

www.au###iemthe.net/

UDP:

DNS ASK www.au###iemthe.net

Miscellaneous:

Searches for the following windows:

ClassName: 'IEFrame' WindowName: ''
ClassName: 'MS_AutodialMonitor' WindowName: ''
ClassName: 'MS_WebcheckMonitor' WindowName: ''
ClassName: 'Shell_TrayWnd' WindowName: ''
ClassName: '' WindowName: 'GINA Logon'
ClassName: '' WindowName: ''

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Technical Information

Curing recommendations

Free trial