ADW_CASINONET

September 04, 2013

Analysis by: Mark Joseph Manahan

ALIASES:

CasinoOnNet, Casino Software, CasinoOnline

PLATFORM:

Windows 2000, Windows Server 2003, Windows XP (32-bit, 64-bit), Windows Vista (32-bit, 64-bit), Windows 7 (32-bit, 64-bit)

OVERALL RISK RATING:

REPORTED INFECTION:

SYSTEM IMPACT RATING:

INFORMATION EXPOSURE:

Threat Type: Adware
Destructiveness: No
Encrypted:
In the wild: Yes

OVERVIEW

Infection Channel:

Downloaded from the Internet

CASINONET is an adware which uses a gambling software to gather personal information, which can be used for marketing purpose. Known games for this application are Blackjack, Roulette, Online Slot Machines, and Video Poker. Although the software is legitimate, it may display unwanted pop-up windows to display advertisements.

TECHNICAL DETAILS

Memory Resident:

Yes

Installation

This adware drops the following file(s)/component(s):

%Application Data%\CasinoOnNet\Arena\vs\KM_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\LoE.png
%Application Data%\CasinoOnNet\Arena\vs\LoE_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\MON.png
%Application Data%\CasinoOnNet\Arena\vs\MON_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\MT.png
%Application Data%\CasinoOnNet\Arena\vs\MT_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\MTF.png
%Application Data%\CasinoOnNet\Arena\vs\OCO.png
%Application Data%\CasinoOnNet\Arena\vs\OCO_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\PM_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\PMArena.png
%Application Data%\CasinoOnNet\Arena\vs\RGB.png
%Application Data%\CasinoOnNet\Arena\vs\RGB_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\SC.png
%Application Data%\CasinoOnNet\Arena\vs\SC_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\SD.png
%Application Data%\CasinoOnNet\Arena\vs\SD_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\Snooker.png
%Application Data%\CasinoOnNet\Arena\vs\snooker_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\SPA.png
%Application Data%\CasinoOnNet\Arena\vs\SPA_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\Spiderman.png
%Application Data%\CasinoOnNet\Arena\vs\Spiderman_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\Thor.png
%Application Data%\CasinoOnNet\Arena\vs\Thor_Prev.bmp
%Application Data%\CasinoOnNet\Arena\vs\UltBBQ.png
%Application Data%\CasinoOnNet\Arena\vs\UltBBQ_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\X-FactPrev.bmp
%Application Data%\CasinoOnNet\Arena\vs\XFactor.png
%Application Data%\CasinoOnNet\Arena\vs\XM.png
%Application Data%\CasinoOnNet\Arena\vs\XM_preview.bmp
%Application Data%\CasinoOnNet\Bj\media\askinsur.png
%Application Data%\CasinoOnNet\Bj\media\BJ_vip.bmp
%Application Data%\CasinoOnNet\Bj\media\BjBkgr.jpga
%Application Data%\CasinoOnNet\Bj\media\bjconf.cxm
%Application Data%\CasinoOnNet\Bj\media\BJTableLimits.png
%Application Data%\CasinoOnNet\Bj\media\Continue0.jpga
%Application Data%\CasinoOnNet\Bj\media\Continue1.jpga
%Application Data%\CasinoOnNet\Bj\media\Continue3.jpga
%Application Data%\CasinoOnNet\Bj\media\Double0.jpga
%Application Data%\CasinoOnNet\Bj\media\Double1.jpga
%Application Data%\CasinoOnNet\Bj\media\Double3.jpga
%Application Data%\CasinoOnNet\Bj\media\high_left.jpga
%Application Data%\CasinoOnNet\Bj\media\high_leftBkrf.jpga
%Application Data%\CasinoOnNet\Bj\media\high_leftf.jpga
%Application Data%\CasinoOnNet\Bj\media\high_mid.jpga
%Application Data%\CasinoOnNet\Bj\media\high_midBkrf.jpga
%Application Data%\CasinoOnNet\Bj\media\high_midf.jpga
%Application Data%\CasinoOnNet\Bj\media\high_right.jpga
%Application Data%\CasinoOnNet\Bj\media\high_rightBkrf.jpga
%Application Data%\CasinoOnNet\Bj\media\high_rightf.jpga
%Application Data%\CasinoOnNet\Bj\media\Hit0.jpga
%Application Data%\CasinoOnNet\Bj\media\Hit1.jpga
%Application Data%\CasinoOnNet\Bj\media\Hit3.jpga
%Application Data%\CasinoOnNet\Bj\media\InsNo0.jpga
%Application Data%\CasinoOnNet\Bj\media\InsNo1.jpga
%Application Data%\CasinoOnNet\Bj\media\InsNo3.jpga
%Application Data%\CasinoOnNet\Bj\media\InsYes0.jpga
%Application Data%\CasinoOnNet\Bj\media\InsYes1.jpga
%Application Data%\CasinoOnNet\Bj\media\InsYes3.jpga
%Application Data%\CasinoOnNet\Bj\media\multi_hand.jpga
%Application Data%\CasinoOnNet\Bj\media\Repeat0.jpga
%Application Data%\CasinoOnNet\Bj\media\Repeat1.jpga
%Application Data%\CasinoOnNet\Bj\media\Repeat3.jpga
%Application Data%\CasinoOnNet\Bj\media\ScoreFont.bmp
%Application Data%\CasinoOnNet\Bj\media\Split0.jpga
%Application Data%\CasinoOnNet\Bj\media\Split1.jpga
%Application Data%\CasinoOnNet\Bj\media\Split2.jpga
%Application Data%\CasinoOnNet\Bj\media\Split3.jpga
%Application Data%\CasinoOnNet\Bj\media\Stand0.jpga
%Application Data%\CasinoOnNet\Bj\media\Stand1.jpga
%Application Data%\CasinoOnNet\Bj\media\Stand2.jpga
%Application Data%\CasinoOnNet\Bj\media\Stand3.jpga
%Application Data%\CasinoOnNet\Bj\media\strip_get_back_card.bmp
%Application Data%\CasinoOnNet\Bj\media\strip_get_card.bmp
%Application Data%\CasinoOnNet\Bj\media\strip_remove_card.bmp
%Application Data%\CasinoOnNet\Bj\media\Turn.bmp
%Application Data%\CasinoOnNet\Bj\media\yourturn.png
%Application Data%\CasinoOnNet\roulette3D\media\arrow.bmp
%Application Data%\CasinoOnNet\roulette3D\media\ball.bmp
%Application Data%\CasinoOnNet\roulette3D\media\ball.wav
%Application Data%\CasinoOnNet\roulette3D\media\ball1.bmp
%Application Data%\CasinoOnNet\roulette3D\media\ball2.bmp
%Application Data%\CasinoOnNet\roulette3D\media\ballShadow.bmp
%Application Data%\CasinoOnNet\roulette3D\media\black_F.mp3
%Application Data%\CasinoOnNet\roulette3D\media\black_M.mp3
%Application Data%\CasinoOnNet\roulette3D\media\contin0.png
%Application Data%\CasinoOnNet\roulette3D\media\contin1.png
%Application Data%\CasinoOnNet\roulette3D\media\contin2.png
%Application Data%\CasinoOnNet\roulette3D\media\cover_ball.bmp
%Application Data%\CasinoOnNet\roulette3D\media\enjoy_F.mp3
%Application Data%\CasinoOnNet\roulette3D\media\enjoy_M.mp3
%Application Data%\CasinoOnNet\roulette3D\media\jumpball.mp3
%Application Data%\CasinoOnNet\roulette3D\media\mark.bmp
%Application Data%\CasinoOnNet\roulette3D\media\nomore_F.mp3
%Application Data%\CasinoOnNet\roulette3D\media\nomore_M.mp3
%Application Data%\CasinoOnNet\roulette3D\media\red_F.mp3
%Application Data%\CasinoOnNet\roulette3D\media\red_M.mp3
%Application Data%\CasinoOnNet\roulette3D\media\repeat0.png
%Application Data%\CasinoOnNet\roulette3D\media\repeat1.png
%Application Data%\CasinoOnNet\roulette3D\media\repeat2.png
%Application Data%\CasinoOnNet\roulette3D\media\Rol3D.cxm
%Application Data%\CasinoOnNet\roulette3D\media\rolstrip1.bmp
%Application Data%\CasinoOnNet\roulette3D\media\rolstrip2.bmp
%Application Data%\CasinoOnNet\roulette3D\media\RolTableLimits.png
%Application Data%\CasinoOnNet\roulette3D\media\roul_vip.png
%Application Data%\CasinoOnNet\roulette3D\media\RoulTable.jpga
%Application Data%\CasinoOnNet\roulette3D\media\wins.bmp
%Application Data%\CasinoOnNet\roulette3D\media\Zoomball.bmp
%Application Data%\CasinoOnNet\roulette3D\media\ZoomStrip.bmp
%Application Data%\CasinoOnNet\roulette\media\ball.bmp
%Application Data%\CasinoOnNet\roulette\media\ball.wav
%Application Data%\CasinoOnNet\roulette\media\ball1.bmp
%Application Data%\CasinoOnNet\roulette\media\ball2.bmp
%Application Data%\CasinoOnNet\roulette\media\ballShadow.bmp
%Application Data%\CasinoOnNet\roulette\media\black_F.mp3
%Application Data%\CasinoOnNet\roulette\media\black_M.mp3
%Application Data%\CasinoOnNet\roulette\media\contin0.png
%Application Data%\CasinoOnNet\roulette\media\contin1.png
%Application Data%\CasinoOnNet\roulette\media\contin2.png
%Application Data%\CasinoOnNet\roulette\media\enjoy_F.mp3
%Application Data%\CasinoOnNet\roulette\media\enjoy_M.mp3
%Application Data%\CasinoOnNet\roulette\media\jumpball.mp3
%Application Data%\CasinoOnNet\roulette\media\mark.bmp
%Application Data%\CasinoOnNet\roulette\media\nomore_F.mp3
%Application Data%\CasinoOnNet\roulette\media\nomore_M.mp3
%Application Data%\CasinoOnNet\roulette\media\red_F.mp3
%Application Data%\CasinoOnNet\roulette\media\red_M.mp3
%Application Data%\CasinoOnNet\roulette\media\repeat0.png
%Application Data%\CasinoOnNet\roulette\media\repeat1.png
%Application Data%\CasinoOnNet\roulette\media\repeat2.png
%Application Data%\CasinoOnNet\roulette\media\Rol.cxm
%Application Data%\CasinoOnNet\roulette\media\rolstrip1.bmp
%Application Data%\CasinoOnNet\roulette\media\rolstrip2.bmp
%Application Data%\CasinoOnNet\roulette\media\RolTableLimits.png
%Application Data%\CasinoOnNet\roulette\media\roul_vip.bmp
%Application Data%\CasinoOnNet\roulette\media\RoulTable.jpga
%Application Data%\CasinoOnNet\roulette\media\wins.bmp
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\1st-off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\1st-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\2nd-off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\2nd-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\3rd-off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\3rd-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\4th-off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\4th-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\5th-off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\5th-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\arrow-left-in.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\arrow-left-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\arrow-right-in.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\arrow-right-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\arrow-up-in.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\arrow-up-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\background.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\bankroll-text.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\betone-in.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\betone-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\coinsfall.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\CreditValueWindow.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\deno-1.png
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\deno-2.png
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\deno-25.png
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\deno-5.png
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\deno-50.png
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\deno-EUR.png
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\deno-EURC.png
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\deno-GBP.png
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\deno-GBPP.png
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\deno-jackpots.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\deno-USD.png
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\deno-USDC.png
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\dollar-in.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\dollar-sign.gif
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\font-big.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\insert-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\InsertCreditdisable.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\InsertCreditdown.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\InsertCreditup.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\jackpot-screen.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\jackpot_lying.png
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\mask-jackpot-table.bmp
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\mask-non-jackpot-table.bmp
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\mask_L_btm.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\mask_L_top.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\mask_M_btm.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\mask_M_top.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\mask_R_btm.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\mask_R_top.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\minus-line-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\payline-diagL-marked.bmp
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\payline-diagL.bmp
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\payline-diagR-marked.bmp
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\payline-diagR.bmp
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\payline-down-marked.bmp
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\payline-down.bmp
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\payline-mid-marked.bmp
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\payline-mid.bmp
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\payline-patch.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\payline-up-marked.bmp
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\payline-up.bmp
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\playmax-in.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\playmax-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\reel-mask.bmp
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\spin-button-in.bmp
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\spin-button-on.bmp
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\spin-in.jpga
%Application Data%\CasinoOnNet\SlotsMedia\lying slot\spin-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\10.jpga
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\12.jpga
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\14.jpga
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\15.jpga
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\16.jpga
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\18.jpga
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\2.jpga
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\20.jpga
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\21.jpga
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\24.jpga
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\30.jpga
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\4.jpga
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\5.jpga
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\6.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\gg-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\gg-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\knockout-1bar-dn-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\knockout-1bar-up-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\knockout-2bar-dn-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\knockout-2bar-up-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\knockout-3bar-dn-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\knockout-3bar-up-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\knockout-belt-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\knockout-belt-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\knockout-glove-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\knockout-glove-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\mega-bar-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\mega-bar-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\mega-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\mega-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\millionare-bag-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\millionare-bag-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\millionare-bonus-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\millionare-bonus-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\millionare-text-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\millionare-text-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\millionare-tres-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\millionare-tres-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\millionare-volt-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\millionare-volt-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\pyramid1-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\pyramid1-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\pyramid2-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\pyramid2-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\pyramid3-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\pyramid3-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\pyramid4-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\pyramid4-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\pyramid5-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\pyramid5-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\spider-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\7.jpga
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\8.jpga
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\Lying_millionairemaker
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\Lying_scratch-anim.bmp
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\Lying_scratch-mask.bmp
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\scratch.mp3
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\Standing_millionairema
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\Standing_scratch-anim.
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\Standing_scratch-mask.
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\welcome_millioner_F.mp
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\welcome_millioner_M.mp
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker\won_scratch.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\63_bet5_16.mp3
%Application Data%\CasinoOnNet\SlotsMedia\Shared\arrow_down.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\arrow_up.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\arrow_white.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\arrow_yellow.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\bet1.mp3
%Application Data%\CasinoOnNet\SlotsMedia\Shared\bet_deno.mp3
%Application Data%\CasinoOnNet\SlotsMedia\Shared\bill_deno.mp3
%Application Data%\CasinoOnNet\SlotsMedia\Shared\click.mp3
%Application Data%\CasinoOnNet\SlotsMedia\Shared\CoinsFall.mp3
%Application Data%\CasinoOnNet\SlotsMedia\Shared\credit.mp3
%Application Data%\CasinoOnNet\SlotsMedia\Shared\credits.wav
%Application Data%\CasinoOnNet\SlotsMedia\Shared\insert_bill.mp3
%Application Data%\CasinoOnNet\SlotsMedia\Shared\lcd-seq.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Shared\Pull_handel.mp3
%Application Data%\CasinoOnNet\SlotsMedia\Shared\punch.mp3
%Application Data%\CasinoOnNet\SlotsMedia\Shared\punch.wav
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\10times-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\10times-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\1bar-green-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\1bar-green-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\1barred-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\1barred-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\1barwhite-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\1barwhite-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\2bar-lblue-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\2bar-lblue-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\2barred-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\2barred-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\2barwhite-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\2barwhite-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\2times-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\2times-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\2timex-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\2timex-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\3bar-ornge-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\3bar-ornge-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\3bar-white-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\3bar-white-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\3barblue-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\3barblue-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\5bar-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\5bar-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\5times-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\5times-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\7black-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\spider-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\spider7bar-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\spider7bar-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\thunder-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\thunder-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\thunder-super-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\thunder-super-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\thunder8-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\thunder8-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\treasure-bonus-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\treasure-bonus-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\treasure-crown-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\treasure-crown-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\treasure-cup-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\treasure-cup-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\treasure-diamond-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\treasure-diamond-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\treasure-twirl-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\treasure-twirl-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\Slot-Arena-Disabled.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Shared\Slot-Arena-in.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Shared\Slot-Arena-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Shared\slotconf.cxm
%Application Data%\CasinoOnNet\SlotsMedia\Shared\slotwinsound.wav
%Application Data%\CasinoOnNet\SlotsMedia\Shared\Spin1.wav
%Application Data%\CasinoOnNet\SlotsMedia\Shared\Spin2.wav
%Application Data%\CasinoOnNet\SlotsMedia\Shared\spin5.wav
%Application Data%\CasinoOnNet\SlotsMedia\Shared\spin6.wav
%Application Data%\CasinoOnNet\SlotsMedia\Shared\spin7.wav
%Application Data%\CasinoOnNet\SlotsMedia\Shared\spin8.wav
%Application Data%\CasinoOnNet\SlotsMedia\Shared\Stop1.mp3
%Application Data%\CasinoOnNet\SlotsMedia\Shared\Stop2.mp3
%Application Data%\CasinoOnNet\SlotsMedia\Shared\stop3.mp3
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\10_TIMES_MO.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\10_TIMES_Off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\10_TIMES_On.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\2_times_extra_MO.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\2_times_extra_Off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\2_times_extra_On.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\2_times_MO.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\2_times_Off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\2_times_On.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\3_lines.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\5_lines.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\5_times_MO.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\5_times_Off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\5_times_On.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Back_Off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Back_On.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Background.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Counter1_2_3_4.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Counter_5.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Counter_6.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\GG_MO.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\GG_Off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\GG_On.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\jackpot-font_N.png
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\KnockOut_Mo.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\KnockOut_Off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\KnockOut_On.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Mega_GG_MO.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Mega_GG_Off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Mega_GG_On.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Million_maker_MO.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Million_maker_Off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Million_maker_On.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Ole_glory_MO.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Ole_glory_Off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Ole_glory_oN.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Pachislo_MO.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Pachislo_Off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Pachislo_On.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\pyramid_MO.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\pyramid_Off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\pyramid_On.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Slots_Ahoy_Mo.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Slots_Ahoy_Off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Slots_Ahoy_On.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Super_thunder_888_MO.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Super_thunder_888_Off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Super_thunder_888_On.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Thundering_MO.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Thundering_Off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Thundering_On.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Title.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Treasure_twirl_Mo.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Treasure_twirl_Off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\Treasure_twirl_On.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\wild_spider_MO.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\wild_spider_Off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena\wild_spider_On.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\1st-off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\1st-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\2nd-off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\2nd-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\3rd-off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\3rd-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\4th-off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\4th-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\5th-off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\5th-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\arrow-left-in.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\arrow-left-off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\arrow-left-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\arrow-right-in.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\arrow-right-off.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\arrow-right-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\arrow-up-in.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\arrow-up-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\background.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\bankroll-text.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\betone-in.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\betone-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\CreditValueWindow.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\deno-1.png
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\deno-2.png
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\deno-25.png
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\deno-5.png
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\deno-50.png
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\deno-EUR.png
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\deno-EURC.png
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\deno-GBP.png
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\deno-GBPP.png
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\deno-jackpots.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\deno-open.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\deno-USD.png
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\deno-USDC.png
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\dollar-in.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\handle.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\InsertCreditdisable.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\InsertCreditdown.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\InsertCreditup.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\jackpot-screen.bmp
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\Jackpot_standing.png
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\mask.bmp
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\mask_L_btm.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\mask_L_top.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\mask_M_btm.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\mask_M_top.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\mask_R_btm.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\mask_R_top.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\minus-line-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\payline-diagL-marked.bmp
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\payline-diagL.bmp
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\payline-diagR-marked.bmp
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\payline-diagR.bmp
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\payline-down-marked.bmp
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\payline-down.bmp
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\payline-mid-marked.bmp
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\payline-mid.bmp
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\payline-up-marked.bmp
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\payline-up.bmp
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\playmax-in.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\playmax-on.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\spin-button-in.bmp
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\spin-button-on.bmp
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\spin-in.jpga
%Application Data%\CasinoOnNet\SlotsMedia\standing slot\spin-on.jpga
%Application Data%\CasinoOnNet\Update\vs0201.zip
%Desktop%\888Casino.lnk
%Program Files%\CasinoOnNet\bin\bass.dll
%Program Files%\CasinoOnNet\bin\BrandConf.cxm
%Program Files%\CasinoOnNet\bin\casino.exe
%Program Files%\CasinoOnNet\bin\casinoApp.exe
%Program Files%\CasinoOnNet\bin\CasinoUtils.dll
%Program Files%\CasinoOnNet\bin\ClientGameHistory.dll
%Program Files%\CasinoOnNet\bin\ExtractZip.dll
%Program Files%\CasinoOnNet\bin\GdiPlus.dll
%Program Files%\CasinoOnNet\bin\mfc80.dll
%Program Files%\CasinoOnNet\bin\Microsoft.VC80.CRT\Microsoft.VC80.CRT.manifest
%Program Files%\CasinoOnNet\bin\Microsoft.VC80.CRT\msvcp80.dll
%Program Files%\CasinoOnNet\bin\Microsoft.VC80.CRT\msvcr80.dll
%Program Files%\CasinoOnNet\bin\Microsoft.VC80.MFC\mfc80.dll
%Program Files%\CasinoOnNet\bin\Microsoft.VC80.MFC\Microsoft.VC80.MFC.manifest
%Program Files%\CasinoOnNet\bin\MmiLib.dll
%Program Files%\CasinoOnNet\bin\msvcp80.dll
%Program Files%\CasinoOnNet\bin\msvcr80.dll
%Program Files%\CasinoOnNet\bin\RegLOG
%Program Files%\CasinoOnNet\INSTALL.LOG
%Program Files%\CasinoOnNet\ListProc.exe
%Program Files%\CasinoOnNet\ProcessList.txt
%Program Files%\CasinoOnNet\pv.exe
%Program Files%\CasinoOnNet\Unwise.exe
%Program Files%\CasinoOnNet\Unwise.ini
%Start Menu%\888Casino.lnk
%Start Menu%\Programs\888Casino\888casino.lnk
%Start Menu%\Programs\888Casino\Uninstall 888Casino.lnk
%Start Menu%\Programs\Games\888Casino.lnk
%User Temp%\setup_2529890\888casino.exe
%User Temp%\setup_2529890\installer.gif
%User Temp%\setup_2529890\text.txt
%Application Data%\CasinoOnNet\Arena\ArCommon\ArenaBlock.png
%Application Data%\CasinoOnNet\Arena\ArCommon\arenageneral.png
%Application Data%\CasinoOnNet\Arena\ArCommon\Arrow_left.png
%Application Data%\CasinoOnNet\Arena\ArCommon\Arrow_right.png
%Application Data%\CasinoOnNet\Arena\ArCommon\BellowArrow.png
%Application Data%\CasinoOnNet\Arena\ArCommon\centerpiece.png
%Application Data%\CasinoOnNet\Arena\ArCommon\JP_BG.png
%Application Data%\CasinoOnNet\Arena\ArCommon\JP_Numbers.png
%Application Data%\CasinoOnNet\Arena\ArCommon\mainarenabkg.png
%Application Data%\CasinoOnNet\Arena\bj\BJ_MHpreview.bmp
%Application Data%\CasinoOnNet\Arena\bj\BJ_preview.bmp
%Application Data%\CasinoOnNet\Arena\bj\bjclassic.png
%Application Data%\CasinoOnNet\Arena\bj\bjcrazy.png
%Application Data%\CasinoOnNet\Arena\bj\bjmultihands.png
%Application Data%\CasinoOnNet\Arena\bj\Crazy_BJ_preview.bmp
%Application Data%\CasinoOnNet\Arena\bj\daconfbj.cxm
%Application Data%\CasinoOnNet\Arena\bj\welcome_Bj_F.mp3
%Application Data%\CasinoOnNet\Arena\bj\welcome_Bj_M.mp3
%Application Data%\CasinoOnNet\Arena\Jackpots\daconfJackpots.cxm
%Application Data%\CasinoOnNet\Arena\Jackpots\welcome_Jackpots_F.mp3
%Application Data%\CasinoOnNet\Arena\Jackpots\welcome_Jackpots_M.mp3
%Application Data%\CasinoOnNet\Arena\lobby\promo.swf
%Application Data%\CasinoOnNet\Arena\Roulette\3DRoulette.png
%Application Data%\CasinoOnNet\Arena\Roulette\3DRoulette_preview.bmp
%Application Data%\CasinoOnNet\Arena\Roulette\daconfRoulette.cxm
%Application Data%\CasinoOnNet\Arena\Roulette\EuroRoulette.png
%Application Data%\CasinoOnNet\Arena\Roulette\LDRoulette.png
%Application Data%\CasinoOnNet\Arena\Roulette\LDRoulette_preview.bmp
%Application Data%\CasinoOnNet\Arena\Roulette\Roulette_preview.bmp
%Application Data%\CasinoOnNet\Arena\Roulette\welcome_Roulette_F.mp3
%Application Data%\CasinoOnNet\Arena\Roulette\welcome_Roulette_M.mp3
%Application Data%\CasinoOnNet\Arena\slot\10tw.png
%Application Data%\CasinoOnNet\Arena\slot\10TW_preview.bmp
%Application Data%\CasinoOnNet\Arena\slot\2tew.png
%Application Data%\CasinoOnNet\Arena\slot\2TEW_preview.bmp
%Application Data%\CasinoOnNet\Arena\slot\2tw.png
%Application Data%\CasinoOnNet\Arena\slot\2TW_preview.bmp
%Application Data%\CasinoOnNet\Arena\slot\5tw.png
%Application Data%\CasinoOnNet\Arena\slot\5TW_preview.bmp
%Application Data%\CasinoOnNet\Arena\slot\daconfslot.cxm
%Application Data%\CasinoOnNet\Arena\slot\do.png
%Application Data%\CasinoOnNet\Arena\slot\DO_preview.bmp
%Application Data%\CasinoOnNet\Arena\slot\gg.png
%Application Data%\CasinoOnNet\Arena\slot\GG_preview.bmp
%Application Data%\CasinoOnNet\Arena\slot\ko.png
%Application Data%\CasinoOnNet\Arena\slot\KO_preview.bmp
%Application Data%\CasinoOnNet\Arena\slot\mg.png
%Application Data%\CasinoOnNet\Arena\slot\MG_preview.bmp
%Application Data%\CasinoOnNet\Arena\slot\mgg.png
%Application Data%\CasinoOnNet\Arena\slot\MGG_preview.bmp
%Application Data%\CasinoOnNet\Arena\slot\og.png
%Application Data%\CasinoOnNet\Arena\slot\OG_preview.bmp
%Application Data%\CasinoOnNet\Arena\slot\pt.png
%Application Data%\CasinoOnNet\Arena\slot\PT_preview.bmp
%Application Data%\CasinoOnNet\Arena\slot\sa.png
%Application Data%\CasinoOnNet\Arena\slot\SA_preview.bmp
%Application Data%\CasinoOnNet\Arena\slot\st888.png
%Application Data%\CasinoOnNet\Arena\slot\ST888_preview.bmp
%Application Data%\CasinoOnNet\Arena\slot\t888.png
%Application Data%\CasinoOnNet\Arena\slot\T888_preview.bmp
%Application Data%\CasinoOnNet\Arena\slot\tt.png
%Application Data%\CasinoOnNet\Arena\slot\TT_preview.bmp
%Application Data%\CasinoOnNet\Arena\slot\ws.png
%Application Data%\CasinoOnNet\Arena\slot\WS_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\BBQ.png
%Application Data%\CasinoOnNet\Arena\vs\BLL.png
%Application Data%\CasinoOnNet\Arena\vs\BLL_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\BTB.png
%Application Data%\CasinoOnNet\Arena\vs\BTB_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\CallofDuty.png
%Application Data%\CasinoOnNet\Arena\vs\CallOfDuty_Prev.bmp
%Application Data%\CasinoOnNet\Arena\vs\CL.png
%Application Data%\CasinoOnNet\Arena\vs\CL_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\Cleo.png
%Application Data%\CasinoOnNet\Arena\vs\CleoPreview.bmp
%Application Data%\CasinoOnNet\Arena\vs\CofG.png
%Application Data%\CasinoOnNet\Arena\vs\CofG_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\CoolB.png
%Application Data%\CasinoOnNet\Arena\vs\CoolB_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\Cubis.png
%Application Data%\CasinoOnNet\Arena\vs\Cubis_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\CubisPrev.bmp
%Application Data%\CasinoOnNet\Arena\vs\FF_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\FFour.png
%Application Data%\CasinoOnNet\Arena\vs\FFour_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\FP.png
%Application Data%\CasinoOnNet\Arena\vs\FP_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\FWK.png
%Application Data%\CasinoOnNet\Arena\vs\FWK_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\GG.png
%Application Data%\CasinoOnNet\Arena\vs\GG_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\GMM.png
%Application Data%\CasinoOnNet\Arena\vs\GMM_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\GT.png
%Application Data%\CasinoOnNet\Arena\vs\GT_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\Hulk.png
%Application Data%\CasinoOnNet\Arena\vs\Hulk_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\HulkPrev.bmp
%Application Data%\CasinoOnNet\Arena\vs\IE.png
%Application Data%\CasinoOnNet\Arena\vs\IE_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\BBQ_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\Bejeweled.png
%Application Data%\CasinoOnNet\Arena\vs\Bejeweled_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\daconfvs.cxm
%Application Data%\CasinoOnNet\Arena\vs\DM.png
%Application Data%\CasinoOnNet\Arena\vs\DM_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\DReef.png
%Application Data%\CasinoOnNet\Arena\vs\DReef_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\DRL.png
%Application Data%\CasinoOnNet\Arena\vs\DRL_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\ESD.png
%Application Data%\CasinoOnNet\Arena\vs\ESD_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\EUR.png
%Application Data%\CasinoOnNet\Arena\vs\EUR_preview.bmp
%Application Data%\CasinoOnNet\Arena\vs\FF.png
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\7black-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\7blue-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\7blue-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\7red-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\7red-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\7white-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\7white-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\ahoy-flag-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\ahoy-flag-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\ahoy-pirat-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\ahoy-pirat-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\blank-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\blank-md.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\cherry-dn.bmp
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results\cherry-md.bmp
%Application Data%\CasinoOnNet\Arena\vs\KingKong.png
%Application Data%\CasinoOnNet\Arena\vs\KingKong_Prev.bmp
%Application Data%\CasinoOnNet\Arena\vs\KM.png

(Note: %Application Data% is the current user's Application Data folder, which is usually C:\Documents and Settings\{user name}\Application Data on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Roaming on Windows Vista and 7.. %Desktop% is the current user's desktop, which is usually C:\Documents and Settings\{User Name}\Desktop on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\Desktop on Windows Vista and 7.. %Program Files% is the default Program Files folder, usually C:\Program Files in Windows 2000, Server 2003, and XP (32-bit), Vista (32-bit), and 7 (32-bit), or C:\Program Files (x86) in Windows XP (64-bit), Vista (64-bit), and 7 (64-bit).. %Start Menu% is the current user's Start Menu folder, which is usually C:\Windows\Start Menu or C:\Documents and Settings\{User name}\Start Menu on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Roaming\Microsoft\Windows\Start Menu on Windows Vista and 7.. %User Temp% is the current user's Temp folder, which is usually C:\Documents and Settings\{user name}\Local Settings\Temp on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Local\Temp on Windows Vista and 7.)

It creates the following folders:

%Application Data%\CasinoOnNet
%Application Data%\CasinoOnNet\Arena
%Application Data%\CasinoOnNet\Arena\ArCommon
%Application Data%\CasinoOnNet\Arena\bj
%Application Data%\CasinoOnNet\Arena\Jackpots
%Application Data%\CasinoOnNet\Arena\lobby
%Application Data%\CasinoOnNet\Arena\Roulette
%Application Data%\CasinoOnNet\Arena\slot
%Application Data%\CasinoOnNet\Arena\vs
%Application Data%\CasinoOnNet\Bj
%Application Data%\CasinoOnNet\Bj\media
%Application Data%\CasinoOnNet\Brand
%Application Data%\CasinoOnNet\Cash
%Application Data%\CasinoOnNet\Cash\media
%Application Data%\CasinoOnNet\FlashGames
%Application Data%\CasinoOnNet\FlashGames\common
%Application Data%\CasinoOnNet\FlashGames\common\language
%Application Data%\CasinoOnNet\Fonts
%Application Data%\CasinoOnNet\Logs
%Application Data%\CasinoOnNet\media
%Application Data%\CasinoOnNet\media\AutoPlay
%Application Data%\CasinoOnNet\media\Caption
%Application Data%\CasinoOnNet\media\Currency
%Application Data%\CasinoOnNet\media\FieldBox
%Application Data%\CasinoOnNet\media\GamePreface
%Application Data%\CasinoOnNet\media\GoTo
%Application Data%\CasinoOnNet\media\Limit
%Application Data%\CasinoOnNet\media\Message
%Application Data%\CasinoOnNet\media\NoShock
%Application Data%\CasinoOnNet\media\Options
%Application Data%\CasinoOnNet\media\Toolbar
%Application Data%\CasinoOnNet\RegLogin
%Application Data%\CasinoOnNet\RegLogin\media
%Application Data%\CasinoOnNet\roulette
%Application Data%\CasinoOnNet\roulette3D
%Application Data%\CasinoOnNet\roulette3D\media
%Application Data%\CasinoOnNet\roulette\media
%Application Data%\CasinoOnNet\SlotsMedia
%Application Data%\CasinoOnNet\SlotsMedia\lying slot
%Application Data%\CasinoOnNet\SlotsMedia\MillionaireMaker
%Application Data%\CasinoOnNet\SlotsMedia\Shared
%Application Data%\CasinoOnNet\SlotsMedia\Shared\results
%Application Data%\CasinoOnNet\SlotsMedia\Slots_Arena
%Application Data%\CasinoOnNet\SlotsMedia\standing slot
%Application Data%\CasinoOnNet\Update
%Application Data%\CasinoOnNet\Utils
%Program Files%\CasinoOnNet
%Program Files%\CasinoOnNet\bin
%Program Files%\CasinoOnNet\bin\Microsoft.VC80.CRT
%Program Files%\CasinoOnNet\bin\Microsoft.VC80.MFC
%Start Menu%\Programs\888Casino
%Start Menu%\Programs\Games
%User Temp%\setup_2529890

(Note: %Application Data% is the current user's Application Data folder, which is usually C:\Documents and Settings\{user name}\Application Data on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Roaming on Windows Vista and 7.. %Program Files% is the default Program Files folder, usually C:\Program Files in Windows 2000, Server 2003, and XP (32-bit), Vista (32-bit), and 7 (32-bit), or C:\Program Files (x86) in Windows XP (64-bit), Vista (64-bit), and 7 (64-bit).. %Start Menu% is the current user's Start Menu folder, which is usually C:\Windows\Start Menu or C:\Documents and Settings\{User name}\Start Menu on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Roaming\Microsoft\Windows\Start Menu on Windows Vista and 7.. %User Temp% is the current user's Temp folder, which is usually C:\Documents and Settings\{user name}\Local Settings\Temp on Windows 2000, XP, and Server 2003, or C:\Users\{user name}\AppData\Local\Temp on Windows Vista and 7.)

Other System Modifications

This adware adds the following registry keys as part of its installation routine:

HKEY_CURRENT_USER\Software\casinoonnet

HKEY_CURRENT_USER\Software\casinonetInstaller

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
888Casino

Download Routine

This adware accesses the following websites to download files:

setupscon1.{BLOCKED}8.com
setupscon2.{BLOCKED}8.com
setupscon3.{BLOCKED}8.com

Other Details

This adware connects to the following possibly malicious URL:

reportinstaller.{BLOCKED}ogic.com
flash.{BLOCKED}8.com/start.asp

ADW_CASINONET

OVERVIEW

TECHNICAL DETAILS

Resources

Support

About Trend

Country Headquarters

ADW_CASINONET

OVERVIEW

TECHNICAL DETAILS

Resources

Support

About Trend

Country Headquarters

The Americas

Middle East & Africa

Europe

Asia & Pacific