Техническая информация
- '%PROGRAM_FILES%\Mediaweb\PicaTabbar\picatabbar.exe' Y;<Полный путь к вирусу>;mediaweb
- %PROGRAM_FILES%\Mediaweb\PicaTabbar\picatabbar.ini
- %TEMP%\nsq2.tmp\System.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\pcfchk[1].htm
- %PROGRAM_FILES%\Mediaweb\PicaTabbar\uninstallnui.exe
- %PROGRAM_FILES%\Mediaweb\PicaTabbar\readme.txt
- %PROGRAM_FILES%\Mediaweb\PicaTabbar\picatabbar.exe
- %PROGRAM_FILES%\Mediaweb\PicaTabbar\picatabbar.dll
- %PROGRAM_FILES%\Mediaweb\PicaTabbar\picatbva.exe
- %PROGRAM_FILES%\Mediaweb\PicaTabbar\picatbrn.exe
- %PROGRAM_FILES%\Mediaweb\PicaTabbar\uninstallnui.exe
- %TEMP%\nsq2.tmp\System.dll
- 'do#####d.tabbar.co.kr':80
- 'en#.##bbar.co.kr':80
- do#####d.tabbar.co.kr/tabap/uninstallnui.exe
- en#.##bbar.co.kr/pcfchk.php
- DNS ASK do#####d.tabbar.co.kr
- DNS ASK en#.##bbar.co.kr
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'