Техническая информация
- %PROGRAM_FILES%\powerwordlite.37762.0.exe
- %PROGRAM_FILES%\powerwordlite.37762.0.exe (загружен из сети Интернет)
- %PROGRAM_FILES%\powerwordlite.37762.0.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\downloadpwLite[1].php
- 'do####ad.iciba.com':80
- do####ad.iciba.com/upwl/downloadpwLite.php?ui#################################
- DNS ASK do####ad.iciba.com
- ClassName: '#32770' WindowName: '?????????????????? ????'