Техническая информация
- %PROGRAM_FILES%\1ClickDownload\gz.exe -d -q "YourDownload4022.torrent.gz"
- %PROGRAM_FILES%\1ClickDownload\gz.exe (загружен из сети Интернет)
- %TEMP%\nsh2.tmp\accept1.bmp
- %TEMP%\nsh2.tmp\accept2.bmp
- %TEMP%\nsh2.tmp\skip.bmp
- %TEMP%\nsh2.tmp\accept.bmp
- %TEMP%\nsh2.tmp\accept3.bmp
- %TEMP%\nsh2.tmp\anon.bmp
- %TEMP%\nsh2.tmp\1clogo.bmp
- %TEMP%\nsh2.tmp\decline.bmp
- %TEMP%\nsh2.tmp\save.bmp
- %TEMP%\nsh2.tmp\nsDialogs.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\country[1].asp
- %TEMP%\nsh2.tmp\gC0
- %TEMP%\nsh2.tmp\System.dll
- %TEMP%\nsh2.tmp\inetc3.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\country[1].asp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\MainPackFA_2702[1].exe
- %PROGRAM_FILES%\1ClickDownload\ocmainpack.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\gzip2[1].exe
- %PROGRAM_FILES%\1ClickDownload\gz.exe
- 'fi###.#ownload1click.ws':80
- 'da##.###nloadstarter.net':80
- 'da##.##-software.com':80
- fi###.#ownload1click.ws/gzip2.exe
- fi###.#ownload1click.ws/MainPackFA_2702.exe
- da##.##-software.com/country.asp?st###################################################################
- da##.###nloadstarter.net/country.asp?st###################################################################
- DNS ASK fi###.#ownload1click.ws
- DNS ASK da##.###nloadstarter.net
- DNS ASK da##.##-software.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '#32770' WindowName: ''