Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Internet Explorer\Extensions\{DE60714F-AC17-427e-861A-FD60CBDF119A}] 'Exec' = 'http://adfarm.mediaplex.com/ad/ck/4080-23171-9517-219?cn=song;icon;hp&mpro=http://www.ebay.com.cn'
- C:\mstmp\install\Setup.exe
- C:\mstmp\install\tmp.html
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\4080-23171-9517-220[1].cn
- %HOMEPATH%\Desktop\ТЧИ¤№єОп.lnk
- %HOMEPATH%\Start Menu\Programs\ТЧИ¤№єОп.lnk
- %HOMEPATH%\Start Menu\ТЧИ¤№єОп.lnk
- <SYSTEM32>\ebayicon\ebay1.ico
- C:\mstmp\install\ebay.ico
- C:\mstmp\install\ebay1.ico
- C:\mstmp\install\web.txt
- <SYSTEM32>\ebayicon\ebay.ico
- C:\mstmp\install\Setup.exe
- C:\mstmp\install\ebay.ico
- C:\mstmp\install\ebay1.ico
- C:\mstmp\install\web.txt
- C:\mstmp\install\tmp.html
- 'ad####.mediaplex.com':80
- 'localhost':1035
- ad####.mediaplex.com/ad/ck/4080-23171-9517-220?cn#########################################
- DNS ASK ad####.mediaplex.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''