Техническая информация
- '%TEMP%\kingsoftkonline\KINSTALLERS_66_4488.exe' /s
- '%WINDIR%\Temp\KINSTALLERS_66_4488.exe'
- '%TEMP%\kingsoftkonline\KINSTALLERS_66_4488.exe' (загружен из сети Интернет)
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\3qv0t[1]
- %TEMP%\kingsoftkonline\KINSTALLERS_66_4488.exe.tmp
- %WINDIR%\Temp\KINSTALLERS_66_4488.exe
- %WINDIR%\Temp\ClearCookies.exe
- %TEMP%\kingsoftkonline\KINSTALLERS_66_4488.exe.tmp в %TEMP%\kingsoftkonline\KINSTALLERS_66_4488.exe
- 'bo.###a.net:8080':80
- 'cd###.www.duba.net':80
- 'localhost':1035
- 're#.so':80
- cd###.www.duba.net/duba/install/2011/ever/akavsetups_66_0.exe
- bo.###a.net:8080/pagetracer2/duba/__utm.gif?01#####################################################################################################################
- re#.so/3qv0t
- DNS ASK cd###.www.duba.net
- DNS ASK bo.###a.net:8080
- DNS ASK re#.so
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''