Техническая информация
- '%TEMP%\FunshionInstall.exe' /S
- '%TEMP%\txtbook.exe' /S
- '%TEMP%\FunshionInstall.exe' (загружен из сети Интернет)
- '%TEMP%\txtbook.exe' (загружен из сети Интернет)
- '%WINDIR%\regedit.exe' -s "%TEMP%\ime"
- %TEMP%\nsy2.tmp\NSISdl.dll
- %PROGRAM_FILES%\Internet Explorer\22.ico
- %TEMP%\FunshionInstall.exe
- %TEMP%\txtbook.exe
- %PROGRAM_FILES%\Internet Explorer\21.ico
- %TEMP%\21
- %TEMP%\nsy2.tmp\System.dll
- %TEMP%\ime
- %TEMP%\22
- %TEMP%\nsy2.tmp\NSISdl.dll
- %TEMP%\nsy2.tmp\System.dll
- %TEMP%\txtbook.exe
- %TEMP%\FunshionInstall.exe
- 'ne#####.funshion.com':80
- 'bo##.17wyd.com':80
- ne#####.funshion.com/download/silent/67230/FunshionInstall.exe
- bo##.17wyd.com/down_100/setup_0.exe
- DNS ASK ne#####.funshion.com
- DNS ASK bo##.17wyd.com
- ClassName: 'RegEdit_RegEdit' WindowName: '(null)'