Техническая информация
- '%TEMP%\~nsu.tmp\Fun4IMV6.exe' "%PROGRAM_FILES%\WhiteSmoke"
- '%TEMP%\~nsu.tmp\wsget.exe' "%PROGRAM_FILES%\WhiteSmoke"
- '%TEMP%\~nsu.tmp\Fun4IMV6.exe' (загружен из сети Интернет)
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\Fun4IMV6[1].exe
- %TEMP%\~nsu.tmp\Fun4IMV6.exe
- %HOMEPATH%\Desktop\Improve Your PC.lnk
- %TEMP%\~nsu.tmp\wsget.exe
- %TEMP%\~nsu.tmp\boost.ico
- 'ge#.##itesmoke.com':80
- 'do####ad.bandoo.com':80
- ge#.##itesmoke.com/WriterTools/WhiteSmokeWriter.exe
- do####ad.bandoo.com/o/0/r/54/Fun4IMV6.exe
- DNS ASK ge#.##itesmoke.com
- DNS ASK do####ad.bandoo.com