Техническая информация
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- %TEMP%\ish237328\images\ProgressBar.png
- %TEMP%\ish237328\images\Progress.png
- %TEMP%\ish237328\locale\EN.locale
- %TEMP%\ish237328\images\sponsored.png
- %TEMP%\ish237328\images\Grey_Button_Hover.png
- %TEMP%\ish237328\images\Grey_Button.png
- %TEMP%\ish237328\images\Logo.png
- %TEMP%\ish237328\images\Loader.gif
- %TEMP%\0003C063.log
- %TEMP%\0003BF2A.log
- %HOMEPATH%\Desktop\Continue Live Installation.lnk
- %TEMP%\ICReinstall_<Имя вируса>.exe
- %PROGRAM_FILES%\is244468.log
- %TEMP%\ish237328\bootstrap_47456.html
- %TEMP%\0003BEDC.log
- %TEMP%\ish237328\images\Color_Button_Hover.png
- %TEMP%\ish237328\css\sdk-ui\checkbox.css
- %TEMP%\ish237328\css\sdk-ui\button.css
- %TEMP%\ish237328\css\sdk-ui\images\progress-bg-corner.png
- %TEMP%\ish237328\css\sdk-ui\images\button-bg.png
- %TEMP%\ish237328\css\ie6_main.css
- %TEMP%\00039EE1.log
- %TEMP%\ish237328\css\sdk-ui\browse.css
- %TEMP%\ish237328\css\main.css
- %TEMP%\ish237328\images\Close.png
- %TEMP%\ish237328\images\BG.png
- %TEMP%\ish237328\images\Color_Button.png
- %TEMP%\ish237328\images\Close_Hover.png
- %TEMP%\ish237328\css\sdk-ui\images\progress-bg2.png
- %TEMP%\ish237328\css\sdk-ui\images\progress-bg.png
- %TEMP%\ish237328\csshover3.htc
- %TEMP%\ish237328\css\sdk-ui\progress-bar.css
- %TEMP%\ish237328\bootstrap_47456.html
- %TEMP%\0003C063.log
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- %PROGRAM_FILES%\is244468.log
- %TEMP%\00039EE1.log
- %TEMP%\0003BF2A.log
- %TEMP%\0003BEDC.log
- 'os#.###ckmeinstats.com':80
- 'www.do#####d-servers.com':80
- 'os.####kmeinstats.com':80
- www.do#####d-servers.com/Generic/Generic_iw.cis
- os#.###ckmeinstats.com/ClickMeIn_NETW/?v=################
- os.####kmeinstats.com/ClickMeIn_NETW/?v=################
- DNS ASK os#.###ckmeinstats.com
- DNS ASK www.do#####d-servers.com
- DNS ASK os.####kmeinstats.com
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''