Техническая информация
- %TEMP%\~nsu0.tmp\Fun4IMV6.exe (загружен из сети Интернет) "%PROGRAM_FILES%\WhiteSmoke"
- %TEMP%\~nsu0.tmp\ws-get.exe "%PROGRAM_FILES%\WhiteSmoke"
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\Fun4IMV6[1].exe
- %TEMP%\~nsu0.tmp\Fun4IMV6.exe
- %TEMP%\~nsu0.tmp\Fun4IMV6.exe .part
- %TEMP%\~nsu0.tmp\boost.ico
- %HOMEPATH%\Desktop\Improve Your PC.lnk
- %TEMP%\~nsu0.tmp\ws-get.exe
- 'ge#.##itesmoke.com':80
- 'do####ad.bandoo.com':80
- ge#.##itesmoke.com/WriterTools/WhiteSmokeWriter.exe
- do####ad.bandoo.com/o/0/r/54/Fun4IMV6.exe
- DNS ASK ge#.##itesmoke.com
- DNS ASK do####ad.bandoo.com
- '<IP-адрес в локальной сети>':1035