Техническая информация
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\WhiteSmoke 2011.lnk
- %TEMP%\~nsu.tmp\WhiteSmoke2011.exe
- %TEMP%\~nsu.tmp\WhiteSmoke2011.exe.part
- %TEMP%\~nsu.tmp\Fun4IMV6.exe.part
- %HOMEPATH%\Desktop\WhiteSmoke (continue installation).lnk
- %TEMP%\~nsu.tmp\Fun4IMV6.exe
- 'c0######.###2.cloudfiles.rackspacecloud.com':80
- 'do####ad.bandoo.com':80
- c0######.###2.cloudfiles.rackspacecloud.com/WhiteSmoke2011.exe
- do####ad.bandoo.com/o/0/r/54/Fun4IMV6.exe
- DNS ASK c0######.###2.cloudfiles.rackspacecloud.com
- DNS ASK do####ad.bandoo.com
- ClassName: 'Shell_TrayWnd' WindowName: ''