Technical Information
- '' (downloaded from the Internet)
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- %ProgramFiles%\CompanyExpertChange\ExpertChange\autorun.exe
- %ProgramFiles%\CompanyExpertChange\ExpertChange\wxmsw28u_vc_ash.dll
- %ProgramFiles%\CompanyExpertChange\ExpertChange\content.aed
- %ProgramFiles%\CompanyExpertChange\ExpertChange\Install(1).exe
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\clipper[1].txt
- %TEMP%\5.94974640011787.tmp
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\miner[1].txt
- %TEMP%\2.7174743800424.tmp
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\2.tmp
- 'st####rftp.ucoz.net':80
- 'ip###ger.com':443
- http://st####rftp.ucoz.net/Miner/loader/clipper.txt
- http://st####rftp.ucoz.net/Miner/loader/miner.txt
- DNS ASK st####rftp.ucoz.net
- DNS ASK ip###ger.com
- '%ProgramFiles%\CompanyExpertChange\ExpertChange\Install(1).exe'
- '%ProgramFiles%\CompanyExpertChange\ExpertChange\autorun.exe'
- '%TEMP%\5.94974640011787.tmp'
- '%TEMP%\2.7174743800424.tmp'