Technical Information
- '' (downloaded from the Internet)
- %TEMP%\nsm2.tmp
- %TEMP%\nsh3.tmp\System.dll
- %APPDATA%\1337\winhost (2).exe
- %APPDATA%\1337\adguardInstaller.exe
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\setup[1].exe
- %TEMP%\adguard\setup.exe
- %TEMP%\nsh3.tmp\System.dll
- 'st####.adguard.com':80
- http://st####.adguard.com/windows/setup.exe
- DNS ASK st####.adguard.com
- '%APPDATA%\1337\adguardInstaller.exe'
- '%TEMP%\adguard\setup.exe' AID=18675