Техническая информация
- %APPDATA%\temp\adInstall_ad019.exe /SILENT
- %APPDATA%\temp\addmatch1.exe
- %APPDATA%\temp\adInstall_ad019.exe (загружен из сети Интернет)
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\adInstall_ad019[1].exe
- %TEMP%\nsc6.tmp\nsCommands3.dll
- %TEMP%\nsc6.tmp\nsCmds.dll
- %APPDATA%\temp\adInstall_ad019.exe
- %TEMP%\nsr5.tmp
- %APPDATA%\temp\addmatch1.exe
- %TEMP%\nsk2.tmp
- %TEMP%\nsp3.tmp\nsCmds.dll
- %TEMP%\nsp3.tmp\nsCommands3.dll
- %TEMP%\nsc6.tmp\nsCommands3.dll
- %APPDATA%\temp\addmatch1.exe
- %TEMP%\nsc6.tmp\nsCmds.dll
- %TEMP%\nsp3.tmp\nsCmds.dll
- %TEMP%\nsp3.tmp\nsCommands3.dll
- 'do##.##matching.co.kr':80
- do##.##matching.co.kr/adInstall_ad019.exe
- DNS ASK do##.##matching.co.kr