Техническая информация
- '%TEMP%\nsh2.tmp\setfin.exe' /s=9999 /pid=950AA467-C51E-4488-B5B5-5C6F09ECFAA4 /fid=en
- firefox.exe
- %TEMP%\nsh2.tmp\fall\fextend.xpi
- %TEMP%\nsh2.tmp\ZipDLL.dll
- %TEMP%\nsh2.tmp\setfin.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\addon[1]
- %TEMP%\nsh2.tmp\nsProcess.dll
- %TEMP%\nsh2.tmp\System.dll
- %TEMP%\nsh2.tmp\inetc.dll
- %TEMP%\nsh2.tmp\nsProcess.dll
- %TEMP%\nsh2.tmp\System.dll
- %TEMP%\nsh2.tmp\ZipDLL.dll
- %TEMP%\nsh2.tmp\setfin.exe
- %TEMP%\nsh2.tmp\fall\fextend.xpi
- %TEMP%\nsh2.tmp\inetc.dll
- 'ut###.#imilargroup.com':80
- ut###.#imilargroup.com/addon?s=#########
- DNS ASK tr###.#edia-traffic.net
- DNS ASK www.go#####analytics.com
- DNS ASK ut###.#imilargroup.com
- ClassName: '#32770' WindowName: '(null)'