Technical Information
- '' (downloaded from the Internet)
- %TEMP%\is-7U43F.tmp\<File name>.tmp
- %TEMP%\is-AFOCG.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-AFOCG.tmp\itdownload.dll
- %TEMP%\is-AFOCG.tmp\netstream.exe
- %TEMP%\is-AFOCG.tmp\SetupZippy.exe
- %TEMP%\is-FNCRO.tmp\SetupZippy.tmp
- %TEMP%\is-5U61D.tmp\_isetup\_shfoldr.dll
- %ProgramFiles%\Zippy\is-AEQIO.tmp
- %TEMP%\is-AFOCG.tmp\itdownload.dll
- %TEMP%\is-AFOCG.tmp\netstream.exe
- %TEMP%\is-AFOCG.tmp\SetupZippy.exe
- %TEMP%\is-AFOCG.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-7U43F.tmp\<File name>.tmp
- from %ProgramFiles%\Zippy\is-AEQIO.tmp to %ProgramFiles%\Zippy\unins000.exe
- 'al####oudmedia.com':80
- http://al####oudmedia.com/tunnel/netstream.exe
- DNS ASK al####oudmedia.com
- '%TEMP%\is-7U43F.tmp\<File name>.tmp' /SL5="$30092,503646,106496,<Full path to file>"
- '%TEMP%\is-AFOCG.tmp\netstream.exe' /pubid=9 /subid=9
- '%TEMP%\is-AFOCG.tmp\SetupZippy.exe' /VerySilent
- '%TEMP%\is-FNCRO.tmp\SetupZippy.tmp' /SL5="$300E2,94127,56832,%TEMP%\is-AFOCG.tmp\SetupZippy.exe" /VerySilent