Trojan.Click2.26398

Technical Information

Malicious functions:

Creates and executes the following:

%WINDIR%\Aleks\unzip.exe -o -u -q %WINDIR%\\Aleks\aleksPack10.jar -d %WINDIR%\\java\Classes
%WINDIR%\Installer\MSIA.tmp %WINDIR%\\Aleks\processCommand.bat %WINDIR%\\Aleks\unzip.exe -o -u -q %WINDIR%\\Aleks\aleksPack10.jar -d %WINDIR%\\java\Classes
%WINDIR%\Installer\MSIB.tmp %WINDIR%\\Aleks\processCommand.bat COPY /Y %WINDIR%\\Aleks\aleksPack10.jar "\lib\ext"
%WINDIR%\Installer\MSID.tmp %WINDIR%\\Aleks\processCommand.bat RMDIR /S /Q "%ALLUSERSPROFILE%\Start Menu\\Programs\Aleks Plugin 3.11"
%WINDIR%\Installer\MSIC.tmp %WINDIR%\\Aleks\processCommand.bat COPY /Y %WINDIR%\\Aleks\aleksPack10.jar "%PROGRAM_FILES%\\Netscape\Communicator\Program\Java\download"
%WINDIR%\Installer\MSI3.tmp %WINDIR%\\Aleks\processCommand.bat DEL /F /Q %WINDIR%\\Aleks\aleksPack10.jar
%WINDIR%\Installer\MSI2.tmp %WINDIR%\\Aleks\processCommand.bat taskkill /f /im unzip.exe
%WINDIR%\Installer\MSI4.tmp %WINDIR%\\Aleks\processCommand.bat DEL /F /Q "\lib\ext\aleksPack10.jar"
%WINDIR%\Installer\MSI6.tmp %WINDIR%\\Aleks\processCommand.bat RMDIR /S /Q %WINDIR%\\java\Classes\aleksPack10
%WINDIR%\Installer\MSI5.tmp %WINDIR%\\Aleks\processCommand.bat DEL /F /Q "%PROGRAM_FILES%\\Netscape\Communicator\Program\Java\download\aleksPack10.jar"

Executes the following:

<SYSTEM32>\cmd.exe /c %WINDIR%\\Aleks\processCommand.bat RMDIR /S /Q "%ALLUSERSPROFILE%\Start Menu\\Programs\Aleks Plugin 3.11"
<SYSTEM32>\cmd.exe /c %WINDIR%\\Aleks\processCommand.bat COPY /Y %WINDIR%\\Aleks\aleksPack10.jar "%PROGRAM_FILES%\\Netscape\Communicator\Program\Java\download"
%PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://www.al##s.com
<SYSTEM32>\taskkill.exe /im iexplore.exe
<SYSTEM32>\cmd.exe /c %WINDIR%\\Aleks\processCommand.bat COPY /Y %WINDIR%\\Aleks\aleksPack10.jar "\lib\ext"
<SYSTEM32>\msiexec.exe /i "<Current directory>\aleks314.msi" /passive
<SYSTEM32>\cmd.exe /c ""%TEMP%\1.tmp\ALEKS.BAT" "
<SYSTEM32>\cmd.exe /c %WINDIR%\\Aleks\processCommand.bat %WINDIR%\\Aleks\unzip.exe -o -u -q %WINDIR%\\Aleks\aleksPack10.jar -d %WINDIR%\\java\Classes
<SYSTEM32>\msiexec.exe /V

Modifies file system :

Creates the following files:

%WINDIR%\java\classes\aleksPack10\menubar\ParseBtScicalculator.class
%WINDIR%\java\classes\aleksPack10\menubar\ksMenubar.class
%WINDIR%\java\classes\aleksPack10\menubar\MediaMenubarFiged.class
%WINDIR%\java\classes\aleksPack10\menubar\BtBase.class
%WINDIR%\java\classes\aleksPack10\menubar\Bt.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtDisjunction.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtBoxBoxText.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtUnit.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtCopyFromCalc.class
%WINDIR%\java\classes\aleksPack10\menubar\media\ksMenuMediaCanvas.class
%WINDIR%\java\classes\aleksPack10\menubar\media\ksMenubarMedia.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtTabedFS.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtPi.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtSciNotMedia.class
%WINDIR%\java\classes\aleksPack10\menubar\ksMenuScrollbar.class
%WINDIR%\java\classes\aleksPack10\menubar\BtBaseImagePopup2.class
%WINDIR%\java\classes\aleksPack10\menubar\BtMenu.class
%WINDIR%\java\classes\aleksPack10\menubar\BtBaseImagePopup.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\ksMenubarAnsed.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtGreaterEqual.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtTimes.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtPlusMinus.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtDivs.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtOr.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtListItem2.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtChisqInv.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtPercent.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtChemArrow2.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtFischerInv.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtSymbol.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtNormalCDF.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtEvalEqual.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtFraction2.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtLn.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtPlusMinus1.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtEquivalent.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtInfinitelyMany.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtDot2.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtTabed.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtFraction2.class
%WINDIR%\java\classes\aleksPack10\menubar\MediaMenubarPloted.class
%WINDIR%\java\classes\aleksPack10\menubar\ksMenuCanvas.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtChemArrowMedia.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtSquareRoot.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtSciNotMedia2.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtPow.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtChemMathMedia.class
%WINDIR%\java\classes\aleksPack10\menubar\animator\ksMenubarAnimator.class
%WINDIR%\java\classes\aleksPack10\menubar\animator\BtPause.class
%WINDIR%\java\classes\aleksPack10\menubar\tabed\BtPlusRow.class
%WINDIR%\java\classes\aleksPack10\menubar\animator\BtFF.class
%WINDIR%\java\classes\aleksPack10\menubar\animator\BtStop.class
%WINDIR%\java\classes\aleksPack10\menubar\ParseBtPloted.class
%WINDIR%\java\classes\aleksPack10\menubar\PanelImage.class
%WINDIR%\java\classes\aleksPack10\menubar\animator\ksMenuAnimatorCanvas.class
%WINDIR%\java\classes\aleksPack10\menubar\PanelImage2.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtDegreeBox2.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtDot.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtList2.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtList.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtBaseMedia.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtDegreeBox.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtPloted1.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtFraction.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtNoButton.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtFiged12.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtIndex.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtPow2.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtIndex2.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtLewised.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtPi2.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtFiged1.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtSquareRoot2.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtFiged2.class
%WINDIR%\java\classes\aleksPack10\menubar\media\BtTabedJE.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtNoMode.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtEquals.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtLim.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtPopupText.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtLeftSub.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtSuchThat.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtLessEqual.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtSub2.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtSupSub.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtPi2.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtParallelFr.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtNotEqual.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtSigma.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtLeftSupSub.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtStudentInv.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtDoesNotExist.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtSciNot.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtAbs.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtUnion.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtChemDblArrow.class
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\aleks[1]
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtPar.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtComp.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtArc.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtDegree.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtBar.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\ksMenuAnsedCanvas.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtRatio.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtCongruent.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtPlus.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtComplexI.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtCantFactor.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtConjunction.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtSegment.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtChemArrow.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtSquareRoot2.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtChisqCDF.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtSecond.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtBaseAnsed.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtSup2.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtDegreeBox2.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtMinus.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtMu.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtXinR.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtRecall2.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtGreaterEqualFR.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtTriangle.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtEquals3.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtSquareRoot.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtExp.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtNegInfinity.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtRad.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtSup.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtInfinity.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtVector2.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtAnd.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtMatrix.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtZ.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtSub.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtAltConjunction.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtClassicFn.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtRay.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtLog.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtNoSolution.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtBoxText.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtIn.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtNRoot.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtEquals2.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtInterval.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtSet.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtPerpendicular.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtFischerCDF.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtSegmentFr.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtLeftSup.class
%WINDIR%\java\classes\aleksPack10\menubar\ansed\BtMinute.class
%WINDIR%\java\classes\META-INF\MANIFEST.MF
%WINDIR%\java\classes\aleksPack10\Special.class
%WINDIR%\Installer\MSIA.tmp
%WINDIR%\Installer\MSIB.tmp
%WINDIR%\java\classes\aleksPack10\jdk\ItemListener.class
%WINDIR%\java\classes\aleksPack10\jdk\FocusEvent.class
%WINDIR%\java\classes\aleksPack10\jdk\MyButton.class
%WINDIR%\java\classes\aleksPack10\jdk\MyCheckboxGroup.class
%WINDIR%\java\classes\aleksPack10\jdk\TabListener.class
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\RestorePointSize
%WINDIR%\Aleks\unzip.exe
C:\Config.Msi\1f52b.rbs
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\OBJECTS.MAP
%WINDIR%\Aleks\processCommand.bat
%WINDIR%\Installer\{B683CDD1-953F-4718-816F-2FDDCEF6DD70}\INSTICON.ico
%WINDIR%\Installer\{B683CDD1-953F-4718-816F-2FDDCEF6DD70}\REMOVICO.ico
%WINDIR%\Aleks\aleksPack10.jar
%ALLUSERSPROFILE%\Start Menu\Programs\ALEKS Plugin 3.11\Uninstall.lnk
%WINDIR%\java\classes\aleksPack10\jdk\MouseListener.class
%WINDIR%\java\classes\aleksPack10\jdk\Adjustable.class
%WINDIR%\java\classes\aleksPack10\jdk\MyCheckboxGroupUser.class
%WINDIR%\java\classes\aleksPack10\jdk\MouseWheelListener.class
%WINDIR%\java\classes\aleksPack10\jdk\MouseEvent.class
%WINDIR%\java\classes\aleksPack10\jdk\MyComponent.class
%WINDIR%\Installer\MSID.tmp
%WINDIR%\java\classes\aleksPack10\jdk\MouseWheelEvent.class
%WINDIR%\java\classes\aleksPack10\jdk\MyCheckbox.class
%WINDIR%\java\classes\aleksPack10\jdk\ActionEvent.class
%WINDIR%\java\classes\aleksPack10\jdk\KeyListener.class
%WINDIR%\java\classes\aleksPack10\jdk\MyChoice.class
%WINDIR%\Installer\MSIC.tmp
%WINDIR%\java\classes\aleksPack10\jdk\FocusListener.class
%WINDIR%\java\classes\aleksPack10\jdk\MyImage.class
%WINDIR%\java\classes\aleksPack10\jdk\Cursor.class
%WINDIR%\java\classes\aleksPack10\jdk\ItemEvent.class
%WINDIR%\java\classes\aleksPack10\jdk\ActionListener.class
%WINDIR%\java\classes\aleksPack10\jdk\AdjustmentListener.class
%WINDIR%\Installer\MSI7.tmp
%WINDIR%\Installer\MSI6.tmp
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\rp.log
%WINDIR%\Installer\MSI4.tmp
%WINDIR%\Installer\MSI5.tmp
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19
%WINDIR%\Installer\1f528.msi
%APPDATA%\Microsoft\CryptnetUrlCache\MetaData\74BFD122C0875EC75DBE5C6DB4C59019
%TEMP%\1.tmp\ALEKS.BAT
<Current directory>\aleks314.msi
%APPDATA%\Microsoft\CryptnetUrlCache\Content\74BFD122C0875EC75DBE5C6DB4C59019
%WINDIR%\Installer\MSI2.tmp
%WINDIR%\Installer\MSI3.tmp
%APPDATA%\Microsoft\CryptnetUrlCache\MetaData\486CC6AFD08942336C61FCD401C4A1D1
%APPDATA%\Microsoft\CryptnetUrlCache\Content\486CC6AFD08942336C61FCD401C4A1D1
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2052111302-484763869-725345543-1003
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\INDEX.BTR
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP15\drivetable.txt
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\$WinMgmt.CFG
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\INDEX.MAP
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING2.MAP
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\OBJECTS.DATA
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING.VER
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING1.MAP
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SECURITY
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SOFTWARE
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2052111302-484763869-725345543-1003
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_.DEFAULT
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SYSTEM
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\domain.txt
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\drivetable.txt
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SAM
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\ComDb.Dat
%WINDIR%\java\classes\aleksPack10\menubar\MediaMenubar.class
%WINDIR%\java\classes\aleksPack10\menubar\ploted\BtMinusBar.class
%WINDIR%\java\classes\aleksPack10\boot\BootServer.class
%WINDIR%\java\classes\aleksPack10\boot\Height.class
%WINDIR%\java\classes\aleksPack10\menubar\ploted\BtEraserX.class
%WINDIR%\java\classes\aleksPack10\menubar\ploted\BtPlusBar.class
%WINDIR%\java\classes\aleksPack10\menubar\ploted\ksMenuPlotedCanvas.class
%WINDIR%\java\classes\aleksPack10\menubar\ploted\BtPencilX.class
%WINDIR%\java\classes\aleksPack10\menubar\ploted\BtDrawY.class
%WINDIR%\java\classes\aleksPack10\tabed\Cell.class
%WINDIR%\java\classes\aleksPack10\tabed\ScrollbarTabEd.class
%WINDIR%\java\classes\aleksPack10\tabed\TabEdMac.class
%WINDIR%\java\classes\aleksPack10\tabed\DefineImage.class
%WINDIR%\java\classes\aleksPack10\tabed\CellMac.class
%WINDIR%\java\classes\aleksPack10\boot\Module.class
%WINDIR%\java\classes\aleksPack10\boot\BootServer2.class
%WINDIR%\java\classes\aleksPack10\tabed\TextFieldTabEd.class
%WINDIR%\java\classes\aleksPack10\tabed\TabEd.class
%WINDIR%\java\classes\aleksPack10\menubar\ploted\BtNoButton.class
%WINDIR%\java\classes\aleksPack10\menubar\tabed\BtAddPar.class
%WINDIR%\java\classes\aleksPack10\menubar\tabed\ksMenuTabedCanvas.class
%WINDIR%\java\classes\aleksPack10\menubar\tabed\BtDelCol.class
%WINDIR%\java\classes\aleksPack10\menubar\tabed\ksMenubarTabed.class
%WINDIR%\java\classes\aleksPack10\menubar\tabed\BtDelPar.class
%WINDIR%\java\classes\aleksPack10\menubar\tabed\BtPlusCol.class
%WINDIR%\java\classes\aleksPack10\menubar\tabed\BtNoButton.class
%WINDIR%\java\classes\aleksPack10\menubar\tabed\BtBBSimple.class
%WINDIR%\java\classes\aleksPack10\menubar\tabed\BtBBDouble.class
%WINDIR%\java\classes\aleksPack10\menubar\ploted\BtBasePloted.class
%WINDIR%\java\classes\aleksPack10\menubar\ploted\BtDrawY2.class
%WINDIR%\java\classes\aleksPack10\menubar\ploted\BtDrawYWhisker.class
%WINDIR%\java\classes\aleksPack10\menubar\ploted\ksMenubarPloted.class
%WINDIR%\java\classes\aleksPack10\menubar\ploted\BtEraser.class
%WINDIR%\java\classes\aleksPack10\menubar\ParseBtCalculator.class
%WINDIR%\java\classes\aleksPack10\menubar\tabed\BtDelRow.class
%WINDIR%\java\classes\aleksPack10\menubar\MediaMenubarScicalculator.class
%WINDIR%\java\classes\aleksPack10\menubar\DefineImage.class
%WINDIR%\java\classes\aleksPack10\parser\Parser2Exception.class
%WINDIR%\java\classes\aleksPack10\ploted\PlotEd3.class
%WINDIR%\java\classes\aleksPack10\ploted\TextFieldPlotEd.class
%WINDIR%\java\classes\aleksPack10\ploted\PlotEd.class
%WINDIR%\java\classes\aleksPack10\ploted\AALine.class
%WINDIR%\java\classes\aleksPack10\ploted\Hand.class
%WINDIR%\java\classes\aleksPack10\toolbar\MenuBreak.class
%WINDIR%\java\classes\aleksPack10\toolbar\MenuListSelection.class
%WINDIR%\java\classes\aleksPack10\toolbar\MenuUnderline.class
%WINDIR%\java\classes\aleksPack10\toolbar\MenuBold.class
%WINDIR%\java\classes\aleksPack10\jdk\AdjustmentEvent.class
%WINDIR%\java\classes\aleksPack10\jdk\TabEvent.class
%WINDIR%\java\classes\aleksPack10\jdk\SelectListener.class
%WINDIR%\java\classes\aleksPack10\jdk\RepaintListener.class
%WINDIR%\java\classes\aleksPack10\jdk\KeyEvent.class
%WINDIR%\java\classes\aleksPack10\jdk\ImageLoader.class
%WINDIR%\java\classes\aleksPack10\ploted\PlotTut.class
%WINDIR%\java\classes\aleksPack10\jdk\RepaintEvent.class
%WINDIR%\java\classes\aleksPack10\jdk\MouseMotionListener.class
%WINDIR%\java\classes\aleksPack10\toolbar\MenuButton.class
%WINDIR%\java\classes\aleksPack10\toolbar\MenuItalic.class
%WINDIR%\java\classes\aleksPack10\toolbar\MenuUndo.class
%WINDIR%\java\classes\aleksPack10\toolbar\Menubar.class
%WINDIR%\java\classes\aleksPack10\toolbar\MenuSub.class
%WINDIR%\java\classes\aleksPack10\toolbar\MenuPaste.class
%WINDIR%\java\classes\aleksPack10\Pack.class
%WINDIR%\java\classes\aleksPack10\parser\Parser.class
%WINDIR%\java\classes\aleksPack10\DownloadK2000.class
%WINDIR%\java\classes\aleksPack10\StructPage.class
%WINDIR%\java\classes\aleksPack10\toolbar\MenuClear.class
%WINDIR%\java\classes\aleksPack10\toolbar\MenuSup.class
%WINDIR%\java\classes\aleksPack10\toolbar\MenuBreakLine.class
%WINDIR%\java\classes\aleksPack10\toolbar\MenuShortBreak.class
%WINDIR%\java\classes\aleksPack10\toolbar\MenuButtonSelection.class
%WINDIR%\java\classes\aleksPack10\toolbar\MenuCut.class
%WINDIR%\java\classes\aleksPack10\toolbar\MenuItem.class
%WINDIR%\java\classes\aleksPack10\toolbar\MenuCopy.class
%WINDIR%\java\classes\aleksPack10\toolbar\MenuListAction.class

Deletes the following files:

%WINDIR%\Installer\MSID.tmp
%WINDIR%\Installer\1f528.msi
%WINDIR%\Installer\MSIB.tmp
%WINDIR%\Installer\MSIC.tmp
<Current directory>\aleks314.msi
%TEMP%\1.tmp\ALEKS.BAT
%ALLUSERSPROFILE%\Start Menu\Programs\ALEKS Plugin 3.11\Uninstall.lnk
%WINDIR%\Installer\1f52a.ipi
%WINDIR%\Installer\MSI4.tmp
%WINDIR%\Installer\MSI5.tmp
%WINDIR%\Installer\MSI2.tmp
%WINDIR%\Installer\MSI3.tmp
C:\Config.Msi\1f52b.rbs
%WINDIR%\Installer\MSIA.tmp
%WINDIR%\Installer\MSI6.tmp
%WINDIR%\Installer\MSI7.tmp

Network activity:

Connects to:

'localhost':1039
'www.al##s.com':80
'wp#d':80
'cr#.#hawte.com':80

TCP:

HTTP GET requests:

cr#.#hawte.com/ThawteCodeSigningCA.crl
www.al##s.com/
wp#d/wpad.dat
cr#.#hawte.com/ThawtePremiumServerCA.crl

UDP:

DNS ASK www.al##s.com
DNS ASK cr#.#hawte.com
DNS ASK wp#d

Miscellaneous:

Searches for the following windows:

ClassName: 'MS_AutodialMonitor' WindowName: ''
ClassName: 'MS_WebcheckMonitor' WindowName: ''
ClassName: 'Shell_TrayWnd' WindowName: ''
ClassName: '' WindowName: ''

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней