Technical Information
- '%TEMP%\UpdateFlashPlayer_a40709df.exe'
- '%TEMP%\UpdateFlashPlayer_a40709df.exe' (downloaded from the Internet)
- %TEMP%\UpdateFlashPlayer_a40709df.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\jquery[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\1480[1]
- '19#.#62.19.87':80
- 'fr###irway.su':80
- http://19#.#62.19.87/mod_articles-7.15/jquery/
- http://fr###irway.su/b/shoe/1480
- DNS ASK fr###irway.su