Du brauchst Hilfe? Frage die Community oder wende dich an einen Experten.
Zu Avira Answers
Nume:Adware/InstallBai.A
Descoperit pe data de:06/11/2012
Tip:Adware/Spyware
ITW:Nu
Numar infectii raportate:Scazut
Potential de raspandire:Scazut
Potential de distrugere:Scazut
Versiune VDF:7.11.49.22 - marți, 6 noiembrie 2012
Versiune IVDF:7.11.49.22 - marți, 6 noiembrie 2012

 General Metoda de raspandire:
   • Nu are rutina proprie de raspandire


Alias:
   •  Eset: a variant of Win32/InstallCore.AW application


Sistem de operare:
   • Windows 2000
   • Windows XP
   • Windows 2003
   • Windows Vista
   • Windows Server 2008
   • Windows 7


Efecte secundare:
   • Modificari in registri


Imediat dupa lansarea in executie, pe ecran este afisat:


 Fisiere Sunt create fisierele:

– Fisiere temporare care pot fi sterse dupa aceea:
   • %temp%\000AFD89.log
   • %temp%\ish720281\css\ie6_main.css
   • %temp%\ish720281\css\main.css
   • %temp%\ish720281\css\sdk-ui\browse.css
   • %temp%\ish720281\css\sdk-ui\button.css
   • %temp%\ish720281\css\sdk-ui\checkbox.css
   • %temp%\ish720281\css\sdk-ui\images\button-bg.png
   • %temp%\ish720281\css\sdk-ui\images\progress-bg-corner.png
   • %temp%\ish720281\css\sdk-ui\images\progress-bg.png
   • %temp%\ish720281\css\sdk-ui\images\progress-bg2.png
   • %temp%\ish720281\css\sdk-ui\progress-bar.css
   • %temp%\ish720281\csshover3.htc
   • %temp%\ish720281\defaultOffer\images\toolbar.png
   • %temp%\ish720281\form.bmp.Mask
   • %temp%\ish720281\images\bg.png
   • %temp%\ish720281\images\bg_new.png
   • %temp%\ish720281\images\close.png
   • %temp%\ish720281\images\close_hover.png
   • %temp%\ish720281\images\color_btn.png
   • %temp%\ish720281\images\color_btn_hover.png
   • %temp%\ish720281\images\grey_btn.png
   • %temp%\ish720281\images\grey_btn_hover.png
   • %temp%\ish720281\images\icon_generic.png
   • %temp%\ish720281\images\loader.gif
   • %temp%\ish720281\images\pause_btn.png
   • %temp%\ish720281\images\progress.png
   • %temp%\ish720281\images\progress_bar.png
   • %temp%\ish720281\images\resume_btn.png
   • %temp%\ish720281\images\sheild.jpg
   • %temp%\ish720281\images\sheild.png
   • %temp%\ish720281\images\welcome_prod_box.png
   • %temp%\ish720281\bootstrap_42113.html
   • %temp%\000B0653.log
   • %temp%\000B071E.log
   • %temp%\000B19BC.log
   • %temp%\000B1A0A.log
   • %temp%\IS7011~1\2043151743.cfg
   • %temp%\IS7011~1\1022637949.cfg
   • %temp%\000B2499.log
   • %temp%\000B24B8.log
   • %temp%\000B2E2E.log
   • %temp%\isf_722823.flat
   • %HOME%\Desktop\Continue Bluetooth Driver Installer Installation.lnk
   • %temp%\000B409D.log

 Registrii sistemului Urmatoarele chei sunt adaugate in registrii sistemului:

– [HKCR\CLSID\{616F0423-230C-C3C4-C28A-87497B0FAE22}]
   • "Author"="Microsoft"
   • "FriendlyName"="Interop Writer"
   • "MetadataFormat"="{ED686F8E-681F-4C8B-BD41-A8ADDBF6B3FC}"
   • "RequiresFullStream"="dword:0x00000001"
   • "SpecVersion"="1.0.0.0"
   • "SupportsPadding"="dword:0x00000001"
   • "Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
   • "Version"="1.0.0.0"

– [HKCR\CLSID\{616F0423-230C-C3C4-C28A-87497B0FAE22}\Containers\
   {1C3C4F9D-B84A-467D-9493-36CFBD59EA57}]
   • "WriteHeader"="hex:05,a0,04,00,01,00,00,00"
   • "WritePosition"="dword:0x00000000"

– [HKCR\CLSID\{616F0423-230C-C3C4-C28A-87497B0FAE22}\InProcServer32]
   • "(Default)"="windowscodecs.dll"

– [HKCU\Software\Baixaki]
   • "BluetoothDriverInstallerx86.exe"="1352139761921,http://dl.baixaki.com.br/programas/63731/BluetoothDriverInstallerx86.exe"

– [HKLM\SOFTWARE\Classes\CLSID\
   {616F0423-230C-C3C4-C28A-87497B0FAE22}]
   • "Author"="Microsoft"
   • "FriendlyName"="Interop Writer"
   • "MetadataFormat"="{ED686F8E-681F-4C8B-BD41-A8ADDBF6B3FC}"
   • "RequiresFullStream"="dword:0x00000001"
   • "SpecVersion"="1.0.0.0"
   • "SupportsPadding"="dword:0x00000001"
   • "Vendor"="{F0E749CA-EDEF-4589-A73A-EE0E626A2A2B}"
   • "Version"="1.0.0.0"

– [HKLM\SOFTWARE\Classes\CLSID\{616F0423-230C-C3C4-C28A-87497B0FAE22}\
   InProcServer32]
   • "(Default)"="windowscodecs.dll"

 Alte informatii Conexiune internet:
Pentru a verifica legatura la internet se conecteaza la urmatoarele servere DNS:
   • os.bai**********ki.com.br
   • d.a**********pd.com
   • dl.bai**********ki.com.br

Die Beschreibung wurde erstellt von Wensin Lee am Donnerstag, 8. November 2012
Die Beschreibung wurde geändert von Wensin Lee am Donnerstag, 8. November 2012

zurück . . . .