Need help? Ask the community or hire an expert.
Go to Avira Answers
Nume:Adware/InstallCor.D
Descoperit pe data de:13/07/2012
Tip:Adware
ITW:Nu
Numar infectii raportate:Scazut
Potential de raspandire:Scazut
Potential de distrugere:Scazut
Marime:1.066.984 Bytes
MD5:627d7df2dd8fca963f0A992d405ca8cb
Versiune VDF:7.11.36.28 - vineri, 13 iulie 2012
Versiune IVDF:7.11.36.28 - vineri, 13 iulie 2012

 General Metoda de raspandire:
   • Nu are rutina proprie de raspandire


Alias:
   •  Kaspersky: not-a-virus:WebToolbar.Win32.InstallCore.bna
     Sunbelt: Click run software


Sistem de operare:
   • Windows 2000
   • Windows XP
   • Windows 2003
    Windows Vista
    Windows Server 2008
    Windows 7


Efecte secundare:
   • Descarca fisiere
   • Creeaza fisiere
    Deschide un website in navigatorul de internet


Imediat dupa lansarea in executie, pe ecran este afisat:


 Fisiere  Creeaza urmatoarele directoare:
   • C:\TEMP\ish432406
   • C:\TEMP\ish432406\css\sdk-ui\images
   • C:\TEMP\ish432406\images



Sunt create fisierele:

– Fisiere temporare care pot fi sterse dupa aceea:
   • %HOME%\Desktop\Continue Media Finder Installation.lnk
   • C:\TEMP\ICReinstall_%numele atasamentului fara extensie%.exe
   • C:\TEMP\is259369358\1157746068.cfg
   • C:\TEMP\is259369358\1789615221.cfg
   • C:\TEMP\is259369358\43494122.cfg
   • C:\TEMP\is259369358\435925_Setup.CIS
   • C:\TEMP\is259369358\436005_Setup.CIS
   • C:\TEMP\is259369358\436163_Setup.CIS
   • C:\TEMP\is259369358\436237_Setup.CIS
   • C:\TEMP\is259369358\662019060.cfg
   • C:\TEMP\is259369358\73400683.cfg
   • C:\TEMP\is259369358\802531261.cfg
   • C:\TEMP\is259369358\845272838.cfg
   • C:\TEMP\is259369358\985787215.cfg
   • C:\TEMP\is259369358\ezLooker-S-Setup_Suite1.exe
   • C:\TEMP\is259369358\mf.exe
   • C:\TEMP\is259369358\MyBabylonTB.exe
   • C:\TEMP\is259369358\Wajam_3004.exe
   • C:\TEMP\isf_435939.flat
   • C:\TEMP\isf_436070.flat
   • C:\TEMP\isf_436208.flat
   • C:\TEMP\isf_436260.flat
   • C:\TEMP\ish432406\bootstrap_29156.html
   • C:\TEMP\ish432406\csshover3.htc
   • C:\TEMP\ish432406\locale\EN.locale

 Alte informatii Acceseaza resurse de pe internet:
   • os.m**********dn.com
   • rp.m**********dn.com
   • cd**********dn.com
   • cd**********dn.com
   • im**********dn.com

Description inserted by Martin Muench on Sunday, July 15, 2012
Description updated by Martin Muench on Sunday, July 15, 2012

Back . . . .