PUA_INSTALLCORE.GAC
PUA:Win32/InstallCore (Microsoft); Adware.InstallCore(AVware)
PLATFORM:
Windows
OVER ALL RISK RATING:
DAMAGE POTENTIAL::
DISTRIBUTION POTENTIAL::
REPORTED INFECTION:
Beeinträchtigung der Systemleistung ::
INFORMATION EXPOSURE:
Low
Medium
High
Critical
Threat Type:
Potentially Unwanted Application
Destructiveness:
No
Encrypted:
In the wild::
Yes
OVERVIEW
TECHNICAL DETAILS
File size: 1,845,928 bytes
File type: EXE
Memory resident: Yes
INITIAL SAMPLES RECEIVED DATE: 02 maja 2018
Instalación
Agrega las carpetas siguientes:
- %User Temp%\inH{random numbers}
- %User Temp%\inH{random numbers}\css
- %User Temp%\inH{random numbers}\css\sdk-ui
- %User Temp%\inH{random numbers}\css\sdk-ui\images
- %User Temp%\inH{random numbers}\images
- %User Temp%\inH{random numbers}\locale
(Nota: %User Temp% es la carpeta Temp del usuario activo, que en el caso de Windows 2000, XP y Server 2003 suele estar en C:\Documents and Settings\{nombre de usuario}\Local Settings\Temp).
)Infiltra los archivos siguientes:
- %User Temp%\{random number}.log
- %User Temp%\inH{random number}\csshover3.htc
- %User Temp%\inH{random number}\form.bmp.Mask
- %User Temp%\inH{random number}\css\ie6_main.css
- %User Temp%\inH{random number}\css\main.css
- %User Temp%\inH{random number}\css\sdk-ui\browse.css
- %User Temp%\inH{random number}\css\sdk-ui\button.css
- %User Temp%\inH{random number}\css\sdk-ui\checkbox.css
- %User Temp%\inH{random number}\css\sdk-ui\progress-bar.css
- %User Temp%\inH{random number}\css\sdk-ui\images\button-bg.png
- %User Temp%\inH{random number}\css\sdk-ui\images\progress-bg-corner.png
- %User Temp%\inH{random number}\css\sdk-ui\images\progress-bg.png
- %User Temp%\inH{random number}\css\sdk-ui\images\progress-bg2.png
- %User Temp%\inH{random number}\images\BG.png
- %User Temp%\inH{random number}\images\Close.png
- %User Temp%\inH{random number}\images\Close_Hover.png
- %User Temp%\inH{random number}\images\Color_Button.png
- %User Temp%\inH{random number}\images\Color_Button_Hover.png
- %User Temp%\inH{random number}\images\default_tb.png
- %User Temp%\inH{random number}\images\default_wi.png
- %User Temp%\inH{random number}\images\Grey_Button.png
- %User Temp%\inH{random number}\images\Grey_Button_Hover.png
- %User Temp%\inH{random number}\images\Icon_Generic.png
- %User Temp%\inH{random number}\images\Loader.gif
- %User Temp%\inH{random number}\images\Pause_Button.png
- %User Temp%\inH{random number}\images\Progress.png
- %User Temp%\inH{random number}\images\ProgressBar.png
- %User Temp%\inH{random number}\images\Quick_Specs.png
- %User Temp%\inH{random number}\images\Resume_Button.png
- %User Temp%\inH{random number}\images\sponsored.png
- %User Temp%\inH{random number}\locale\CS.locale
- %User Temp%\inH{random number}\locale\DA.locale
- %User Temp%\inH{random number}\locale\DE.locale
- %User Temp%\inH{random number}\locale\EL.locale
- %User Temp%\inH{random number}\locale\EN.locale
- %User Temp%\inH{random number}\locale\ES.locale
- %User Temp%\inH{random number}\locale\FI.locale
- %User Temp%\inH{random number}\locale\FR.locale
- %User Temp%\inH{random number}\locale\ID.locale
- %User Temp%\inH{random number}\locale\IT.locale
- %User Temp%\inH{random number}\locale\JA.locale
- %User Temp%\inH{random number}\locale\KO.locale
- %User Temp%\inH{random number}\locale\NL.locale
- %User Temp%\inH{random number}\locale\NO.locale
- %User Temp%\inH{random number}\locale\PL.locale
- %User Temp%\inH{random number}\locale\PT.locale
- %User Temp%\inH{random number}\locale\RU.locale
- %User Temp%\inH{random number}\locale\SV.locale
- %User Temp%\inH{random number}\locale\TR.locale
- %User Temp%\inH{random number}\locale\ZH.locale
- %User Temp%\inH{random number}\bootstrap_7239.html
- %Program Files%\{random number}.log
(Nota: %User Temp% es la carpeta Temp del usuario activo, que en el caso de Windows 2000, XP y Server 2003 suele estar en C:\Documents and Settings\{nombre de usuario}\Local Settings\Temp).
. %Program Files% es la carpeta Archivos de programa predeterminada, que suele estar en C:\Archivos de programa).)