%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\mssieconfig[2].ini
%TEMP%\~msapi.dat
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\mssieconfig[1].ini
%PROGRAM_FILES%\Internet Explorer\msapi.exe
%PROGRAM_FILES%\Internet Explorer\msapi.dll
%TEMP%\_DelSexIE.cMd
Sets the 'hidden' attribute to the following files:
<Drive name for removable media>:\Autorun.inf
<Drive name for removable media>:\SexIE.exe
%TEMP%\~msapi.dat
%PROGRAM_FILES%\Internet Explorer\msapi.exe
%PROGRAM_FILES%\Internet Explorer\msapi.dll
%TEMP%\_DelSexIE.cMd
Deletes the following files:
%TEMP%\_DelSexIE.cMd
Deletes itself.
Network activity:
Connects to:
'www.s2##.com':80
'74.##5.232.51':80
'localhost':1035
'localhost':1036
TCP:
HTTP GET requests:
www.s2##.com/browser/sexie/mssieconfig.ini
UDP:
DNS ASK www.google.com
DNS ASK www.s2##.com
Miscellaneous:
Searches for the following windows:
ClassName: 'WorkerW' WindowName: ''
Descargue Dr.Web para Android
Gratis por 3 meses
Todos los componentes de protección
Renovación de la demo a través de AppGallery/Google Pay
Si Vd. continúa usando este sitio web, esto significa que Vd. acepta el uso de archivos Cookie y otras tecnologías para que recabemos las estadísticas sobre los visitantes. Más información