App.Ad_Warspy-L

Description Détails Désinfection
Cette section destinée aux experts, expose les détails techniques de ce virus.

Taille: 15872 Octet(s)

Détails techniques:

A son exécution, Warspy-L crée des raccourcis corrspondant à ces adresses :

Air Tickets.URL
http://www.s
{censuré}ds.info/
search.php?qq=Air+Tickets&id=30777&said=ad0411
Big Tits.URL
http://a
{censuré}lgoods.info/
search.php?qq=Big+Tits&id=30777&said=ad0411
BlackJack.URL
http://www.
{censuré}ods.info/
search.php?qq=BlackJack&id=30777&said=ad0411
Britney Spears.URL
http://a
{censuré}lgoods.info/
search.php?qq=Britney+Spears&id=30777&said=ad0411
Car Insurance.URL
http://www.
{censuré}ods.info/
search.php?qq=Car+Insurance&id=30777&said=ad0411
Cigarettes.URL
http://www.
{censuré}ods.info/
search.php?qq=Cigarettes&id=30777&said=ad0411
Credit Card.URL
http://www.
{censuré}ods.info/
search.php?qq=Credit+Card&id=30777&said=ad0411.URL
Cruises.URL
http://www.
{censuré}ods.info/
search.php?qq=Cruises&id=30777&said=ad0411
Forex Trading.URL
http://www.
{censuré}ods.info/
search.php?qq=Forex+Trading&id=30777&said=ad0411
Lesbian Sex.URL
http://a
{censuré}ialgoods.info/
search.php?qq=Lesbian+Sex&id=30777&said=ad0411
MP3.URL
http://www.
{censuré}ods.info/
search.php?qq=MP3&id=30777&said=ad0411
Online Betting.URL
http://www.
{censuré}ods.info/
search.php?qq=Online+Betting&id=30777&said=ad0411
Online Casino.URL
http://www.
{censuré}ods.info/
search.php?qq=Online+Casino&id=30777&said=ad0411
Oral Sex.URL
http://a
{censuré}ialgoods.info/ search.php?qq=Oral+Sex&id=30777&said=ad0411
Party Poker.URL
http://www.
{censuré}ods.info/
search.php?qq=Party+Poker&id=30777&said=ad0411
Pharmacy.URL
http://p
{censuré}cialgoods.info/
search.php?qq=Pharmacy&id=30777&said=ad0411
Phentermine.URL
http://p
{censuré}cialgoods.info/
search.php?qq=Phentermine&id=30777&said=ad0411
Pornstars.URL
http://a
{censuré}ialgoods.info/
search.php?qq=Pornstars&id=30777&said=ad0411
Remove Spyware.URL
http://a
{censuré}ialgoods.info/
index.php?qq=Spyware&id=30777&said=ad0411
Viagra.URL
http://p
{censuré}ialgoods.info/
search.php?qq=Viagra&id=30777&said=ad0411


Warspy-L change aussi la page de démarrage d'Internet Explorer par l'adresse :

http://www.specialgoods.info/ad/ad0411/




http://www.spamliste.org/