01.08.2012, 05:52
This is a popular game. Here is another example of the installation with the virus.
Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\MicroUpdate: “%Personal%\MSDCSC\msdcsc.exe”
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: “%SysDir%\userinit.exe,%Personal%\MSDCSC\msdcsc.exe”
Folders:
%Temp%\e4j1.tmp_dir
%Personal%\MSDCSC
Files:
%Temp%\e4j1.tmp
%Temp%\e4j1.tmp_dir\exe4jlib.jar
%Temp%\e4j1.tmp_dir\i4jdel.exe
%Temp%\e4j1.tmp_dir\MinecraftSP.jar
%Temp%\MINECRAFTSP.EXE
%Personal%\MSDCSC\msdcsc.exe
[Aby zobaczyć linki, zarejestruj się tutaj]
Registry:
HKCU\Software\Microsoft\Windows\CurrentVersion\Run\MicroUpdate: “%Personal%\MSDCSC\msdcsc.exe”
HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit: “%SysDir%\userinit.exe,%Personal%\MSDCSC\msdcsc.exe”
Folders:
%Temp%\e4j1.tmp_dir
%Personal%\MSDCSC
Files:
%Temp%\e4j1.tmp
%Temp%\e4j1.tmp_dir\exe4jlib.jar
%Temp%\e4j1.tmp_dir\i4jdel.exe
%Temp%\e4j1.tmp_dir\MinecraftSP.jar
%Temp%\MINECRAFTSP.EXE
%Personal%\MSDCSC\msdcsc.exe