Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'explorer' = '%WINDIR%\svchos.exe'
- [<HKCU>\Software\Yahoo\pager]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\whatismyip[1].3414503643
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\tru-tien-2[1].html
- %WINDIR%\setting1.txt
- %TEMP%\RecursivOutput.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\checkip.dyndns[1].7730172221
- %TEMP%\~ip.tmp
- %TEMP%\~ip.tmp
- %TEMP%\RecursivOutput.txt
- 'au######ien2.blogspot.com':80
- 'www.wh###smyip.com':80
- 'ch####p.dyndns.org':80
- au######ien2.blogspot.com/2010/01/tru-tien-2.html
- www.wh###smyip.com/?rn########################################
- ch####p.dyndns.org/?rn#########################################
- DNS ASK au######ien2.blogspot.com
- DNS ASK www.wh###smyip.com
- DNS ASK ch####p.dyndns.org