Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\6to4] 'Start' = '00000002'
- <SYSTEM32>\cmd.exe /c ""%WINDIR%\temp\temp0.bat" "
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\M87FLJ0J\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\YZIPE94B\desktop.ini
- %WINDIR%\Temp\atixxx.tmp
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\FS23M5XG\html[1].jpg
- %WINDIR%\Temp\temp0.bat
- %WINDIR%\Installer\AMDEx.msi
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\HRATLV5X\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\FS23M5XG\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\YZIPE94B\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\M87FLJ0J\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\FS23M5XG\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\HRATLV5X\desktop.ini
- 'www.du###boxing.com':80
- www.du###boxing.com/clientscript/yui/animation/html.jpg
- DNS ASK www.du###boxing.com