Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] 'IEXPLORE.EXE' = '%ProgramFiles%\Internet Exp1orer\IEXPLORE.EXE'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run] 'IEXPLORE.EXE' = '%ProgramFiles%\Internet Exp1orer\IEXPLORE.EXE'
- '%ProgramFiles%\Internet Exp1orer\IEXPLORE.EXE'
- %WINDIR%\$NtUninstallKB922582$\fltmkb.dll
- %ProgramFiles%\Internet Exp1orer\IEXPLORE
- <Текущая директория>\~a
- <Текущая директория>\~a
- %ProgramFiles%\Internet Exp1orer\IEXPLORE в %ProgramFiles%\Internet Exp1orer\IEXPLORE.EXE
- 'www.he###lley.com':80
- 'www.ta###enter.net':80
- http:///sje/hostlist80.htm via www.he###lley.com
- http:///sje/app.htm via www.he###lley.com
- http:///sje/bak.htm via www.ta###enter.net
- DNS ASK www.he###lley.com
- DNS ASK www.ta###enter.net