Техническая информация
- %PROGRAM_FILES%\disk21\disk21_launcher.exe (загружен из сети Интернет) <Имя вируса>:<Полный путь к вирусу>
- <SYSTEM32>\cmd.exe /c ""%PROGRAM_FILES%\disk21\bat1.bat" "
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\MSCOMCTL[1].OCX
- %PROGRAM_FILES%\disk21\bat1.bat
- <SYSTEM32>\MSINET.OCX
- %PROGRAM_FILES%\disk21\disk21_launcher.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\disk21_launcher[1].exe
- <SYSTEM32>\MSCOMCTL.OCX
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\SL6TKFAX\MSINET[1].OCX
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\MSCMCKO[1].DLL
- <SYSTEM32>\INETKO.DLL
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\INETKO[1].DLL
- <SYSTEM32>\VB6KO.DLL
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\VB6KO[1].DLL
- <SYSTEM32>\MSCMCKO.DLL
- %PROGRAM_FILES%\disk21\bat1.bat
- 'www.di##21.com':80
- 'localhost':1035
- www.di##21.com/launcher/MSINET.OCX
- www.di##21.com/launcher/MSCOMCTL.OCX
- www.di##21.com/launcher/disk21_launcher.exe
- www.di##21.com/launcher/INETKO.DLL
- www.di##21.com/launcher/MSCMCKO.DLL
- www.di##21.com/launcher/VB6KO.DLL
- DNS ASK www.di##21.com