Техническая информация
- %WINDIR%\Tasks\gduivwf.job
- '%ALLUSERSPROFILE%\Application Data\Mozilla\sklfxjg.exe'
- '%ALLUSERSPROFILE%\Application Data\Mozilla\sklfxjg.exe' sklfxjg
- '%TEMP%\runme7.exe'
- '<SYSTEM32>\wscript.exe' "%TEMP%\test.vbs"
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\exec.cmd" "
- %WINDIR%\Explorer.EXE
- safari.exe
- %ALLUSERSPROFILE%\Application Data\Mozilla\sklfxjg.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\kopatel-4it-na-dengi[1].php
- %TEMP%\kbdosna.tmp
- %TEMP%\exec.cmd
- %TEMP%\runme7.exe
- %TEMP%\test.vbs
- 'ge###iles20.ru':80
- 'localhost':1035
- ge###iles20.ru/file/kopatel-4it-na-dengi.php
- DNS ASK ge###iles20.ru
- ClassName: 'IEFrame' WindowName: '(null)'
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: '' WindowName: '(null)'