Техническая информация
- %PROGRAM_FILES%\USER-4BB09A9C02\bbc.exe
- %PROGRAM_FILES%\USER-4BB09A9C02\es.exe
- %PROGRAM_FILES%\USER-4BB09A9C02\360rps.sfx.exe
- %PROGRAM_FILES%\USER-4BB09A9C02\116.exe
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://www.30##.info:30/ip.html?11#
- <SYSTEM32>\rundll32.exe Darkbomb.dll FunctionStart
- <SYSTEM32>\cmd.exe /c "c:\support338945a0.bat"
- %TEMP%\33223114000.jpg
- %PROGRAM_FILES%\USER-4BB09A9C02\bbc.exe
- %PROGRAM_FILES%\USER-4BB09A9C02\116.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\baidu[1]
- %PROGRAM_FILES%\USER-4BB09A9C02\es.exe
- C:\support338945a0.bat
- %TEMP%\$inst\5.tmp
- %TEMP%\$inst\4.tmp
- %TEMP%\$inst\2.tmp
- %PROGRAM_FILES%\USER-4BB09A9C02\360rps.sfx.exe
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\15.tmp
- <SYSTEM32>\Darkbomb.dll
- C:\support338945a0.bat
- %TEMP%\$inst\15.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\baidu[1]
- %PROGRAM_FILES%\USER-4BB09A9C02\116.exe
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\5.tmp
- %TEMP%\$inst\4.tmp
- 'www.30##.info':30
- 'localhost':1041
- 'localhost':1035
- 'www.ba##u.com':80
- www.ba##u.com/
- DNS ASK www.30##.info
- DNS ASK www.ba##u.com
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''