Техническая информация
- %PROGRAM_FILES%\USER-4BB09A9C02\360rps.sfx.exe
- %PROGRAM_FILES%\USER-4BB09A9C02\116.exe
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://www.30##.info:30/ip.html?11#
- <SYSTEM32>\rundll32.exe Darkbomb.dll FunctionStart
- <SYSTEM32>\cmd.exe /c "c:\support338945a0.bat"
- %PROGRAM_FILES%\USER-4BB09A9C02\360rps.sfx.exe
- %PROGRAM_FILES%\USER-4BB09A9C02\116.exe
- C:\support338945a0.bat
- %TEMP%\33223115000.jpg
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\4.tmp
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\15.tmp
- %TEMP%\$inst\5.tmp
- <SYSTEM32>\Darkbomb.dll
- %TEMP%\$inst\15.tmp
- C:\support338945a0.bat
- %PROGRAM_FILES%\USER-4BB09A9C02\116.exe
- %TEMP%\$inst\5.tmp
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\4.tmp
- 'localhost':1039
- 'www.30##.info':30
- DNS ASK www.30##.info
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''