Техническая информация
- %WINDIR%\NewBaco.exe
- <SYSTEM32>\cmd.exe /c ""%WINDIR%\Delete.bat" "
- <SYSTEM32>\cmd.exe /c \DelUS.bat
- %HOMEPATH%\Favorites\јоЗО ёрАЅ\АМё¶Ж® АОЕНіЭ јоЗОёф.url
- %HOMEPATH%\Favorites\јоЗО ёрАЅ\d&shop.url
- %HOMEPATH%\Favorites\јоЗО ёрАЅ\їмГј±№јоЗО.url
- %HOMEPATH%\Favorites\јоЗО ёрАЅ\ЅЕјј°иёф.url
- %HOMEPATH%\Favorites\јоЗО ёрАЅ\QOOKTVјоЗО.url
- %HOMEPATH%\Favorites\јоЗО ёрАЅ\AKёф.url
- %HOMEPATH%\Favorites\јоЗО ёрАЅ\GS SHOP.url
- %HOMEPATH%\Favorites\јоЗО ёрАЅ\ѕЖАМЅєЕёАП24.url
- %HOMEPATH%\Favorites\јоЗО ёрАЅ\LGЖРјЗјҐ.url
- %WINDIR%\Delete.bat
- %HOMEPATH%\Favorites\јоЗО ёрАЅ\ЖРјЗЗГ·ЇЅє.url
- %HOMEPATH%\Favorites\јоЗО ёрАЅ\ЅЕ¶уАОЕНіЭёйјјБЎ.url
- %HOMEPATH%\Favorites\јоЗО ёрАЅ\ЗПЗБЕ¬·ґґеДД.url
- %HOMEPATH%\Favorites\јоЗО ёрАЅ\їА°Ў°Ф.url
- %HOMEPATH%\Favorites\јоЗО ёрАЅ\·ФµҐИЁјоЗО.url
- %HOMEPATH%\Desktop\їБјЗ - ѕХАё·ОАЗ АОЕНіЭјоЗО, їБјЗ.lnk
- %WINDIR%\gmarket.ico
- %HOMEPATH%\Desktop\Gё¶ДП - іо¶уїтА» јоЗОЗПґЩ, Gё¶ДП.lnk
- %WINDIR%\auction.ico
- %WINDIR%\11.ico
- %WINDIR%\NewBaco.exe
- %HOMEPATH%\Desktop\11івАє 11№ш°Ў.lnk
- %HOMEPATH%\Favorites\11№ш°Ў.url
- %HOMEPATH%\Favorites\d&shop.url
- %HOMEPATH%\Favorites\јоЗО ёрАЅ\Hmall.url
- %HOMEPATH%\Favorites\Gё¶ДП.url
- %TEMP%\nsl2.tmp\SelfDelete.dll
- C:\DelUS.bat
- %HOMEPATH%\Favorites\їБјЗ.url
- %WINDIR%\NewBaco.exe
- %TEMP%\nsl2.tmp\SelfDelete.dll
- 'ad###.is-admin.com':80
- ad###.is-admin.com/log/install.php?ma#################################
- DNS ASK ad###.is-admin.com