Техническая информация
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\regedt32.lnk
- C:\.datauserAres1MNh1Vsgo`8dht[Ve6EI\regedit.exe
- C:\.datauserAres1MNh1Vsgo`8dht[Ve6EI\regedit.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\JeSje0EUayj9O5vu6pu8g[1].htm
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\gxftj[1].html
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\JeSje0EUayj9O5vu6pu8g[1].htm
- C:\.datauserAres1MNh1Vsgo`8dht[Ve6EI\regedt32.exe
- %TEMP%\~DFC63E.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\JeSje0EUayj9O5vu6pu8g[1].htm
- 'localhost':1038
- '36##ov.com':80
- 'localhost':1035
- 36##ov.com/gxftj.html?89####
- 36##ov.com/JeSje0EUayj9O5vu6pu8g.htm
- DNS ASK 36##ov.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''