Техническая информация
- '%TEMP%\svthast.exe'
- '%TEMP%\RarSFX0\setup.exe'
- ekrn.exe
- [<HKCU>\Software\Microsoft\MSNMessenger]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\baidu[1]
- %TEMP%\svthast.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\getstatus[1].asp
- %TEMP%\~B4D8\20131029202344_00000029.tmp
- %TEMP%\~BB16\C
- %TEMP%\RarSFX0\setup.exe
- %TEMP%\RarSFX0\setup64.exe
- %TEMP%\RarSFX0\FAT32.dll
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\fifo.log
- %TEMP%\API.tmp
- %TEMP%\RarSFX0\setup.exe
- %TEMP%\RarSFX0\setup64.exe
- %TEMP%\RarSFX0\FAT32.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\baidu[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\getstatus[1].asp
- %TEMP%\~B4D8\20131029202344_00000029.a в %TEMP%\~B4D8\20131029202344_00000029.s
- %TEMP%\~B4D8\20131029202344_00000029.tmp в %TEMP%\~B4D8\20131029202344_00000029.a
- '20#.#6.232.182':80
- '12#.#25.114.144':80
- 12#.#25.114.144/filelist/filelist.asp
- 20#.#6.232.182/status/getstatus.asp
- 12#.#25.114.144/
- DNS ASK www.microsoft.com
- DNS ASK www.ba##u.com
- '20#.#6.191.10':8000
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'