Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winldd32] 'Startup' = 'myDgxL'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\winldd32] 'DllName' = 'winldd32.dll'
- <SYSTEM32>\cmd.exe /c ""%TEMP%\AaM1.bat""
- %WINDIR%\Explorer.EXE
- %TEMP%\jbat
- %TEMP%\WvlmG=&9m 9llw
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\windows-mode[1]
- %TEMP%\AaM1.bat
- %TEMP%\j}ri
- %TEMP%\AaM1.tmp
- <SYSTEM32>\winldd32.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\windows-mode[1]
- %TEMP%\AaM1.tmp
- 'wi####s-mode.com':80
- wi####s-mode.com/?b=###
- DNS ASK wi####s-mode.com
- '10.#.1.1':1034
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'PROGMAN' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'MozillaUIWindowClass' WindowName: ''