Техническая информация
- %TEMP%\1.exe
- %TEMP%\0.exe
- <SYSTEM32>\cmd.exe /c ""%TEMP%\0.bat" "
- <SYSTEM32>\cmd.exe /c "%TEMP%\del.bat"
- <SYSTEM32>\ntvdm.exe -f -i1
- [<HKLM>\SOFTWARE\FlashFXP\3]
- ClassName: 'OLLYDBG' WindowName: ''
- %WINDIR%\Temp\scs2.tmp
- %TEMP%\del.bat
- %TEMP%\0.bat
- %WINDIR%\Temp\scs1.tmp
- %TEMP%\0.exe
- %TEMP%\1.exe
- %TEMP%\2.exe
- %TEMP%\0.exe
- %WINDIR%\Temp\scs2.tmp
- %WINDIR%\Temp\scs1.tmp
- 'bl#####ok.square7.ch':80
- 'bl#####ok.freehoster.ch':80
- bl#####ok.square7.ch/MySQLadmin/update.php
- bl#####ok.freehoster.ch/update.php
- DNS ASK bl#####ok.square7.ch
- DNS ASK bl#####ok.freehoster.ch
- '<IP-адрес в локальной сети>':1037
- ClassName: 'ConsoleWindowClass' WindowName: 'ntvdm-99c.9a4.3a0001'
- ClassName: 'Shell_TrayWnd' WindowName: ''