Техническая информация
- <SYSTEM32>\Del.exe "%PROGRAM_FILES%\Internet Explorer\Sx_server.exe"
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\Data[1].asp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\xgj[1].htm
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\Search[1].ASP
- <SYSTEM32>\Del.exe
- <SYSTEM32>\DelFile.sys
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\dnfqt[1]
- <SYSTEM32>\Del.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\Search[1].ASP
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\Data[1].asp
- <SYSTEM32>\Del.exe
- <SYSTEM32>\DelFile.sys
- 'bb#.#nfqt.com':80
- 'www.dn##t.com':80
- 'localhost':1035
- www.dn##t.com/Search.ASP
- bb#.#nfqt.com/xz.htm
- bb#.#nfqt.com/cc.htm
- www.dn##t.com/
- www.dn##t.com/Data.asp?Da########
- bb#.#nfqt.com/xgj.htm
- DNS ASK bb#.#nfqt.com
- DNS ASK www.xy##i.com
- DNS ASK www.dn##t.com
- '<IP-адрес в локальной сети>':1036
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''