Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Evswft Rumdnukc Cuk] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\Network connected] 'Start' = '00000002'
- <SYSTEM32>\Networks.exe
- %WINDIR%\Temp\2011125203230.exe
- %WINDIR%\Temp\2011125203228.exe
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\svchost.exe -k netsvcs
- <SYSTEM32>\Networks.exe
- C:\Net-Temp.ini
- %PROGRAM_FILES%\Kfrm\Phwtrgecn.jpg
- C:\NT_Path.jpg
- %WINDIR%\Temp\2011125203228.exe
- %WINDIR%\Temp\2011125203230.exe
- C:\242500.dll
- %WINDIR%\Temp\2011125203228.exe
- C:\Net-Temp.ini
- 'zk###.vicp.net':2012
- DNS ASK zk###.vicp.net
- '<IP-адрес в локальной сети>':1036