Техническая информация
- %WINDIR%\Tasks\SBPWRWMI.job
- <SYSTEM32>\Ragpsf.exe "<SYSTEM32>\Ragpsf.exe",btttfgi
- <SYSTEM32>\ipconfig.exe /flushdns
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\I81ETHH6\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\UHILIT4J\desktop.ini
- %TEMP%\~unins1484.bat
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\POQB16VY\desktop.ini
- <SYSTEM32>\Ragpsf.exe
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\2S7K91GC\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\POQB16VY\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\I81ETHH6\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\UHILIT4J\desktop.ini
- %WINDIR%\Tasks\SBPWRWMI.job
- <SYSTEM32>\Ragpsf.exe
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\2S7K91GC\desktop.ini
- <SYSTEM32>\Restore\MachineGuid.txt
- 'im###hut4.cn':80
- 'wi###ounter.net':80
- im###hut4.cn/update/utu.dat
- DNS ASK im###hut4.cn
- DNS ASK wi###ounter.net
- '<IP-адрес в локальной сети>':1035