Техническая информация
- %TEMP%\domain.txt
- %TEMP%\exist.txt
- %TEMP%\nse2.tmp\Gevorin_pointbag.dll
- <SYSTEM32>\auction.ico
- <SYSTEM32>\gmarket.ico
- %HOMEPATH%\Favorites\Gё¶ДП - »х·Оїо јј»уА» ї©ґВ №®, Gё¶ДП.url
- %TEMP%\nse2.tmp\System.dll
- %TEMP%\nse2.tmp\SelfDelete.dll
- %HOMEPATH%\Favorites\јоЗО ЅєЖ®ё®Ж®, 11№ш°Ў.url
- %HOMEPATH%\Favorites\µрѕШјҐ, ЅГБр 2.url
- %HOMEPATH%\Favorites\ґзЅЕАМ ГЈґВ ёрµз ЅєЕёАП, їБјЗ.url
- <SYSTEM32>\11market.ico
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\check_counter[1].php
- %WINDIR%\11.ico
- %TEMP%\nse2.tmp\DLLWebCount.dll
- %TEMP%\nse2.tmp\Comparison_pointbag.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\comparison[1].php
- %WINDIR%\auction.ico
- %HOMEPATH%\Desktop\їБјЗ.URL
- %HOMEPATH%\Desktop\11№ш°Ў.URL
- %HOMEPATH%\Desktop\Gё¶ДП.URL
- %WINDIR%\dnshop.ico
- %WINDIR%\gmarket.ico
- %TEMP%\nse2.tmp\Gevorin_pointbag.dll
- %TEMP%\nse2.tmp\DLLWebCount.dll
- %TEMP%\nse2.tmp\System.dll
- %TEMP%\nse2.tmp\SelfDelete.dll
- %TEMP%\domain.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\check_counter[1].php
- %TEMP%\nse2.tmp\Comparison_pointbag.dll
- %TEMP%\exist.txt
- 'po##tbag.kr':80
- po##tbag.kr/check_counter.php?pi###############
- po##tbag.kr/comparison/comparison.php
- DNS ASK po##tbag.kr
- '<IP-адрес в локальной сети>':1035