Техническая информация
- C:\Server.exe
- <SYSTEM32>\rundll32.exe <SYSTEM32>\shimgvw.dll,ImageView_Fullscreen c:\ґнОуНјЖ¬.jpg
- <SYSTEM32>\rundll32.exe %PROGRAM_FILES%\NamiRobot\ResChs.dll comdl2
- <SYSTEM32>\taskkill.exe /im Ksafesvc.exe /f
- <SYSTEM32>\taskkill.exe /im KsafeTray.exe /f
- <SYSTEM32>\kb-x86-anti.xml
- %PROGRAM_FILES%\NamiRobot\RCX3.tmp
- %TEMP%\kb-212640.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\w0[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\w0[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\w0[1].jpg
- %TEMP%\kb-172890.tmp
- C:\ґнОуНјЖ¬.jpg
- C:\Server.exe
- %HOMEPATH%\Recent\Local Disk (C).lnk
- %HOMEPATH%\Recent\ґнОуНјЖ¬.lnk
- %PROGRAM_FILES%\MSBuild\RCX2.tmp
- C:\ґнОуНјЖ¬.jpg
- C:\Server.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\w0[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\w0[1].jpg
- %PROGRAM_FILES%\MSBuild\Manage.cpl
- %PROGRAM_FILES%\NamiRobot\ResChs.dll
- 'yk.##77888.com':80
- 'jj.##77888.com':80
- 'q1#####3944.3322.org':228
- yk.##77888.com/temp/w0.jpg
- jj.##77888.com/temp/w0.jpg
- DNS ASK yk.##77888.com
- DNS ASK jj.##77888.com
- DNS ASK q1#####3944.3322.org
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'ShImgVw:CPreviewWnd' WindowName: ''