Техническая информация
- <SYSTEM32>\regsvr32.exe /s <SYSTEM32>\hhahgxda.dll
- %HOMEPATH%\Desktop\Search Online.url
- %HOMEPATH%\Favorites\Search Online.url
- <SYSTEM32>\s.ico
- %HOMEPATH%\Favorites\Cheap Pharmacy Online.url
- %HOMEPATH%\Start Menu\Cheap Pharmacy Online.url
- %WINDIR%\k.txt
- %TEMP%\ie6B8.tmp
- %TEMP%\P1.tmp
- %HOMEPATH%\Start Menu\Search Online.url
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\cfg1[1].php
- %HOMEPATH%\Desktop\Cheap Pharmacy Online.url
- %HOMEPATH%\Favorites\SMS TRAP.url
- %HOMEPATH%\Start Menu\SMS TRAP.url
- %HOMEPATH%\Desktop\SMS TRAP.url
- <SYSTEM32>\hhahgxda.dll
- <SYSTEM32>\p.ico
- %HOMEPATH%\Start Menu\VIP Casino.url
- <SYSTEM32>\m.ico
- %HOMEPATH%\Favorites\VIP Casino.url
- <SYSTEM32>\c.ico
- %HOMEPATH%\Desktop\VIP Casino.url
- %TEMP%\P1.tmp
- 'me######nkbindinstaller.com':80
- 'localhost':1036
- me######nkbindinstaller.com/cfg1.php?id########
- DNS ASK me######nkbindinstaller.com
- ClassName: '' WindowName: ''