Техническая информация
- %TEMP%\siclock5.exe
- %TEMP%\siclock5.exe (загружен из сети Интернет)
- %TEMP%\siclock5.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\siclock5[1].exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\icv[1].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\icv[1].txt
- 'sp####rbaker.com':80
- sp####rbaker.com/zip/siclock5.exe
- sp####rbaker.com/inst/icv.txt
- DNS ASK www.sp####rbaker.com
- DNS ASK sp####rbaker.com
- ClassName: 'Shell_TrayWnd' WindowName: ''