Техническая информация
- %TEMP%\HAYALKOXP.exe
- %TEMP%\done.exe
- %APPDATA%\bkvr8992XV.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\hayalkoxp[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\Koxpu-Kimler-acm-h4[1].htm
- %TEMP%\done.exe
- %TEMP%\HAYALKOXP.exe
- 'st#####p.forumclan.com':80
- 'ha###koxp.tk':80
- 'localhost':1036
- st#####p.forumclan.com/Koxpu-Kimler-acm-h4.htm
- ha###koxp.tk/
- DNS ASK st#####p.forumclan.com
- DNS ASK ha###koxp.tk
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'VMDragDetectWndClass' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''