Техническая информация
- %WINDIR%\Tasks\Gvtefwr.job
- <SYSTEM32>\isxrbij.exe "<SYSTEM32>\isxrbij.exe",hrkabn
- <SYSTEM32>\ipconfig.exe /flushdns
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\QVIF43AP\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\YBNL7JRG\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\KS9MZB4W\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\W12Z4567\desktop.ini
- <SYSTEM32>\isxrbij.exe
- %TEMP%\~unins8500.bat
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\QVIF43AP\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\YBNL7JRG\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\KS9MZB4W\desktop.ini
- %WINDIR%\Tasks\Gvtefwr.job
- <SYSTEM32>\isxrbij.exe
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\W12Z4567\desktop.ini
- 'im###hut4.cn':80
- 'mu###tab.net':80
- im###hut4.cn/update/utu.dat
- DNS ASK im###hut4.cn
- DNS ASK mu###tab.net