Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\BITS] 'Start' = '00000002'
- ClassName: 'OLLYDBG' WindowName: ''
- %TEMP%\BIT3.tmp
- %TEMP%\BIT2.tmp
- %TEMP%\BIT1.tmp
- %TEMP%\1346727232
- %TEMP%\1346727207
- %TEMP%\1346727156
- %TEMP%\BIT3.tmp в %TEMP%\1346727232
- %TEMP%\BIT2.tmp в %TEMP%\1346727207
- %TEMP%\BIT1.tmp в %TEMP%\1346727156
- 'ne###arings.com':80
- 'localhost':1041
- 'ne####ringsite.com':80
- 'localhost':1039
- 'wp#d':80
- 'localhost':1037
- 'th####sharing.com':80
- ne###arings.com/gettasks2.php?pr################################################################
- ne####ringsite.com/gettasks2.php?pr################################################################
- wp#d/wpad.dat
- th####sharing.com/gettasks2.php?pr################################################################
- DNS ASK ne###arings.com
- DNS ASK ne####ringsite.com
- DNS ASK wp#d
- DNS ASK th####sharing.com