Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{MS03AB-B707-11d2-9CBD-0000F87A369E}] 'stubpath' = ''
- %PROGRAM_FILES%\Microsoft Office\svchost.exe
- <Текущая директория>\dnf1.exe
- <Текущая директория>\Sanlu.exe
- %PROGRAM_FILES%\Microsoft Office\svchost.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\dnfsanlu[1]
- <Текущая директория>\dnf1.exe
- %TEMP%\nsy2.tmp\System.dll
- <Текущая директория>\Sanlu.exe
- <Текущая директория>\dnf1.exe
- <Текущая директория>\Sanlu.exe
- %TEMP%\nsy2.tmp\System.dll
- 'www.dn###nlu.com':80
- 'localhost':1042
- 'vi#.##rver.coyo.eu':88
- 'to####.server.coyo.eu':88
- '59.##.197.16':8080
- 'localhost':1039
- www.dn###nlu.com/
- DNS ASK vi#.##rver.coyo.eu
- DNS ASK www.dn###nlu.com
- DNS ASK to####.server.coyo.eu
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''