Техническая информация
- <SYSTEM32>\cmd.exe /c ""%TEMP%\2012-09-24 22-41-17 046.bat" "
- <SYSTEM32>\cmd.exe /c ""%TEMP%\2012-09-24 22-41-19 093.bat" "
- <SYSTEM32>\cmd.exe /c ""%TEMP%\2012-09-24 22-41-25 171.bat" "
- <SYSTEM32>\cmd.exe /c ""%TEMP%\2012-09-24 22-40-52 890.bat" "
- <SYSTEM32>\cmd.exe /c ""%TEMP%\2012-09-24 22-41-02 156.bat" "
- <SYSTEM32>\cmd.exe /c ""%TEMP%\2012-09-24 22-41-11 718.bat" "
- %TEMP%\2012-09-24 22-41-17 046.bat
- %HOMEPATH%\Desktop\╠╘▒ж═°.url
- %HOMEPATH%\Desktop\Internet Exp1orer.URL
- %TEMP%\2012-09-24 22-41-11 718.bat
- %HOMEPATH%\Desktop\╨б╙╬╧╖.URL
- %HOMEPATH%\Desktop\╔╧═°╡╝║╜.url
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Internet Exp1orer.URL
- %HOMEPATH%\Desktop\╧╔╙Є.url
- %TEMP%\2012-09-24 22-41-19 093.bat
- %TEMP%\2012-09-24 22-41-25 171.bat
- %TEMP%\2012-09-24 22-41-02 156.bat
- %PROGRAM_FILES%\РЎУОП·\baidu.ico
- %PROGRAM_FILES%\РЎУОП·\dangdangwang.ico
- %PROGRAM_FILES%\РЎУОП·\taobao.ico
- %PROGRAM_FILES%\РЎУОП·\РЎУОП·tmp.exe
- %PROGRAM_FILES%\РЎУОП·\РЎУОП·.exe
- %HOMEPATH%\Favorites\ПЙУт.url
- %TEMP%\2012-09-24 22-40-52 890.bat
- %HOMEPATH%\Favorites\МФ±¦Нш.url
- %PROGRAM_FILES%\РЎУОП·\xianyu.ico
- %HOMEPATH%\Favorites\µ±µ±Нш.url
- 'so#.5k5.net':80
- so#.5k5.net/interface?ac##################################################
- DNS ASK so#.5k5.net