Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\oselocal] 'Start' = '00000002'
- <SYSTEM32>\oselocal.dll -Service
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\ip[1].asp
- %WINDIR%\Temp\_D_0001B7C2.tmp
- <SYSTEM32>\Log\BASE.2012-10-23.log
- %WINDIR%\ENA08E7DBA3.tmp
- <SYSTEM32>\oselocal.dll.tmp
- %WINDIR%\ENA08E7DBA3.tmp
- <SYSTEM32>\oselocal.dll.tmp в <SYSTEM32>\oselocal.dll
- 'localhost':1038
- 'qj##.#hagua911.cn':80
- qj##.#hagua911.cn/qjb/ip.asp?Ti##########
- DNS ASK qj##.#hagua911.cn