Техническая информация
- %WINDIR%\peamms.exe
- %WINDIR%\Help\autornd.exe
- %WINDIR%\peamms.exe (загружен из сети Интернет)
- %WINDIR%\Help\autornd.exe (загружен из сети Интернет)
- %WINDIR%\tira.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\tiracmd[1].jpg
- %WINDIR%\peamms.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\tiratxt[1].jpg
- %WINDIR%\tira.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\micsounddb1[1].jpg
- %WINDIR%\tira.cmd
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\tira[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\autornd[1].jpg
- %WINDIR%\Help\autornd.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\uhosts[1].jpg
- %WINDIR%\Help\uhosts.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bdsystem[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\pegamail[1].jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\setex[1].jpg
- %WINDIR%\Setup_Explore.exe
- 'www.ar####ospdf.hpg.com':80
- 'localhost':1038
- www.ar####ospdf.hpg.com/tiracmd.jpg
- www.ar####ospdf.hpg.com/tiratxt.jpg
- www.ar####ospdf.hpg.com/micsounddb1.jpg
- www.ar####ospdf.hpg.com/tira.jpg
- www.ar####ospdf.hpg.com/pegamail.jpg
- www.ar####ospdf.hpg.com/autornd.jpg
- www.ar####ospdf.hpg.com/uhosts.jpg
- www.ar####ospdf.hpg.com/bdsystem.jpg
- www.ar####ospdf.hpg.com/setex.jpg
- DNS ASK www.ar####ospdf.hpg.com