Техническая информация
- <SYSTEM32>\notepad.exe <SYSTEM32>\_delete.txt
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\_delete.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\AutoSetup[1].exe
- <SYSTEM32>\DownDLL.dll
- 'fi###.ccqit.com':80
- fi###.ccqit.com/Software/AutoSetup.exe
- DNS ASK fi###.ccqit.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'ProgMan' WindowName: ''