Техническая информация
- %PROGRAM_FILES%\MSDN\Thunder7.0.exe
- <SYSTEM32>\rundll32.exe shimgvw.dll,ImageView_Fullscreen %TEMP%\106359.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\updspapi[1].rar
- %TEMP%\spuninst.jpg
- %TEMP%\updspapi.rar
- %PROGRAM_FILES%\AotЌ95j9\updspapi.dll
- %PROGRAM_FILES%\AotЌ95j9\niudll.jpg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\spuninst[1].rar
- %TEMP%\nsg2.tmp\System.dll
- %PROGRAM_FILES%\MSDN\Thunder7.0.exe
- %TEMP%\106359.jpg
- %WINDIR%\vbcfg.ini
- <SYSTEM32>\1h2ToI.pic
- %TEMP%\nsg2.tmp\System.dll
- %TEMP%\updspapi.rar в %PROGRAM_FILES%\AotЌ95j9\update\updspapi.dll
- %TEMP%\spuninst.jpg в %PROGRAM_FILES%\AotЌ95j9\spuninst.exe
- 'wo##.vicp.hk':80
- 'localhost':1037
- wo##.vicp.hk/updspapi.rar
- wo##.vicp.hk/spuninst.rar
- DNS ASK wo##.vicp.hk
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'ShImgVw:CPreviewWnd' WindowName: ''