Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\svchost.exe
- %TEMP%\svchost.dat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\t[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ip[1].php
- %TEMP%\ip
- %TEMP%\ip
- 'www.ko###outa.com':80
- 'localhost':1036
- www.ko###outa.com/newproject/t.php
- www.ko###outa.com/newproject/ip.php
- DNS ASK www.ko###outa.com
- ClassName: 'ConsoleWindowClass' WindowName: ''