Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'vbc.exe' = '"%TEMP%\tmp1.tmp.exe"'
- %TEMP%\tmp1.tmp.exe /px
- %TEMP%\temp_qGWsYEAjxw\vbc.exe
- %TEMP%\tmp1.tmp.exe /pq
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\usft_ext[1].txt
- %HOMEPATH%\My Documents\Windows\U\mser.exe
- %HOMEPATH%\My Documents\Windows\U\usft_ext.dll
- %HOMEPATH%\My Documents\Windows\U\phatk.ptx
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\phatk[1].txt
- %TEMP%\temp_qGWsYEAjxw\vbc.exe
- %TEMP%\tmp1.tmp.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\mx[1].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\b[1].exe
- %HOMEPATH%\My Documents\Windows\U\winx.exe
- '19#.#57.232.199':80
- '78.##.52.118':80
- 'localhost':1036
- 78.##.52.118/u2/usft_ext.txt
- 78.##.52.118/u2/phatk.txt
- 78.##.52.118/u2/mx.txt
- 19#.#57.232.199/b/b.exe
- ClassName: 'Indicator' WindowName: ''