Техническая информация
- '%WINDIR%\Temp\svchost.exe'
- '%WINDIR%\Temp\svchost.exe' (загружен из сети Интернет)
- <SYSTEM32>\ctfmon.exe
- %WINDIR%\Temp\temp.txt
- <SYSTEM32>\skin.dat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\online[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\iename[1].exe
- %WINDIR%\Temp\svchost.exe
- %WINDIR%\Temp\temp.txt
- 'wb####09.3322.org':80
- 'localhost':1037
- wb####09.3322.org/count/online.php?na#####################
- wb####09.3322.org/iename.exe
- DNS ASK wb####09.3322.org