Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\dx7vb6acb] 'Start' = '00000002'
- '<SYSTEM32>\rundll32.exe' "%CommonProgramFiles%\Microsoft Shared\MSInfo\dx7vb6acb.dll",ServiceBoot
- '<SYSTEM32>\wscript.exe' "%TEMP%\3b1a_1b9d.vbs" //B //Nologo
- %CommonProgramFiles%\Microsoft Shared\MSInfo\RCX2.tmp
- %CommonProgramFiles%\Microsoft Shared\MSInfo\dx7vb6acb.ini
- %TEMP%\3b1a_1b9d.vbs
- %CommonProgramFiles%\Microsoft Shared\MSInfo\dx7vb6acb.dll
- %ALLUSERSPROFILE%\DebugLog.log
- %TEMP%\3eaf_13a5.dll
- %TEMP%\RCX1.tmp
- %TEMP%\3b1a_1b9d.vbs
- %CommonProgramFiles%\Microsoft Shared\MSInfo\dx7vb6acb.ini
- %TEMP%\3eaf_13a5.dll
- %CommonProgramFiles%\Microsoft Shared\MSInfo\dx7vb6acb.dll
- %CommonProgramFiles%\Microsoft Shared\MSInfo\RCX2.tmp в %CommonProgramFiles%\Microsoft Shared\MSInfo\dx7vb6acb.dll
- %TEMP%\RCX1.tmp в %TEMP%\3eaf_13a5.dll
- 'by#####.kukunews.com':443
- DNS ASK by#####.kukunews.com
- ClassName: 'Shell_TrayWnd' WindowName: ''