Техническая информация
- [<HKLM>\SOFTWARE\Classes\iexplorexFile\shell\open\command] '' = ''
- '<SYSTEM32>\wscript.exe' <Текущая директория>\Killme.vbs
- '%PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE' http://www.52##21.com/?1
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\t[1].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\type[1].txt
- <Текущая директория>\Killme.vbs
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\dom1[1].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\type[1].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\dom1[1].txt
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\launch internet explorer browser.iexplorex
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\dom1[1].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\dom1[1].txt
- <Текущая директория>\Killme.vbs
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\type[1].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\dom1[1].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\type[1].txt
- 'localhost':1039
- 'u.###6688.com':80
- 'localhost':1036
- u.###6688.com/t.txt
- u.###6688.com/type.txt
- u.###6688.com/dom1.txt
- DNS ASK u.###6688.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''