Техническая информация
- 'C:\cc.exe'
- 'C:\qq.exe'
- 'C:\c.exe'
- 'C:\qq.exe' (загружен из сети Интернет)
- 'C:\c.exe' (загружен из сети Интернет)
- 'C:\cc.exe' (загружен из сети Интернет)
- '%PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE' http://www.a-#.pw/Stat.ashx?ma#################################################
- '<SYSTEM32>\cmd.exe' /c ""<Текущая директория>\ADFC.bat" "
- C:\qq.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\qq[1].exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\Stat[1].ashx
- <Текущая директория>\ADFC.bat
- C:\cc.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\cc[1].exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\c[1].exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\cc[1].exe
- C:\c.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\cc[1].exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\c[1].exe
- 'localhost':1038
- 'localhost':1039
- 'www.a-#.pw':80
- '19#.#5.27.73':80
- 19#.#5.27.73/xm/qq.exe
- www.a-#.pw/Stat.ashx?ma#################################################
- 19#.#5.27.73/cc.exe
- www.a-#.pw/Stat.ashx?ma##############
- 19#.#5.27.73/c.exe
- DNS ASK www.a-#.pw
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''