Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\Microsoft Sync Services.lnk
- '<SYSTEM32>\cscript.exe' "%HOMEPATH%\SystemFolder\.vbe"
- '<SYSTEM32>\cscript.exe' %TEMP%\1.vbe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\watch[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\watch[1]
- %TEMP%\1.vbe
- %HOMEPATH%\SystemFolder\.vbe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\watch[1]
- %TEMP%\1.vbe
- 'localhost':1040
- 'localhost':1042
- 'localhost':1039
- 'localhost':1036
- 'www.yo##ube.com':80
- www.yo##ube.com/watch?v=###########
- DNS ASK www.yo##ube.com
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: '' WindowName: '(null)'