Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\SysDirv.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\SysDirv.lnk
- '<SYSTEM32>\ipconfig.exe' /all
- '<SYSTEM32>\xcopy.exe' "%TEMP%\SysDirv.lnk" "%HOMEPATH%\Start Menu\Programs\Startup" /Y
- '<SYSTEM32>\xcopy.exe' "%TEMP%\SysDirv.lnk" "%ALLUSERSPROFILE%\Start Menu\Programs\Startup" /Y
- <LS_APPDATA>\MZミ
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\logo[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\logo[1].php
- %TEMP%\SysDirv.lnk
- %TEMP%\iconfall.log
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\logo[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\logo[1].php
- 'di##um1.net':80
- di##um1.net/dum/CRNJEUFU@URNXYMAV/MZ???
- di##um1.net/dum/logo.php?cn##################################
- DNS ASK di##um1.net