Техническая информация
- '%TEMP%\okrS.exe'
- '%TEMP%\okrS.exe' (загружен из сети Интернет)
- <SYSTEM32>\iexpress.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\iexpress[1].dll
- <SYSTEM32>\disk.dll
- %TEMP%\WinIo.dll
- %TEMP%\okrS.exe
- %TEMP%\WinIO.sys
- %TEMP%\WinIO.vxd
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\disk[1].dll
- %TEMP%\up.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\up[1].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\Win32[1].dll
- <SYSTEM32>\adsl.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\adsl[1].dll
- <SYSTEM32>\Win32.dll
- %TEMP%\~DF18FD.tmp
- <SYSTEM32>\CONFIG.TMP
- %TEMP%\WinIO.sys в %WINDIR%\system\MSVCP61.DLL
- %TEMP%\okrS.exe в <SYSTEM32>\GG.tmp
- %TEMP%\WinIo.dll в %WINDIR%\system\MSYSTEM.DLL
- %TEMP%\WinIO.vxd в %WINDIR%\system\AVICAPE.DLL
- 'www.ga###s.com.cn':80
- 'localhost':1037
- www.ga###s.com.cn/wlwz/disk.dll
- www.ga###s.com.cn/wlwz/iexpress.dll
- www.ga###s.com.cn/wlwz/adsl.dll
- www.ga###s.com.cn/wlwz/up.txt
- www.ga###s.com.cn/wlwz/Win32.dll
- DNS ASK www.ga###s.com.cn