Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MicroMedia' = '%TEMP%\MicroMedia\MediaCenter.exe'
- '%TEMP%\MicroMedia\MediaCenter.exe'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\script[1].asp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\peawrhsh-1998166001[1].jpg
- %TEMP%\MicroMedia\MediaCenter.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\script[1].asp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\peawrhsh-1998166001[1].jpg
- '11#.#7.35.117':80
- 11#.#7.35.117/script.asp?re###############################################
- 11#.#7.35.117/photo/peawrhsh-1998166001.jpg?re##########