Техническая информация
- '%TEMP%\is-91IPG.tmp\is-P5N9D.tmp' /SL4 $400F6 %TEMP%\RarSFX0\setup.exe 983063 68096
- '%TEMP%\RarSFX0\setup.exe'
- '%TEMP%\RarSFX0\wr.exe'
- '%WINDIR%\retadpu1000520.exe' 61A847B5BBF72813329B385370F901F0B3E35B6638993F4661AA4EBD86D67C56389B284534F310
- '%WINDIR%\retadpu1000520.exe' (загружен из сети Интернет)
- %TEMP%\is-91IPG.tmp\is-P5N9D.tmp
- %TEMP%\is-P9G5M.tmp\_shfoldr.dll
- %WINDIR%\retadpu1000520.exe
- %TEMP%\RarSFX0\setup.exe
- %TEMP%\RarSFX0\wr.exe
- 'x2#.####0520.wrs.mcboo.com':80
- x2#.####0520.wrs.mcboo.com/retadpu.exe
- DNS ASK x2#.####0520.wrs.mcboo.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'