Техническая информация
- %HOMEPATH%\Temp\install.php
- %HOMEPATH%\Temp\__mdf_
- %HOMEPATH%\Temp\check.php
- %WINDIR%\sche.tmp
- %WINDIR%\sche.tmp.tmp
- %HOMEPATH%\Temp\rotby.bak
- %PROGRAM_FILES%\Temp\mos.bak
- %TEMP%\_sti_
- %HOMEPATH%\__erb__
- %HOMEPATH%\Temp\__rbs__
- %HOMEPATH%\Temp\twinbx
- %HOMEPATH%\rotby.bak
- %HOMEPATH%\Temp\install.php
- %HOMEPATH%\Temp\__mdf_
- %WINDIR%\sche.tmp.tmp
- %HOMEPATH%\Temp\check.php
- %HOMEPATH%\Temp\__rbs__
- %PROGRAM_FILES%\Temp\mos.bak
- %TEMP%\_sti_
- %HOMEPATH%\Temp\twinbx
- %HOMEPATH%\__erb__
- %HOMEPATH%\Temp\rotby.bak в %HOMEPATH%\rotby.bak
- 'www.dz##a.com':80
- 'up####.dzpia.com':80
- www.dz##a.com/clock4/install.php?ma###################
- www.dz##a.com/clock4/check.php?ma###################
- up####.dzpia.com/mcash/clock4.js
- up####.dzpia.com/clock4//msiop.exe
- up####.dzpia.com/mcash/vista2.pl
- up####.dzpia.com/clock4//rotby.bak
- DNS ASK www.dz##a.com
- DNS ASK up####.dzpia.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'