Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\xmlprov] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\havUai] 'Start' = '00000002'
- <SYSTEM32>\xmlprov.dll
- <SYSTEM32>\havUai.sys
- %WINDIR%\Temp\2DD33B53.tmp
- %WINDIR%\Temp\2D5C173E.tmp
- %TEMP%\36557722.log
- C:\Documents and Settings\Infortmp.txt
- <SYSTEM32>\365505A8.tmp
- %WINDIR%\Temp\2D5C173E.tmp
- %TEMP%\36557722.log
- %WINDIR%\Temp\2DD33B53.tmp
- C:\Documents and Settings\Infortmp.txt
- <SYSTEM32>\365505A8.tmp
- '61.##2.227.76':799
- '11#.#38.237.53':799
- 'ex#.##odlite.com':799
- 'www.ik##520.com':781
- 'p.###456.com':1201
- DNS ASK p.###456.com
- DNS ASK ex#.##odlite.com
- DNS ASK www.ik##520.com
- DNS ASK www.ba##u.com