Техническая информация
- %WINDIR%\Tasks\ISNDQTQDLN.job
- '<SYSTEM32>\jwrspuay.exe' "<SYSTEM32>\jwrspuay.exe",Fjaxbcm
- '<SYSTEM32>\ipconfig.exe' /flushdns
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\P1B1Z01E\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\OF4RMBWF\desktop.ini
- %TEMP%\~unins4671.bat
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\O167WHYJ\desktop.ini
- <SYSTEM32>\jwrspuay.exe
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\YBMTUH6Z\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\O167WHYJ\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\P1B1Z01E\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\OF4RMBWF\desktop.ini
- %WINDIR%\Tasks\ISNDQTQDLN.job
- <SYSTEM32>\jwrspuay.exe
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\YBMTUH6Z\desktop.ini
- <SYSTEM32>\Restore\MachineGuid.txt
- 'im###hut4.cn':80
- 'mu###tab.net':80
- im###hut4.cn/update/utu.dat
- DNS ASK im###hut4.cn
- DNS ASK mu###tab.net