Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Хост-процесс для служб Windows' = '%WINDIR%\svchost.exe'
- '%WINDIR%\svchost.exe'
- %WINDIR%\svchost.exe
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\BOWDBRP7\IfoneIP[2].txt
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\BOWDBRP7\IfoneIP[1].txt
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\IfoneIP[1].txt
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\YF7T7AK2\IfoneIP[1].txt
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\w[1].txt
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\BOWDBRP7\IfoneIP[1].txt
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\BOWDBRP7\IfoneIP[2].txt
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\IfoneIP[1].txt
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\YF7T7AK2\IfoneIP[1].txt
- 'kr####way.ucoz.net':80
- kr####way.ucoz.net/w.txt
- kr####way.ucoz.net/IfoneIP.txt
- DNS ASK kr####way.ucoz.net
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: 'OleMainThreadWndClass' WindowName: '(null)'