Техническая информация
- '<SYSTEM32>\wpyjuwtnfxw.exe'
- '%TEMP%\a06.exe'
- '<SYSTEM32>\findstr.exe' /i /b "a06.exe"
- '<SYSTEM32>\ping.exe' -n 1 127.0.0.1
- '<SYSTEM32>\attrib.exe' %TEMP%\a06.exe.bat -r -a -s -h
- '<SYSTEM32>\cmd.exe' /c %TEMP%\a06.exe.bat
- '<SYSTEM32>\attrib.exe' %TEMP%\a06.exe.bat -r -a +s +h
- '<SYSTEM32>\tasklist.exe'
- %TEMP%\E_N4\iext.fnr
- %TEMP%\E_N4\internet.fne
- %TEMP%\a06.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\zr[1].htm
- <SYSTEM32>\wpyjuwtnfxw.exe
- %TEMP%\E_N4\HtmlView.fne
- %TEMP%\E_N4\iext2.fne
- %TEMP%\E_N4\krnln.fnr
- %TEMP%\E_N4\TrayIcon.fne
- %TEMP%\E_N4\EThread.fne
- %TEMP%\E_N4\shell.fne
- %TEMP%\a06.exe.bat
- %TEMP%\a06.exe
- 'www.x5##.com':80
- 'localhost':1038
- www.x5##.com/tyfgx.txt
- www.x5##.com/zr.htm
- DNS ASK www.x5##.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'