Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Microsoft NetMSSQL] 'Start' = '00000002'
- '%TEMP%\MTOBL3.EXE'
- '%TEMP%\IXSGA3.EXE'
- '<SYSTEM32>\svchost.exe' -k "Microsoft NetMSSQL"
- <SYSTEM32>\mt28d52m.dll
- <SYSTEM32>\RCX1.tmp
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\eoqkr007[1].txt
- %TEMP%\IXSGA3.EXE
- %TEMP%\MTOBL3.EXE
- <SYSTEM32>\framedyn.dll
- %TEMP%\MTOBL3.EXE
- <SYSTEM32>\mt28d52m.dll
- <SYSTEM32>\RCX1.tmp в <SYSTEM32>\mt28d52m.dll
- '10#.250.2.3':80
- 10#.250.2.3/ip/eoqkr007.txt
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'