Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Userinit' = '<SYSTEM32>\userinit.exe,<SYSTEM32>\acctress.exe,'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\spxroute.tmp
- <SYSTEM32>\acctress.exe
- <SYSTEM32>\acctress.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\prx[1].sec
- '23.#1.1.34':80
- 23.#1.1.34/httpdocs/update/update.ini
- 23.#1.1.34/httpdocs/prx.sec
- 23.#1.1.34/cgi-bin/Owpp4.cgi
- 23.#1.1.34/cgi-bin/vip.cgi