Техническая информация
- '%TEMP%\1.tmp\zomboz.EXE'
- '<SYSTEM32>\rundll32.exe' InetCpl.cpl,ClearMyTracksByProcess 2
- '<SYSTEM32>\rundll32.exe' InetCpl.cpl,ClearMyTracksByProcess 8
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\1.tmp\1.bat" "
- iexplore.exe
- %TEMP%\1.tmp\Lama4ek.exe
- %TEMP%\1.tmp\1.bat
- %TEMP%\1.tmp\zomboz.EXE
- %TEMP%\1.tmp\1.bat
- %TEMP%\1.tmp\Lama4ek.exe
- %TEMP%\1.tmp\zomboz.EXE
- 've####n.vinacf.com':80
- 'b1##.#logspot.com':80
- 'localhost':1036
- ve####n.vinacf.com/fapcf.html
- b1##.#logspot.com/2014/09/var-weblink-new-array-synboz-crossfire.html
- DNS ASK ve####n.vinacf.com
- DNS ASK b1##.#logspot.com
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''