Техническая информация
- '%TEMP%\1.tmp\zomboz.EXE'
- '<SYSTEM32>\rundll32.exe' InetCpl.cpl,ClearMyTracksByProcess 2
- '<SYSTEM32>\rundll32.exe' InetCpl.cpl,ClearMyTracksByProcess 8
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\1.tmp\1.bat" "
- iexplore.exe
- %TEMP%\1.tmp\anti.exe
- %TEMP%\1.tmp\1.bat
- %TEMP%\1.tmp\zomboz.EXE
- %TEMP%\1.tmp\1.bat
- %TEMP%\1.tmp\anti.exe
- %TEMP%\1.tmp\zomboz.EXE
- 've####n.vinacf.com':80
- 'li#####2.blogspot.com':80
- 'localhost':1037
- ve####n.vinacf.com/fapcf.html
- li#####2.blogspot.com/2014/09/var-weblink-new-array-linkbucks-active.html
- DNS ASK ve####n.vinacf.com
- DNS ASK li#####2.blogspot.com
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''