Техническая информация
- '<SYSTEM32>\netstat.exe' -an
- '<SYSTEM32>\ipconfig.exe' /all
- '<SYSTEM32>\cmd.exe' /c <SYSTEM32>\1075.bat
- <SYSTEM32>\spoolsv.exe
- %WINDIR%\Temp\2003\sysinfo.log
- %WINDIR%\Temp\2003\fsc.tmp
- %WINDIR%\Temp\~13785.tmp
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\login_ok[1].php
- <SYSTEM32>\svcsam.dll
- <SYSTEM32>\~00165468.tmp
- %WINDIR%\Temp\2003\fsc.tmp~
- <SYSTEM32>\1075.bat
- %WINDIR%\Temp\2003\fsc.tmp~
- <SYSTEM32>\~00165468.tmp в <SYSTEM32>\qsti.dll
- 'kj##r.kr':80
- 'localhost':1039
- kj##r.kr/kboard/login_ok.php?no###################################################################
- DNS ASK kj##r.kr