Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\taskhost.exe
- '%TEMP%\is-SMB2D.tmp\is-K8S88.tmp' /SL4 $10100 "C:\setup.exe" 2899812 52736
- 'C:\setup.exe'
- '%HOMEPATH%\Start Menu\Programs\Startup\taskhost.exe'
- %TEMP%\is-SMB2D.tmp\is-K8S88.tmp
- C:\setup.exe
- 'wp#d':80
- 'rh##os.tk':21
- 'li##bee.com':80
- 'localhost':1037
- 'www.rh##os.tk':80
- wp#d/wpad.dat
- www.rh##os.tk/files/2010/command
- www.rh##os.tk/files/2010/no.php
- li##bee.com/EPKFG
- DNS ASK wp#d
- DNS ASK rh##os.tk
- DNS ASK www.rh##os.tk
- DNS ASK li##bee.com
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''