Техническая информация
- '%TEMP%\nsx3.tmp\top1000-beam.exe'
- '%TEMP%\nsx3.tmp\BPFull.exe'
- '%TEMP%\nsx3.tmp\03-robbie_williams_-_advertising_space-ktmp3.mp3.exe'
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- '%WINDIR%\explorer.exe' http://be#m.to/top1000
- %TEMP%\nsx3.tmp\top1000-beam.exe
- %TEMP%\~4.bat
- %TEMP%\nsx3.tmp\BPFull.exe
- %TEMP%\nsh2.tmp
- %TEMP%\nsx3.tmp\03-robbie_williams_-_advertising_space-ktmp3.mp3.exe
- %TEMP%\~4.bat
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- <SYSTEM32>\PerfStringBackup.TMP
- %TEMP%\~4.bat
- %TEMP%\nsx3.tmp\03-robbie_williams_-_advertising_space-ktmp3.mp3.exe
- %TEMP%\nsx3.tmp\BPFull.exe
- %TEMP%\nsx3.tmp\top1000-beam.exe
- 'be#m.to':80
- 'localhost':1038
- be#m.to/top1000
- DNS ASK be#m.to
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''