Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Network' = 'wscript.exe /B "%HOMEPATH%\e.vbs"'
- <SYSTEM32>\wscript.exe /B "%HOMEPATH%\e.vbs
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://re###u-agir.fr/modules/mod_stats/g0/g0.php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\g0[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\itsworkforever.portalrecadastrohsbc[1]
- %HOMEPATH%\e.vbs
- %HOMEPATH%\e.vbs
- 're###u-agir.fr':80
- 'it#########ver.portalrecadastrohsbc.org':80
- 'localhost':1036
- re###u-agir.fr/modules/mod_stats/g0/g0.php
- it#########ver.portalrecadastrohsbc.org/
- DNS ASK re###u-agir.fr
- DNS ASK it#########ver.portalrecadastrohsbc.org
- '<IP-адрес в локальной сети>':1037
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''