Техническая информация
- [<HKLM>\SOFTWARE\Classes\iexploreFile\shell\open\command] '' = ''
- <SYSTEM32>\wscript.exe <Текущая директория>\Killme.vbs
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://www.52##21.com/1
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\launch internet explorer browser.iexplore
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\type[1].txt
- <Текущая директория>\Killme.vbs
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\dom1[1].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\type[1].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\dom1[1].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\type[1].txt
- <Текущая директория>\Killme.vbs
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\dom1[1].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\type[1].txt
- 'localhost':1038
- 'u.###6688.com':80
- 'localhost':1035
- u.###6688.com/type.txt
- u.###6688.com/dom1.txt
- DNS ASK www.52##21.com
- DNS ASK u.###6688.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''