Техническая информация
- <SYSTEM32>\cmd.exe /c c:\fbcheck.bat
- %TEMP%\154656.tmp
- %TEMP%\156750.tmp
- C:\fbcheck.bat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\in[1].php
- %TEMP%\152234.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\l[1].php
- %TEMP%\156750.tmp
- %TEMP%\154656.tmp
- %TEMP%\152234.tmp
- 'www.fa###ook.com':80
- 'tr##em.com':80
- 'localhost':1036
- www.fa###ook.com/l.php?u=#####
- tr##em.com/check/3/in.php?v=#
- DNS ASK www.fa###ook.com
- DNS ASK tr##em.com