Техническая информация
- '%PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE' http://10#####aoestudios.com/on-line/n_03.php?MC######### / 6:22:21 PM
- '<SYSTEM32>\regsvr32.exe' /s "%WINDIR%\Smile.dll"
- '<SYSTEM32>\wscript.exe' /B "%HOMEPATH%\SoxL.vbe"
- %WINDIR%\Smile.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\n_03[1].php
- %HOMEPATH%\lapso.tmp
- %HOMEPATH%\SoxL.vbe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\AFRONL[1]
- %HOMEPATH%\SoxL.vbe
- 'localhost':1039
- '10#####aoestudios.com':80
- 'localhost':1036
- 'in###red.com.pl':80
- 10#####aoestudios.com/on-line/n_03.php?MC############################
- in###red.com.pl/templates/atomic/AFRONL
- DNS ASK 10#####aoestudios.com
- DNS ASK in###red.com.pl
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'MS_WINHELP' WindowName: ''