Техническая информация
- '%WINDIR%\Web\printers\vb\Rar.exe' x -y %WINDIR%\Web\Printers\vb\update.rar %WINDIR%\Web\Printers\vb\
- '%WINDIR%\Web\printers\vb\setup.exe'
- firefox.exe
- %WINDIR%\Web\printers\vb\setup.exe
- %TEMP%\aut3.tmp
- %WINDIR%\Web\printers\vb\taiphanmemvaobong.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\taiphanmemvaobong[1].txt
- %TEMP%\kgzqerb
- %TEMP%\aut1.tmp
- %WINDIR%\Web\printers\vb\Rar.exe
- %TEMP%\aut2.tmp
- %TEMP%\aut2.tmp
- %TEMP%\aut3.tmp
- %TEMP%\aut1.tmp
- %TEMP%\kgzqerb
- 'www.ma####hphonglan.com':80
- www.ma####hphonglan.com/taiphanmemvaobong.txt
- DNS ASK www.ma####hphonglan.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'