Техническая информация
- '%TEMP%\flashplayer_update.exe'
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- %TEMP%\flashplayer_update.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\1403p[1].nub
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\1403Mixp[1].nub
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\1403p[1].nub
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\1403Mixp[2].nub
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\1403Mixp[1].nub
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\1403p[1].nub
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\1403p[1].nub
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\1403Mixp[1].nub
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\1403p[2].nub
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\1403Mixp[1].nub
- 'az####rdpress.co.uk':80
- 'pa######dentistry.com.au':80
- 'se#####pertyfastuk.net':80
- 'bi#####edental.com.au':80
- az####rdpress.co.uk/images/banners/1403Mixp.nub
- pa######dentistry.com.au/wp-content/uploads/2014/03/1403Mixp.nub
- se#####pertyfastuk.net/wp-content/uploads/1403p.nub
- bi#####edental.com.au/images/graphics/outlines/1403p.nub
- DNS ASK az####rdpress.co.uk
- DNS ASK pa######dentistry.com.au
- DNS ASK se#####pertyfastuk.net
- DNS ASK bi#####edental.com.au