Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\WinDef.exe
- %HOMEPATH%\Start Menu\Programs\Startup\svc.exe
- %HOMEPATH%\Start Menu\Programs\Startup\svc.exe
- <SYSTEM32>\ntvdm.exe -f -i1
- %WINDIR%\Temp\scs2.tmp
- %WINDIR%\Temp\scs1.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\VIRUS[1].txt
- %WINDIR%\Temp\scs2.tmp
- %WINDIR%\Temp\scs1.tmp
- 'www.li###bot.net':80
- 'localhost':1036
- www.li###bot.net/VIRUS.txt
- DNS ASK www.li###bot.net
- ClassName: 'ConsoleWindowClass' WindowName: 'ntvdm-b18.b1c.390001'