Техническая информация
- '<SYSTEM32>\wscript.exe' "c:\index.jse"
- '%HOMEPATH%\Templates\9099' (загружен из сети Интернет)
- '%HOMEPATH%\Templates\9099'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\game[1].htm
- %HOMEPATH%\Templates\mm.ico
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\mm[1].htm
- %HOMEPATH%\Templates\9099
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\kusila[1].htm
- %HOMEPATH%\Templates\game.ico
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\tao[1].htm
- C:\index.jse
- %ProgramFiles%\UltraEdit\ico\tao.ico
- %HOMEPATH%\Templates\movie.ico
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\movie[1].htm
- %HOMEPATH%\Templates\taobao.ico
- C:\index.jse
- 'www.61##.com':80
- 'localhost':1039
- http://www.61##.com/down/game.htm
- http://www.61##.com/down/kusila.htm
- http://www.61##.com/down/mm.htm
- http://www.61##.com/down/tao.htm
- http://www.61##.com/down/movie.htm
- DNS ASK www.61##.com