Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'winlogon' = '"%TEMP%\6.85\svckost.exe"'
- Средство контроля пользовательских учетных записей (UAC)
- %TEMP%\6.85\svckost.exe
- %TEMP%\6.85\MSWINSCK.OCX
- %TEMP%\6.85\RICHTX32.OCX
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\DakkaAdresi[1].txt
- %HOMEPATH%\Desktop\Mozilla Firefox.lnk
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Mozilla Firefox.lnk
- %TEMP%\$inst\5.tmp
- %TEMP%\$inst\4.tmp
- %TEMP%\$inst\2.tmp
- %TEMP%\6.85\MSINET.OCX
- %TEMP%\6.85\COMDLG32.OCX
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\4.tmp
- %TEMP%\$inst\5.tmp
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\2.tmp
- 'ch###t.gen.tr':80
- 'localhost':1039
- '74.##5.232.51':80
- ch###t.gen.tr/DakkaAdresi.txt
- DNS ASK ch###t.gen.tr
- DNS ASK www.google.com
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''