Техническая информация
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\lsass.exe
- <SYSTEM32>\csrss.exe
- <SYSTEM32>\spoolsv.exe
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\8LU7S9QN\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\KZI5QR2T\echo[1].php
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\KZI5QR2T\wpad[1].dat
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\4TUV8LYN\desktop.ini
- %TEMP%\7af3996f
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\KZI5QR2T\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\4HWYHF3N\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\4TUV8LYN\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\8LU7S9QN\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\KZI5QR2T\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\4HWYHF3N\desktop.ini
- %TEMP%\7af3996f
- 'wpad.localdomain':80
- '95.#4.56.15':80
- wpad.localdomain/wpad.dat
- 95.#4.56.15/jid/echo.php?dw####
- 95.#4.56.15/jid/echo.php?in######################################
- DNS ASK wpad.localdomain