Техническая информация
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\lsass.exe
- <SYSTEM32>\csrss.exe
- <SYSTEM32>\spoolsv.exe
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\416NCT2Z\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\KTMZAZCX\nxb[1].php
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\KTMZAZCX\wpad[1].dat
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\SP2R8X2J\desktop.ini
- %TEMP%\7af3996f
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\KTMZAZCX\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\2C1WFS8B\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\SP2R8X2J\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\416NCT2Z\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\KTMZAZCX\desktop.ini
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\2C1WFS8B\desktop.ini
- %TEMP%\7af3996f
- 'wpad.localdomain':80
- '95.#4.56.15':80
- wpad.localdomain/wpad.dat
- 95.#4.56.15/jid/nxb.php?dw####
- 95.#4.56.15/jid/nxb.php?in######################################
- DNS ASK wpad.localdomain