Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Windows Update' = '<SYSTEM32>\oobe\winlogon.exe'
- <Имя диска съемного носителя>:\setup.exe
- <SYSTEM32>\oobe\winlogon.exe
- <SYSTEM32>\oobe\winlogon.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\checkip.dyndns[1].7120577218
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\SL6TKFAX\whatismyip[1].9035660429
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\checkip.dyndns[1].0785014222
- %TEMP%\~ip.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\whatismyip[1].8821647298
- %TEMP%\~ip.tmp
- 'www.wh###smyip.com':80
- 'ch####p.dyndns.org':80
- www.wh###smyip.com/?rn########################################
- www.wh###smyip.com/?rn#########################################
- ch####p.dyndns.org/?rn#########################################
- DNS ASK www.wh###smyip.com
- DNS ASK ch####p.dyndns.org