Техническая информация
- <SYSTEM32>\ftp.exe -vis:%WINDIR%/323742386729634728327426342304293462893
- <SYSTEM32>\cmd.exe /c ""%TEMP%\postal_amor_216.bat""
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\4136[1]
- %WINDIR%\323742386729634728327426342304293462893
- %TEMP%\postal_amor_216.bat
- %TEMP%\postal_amor_216.bat
- %WINDIR%\323742386729634728327426342304293462893
- 'localhost':1039
- 'www.gu###ito.com':80
- 'localhost':1036
- 'ww##.#ubdomain.com':21
- www.gu###ito.com/esp/tarjetas/postales/te_extrano/ya_quiero_volver/4136
- DNS ASK www.gu###ito.com
- DNS ASK ww##.#ubdomain.com
- '<IP-адрес в локальной сети>':1037
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''