Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'shell' = 'Explorer.exe "%PROGRAM_FILES%\hrxse\wifgcdx.exe"'
- <SYSTEM32>\svchost.exe -k netsvcs
- <SYSTEM32>\ping.exe -n 5 127.0.0.1
- <SYSTEM32>\services.exe
- <SYSTEM32>\cmd.exe /c "%TEMP%\\s.bat"
- %APPDATA%\Mozilla\Firefox\Profiles\przhlnon.default\prefs.js
- %TEMP%\lnk.bat
- %TEMP%\s.bat
- 'dl.#22.cc':80
- 'www.33##.org':80
- dl.#22.cc/up_2.asp?a=###########################
- www.33##.org/dyndns/getip
- DNS ASK dl.#22.cc
- DNS ASK www.33##.org