Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Extensions' = '%APPDATA%\explorerextensions.exe'
- %APPDATA%\explorerextensions.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\SL6TKFAX\checkip.dyndns[1].7218840236
- %APPDATA%\explorerextensions.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\-1[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\whatismyip[1].851969945
- %TEMP%\~ip.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\checkip.dyndns[1].6835304687
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\-1[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\whatismyip[1].9295407874
- %APPDATA%\explorerextensions.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\-1[1]
- %TEMP%\~ip.tmp
- 'www.ip###cation.com':80
- 'or#####.users.the-irc.com':4100
- 'ch####p.dyndns.org':80
- 'www.wh###smyip.com':80
- www.ip###cation.com/-1
- www.wh###smyip.com/?rn########################################
- ch####p.dyndns.org/?rn#########################################
- www.wh###smyip.com/?rn#########################################
- DNS ASK www.ip###cation.com
- DNS ASK or#####.users.the-irc.com
- DNS ASK ch####p.dyndns.org
- DNS ASK www.wh###smyip.com
- ClassName: 'Indicator' WindowName: ''