Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'System32' = '%PROGRAM_FILES%\Internet Explorer\taskmgr.exe'
- %PROGRAM_FILES%\Internet Explorer\Desktops.ini
- %PROGRAM_FILES%\Internet Explorer\taskmgr.exe
- %PROGRAM_FILES%\Internet Explorer\Desktops.ini (загружен из сети Интернет)
- %PROGRAM_FILES%\Internet Explorer\Desktops.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\list[1].txt
- %PROGRAM_FILES%\Internet Explorer\taskmgr.exe
- %PROGRAM_FILES%\Internet Explorer\Desktops.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\list[1].txt
- '22#.#86.36.170':8091
- 'www.sc##qc.com':80
- 'localhost':1035
- www.sc##qc.com/list.txt
- DNS ASK www.sc##qc.com