Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Downloader] 'Start' = '00000002'
- <SYSTEM32>\Downloader.exe
- <SYSTEM32>\cmd.exe /c DelMe.bat
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\0J2LM5OP\wpad[1].dat
- <Текущая директория>\DelMe.bat
- <SYSTEM32>\Downloader.exe
- 'wpad.localdomain':80
- '21#.#45.124.9':80
- wpad.localdomain/wpad.dat
- 21#.#45.124.9/css/google.txt
- 21#.#45.124.9/css/1/1/count.asp?ma########################################################################
- DNS ASK wpad.localdomain