Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\msmsgs.exe
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe' /logfile= /LogToConsole=false /U "%APPDATA%\Microsoft\mscore.dll"
- '%TEMP%\connoie.exe'
- '%ProgramFiles%\Windows NT\Accessories\wordpad.exe' "%TEMP%\word.doc"
- %APPDATA%\Microsoft\mscore.dll
- %TEMP%\connoie.exe
- %TEMP%\word.doc
- 'ri#####e.msftupdate.com':80
- '67.##5.160.76':80
- http://www.ya##o.com/ via 67.##5.160.76
- DNS ASK ri#####e.msftupdate.com
- DNS ASK www.ya##o.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'WordPadClass' WindowName: ''