Техническая информация
- %TEMP%\Del1.tmp <Pid>144</Pid> <path><Полный путь к вирусу></path>
- %HOMEPATH%\Favorites\ТмРФЅ»УСНшЎЎ.lnk
- %HOMEPATH%\Desktop\Internet Explorer.lnk
- %HOMEPATH%\Favorites\ФЪПЯУОП·ЎЎ.lnk
- %TEMP%\Del1.tmp
- %HOMEPATH%\Favorites\Гв·СФЪПЯµзУ°ЎЎ.lnk
- %HOMEPATH%\Favorites\ТмРФЅ»УСНшЎЎ.lnk
- %HOMEPATH%\Desktop\Internet Explorer.lnk
- %HOMEPATH%\Favorites\Гв·СФЪПЯµзУ°ЎЎ.lnk
- %HOMEPATH%\Favorites\ФЪПЯУОП·ЎЎ.lnk
- 'we######9.w56.host-diy.net':80
- we######9.w56.host-diy.net/2/yinghuochong/count.asp?ma############################################################################
- DNS ASK we######9.w56.host-diy.net