Техническая информация
- скрытых файлов
- <SYSTEM32>\sc.exe delete mctskshd.exe
- <SYSTEM32>\drv32dta\pstore_120627_123922.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\adminclients[1].html
- <SYSTEM32>\z_<Имя вируса>_debug.txt
- '91.##1.65.76':80
- 'localhost':1041
- '20#.#6.232.182':80
- 91.##1.65.76/~a556679/soft/admin//clients/adminclients.html
- DNS ASK www.microsoft.com
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''