Техническая информация
- '%WINDIR%\Temp\temp.exe'
- '<SYSTEM32>\wscript.exe' "%WINDIR%\temp\runner.vbs"
- %WINDIR%\Temp\runner.vbs
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\regist[1].php
- %WINDIR%\Temp\temp.exe
- %WINDIR%\Temp\xregist.exe
- %WINDIR%\Temp\xregist.exe
- %WINDIR%\Temp\temp.exe
- %WINDIR%\Temp\runner.vbs
- 'localhost':1039
- 'd9####d90d90.co.cc':80
- 'localhost':1036
- d9####d90d90.co.cc/tmp/regist.php?re#####
- DNS ASK d9####d90d90.co.cc
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: '' WindowName: '(null)'