Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\inc.exe
- '%HOMEPATH%\Start Menu\Programs\Startup\inc.exe'
- '%HOMEPATH%\Start Menu\Programs\Startup\inc.exe' (загружен из сети Интернет)
- '<SYSTEM32>\sc.exe' config wscsvc start= disabled
- %APPDATA%\leto.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\PGates[1].dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\nois[1].exe
- 'www.sc####intoscana.it':80
- 'www.po#####staperpetua.cat':80
- www.sc####intoscana.it/site/media/system/images/PGates.dll
- www.po#####staperpetua.cat/media/system/js/nois.exe
- DNS ASK www.sc####intoscana.it
- DNS ASK www.po#####staperpetua.cat