Техническая информация
- <SYSTEM32>\at.exe 15:15 /every:2,5,8,11,14,17,20,23,26,29 "<SYSTEM32>\fontvieww.exe"
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\google[1]
- <SYSTEM32>\fontvieww.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\indeh[1].php
- %TEMP%\1157518095.tmp
- %TEMP%\161909090.tmp
- %TEMP%\2306228273.tmp
- %TEMP%\1771627159.bin
- %TEMP%\1771627159.bin
- %TEMP%\1157518095.tmp
- %TEMP%\2306228273.tmp
- 'kw###ame.com':80
- '74.##5.232.51':80
- 'localhost':1037
- kw###ame.com/indeh.php?u=######################################
- 74.##5.232.51/
- DNS ASK kw###ame.com
- DNS ASK google.com
- ClassName: 'Shell_TrayWnd' WindowName: ''