Техническая информация
- '%WINDIR%\Fonts\CFPRO.exe'
- '<SYSTEM32>\cmd.exe' /c ""%WINDIR%\Fonts\1.bat" "
- ClassName: 'OLLYDBG' WindowName: '(null)'
- %WINDIR%\Fonts\1.bat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\continue[1].html
- %WINDIR%\Fonts\Activators.exe
- %WINDIR%\Fonts\CFPRO.exe
- 'cf###.webs.pm':80
- 'localhost':1035
- cf###.webs.pm///continue.html
- DNS ASK cf###.webs.pm
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'