Техническая информация
- '%TEMP%\rooge.exe' -m del -k rooge
- ClassName: 'OllyDbg' WindowName: ''
- ClassName: 'PROCMON_WINDOW_CLASS' WindowName: ''
- ClassName: 'gdkWindowToplevel' WindowName: ''
- %TEMP%\1453.tmp
- %TEMP%\rooge.exe
- 'www.ge##ext.com':80
- http://www.ge##ext.com/ge/config.php?q=##########################################################################################################################################################...
- DNS ASK www.ge##ext.com
- ClassName: '' WindowName: 'PE Explorer'
- ClassName: 'VMUIFrame' WindowName: ''
- ClassName: 'MMCMainFrame' WindowName: ''
- ClassName: 'CabinetWClass' WindowName: ''
- ClassName: 'Notepad' WindowName: ''
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- ClassName: 'PROCEXPL' WindowName: ''
- ClassName: 'Autoruns' WindowName: ''
- ClassName: 'dbgviewClass' WindowName: ''
- ClassName: '' WindowName: 'Fiddler - HTTP Debugging Proxy'
- ClassName: 'RootkitRevealerClass' WindowName: ''