Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'icl' = '"%WINDIR%\ocx\icl.exe"'
- %WINDIR%\ocx\icl.exe /i
- <SYSTEM32>\cmd.exe /c \tshow3966.bat
- C:\tshow3966.bat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ld[1].php
- %WINDIR%\ocx\icl.exe
- 'pd#.##ncommerce.com':80
- pd#.##ncommerce.com/ld.php?of##########
- DNS ASK pd#.##ncommerce.com
- '<IP-адрес в локальной сети>':1035
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''