Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{H8I22RB03-AB-B70-7-11d2-9CBD-0O00FS7AH6-9E2121BHJLK}] 'stubpath' = ''
- %WINDIR%\Tasks\°ІЧ°.bat
- %WINDIR%\programs\ini.exe
- %WINDIR%\programs\desktop.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\down[1].txt
- %TEMP%\configmon.dat
- %WINDIR%\programs\ini.exe
- %WINDIR%\programs\fuckme.vbs
- %WINDIR%\programs\wsock32.dll
- %WINDIR%\programs\desktop.ini
- 'localhost':1036
- 'hf####.takepceasy.com':80
- hf####.takepceasy.com/down.txt
- hf####.takepceasy.com/get.asp?ma####################
- DNS ASK hf####.takepceasy.com