Техническая информация
- <SYSTEM32>\at.exe 15:21 /every:2,5,8,11,14,17,20,23,26,29 "<SYSTEM32>\imapii.exe"
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\google[1]
- <SYSTEM32>\imapii.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\indeh[1].php
- %TEMP%\1556216131.tmp
- %TEMP%\2122022774.tmp
- %TEMP%\28375668.bin
- %TEMP%\2087631788.bin
- %TEMP%\28375668.bin
- %TEMP%\1556216131.tmp
- %TEMP%\2122022774.tmp
- 'kw###ame.com':80
- '74.##5.232.51':80
- 'localhost':1034
- kw###ame.com/indeh.php?u=########################################
- 74.##5.232.51/
- DNS ASK kw###ame.com
- DNS ASK google.com