Техническая информация
- '<SYSTEM32>\nokia32a.exe'
- '<SYSTEM32>\net1.exe' stop sharedaccess
- '<SYSTEM32>\taskkill.exe' /f /im rstray.exe
- '<SYSTEM32>\tasklist.exe'
- '<SYSTEM32>\net.exe' stop sharedaccess
- '<SYSTEM32>\cmd.exe' /c <SYSTEM32>\705.5475.bat
- '<SYSTEM32>\ping.exe' -a 127.1
- '<SYSTEM32>\ping.exe' 127.1
- <SYSTEM32>\shell.exe
- %TEMP%\tasklist.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\73mt[1]
- <SYSTEM32>\705.5475.bat
- <SYSTEM32>\nokia32a.exe
- %TEMP%\~DF2F1C.tmp
- 'localhost':1042
- 'www.73##.com':80
- 'localhost':1041
- 'localhost':1036
- 'www.vi##ay.cn':82
- www.73##.com/
- DNS ASK www.73##.com
- DNS ASK www.vi##ay.cn
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: '(null)' WindowName: '(null)'
- ClassName: '' WindowName: '(null)'