Техническая информация
- [<HKCU>\Software\RIT\The Bat!]
- [<HKCU>\Software\Microsoft\Internet Explorer\IntelliForms\Storage2]
- %TEMP%\0_formhistory.sqlite
- %TEMP%\0_signons.sqlite
- %TEMP%\0_cookies.sqlite
- %TEMP%\passes.xm
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\upload[1].htm
- %TEMP%\84520_passes_1620.xm
- <Текущая директория>\tmp
- %TEMP%\set.dat
- %TEMP%\magent-ie.txt
- %TEMP%\lsаss.exe
- %TEMP%\0_magent-ie.txt
- %TEMP%\0_cert8.db
- %TEMP%\0_key3.db
- %TEMP%\0_secmod.db
- %TEMP%\set.dat
- %TEMP%\84520_passes_1620.xm
- <Текущая директория>\tmp
- 'hu####gb.hmsite.net':80
- http://hu####gb.hmsite.net/upload.php
- DNS ASK hu####gb.hmsite.net
- DNS ASK ya.ru
- ClassName: 'MS_WINHELP' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''