Техническая информация
- %TEMP%\lol1.exe
- <SYSTEM32>\ntvdm.exe -f -i1
- %APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-1275210071-117609710-1801674531-500\a18ca4003deb042bbee7a40f15e1970b_ffcb838e-6d3b-4e44-a259-8ac8f5c94c4f
- %APPDATA%\Microsoft\Protect\S-1-5-21-1275210071-117609710-1801674531-500\8ecbc001-0bbe-4bd4-a991-5e8ef6c571cd
- %TEMP%\utt3.tmp.new
- %APPDATA%\uTorrent\settings.dat.new
- %TEMP%\lol2.exe
- %TEMP%\lol1.exe
- %WINDIR%\Temp\scs2.tmp
- %WINDIR%\Temp\scs1.tmp
- %TEMP%\utt3.tmp
- %WINDIR%\Temp\scs2.tmp
- %WINDIR%\Temp\scs1.tmp
- 'do#####d.utorrent.com':80
- do#####d.utorrent.com/offers/pioneer_one_ut_install_promo_20100615.bmp
- DNS ASK do#####d.utorrent.com
- '<IP-адрес в локальной сети>':1033
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '?Torrent4823DF041B09' WindowName: ''
- ClassName: 'ConsoleWindowClass' WindowName: 'ntvdm-998.99c.3a0001'