Техническая информация
- %TEMP%\ttplay.exe
- %TEMP%\ttplay.exe (загружен из сети Интернет)
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\tj[1].asp
- %TEMP%\ttplay.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\xg[1].asp
- 'rh###8.91mt.com':80
- 'localhost':1039
- 'hz###0.91mt.com':80
- rh###8.91mt.com/tj.asp?id##
- hz###0.91mt.com/asp/xg.asp
- DNS ASK rh###8.91mt.com
- DNS ASK hz###0.91mt.com
- '<IP-адрес в локальной сети>':1037
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''