Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\application] 'Start' = '00000002'
- <SYSTEM32>\dllcache\beep.sys файлом <SYSTEM32>\dllcache\beep.sys.new
- <DRIVERS>\beep.sys файлом C:\GOCLNXfqBI.sys
- <SYSTEM32>\cmd.exe /c "<Текущая директория>\Del1.Bat"
- <SYSTEM32>\svchost.exe -k application
- <DRIVERS>\beep.sys.new
- C:\CmInBrhqbL.sys
- <SYSTEM32>\dllcache\beep.sys.new
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\get[1].htm
- C:\GOCLNXfqBI.sys
- C:\NQvsrIMIZJ.dll
- <Текущая директория>\Del1.Bat
- <DRIVERS>\beep.sys
- <SYSTEM32>\hHkMavJzPYC.dll
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\get[1].htm
- <DRIVERS>\beep.sys
- 'www.13##04.cn':80
- '67.##5.160.76':80
- DNS ASK www.13##04.cn
- DNS ASK www.ya##o.com