Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'kakakrotte' = ''
- <SYSTEM32>\rundll32.exe <SYSTEM32>\shimgvw.dll,ImageView_Fullscreen %WINDIR%\delphi.jpg
- %HOMEPATH%\Recent\delphi.lnk
- %HOMEPATH%\Recent\WINDOWS.lnk
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\d984d8a7-d8a7d984d987-d8a7d984d8a7-d8a7d984d984d9876[1].jpg
- %WINDIR%\delphi.jpg
- 'i3.##kcdn.com':80
- 'localhost':1035
- i3.##kcdn.com/wp-content/blogs.dir//188917/files//2012/03/d984d8a7-d8a7d984d987-d8a7d984d8a7-d8a7d984d984d9876.jpg
- DNS ASK i3.##kcdn.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'ShImgVw:CPreviewWnd' WindowName: ''