Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\File Replication] 'Start' = '00000002'
- %WINDIR%\imapi.exe
- <SYSTEM32>\ntfis.exe
- iexplore.exe
- %WINDIR%\Temp\Tmp2.tmp
- <SYSTEM32>\ntfis.exe
- %WINDIR%\dataacess.dll
- %WINDIR%\imapi.exe
- %WINDIR%\Temp\IMTSI.xml
- %WINDIR%\Temp\IMTCM.xml
- %TEMP%\Tmp1.tmp
- %WINDIR%\Temp\IMTFT.xml
- %WINDIR%\Temp\filter.rar
- %WINDIR%\Temp\Tmp2.tmp
- %TEMP%\Tmp1.tmp
- %WINDIR%\Temp\filter.rar
- 'se.##wcell.cn':80
- se.##wcell.cn/service.asmx
- DNS ASK se.##wcell.cn