Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'rdmouw' = '<LS_APPDATA>\rdmouw.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'xdmouw' = 'c:\registro\xdmouw.exe'
- <LS_APPDATA>\new.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\qui2[1].inf
- 'localhost':3306
- 'www.su####g-motor.com':80
- 'www.ci##.wroclaw.pl':80
- www.ci##.wroclaw.pl/WCS-info/zalaczniki/qui2.inf
- www.su####g-motor.com/plugins/editors/xstandard/conte.php
- DNS ASK www.su####g-motor.com
- DNS ASK www.ci##.wroclaw.pl
- ClassName: 'MozillaUIWindowClass' WindowName: ''
- ClassName: 'Frame Tab' WindowName: ''
- ClassName: 'Chrome_WidgetWin_0' WindowName: ''
- ClassName: 'MozillaWindowClass' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'TabWindowClass' WindowName: ''
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Internet Explorer_Server' WindowName: ''
- ClassName: 'Shell DocObject View' WindowName: ''