Техническая информация
- <SYSTEM32>\cmd.exe /c "%TEMP%\_uninsep.bat"
- <SYSTEM32>\regsvr32.exe /s <SYSTEM32>\DuPublic.dll
- C:\temp.tmp
- %TEMP%\_uninsep.bat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\count[1].asp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\DuTlbbX[1].jpg
- <SYSTEM32>\DuPublic.dll
- C:\temp.tmp
- 'lo#.#ao990.com':80
- 'do##.hao990.com':80
- 'localhost':1036
- lo#.#ao990.com/BhoStup/count.asp?ma########################
- do##.hao990.com/Files/DuTlbbX.jpg
- DNS ASK lo#.#ao990.com
- DNS ASK do##.hao990.com