Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\wmpobj] 'Start' = '00000002'
- %HOMEPATH%\Local Settings\Temporary Internet Files\_inifid
- <SYSTEM32>\dopdy.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\putconf[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\_inimac
- %TEMP%\nsq3.tmp\System.dll
- %TEMP%\nsq2.tmp
- %TEMP%\nsq3.tmp\SimpleSC.dll
- %ALLUSERSPROFILE%\Application Data\Microsoft\Media Player\obj\07.sys
- <SYSTEM32>\dopdy.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\putconf[1].php
- %TEMP%\nsq3.tmp\SimpleSC.dll
- %TEMP%\nsq3.tmp\System.dll
- %ALLUSERSPROFILE%\Application Data\Microsoft\Media Player\obj\07.sys в %ALLUSERSPROFILE%\Application Data\Microsoft\Media Player\obj\wmpobj.sys
- 'lo###.51edm.net':80
- lo###.51edm.net/putconf.php?ma##########################################################################################################################################
- DNS ASK lo###.51edm.net