Техническая информация
- '%TEMP%\_ir_sf_temp_0\irsetup.exe' __IRAOFF:661538 "__IRAFN:%TEMP%\nso3.tmp\Camelsystem-PowerPost-ENG_v2.3.exe" "__IRCT:1" "__IRTSS:0" "__IRSID:S-1-5-21-2052111302-484763869-725345543-1003"
- '%TEMP%\temp.exe'
- '%TEMP%\nso3.tmp\Camelsystem-PowerPost-ENG_v2.3.exe'
- '%TEMP%\nso3.tmp\tish.exe'
- '%TEMP%\temp.exe' (загружен из сети Интернет)
- %TEMP%\_ir_sf_temp_0\IRIMG2.JPG
- %TEMP%\_ir_sf_temp_0\IRIMG1.JPG
- %TEMP%\temp.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\cb[1].exe
- %TEMP%\_ir_sf_temp_0\irsetup.dat
- %TEMP%\nso3.tmp\Camelsystem-PowerPost-ENG_v2.3.exe
- %TEMP%\nsx2.tmp
- %TEMP%\_ir_sf_temp_0\irsetup.exe
- %TEMP%\nso3.tmp\tish.exe
- %TEMP%\_ir_sf_temp_0\irsetup.dat
- %TEMP%\nso3.tmp\tish.exe
- 'www.hu##con.com':80
- 'localhost':1037
- www.hu##con.com/tish/cb.exe
- DNS ASK www.hu##con.com
- ClassName: 'Shell_TrayWnd' WindowName: ''