Техническая информация
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\duba[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\2345[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\3.10[1].html
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\17b2989a6db5f438336eebe5[1]
- из <Полный путь к вирусу> в <Текущая директория>\Xsearcher.exe
- 'www.du##.com':80
- 'www.23##.com':80
- '12#.#25.114.144':80
- 'localhost':1036
- '56.#tsj.net':80
- www.du##.com/?un#########
- www.23##.com/?k8#######
- 56.#tsj.net/3.10.html
- 12#.#25.114.144/xsearcher/item/17b2989a6db5f438336eebe5
- DNS ASK www.du##.com
- DNS ASK www.23##.com
- DNS ASK 56.#tsj.net
- DNS ASK hi.##idu.com
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: '(null)' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'