Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Random' = '"%APPDATA%\BPZ3490.exe" -not'
- %APPDATA%\BPZ3490.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\555[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\whatismyip[1]
- 'ko####10.6te.net':80
- 'www.wh###smyip.ru':80
- ko####10.6te.net/555.php?Na##########
- www.wh###smyip.ru/
- DNS ASK ko####10.6te.net
- DNS ASK www.wh###smyip.ru
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'