Техническая информация
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://mo####orus.biz.nf/arquivos/infect/access.php
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'ProxyOverride' = 'local'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\e45yre89fyre954[1].pac
- '17#.#12.231.10':80
- 'localhost':1036
- 17#.#12.231.10/e45yre89fyre954.pac
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''