Техническая информация
- '<SYSTEM32>\cmd.exe' /c del "<Полный путь к вирусу>
- '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles%\Windows Media Player\mplay.dll
- %WINDIR%\Explorer.EXE
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\s[1].xml
- %ProgramFiles%\Windows Media Player\mplay.dll
- %ProgramFiles%\Windows Media Player\mplay.dll
- 's.###net.com':80
- 'localhost':1037
- http://s.###net.com/s.xml?nu#####################
- DNS ASK s.###net.com