Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Runservices] 'mmafrs' = ''
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'mmaf' = ''
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\mmaf[1].s
- %TEMP%\mmaf.exe
- 'me#####er.hotmail.com':1863
- 'un#####ted.no-ip.info':80
- 'localhost':1037
- un#####ted.no-ip.info/mmaf.s
- DNS ASK me#####er.hotmail.com
- DNS ASK un#####ted.no-ip.info