Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Yahoo Messsengger' = '<SYSTEM32>\SMSSS.exe'
- <SYSTEM32>\SMSSS.exe
- <SYSTEM32>\autorun.ini
- <SYSTEM32>\autorun.ini
- 'ch####a1.110mb.com':80
- 'ch####a.110mb.com':80
- ch####a1.110mb.com/cauhinh.htm
- ch####a.110mb.com/cauhinh.htm
- DNS ASK ch####a1.110mb.com
- DNS ASK ch####a.110mb.com
- ClassName: 'Indicator' WindowName: ''