Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'svchosts' = '<SYSTEM32>\svchosts.exe'
- '<SYSTEM32>\regsvr32.exe' /s "<SYSTEM32>\RICHTX32.OCX"
- '<SYSTEM32>\regsvr32.exe' /s "<SYSTEM32>\MSWINSCK.OCX"
- <SYSTEM32>\hsniff.dll
- <SYSTEM32>\svchosts.exe
- <SYSTEM32>\MSWINSCK.OCX
- <SYSTEM32>\RICHTX32.OCX
- '67.##5.160.76':80
- 67.##5.160.76http://login.yahoo.com/config/login?lo############
- DNS ASK lo###.yahoo.com