Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Microsoft Run' = ''
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\servico[1].pac
- <LS_APPDATA>\%USERNAME%.exe
- 'au#####ivesound.com.br':80
- 'sm######ar2014.no-ip.org':82
- au#####ivesound.com.br/estoque/servico.pac
- DNS ASK or#####apontevedra.es
- DNS ASK au#####ivesound.com.br
- DNS ASK sm######ar2014.no-ip.org
- ClassName: 'Indicator' WindowName: '(null)'