Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\<Имя вируса>
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\strings[2].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\strings[2].txt
- %TEMP%\~DF5359.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\strings[2].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\strings[1].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\strings[1].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\strings[1].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\strings[1].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\strings[2].txt
- 'www.vu#p.cz':80
- 'es####na-walker.com':80
- 'www.ar##mon.cz':80
- 'www.av###ilm.com.ua':80
- 'ta####inemax.net':80
- 're##l.ca':80
- 'www.2c####dana.com.ua':80
- www.vu#p.cz/includes/.../strings.txt
- es####na-walker.com/name/lang/personal_names/.../strings.txt
- www.ar##mon.cz/dov/strings.txt
- www.av###ilm.com.ua/forum/files/.../strings.txt
- ta####inemax.net/js/info/strings.txt
- re##l.ca/themes/terra/images/strings.txt
- www.2c####dana.com.ua/lib/lb/css/strings.txt
- DNS ASK www.vu#p.cz
- DNS ASK es####na-walker.com
- DNS ASK www.ar##mon.cz
- DNS ASK www.av###ilm.com.ua
- DNS ASK ta####inemax.net
- DNS ASK re##l.ca
- DNS ASK www.2c####dana.com.ua