Техническая информация
- %TEMP%\їЁНЫТБНёКУ.exe
- %TEMP%\їЁНЫТБ-НёКУ.exe
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://www.ti##sin.cc
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE http://12#.##kankan.com
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1400' = '0'
- %TEMP%\їЁНЫТБНёКУ.exe
- %TEMP%\їЁНЫТБ-НёКУ.exe
- <DRIVERS>\etc\hosts
- 'localhost':1038
- 'localhost':1037
- 'localhost':1035
- DNS ASK www.ti##sin.cc
- DNS ASK 12#.##kankan.com
- DNS ASK do##.#iansin.com
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''