Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Macromedia' = '%APPDATA%\Micromedia\spoolsvs.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1806' = '00000000'
- %APPDATA%\Micromedia\spoolsvs.exe
- 'ga##eva.ru':80
- ga##eva.ru/mfwue/img/macromedia.php
- DNS ASK ga##eva.ru
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''