Техническая информация
- <SYSTEM32>\rundll32.exe <SYSTEM32>\shimgvw.dll,ImageView_Fullscreen %WINDIR%\credito_oi.png
- %HOMEPATH%\Recent\credito_oi.lnk
- %HOMEPATH%\Recent\WINDOWS.lnk
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\credito_oi[1].png
- %WINDIR%\credito_oi.png
- 're#######editocelular.com.br':80
- re#######editocelular.com.br/wp-content/uploads/2012/05/credito_oi.png
- DNS ASK re#######editocelular.com.br
- ClassName: 'ShImgVw:CPreviewWnd' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''