Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\baby] 'ImagePath' = '<SYSTEM32>\Past13iZ3.sys'
- C:\157321\dm.dll
- %HOMEPATH%\Desktop\Инјю·єАДОД±ѕ.txt
- <SYSTEM32>\Past13iZ3.sys
- C:\157321.zip
- C:\157321.zip
- <SYSTEM32>\Past13iZ3.sys
- 'yy.com':80
- 'localhost':1040
- http://yy.com/
- http://yy.com/s/36907/mini.swf
- http://yy.com/s/1018/mini.swf
- DNS ASK yy.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''