Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'iexplore' = '<Полный путь к вирусу>'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\AWS2845[1].jsp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\AWS2865[1].jsp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\AWS2763[1].jsp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\AWS2826[1].jsp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\AWS2845[1].jsp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\AWS2865[1].jsp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\AWS2763[1].jsp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\AWS2826[1].jsp
- '14#.#15.51.12':80
- '14#.#13.58.187':80
- 14#.#15.51.12/AWS2865.jsp?0o##############################
- 14#.#13.58.187/AWS2888.jsp?0o##############################
- 14#.#13.58.187/AWS2845.jsp?0o##############################
- 14#.#13.58.187/AWS2763.jsp?0o##############################
- 14#.#15.51.12/AWS2826.jsp?0o##############################
- ClassName: 'Indicator' WindowName: ''