Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'msn.exe' = '<SYSTEM32>\son.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'msn.exe' = '<SYSTEM32>\son.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'mds.exe' = '<SYSTEM32>\mds.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'mds.exe' = '<SYSTEM32>\mds.exe'
- '%ProgramFiles%\Internet Explorer\IEXPLORE.EXE' http://21#.#5.72.140/index_type.php?Cl#################################
- Библиотека-обработчик для всех процессов: <SYSTEM32>\msdor.dll
- <SYSTEM32>\son.exe
- <SYSTEM32>\msdor.dll
- <SYSTEM32>\mds.exe
- '21#.#5.72.140':80
- 'localhost':1037
- http://21#.#5.72.140/index_type.php?Cl#################################
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: '' WindowName: ''
- '<SYSTEM32>\son.exe'
- '<SYSTEM32>\mds.exe'