Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'KB942288-v3' = '%APPDATA%\KB942288-v3\KB942288-v3.pif'
- %APPDATA%\KB942288-v3\KB942288-v3.pif
- <SYSTEM32>\svchost.exe
- %WINDIR%\explorer.exe
- %APPDATA%\KB942288-v3\KB942288-v3.pif
- %APPDATA%\KB942288-v3\KB942288-v3.pif
- 'za##3944.in':80
- '11#.#11.111.2':80
- '11#.#11.111.5':80
- '11#.#11.111.3':80
- za##3944.in/index.php?r=#####
- 11#.#11.111.2/index.php?r=###
- za##3944.in/index.php?r=###
- DNS ASK za##3944.in
- '<IP-адрес в локальной сети>':1037
- ClassName: 'Indicator' WindowName: ''