Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'YOKAssiant' = 'Rundll32.exe %PROGRAM_FILES%\YOK.com\SuperSearch\YOK_SuperSearch.dll,YOKAssiant'
- <SYSTEM32>\rundll32.exe YOK_SuperSearch.dll,YOKAssiant
- %PROGRAM_FILES%\YOK.com\SuperSearch\ide21201.vxd
- %PROGRAM_FILES%\YOK.com\SuperSearch\yoksch.htm
- %PROGRAM_FILES%\YOK.com\SuperSearch\YOK_SuperSearch.dll
- %PROGRAM_FILES%\YOK.com\SuperSearch\ide21201.vxd
- 'www.yo#.com':80
- www.yo#.com/install.php?OS###################################################################################
- DNS ASK www.yo#.com
- '<IP-адрес в локальной сети>':1035