Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ads' = '%WINDIR%\ads4.exe'
- <SYSTEM32>\ads4.exe
- %WINDIR%\ads4.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\modz[1].php
- %WINDIR%\mlang.dll
- %WINDIR%\ads.exe
- %WINDIR%\ads3.exe
- %WINDIR%\ads2.exe
- 'c.##ycf.net':80
- 'localhost':1035
- c.##ycf.net/modz.php
- DNS ASK c.##ycf.net
- '<IP-адрес в локальной сети>':1036
- ClassName: 'MozillaWindowClass' WindowName: 'Key Cross Kill - Free Online FPS - Download Cross Fire - Mozilla Firefox'
- ClassName: 'Chrome_WidgetWin_0' WindowName: 'File Key Cross Kill - Free Online FPS - Download Cross Fire - Google Chrome'
- ClassName: 'MozillaWindowClass' WindowName: 'File Key Cross Kill - Free Online FPS - Download Cross Fire - Mozilla Firefox'
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'CrossFire' WindowName: 'CrossFire'
- ClassName: 'Chrome_WidgetWin_0' WindowName: 'Key Cross Kill - Free Online FPS - Download Cross Fire - Google Chrome'
- ClassName: 'IEFrame' WindowName: ''