Техническая информация
- %ALLUSERSPROFILE%\one User\-2.exe
- %TEMP%\nsz2.tmp\ymsgr_suite_setup.exe /yfn=-1.exe /ybsini=%TEMP%\nsz2.tmp\BOOTST~1.INI
- %ALLUSERSPROFILE%\one User\-1.exe
- [<HKCU>\Software\Yahoo\pager]
- %TEMP%\nsn4.tmp\System.dll
- %TEMP%\nsz2.tmp\YExecShell.dll
- %TEMP%\nsn4.tmp\InetLoad_vms.dll
- %TEMP%\nsn4.tmp\ymsgr11_us.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ymsgr11_us[1].ini
- %TEMP%\nsz2.tmp\ymsgr_suite_setup.exe
- %ALLUSERSPROFILE%\one User\-2.exe
- %ALLUSERSPROFILE%\one User\-1.exe
- %TEMP%\nsz2.tmp\System.dll
- %TEMP%\nsz2.tmp\Base64.dll
- %TEMP%\nsz2.tmp\bootstrap.ini
- '67.##5.160.76':80
- 67.##5.160.76/ycontent/stats.php?ve###############################################################################################
- 67.##5.160.76/msgr/11/ga/ini/ymsgr11_us.ini
- DNS ASK in#####.msg.yahoo.com
- DNS ASK rd.####ware.yahoo.com
- '<IP-адрес в локальной сети>':1035
- ClassName: 'Shell_TrayWnd' WindowName: ''