Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'wminit' = '%APPDATA%\System\wminit.exe'
- %APPDATA%\System\wminit.exe "<Полный путь к вирусу>"
- %APPDATA%\System\wminit.exe
- %APPDATA%\System\wminit.dat
- '64.#6.64.13':53106
- 't1###18190.info':53100
- '64.#6.64.13':53102
- 't1###18191.com':53100
- 't1###18191.org':53100
- '64.#6.64.13':53104
- 't1###18191.net':53100
- 't1###18190.com':53100
- 't1###18190.org':53100
- 't1###18190.net':53100
- '64.#6.64.13':53110
- '64.#6.64.13':53109
- '64.#6.64.13':53105
- '64.#6.64.13':53101
- '64.#6.64.13':53107
- DNS ASK t1###18191.com
- DNS ASK t1###18190.info
- DNS ASK t1###18191.org
- DNS ASK t1###18191.net
- DNS ASK t1###18190.net
- DNS ASK t1###18190.org
- DNS ASK t1###18190.com
- '<IP-адрес в локальной сети>':1037
- ClassName: 'Indicator' WindowName: ''