Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'WIFIServiceAP' = '<Полный путь к вирусу>'
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\wifiap.lnk
- %HOMEPATH%\MSOCache\patch\files\wifimon.exe
- %HOMEPATH%\MSOCache\patch\files\tmp-0001B36C.tmp
- %HOMEPATH%\MSOCache\patch\files\wifimon.exe
- %HOMEPATH%\MSOCache\patch\files\wifiap.dll
- 'ne##.#ongmusic.com':80
- ne##.#ongmusic.com/music/data/xinit.php
- DNS ASK ne##.#ongmusic.com
- ClassName: 'Indicator' WindowName: ''