Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'WideSearch' = '<LS_APPDATA>\WideSearch\wsearch.exe'
- <LS_APPDATA>\WideSearch\wsearch.exe
- <LS_APPDATA>\WideSearch\wsearch.exe
- 'ja##.vacau.com':80
- ja##.vacau.com/u.php?ve##################
- DNS ASK ja##.vacau.com
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''