Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Thunder' = 'Thunder.exe'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\Thunder_sgood[1].htm
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\Thunder_sgood[1].htm
- 'www.mt##ktv.com':80
- 'www.mt##ktv.net':80
- 'localhost':1035
- www.mt##ktv.com/T08/Thunder_sgood.htm
- www.mt##ktv.net/T08/Thunder_sgood.htm
- DNS ASK www.mt##ktv.com
- DNS ASK www.mt##ktv.net
- ClassName: 'Indicator' WindowName: ''