Техническая информация
- %WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe
- [<HKCU>\Software\Microsoft\Internet Account Manager]
- [<HKLM>\Software\Wow6432Node\Microsoft\Windows Mail]
- [<HKCU>\Software\Microsoft\Windows Mail]
- ClassName: '', WindowName: 'Yahoo! Messenger'
- %TEMP%\.net protector.exe
- 'sm##.gmail.com':465
- DNS ASK sm##.gmail.com
- '%TEMP%\.net protector.exe'
- '%TEMP%\.net protector.exe' ' (со скрытым окном)
- '%WINDIR%\microsoft.net\framework\v2.0.50727\vbc.exe'
- '%WINDIR%\microsoft.net\framework\v2.0.50727\dw20.exe' -x -s 464