Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'WinReg' = '%HOMEPATH%\WinReg.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Win32Pro' = '%WINDIR%\Win32Pro.exe'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\FristPage[1].html
- %HOMEPATH%\WinReg.exe
- %WINDIR%\Win32Pro.exe
- %HOMEPATH%\WinReg.exe
- %WINDIR%\Win32Pro.exe
- 'tu######eb.altervista.org':80
- 'localhost':1036
- tu######eb.altervista.org/ProgettoArcaNET/FristPage.html
- DNS ASK tu######eb.altervista.org
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''