Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'WinServices.exe' = '<LS_APPDATA>\Uniless\WinServices.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'OperationSystem.exe' = ''
- [<HKCU>\Software\Microsoft\MessengerService]
- <LS_APPDATA>\Uniless\WinServices.exe
- 'www.le##get.com':80
- 'ma####irect.com.ar':443
- 'www.pe######.santanderrio.com.ar':443
- 'www.in####nights.net':80
- 'www.ma##ynk.pl':80
- 'www.va#####roventura.com.br':80
- 'www.ma###llagan.com':80
- 'www.ca###ezo.com':80
- 'ws####.#ancogalicia.com.ar':443
- 'localhost':1035
- 'www.ac#####anking.com.ar':443
- 'eb########nas.bancopatagonia.com.ar':443
- 'eb###.##ncopatagonia.com.ar':443
- www.va#####roventura.com.br/fotos/washb.php
- www.ma##ynk.pl/galeria/washb.php
- www.in####nights.net/menu/washb.php
- www.ca###ezo.com/site/Itecfnew.php
- www.ma###llagan.com/Itecfnew.php
- www.le##get.com/en/Itecfnew.php
- DNS ASK www.le##get.com
- DNS ASK ma####irect.com.ar
- DNS ASK www.pe######.santanderrio.com.ar
- DNS ASK www.in####nights.net
- DNS ASK www.ma##ynk.pl
- DNS ASK www.va#####roventura.com.br
- DNS ASK eb###.##ncopatagonia.com.ar
- DNS ASK www.ca###ezo.com
- DNS ASK ws####.#ancogalicia.com.ar
- DNS ASK www.ma###llagan.com
- DNS ASK www.ac#####anking.com.ar
- DNS ASK eb########nas.bancopatagonia.com.ar
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''