Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'AppInit_DLLs' = 'mspdb12.dll'
- %TEMP%\IEPress.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\hijack[1].ini
- 'www.51##n.com':80
- 'localhost':1035
- www.51##n.com/hijack.ini
- DNS ASK www.51##n.com