Техническая информация
- [<HKCU>\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN] 'Microsoft Security Essential' = '"<Текущая директория>\msseces.exe"'
- <Текущая директория>\atual.txt
- <Текущая директория>\local.txt
- <DRIVERS>\etc\hosts
- <DRIVERS>\etc\hosts
- http://ro####osouza.com/images/atual.txt
- http://www.ro####osouza.com/images/atual.txt
- DNS ASK ro####osouza.com
- ClassName: '' WindowName: 'avenger - Bloco de notas'