Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'McAfeeScanPlus8' = '%WINDIR%\system\McAfeeScanPlus8.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%WINDIR%\system\McAfeeScanPlus8.exe' = '%WINDIR%\system\McAfeeScanPlus8.exe:*:Enabled:McAfeeScanPlus8'
- %WINDIR%\system\McAfeeScanPlus8.exe
- %WINDIR%\system\McAfeeScanPlus8.exe
- %TEMP%\~DFC4C8.tmp
- 'www.bm###2470.info':80
- www.bm###2470.info/MS8320/log.php?Us################################
- www.bm###2470.info/MS8320/info.txt
- DNS ASK www.bm###2470.info
- ClassName: 'Shell_TrayWnd' WindowName: ''