Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Microsoft system files' = '"%WINDIR%\explore.exe"'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Microsoft system file' = '"%APPDATA%\system files\system.exe"'
- %APPDATA%\system files\files.zip
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\watch[1]
- %APPDATA%\system files\files.zip
- 'da####degeeks.com':80
- 'ip###key.com':80
- 'wp#d':80
- 'localhost':1035
- 'www.yo##ube.com':80
- da####degeeks.com/school/files.zip
- ip###key.com/
- www.yo##ube.com/watch?v=###########
- wp#d/wpad.dat
- DNS ASK da####degeeks.com
- DNS ASK ip###key.com
- DNS ASK www.yo##ube.com
- DNS ASK wp#d
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''