Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run] 'WinNET' = '%APPDATA%\winsck.exe'
- Средство контроля пользовательских учетных записей (UAC)
- [<HKLM>\SYSTEM\ControlSet001\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings] 'ProxyEnable' = '00000001'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings] 'ProxyEnable' = '00000001'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'ProxyEnable' = '00000001'
- %APPDATA%\Versao.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ativou[1].htm
- %APPDATA%\CRNJEUFU.txt
- %APPDATA%\netwin.ocx
- <DRIVERS>\etc\hosts
- 'uf##c.net':80
- uf##c.net/ativou.php
- DNS ASK uf##c.net