Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Microsoft system updates' = '"%APPDATA%\system files\system32.exe"'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Microsoft system files' = '"%WINDIR%\explore.exe"'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Microsoft system file' = '"%APPDATA%\system files\system.exe"'
- %APPDATA%\system files\system.zip
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\watch[1]
- %APPDATA%\system files\system.zip
- 'da####degeeks.com':80
- 'dl.##opbox.com':443
- 'ip###key.com':80
- 'localhost':1036
- 'www.yo##ube.com':80
- 'wp#d':80
- da####degeeks.com/system32.zip
- ip###key.com/
- www.yo##ube.com/watch?v=###########
- wp#d/wpad.dat
- DNS ASK dl.##opbox.com
- DNS ASK ip###key.com
- DNS ASK da####degeeks.com
- DNS ASK www.yo##ube.com
- DNS ASK wp#d
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''