Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'OpenDNS Update' = '"<Полный путь к вирусу>"'
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini
- 'my##.#nsomatic.com':443
- DNS ASK up####s.opendns.com
- DNS ASK wh###.opendns.com
- DNS ASK my##.#pendns.com
- DNS ASK my##.#nsomatic.com
- DNS ASK op#####.marc-hoersken.de
- ClassName: 'SysPager' WindowName: ''
- ClassName: 'ToolbarWindow32' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'TrayNotifyWnd' WindowName: ''