Техническая информация
- %TEMP%\win32.exe <Полный путь к вирусу>
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\register[1].php
- %TEMP%\win32.exe
- <DRIVERS>\etc\hosts
- 'bu#.to':80
- 'localhost':1036
- bu#.to/register.php
- DNS ASK bu#.to
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''