Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MSNetDDNowiz' = '"<Полный путь к вирусу>"'
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini
- 'ma##.aol.com':25
- '74.##5.232.51':25
- 'ma##.#otmail.com':25
- '67.##5.160.76':25
- DNS ASK google.com
- DNS ASK ma##.aol.com
- DNS ASK ma##.google.com
- DNS ASK di####.aboalilala.com
- DNS ASK ma##.com
- DNS ASK ma##.#otmail.com
- DNS ASK ho##ail.com
- DNS ASK ya##o.com
- DNS ASK ao#.com
- DNS ASK ma##.yahoo.com
- ClassName: 'Indicator' WindowName: ''