Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'AVGShield' = '%WINDIR%\avgsh.exe'
- [<HKCU>\Software\Microsoft\MessengerService]
- %WINDIR%\avgsh.exe
- 'fr######omome1.tempsite.ws':80
- fr######omome1.tempsite.ws/img/aaa.php
- DNS ASK fr######omome1.tempsite.ws
- ClassName: '' WindowName: 'orkut - in?cio - Windows Internet Explorer'
- ClassName: '' WindowName: 'Terra Mail - Microsoft Internet Explorer'
- ClassName: '' WindowName: 'Terra Mail - Windows Internet Explorer'
- ClassName: '' WindowName: 'orkut - in?cio - Microsoft Internet Explorer'
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: 'orkut - login - Microsoft Internet Explorer'
- ClassName: '' WindowName: 'orkut - login - Windows Internet Explorer'