Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Microsoft' = '%PROGRAM_FILES%\Microsoft\Microsoft.exe'
- %PROGRAM_FILES%\Microsoft\Microsoft.exe
- <Полный путь к вирусу>
- %PROGRAM_FILES%\Microsoft\MSWINSCK.ocx
- %PROGRAM_FILES%\Microsoft\Microsoft.exe
- %TEMP%\~DFDF05.tmp
- 'ji###l.cons.com':926
- 'dc###.4shared.com':80
- dc###.4shared.com/download/BAvD0op6/MSWINSCK.OCX?ts###########################
- DNS ASK ji###l.cons.com
- DNS ASK dc###.4shared.com
- ClassName: 'Shell_TrayWnd' WindowName: ''