Техническая информация
Для обеспечения автозапуска и распространения:
Модифицирует следующие ключи реестра:
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '3e4fa3ebf9b53b5093b9cd3b94245e07' = '"%TEMP%\viaDock.exe" ..'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '3e4fa3ebf9b53b5093b9cd3b94245e07' = '"%TEMP%\viaDock.exe" ..'
Создает или изменяет следующие файлы:
- %HOMEPATH%\Start Menu\Programs\Startup\3e4fa3ebf9b53b5093b9cd3b94245e07.exe
Вредоносные функции:
Для обхода брандмауэра удаляет или модифицирует следующие ключи реестра:
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%TEMP%\viaDock.exe' = '%TEMP%\viaDock.exe:*:Enabled:viaDock.exe'
Создает и запускает на исполнение:
- '%TEMP%\My Tank.exe'
- '%TEMP%\viaDock.exe'
- '%TEMP%\Tanki.exe'
Запускает на исполнение:
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%TEMP%\viaDock.exe" "viaDock.exe" ENABLE
Изменения в файловой системе:
Создает следующие файлы:
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[32].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[32].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[32].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[33].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[33].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[32].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[31].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[30].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[30].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[31].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[31].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[31].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[35].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[35].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[35].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[36].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[36].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[35].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[34].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[33].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[33].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[34].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[34].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[34].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[30].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[26].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[26].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[25].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[27].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[26].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[26].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[24].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[24].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[24].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[25].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[25].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[25].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[29].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[29].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[28].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[30].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[29].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[29].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[27].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[27].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[27].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[28].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[28].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[28].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[36].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[45].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[44].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[44].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[45].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[45].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[45].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[43].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[43].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[43].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[44].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[44].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[43].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[48].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[47].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[47].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[48].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[48].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[48].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[46].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[46].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[46].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[47].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[47].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[46].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[42].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[38].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[38].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[38].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[39].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[39].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[39].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[37].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[37].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[36].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[38].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[37].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[37].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[41].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[41].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[41].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[42].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[42].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[42].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[40].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[40].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[39].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[41].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[40].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[40].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[7].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[7].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[7].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[8].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[8].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[8].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[6].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[6].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[5].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[7].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[6].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[6].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[10].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[10].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[10].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[11].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[11].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[11].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[9].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[9].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[8].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[10].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[9].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[9].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[5].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[1].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[1].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[1].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[2].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[2].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[1].js
- %TEMP%\Tanki.exe
- %TEMP%\My Tank.exe
- %TEMP%\sfx.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\site[1].js
- %TEMP%\mytank.cfg
- %TEMP%\viaDock.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[4].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[4].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[4].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[5].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[5].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[4].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[3].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[2].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[2].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[3].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[3].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[3].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[11].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[20].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[20].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[19].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[21].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[20].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[20].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[18].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[18].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[18].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[19].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[19].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[19].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[23].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[23].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[22].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[24].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[23].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[23].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[21].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[21].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[21].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[22].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[22].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[22].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[18].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[14].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[13].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[13].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[14].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[14].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[14].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[12].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[12].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[12].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[13].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[13].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[12].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[17].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[16].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[16].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[17].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[17].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[17].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\status[15].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[15].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[15].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\status[16].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\status[16].js
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\status[15].js
Удаляет следующие файлы:
- %TEMP%\sfx.ini
Сетевая активность:
Подключается к:
- 'mr##.no-ip.biz':1777
- 'ta###online.com':80
TCP:
Запросы HTTP GET:
- ta###online.com/s/status.js?rn#####################
- ta###online.com/site.js
UDP:
- DNS ASK mr##.no-ip.biz
- DNS ASK ta###online.com
Другое:
Ищет следующие окна:
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
