Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'AutoProxy' = 'c:\Vworld.exe'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\count_man[1].php
- C:\Vworld.bmp
- %HOMEPATH%\Desktop\Vworld.lnk
- C:\Vworld.exe
- '12#.#25.114.144':80
- '20#.#60.142.50':80
- 12#.#25.114.144/dns00001/blog/
- 20#.#60.142.50/count_man.php?co###############
- 20#.#60.142.50/livedata/Vworld.zip
- DNS ASK hi.##idu.com
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'