Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Protection' = '<Полный путь к вирусу>'
- javaw.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\setbug[1].php
- <Текущая директория>\binternetNET28.6_16.57
- 'fw.#####de-chat-gratuit.com':80
- 'localhost':1037
- fw.#####de-chat-gratuit.com/binternet/test/setbug.php
- DNS ASK fw.#####de-chat-gratuit.com
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'