Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ANSI' = '%WINDIR%\svshost.lnk'
- '%PROGRAM_FILES%\svshost\svshost.exe'
- '<SYSTEM32>\wscript.exe' "%PROGRAM_FILES%\svshost\Instalador.vbs"
- %WINDIR%\svshost.lnk
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\httpadf[1].html
- %PROGRAM_FILES%\svshost\Instalador.vbs
- %PROGRAM_FILES%\svshost\svshost.exe
- %PROGRAM_FILES%\svshost\svshost.lnk
- 'ps########soluciones.blogspot.com':80
- 'localhost':1035
- ps########soluciones.blogspot.com/2013/12/httpadf.html
- DNS ASK ps########soluciones.blogspot.com
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'