Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MSSMARTMON1' = '"<Полный путь к вирусу>"'
- 'ma##.aol.com':25
- '74.##5.232.51':25
- 'ma##.mail.com':25
- 'hu#.##rbeayre.com':80
- 'ma##.#otmail.com':25
- '67.##5.160.76':25
- hu#.##rbeayre.com/spm/s_alive.php?id####################################################################################
- hu#.##rbeayre.com/spm/s_get_host.php?ve#####
- DNS ASK ma##.google.com
- DNS ASK google.com
- DNS ASK dn#.##ftncsi.com
- DNS ASK ma##.com
- DNS ASK yandex.ru
- DNS ASK ma#l.ru
- DNS ASK ma##.mail.com
- DNS ASK ma##.#otmail.com
- DNS ASK ho##ail.com
- DNS ASK hu#.##rbeayre.com
- DNS ASK ya##o.com
- DNS ASK ma##.aol.com
- DNS ASK ao#.com
- DNS ASK ma##.yahoo.com
- '8.#.8.8':58873
- '8.#.8.8':58874
- '8.#.8.8':56608
- '8.#.8.8':56609
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'