Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Microsoft Windows Updates' = '"%WINDIR%\WindowsUpdate.exe"'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Windows Task Scheduler' = '"%APPDATA%\system files\system32.exe"'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Microsoft system file' = '"%APPDATA%\system files\system.exe"'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Windows internet explorer' = '"%WINDIR%\explore.exe"'
- %APPDATA%\system files\system.zip
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\watch[1].be
- %APPDATA%\system files\system.zip
- 'da####degeeks.com':80
- 'dl.#####oxusercontent.com':443
- 'ip###key.com':80
- 'localhost':1035
- 'www.yo##ube.com':80
- 'wp#d':80
- da####degeeks.com/system32.zip
- ip###key.com/
- www.yo##ube.com/watch?v=############################
- wp#d/wpad.dat
- DNS ASK dl.#####oxusercontent.com
- DNS ASK ip###key.com
- DNS ASK da####degeeks.com
- DNS ASK www.yo##ube.com
- DNS ASK wp#d
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'IEFrame' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: '' WindowName: '(null)'