Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'newdwrun' = '<SYSTEM32>\bootinst.exe'
- '<SYSTEM32>\conhost.exe' 0x22c cmd.exe
- '<SYSTEM32>\attrib.exe' -r -s -h "<Полный путь к вирусу>"
- '%WINDIR%\explorer.exe'
- %WINDIR%\explorer.exe
- %WINDIR%\Explorer.EXE
- \Device\Mup\BVNSEUHJ*\MAILSLOT\NET\NETLOGON
- <Служебный элемент>
- <SYSTEM32>\bootinst.exe
- <Текущая директория>\664704.bat
- 'st##gan.com':443
- DNS ASK dn#.##ftncsi.com
- DNS ASK st##gan.com
- ClassName: '' WindowName: 'View Available Networks'
- ClassName: 'Media Center Tray Applet' WindowName: ''
- ClassName: 'BluetoothNotificationAreaIconWindowClass' WindowName: ''
- ClassName: 'BluetoothNotificationAreaIconWindowClass' WindowName: 'BluetoothNotificationAreaIconWindowClass'
- ClassName: 'SystemTray_Main' WindowName: ''
- ClassName: 'Progman' WindowName: ''
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Proxy Desktop' WindowName: ''