Техническая информация
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'Load' = '<Полный путь к вирусу>'
- 'wp#d':80
- 'www.dr##box.com':443
- 'localhost':1037
- 'ad#.ly':80
- wp#d/wpad.dat
- ad#.ly/sSlX0
- DNS ASK www.dr##box.com
- DNS ASK wp#d
- DNS ASK ad#.ly
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''