Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'AnntraxCoder' = '<Полный путь к вирусу>'
- <Текущая директория>\<Имя вируса>w«ЄЅ
- 'www.re####toncars.cz':80
- 'www.sm##azur.fr':80
- 'localhost':1037
- www.re####toncars.cz/images/contador/cadastro.php
- www.sm##azur.fr/images//M_images/IMG_06012014_1202422cc.png
- DNS ASK www.re####toncars.cz
- DNS ASK www.sm##azur.fr
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_WINHELP' WindowName: ''
- ClassName: 'Indicator' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''