Техническая информация
- '%APPDATA%\svchosts.exe'
- '%APPDATA%\svchosts.exe' (загружен из сети Интернет)
- '%PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE' http://wh##.amung.us/widget/yeahcomex44.png
- %APPDATA%\svchosts.exe
- 'wh##.amung.us':80
- 'localhost':1038
- 'bi##od.xyz':80
- wh##.amung.us/widget/yeahcomex44.png
- bi##od.xyz/ext/low.exe
- DNS ASK wh##.amung.us
- DNS ASK bi##od.xyz
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''