Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\BITS] 'Start' = '00000002'
- %HOMEPATH%\Desktop\<Имя вируса>.lnk
- %TEMP%\bd27aB\temp\<Имя вируса>.exe
- %TEMP%\bd27aB\images\progressbar.gif
- %TEMP%\bd27aB\images\loader.gif
- 'c1.##melevel.in':80
- 'localhost':1043
- 'localhost':1045
- 'localhost':1041
- 'localhost':1037
- 'r1.##artly.org':80
- 'wp#d':80
- wp#d/wpad.dat
- r1.##artly.org/
- DNS ASK c1.##melevel.in
- DNS ASK wp#d
- DNS ASK r1.##artly.org
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''