Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ПµНіКдИл·Ё№¤ѕЯ' = '%WINDIR%\ctfmon.exe'
- '%WINDIR%\ctfmon.exe'
- %WINDIR%\ctfmon.exe
- 'yy.com':80
- 'localhost':1036
- yy.com/
- DNS ASK yy.com
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''