Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '000' = '<Полный путь к вирусу>'
- '<SYSTEM32>\taskkill.exe' /f /im firefox.exe
- '<SYSTEM32>\taskkill.exe' /f /im Maxthon.exe
- '<SYSTEM32>\taskkill.exe' /f /im 360sd.exe
- '<SYSTEM32>\taskkill.exe' /f /im kxetray.exe
- '<SYSTEM32>\taskkill.exe' /f /im baidubrowser.exe
- '%PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE' http://localhost/Count.asp?&i###################################################### Windows XP&ver=AAAA
- '<SYSTEM32>\ipconfig.exe' /all
- '<SYSTEM32>\taskkill.exe' /f /im 360se.exe
- '<SYSTEM32>\taskkill.exe' /f /im chrome.exe
- firefox.exe
- chrome.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\Count[1].asp
- C:\ping
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\Count[1].asp
- '12#.#24.152.95':80
- 'localhost':80
- 'localhost':1036
- 'localhost':1037
- localhost/Count.asp?&i##############################################################################
- 12#.#24.152.95/URL.txt
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: '(null)' WindowName: '(null)'
- ClassName: '' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'