Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SharedAPPs' = '%WINDIR%\system\<Имя вируса>.exe'
- '%WINDIR%\regedit.exe' /s %WINDIR%\system\sharedapp.reg
- <Текущая директория>\tmp
- %WINDIR%\inf\asynceql.inf
- %WINDIR%\system\<Имя вируса>.exe
- %WINDIR%\system\sharedapp.reg
- %WINDIR%\system\sharedapp.reg
- 'www.vi####skynetx10.biz':80
- 'www.up###ath.com':80
- 'www.ne######evirtual24hs.biz':80
- 'localhost':1037
- 'www.go###e.com.br':80
- http://www.vi####skynetx10.biz/newbase/
- http://www.up###ath.com/newbase/
- http://www.go###e.com.br/intl/pt-BR_br/images/logo.gif
- http://www.ne######evirtual24hs.biz/newbase/
- DNS ASK www.vi####skynetx10.biz
- DNS ASK www.up###ath.com
- DNS ASK www.go###e.com.br
- DNS ASK www.ne######evirtual24hs.biz
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- ClassName: 'CasamentoEterno' WindowName: ''