Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Privacy Eraser' = '"<Полный путь к вирусу>" /Startup'
- [<HKCU>\SOFTWARE\CyberLink\PowerDVD]
- [<HKCU>\SOFTWARE\RIT\The Bat!]
- [<HKCU>\Software\Headlight\GetRight]
- [<HKCU>\SOFTWARE\FileZilla Client]
- [<HKLM>\SOFTWARE\FileZilla Client]
- 'www.cy####ronsoft.com':80
- 'localhost':1037
- http://www.cy####ronsoft.com/download/privacy-eraser/update.xml
- DNS ASK www.cy####ronsoft.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''