Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'WWanAPI' = '<LS_APPDATA>\SMIRecovery\WWanAPI.exe'
- '<SYSTEM32>\msiexec.exe'
- <LS_APPDATA>\SMIRecovery\WWanAPI.exe
- <LS_APPDATA>\SMIRecovery\WWanAPI.mui
- %APPDATA%\56745
- %APPDATA%\56745
- 'p2###oject.in':80
- '74.##5.232.51':80
- http://www.google.com/webhp via 74.##5.232.51
- http://p2###oject.in/gate.php
- DNS ASK p2###oject.in
- DNS ASK www.google.com
- ClassName: 'Indicator' WindowName: ''
- ClassName: '0' WindowName: '0'