Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'WinLiveMsn' = '%WINDIR%\imolav.exe'
- %WINDIR%\lts.jpg
- %WINDIR%\imolav.exe
- %WINDIR%\npf.jpg
- %WINDIR%\npf.jpg
- 'pi###oida.nm.ru':80
- 'localhost':1038
- 'lo#####s.hdfree.com.br':80
- http://pi###oida.nm.ru/lts_hot.jpg
- http://lo#####s.hdfree.com.br/listaaut.jpg
- DNS ASK pi###oida.nm.ru
- DNS ASK lo#####s.hdfree.com.br