Техническая информация
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'Run' = '<Текущая директория><Имя файла>.exe'
- '<SYSTEM32>\regsvr32.exe' /s /u ProcessProtection.dll
- iexplore.exe
- chrome.exe
- firefox.exe
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1609' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '2101' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1407' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1601' = '00000000'
- 'ww##.#ovedtf.com':80
- 'www.lo##dtf.com':80
- http://ww##.#ovedtf.com/0105.asp
- http://www.lo##dtf.com/
- DNS ASK ww##.#ovedtf.com
- DNS ASK www.lo##dtf.com
- ClassName: '' WindowName: 'ЦР№ъЅЁЙиТшРРНшТш¶Ь'
- ClassName: '' WindowName: '??????????????????'
- ClassName: '' WindowName: 'ICBC'
- ClassName: '' WindowName: 'ЗлєЛ¶ФЗ©ГыРЕПў'
- ClassName: '' WindowName: '??????????????'
- ClassName: '' WindowName: 'Microsoft Internet Explorer'
- ClassName: '' WindowName: 'Windows Internet Explorer'
- ClassName: '' WindowName: 'АґЧФНшТіµДПыПў'