Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\chrome.exe] 'Debugger' = '%ProgramFiles%\Internet Explorer\iexplore.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\userinit.exe] 'Debugger' = 'inhce.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\safari.exe] 'Debugger' = '%ProgramFiles%\Internet Explorer\iexplore.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\opera.exe] 'Debugger' = '%ProgramFiles%\Internet Explorer\iexplore.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\navigator.exe] 'Debugger' = '%ProgramFiles%\Internet Explorer\iexplore.exe'
- <SYSTEM32>\csrss.exe
- <SYSTEM32>\inhce.exe
- 'ds####383dmdjk.com':80
- http://ds####383dmdjk.com/rel/ra.php
- DNS ASK ds####383dmdjk.com