Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\chrome.exe] 'Debugger' = '%ProgramFiles%\Internet Explorer\iexplore.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\userinit.exe] 'Debugger' = 'lrddptuu.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\safari.exe] 'Debugger' = '%ProgramFiles%\Internet Explorer\iexplore.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\opera.exe] 'Debugger' = '%ProgramFiles%\Internet Explorer\iexplore.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\navigator.exe] 'Debugger' = '%ProgramFiles%\Internet Explorer\iexplore.exe'
- <SYSTEM32>\csrss.exe
- <SYSTEM32>\lrddptuu.exe
- 'ma##ion.cn':80
- http://ma##ion.cn/terr/reg.php
- DNS ASK ma##ion.cn