Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'svchost.exe' = '"%TEMP%\svchost.exe"'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\vbc.exe
- %WINDIR%\Explorer.EXE
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\folder[1].phpx
- %TEMP%\dclogs.sys
- %TEMP%\svchost.exe
- %TEMP%\MSN FREEZER.EXE
- 'mo###e.msn.com':80
- 'localhost':1037
- 'ba#####noob.no-ip.org':43594
- mo###e.msn.com/hm/folder.phpx
- DNS ASK mo###e.msn.com
- DNS ASK ba#####noob.no-ip.org
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'shell_traywnd' WindowName: ''