Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'startup' = '%TEMP%\svchost.exe'
- '%HOMEPATH%\Local Settings\TempHiddenLynxSetup.exe'
- '%HOMEPATH%\Local Settings\Tempupdate.exe'
- %TEMP%\svchost.exe
- %HOMEPATH%\Local Settings\TempHiddenLynxSetup.exe
- %HOMEPATH%\Local Settings\Tempupdate.exe
- %TEMP%\svchost.exe
- 'vh###lhy.edu.vn':80
- 'wp#d':80
- http://vh###lhy.edu.vn/javascript/lightbox/themes/evolution/images/igfxtray.exe
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK vh###lhy.edu.vn
- DNS ASK wp#d
- ClassName: 'Shell_TrayWnd' WindowName: ''