Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'PromoReg' = '<Полный путь к вирусу>'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\oyrnhlwdd[1].htm
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\nkbeq[1].htm
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\92.255.134[1].htm
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\evrmhacjde[1].htm
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\oyrnhlwdd[1].htm
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\nkbeq[1].htm
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\92.255.134[1].htm
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\evrmhacjde[1].htm
- '92.#25.70.0':80
- '77.##2.6.214':80
- '77.##.195.140':80
- '19#.#31.119.52':80
- '92.##5.134.146':80
- 92.#25.70.0/nkbeq.htm
- 77.##2.6.214/cmjc.png
- 77.##.195.140/oyrnhlwdd.htm
- 92.##5.134.146/
- 19#.#31.119.52/evrmhacjde.png