Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ATIDriver' = '%WINDIR%\exploerrre.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'DoNotAllowExceptions' = '00000000'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'EnableFirewall' = '00000000'
- '<SYSTEM32>\reg.exe' add HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /t reg_sz /d %WINDIR%\exploerrre.exe /v ATIDriver
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\742276.servehttp[1]
- %WINDIR%\exploerrre.exe
- '74####.servehttp.com':80
- 'localhost':1036
- 74####.servehttp.com/
- DNS ASK 74####.servehttp.com
- ClassName: '' WindowName: '???? nod32?????(??V.2.0.0)'
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: 'Internet Explorer ?????'
- ClassName: '' WindowName: 'Internet Explorer Script Error'