Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '<Имя вируса>' = '"<Полный путь к вирусу>"'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\ld[1].php
- 'pd#.##ncommerce.com':80
- 'www.da##.net':80
- pd#.##ncommerce.com/kmoy.php?np###
- pd#.##ncommerce.com/bmoy.php
- pd#.##ncommerce.com/ld.php?of##############
- www.da##.net/
- pd#.##ncommerce.com/jmoy.php?np###
- DNS ASK pd#.##ncommerce.com
- DNS ASK www.da##.net
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''