Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Dora Miss' = '<SYSTEM32>\htdschk.exe'
- <SYSTEM32>\htdschk.exe
- %TEMP%\~DF71B3.tmp
- 'ho###ngol.com':80
- 'www.nu##aq.net':80
- 'localhost':1036
- http://www.nu##aq.net/?fb
- http://www.nu##aq.net/redirect.php?ur##
- http://www.nu##aq.net/control.php
- http://ho###ngol.com/proyectonu/inicioie.php
- DNS ASK ho###ngol.com
- DNS ASK www.nu##aq.net
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''