Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SharedAPPs' = '%WINDIR%\system\<Имя вируса>.exe'
- '%WINDIR%\regedit.exe' /s %WINDIR%\system\sharedapp.reg
- %WINDIR%\inf\asynceql.inf
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\newbase[1]
- %WINDIR%\system\<Имя вируса>.exe
- %WINDIR%\system\sharedapp.reg
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\newbase[1]
- %WINDIR%\system\sharedapp.reg
- 'pr###r10mab.biz':80
- 'sk####edom12.net':80
- 'ca####tasfran.com':80
- pr###r10mab.biz/newbase/
- sk####edom12.net/newbase/
- ca####tasfran.com/newbase/
- DNS ASK pr###r10mab.biz
- DNS ASK sk####edom12.net
- DNS ASK ca####tasfran.com
- ClassName: 'RegEdit_RegEdit' WindowName: ''
- ClassName: 'SIDEWINDERR' WindowName: ''