Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Windows Defender' = '<DRIVERS>\winlogon.exe'
- Диспетчера задач (Taskmgr)
- Редактора реестра (RegEdit)
- Средство контроля пользовательских учетных записей (UAC)
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\index[1].php
- 'sy######ftware.hostzi.com':80
- 'co####dadjumper.com':80
- 'localhost':1037
- sy######ftware.hostzi.com/docs/configacces/htdacces
- co####dadjumper.com/Online/index.php?ma########################################
- DNS ASK www.th#####nitijumper.com
- DNS ASK we######ruccion.webuda.com
- DNS ASK sy######ftware.hostzi.com
- DNS ASK co####dadjumper.com
- DNS ASK wp#d
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''