Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '<Полный путь к вирусу>' = '<Полный путь к вирусу>:*:Enabled:Video Converter'
- [<HKLM>\SOFTWARE\Microsoft\MSNMessenger]
- %TEMP%\is799009782\2112242300.cfg
- %TEMP%\is799009782\1320979670.cfg
- %TEMP%\is799009782\662657193.cfg
- 'cv.##eckver.org':80
- 'us####.awsdata.com':80
- cv.##eckver.org/vscript/utils/IP2CC.psc
- us####.awsdata.com/Bund/Babylon/Babylon8_sq_14542.cis
- us####.awsdata.com/Prod/VideoConverter1.1.cis
- us####.awsdata.com/Bund/AInstaller.CIS
- cv.##eckver.org/vscript/vercheck.psc?pc#############
- DNS ASK cv.##eckver.org
- DNS ASK us####.awsdata.com
- ClassName: 'Shell_TrayWnd' WindowName: ''