Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'smsm' = '<Текущая директория>\<Имя вируса>.e@e'
- <SYSTEM32>\EASENDMAILOBJ.DLL
- %WINDIR%\smss.exe
- %WINDIR%\Icon_3.ico
- %WINDIR%\smss.exe
- %WINDIR%\Icon_3.ico
- 'cl#.##rsiangig.com':80
- cl#.##rsiangig.comhttp://cld.persiangig.com/dl/d0Yuc/79iQoRUkIB/EASendMailObj.zip
- DNS ASK cl#.##rsiangig.com
- ClassName: '(null)' WindowName: 'SYSTEM CONFIGURATION UTILITY'
- ClassName: 'CabinetWClass' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'