Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Windows Media' = '<SYSTEM32>\WmInit.exe'
- '<SYSTEM32>\WmInit.exe' "<Полный путь к вирусу>"
- <SYSTEM32>\WmInit.exe
- <SYSTEM32>\WmInit.dat
- 'mt###7531.org':35102
- 'dr###53289.com':35101
- 'bl###3331.org':35104
- '17#.#1.106.215':35105
- '17#.#1.106.215':35106
- 'un####k8599.info':35105
- '17#.#1.106.215':35100
- 'to###17200.info':35100
- 'in###7150.net':35103
- '17#.#1.106.215':35101
- '17#.#1.106.215':35107
- '17#.#1.106.215':35109
- DNS ASK dr###53289.com
- DNS ASK mt###7531.org
- DNS ASK un####k8599.info
- DNS ASK in###7150.net
- DNS ASK to###17200.info
- DNS ASK bl###3331.org