Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'SystemDrive' = '%APPDATA%\LocalData\ishelp.exe'
- '%APPDATA%\LocalData\ishelp.exe'
- %APPDATA%\LocalData\75BD50EC.DAT
- %TEMP%\XXXX.dat
- %APPDATA%\LocalData\ishelp.exe
- %APPDATA%\LocalData\A08E81B4.DAT
- 'zh#.#966.org':8080
- DNS ASK zh#.#966.org
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: '' WindowName: '(null)'