Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ulivec' = '%WINDIR%\win_xp.exe'
- Средство контроля пользовательских учетных записей (UAC)
- %WINDIR%\win_xp.exe
- 'pi###huayo.com':80
- 'ma###leros.com':80
- 'ch###panked.com':80
- pi###huayo.com/cache/kaka.txt
- ma###leros.com/cache/kaka.txt
- ch###panked.com/cache/kaka.txt
- DNS ASK pi###huayo.com
- DNS ASK ma###leros.com
- DNS ASK ch###panked.com