Техническая информация
- [<HKLM>\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command] '' = '"%PROGRAM_FILES%\Internet Explorer\iexplore.exe" http://www.you300.com/?y_0'
- <SYSTEM32>\ntvdm.exe -f -i1
- %WINDIR%\Temp\scs1.tmp
- %WINDIR%\Temp\scs2.tmp
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Жф¶Ї Internet Explorer дЇААЖч.lnk
- <Текущая директория>\b662ef4.exe
- <Текущая директория>\b662ef4.exe
- <Текущая директория>\b662ef4.exe
- %WINDIR%\Temp\scs2.tmp
- %WINDIR%\Temp\scs1.tmp
- ClassName: 'ConsoleWindowClass' WindowName: 'ntvdm-adc.ae0.390001'