Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Userinit' = '<SYSTEM32>\userinit.exe,%ALLUSERSPROFILE%\Application Data\Microsoft\svchost.exe'
- <Имя диска съемного носителя>:\autorun.inf
- %ALLUSERSPROFILE%\Application Data\Microsoft\autorun.inf
- %ALLUSERSPROFILE%\Application Data\Microsoft\<Имя вируса>.exe
- ClassName: '' WindowName: 'VKontakte | Welcome! - Google Chrome'
- ClassName: '' WindowName: '? ???????? | ?????? ???! - Mozilla Firefox'
- ClassName: '' WindowName: 'VKontakte | Welcome! - Microsoft Internet Explorer'
- ClassName: '' WindowName: 'VKontakte | Welcome! - Opera'
- ClassName: '' WindowName: '? ???????? | ?????? ???! - Opera'
- ClassName: '' WindowName: '? ???????? | ?????? ???! - Google Chrome'
- ClassName: '' WindowName: '? ???????? | ?????? ???! - Windows Internet Explorer'
- ClassName: '' WindowName: '? ???????? | ?????? ???! - Microsoft Internet Explorer'
- ClassName: '' WindowName: '? ???????? | ????? ?????????? - Windows Internet Explorer'
- ClassName: '' WindowName: '? ???????? | ????? ?????????? - Microsoft Internet Explorer'
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: '? ???????? | ????? ?????????? - Mozilla Firefox'
- ClassName: '' WindowName: 'VKontakte | Welcome! - Mozilla Firefox'
- ClassName: '' WindowName: 'VKontakte | Welcome! - Windows Internet Explorer'
- ClassName: '' WindowName: '? ???????? | ????? ?????????? - Opera'
- ClassName: '' WindowName: '? ???????? | ????? ?????????? - Google Chrome'