Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'iAD_' = '<Полный путь к вирусу>'
- '<SYSTEM32>\regsvr32.exe' /s "%WINDIR%\IAD_BHO.dll"
- %WINDIR%\iADGameUrl.xml
- %WINDIR%\IAD_BHO.dll
- %WINDIR%\iAD.ini
- 'po#.#iajiaee.cn':80
- po#.#iajiaee.cn/iepop/list/GameUrl.xml
- DNS ASK po#.#iajiaee.cn