Техническая информация
- <Текущая директория>\gorun.exe
- <Текущая директория>\gorun.exe (загружен из сети Интернет)
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1200' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1201' = '00000003'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1405' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1004' = '00000003'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1400' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1402' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1001' = '00000003'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\now[1].asp
- <Текущая директория>\gorun.exe
- <Текущая директория>\yihahago.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\now[1].asp
- 'ip.##haha.org':80
- ip.##haha.org/now.asp
- ip.##haha.org/update.asp?_0#############################
- ip.##haha.org/soft/gorun.exe
- DNS ASK ip.##haha.org
- '<IP-адрес в локальной сети>':1035
- ClassName: '' WindowName: '????????'
- ClassName: 'Shell_TrayWnd' WindowName: ''