Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Tiny Spy (Only Test-Bot)' = '"<LS_APPDATA>\tinyspy.exe"'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Tiny Spy (Only Test-Bot)' = '"<LS_APPDATA>\tinyspy.exe"'
- <LS_APPDATA>\tinyspy.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\list[1].htm
- <LS_APPDATA>\tinyspy.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\list[1].htm
- '21#.#17.180.64':80
- 21#.#17.180.64/tinyspy/list.php?re#
- 21#.#17.180.64/tinyspy/list.php?se########
- 21#.#17.180.64/tinyspy/list.php?ge########
- ClassName: 'Indicator' WindowName: ''