Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Optimisation' = ''
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'Load' = ''
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'Run' = ''
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\version[1].ini
- <SYSTEM32>\wuauclt.ini
- <SYSTEM32>\wuauclt4.3.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\version[1].ini
- 'ir#.#3ct0n.net':6667
- 'www.m3##0n.net':80
- www.m3##0n.net/update/version.ini
- DNS ASK ir#.#3ct0n.net
- DNS ASK www.m3##0n.net
- ClassName: 'Indicator' WindowName: ''