Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '%CommonProgramFiles%\svchost.exe' = ''
- from <Full path to virus> to %CommonProgramFiles%\svchost.exe
- 'zh####r2.3322.org':5310
- DNS ASK zh####r2.3322.org
The page may not load correctly.
Added to the Dr.Web virus database: 2011-09-21
Virus description added: 2011-09-21