Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SYSTEM] 'Start' = '00000002'
- '%PROGRAM_FILES%\HgzServer\G_Server1.2.exe'
- %PROGRAM_FILES%\HgzServer\G_Server1.2.exe
- %PROGRAM_FILES%\HgzServer\G_Server1.2.exe
- 'www.yo###gang.com':80
- www.yo###gang.com/fendou/zj/images/qq/new/ip.jpg
- DNS ASK www.yo###gang.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'