Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SuperProServer] 'Start' = '00000002'
- '%WINDIR%\Terms.EXE.exe'
- %PROGRAM_FILES%\AppPatch\NetSyst64.dll
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\NetSyst64[1].jpg
- %WINDIR%\Terms.EXE.exe
- 'www.lt##66.com':80
- www.lt##66.com/ads/NetSyst64.jpg
- DNS ASK www.lt##66.com