Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-EBAK-11cf-8B85-00BB005B4383}] 'stubpath' = ''
- '<SYSTEM32>\reg.exe' delete "HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{89820200-EBAK-11cf-8B85-00BB005B4383}" /f
- <SYSTEM32>\shell32.exe
- 'ad.###own.org.cn':80
- http://ad.###own.org.cn/count.asp
- DNS ASK ad.###own.org.cn