Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] 'IEXPLORE.EXE' = '%ProgramFiles%\Internet Exp1orer\IEXPLORE.EXE'
- %WINDIR%\$NtUninstallKB922582$\fltmkb.dll
- %ProgramFiles%\Internet Exp1orer\IEXPLORE.EXE
- %ProgramFiles%\Internet Exp1orer\IEXPLORE.EXE
- 'www.km##yc.com':80
- 'www.fl###gles.com':80
- http:///sj/hostlist80.htm via www.km##yc.com
- http:///sj/app.htm via www.km##yc.com
- http:///sj/bak.htm via www.fl###gles.com
- DNS ASK www.km##yc.com
- DNS ASK www.fl###gles.com