Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\20A4720A47] 'ImagePath' = '%TEMP%\20A4720A47.tmp'
- <Текущая директория>\Q-Memory16.sys
- %TEMP%\20A4720A47.tmp
- %TEMP%\20A4720A47.tmp
- 'it##18.com':80
- 'www.ia##i.com':80
- 'localhost':1036
- http://it##18.com/yzm.asp
- http://www.ia##i.com/dnf/index.html
- http://www.ia##i.com/dnf/ver.txt
- DNS ASK it##18.com
- DNS ASK www.ia##i.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''