Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Alerter COM+] 'Start' = '00000002'
- <SYSTEM32>\IME\svchost.exe
- C:\setup.exe
- C:\AutoRun.inf
- <SYSTEM32>\IME\svchost.exe
- C:\setup.exe
- C:\AutoRun.inf
- <SYSTEM32>\IME\svchost.exe
- 'l.###ghh1.com':9191
- DNS ASK L.###GHH1.COM