Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'Messenger Service' = 'service.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Messenger Service' = 'service.exe'
- Диспетчера задач (Taskmgr)
- Редактора реестра (RegEdit)
- %WINDIR%\service.exe
- ClassName: 'AVP.Tray' WindowName: ''
- ClassName: 'MSNHiddenWindowClass' WindowName: ''
- %WINDIR%\service.exe
- %WINDIR%\service.exe
- 'se#####s.msnservers.net':1863
- DNS ASK se#####s.msnservers.net