Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Services] 'Start' = '00000002'
- '%PROGRAM_FILES%\Internet Explorer\iexplores.exe'
- '%PROGRAM_FILES%\Internet Explorer\iexplores.exe' /service
- %WINDIR%\Explorer.EXE
- %WINDIR%\Temp\184656.dll
- %PROGRAM_FILES%\Internet Explorer\iexplores.exe
- 'w3.##chifan.com':8769
- DNS ASK W3.##CHIFAN.COM
- ClassName: 'WorkerW' WindowName: ''
- ClassName: 'SysFader' WindowName: ''