Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\NWCWorkstation] 'Start' = '00000002'
- 'C:\Login-Ip4vp.exe'
- %TEMP%\yyy_NewKey
- <SYSTEM32>\NWCWorkstationex.dll
- C:\Login-Ip4vp.exe
- %TEMP%\169265_tpi.dtd
- %HOMEPATH%\Local Settings\Temp
- C:\Login-Ip4vp.exe
- %TEMP%\169265_tpi.dtd в %HOMEPATH%\Local Settings\Temp
- 'by####u.gicp.net':8222
- DNS ASK by####u.gicp.net
- ClassName: 'Shell_TrayWnd' WindowName: ''