Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\AService] 'Start' = '00000002'
- '<SYSTEM32>\Smrse.exe'
- '<SYSTEM32>\Smrsa.exe'
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\mebhae`rgcr.bjm+jodher)jevs-so[1]
- <SYSTEM32>\Smrsa.exe
- <SYSTEM32>\Smrse.exe
- 'me########r.bjm+jodher)jevs-so.saq':80
- 'localhost':1036
- me########r.bjm+jodher)jevs-so.saq/
- DNS ASK me########r.bjm+jodher)jevs-so.saq