Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\msSystem] 'Start' = '00000002'
- '%TEMP%\RarSFX0\setup.exe'
- <Служебный элемент>
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\getstatus[1].asp
- %WINDIR%\system\MSAPI.DRV
- %TEMP%\MSSYSTEM.DAT
- %TEMP%\RarSFX0\setup.exe
- %TEMP%\RarSFX0\setup2.conf
- %TEMP%\RarSFX0\setup.conf
- %TEMP%\RarSFX0\setup1.conf
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\getstatus[1].asp
- '20#.#6.232.182':80
- 20#.#6.232.182/status/getstatus.asp
- DNS ASK www.microsoft.com
- '21#.#9.153.126':8000
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'