Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Network Security App Service] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\AC97] 'Start' = '00000002'
- C:\fcdll.exe
- %CommonProgramFiles%\wmsecurity.dll
- <DRIVERS>\AC97.sys
- %CommonProgramFiles%\wmplay.exe
- %CommonProgramFiles%\networkservice.exe
- %CommonProgramFiles%\libkenel.dll
- %TEMP%\networkservice.exe
- C:\fcdll.exe
- %TEMP%\libkenel.dll
- %TEMP%\AC97.sys
- %TEMP%\internet.exe
- %TEMP%\networkservice.exe
- %TEMP%\internet.exe
- %TEMP%\AC97.sys
- %TEMP%\libkenel.dll
- 'www.wg##08.com':80
- 'localhost':1035
- www.wg##08.com/
- www.wg##08.com/fcwg.htm
- DNS ASK www.wg##08.com