Техническая информация
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'load' = '<SYSTEM32>\Common.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Audio Control] 'Start' = '00000001'
- <SYSTEM32>\net1.exe stop sharedaccess
- <SYSTEM32>\net.exe stop sharedaccess
- <SYSTEM32>\ipconfig.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\20110318[1].jpg
- %TEMP%\fuc1.tmp
- <SYSTEM32>\Audio.sys
- <SYSTEM32>\Common.exe
- %TEMP%\fuc1.tmp
- '28##g.com':80
- 28##g.com/20110318.jpg
- DNS ASK 28##g.com
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''