Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'Explorer.exe %WINDIR%\smrs.exe'
- %WINDIR%\smrs.exe
- 'de####et.sytes.net':4010
- DNS ASK de####et.sytes.net
- ClassName: 'imclass' WindowName: ''
- ClassName: 'ysearchmenuwndclass' WindowName: ''
- ClassName: 'yiminputwindow' WindowName: ''
- ClassName: 'richedit20a' WindowName: ''
- ClassName: 'button' WindowName: ''
- ClassName: 'edit' WindowName: ''
- ClassName: 'wndate32class' WindowName: ''
- ClassName: 'aim_imessage' WindowName: ''
- ClassName: 'ate32class' WindowName: ''
- ClassName: '_oscar_buddylistwin' WindowName: ''
- ClassName: '_oscar_iconbtn' WindowName: ''