Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Config Update Windows] 'Start' = '00000002'
- C:\sound.mp3
- <SYSTEM32>\WindowsUpdater.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\jigsaw%20risa[1].mp3
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\wall[1].bmp
- %APPDATA%\wallpaper windows.bmp
- <SYSTEM32>\WindowsUpdater.exe
- 'www.fi##den.com':80
- 'localhost':1036
- www.fi##den.com/files/2009/10/15/2604226//jigsaw%20risa.mp3
- www.fi##den.com/files/2009/10/15/2604226//wall.bmp
- DNS ASK www.fi##den.com