Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\System1314] 'Start' = '00000002'
- '<SYSTEM32>\System520.exe'
- '%TEMP%\2a762.tmp'
- '%TEMP%\2a2ee.tmp'
- '%TEMP%\29b8a.tmp'
- '%TEMP%\29fff.tmp'
- <SYSTEM32>\System520.exe
- %TEMP%\2a762.tmp
- %TEMP%\2a2ee.tmp
- %TEMP%\29b8a.tmp
- %TEMP%\29fff.tmp
- %TEMP%\2a762.tmp
- %TEMP%\2a2ee.tmp
- 'www.xx##y.com':520
- DNS ASK www.xx##y.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'