Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\RCManagter] 'Start' = '00000002'
- 'C:\GKGMG0.EXE'
- 360tray.exe
- <SYSTEM32>\Fiele Ps.txt
- <SYSTEM32>\usrelnkas.exe
- C:\GKGMG0.EXE
- %PROGRAM_FILES%\NetMeeting\WS2HELP.dll
- <DRIVERS>\winsawids.sys
- <SYSTEM32>\usrelnkas.exe
- <SYSTEM32>\Fiele Ps.txt
- C:\GKGMG0.EXE
- %PROGRAM_FILES%\NetMeeting\WS2HELP.dll
- 'www.20##9.com':80
- www.20##9.com/ip.txt
- DNS ASK www.20##9.com
- ClassName: 'MS_WINHELP' WindowName: '(null)'