Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Microsoft .Net Framework COM+ Support] 'ImagePath' = '"%ProgramFiles%\Microsoft Explorer\svchost.exe"'
- [<HKLM>\SYSTEM\ControlSet001\Services\Microsoft .Net Framework COM+ Support] 'Start' = '00000002'
- '%ProgramFiles%\Microsoft Explorer\svchost.exe'
- C:\SystemTemp
- %ProgramFiles%\Microsoft Explorer\svchost.exe
- C:\SystemTemp
- 'zl###o.3322.org':8918
- DNS ASK zl###o.3322.org