Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows Firewall Service] 'ImagePath' = '"%WINDIR%\svchost.exe"'
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows Firewall Service] 'Start' = '00000002'
- '%WINDIR%\svchost.exe'
- %WINDIR%\svchost.exe
- %WINDIR%\svchost.exe
- 'ir#.#fnet.net':6667
- '20#.#6.232.182':80
- http://windowsupdate.microsoft.com/ via 20#.#6.232.182
- DNS ASK ir#.#fnet.net
- DNS ASK windowsupdate.microsoft.com
- ClassName: 'mIRC' WindowName: ''