Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\COMSysblan12jrq] 'ImagePath' = '<SYSTEM32>\svchost.exe -k netsvcs'
- [<HKLM>\SYSTEM\ControlSet001\Services\COMSysblan12jrq] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %WINDIR%\blan.reg
- %TEMP%\l154234n.tmp
- %WINDIR%\system\setup.ini
- %WINDIR%\system\blan.txt
- %WINDIR%\system\setup.ini
- %WINDIR%\blan.reg
- %WINDIR%\system\blan.txt
- %TEMP%\l154234n.tmp в %ProgramFiles%\Outlook Express\Wab1.dll
- %WINDIR%\system\blan.txt
- '<L###LNET>.7.4':2911