Техническая информация
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\svchost.exe
- %TEMP%\~DF964B.tmp
- 'www.em###meform.com':80
- 'localhost':1037
- http://www.em###meform.com/builder/form/2dluJ2i8q4x
- DNS ASK www.em###meform.com
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''