Техническая информация
- [<HKLM>\SOFTWARE\Classes\Ghost\shell\open\command] '' = '"%TEMP%\GHOSTE~1.EXE" "%1"'
- %TEMP%\nse2.tmp\System.dll
- %TEMP%\ghostexpserver.exe
- %TEMP%\nse2.tmp\System.dll
- DNS ASK www.pp##.net
- DNS ASK www.pp##.com
- ClassName: 'Shell_TrayWnd' WindowName: ''