Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{Y21B03AB-B921-11D2-9CBD-0000F87A216E}] 'StubPath' = '%CommonProgramFiles%\Services\svchost.exe -Restart'
- %CommonProgramFiles%\Services\svchost.exe
- <SYSTEM32>\svchost.exe
- %TEMP%\~svchost.tmp~131265
- %TEMP%\~svchost.tmp
- %CommonProgramFiles%\Services\svchost.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\Config[1].asp
- %TEMP%\~svchost.tmp
- %CommonProgramFiles%\Services\svchost.exe
- %TEMP%\~svchost.tmp~131265
- 'ad.##tshell.cc':80
- ad.##tshell.cc/Config.asp
- DNS ASK ad.##tshell.cc
- '10.#.1.1':1035