Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'GLSet32' = '%WINDIR%\srchasst\svchost.exe'
- '%WINDIR%\srchasst\svchost.exe' NULL
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\login[1].htm
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\login[2].htm
- <SYSTEM32>\config.xml
- %WINDIR%\srchasst\svchost.exe
- 'ke###.#nlinewebshop.net':80
- http://ke###.#nlinewebshop.net/login.php
- DNS ASK ke###.#nlinewebshop.net