Техническая информация
- %ProgramFiles%\slam-news.lnk
- %TEMP%\RarSFX0\crack_32.exe
- %TEMP%\RarSFX0\x86\amtlib.dll
- 'sl###news.com':80
- 'localhost':1037
- http://sl###news.com/arab/509/
- DNS ASK sl###news.com
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'EDIT' WindowName: ''
- ClassName: '' WindowName: ''
- '%TEMP%\RarSFX0\crack_32.exe'
- '%ProgramFiles%\Internet Explorer\IEXPLORE.EXE' -nohome