Техническая информация
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'explorer.exe,"<LS_APPDATA>\IRC\ping.exe"'
- %HOMEPATH%\Start Menu\Programs\Startup\ping.exe
- <LS_APPDATA>\IRC\ping.exe
- '18#.#3.38.35':6667
- 'te##ze.com':80
- 'wp#d':80
- http://www.te##ze.com/geoip?ca############### via te##ze.com
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK www.te##ze.com
- DNS ASK wp#d
- '<LS_APPDATA>\IRC\ping.exe'