Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows Host Process] 'Start' = '00000002'
- %WINDIR%\rundll32.exe
- C:\Documents and Settings\LocalService\Application Data\Microsoft\1
- %WINDIR%\rundll32.exe
- %WINDIR%\Temp\~DF1010.tmp
- %TEMP%\~DFA58D.tmp
- 'sp###easy.net':80
- '3.#a.am':9835
- DNS ASK sp###easy.net
- DNS ASK 3.#a.am
- '<IP-адрес в локальной сети>':1035