Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows Host Process] 'Start' = '00000002'
- %WINDIR%\rundll32.exe
- C:\Documents and Settings\LocalService\Application Data\Microsoft\1
- %WINDIR%\rundll32.exe
- %WINDIR%\Temp\~DF305C.tmp
- %TEMP%\~DFA059.tmp
- 'sp###easy.net':80
- '3.#a.am':9835
- DNS ASK sp###easy.net
- DNS ASK 3.#a.am