Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{KEDT456S-FJKR-DG53-8427-45182378KUDG}] 'StubPath' = ''
- <SYSTEM32>\svchost.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\gletter[1].gif
- <DRIVERS>\smsent32.sys
- <SYSTEM32>\dnshelp.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\gletter[1].gif
- 'ta#.##idian.net.cn':443
- 'www.so###ver.net':80
- www.so###ver.net/ya/gletter.gif
- DNS ASK ta#.##idian.net.cn
- DNS ASK www.so###ver.net