Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\fastuserswitchingcompatibility] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\fastuserswitchingcompatibility] 'ImagePath' = '<SYSTEM32>\svchost.exe -k netsvcs'
- [<HKLM>\SYSTEM\CurrentControlSet\Services\fastuserswitchingcompatibility\parameters] 'seRViCEDLl' = '%ProgramFiles%\APPLIC~1\Storm\update\lycaw.zip'
- %TEMP%\1108421.txt
- %TEMP%\1108421.txt в %ProgramFiles%\applic~1\storm\update\lycaw.zip
- 'wu####in.3322.org':9999
- DNS ASK wu####in.3322.org
- '%WINDIR%\syswow64\svchost.exe' -k netsvcs