Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\55] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k netsvcs
- ClassName: 'PROCMON_WINDOW_CLASS' WindowName: ''
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\w0[1].jpg
- <SYSTEM32>\Server.dll
- 'ko.##11168.com':80
- ko.##11168.com/temp/w0.jpg
- DNS ASK ko.##11168.com
- ClassName: '18467-41' WindowName: ''
- ClassName: '4823-00000029' WindowName: ''
- ClassName: '' WindowName: 'Microsoft Spy++ - [???? 1]'
- ClassName: 'SoftSnoopMainDialog' WindowName: ''