Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'WinLogon' = '%WINDIR%\logon.exe'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\check[1].asp
- %WINDIR%\logon.exe
- 'fr###mnet.com':80
- 'localhost':1035
- fr###mnet.com/check.asp?ti###########################
- DNS ASK fr###mnet.com
- ClassName: 'Shell_TrayWnd' WindowName: ''