Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\svlostServices] 'Start' = '00000002'
- <SYSTEM32>\svlost.exe
- <SYSTEM32>\tasman.exe
- <SYSTEM32>\svlostSrv.exe /install /silent
- <SYSTEM32>\svlostSrv.exe
- <SYSTEM32>\net1.exe start "winlog"
- YahooMessenger.exe
- msnmsgr.exe
- iexplore.exe
- <SYSTEM32>\svlostb.dll
- <SYSTEM32>\svlosta.dll
- <SYSTEM32>\svlost.exe
- <SYSTEM32>\svlostSrv.exe
- <SYSTEM32>\tasman.exe
- %PROGRAM_FILES%\ListPornWeb\pornwebsitelist.htm
- %PROGRAM_FILES%\ListPornWeb\ListPornWeb.exe
- %PROGRAM_FILES%\ListPornWeb\lpw.ico
- <SYSTEM32>\ssleay32.dll
- %HOMEPATH%\Desktop\ListPornWeb.lnk
- 'ad#.#onybon.com':6772
- DNS ASK ad#.#onybon.com
- ClassName: 'MS_WINHELP' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''