Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Paint' = '%WINDIR%\system\paint.exe'
- <Текущая директория>\ip.dat
- %WINDIR%\system\paint.exe
- %WINDIR%\system\SauveJPG.lib
- %WINDIR%\system\SauveJPG.dll
- %WINDIR%\system\SauveJPG.exp
- 'ft#.##ltimania.com':21
- 'localhost':1035
- DNS ASK ft#.##ltimania.com
- ClassName: 'Shell_TrayWnd' WindowName: ''