Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'svchost' = '"%HOMEPATH%\WINDOWS\Plugin.exe" start'
- %HOMEPATH%\WINDOWS\Plugin.exe start
- %HOMEPATH%\WINDOWS\Plugin.exe
- %HOMEPATH%\WINDOWS\Plugin.exe
- 'ir#.#hell2k.com':6667
- DNS ASK ir#.#hell2k.com
- ClassName: 'MS_WINHELP' WindowName: ''