Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Services' = '%WINDIR%1\services.exe'
- %WINDIR%1\services.exe
- %WINDIR%1\Generictest.dll
- %WINDIR%1\Memory.dll
- %WINDIR%1\services.exe
- %WINDIR%1\checkversion.dll
- %TEMP%\~DF2F46.tmp
- 'mi########are.scienceontheweb.net':80
- mi########are.scienceontheweb.net/check_softupdate_gen.php?id##############################
- DNS ASK mi########are.scienceontheweb.net