Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '' = 'c:\config.exe'
- %WINDIR%\explorer.exe C:\
- C:\config.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\systemi[1].exe
- C:\config.exe
- %TEMP%\~DFC53D.tmp
- 'www.zl##.com':80
- 'localhost':1036
- www.zl##.com/systemi.exe
- DNS ASK www.zl##.com
- ClassName: '' WindowName: ''