Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Microsoft Windows' = '%TEMP%\svshost.exe'
- skype.exe
- %TEMP%\TMP654.dll
- %TEMP%\5857740.14810966
- %HOMEPATH%\System32.ini
- %TEMP%\TMP456.dll
- %TEMP%\4144639.85669799
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- %TEMP%\svshost.exe
- %TEMP%\aut2.tmp
- %TEMP%\5857740.14810966
- %TEMP%\svshost.exe
- %TEMP%\aut1.tmp
- %TEMP%\4144639.85669799
- 'ir#.#hhcd.info':6667
- DNS ASK ir#.#hhcd.info