Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices] 'Win32 Servermgr' = '<SYSTEM32>\winimgr.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Win32 Servermgr' = '<SYSTEM32>\winimgr.exe'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\123[1].gif
- C:\newfolder\winnotice.gif
- <SYSTEM32>\winimgr.exe
- %WINDIR%\windebug256234331.log
- '83.##9.86.193':4445
- 'ho#####.ho.funpic.de':80
- ho#####.ho.funpic.de/123.gif
- DNS ASK ho#####.ho.funpic.de