Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'explorer.exe %WINDIR%\Media\Installed\lsass.exe'
- %WINDIR%\Media\Installed\lsass.exe
- %WINDIR%\Media\Installed\MSWINSCK.OCX
- %WINDIR%\Media\Installed\lsass.exe
- %WINDIR%\Media\Installed\MSWINSCK.OCX
- %WINDIR%\Media\Installed\lsass.exe
- 'fu#####.is-a-geek.org':806
- DNS ASK fu#####.is-a-geek.org