Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Rspdates Apxplicatioanjrq] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k netsvcs
- %TEMP%\Xy204140nd.temp
- <SYSTEM32>\360Safe.dll
- %TEMP%\TEAM25.reg
- %TEMP%\MyInformations.ini
- %TEMP%\fengshao0.txt
- <SYSTEM32>\360Safe.dll
- %TEMP%\MyInformations.ini
- %TEMP%\TEAM25.reg
- %TEMP%\fengshao0.txt
- %TEMP%\Xy204140nd.temp в <SYSTEM32>\360Safe.dll
- 'ji####2012.3322.org':8000
- DNS ASK ji####2012.3322.org