Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'Explorer.exe, c:\start.bat'
- '%APPDATA%\EasyTime\EasyTime.exe'
- %WINDIR%\Explorer.EXE
- %APPDATA%\EasyTime\user.dat
- C:\start.bat
- %TEMP%\nsh2.tmp\System.dll
- %APPDATA%\EasyTime\EasyTime.exe
- %TEMP%\nsh2.tmp\System.dll
- 'ft#.##orbydoor.net':10021
- 'localhost':1038
- DNS ASK ft#.##orbydoor.net
- DNS ASK lo###.#oorbydoor.net
- 'lo###.#oorbydoor.net':4759
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'TBCLIENT_CLASS' WindowName: ''