Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\timeamc] 'Start' = '00000002'
- 'C:\ssstars.scr' /S
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %TEMP%\193390_res.tmp
- %WINDIR%\FuckYou.txt
- C:\ssstars.scr
- %WINDIR%\FuckYou.txt
- %TEMP%\193390_res.tmp в <SYSTEM32>\time.dll
- 'au###.3322.org':1721
- DNS ASK au###.3322.org
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'