Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\64to32] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k netsvcs
- <SYSTEM32>\Windowsxp.ini
- <SYSTEM32>\Windowsxp32.ini
- <SYSTEM32>\64to32.dll
- 'kt###.iuj78.com':80
- kt###.iuj78.com/main/main0712.txt
- kt###.iuj78.com/main/m0712.txt
- DNS ASK kt###.iuj78.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'