Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ICQ Notification' = 'ICQn.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ICQ Startup Page' = 'C:\WINNT\SYSTEM32\cyrstr.exe'
- '<SYSTEM32>\ICQn.exe'
- 'C:\WINNT\SYSTEM32\cyrstr.exe'
- 'C:\WINNT\SYSTEM32\cqce.exe'
- <SYSTEM32>\ICQn.exe
- C:\WINNT\SYSTEM32\cyrstr.exe
- C:\WINNT\SYSTEM32\cqce.exe
- '66.##1.41.90':43256
- DNS ASK 90.##.##1.66.in-addr.arpa
- '20#.#4.194.13':10100
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'