Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\whjhfw] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -Kwhjhfw
- <SYSTEM32>\leldlx.dll
- <SYSTEM32>\0005bb9b.ini
- 'lh###.vicp.net':3030
- DNS ASK lh###.vicp.net
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'