Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'svchost' = '%PROGRAM_FILES%\Microsoft Window Update\svchost.exe'
- '%PROGRAM_FILES%\Microsoft Window Update\svchost.exe'
- %PROGRAM_FILES%\Microsoft Window Update\svchost.exe
- %TEMP%\~DF4CB4.tmp
- '12#.#85.21.24':2013
- 'bl##.naver.com':80
- bl##.naver.com/r_u_m_i_a/50131203153
- DNS ASK bl##.naver.com
- ClassName: '' WindowName: '(null)'
- ClassName: 'TCPViewClass' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'