Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{0FB1ED69-BCE8-A45C-0708-010403030702}] 'StubPath' = '<SYSTEM32>\svos.exe'
- '%TEMP%\gig.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\svos.exe
- %TEMP%\gig.exe
- %TEMP%\req.doc
- %TEMP%\gig.exe
- 'gi#.##dsystems.com':80
- DNS ASK gi#.##dsystems.com
- ClassName: 'WordPadClass' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'