Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'svclss' = '%WINDIR%\svclss.exe'
- %WINDIR%\svclss.exe
- 'sp###ilse.de':80
- sp###ilse.de/images/main/smilies/new/log.php?p4#####################
- DNS ASK sp###ilse.de
- ClassName: 'Indicator' WindowName: '(null)'