Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'System32' = '<SYSTEM32>\clientserv.exe'
- '<SYSTEM32>\winrequire.exe'
- '<SYSTEM32>\winrequire.exe' (загружен из сети Интернет)
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\track[1].php
- <SYSTEM32>\clientserv.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\0380[1].exe
- <SYSTEM32>\winrequire.exe
- 'xx###ack.info':80
- 'af####counter.com':80
- 'localhost':1037
- xx###ack.info/track/track.php
- af####counter.com/0380.exe
- DNS ASK xx###ack.info
- DNS ASK af####counter.com