Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'explorer.exe, %WINDIR%\system\csrss.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Network Service] 'Start' = '00000002'
- '%WINDIR%\system\csrss.exe'
- %WINDIR%\system\csrss.exe
- 'localhost':1036
- DNS ASK ge#####es.yahoo.com.br