Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\ImageManager] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k ImageManager
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\iconfig[1].txt
- C:\Documents and Settings\LocalService\Start Menu\Programs\Common Files\Plugins\iconfig.txt
- C:\kernel52.dll
- C:\advapi52.dll
- C:\wininet11.dll
- <SYSTEM32>\ImageManager32.xtl
- '<IP-адрес в локальной сети>':80
- <IP-адрес в локальной сети>/iconfig.txt