Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\AppMgmt] 'Start' = '00000002'
- '%TEMP%\GreenChristmasTree.exe'
- '%TEMP%\winsecu.exe'
- %WINDIR%\update.dll
- %TEMP%\GreenChristmasTree.exe
- %TEMP%\winsecu.exe
- 'em###.wlgdf.com':80
- DNS ASK em###.wlgdf.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'