Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'NetWin' = '%WINDIR%\logonn.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Logos' = '<SYSTEM32>\logonn.exe'
- %WINDIR%\win.exe
- %WINDIR%\system\agentm.exe
- <SYSTEM32>\logonn.exe
- %WINDIR%\logonn.exe
- 'el###k.narod.ru':80
- el###k.narod.ru/158.html
- DNS ASK el###k.narod.ru
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'