Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SVKP] 'Start' = '00000002'
- %TEMP%\pycq.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ss[1].htm
- %TEMP%\HtmlView.fnr
- <SYSTEM32>\SVKP.sys
- %TEMP%\krnln.fnr
- 'www.25##.com':80
- 'localhost':1037
- www.25##.com/s/ss.htm
- DNS ASK www.25##.com
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'