Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'svclss' = '%WINDIR%\svclss.exe'
- %WINDIR%\svclss.exe
- 'www.il#####raflame.com.au':80
- http://www.il#####raflame.com.au/tinymce/jscripts/tiny_mce/Socks/log.php?p4#####################
- DNS ASK www.il#####raflame.com.au
- ClassName: 'Indicator' WindowName: ''