Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{DD166FD8-C1A7-45BF-F1DE-D0A263CF050E}] 'stubpath' = ''
- '<SYSTEM32>\reg.exe' delete "HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{DD166FD8-C1A7-45BF-F1DE-D0A263CF050E}" /f
- <SYSTEM32>\V3Medic.exe
- '17#.#39.190.38':80
- http://17#.#39.190.38/pro1.asp
- DNS ASK dn#.##ftncsi.com
- DNS ASK bl##.daum.net
- DNS ASK bl##.#ina.com.cn
- ClassName: 'Shell_TrayWnd' WindowName: ''