Техническая информация
- '%APPDATA%\firewall\Update 2.3.exe'
- ICQ.exe
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Trillian]
- [<HKCU>\Software\Valve\Steam]
- [<HKCU>\Software\FTPWare\COREFTP\Sites]
- [<HKLM>\SOFTWARE\Miranda]
- %APPDATA%\firewall\Update 2.3.exe
- 'ki#####nd3r.cwsurf.de':80
- http://ki#####nd3r.cwsurf.de/script/creater.php
- DNS ASK ki#####nd3r.cwsurf.de