Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{3958BE2C-207E-F27D-5B6B-6513949A6735}] 'stubpath' = ''
- '<SYSTEM32>\reg.exe' delete "HKEY_CURRENT_USER\Software\Microsoft\Active Setup\Installed Components\{3958BE2C-207E-F27D-5B6B-6513949A6735}" /f
- <SYSTEM32>\V3Medic.exe
- '17#.#39.190.38':80
- http://17#.#39.190.38/pro1.asp
- DNS ASK dn#.##ftncsi.com
- DNS ASK bl##.daum.net
- DNS ASK bl##.#ina.com.cn
- ClassName: 'Shell_TrayWnd' WindowName: ''