Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'IspStat32' = 'IspDrvr32.exe'
- Cредство проверки системных файлов (SFC)
- %WINDIR%\IspDrvr32.exe
- 'sm##.#tlworld.com':25
- DNS ASK sm##.#tlworld.com
- ClassName: '' WindowName: 'XtraAccess Server Running..'
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: 'Windows Task Manager'
- ClassName: '' WindowName: 'McAfee Firewall'
- ClassName: 'CMGuardianClass' WindowName: ''
- ClassName: '' WindowName: 'Jammer'