Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'AntSasser' = '<SYSTEM32>\AntSasser.exe'
- <SYSTEM32>\shutdown.exe -r -t 60 -c "This is a virus made by ]=-antr4xx-=[. For support on how to remove it contact me: www.an###xx.de.vu, ICQ:352-586-030, antr4xx@yahoo.de. You can also get costumized versions..."
- <SYSTEM32>\AntSasser.exe