Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Meessengger' = '%TEMP%\msi.EXE'
- %HOMEPATH%\Start Menu\Programs\Startup\msi.EXE
- %WINDIR%\bot.ini
- %PROGRAM_FILES%\autorun.inf
- %TEMP%\msi.EXE
- 'ho####l.hopto.org':6667
- DNS ASK ho####l.hopto.org
- ClassName: 'Indicator' WindowName: ''