Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\AService] 'Start' = '00000002'
- Средство контроля пользовательских учетных записей (UAC)
- '<SYSTEM32>\Smrse.exe'
- '<SYSTEM32>\Smrsa.exe'
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\egolawdd+wl[1].pas
- <SYSTEM32>\Smrsa.exe
- <SYSTEM32>\Smrse.exe
- 'de###l`pyo.cnh':80
- 'localhost':1035
- de###l`pyo.cnh/egolawdd+wl.pas
- DNS ASK de###l`pyo.cnh