Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\wind0ws] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k netsvcs
- C:\Documents and Settings\Local Server\windmad.dll
- '11#.#30.136.165':8786
- DNS ASK www.36#.cn
- 'localhost':1041
- 'localhost':1040
- 'localhost':1039