Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{AENGFU3AA-B288-11d2-9CBD-0000F87A369E}] 'stubpath' = ''
- '%PROGRAM_FILES%\LaomeNsi\tcers.exe'
- %TEMP%\29730360.gif
- %PROGRAM_FILES%\LaomeNsi\tcers.exe
- C:\288.txt
- C:\288.txt
- 'co###.154367508.cn':80
- http://co###.154367508.cn/ccc/baidu.gif
- DNS ASK co###.154367508.cn
- ClassName: '' WindowName: ''