Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\ThemeSwitch] 'Start' = '00000002'
- '<SYSTEM32>\net1.exe' start "ThemeSwitch"
- '<SYSTEM32>\net.exe' start "ThemeSwitch"
- '<SYSTEM32>\cmd.exe' /c net start "ThemeSwitch"
- <Текущая директория>\macros4.sys
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\redirects[1].glob
- '19#.#05.240.148':80
- 'localhost':1037
- http://19#.#05.240.148/redirect/redirects.glob