Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\BITS] 'Start' = '00000002'
- '%WINDIR%\FacebookGamesArcadeSetup.exe'
- '%WINDIR%\aaaa.exe'
- %TEMP%\aut2.tmp
- %WINDIR%\FacebookGamesArcadeSetup.exe
- %TEMP%\aut1.tmp
- %WINDIR%\aaaa.exe
- %TEMP%\aut2.tmp
- %TEMP%\aut1.tmp
- 'www.fa###ook.com':443
- 'localhost':1040
- 'wp#d':80
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK www.fa###ook.com
- DNS ASK wp#d
- ClassName: 'Shell_TrayWnd' WindowName: ''