Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] 'System' = '"<SYSTEM32>\sys32.exe"'
- <SYSTEM32>\sys32.exe
- <SYSTEM32>\data.ini
- <SYSTEM32>\sys32.exe
- <SYSTEM32>\sys32.dll
- <SYSTEM32>\sys32.dll
- 'lo###.icq.com':5190
- DNS ASK lo###.icq.com
- ClassName: 'MS_WINHELP' WindowName: ''
- ClassName: '' WindowName: 'CTP_System'
- ClassName: '' WindowName: 'sys32'