Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Windows Firewall Update' = '%WINDIR%\rundll32.exe'
- %WINDIR%\win.ini в %WINDIR%\win_.ini
- 'ir#.#rasnet.org':6667
- '11#.#11.111.1':7770
- DNS ASK ir#.#rasnet.org
- DNS ASK IP ou http://si##.no-ip.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: 'Windows Update '