Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Outlook Express.EXE' = '<SYSTEM32>\Outlook Express.EXE'
- %HOMEPATH%\Start Menu\Programs\Startup\Outlook Express.EXE.lnk
- [<HKLM>\SYSTEM\ControlSet001\Services\Server] 'Start' = '00000002'
- <SYSTEM32>\Outlook Express.EXE
- <SYSTEM32>\wscript.exe "<Текущая директория>\tem.vbs"
- <SYSTEM32>\Outlook Express.EXE
- <Текущая директория>\tem.vbs
- C:\Boot.SYS
- <SYSTEM32>\Outlook Express.EXE
- <SYSTEM32>\Outlook Express.EXE
- 'sf###l.3322.org':62510
- DNS ASK sf###l.3322.org
- ClassName: 'Shell_TrayWnd' WindowName: ''