Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows Internat] 'Start' = '00000002'
- '%PROGRAM_FILES%\ComPlus Applications\Internai.pif'
- '<SYSTEM32>\wscript.exe' "C:\3881.vbs"
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\PhAlives[1].dll
- %WINDIR%\system\Netsys52.dll
- %PROGRAM_FILES%\ComPlus Applications\Internai.pif
- C:\3881.vbs
- C:\3881.vbs
- 'ft#######.host166.web522.com':80
- ft#######.host166.web522.com/PhAlives.dll
- DNS ASK ft#######.host166.web522.com