Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\????Windows????] 'ImagePath' = '"%PROGRAM_FILES%\WinDNS.exe"'
- [<HKLM>\SYSTEM\ControlSet001\Services\????Windows????] 'Start' = '00000002'
- Компонент восстановления системы (SR)
- '%PROGRAM_FILES%\WinDNS.exe'
- '%PROGRAM_FILES%\WinDNS.exe' /i
- '<SYSTEM32>\sc.exe' failure ????Windows???? reset= 432000 actions= restart/1000/restart/1000/restart/1000
- '<SYSTEM32>\wscript.exe' "%PROGRAM_FILES%\Trwitter.vbs"
- %PROGRAM_FILES%\Trwitter.vbs
- %PROGRAM_FILES%\WinDNS.exe
- 'tr###ter.net':80
- tr###ter.net/win/ver3.php
- tr###ter.net/win/ver2.php
- DNS ASK tr###ter.net
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'